Indo-Pacific Studies Center
Strategic Brief · Issue #001
Indo-Pacific Strategic Dynamics
Technology & Digital Competition — July 2026
RC01 ChinaRC05 Cross-StraitRC09 Cyber & Technology
Key Development
July 2026 is an extreme outlier for this cluster: the magnitude 4–5 share hit 34.6%, at the 95th percentile of the 19-month baseline and well above the 25.1% mean, driven by simultaneous structural moves in semiconductor supply-chain hardening, Chinese AI governance counter-positioning, and OT infrastructure attacks.
Technology and digital competition has become the primary non-kinetic arena of US–China strategic rivalry in the Indo-Pacific, with semiconductor access, AI governance norms, and critical infrastructure resilience each functioning as instruments of geopolitical leverage. The July 2026 period is notable because developments in all three dimensions are occurring concurrently and reinforcing one another, compressing the decision space for middle-power actors in the region.
This Period Against Its Own History
19 months · 2025-01 to 2026-07
· 52 signals this period against a mean of 40
(range 25–54)
Magnitude 4–5
34.6%
mean 25.1% · p95
highest on record
Magnitude 5
7.7%
mean 4.9% · p79
above normal
Escalation
9.6%
mean 21.1% · p16
below normal
Sub-threshold
7.7%
mean 7.9% · p58
inside normal range
Percentile is this period's rank among
19 months of the same cluster on the same filters. Most months sit inside
the normal range — that is the expected result, and it is information.
Coverage
TechnologyDigital.AIGovernanceAndDataSovereigntyTechnologyDigital.CriticalInfrastructureTechnologyDigital.CyberOperationsAndCapacityTechnologyDigital.DigitalInfrastructureTechnologyDigital.SemiconductorAndCompute
RC01 China
15
signals · max mag 5
TechnologyDigitalEcosystems
RC05 Cross-Strait
1
signal · max mag 3
GreyZoneActivity
RC09 Cyber & Technology
36
signals · max mag 5
AIGovernanceDataSovereignty · CriticalInfrastructureOT · CyberCapacityDiplomacy
This Period in Context
Share of each month's signals assessed at the top of the magnitude scale. A within-month rate, not a count — counts rise when a research centre is ingested, rates do not. January–March 2025 are shaded: magnitude 4–5 sits at 13.7–14.8% there against 22–27% for every month after, which is an instrument change rather than a quiet quarter, so those months are excluded from the mean.
SubThresholdDeniable
Share of each month's signals coded SubThreshold or Deniable. The remainder — around 92% — is Overt and is not drawn. Mode records how an action was conducted, not what it was about, so this is a measure of grey-zone tempo rather than of any one domain.
this clusterwhole corpus
Magnitude is computed from these three components, not coded directly. Reading them separately shows whether a cluster scores high because its signals are hard to undo (reversibility), because they touch many parties (scope), or because they are without precedent (novelty). Bars are normalised to each component's ceiling so their lengths compare; the printed figure is the raw mean.
Key Judgements
Evidentiary base — computed: 52 signals ·
46 unique sources · 62% official documents
· confidence Medium 35 · Low 17
- This period is a genuine outlier: the magnitude 4–5 share of 34.6% sits at the 95th percentile of the cluster's 19-month baseline, well above the mean of 25.1%, and the escalation share of 9.6% simultaneously fell to the 16th percentile, indicating that high-magnitude activity is concentrated in structural and institutional moves rather than in kinetic or confrontational signals — a pattern more consistent with hardening than with crisis.Drawn entirely from the HISTORICAL BASELINE block: 34.6% vs. 25.1% mean (percentile 95) for magnitude 4–5 share; 9.6% vs. 21.1% mean (percentile 16) for escalation share. No signal-level count required for this baseline comparison.
