Loading story…
Poland’s Ministry of Defence and senior Polish Army leadership issued rules barring Chinese-made vehicles from entering protected military facilities, citing information security risks from modern vehicle connectivity, sensors, and software that can record location, images, and audio. The policy also extends restrictions to other non-Chinese vehicles if they are equipped with devices capable of recording position, image, or sound, due to the risk of “uncontrolled acquisition and use of data” within sensitive areas.
The measures are described as preventative and aligned with practices used by NATO members and other allies, and they do not restrict general public use of such vehicles in Poland. Poland is also seeking a vetting/certification process with legal and technical requirements that would allow manufacturers to undergo security assessment for access to sensitive sites, with limited exemptions (e.g., certain inspections and rescue operations). The reporting notes similar allied actions and context, including U.S. restrictions on connected-vehicle systems tied to China or Russia and prior concerns about high-risk vendors in critical infrastructure supply chains.
See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
Polish military leadership asked the Ministry of Defence to establish legal and technical certification requirements so affected manufacturers could undergo security vetting and potentially regain access to sensitive sites. The planned framework would also support possible future restrictions on other foreign-made vehicles with recording or tracking capabilities.
Poland's military and Ministry of Defence introduced rules barring vehicles manufactured in China from entering protected military facilities, citing information security and espionage risks. The policy also prohibited officials from connecting work phones to infotainment systems in China-made cars, while allowing limited exemptions such as inspections and rescue operations.
A Polish military risk assessment concluded that modern vehicles made in China, along with certain onboard sensors, software, and connected components, could enable uncontrolled collection and use of sensitive data such as location information at protected sites. The assessment also raised broader concerns about vehicles equipped with technology capable of recording position, images, or sound.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
China’s Military Procurement Network suspended or banned several prominent domestic cybersecurity companies from PLA-related contracts in the first half of 2026 over alleged procurement violations, with collusive bidding cited as a central concern. Companies named in reporting include **TopSec**, **Venustech**, and subsidiaries of **Qi An Xin**, all of which are described as significant players in China’s cybersecurity sector and part of the broader ecosystem that has supported government and military cyber activity. The action has drawn added scrutiny because it follows earlier reporting on leaked **i-SOON** documents that allegedly detailed bid-rigging and coordinated bidding practices among Chinese cybersecurity vendors competing for state contracts. The measures suggest tighter military procurement oversight in China and could disrupt firms with close links to state security work, while exposing governance and compliance risks inside a sector long intertwined with official cyber operations.
Jul 16, 2026
China has reportedly instructed domestic organizations to stop using cybersecurity software from multiple **U.S. and Israeli vendors**, citing national security concerns that such tools could collect sensitive data and transmit it abroad. The directive, reported by Reuters and echoed in follow-on coverage, appears consistent with Beijing’s broader technology decoupling efforts and long-running policy initiatives to replace foreign technology in critical environments with domestic alternatives. Named vendors affected include **VMware (Broadcom)**, **Palo Alto Networks**, **Fortinet**, and Israel-based **Check Point**, with additional reporting listing a wider set of impacted security suppliers such as **Mandiant**, **CrowdStrike**, **SentinelOne**, **McAfee**, **Recorded Future**, **Claroty**, **Rapid7**, and **Wiz**, as well as Israeli firms **CyberArk**, **Orca Security**, **Cato Networks**, and **Imperva** (Thales-owned). Reporting indicates uncertainty about which Chinese entities received the notice and how broadly it applies, but notes the move had immediate market impact on affected companies’ stocks and aligns with China’s stated goal of reducing reliance on foreign software across state-linked sectors.
Jun 29, 2026
The Royal United Services Institute (RUSI) warned that fragmented European policies on technology suppliers leave critical infrastructure exposed to security and economic dependency risks, particularly from Chinese vendors such as Huawei and ZTE. Only **10 of 27 EU member states** have fully implemented the voluntary EU Toolbox for 5G Security, and Germany and Spain retain substantial Chinese equipment in their 5G radio-access networks. RUSI said Chinese legal requirements enabling state access to company data and vulnerability information could give intelligence services privileged early access to exploitable flaws. RUSI urged the EU to establish a harmonized, clearly defined framework for assessing high-risk vendors while preserving national-security autonomy and accounting for sector-specific risks. Proposed Cybersecurity Act amendments would identify untrusted vendors across **18 critical sectors** and could require operators to remove their equipment within **36 months**. The institute called for security-led procurement, but cautioned that blanket country or vendor bans do not eliminate product vulnerabilities and that dependency and surveillance risks can also apply to US suppliers.
Oct 2, 2026