Natto Thoughts

Natto Thoughts

Home
Notes
Archive
Leaderboard
About
Most Popular
View all
China’s Cybersecurity Companies Advancing Offensive Cyber Capabilities Through Attack-Defense Labs
Private-sector attack-defense labs form a core pillar of how China builds, sustains, and operationalizes cyber capability for commercial purposes and…
 • Eugenio Benincasa and Natto Team
A Researcher Came Knocking, and Taught China a Lesson in How to Manage Vulnerabilities -- and Researchers
A TCL TV vulnerability disclosure drove home the message: to protect its economic and political clout, China must heed global vulnerability researchers…
 • Natto Team
Beyond the Aliases: Decoding Chinese Threat Group Attribution and the Human Factor
Examining the overlap between APT27, HAFNIUM, and Silk Typhoon through recent U.S. government disclosures, and why understanding the humans behind the…
 • Natto Team
China’s Vulnerability Research: What’s Different Now?
China’s bug-hunting scene is maturing - more players, bigger prizes, tighter structure, and a growing focus on domestic products, driven by profit…
 • Eugenio Benincasa and Natto Team
Who is Salt Typhoon Really? Unraveling the Attribution Challenge
How overlapping APT groups and Chinese companies complicate attribution in state cyber operations
 • Natto Team
Salt Typhoon: New Joint Advisory Offers a Beacon Through the Storm but Stirs Up New Questions
Analysis of newly identified Salt Typhoon-linked companies casts light on the complex ecosystem of front companies and real businesses supporting…
 • Natto Team
No Ranges, No Bounties, No Contests: Forging Offensive Capabilities in China’s 2000s Hacker Scene
China’s early hacking training grounds weren’t classrooms or hacking contests, but online forums, real-world targets, and freely shared offensive tools…
 • Eugenio Benincasa
Few and Far Between: During China’s Red Hacker Era, Patriotic Hacktivism Was Widespread—Talent Was Not
Inside the small, elite circles that powered China’s massive hacker communities in the late 1990s and 2000s.
 • Eugenio Benincasa
When Privileged Access Falls into the Wrong Hands: Chinese Companies in Microsoft’s MAPP Program
Chinese companies face conflicting pressures between MAPP’s non-disclosure requirements and domestic policies that incentivize or mandate vulnerability…
 • Eugenio Benincasa, Dakota Cary, and Natto Team
Natto Thoughts
Natto Thoughts
Stories, analysis and insights from the intersection of culture, technology, and security.
Recommendations
View all 9
Sinocism
Sinocism
Bill Bishop
The Wayfinder
The Wayfinder
Nina Jankowicz
ChinaTalk
ChinaTalk
Jordan Schneider
Cyber Roundup
Cyber Roundup
Bob Bragg
The Jamestown Foundation
The Jamestown Foundation
The Jamestown Foundation

Natto Thoughts

AboutArchiveRecommendationsSitemap
© 2026 Natto Thoughts · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture