Chinas First Cyber Pearl Harbor

The United States closed its own skies on Friday afternoon. At roughly 4:30 p.m. Eastern on 13 November 2026, the Federal Aviation Administration issued an alert to every aircraft operator in the country — "due to extraordinary circumstances and for reasons of safety… all airports are ground stopped" — halting all departing flights nationwide for only the second time since 11 September 2001.^[1][2] Nearly 5,000 flights were canceled within the first hours, aircraft already airborne continued to their destinations, and the order ran through at least 11 p.m. Eastern with no restart timeline offered at the 6 p.m. briefing.^[3][4]

What officials are saying — and what they are not saying

The government's public line came from Homeland Security Secretary Markwayne Mullin, who told reporters there was "no indication yet" that the outage "was a nefarious attack" and called it "just a telecommunications outage" — while simultaneously refusing to rule a cyberattack out. "As we investigate what caused this, we always have to assume — as many cyberattacks take place — we make that assumption, but that's not known," Mullin said.^[2][1][5]

Transportation Secretary Sean P. Duffy, who briefed President Trump, described the failure as a communication issue affecting the 22 regional Air Route Traffic Control Centers that direct aircraft en route between airports. Mullin added that investigators would examine any link to the FAA's new AI-backed routing system — the Strategic Management of Airspace Routing Trajectories, or SMART, which began a broader rollout in September — while noting the system operates from a single site near Washington and only sends recommendations to the centers.^[4][2]

The FAA's own statement was deliberately preliminary: communication issues impacting multiple centers, technicians investigating, updates to follow.^[6]

The week this landed in

The outage did not arrive in a vacuum. It struck roughly 72 hours after the biggest corporate espionage scandal in American history broke open.

On 10 November, reporting by The Information and others alleged that Jensen Huang — chief executive of NVIDIA, then the most valuable company in the world — had conducted a years-long affair with Alice Huang, a Chinese businesswoman whom U.S. intelligence reportedly assessed as a spy for Beijing, and that she had helped facilitate at least $7.5 billion in NVIDIA chip shipments to Chinese firms over the relationship. NVIDIA shed roughly $430 billion in market value in two sessions; a senior Republican senator publicly called for Huang's resignation; the board retained former acting U.S. Attorney Joon Kim of Wachtell to run an internal investigation.^[7]

On 12 November, reporting by CNBC — citing documents from the private intelligence firm Tesari — added that Alice Huang held stakes in companies that benefited Huawei, NVIDIA's principal Chinese competitor, around the same period she and Huang were first publicly seen together in December 2023.^[8] Huang acknowledged the affair over the prior weekend, resigned as CEO on 12 November, and agreed to testify before Congress before Thanksgiving.^[9] China's Foreign Ministry dismissed the spy allegation as "smears against China" and accused Washington of fabricating narratives to justify technology restrictions.^[9]

The scandal landed five days before President Trump and President Xi Jinping are expected to meet again at the APEC Economic Leaders' Meeting in Shenzhen on 18–19 November. As Gavekal's Arthur Kroeber put it, "the Nvidia scandal has destroyed the credibility of the biggest corporate lobbyist against U.S. export controls on China."^[9]

What the government already told us China can do

The reason the timing unnerves analysts is that Beijing's playbook for exactly this kind of event is not speculation — it is declassified U.S. government assessment.

In February 2024, CISA, the NSA, the FBI and allied agencies published a joint advisory on Volt Typhoon, a PRC state-sponsored group confirmed inside "multiple critical infrastructure organizations — primarily in Communications, Energy, Transportation Systems, and Water and Wastewater Systems Sectors." The agencies assessed that the group was not spying in the traditional sense but pre-positioning — burrowing into IT networks to enable "disruptive or destructive cyberattacks against U.S. critical infrastructure in the event of a major crisis or conflict."^[10] U.S. officials said the campaign had been in place for roughly five years and had reached aviation, rail, mass transit, highway and maritime networks.^[11]

Volt Typhoon's signature technique — "living off the land," abusing legitimate credentials, built-in tools and small-office routers rather than deploying malware — is specifically engineered so that an intrusion looks like routine operations, or like a failure. A communications outage across multiple ARTCCs, with no malware signature and no claim of responsibility, is the precise shape their access is designed to produce.^[12][10]

The prediction

This is the analysis section — inference, not established fact.

The facts assembled above permit — they do not prove — a specific thesis: that Friday's outage was a Chinese demonstration strike, timed to land between the exposure of the Alice Huang operation and next week's Trump–Xi meeting at APEC. On that reading, the message is pointed: the week Washington learned how deeply Beijing had penetrated the crown jewel of American silicon, America's entire air transport system went dark for an afternoon — with no malware found, no debris field, no one to indict, and no escalation that could be answered. A capability demonstration that denies itself.

If investigators subsequently identify living-off-the-land artifacts, PRC tooling, or Volt Typhoon–consistent access paths in the FAA's telecommunications layer — or if a joint CISA advisory names a state actor — then 13 November 2026 becomes the date the pre-positioning era ended and the use-it era began: the first time a foreign power quietly held American civil aviation hostage, and the date U.S.–China competition crossed from espionage into open infrastructure coercion. That is the sense in which this article asks whether we have just seen a cyber Pearl Harbor — not in casualties, of which there were none, but as a strategic shock that retrospectively redefines what everyone thought the baseline was.

The weaker version of the prediction — argued fully in the companion article, Why The Skies Went Dark — is equally testable: the outage is what the FAA says it is — a telecommunications failure on aging infrastructure, possibly tangled with the SMART system rollout — and its proximity to the Huang scandal is coincidence. Coincidences of this magnitude do happen; the United States grounds its fleet on a software fault about once a decade on the ordinary failure curve.

What would settle it

Attribution here is falsifiable, and the resolution should arrive in weeks, not years. Watch for: a joint advisory naming an actor (CISA's pattern with Volt Typhoon was exactly this); forensic reporting of LOTL-style access or tampering in FAA-adjacent telecom hardware; any congressional testimony from DHS or FAA officials walking back "no indication"; and — the tell against the innocent explanation — whether the FAA can produce a mundane root cause, a failed component, and a remediation that engineers find coherent. "We never found the fault" is itself a finding.

See also

• Why The Skies Went Dark — the companion article making the mundane-cause case
• ALB Wiki Launches News
• Wiki Help