← All talks

Vulnerability Reporting Mandates in China #shorts

BSides Frankfurt0:5746 viewsPublished 2026-01Watch on YouTube ↗
About this talk
Since 2018, Chinese cybersecurity competition participants must report vulnerabilities to the Ministry of Industry within 48 hours. Proof of concept also subject to regulations. #bsidesfrankfurt #bsides #bsidesfra #AlixiaRutayisire #QuoIntelligence #VulnerabilityReporting
Show transcript [en]

So you have a loop here that begins with private cyber security company and research entities that organize um uh capture the flag competition uh and they discover vulnerabilities uh or they develop their their proof of concept. And since 2018 uh the participants to this uh competition they are legally required to submit any newly discovered vulnerability exploitation technique to the ministry of industry and information technology uh before public dissemination and since uh 2021 that any discovery uh of uh vulnerability must be reported to this ministry within 48 hours.