Loading story…
China has reportedly directed some government agencies to replace Windows 10 China Government Edition on desktop systems with domestically developed Linux distributions, accelerating the platform’s retirement from February 2027 to later in 2026. The move is being presented as part of a broader digital-sovereignty push and is tied to stated concerns about data security and dependence on U.S. software vendors, although no specific security incident affecting Windows was disclosed.
The most likely replacements are Kylin OS and UnionTech OS (UOS), both already positioned for government, state-owned enterprise, and critical-infrastructure use in China. The scope of the directive remains unclear and does not appear to amount to a nationwide Windows ban, but the migration is expected to be operationally difficult because agencies will need to test applications, validate drivers, integrate identity systems, ensure document compatibility, retrain staff, and adapt or replace Windows-dependent business software.
See the actors and campaigns active against you right now.
4 events from the most recent confirmed update back to the earliest known activity.
C&M Information Technologies (CMIT), the joint venture that developed Windows 10 China Government Edition, was created in 2016 by Microsoft and the state-owned China Electronics Technology Group.
The specialized government edition of Windows 10 had originally been scheduled for retirement in February 2027, but the report says its end of life was moved forward to later in 2026.
In response to the reported directive, Microsoft said it was not aware of any security incident affecting Windows 10 China Government Edition and that the product continued to receive regular security updates.
Bloomberg reported that China ordered some government agencies to replace Windows 10 China Government Edition desktops with domestically developed Linux distributions. Officials cited data security concerns, though no specific security incident was disclosed.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
China has reportedly instructed domestic organizations to stop using cybersecurity software from multiple **U.S. and Israeli vendors**, citing national security concerns that such tools could collect sensitive data and transmit it abroad. The directive, reported by Reuters and echoed in follow-on coverage, appears consistent with Beijing’s broader technology decoupling efforts and long-running policy initiatives to replace foreign technology in critical environments with domestic alternatives. Named vendors affected include **VMware (Broadcom)**, **Palo Alto Networks**, **Fortinet**, and Israel-based **Check Point**, with additional reporting listing a wider set of impacted security suppliers such as **Mandiant**, **CrowdStrike**, **SentinelOne**, **McAfee**, **Recorded Future**, **Claroty**, **Rapid7**, and **Wiz**, as well as Israeli firms **CyberArk**, **Orca Security**, **Cato Networks**, and **Imperva** (Thales-owned). Reporting indicates uncertainty about which Chinese entities received the notice and how broadly it applies, but notes the move had immediate market impact on affected companies’ stocks and aligns with China’s stated goal of reducing reliance on foreign software across state-linked sectors.
Jun 29, 2026
China has implemented a comprehensive ban on the use of foreign AI chips, including those from Nvidia, AMD, and Intel, in any data center projects funded by the government. The directive, which reportedly applies retroactively to projects still in early stages, requires the removal or replacement of foreign accelerators even if they have already been installed. Chinese regulators have instructed that only domestically produced silicon, such as chips from Huawei, Cambricon, and Enflame, may be used in these environments. This move marks a significant escalation from previous policies that merely discouraged foreign chip purchases, and it effectively eliminates the prospects for foreign chipmakers in China's state-backed AI infrastructure. To support this transition and further reduce reliance on foreign technology, local Chinese governments are offering substantial power incentives and subsidies to domestic tech companies like ByteDance, Alibaba, and Tencent. These measures are designed to offset the higher energy costs and lower efficiency of Chinese-made AI chips compared to leading foreign alternatives, particularly Nvidia GPUs. Despite the technological gap, China is accelerating the development and deployment of homegrown AI hardware, with the government leveraging both regulatory and economic tools to promote domestic innovation and self-sufficiency in the semiconductor sector.
Jul 12, 2026
China reportedly began approving imports of high-end *Nvidia* AI GPUs (including the **H200**) after weeks of uncertainty, with initial licenses expected to prioritize major Chinese internet companies building large AI data centers. Reporting cited by Reuters and the *South China Morning Post* indicates Beijing is attaching restrictive, not-yet-finalized conditions to these licenses—potentially including requirements to bundle purchases with domestic chips—reflecting an effort to balance near-term demand for leading accelerators with longer-term goals of strengthening China’s indigenous semiconductor ecosystem. In parallel, Chinese leader **Xi Jinping** publicly framed AI as an “epoch-making” technological transformation and called for faster progress in domestic development via a “whole-of-nation” approach, positioning AI as central to China’s upcoming 15th Five-Year Plan (through 2030). While not a discrete cybersecurity incident, the combined reporting is relevant to security leaders because it signals continued geopolitical pressure on AI supply chains and potential compliance, procurement, and third-party risk impacts for organizations operating in or selling into China’s AI infrastructure market.
Jun 29, 2026