- China's founding of WAICO with reported membership of 29 states, combined with Xi Jinping's first-ever WAIC keynote and the Chengdu APEC AI Statement chaired by China, reflects an assessed Chinese strategy to capture multilateral AI governance architecture ahead of Western-led alternatives — though the actual normative weight of these institutions remains to be tested.Three RC01 signals: WAICO founding (mag 5, conf Low, MediaReport); WAIC 2026 / Xi keynote (mag 3, conf Medium, OfficialDocument); APEC Chengdu Statement (mag 3, conf Medium, OfficialDocument). WAICO membership figure of 29 states attributed to the signal description; conf Low on WAICO signal requires hedge on normative weight.
- The US semiconductor supply-chain hardening is assessed as having crossed a structural threshold this period, with complementary actions across chip-component bans, export-control reclassification, submarine cable licensing, and domestic fab construction occurring within the same 30-day window — though whether these measures achieve durable technology separation from Chinese supply chains is contestable.Five RC09 signals: FCC component-part loophole closure (mag 5, conf Low); BIS UAE reclassification (mag 4, conf Medium); FCC submarine cable blanket licence / foreign adversary exclusion (mag 4, conf Medium); FCC First R&O cable landing provisions effective (mag 4, conf Medium); Micron Clay NY first concrete (mag 5, conf Low). All five in July 2026 window.
- The coordinated OT cyberattack on water systems across more than 30 Minnesota communities and utilities in at least seven US states, combined with the Unit 42 report on CL-STA-1062 targeting Southeast Asian electricity and water utilities, suggests that industrial control system exploitation against critical infrastructure is intensifying across multiple actors simultaneously — though attribution confidence for both incidents is limited.Two signals: Minnesota water/wastewater OT attack (mag 4, conf Medium, OfficialDocument; community and state counts attributed to signal description); CL-STA-1062 Southeast Asia utility targeting (mag 4, conf Medium, IndustryReport). Attribution for Minnesota not specified in signal; CL-STA-1062 described as 'China-linked' by Unit 42, not confirmed.
- The escalation share falling to the 16th percentile of the 19-month baseline, despite a record-high magnitude share, is analytically significant: it suggests the dominant mode of competition this period is structural positioning — regulatory, financial, institutional — rather than adversarial action, which may understate long-term strategic risk to decision-makers focused on near-term threat indicators.HISTORICAL BASELINE: escalation share 9.6%, 19-month mean 21.1%, percentile 16. Magnitude 4–5 share 34.6%, percentile 95. Combination is the analytical finding; no additional signal count required.
Judgements are assessments, not events. Each is contestable; the
italic note states the basis claimed for it. The evidentiary line above is computed from
the signal set and is not the analyst's characterisation of it.
Strategic Synthesis
AI governance is now contested multilateral terrain
China moved in July 2026 to institutionalise its AI governance preferences at multiple levels simultaneously. The founding of WAICO — reported at 29 founding states including Russia, Indonesia, Brazil, and Pakistan, headquartered in Shanghai — creates a rival multilateral architecture to Western-led AI governance forums, with the UN Secretary-General's reported attendance lending it visible international legitimacy. The APEC Chengdu Statement, chaired by China's Minister of Industry and Information Technology, produced a ministerial-level AI document from within an existing multilateral body. Xi Jinping's first-ever WAIC keynote further elevated the domestic and international profile of China's AI positioning. These three moves — a new institution, a ministerial statement within an existing body, and a high-level political signal — occurred within eight days, suggesting coordinated rather than coincidental timing. Southeast Asian states are simultaneously advancing their own domestic AI regulation (Indonesia's draft Presidential Regulation, Singapore's GenAI personal data guidelines, Vietnam's data law), creating a window in which external governance frameworks may shape national approaches before domestic architectures are consolidated.
