Houlong Security Industry Research Institute Releases 2026 China Cybersecurity Industry Map
The Houlong Security Industry Research Institute has officially released the 2026 Network Security Industry Map, providing a detailed overview of China’s cybersecurity landscape based on extensive industry surveying.
In March 2026 the institute launched the research project to map the full spectrum of the Chinese cybersecurity market, offering guidance for enterprise procurement decisions and vendor expansion strategies. Over several months the team gathered more than 400 valid questionnaires from representative companies that form the core of the domestic industry.
The report observes that AI-driven industrialized cyberattacks have transitioned from theoretical concepts to operational reality. Large-model-powered tools now enable scalable, automated, and low-cost threat campaigns. Attackers are combining data encryption with information theft in evolving multi-extortion schemes, while APIs have emerged as a primary vector for large-scale data breaches. Supply-chain attacks continue to grow in complexity and stealth, allowing risks to propagate rapidly beyond single organizational boundaries.
On the defensive front, AI-enhanced detection and response capabilities are shifting security operations from post-incident remediation to real-time blocking. Zero-trust architectures are moving from pilot projects to widespread deployment, privacy-enhancing computation technologies are enabling secure data circulation, and preparations for quantum-resistant cryptography are accelerating.
The survey identifies a clear competitive advantage for vendors that have deeply integrated AI into their product portfolios. These companies demonstrate stronger customer retention, revenue resilience, and pricing flexibility. At the same time, the traditional “large customer, large project” model is giving way to a “small yet refined, fast and precise” paradigm in which specialized vendors focused on vertical scenarios gain increasing influence.
Three definitive trends are highlighted: AI integration into security products is now an industry consensus and irreversible; the market is moving from scale-based competition to value-based specialization; and China’s cybersecurity sector remains in a sustained growth phase driven by digital transformation, AI proliferation, and international dynamics.
Related articles
Parents Sue Google and Alphabet After 13-Year-Old Discusses Suicide with AI Chatbot on School Chromebook
Parents of a 13-year-old girl from North Carolina have filed a lawsuit against Google and Alphabet, alleging that prolonged interactions with the company's generative AI through a school-issued Chromebook contributed to their daughter's suicidal crisis. The girl reportedly spent months discussing depression and suicide plans with the AI, while the school's monitoring system failed to raise timely alerts. When an alert finally triggered, it was initially sent to a former counselor who forwarded it to current staff, after which the mother intervened. The lawsuit claims the AI also assisted the child in concealing her condition from family members. Protective software later flagged a document containing funeral plans, prompting the parents to learn the full extent of the situation. Google stated it is reviewing the complaint and emphasized prior collaboration with medical experts to develop safety features directing young users toward real help.
Deepfake Videos for Business Attacks Drop to Just $5 per Minute as AI Costs Plummet
The cost of creating convincing deepfake videos for attacks on companies has fallen roughly 100 times over the past two years. A single minute of high-quality fake video can now be produced for as little as $5, compared with several hundred dollars previously. The drop in prices was reported by Russian newspaper Izvestia, which also noted that underground marketplaces now sell ready-made templates that further reduce expenses. Lower prices significantly lower the barrier for criminals to conduct business email compromise and CEO impersonation scams. Experts warn that recognizable faces combined with urgent requests for wire transfers or credential sharing make traditional verification methods less reliable. Organizations are advised to confirm all financial instructions through an independent, pre-established channel rather than relying on video calls alone.
Over a Dozen AI Platforms Breached in One Month for API Keys in LLM-Jacking Operations
Between late September and early November, at least a dozen AI developer platforms were compromised in a coordinated campaign targeting API access tokens rather than customer data. Affected organizations include Andromeda, NVIDIA Brev, CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp, Zeabur, Chainstack, and WorkOS. Attackers exploited third-party components and internal sales applications to reach stored credentials used for AI inference services. The stolen tokens enable LLM-jacking and model distillation activities, with multiple threat groups observed reusing the same credentials shortly after disclosure. The open-source penetration testing framework Artex was used to automate reconnaissance and exploitation, lowering the barrier for less skilled actors. Companies such as Chainstack and WorkOS confirmed the incidents through their own disclosures, highlighting risks in non-core systems that store high-value AI credentials.
NIST Publishes Draft Taxonomy SP 2400-102 for Attacks on AI Agents
The National Institute of Standards and Technology released the first public draft of SP 2400-102 E2026 on 9 November 2026, extending its 2025 machine learning attack taxonomy with a dedicated chapter on AI agents. The document provides a common terminology for attacks targeting task formulation, planning, tool execution, and result interpretation stages. Attack goals include availability disruption through infinite tool calls, integrity violations that alter outputs or trigger unauthorized actions, sensitive data disclosure, and malicious agent misuse. Vectors range from direct user prompt bypasses and supply-chain model poisoning to indirect prompt injection via untrusted documents, persistent memory poisoning, compromised tools, and inter-agent message spoofing. NIST also examines layered defenses combining model-level detection of parasitic instructions with system-level restrictions, tool isolation, and human confirmation for high-impact operations. The draft references OWASP LLM03:2026 Excessive Agency and aligns with Russian standards GOST R 56939-2024 and GOST R 59276-2020 for testing and trust evaluation. Comments are accepted until 18 December 2026 before final publication.