[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMmSVtcNSE1NnMuc-HhEHA19d3kXdut23aSfO7RuIIvk":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":60},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"d9430f66-5a3d-466c-9c13-c38a9a85cd97","Huawei says it’s made a 100 percent Chinese PC","huawei-says-it-s-made-a-100-percent-chinese-pc-ae25d2","PLUS: Japan declares infosec emergency; Apple’s makes biggest school Mac sale, ever, anywhere, in the Philippines; And more!","Huawei has launched the Qingyun HM650, a desktop PC reportedly made entirely from Chinese components, featuring its Kirin X90 processor and HarmonyOS. This move aligns with Beijing's directive for government entities to switch from Wintel systems to local alternatives, posing a challenge to Western chip manufacturers. Separately, Japan has allocated ¥10 billion ($63 million) for emergency cybersecurity measures following a series of disruptive cyberattacks, while Vietnam has announced its first domestically designed security chip for secure USB storage.","Huawei unveils a 100% Chinese-made PC, Japan announces cyber-defense funding, and Vietnam develops a homegrown security","https:\u002F\u002Fwww.theregister.com\u002Fsystems\u002F2026\u002F11\u002F09\u002Fhuawei-says-its-made-a-100-percent-chinese-pc\u002F5308335","https:\u002F\u002Fimage.theregister.com\u002F?imageId=5308342&width=800","2026-11-09T02:14:17+00:00","2026-11-09T03:00:25.72958+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Qingyun HM650","product",{"name":21,"type":22},"Huawei","vendor",{"name":24,"type":25},"HarmonyOS","technology",{"name":27,"type":22},"Intel",{"name":29,"type":22},"AMD",{"name":31,"type":22},"Qualcomm","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":32,"icon":34,"name":35,"slug":36},null,"Nation-state","nation-state",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,27,29],{"controls":58,"vendors":59},[],[],{"slug":61,"title":62,"body":63,"framework_refs":64,"framework_notes":72},"huaweis-all-chinese-pc-signals-deepening-tech-supply-chain-fragmentation","Huawei's All-Chinese PC Signals Deepening Tech Supply Chain Fragmentation","Huawei's launch of a fully domestically sourced PC reflects a deliberate geopolitical strategy by Beijing to eliminate dependency on Western technology suppliers in government systems, fundamentally reshaping global supply chain risk calculus. This kind of state-mandated technology substitution creates new and less-audited supply chains where hardware integrity, firmware transparency, and security vetting processes may be immature or opaque. Organizations relying on government or partner entities that adopt such platforms face increased risk of encountering unvetted components or software stacks with unknown vulnerability profiles. The parallel cybersecurity investments by Japan and Vietnam further underscore that hardware sovereignty and supply chain trust are now front-line national security concerns. Security teams must treat vendor nationality, component provenance, and OS ecosystem maturity as first-class risk factors in procurement decisions.",[65,66,67,68,69,70,71],"CIS Control 17: Incident Response Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","DORA Article 9","CIS Control 14: Security Awareness and Skills Training",{"DORA Article 9":73,"NIS2 Article 21(2)(b)":74,"NIST SP 800-53 SI-2: Flaw Remediation":75,"CIS Control 17: Incident Response Management":76,"CIS Control 14: Security Awareness and Skills Training":77,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":78,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":79},"Financial entities subject to DORA must assess ICT third-party risk rigorously; adopting or interfacing with government partners using geopolitically directed hardware platforms introduces novel concentration and provenance risks that DORA's supply chain provisions are designed to address.","NIS2 explicitly mandates supply chain security measures for essential entities, directly applicable to organisations evaluating whether to integrate or interact with partners using state-directed, single-source hardware and OS stacks.","Platforms built on novel, domestically sourced components with immature patch ecosystems pose flaw remediation risks; this control requires organisations to track and remediate vulnerabilities in a timely manner across all deployed software and firmware.","Japan's emergency ¥10 billion cybersecurity response highlights the cost of reactive postures; a mature incident response plan tied to supply chain threat scenarios would enable faster, more coordinated reactions to state-linked disruptions.","Security and procurement teams need targeted training on evaluating geopolitical supply chain risks and recognising the security implications of state-mandated technology substitution programs like China's Xinchuang initiative.","Adopting a new OS and processor ecosystem (HarmonyOS\u002FKirin X90) with limited public vulnerability disclosure history requires a structured process for identifying and managing technical vulnerabilities specific to those platforms.","Introducing a new hardware and OS platform with unknown identity and access control primitives requires validation that authentication mechanisms meet organisational security baselines before deployment in sensitive environments."]