China Security Report — July 03, 2026

Security analysis based on open-source intelligence and web research. Period: June 26 — July 03, 2026.

Executive Summary

During the period of June 26 to July 03, 2026, China's security posture was marked by heightened activity in the Taiwan Strait and South China Sea, significant developments in cybersecurity, and active diplomatic engagements. Beijing continued its assertive maritime presence, leading to international condemnation from European nations and the United States, while Taiwan conducted readiness drills in response to perceived threats. Cybersecurity emerged as a critical domain, with reports of China-linked groups targeting critical infrastructure in Southeast Asia and a major breach of the FBI's surveillance system attributed to Chinese hackers. Concurrently, China implemented new national security regulations on overseas investments and engaged in high-level diplomatic tours, aiming to strengthen partnerships and project its global governance vision.

Key Security Developments

• Maritime Coercion and Taiwan Strait Tensions
  The Chinese Coast Guard (CCG) expanded its "law enforcement and research activity" to waters east of Taiwan, with vessels patrolling almost continuously since June 1. This move, which Beijing claims is to protect its maritime territory, has been interpreted by Taiwan as an attempt to erode its sovereignty and normalize China's presence in its "near-shore waters." The United Kingdom, France, and Germany issued a rare joint statement on June 24, warning that China's activities threatened regional stability and freedom of navigation, a concern echoed by the American Institute in Taiwan (AIT). Taiwan's Ministry of Foreign Affairs welcomed this international support.

• Taiwanese Military Readiness Exercises
  Taiwan launched a five-day Immediate Combat Readiness Exercise on June 22, ahead of its annual Han Kuang war games, to make military training more realistic and war-oriented amidst sustained pressure from the People's Liberation Army (PLA). Taiwan's Defence Minister Wellington Koo stated on June 24 that the military needs to test its immediate response capabilities due to a "shortening warning time" for any potential Chinese attack. These drills included simulating responses to a Chinese maritime "quarantine" and defending key transportation nodes and port facilities.

• PLA Hypersonic Missile Development
  On June 22, PLA Daily published the first official imagery of the DF-17 Medium-Range Ballistic Missile (MRBM) equipped with the DF-ZF hypersonic glide vehicle. This development indicates the PLA's intention to field such systems at scale, which could be used to target enemy air defense networks and enhance precision strike capabilities.

• South China Sea Patrols and Scarborough Reef Activity
  The Chinese People's Liberation Army Southern Theater Command conducted routine naval and air force patrols in the South China Sea from June 27 to 28. This was in response to what China described as the Philippines co-opting "countries outside the region to organize so-called joint patrols," disrupting regional peace. Earlier in June, China also deployed a floating platform at Scarborough Reef inside the Philippines' Exclusive Economic Zone (EEZ), raising concerns about a potential future permanent base and drawing strong protests from the Philippines.

• US Ban on Chinese Telecommunications Equipment
  On June 26, the U.S. Federal Communications Commission (FCC) announced a sweeping ban on the import and sale of certain Chinese-made telecommunications equipment, including devices from Huawei, ZTE, and Hikvision. This decision closes a regulatory gap, revoking earlier authorizations and effectively banning all such equipment regardless of approval date, citing cybersecurity risks and potential espionage.

• China-Linked Cyberattacks on Southeast Asian Critical Infrastructure
  A China-linked cyberthreat group, identified as CL-STA-1062 (also known as UAT-7237), has targeted critical infrastructure providers in Southeast Asia over the past year, including electricity and water providers, as well as government and military organizations. Palo Alto Networks Unit 42 reported investigating over 10 such attacks, noting the deployment of a new custom backdoor tool dubbed TinyRCT.

• Chinese Hackers Breach FBI Surveillance System
  Chinese hackers reportedly breached the FBI's secret surveillance system (DCS-3000 or Red Hook), leading the FBI to classify it as a "Serious Incident" due to its significant threat to US national security. The hackers gained access to metadata from lawful data interceptions, including phone numbers and internet traffic, through a "supply chain attack" via a third-party internet service provider.

