Best Infosec-Related Long Reads for the Week, 9/9/23

China feeds security flaws to state hacking org, Digital tech reliance makes US military vulnerable, Questions surround software liability policies, Metadata fuels surveillance capitalism, more

Metacurity is pleased to offer our free and paid subscribers this weekly digest of the best long-form infosec-related pieces we couldn’t properly fit into our daily crush of news. So tell us what you think, and feel free to share your favorite long reads via email at info@metacurity.com. We’ll gladly credit you with a hat tip. Happy reading!

Image by Pexels from Pixabay

How China Demands Tech Firms Reveal Hackable Flaws in Their Products

Wired’s Andy Greenberg reports on a new Atlantic Council report regarding a 2021 Chinese law that requires tech companies to report to the government security vulnerabilities within two days of discovery for inclusion in a national vulnerability database, shared with various government organizations, including China's Ministry of State Security, the source of many state-sponsored hacking operations.

Given that patching vulnerabilities in technology products almost always takes far longer than the Chinese law’s two-day disclosure deadline, the Atlantic Cou…