Loading story…
China has reportedly instructed domestic organizations to stop using cybersecurity software from multiple U.S. and Israeli vendors, citing national security concerns that such tools could collect sensitive data and transmit it abroad. The directive, reported by Reuters and echoed in follow-on coverage, appears consistent with Beijing’s broader technology decoupling efforts and long-running policy initiatives to replace foreign technology in critical environments with domestic alternatives.
Named vendors affected include VMware (Broadcom), Palo Alto Networks, Fortinet, and Israel-based Check Point, with additional reporting listing a wider set of impacted security suppliers such as Mandiant, CrowdStrike, SentinelOne, McAfee, Recorded Future, Claroty, Rapid7, and Wiz, as well as Israeli firms CyberArk, Orca Security, Cato Networks, and Imperva (Thales-owned). Reporting indicates uncertainty about which Chinese entities received the notice and how broadly it applies, but notes the move had immediate market impact on affected companies’ stocks and aligns with China’s stated goal of reducing reliance on foreign software across state-linked sectors.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Reuters and follow-on coverage on January 15, 2026 linked the software ban to China’s wider effort to replace Western technology with domestic alternatives, including policies such as Xinchuang and earlier foreign-software replacement directives. The reporting also noted market pressure on some affected vendors’ stock prices after the news became public.
Chinese authorities reportedly sent notices in recent days ordering domestic entities to stop using cybersecurity software from more than a dozen U.S. and Israeli vendors, citing national security concerns that the products could collect sensitive data and transmit it abroad. Reported affected companies include VMware, Palo Alto Networks, Fortinet, Mandiant, CrowdStrike, Check Point, and CyberArk.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
tomshardware.com
Open sourcesecurityaffairs.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
China’s Military Procurement Network suspended or banned several prominent domestic cybersecurity companies from PLA-related contracts in the first half of 2026 over alleged procurement violations, with collusive bidding cited as a central concern. Companies named in reporting include **TopSec**, **Venustech**, and subsidiaries of **Qi An Xin**, all of which are described as significant players in China’s cybersecurity sector and part of the broader ecosystem that has supported government and military cyber activity. The action has drawn added scrutiny because it follows earlier reporting on leaked **i-SOON** documents that allegedly detailed bid-rigging and coordinated bidding practices among Chinese cybersecurity vendors competing for state contracts. The measures suggest tighter military procurement oversight in China and could disrupt firms with close links to state security work, while exposing governance and compliance risks inside a sector long intertwined with official cyber operations.
Jul 16, 2026
China’s Cybersecurity Review Office has opened a cybersecurity review of Palo Alto Networks products sold in the country, citing the need to protect critical information infrastructure, prevent cybersecurity risks and vulnerabilities, and safeguard national security. The notice says the action is being taken under China’s National Security Law, Cybersecurity Law, and the Measures for Cybersecurity Review, but it does not identify any specific product, allegation, or technical issue. Palo Alto Networks said the review has not affected its ability to support customers or deliver products and services in China. The move echoes Beijing’s earlier scrutiny of foreign technology suppliers, including a prior review of Micron that ended with a finding that its products posed unacceptable risks for operators of critical infrastructure and effectively restricted those sales in the Chinese market.
Aug 10, 2026
U.S. officials are preparing restrictions on Chinese-made optical transceivers used in data centers, with the Federal Communications Commission reportedly considering a ruling that could block imports of new models before year-end. The proposed action is being framed as a supply-chain and cybersecurity measure, driven by concerns that the components could be used to steal data, deploy malware, or disrupt data center operations tied to critical digital infrastructure and AI growth. The move would expand a broader U.S. crackdown on Chinese and China-linked technology products that has already targeted firms and product categories including **Huawei**, drones, routers, and some robotic devices. Chinese supplier **Zhongji Innolight**, a major global transceiver vendor, is expected to be among the most affected, while U.S. competitors such as **Lumentum**, **Coherent**, and **Applied Optoelectronics** are described as lacking similar scale; China’s embassy in Washington has criticized the plan and warned it could respond if U.S. measures materially harm Chinese interests.
Aug 6, 2026