• China's New AI Cybersecurity System
  On June 26, Chinese cybersecurity firm Qihoo 360 announced the creation of an advanced AI system named Tulongfeng. The company claims it can match the vulnerability-discovery capabilities of prominent Western frontier systems like Mythos when paired with other Qihoo technologies, potentially enhancing China's offensive and defensive cybersecurity capabilities.

• China-Nepal Border Incident
  On June 26, two Nepali youths were detained by Chinese security forces in Nyalam County after allegedly crossing the Nepal–China border in Lapchi and flying a drone. This incident highlights increased surveillance and security monitoring by China along its frontier due to rising cross-border movement.

• New National Security Regulations on Overseas Investments
  China implemented broad "national security" regulations on overseas investments, taking effect from July 2. These new rules provide a sweeping legal framework for authorities to influence capital and personnel flows across China's borders, particularly in economically and strategically vital fields like artificial intelligence, computer chips, and green technology.

• China-Russia Military Cooperation
  EU High Representative for Foreign Affairs and Security Policy Kaja Kallas confirmed reports that China trained Russian military personnel on mine clearing and drone operations. This cooperation may allow China to test its equipment, tactics, and doctrine in modern warfare conditions, despite Beijing's public claims of neutrality regarding the war in Ukraine.

• US "Chinese Military Companies" List Expansion
  The U.S. Department of Defense (DoD) expanded its Section 1260H "Chinese military companies" list, effective June 30. This expansion includes globally prominent companies across AI, automotive, consumer electronics, e-commerce, energy, life sciences, and semiconductors, signaling a broader scope beyond traditional defense industries. The DoD is prohibited from purchasing goods, services, or technology directly from these designated entities.

Geopolitical Impact and Regional Dynamics

China's actions during this period have significantly intensified regional tensions, particularly in the Indo-Pacific. The assertive maritime activities in the Taiwan Strait and South China Sea are directly challenging the existing status quo and international norms. The continuous presence of Chinese Coast Guard vessels east of Taiwan and the deployment of a floating platform at Scarborough Reef underscore Beijing's strategy of "gray-zone" tactics to advance its territorial claims without resorting to overt military conflict. This has prompted strong reactions from regional actors and major powers. The joint statement from the UK, France, and Germany, along with US expressions of concern, highlights a growing international consensus against China's unilateral actions and a commitment to upholding freedom of navigation and the rules-based international order.

Relations with the United States remain fraught, characterized by a deepening technological and security competition. The FCC's ban on Chinese telecom equipment and the DoD's expanded blacklist of "Chinese military companies" demonstrate Washington's continued efforts to decouple critical supply chains and counter perceived national security threats from China. The alleged Chinese cyberattack on the FBI's surveillance system further exacerbates distrust and underscores the pervasive nature of cyber espionage in bilateral relations. Meanwhile, China's Foreign Minister Wang Yi's diplomatic tour of European nations suggests an effort to cultivate partnerships and potentially mitigate the impact of US-led containment strategies, emphasizing cooperation over rivalry.

The Taiwan issue remains the most critical flashpoint, with Taiwan's military exercises reflecting a genuine concern over shortening warning times for a potential Chinese attack. China's military development, including hypersonic missiles and carrier aviation, directly influences the regional power balance and raises the stakes for any cross-Strait contingency. The reported military cooperation between China and Russia, particularly in drone and mine-clearing operations, adds another layer of complexity, suggesting a deepening strategic alignment that could have implications for broader global security.

