BEIJING \u2014 Tech experts in China who find a weakness in computer security would be required to tell the government and couldn\u2019t sell that knowledge under rules further tightening the Communist Party\u2019s control over information. <\/p>\n\n\n\n
The rules would ban private sector experts who find \u201czero day,\u201d or previously unknown security weaknesses, and sell the information to police, spy agencies or companies. Such vulnerabilities have been a feature of major hacking attacks including one this month blamed on a Russian-linked group that infected thousands of companies in at least 17 countries.<\/p>\n\n\n\n
Beijing is increasingly sensitive about control over information about its people and economy. Companies are barred from storing data about Chinese customers outside China. Companies including ride-hailing service Didi Global Inc., which recently made its U.S. stock market debut, have been publicly warned to tighten data security.<\/p>\n\n\n\n
Under the new rules, anyone in China who finds a vulnerability must tell the government, which will decide what repairs to make. No information can be given to \u201coverseas organizations or individuals\u201d other than the product\u2019s manufacturer.<\/p>\n\n\n\n
No one may \u201ccollect, sell or publish information on network product security vulnerabilities,\u201d say the rules issued by the Cyberspace Administration of China and the police and industry ministries. They take effect Sept. 1.<\/p>\n\n\n\n
The ruling party\u2019s military wing, the People\u2019s Liberation Army, is a leader along with the United States and Russia in cyber warfare technology. PLA officers have been charged by U.S. prosecutors with hacking American companies to steal technology and trade secrets.<\/p>\n\n\n\n
Consultants that find \u201czero day\u201d weaknesses say their work is legitimate because they serve police or intelligence agencies. Some have been accused of aiding governments accused of human rights abuses or groups that spy on activists.<\/p>\n\n\n\n
There is no indication such private sector researchers work in China, but the decision to ban the field suggests Beijing sees it as a potential threat.<\/p>\n\n\n\n
China has steadily tightened control over information and computer security over the past two decades.<\/p>\n\n\n\n
Banks and other entities that are deemed sensitive are required to use only Chinese-made security products wherever possible. Foreign vendors that sell routers and some other network products in China are required to disclose to regulators how any encryption features work. <\/p>\n","protected":false},"excerpt":{"rendered":"
The ruling party\u2019s military wing is a global cyber warfare leader, and Beijing is increasingly sensitive about control over information about its people and economy.<\/p>\n","protected":false},"author":7,"featured_media":39953,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":45,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[45,160,11,36],"tags":[],"coauthors":[1261],"class_list":["post-19643","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asia-pacific","category-daily-news-roundup","category-global","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"Y2BVSMBFUJE7FMMEDQ3AYVZG7Q","arc_canonical_url":"\/cyber\/2021\/07\/13\/china-tightens-control-over-cybersecurity-in-data-crackdown\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n