Loading story…
Alibaba Cloud has expanded its Malaysian footprint with two data centers opened in Johor, bringing its total in the country to five. Alongside local training and institutional partnerships by Alibaba and Huawei in Malaysia and Indonesia, Chinese cloud and AI infrastructure is becoming embedded in ASEAN digital transformation efforts and may influence regional technical standards, cybersecurity practices, and data-governance expectations.
The expansion raises digital-sovereignty concerns because platform dependence can limit governments’ practical control over data, even where formal regulatory authority remains local. Chinese providers may also be subject to domestic legal obligations governing data access and intelligence cooperation, while uneven privacy enforcement across ASEAN can compound exposure. ASEAN governments should diversify cloud suppliers, require transparency into cross-border data flows and foreign access obligations, build domestic AI capabilities, and preserve contractual audit and intervention rights over critical infrastructure.
See the reporting duties and controls this puts on the clock.
6 events from the most recent confirmed update back to the earliest known activity.
The Financial Times reported that Alibaba and ByteDance used Southeast Asian data centers to train advanced AI models and access Nvidia chips unavailable in China.
Selangor recognized Alibaba Cloud as a provider under its Multi Cloud Services initiative.
A cited study found that vague definitions, limited enforcement, and inadequate AI and big-data provisions weakened implementation of Indonesia's 2022 data-protection law.
Indonesia enacted a data-protection law later assessed as having vague definitions, limited enforcement, and inadequate provisions for AI and big-data use.
ASEAN endorsed a Malaysia-led framework setting regional principles for data protection, regulatory access, and cross-border data hosting four months before Alibaba Cloud opened its Johor data centers.
Alibaba Cloud opened two data centers in Johor, Malaysia, bringing its total Malaysian data-center presence to five facilities, its largest such presence in Southeast Asia.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Policymakers and industry leaders are intensifying calls to reduce dependence on foreign technology infrastructure, framing **digital sovereignty** as a strategic issue tied to democratic resilience, data protection, and long-term economic security. In Europe, speakers at a Brussels summit argued that reliance on major U.S. cloud, browser, and platform providers creates governance and concentration risks, and they pushed for stronger alignment across AI, semiconductor, and cybersecurity policy, along with greater use of **open source**, interoperability, and transparent standards. A parallel debate is unfolding in Indonesia, where officials and telecom leaders warned of **"digital colonization"** while trying to expand domestic AI capacity without simply shifting dependence from Western vendors to Chinese platforms. Indonesian efforts emphasize building local capabilities in AI, semiconductors, and talent, even as foreign open-source offerings are presented as cheaper and more customizable options. The material is **not fluff** because it addresses substantive policy and security implications of technology dependence, but only the Europe and Indonesia items are relevant to the same broad sovereignty theme; the telecom AI roadmap and MWC product-announcement roundup are separate topics.
Jun 29, 2026
Governments are increasingly treating **technology and data sovereignty** as a national security risk factor, weighing dependence on foreign-controlled platforms and supply chains against operational capability. Switzerland ended its use of **Palantir** not over performance, but over residual sovereignty concerns tied to proprietary opacity, foreign legal jurisdiction, and remote update/control mechanisms that could enable remote access, unintended exposure, or service disruption during geopolitical crises. In parallel, U.S. policy discussions are framing “**sovereign AI**” as a strategic export and partnership model, even as partners pursue sovereignty specifically to reduce reliance on the United States amid concerns about shifting rules, access restrictions, and leverage. Separately, reporting on potential U.S. moves to ease certain China-tech restrictions (including around Chinese telecoms and consumer networking products) underscores how quickly policy can change and how those shifts can reshape risk postures for critical infrastructure and technology procurement decisions.
Jul 12, 2026
Multiple reports highlighted rapid expansion and adoption of AI across infrastructure, media, and defense, alongside growing governance and societal concerns. Applied Digital said it broke ground on a **430 MW** AI-focused data center in the southern US but is withholding the exact location until it can manage local backlash and communications, reflecting broader public scrutiny over data centers’ power demand and electricity-price impacts. Separately, Alibaba was reported to be planning an IPO of its chip unit **T-Head** to raise capital for large AI infrastructure ambitions and to compete in China’s domestic AI accelerator market, while Japan’s Toto drew investor attention for its semiconductor supply-chain business (electrostatic chucks used in NAND manufacturing) benefiting from AI-driven memory demand. On the risk side, academic research warned that combining **LLMs** with multi-agent systems could enable “**malicious AI swarms**” of persistent, coordinated personas that manufacture *synthetic consensus*, infiltrate communities, and contaminate future AI training data—shifting influence operations beyond obvious botnets. In parallel, China’s PLA showcased a **200-drone** swarm concept reportedly controllable by a single operator and designed to continue operating under jamming or lost communications via autonomous coordination algorithms, underscoring how AI-enabled swarming is advancing in military contexts. Policy debate also intensified in Canada, where Citizen Lab commentary criticized the transparency and process around a government “national sprint” on AI, arguing for stronger privacy-law modernization and greater accountability from AI companies.
Jun 29, 2026