Semiconductor walls are being built simultaneously
The July 2026 signal set contains parallel and mutually reinforcing moves by the US and China to harden their respective semiconductor positions. On the US side: Micron reported pouring first concrete at the Clay New York megafab, described in the signal as the largest semiconductor facility in US history with reported investment raised to more than USD 250 billion; Micron announced a reported USD 500 million financing and 10-year wafer supply agreement with GlobalWafers' Texas facility; and TSMC's Taichung Phase II A14 fab was confirmed significantly ahead of schedule with foundation piling largely complete and steel structure phase begun on the first two fabs. On the China side: CXMT listed on the STAR Market raising a reported RMB 57.92 billion (USD 8.6 billion), reported as the largest semiconductor listing ever on that exchange, with shares reported at a 466% debut surge and a reported 7.67% global DRAM market share in 2025. Beijing's reported discussions about restricting overseas access to frontier Chinese AI models — assessed by Reuters as deniable — add a potential export-control dimension to China's own supply separation. The simultaneity of these moves on both sides means the window for economic interdependence-based deterrence in semiconductors is assessed as narrowing.
OT infrastructure is the active attack surface
Two distinct clusters of industrial control system intrusion activity emerged in July 2026, pointing to a broadening of the OT attack surface beyond any single actor or target set. The coordinated attack on water systems — reported across more than 30 Minnesota communities and utilities in at least seven US states — reportedly exploited internet-exposed Rockwell Automation PLCs using a known CVE (CVE-2021-22681), locking operators out of their own systems. CISA's updated advisory AA26-097A confirmed Iranian-affiliated exploitation of Schneider Electric and Siemens PLCs in addition to previously identified systems. Separately, Unit 42's report on CL-STA-1062 documented more than 10 assessed attacks on electricity and water utility providers in multiple unnamed Southeast Asian countries, deploying a novel backdoor designated TinyRCT. The concurrent activation of three actor sets — the Minnesota attackers, Iranian-affiliated operators, and a China-linked group — against water and energy systems in both the US and Southeast Asia within a single month indicates that OT exploitation has moved from episodic to routine practice across multiple adversary portfolios, a finding reinforced by Singapore's CSA announcing an updated Critical Information Infrastructure Code of Practice in the same window.
Submarine cable architecture is fragmenting by jurisdiction
Three distinct cable-related regulatory and construction signals in July 2026 collectively indicate that the physical internet infrastructure layer is being restructured along geopolitical lines. The FCC's Second Report and Order establishing blanket licensing for submarine line terminal equipment — explicitly excluding foreign-adversary-presumed entities — and the separately effective cable landing licence prior-approval provisions create a US regulatory perimeter around cable infrastructure. China Mobile's reported commercial launch of the SEA-H2X cable (reported at approximately 5,746 km, routing through the Philippines to Hainan and Hong Kong) extends Chinese-operated cable infrastructure into Southeast Asia. The I-2SEA cable consortium — Lightstorm, Microsoft, Singtel, and Tata Communications — signed contracts for a cable routing from India to Southeast Asia. Australia simultaneously confirmed the Pukpuk Digital Connectivity Initiative to expand PNG's international submarine cable connectivity. These moves are not symmetrical: the US regulatory actions are restrictive and exclusionary, while the Chinese, Indian, and Australian moves are constructive and network-expanding. The combined effect is an accelerating bifurcation of undersea cable infrastructure by trusted-vendor criteria, with Southeast Asia and the Pacific as the primary contested terrain.
Watch Items
- WAICO operational activation: monitor whether WAICO convenes a founding plenary or issues binding governance instruments within 90 days; if it does, this would confirm it as an active normative institution rather than a declaratory vehicle, materially shifting the AI governance landscape for Southeast Asian states currently drafting national AI regulations.
- CXMT technology generation: monitor whether CXMT publicly discloses a transition from DDR4/LPDDR4 to DDR5/HBM production timelines in its post-IPO disclosures; if confirmed, this would indicate that the reported USD 8.6 billion raised is being directed at closing the technology gap with Samsung and SK Hynix rather than consolidating existing node capacity.
