China Watch

Three trends

Semiconductor independence as PRC response to export controls. China is rapidly developing domestic alternatives to U.S. advanced chips in response to U.S. restrictions. DeepSeek Ars Technica and Dongfang Suanxin SCMP China are both pursuing indigenous semiconductor strategies, with the latter explicitly designing 3D stacking to bypass controls. Chinese tech firms are accelerating substitution of Nvidia accelerators with domestic suppliers Fortune, backed by 2 trillion yuan in government support. This represents a structural shift: rather than circumventing controls through procurement networks, PRC firms are compressing development timelines for in-house production.

University networks as persistent targeting vector for Chinese APT operations. Chinese state-linked threat actors have conducted a sustained campaign exploiting Roundcube vulnerabilities at U.S. and Canadian universities since May 2024 The Register, CyberScoop, Bleeping Computer, The Hacker News. Targets include physics and engineering departments with national-security research affiliations, suggesting coordinated collection against defense-relevant intellectual property. Related infrastructure expansion is occurring in parallel: UAT-7810 is growing the ORB proxy botnet using new LONGLEASH malware The Hacker News, Bleeping Computer, deploying it against internet-facing devices to create persistent access layers. This pattern suggests layered campaign architecture with both targeting specificity and distributed infrastructure development.

Fentanyl precursor controls show enforcement gaps despite PRC policy. While China implemented export controls on 16 precursor chemicals for fentanyl production, Mexican cartel supply reaching the U.S. has experienced minimal disruption The Rio Times. Domestic U.S. enforcement efforts continue producing indictments and seizures SCMP China, DOJ News, DOJ News, but the throughput suggests diversion channels remain open or precursor sourcing has shifted to alternative suppliers. This indicates either enforcement implementation gaps on the PRC side or that precursor supply chains have adapted faster than policy controls can interdict.

Two open questions

What is the operational relationship between PRC military and Russian armed forces on defense-technology co-development? Germany summoned China's ambassador over allegations PRC is training Russian troops Kyiv Post, but Beijing denied the claims. Separately, leaked documents allege joint PRC-Russia development of next-generation armored vehicles with AI and active-protection systems Kyiv Post. Neither report confirms the scope, duration, or institutional chains of command governing this collaboration. Is this ad-hoc technical exchange or a structured military-industrial partnership, and what capabilities are being prioritized for integration?

Are OpenAI and Google intentionally or inadvertently circumventing U.S. export controls on blacklisted entities? Both firms provided AI models to blacklisted Chinese technology companies (Alibaba, Baidu, Tencent) through Singapore-based subsidiaries Financial Times World. The article does not clarify whether parent-company policy explicitly permitted this routing, whether subsidiary-level controls were absent, or whether the blacklist definitions were interpreted narrowly. This gap matters for assessing whether enforcement mechanisms against major U.S. AI firms are adequate.

One thing that doesn't fit

Federal judges have twice blocked or paused Pentagon enforcement against Alibaba as a designated Chinese military company Engadget, Semafor, with one ruling questioning the constitutionality of the underlying designations law. This complicates the narrative that U.S. economic pressure on PRC-linked firms is accelerating. While Congress and the Executive Branch are issuing demands for divestment House Select Committee on the CCP, WTOP DC, courts are simultaneously constraining the legal basis for those designations. Until appellate review resolves the constitutional question, U.S. enforcement credibility against similar designations remains uncertain.

Forward look (qualitative)

Watch whether Chinese semiconductor development timelines accelerate enough to reduce dependence on remaining legal Nvidia channels before next export-control round, or whether the pace remains too slow to offset U.S. restrictions. If Roundcube patching at target universities slows APT activity, it signals defenders can interrupt the campaign; continued breaches despite available patches indicate either poor institutional compliance or attackers shifting to alternative vectors.