Stats Say Chinese Researchers Not Deterred By China’s Vulnerability Law

Chinese researchers are significant contributors to vulnerability disclosure programs, both in volume and quality. When permitted by China's government to compete in the vulnerability discovery competition Pwn2Own, for example, Chinese researchers dominated . But a recent change in Chinese laws put new burdens on researchers that could have disincentivized participation. A group from the Atlantic Council's Cyber Statecraft Initiative sifted through the thanks-for-telling-us notes included with patches for five large vendors and found that, tentatively, there was no effect. In July 2021, China implemented the Regulations on the Management of Network Product Security Vulnerabilities law , which included a provision…