Why the AI-era cyberpocalypse may hit China harder

Chang Che argues that AI has shifted cybersecurity from an era of zero-day scarcity to zero-day abundance, and that China's top-down system is poorly suited to the fast, decentralized patching this requires. One week after the PHP zero-day was disclosed, the US had patched over a quarter of the 14 million exposed services while China had patched 4%, per Censys data. Che traces this to China's 2021 law barring researchers from publicizing or selling zero-days abroad, which cut the incentives behind Western bug bounty ecosystems, and to Nicole Perlroth's view that AI models make hoarded exploits obsolete, spelling the death of NOBUS.