Cyberpuissance à la chinoise : comment Pékin a industrialisé le hacking

Chinese Cyber Power: State-Organized Hacking

Over the past decade, China's state-organized hacking has developed into a unique ecosystem, blending academic institutions, controlled competitions, contracted enterprises, and systematic channels for software vulnerability collection. This system extends beyond defensive cybersecurity to include influence, deterrence, and potential preemptive military actions.

Cybersecurity managers in critical enterprises and administrations Policy makers addressing China's digital ascent International intelligence and security experts Software industry players vulnerable to exploitation

China has built an offensive ecosystem combining contests, academic research, and contracted companies Vulnerabilities discovered in internal competitions are used for espionage State centralization ensures Beijing has priority access to vulnerabilities before they are patched Critical foreign infrastructures are infiltrated without immediate action This cyber-preparation model provides a tactical advantage in conflict or crisis scenarios

Hacking is now a semi-public industry integrated into national security strategy Semi-private contractors conduct intrusions at municipal levels Democracies face the challenge of balancing operational efficiency and respecting liberties Western public-private cooperation seems disorganized compared to a unified system International standards for vulnerability disclosure are urgent for technological balance

Since Xi Jinping's leadership began in 2013, China has accelerated national programs to enhance technological control. From 2015 to 2017, reforms included cybersecurity education overhauls, funding for excellence programs, and technical competitions to identify talent, later directed to state-controlled entities.

The Tianfu Cup: National Showcase and Operational Lever

In 2018, China launched the Tianfu Cup, a national hacking contest where discovered vulnerabilities are submitted to authorities for potential surveillance use, rather than being made public.

In 2024, internal documents from the cybersecurity firm Isoon revealed contract-based intrusions, even at municipal levels, demonstrating the depth of public cybersecurity offensive orders.

Chinese actions have shifted toward infrastructure targets like electrical grids and telecom systems, aiming to maintain a presence for potential crisis responses.

Democracies face challenges in building resilience against China's model without adopting its systematic control. Solutions may include international standards for responsible vulnerability disclosure and stronger protection of critical infrastructures.

China's strategic investment in hacking highlights the need for democracies to consider how to adapt or counter this model, which will shape technological balances in the coming decades.

D’après FrenchWeb.