China’s Zero-Day Pipeline: From Discovery to Deployment

This Recorded Future-style intelligence assessment details how Chinese state laws, institutions, competitions, and private-sector relationships enable centralized discovery, withholding, and operationalization of software vulnerabilities, creating a strategic stockpile of zero-day and n-day exploits; it documents observed exploitation (Ivanti, Trimble), discusses military integration and pre-positioning risks to critical infrastructure and supply chains, and recommends assume-breach, zero-trust, prioritized patching, and enhanced detection controls.