Tsaaro got CERT-IN Empanelled | MeitY has published the DPDP Rules, 2023.
Tsaaro got CERT-IN Empanelled | MeitY has published the DPDP Rules, 2023.
Tsaaro got CERT-IN Empanelled | MeitY has published the DPDP Rules, 2023.
Tsaaro got CERT-IN Empanelled | MeitY has published the DPDP Rules, 2023.
Back To Home
Research Team (Tsaaro)
From Collaboration to Containment: Microsoft Scales Back China’s Cyber Access
Mar 3, 2026
Introduction
Microsoft has operated early warning and cyber threat intelligence programs for a long time. These programs provide timely alerts about vulnerabilities found in their software. Governments and trusted partners often receive these alerts ahead of the public, sometimes by weeks. This gives them time to fix systems and strengthen defences. For a country, having access to this privileged information is strategically important. It can be used defensively to protect networks or offensively to create exploits before others can patch their systems.
China had access to parts of this program for years, reflecting Microsoft’s role as a global technology supplier. However, U.S. policymakers and intelligence officials became more and more worried that this access could allow Beijing to use vulnerability information as a weapon.
The Restriction
As of mid-2025, Microsoft has reduced its involvement with Chinese organisations. This means Chinese government agencies and state-linked companies will no longer get preferred alerts about critical vulnerabilities. They will now have to depend on publicly released patch advisories, which usually come out later. Reuters points out that this decision was partly influenced by pressure from the U.S. government and allied intelligence agencies. They have accused Chinese actors of regularly exploiting software vulnerabilities for cyber espionage and intellectual property theft.
The move comes amid rising cyber conflict between the U.S. and China.
Hafnium/Microsoft Exchange Hack (2021): A group linked to the Chinese government was accused of taking advantage of Microsoft Exchange vulnerabilities to breach tens of thousands of organizations worldwide.
Indictments of Chinese Hackers (2014–2023): The U.S. Department of Justice charged several hackers tied to the MSS for espionage operations focused on aviation, semiconductors, and biotech.
CERT Warnings & NATO Coordination: Western intelligence agencies often link complex intrusions to Chinese APT groups like APT10, APT31, and Volt Typhoon.
These incidents have led U.S. policymakers to believe that giving advance cyber alerts to Beijing might create more risks than benefits.
Impact on China
For China, the restriction is important. Without special access, Chinese cybersecurity agencies and companies may struggle to fix critical flaws on time. The skills of Chinese APT groups, analysts believe, might still allow them to find vulnerabilities on their own through their research teams. China has already put a lot of money into building its domestic cybersecurity systems. Companies like Qihoo 360 and government-supported CERTs are working on finding vulnerabilities independently. Still, missing Microsoft’s early warnings will slow official responses and increase the trust gap with the West.
Conclusion
By excluding China from vulnerability alerts, Microsoft is implicitly supporting U.S. and allied security concerns. This shows a larger trend where Western tech companies can no longer stay neutral; they must choose between open global access and security restrictions driven by national interests. This decision is similar to past actions, like cutting Huawei off. from U.S. chip supplies. It showcases how tech companies are becoming tools of government policy.
Restricting China may lower the risk of vulnerability leaks being exploited by Chinese APT groups before patches are available globally. However, it also hampers defensive coordination. Attacks from outside the U.S. and its allies could spread more quickly without China’s early patching. Since malware rarely respects borders, this could unintentionally increase collateral damage around the world.
Cross-border tensions are spilling into cyberspace, as corporations respond to geopolitical issues with new software restrictions. To know what’s unfolding., visit www.tsaaro.com.
News of the week
Massive Breach Exposes 370,000 Conversations from xAI’s Grok Chatbot
A major data breach has exposed more than 370,000 conversations from Grok, the AI chatbot platform developed by xAI. This incident resulted from a misconfigured database that allowed sensitive logs to be accessed online. The leaked information includes complete user-AI chat transcripts, account identifiers, and possibly personal details shared during conversations.
This exposure raises serious concerns because many users depend on chatbots for private or professional help, often sharing personal or financial information. Security analysts warn that cybercriminals could misuse the leaked content for identity theft, targeted phishing, or social engineering attacks. xAI has not yet released an official statement about the breach. Experts say this situation shows a critical need for strong encryption, improved database security, and enforceable regulations in the AI industry. As AI usage grows worldwide, large-scale leaks like this endanger both user trust and the safe use of new technologies.
https://opentools.ai/news/massive-data-breach-grok-chatbots-370000-conversations-exposed
Google to Pay $30 Million in YouTube Children’s Data Privacy Settlement
Google has agreed to pay $30 million to resolve a lawsuit regarding YouTube’s treatment of children’s data. The case was filed under the Children’s Online Privacy Protection Act (COPPA) and accused YouTube of collecting personal information from kids under 13 without getting parental consent. It also claimed that YouTube used that data for targeted ads.
Regulators argued that YouTube tracked children’s viewing habits with cookies and identifiers to boost ad revenue. Although Google denied any wrongdoing, it chose to settle and promised to improve its compliance practices. This case shows how serious the issue of children’s digital privacy has become. With many young users online, there is increasing pressure on tech companies to follow tougher data rules. This settlement could set a strong precedent. It serves as a reminder to major platforms that regulators are ready to enforce the law and hold them responsible for protecting minors’ information.
Hackers exploit social engineering to target Workday users
Hackers have started a social engineering campaign targeting customers of Workday, a popular human capital management and payroll software. This campaign uses phishing emails and fake login portals that look like official Workday messages. When hackers obtain login details, they can access employee accounts, which often hold payroll information, tax documents, and personal identifiable information (PII). Security analysts warn that this data can lead to identity theft, payroll fraud, or be sold on the dark web.
Workday acknowledged these attempts and encouraged customers to stay alert. The company pointed out that its platform has not been compromised; instead, attackers took advantage of human errors through social engineering. Customers are advised to enable multifactor authentication (MFA), check URLs, and teach employees about phishing strategies.
https://www.cybersecuritydive.com/news/hackers-target-workday-in-social-engineering-attack/758095