Military and Defense Analysis

China's military continues its robust modernization program, with notable advancements in strategic capabilities and force projection. The official imagery of the DF-17 MRBM equipped with the DF-ZF hypersonic glide vehicle on June 22 signifies a significant leap in China's precision strike capabilities, potentially enabling it to overcome advanced air defense systems. This aligns with China's broader strategy to develop anti-access/area-denial (A2/AD) capabilities, as evidenced by research detailing strategies to destroy US carrier groups from 3,000 kilometers away using coordinated missile swarms.

The People's Liberation Army Navy (PLAN) is also improving its ability to sustain long-range deployments of its carrier groups, indicated by the Liaoning's recent exercises. Developments in carrier aviation, including day-night operations in combat conditions and cross-academy combat training, suggest a focus on enhancing operational readiness and joint training elements. While China's foreign ministry spokesperson Guo Jiakun reiterated on June 26 that China's military development is for safeguarding national sovereignty and does not target any country, these advancements are clearly perceived as a growing force projection capability in the Indo-Pacific and beyond. The reported training of Russian military personnel by China on mine clearing and drone operations also indicates a practical application of PLA doctrine and equipment in modern warfare contexts, potentially offering valuable insights for China's own forces.

Outlook and Forecast

Short-term trends (1-3 months): Tensions in the Taiwan Strait and South China Sea are likely to remain elevated. China will probably continue its "gray-zone" tactics, including increased Coast Guard patrols and maritime surveys, to assert its territorial claims. Taiwan is expected to proceed with its annual Han Kuang exercises in August, further testing its defense readiness and potentially leading to counter-responses from Beijing. The cybersecurity domain will remain a hotbed of activity, with continued state-sponsored cyber espionage and attacks targeting critical infrastructure in the region and against Western entities. China's new national security regulations on overseas investments will likely begin to show their impact, potentially affecting foreign companies operating in China and global supply chains in critical technology sectors.

Critical flashpoints and risk areas: The Taiwan Strait remains the primary flashpoint, with any escalation of Chinese maritime or air incursions carrying a high risk of miscalculation. The South China Sea, particularly around disputed features like Scarborough Reef, also poses a significant risk for clashes between Chinese and Philippine vessels, potentially drawing in other regional and international actors. The ongoing cyber warfare between China and Western nations, as evidenced by the FBI breach and attacks on Southeast Asian critical infrastructure, represents a persistent and evolving risk that could lead to significant disruptions.

Indicators to monitor: Key indicators to monitor include the frequency and nature of Chinese military and Coast Guard activities around Taiwan and in the South China Sea. Any further deployment of advanced military assets, such as additional aircraft carriers or new missile systems, would signal an escalation. Developments in China's cybersecurity capabilities, particularly the operational deployment of AI systems like Tulongfeng, and reports of new cyberattack campaigns will be crucial. Diplomatic statements and joint military exercises involving China and its partners (e.g., Russia) or its rivals (e.g., US, Japan, Philippines) will also be important barometers of regional stability. The implementation and impact of China's new overseas investment regulations on global tech supply chains should also be closely watched.

Strategic recommendations: For regional stability, it is crucial for international actors to maintain a united front in upholding international law and freedom of navigation in the South China Sea and Taiwan Strait. Enhanced intelligence sharing and collaborative cybersecurity defense mechanisms are essential to counter China-linked cyber threats. For nations concerned about China's military modernization, continued investment in advanced defense capabilities, coupled with robust deterrence strategies and multilateral security cooperation, remains vital. Diplomatic channels should be kept open to manage crises and prevent escalation, while also addressing underlying issues of competition and cooperation.

Sources

• understandingwar.org
• visiontimes.com
• wkyc.com
• straitstimes.com
• youtube.com
• understandingwar.org
• people.cn
• eurasiareview.com
• cybersecuritynews.com
• darkreading.com
• thehackernews.com
• militarnyi.com
• securityweek.com
• kathmandupost.com
• dawn.com
• mofo.com
• indiatimes.com
• taipeitimes.com
• youtube.com
• iiss.org
• asiatimes.com
• chinadiplomacy.org.cn