China Internet Security Association recommends systematic risk assessment of product security; Intel (INTC.US) falls more than 2% before the market opens
China Cyber Security Association issued an article titled "Frequent Vulnerabilities and High Failure Rates Should Be Systematically Checked for Cybersecurity Risks of Intel Products" and suggested conducting a cybersecurity review of Intel's (INTC.US) products sold in China to effectively safeguard national security and the legitimate rights and interests of Chinese consumers. Intel's shares fell 2.03% before the market opened to US$22.20.
China Cyber Security Association is a national, industry, and non-profit organization composed of domestic institutions, enterprises, and individuals engaged in the network space security-related industry, education, research, and application.
The organization has close ties with the Chinese government, and its accusations may trigger a security review by the powerful national internet information office (CAC), China's cybersecurity regulator.
The association said, "We suggest conducting a cybersecurity review of Intel's products sold in China to effectively safeguard national security and the legitimate rights and interests of Chinese consumers."
The association mentioned four security issues of Intel: frequent security vulnerabilities; poor reliability, ignoring user complaints; pretending to be remote management, actually monitoring users; and secretly setting backdoors, endangering network and information security.
The association said that Intel's global annual revenue of more than US$50 billion reportedly has nearly a quarter from the Chinese market. In 2021, Intel's CPUs accounted for about 77% of the domestic desktop market and about 81% of the notebook market; in 2022, Intel's x86 server market share in China was about 91%.
Last year, the Cyberspace Administration of China (CAC) banned domestic critical infrastructure operators from purchasing products produced by Micron Technology (MU.US), an American memory chip manufacturer, after determining that its products did not pass a cybersecurity review.