- Minnesota water attack attribution: monitor whether CISA or FBI issue a formal attribution advisory for the coordinated PLC attack on water systems in at least seven US states; attribution to any specific state or non-state actor would determine whether this event is incorporated into the US critical infrastructure protection regulatory response or treated as criminal.
- CL-STA-1062 victim disclosure: monitor whether any Southeast Asian government or state-owned energy operator publicly acknowledges compromise by the TinyRCT backdoor reported by Unit 42; official acknowledgement would be the first public confirmation of successful Chinese-linked OT intrusion against named Southeast Asian critical infrastructure and would likely accelerate CSA and ASEAN-level regulatory responses.
Research Centre Contributions
RC01 China
RC01's 15 signals this period are dominated by Chinese structural moves across AI governance (WAICO founding, APEC Chengdu Statement, CAC anthropomorphic AI measures entering force, reported frontier-model export control discussions) and semiconductor capital formation (CXMT STAR Market listing, Huawei Atlas 950 SuperPoD debut at WAIC), revealing a coordinated Chinese effort to build parallel institutional and industrial structures rather than to react to US measures. The RC01 signals also capture non-China activity — India-Japan semiconductor and AI declarations, Taiwan's Phoenix office opening, Super Micro export investigation — indicating that third-party states are actively repositioning around the US-China divide rather than remaining neutral.
RC05 Cross-Strait
RC05 contributed a single signal this period — the Taiwan prosecutors' deferred prosecution of two executives linked to a PRC social-engineering network renting Taiwan LINE accounts to a Xiamen-linked entity — which, while low in volume, is consistent with the cluster's documented pattern of Chinese cyberespionage activity targeting Taiwan through commercial proxies rather than direct state action. The thin RC05 coverage means Cross-Strait technology competition dynamics are likely underrepresented in this brief, and the single deniable signal should not be read as an indicator of reduced activity.
RC09 Cyber & Technology
RC09's 36 signals — the dominant source for this cluster — reveal three simultaneous structural developments: US regulatory hardening across spectrum, cable, and component-supply dimensions (FCC component ban, cable licensing, spectrum auction, space modernisation); active OT intrusion campaigns against water and energy infrastructure in both the US and Southeast Asia; and a dense layer of capacity-building and norm-setting activity across the Pacific and ASEAN (Pacific Cyber Week, ACICE Digital Defence Symposium, Counter Ransomware Initiative, Singapore ADMM cyber-norms initiatives). The combination of offensive intrusion signals and defensive institutional signals within the same period, all from RC09, reinforces the assessment that competition in this cluster is occurring across all layers — physical, regulatory, and operational — simultaneously.
1 Jul 2026
RC01
XPHOR Silicon Photonics STAR Market IPO Filing Accepted
TechnologyDigital.SemiconductorAndCompute
ObsThe Shanghai Stock Exchange disclosed on 1 July 2026 that it had accepted the STAR Market IPO filing of XPHOR, a Shanghai-based silicon photonics company. XPHOR plans to raise 2.43 billion yuan (~USD 357.75 million) to fund capacity expansion for silicon photonic chips needed by AI computing and data centres, R&D for next-generation silicon photonic products, and construction of an in-house R&D hub. The filing is part of a broader 2026 IPO acceleration trend driven by AI computing demand and China's push for technological self-reliance.
AssessmentThe XPHOR IPO filing represents a specific instance of China's accelerating state-backed capital mobilisation into next-generation chip subsectors. Silicon photonics is a dual-use technology with significant implications for high-speed data centre interconnects and telecommunications infrastructure; its domestic industrialisation reduces China's dependency on foreign optical integration components and aligns with the 15th Five-Year Plan's equipment localisation goals.
