The official WeChat account of the Chinese Embassy in Panama issued a statement responding to accusations of cyber espionage made by the U.S. Ambassador, using colloquialisms such as 'Are we going to stop farming just because we hear the cicadas chirping?'
On October 29, the campaign team for DPP Taipei mayoral candidate Shen Po-yang stated that their official campaign website and a newly launched road adoption site were hit by cyberattacks, with the latter receiving over 70,000 fake entries within an hour. The team has cleared the backdoor programs, updated the system, and strengthened defenses, and the websites have resumed normal operation.
On October 21, Microsoft released a report stating that Storm-0940, a hacking group linked to the Chinese government, has been using the AI tool ARTEX since September to breach Microsoft 365 systems with credentials from the cloud backup application of U.S. IT service provider ConnectWise, attacking hundreds of government, military, semiconductor, and think tank organizations worldwide. In some attacks, high-level cloud privileges were obtained in under three hours. ConnectWise has acknowledged the security incident and is restoring services in phases.
On October 16, 2026, the International Alliance of the Chinese Democratic Party issued a formal protest, accusing the Chinese government and the Xi Jinping criminal group of conducting cyberattacks and account hijacking against them, sparking widespread attention and condemnation both at home and abroad.
Latvian Prime Minister Andris Kulbergs made public remarks, pointing out that the current efforts to counter the propaganda Russia spreads everywhere are insufficient, and warning that modern social media combined with new artificial intelligence technology are easily influencing people's minds. He also mentioned that Ukraine attacked three Yandex centers, which drew attention and discussion on social media.
According to a report by Radio France Internationale, after the United States warned that Fiji had been hacked by Chinese hackers, the Fijian government announced on Wednesday (October 15) that it would establish a cooperative relationship with New Zealand's intelligence agencies, conduct a reassessment of its own relevant institutions, and carry out intelligence sector reforms.
At 22:30 Beijing time on October 14, 2026, user @jielijian posted a tweet stating that the CCP cyber army has continued to attack the core group of the International Alliance of Chinese Democracy, stealing accounts and destroying and wiping out members' information, in an attempt to maliciously report and get accounts banned. The user called on everyone to stay vigilant and not click on unknown links carelessly.
On October 13, 2026, the U.S. Department of Justice announced the dismantling of a spy case involving a North Korean computer farm and indicted 14 people connected to the case. According to the charges, the criminal network spanned 17 U.S. states, and the suspects were charged with wire fraud, money laundering, and identity theft, among other crimes. Of the 14 indicted, 10 are Chinese nationals. The gang operated computer farms through illegal means, seriously threatening U.S. national security.
The U.S. State Department's Rewards for Justice program announced a reward of up to $10 million for information on the identity and whereabouts of hacker Zhang Yu from Shanghai, China, accusing him of alleged cyberattacks and theft of research data.
Six countries including the UK and the US issued a 58-page joint report accusing China's Beijing Yongxin Zhicheng Technology Group of assisting cyberattacks against global institutions and stealing sensitive data; the Chinese embassy in the UK firmly denied the accusations.
On October 7, the Dutch Military Intelligence and Security Service jointly issued a cybersecurity advisory, warning that attacks by Chinese hackers on edge devices such as firewalls and VPN gateways will increase sharply, saying that they use AI to discover vulnerabilities faster, and that Dutch agencies have also been breached multiple times.
On October 7, cybersecurity firm CrowdStrike released an investigation report stating that from late September to early October, multiple financial institutions in South Korea suffered cyberattacks and data breaches. The attackers used the ARTEX tool developed in China in combination with AI models such as DeepSeek and Zhipu GLM, and are suspected to be students at South China University of Technology, after personal information was leaked through exposed Claude session records on a server.
On September 24, the New Zealand National Cyber Security Centre released its annual cyber threat report, stating that China is the most persistent and capable state actor conducting cyber activities in New Zealand among the listed countries. Of the 369 major cyber incidents handled between July 2025 and June 2026, 86 were suspected to be related to state-sponsored actors, and the China-backed "Salt Typhoon" organization was named.
On September 15, Tahir Imin, founder of the Uyghur Times, testified at a U.S. Congressional hearing, revealing that the media outlet had been subjected to massive traffic attacks and harassment by spoofed websites. An Anthropic report indicated that actors used Claude AI to orchestrate smear campaigns and reporting against the outlet's journalists, and exploited the vulnerabilities of the families of Uyghurs living abroad to issue threats.
On September 16, The Wall Street Journal disclosed that Zhengzhou Zhirong Network Technology Company used AI technology to organize stolen foreign government classified data and sold intelligence to the Chinese public (Public Security) organs, involving secrets of countries such as Russia, the Philippines, Pakistan, and the Vatican.