Are Trade Concerns Trumping US Cybersecurity?

The piece argues that US trade concerns are shaping cybersecurity policy, noting that sanctions against China’s Ministry of State Security over Salt Typhoon may have been dropped in favour of ongoing negotiations, a point linked to reports about Nvidia’s export approvals to China. It cites critics who say cybersecurity is being traded as a diplomatic concession, with comments from Antoine Harden of Sonatype describing cyber tools as a bargaining chip rather than a clear rule of cyberspace.

The Salt Typhoon APT is described as having moved from targeting around a dozen ISPs and telecom firms to more than 200 companies in 80 countries, with sanctions already imposed on individuals and organisations connected to the attack. The piece also notes a broader trend that sanctions alone have not deterred state-sponsored cyber operations, and highlights defensive measures such as the Cybersecurity Maturity Model Certification (CMMC 2.0) and the Cybersecurity Risk Management Construct as longer-term reforms.

It adds that deterrence by denial is seen by Harden as more reliable than economic punishment, while experts suggest offensive cyber operations will continue but are exercised discreetly. according to Reuters