1 Jul 2026
RC09
AID-CLOUD
TechnologyDigital.AIGovernanceAndDataSovereignty
SoutheastAsia
ObsSingapore Ministry of Digital Development and Information (MDDI) and IMDA opened public consultation on draft Digital Infrastructure Bill (DIB) on 1 July 2026; consultation closed 22 July 2026. Bill introduces two new licensing regimes: a Major Foundational Digital Infrastructure (FDI) licence mandatory for third-party co-location/cloud data centres ≥10 MW critical IT load and major IaaS/PaaS providers earning ≥S$100m/year in Singapore; and a DC Operator licence for data centres ≥3 MW with mandatory PUE requirements. Non-compliance penalties up to S$1 million or 10% of Singapore annual turnover. Draft bill has extraterritorial reach. This is the first time Singapore brings the compute layer under hard-law regulation. Date of consultation opening: 1/7/2026.
AssessmentStructurally significant: if enacted, the DIB is Singapore's first statutory instrument regulating the compute-infrastructure layer, pulling AI data centres and cloud hyperscalers (AWS, Azure, Google Cloud) into a licensing regime. Extraterritorial scope affects all major global cloud providers serving Singapore. Consultation stage only — magnitude capped at 4 pending enactment — but the draft text represents a qualitative escalation in Singapore's digital infrastructure governance and a direct capacity-display signal to regional digital dependency map.
1 Jul 2026
RC09
AID-LOCAL
TechnologyDigital.AIGovernanceAndDataSovereignty
SoutheastAsia
ObsVietnam's Law on Cybersecurity No. 116/2025/QH15 entered into force on 1 July 2026, replacing both the Law on Network Information Security 2015 and the Cybersecurity Law 2018. Enacted by the National Assembly on 10 December 2025, the law establishes a unified cybersecurity and network information security framework with strengthened obligations on platforms and AI-generated content, prohibits use of AI to forge images/voices/videos for illegal purposes, and requires covered service providers to provide user information to Ministry of Public Security (A05) within 24 hours on request (3 hours in urgent cases). Extraterritorial effect applies to foreign individuals and organisations involved in cybersecurity activities or products in Vietnam. Date in force: 1/7/2026.
AssessmentBinding instrument with extraterritorial reach and platform-level obligations — a structural shift that tightens the Ministry of Public Security's legal grip on foreign cloud and platform operators. Entry into force consolidates Vietnam's sequential layering of data governance statutes (Law on Data Jul 2025, PDPL Jan 2026, Cybersecurity Law Jul 2026) into an increasingly restrictive cross-border data regime. Represents a structural shift rather than symbolic positioning.
2 Jul 2026
RC01
India-Japan economic security declaration targets semiconductors and ICT
TechnologyDigital.SemiconductorAndCompute
NortheastAsia
Japan → India
ObsIndia and Japan adopted a joint declaration on economic security promoting project-based collaboration in semiconductors, critical minerals, ICT including AI, clean energy and pharmaceuticals.
AssessmentThe declaration elevates semiconductor and digital supply-chain resilience into bilateral economic-security strategy and reduces dependence on China-centred technology ecosystems.
2 Jul 2026
RC01
India-Japan AI cooperation elevated to strategic R&D partnership
TechnologyDigital.AIGovernanceAndDataSovereignty
NortheastAsia
Japan → India
ObsIndia and Japan issued a joint statement on AI cooperation to elevate the relationship into a strategic research and development partnership across the AI stack for safe, secure, trusted, inclusive and human-centric AI.
AssessmentThe statement builds an allied AI-development pathway outside the Chinese ecosystem and supports standards alignment between two major Indo-Pacific technology actors.
2 Jul 2026
RC01
IndiaAI and Japan METI link AI compute and project support
TechnologyDigital.SemiconductorAndCompute
NortheastAsia
Japan → India
ObsIndiaAI Mission and Japan METI agreed to cooperate through B2B matchmaking, webinars on AI policies and challenges, and support for joint projects through access to computing resources under IndiaAI and GENIAC.
AssessmentThe arrangement adds operational depth to India-Japan AI cooperation by linking firms, policy exchanges and compute access in a non-Chinese innovation channel.
