cybersecurity

Why BIS End-Use Checks in China Are Useless

Posted on by China Tech Threat
By Steve Coonen Quoting an old Russian proverb, President Ronald Reagan once remarked, “Trust, but verify.” Reagan’s words may have been appropriate as the U.S. negotiated an arms control agreement with the USSR. But when it comes to inspecting how China is using American technologies, the U.S. government should adapt his words to go a step further: “Distrust and verify.” At their root, the Bureau of Industry and Security’s (BIS) end-use checks in China are practically useless. Under the terms of the U.S.-China end-use check agreement, it is impossible for U.S. export control officers (ECOs) to verify the ultimate destinations or end-uses of U.S. technology. With other countries, U.S. export control officers can conduct post-shipment verifications (PSV) with few restrictions… Read More

Wyoming Cyber Infrastructure And Data Made Vulnerable by China Tech Purchases

Posted on by China Tech Threat
Recently, Microsoft warned that Chinese state-sponsored hackers infiltrated government and communications organizations’ critical cyber infrastructure. Hackers are not the only cyber security threat, however. China Tech Threat’s (CTT) research shows in the last five years Wyoming spent nearly a quarter of a million dollars on restricted Chinese technology, making its data and digital infrastructure vulnerable to Chinese surveillance and theft.  As outlined in our fact sheet, between 2018 and 2023, the state of Wyoming spent $247,723 on restricted Chinese technology from Lenovo, a manufacturer already restricted by U.S. military and intelligence agencies due to its connection to the Chinese government and military. Yet, this technology is being utilized in the State Treasurer’s Office and Legislative Service Office creating vulnerabilities in… Read More

New Mexico’s Legislators Should Follow Other States Prohibiting Purchases of Dangerous China Tech

Posted on by China Tech Threat
In May, Microsoft warned that critical cyber infrastructure in government and communications organizations had been compromised by Chinese state-sponsored hackers. Not all cybersecurity threats come from hackers, though. China Tech Threat’s (CTT) research shows New Mexico spent over a million dollars on restricted Chinese technology in recent years, putting its data and digital infrastructure at risk of infiltration by the People’s Republic of China.  CTT’s recent research shows that between 2018 and 2022, New Mexico spent $1,043,136 on restricted Chinese technology from Lenovo. Agencies tasked with safeguarding sensitive information that have purchased these products include the Administrative Hearings Office, Administrative Office of the Courts, as well as several District Attorneys’ offices.  The sensitive and confidential judicial and administrative information they… Read More

Chinese Technology Puts Maryland’s Data At Risk Of Chinese Surveillance And Collection

Posted on by China Tech Threat
Late last year, former Maryland Gov. Larry Hogan issued a directive prohibiting the executive branch from using and downloading certain Chinese and Russian-influenced products and platforms due to cybersecurity risks they pose. Also presenting a cybersecurity risk is the more than $60,000 worth of risky Chinese technology purchased by the state in recent years.  China Tech Threat’s (CTT) research reveals that between 2019 and 2020, the state of Maryland spent $61,402 on dangerous technology manufactured by Lexmark, as detailed in our fact sheet. All purchases were by the Department of Health, putting Marylanders’ personal and confidential health data at risk of Chinese surveillance.  Lexmark, along with others, is already restricted by U.S. military and intelligence agencies due to its connections… Read More

Bill A5384 Will Protect New Jersey From Theft From China Tech

Posted on by China Tech Threat
In January, New Jersey Governor Phil Murphy announced a cybersecurity directive to prohibit the use of technology vendors and software products and services that present an unacceptable level of cybersecurity risk to the state. Currently, Lexmark and Lenovo are not prohibited by this directive, but the $1,121,777 New Jersey has spent on dangerous technology from these Chinese-owned manufacturers serves as reason to also prohibit them under the directive.  China Tech Threat discovered in recent research that between 2018 and 2023, New Jersey has spent $1,121,777 on Lexmark and Lenovo technologies already restricted by U.S. military and intelligence agencies due to their connections to the Chinese government and military. Our fact sheet reveals that the New Jersey agencies that purchased this… Read More

