China Taking Control of Zero Day Exploits

> This just blocks the cyber-arms trade. It doesn’t prevent researchers from telling the products’ companies, even if they are outside of China.

Cyberspace Administration of China release -

http://www.cac.gov.cn/2021-07/13/c_1627761607640342.htm

It creates an interesting dynamic. Researchers are encouraged to tell overseas companies, but could be payed by China not to. And China can still buy zero days from overseas.

> Vulnerability information shall not be released before the network product provider provides network product security vulnerabilities repair measures

This in the West is used to create pressure on the companies to make them fix problem.

China removes this pressure for overseas companies, and can punish local companies.