2 Jul 2026
RC01
India-Japan internet registry cooperation advances IPv6 and security
TechnologyDigital.DigitalInfrastructure
NortheastAsia
Japan → India
ObsIndia's National Internet Exchange and Japan Network Information Center signed a memorandum to cooperate on national internet registry operations, IPv6 adoption, internet security improvements, capacity building and internet governance exchanges.
AssessmentThe memorandum strengthens trusted digital infrastructure cooperation between India and Japan and modestly diversifies technical governance away from China-centred platform and standards influence.
2 Jul 2026
RC01
Taiwan probe targets alleged AI server exports to China
TechnologyDigital.SemiconductorAndCompute
TaiwanStrait
China → Taiwan
ObsSuper Micro said two Taiwan employees were detained and two released on bail after Taiwanese prosecutors investigated alleged illegal exports of advanced AI servers containing Nvidia chips to China.
AssessmentThe investigation shows Taiwan enforcing controls around AI server supply chains and reducing pathways for restricted US-linked compute hardware to reach Chinese end users.
2 Jul 2026
RC01
Chinese GLM-5.2 model gains global developer traction
TechnologyDigital.AIGovernanceAndDataSovereignty
ExtraRegional
China → US
ObsReuters reported that Z.ai's inexpensive GLM-5.2 model was gaining Western developer interest and approaching leading US model performance at lower cost. (using publication date as proxy)
AssessmentThe uptake indicates Chinese AI models can compete internationally despite chip controls, expanding China's influence over global developer ecosystems and open-model adoption pathways.
2 Jul 2026
RC09
CBL-BUILD
TechnologyDigital.DigitalInfrastructure
India → ASEAN
ObsOn 2 July 2026 in Hyderabad India a consortium comprising Lightstorm (majority owner) Microsoft Singtel and Tata Communications officially signed contracts to build the India-Southeast Asia (I-2SEA) submarine cable system. NEC Corporation was simultaneously announced as system supplier and ASEAN Cableship Pte Ltd as marine installation partner. The cable will extend approximately 3600 km connecting dual landings in India (Machilipatnam and South Chennai) with Malaysia (Kuala Lumpur) and Singapore. I-2SEA is explicitly designed for AI and hyperscaler workloads and is targeted for Ready-for-Service in Q4 2029. The corridor bypasses HMN Technologies (formerly Huawei Marine) entirely; NEC as vendor and ASEAN Cableship as installer constitute a trusted-vendor supply chain consistent with Quad Cable Connectivity and Resilience Program objectives. No landing permits or regulatory approvals were announced at contract signing — permit filings to DoT India IMDA Singapore and MCMC Malaysia are expected subsequently.
AssessmentVendor selection of NEC over HMN Technologies and majority control by Singapore/India/US-aligned consortium (Lightstorm/Singtel/Microsoft/Tata) represents a material de-risking of the India–Southeast Asia corridor. The Malacca/Singapore chokepoint interlock is directly addressed: both Singapore and Malaysia landings lie on or near the Malacca corridor. The system's AI-workload orientation signals a first-mover infrastructure posture linking India's GPU clusters to Singapore's cloud hub. Landing permit status is the critical outstanding variable — if Indian DoT or IMDA introduce delays this would constitute a separate CBL-PERMIT signal. Confidence High per official NEC press release and Lightstorm announcement.
3 Jul 2026
RC01
Taiwan opens Phoenix office to anchor semiconductor corridor
TechnologyDigital.SemiconductorAndCompute
TaiwanStrait
Taiwan → US
ObsTaiwan announced it would establish a Taipei Economic and Cultural Office in Phoenix to support Taiwanese businesses and promote cooperation in trade, technology, education and supply chains around Arizona's semiconductor cluster.
AssessmentThe office deepens Taiwan-US semiconductor ecosystem integration and supports resilient technology supply chains outside China's political and industrial orbit.