China Tech Threat’s Exclusive Interview with Congresswoman Radewagen

Posted on by China Tech Threat
During a House Foreign Affairs Committee hearing on February 28, Rep. Aumua Amata Coleman Radewagen asked BIS Under Secretary Alan Estevez, “How many PRC chips are you comfortable having in DoD systems and critical infrastructure?”  We interviewed the Congresswoman afterwards to understand her perspective and what she hopes to achieve. Q1: What would you have liked to hear from BIS Under Secretary Estevez when you asked him “How many PRC chips are you comfortable having in DoD systems and critical infrastructure?”   “Ideally, zero. If that’s not the case, which it seems it’s not at all, it should be an active plan to move toward, not eventually but soon. We should develop clear goals and aggressive progress markers, including priorities… Read More

Utah Spent $34 Million on Risky Chinese Tech, Time For State To Take Action

Posted on by China Tech Threat
In February, Utah Sen. Mitt Romney, urged the Biden Administration to implement recently passed bipartisan legislation requiring the US to develop a comprehensive strategy addressing the China threat, stating, “it drives me nuts to watch us deal with China.” This is not just an issue to be dealt with in the halls of Congress.  Between 2018 and 2021, Sen. Romney’s home state of Utah has spent more than $34 million on risky Chinese technology from Lenovo, including for the Attorney General’s Office. (Read the Fact Sheet on Utah’s spending here.) Unfortunately, Utah’s $34 million expense triples the expense from just a few years ago, when our prior report indicated that the state spent $11 million between 2016-2020. (See our March… Read More

New China Tech Threat Paper Details Hundreds of Millions of Dollars in U.S. State Government Purchases of Lexmark and Lenovo Equipment

Posted on by China Tech Threat
On Thursday, China Tech Threat released a report rife with new research into how 28 U.S. states have created massive vulnerabilities for their citizens by purchasing at least $230 million worth of technology made by Chinese-owned and operated companies Lexmark and Lenovo since 2015.  While the Chinese Communist Party (CCP) is capable of exploiting many kinds of technology to spy on Americans, steal from them, or commit cyberattacks, Chinese companies are especially dangerous because of the CCP’s 2017 National Intelligence Law, which obligates Chinese companies to turn over any information Beijing demands. That puts Americans’ financial, personal, and health data at risk, in addition to sensitive organizational and government data. .kb-image_7275e7-74.kb-image-is-ratio-size, .kb-image_7275e7-74 .kb-image-is-ratio-size{max-width:400px;width:100%;}.kb-image_7275e7-74 figure{max-width:400px;}.kb-image_7275e7-74 .image-is-svg, .kb-image_7275e7-74 .image-is-svg img{width:100%;}.kb-image_7275e7-74 .kb-image-has-overlay:after{opacity:0.3;} The… Read More

Biden’s SOTU Should Spur More Bipartisan Action on CCP-Backed Semiconductor Companies

Posted on by China Tech Threat
On the heels of the Chinese spy balloon incident, President Biden delivered his State of the Union (SOTU) address. Three welcome calls to action related to China came through: Energize American semiconductor production, research, and innovation. Check China’s dominance in semiconductor production and other technologies. Work with international partners aimed at protecting advanced technology. The first of the key points in President Biden’s address was the bipartisan passage of the CHIPS Act, a law designed to help increase domestic production, research, and innovation in the semiconductor industry. He clearly stated, “We’re going to make sure the supply chain for America begins in America,” and later pointed out that investing to make America stronger means “Investing in American innovation, in industries… Read More

New Study Confirms China’s Ability to Spy… Through the Fridge

Posted on by China Tech Threat
Chinese spy balloons have been dominating headlines over the past few days. As the New York Times reported, “Balloon Incident Reveals More Than Spying as Competition with China Intensifies.” While the U.S. recovers the balloon and takes a closer look at the findings, it will not only be interesting to know what may have been communicated to China, but also what technology was used to do it. For example, were there any chips from China’s bellwethers (SMIC, YMTC, and CXMT)? All that said, this is not the only news of China spying that should have us up in arms. Late last month, The Telegraph and others reported, “China Can Use People’s Fridges and Laptops to Spy on Them, UK Warned.”… Read More