EU & NATO Agree To Confront The Chinese Cyber Threat

An alliance of NATO members, the European Union, Australia, New Zealand and Japan will confront the threat posed by Chinese state-sponsored cyber attacks. The group will share intelligence on cyber threats and collaborate on network defenses and security, according to a senior Biden administration official.

In its first joint action, the alliance will publicly blame China’s Ministry of State Security (MSS) for a cyber attack on Microsoft Exchange earlier this year, which is believed to have hit at least 30,000 American organisations and hundreds of thousands more worldwide.

The attack was carried out by criminal contract hackers working for the MSS who also engage in cyber-enabled extortion, crypto jacking and ransomware, the official said. Also, the Federal Bureau of Investigation, National Security Agency and the Cybersecurity and Infrastructure Security Agency (CISA) released a new advisory listing 50 tactics, techniques and procedures that Chinese state-sponsored hackers employ.

A Chinese espionage network dubbed Hafnium was named by Microsoft as the attack group. The delay in naming China was partly to give investigators time to assemble the evidence to prove that the Hafnium hackers were on the Chinese state payroll, the official said. It was also important for the United States to act in concert with its allies when it made the public attribution, said the official.

At a time when cyber warfare is becoming the front line in a global power struggle between democracies and autocratic states, the new cybersecurity alliance could become a model for future efforts to confront transnational threats.

The formation of the alliance is intended to build on President Biden’s effort earlier this summer to rally support among NATO and EU allies for a more confrontational approach to China and comes after a number of economic and diplomatic sanctions that the Biden administration has imposed on Beijing this year, in response to alleged human rights abuses in Hong Kong and in Xinjiang province.   Recently, the US sanctioned seven Chinese officials in response to the ongoing crackdown on Hong Kong’s democratic institutions.

The newly launched cybersecurity alliance is focused on cooperative security and threat alerts and not on retaliation.

The White House has raised the Microsoft attacks with senior members of the Chinese government “making clear that the People’s Republic of China's (PRC) actions threaten security, confidence, and stability in cyberspace... We’re not ruling out further actions to hold [China] accountable,” said the senior official, “but we’re also aware that no one action can change the PRC’s behaviour, and neither can one country acting on its own. So, we really focused initially in bringing other countries along with us.”

China Is To Strengthen Cyber Security Regulation

China's Ministry of Industry and Information Technology has published a draft three-year action plan to develop the country's cyber security industry, the market value of all the firms in the sector will be 250 billion yuan ($38.6 billion) by 2023.

  • “Residents in east China’s Shanghai are witnessing and benefiting from the application of a good number of AI and other digital technologies catering for economic and social development, people’s livelihood and other fields”, says the Chinese People’s Daily Online.
  • China’s Guangdong province said it plans to build a common data platform in the Greater Bay area, including Hong Kong and Macau, and a data trading market in Shenzhen. Guangdong will consider establishing a data ‘customs hub’ to review and supervise cross-border data, according to a People’s Government of Guangdong Province statement.  

The Chinese government will “promote the distribution and sharing of data between Guangdong, Hong Kong and Macau, and the use of data to benefit industrial development, social governance and services to people”.
 

CNBC:        PinsentMasons:     Xinhuanet:     Chinese Foreign Ministry:      People's Daily:   Gov.Guangdong:

Cyberspace Affairs Commission:      CNBC

You Might Also Read:  

China’s National Cyber Security Powerhouse Strategy:

 

 

« Looking For Love May Have Unexpected Consequences
Britain & The USA Have Been Spying On Their Friends »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

DataVisor

DataVisor

DataVisor is a big data fraud detection and anti-money laundering solution.

Bugcrowd

Bugcrowd

As leaders in crowdsourced security testing, Bugcrowd connects companies and their applications to a crowd of tens of thousands of security researchers to identify critical software vulnerabilities.

DataSunrise

DataSunrise

DataSunrise Data-Centric high-performance security software protects the sensitive data in real-time in cloud or on premises, and helps organizations to stay compliant.

QOMPLX

QOMPLX

QOMPLX integrate, contextualize, and analyze data from virtually any source to help you identify operational risk and inefficiencies throughout the enterprise.

Sectigo

Sectigo

Sectigo is a leading cybersecurity provider of digital identity solutions, including TLS / SSL certificates, DevOps, IoT, and enterprise-grade PKI management, as well as multi-layered web security.

Swiss Cyber Think Tank (SCTT)

Swiss Cyber Think Tank (SCTT)

The Swiss Cyber Think Tank is a business network for Cyber Risk & Insurability, providing an industry-wide networking platform for insurers, technology and security firms.

SPARTA Consortium

SPARTA Consortium

SPARTA tackles hard innovation challenges, leading the way in building transformative capabilities and forming a world-leading cybersecurity competence network across the EU.

CYBER.ORG

CYBER.ORG

CYBER.ORG's goal is to empower educators as they prepare the next generation to succeed in the cyber workforce of tomorrow.

BrandShelter

BrandShelter

BrandShelter specializes in providing online brand protection for companies and trademark owners.

Onevinn

Onevinn

Onevinn's goal is to create a transparent, cost-effective security that is noticed as little as possible by the users. We simply call it "intelligent security."

Athreon

Athreon

Athreon utilizes a fusion of AI technology, human interpretation, and the latest in cybersecurity to deliver sound business solutions that help our clients make better data-driven decisions.

UK Cyber Security Council (UKCSC)

UK Cyber Security Council (UKCSC)

The role of The UK Cyber Security Council is to champion the cybersecurity profession across the UK, provide representation for the industry, accelerate awareness and promote excellence.

Cardonet

Cardonet

Cardonet is an IT Support and IT Services business offering end-to-end IT services, 24x7 IT Support to IT Consultancy, Managed IT and Cyber Security.

Sentra

Sentra

Sentra is focused on improving data security practices within the cloud, mitigating the risks of damaging data leaks by providing comprehensive visibility into critical data assets.

Xceptional

Xceptional

Xceptional is a multi-award-winning technology services firm that celebrates the unique strengths of people with autism.

Supra ITS

Supra ITS

Supra ITS is a leading full-service technology partner offering IT Consulting, Cloud Services, 24x7 Managed IT & Cybersecurity Services, and IT Project Support.