5 Jul 2026
RC09
CRI-INTRUDE
TechnologyDigital.CriticalInfrastructure
SoutheastAsia
China
ObsPalo Alto Networks Unit 42 reported on 5 July 2026 that China-linked threat actor CL-STA-1062 (also tracked as UAT-7237) has successfully targeted electricity and water utility providers in multiple Southeast Asian countries deploying a novel backdoor dubbed TinyRCT. Unit 42 investigated more than 10 attacks; at least three critical infrastructure entities including two state-owned energy organisations in one unnamed SEA country were compromised. The lightweight C# backdoor enables remote command execution, file exfiltration, screenshot capture, and self-deletion with anti-forensics. In some cases the actor stopped after gaining access and fingerprinting the environment; in others intrusion chains spanned from initial access to full exfiltration pivoting between government entities.
AssessmentUnit 42 assessed with high confidence that CL-STA-1062 shares overlaps with Cisco Talos-tracked UAT-7237; vendor confidence language: 'high confidence' overlap assessment. Campaign targeting state-owned energy and water entities across SEA indicates strategic pre-positioning consistent with PRC intelligence collection and disruption preparation. No CERT or operator confirmation of OT layer compromise published; confidence capped at Medium per corroboration rule.
7 Jul 2026
RC01
Beijing weighs controls on overseas access to frontier AI models
TechnologyDigital.AIGovernanceAndDataSovereignty
ExtraRegional
China
ObsReuters reported that Chinese authorities had held meetings with major AI firms about restricting overseas access to the most advanced Chinese AI models and potentially treating leaks as national-security matters. (using publication date as proxy)
AssessmentThe signal shows Beijing considering AI-model access as a strategic control point, balancing global influence from Chinese models against fears of foreign exploitation and technology leakage.
7 Jul 2026
RC01
FCC blocks Chinese-linked telecom services firm
TechnologyDigital.DigitalInfrastructure
ExtraRegional
China
ObsThe FCC denied Digitalsystem Technology permission to provide international telecom services and placed it on a national-security risk list, citing Chinese ownership links and partnerships with Chinese telecom operators.
AssessmentThe decision extends US technology decoupling into telecom-service authorisation and reduces Chinese-linked access to international communications infrastructure.
7 Jul 2026
RC05
PRC Cyberespionage Social-Engineering Network Charged in Taiwan
TechnologyDigital.CyberOperationsAndCapacity
TaiwanStrait
China → Taiwan
ObsTaipei City Investigation Office issued deferred prosecution orders on 7 July against two executives of local firm Abigail — Li Hualun and Chen Mengsen — for renting Taiwan mobile-registered LINE accounts to Xiamen Empress Information Technology Co. Ltd. allegedly linked to China's cyber army. The accounts enabled Chinese operators to impersonate journalists and conduct social-engineering attacks against Taiwanese officials scholars and NGO workers. The ICIJ and Citizen Lab's Citizen Lab had previously documented the campaign as GLITTER CARP/SEQUIN CARP operations. Malware disguised as encrypted communications software was also deployed.
AssessmentThis case reveals a maturing hybrid model: PRC cyber operators sub-contracting to Taiwan-resident facilitators to launder attribution. Targeting politicians academics and NGO workers serves dual objectives — intelligence collection and suppression of pro-Taiwan civil society voices. The timing ahead of November 2026 local elections amplifies the influence-operation risk. Confidence is high given corroborating ICIJ and Citizen Lab technical attribution.
7 Jul 2026
RC09
CRI-INTRUDE
TechnologyDigital.CriticalInfrastructure
NortheastAsia
ObsOn 7 July 2026 KDDI Corporation confirmed that attackers exploited a zero-day vulnerability in third-party email platform software (vendor and CVE not yet publicly named) to breach a shared email infrastructure platform serving six Japanese ISPs — KDDI au one net, STNet, JCOM, Chubu Telecommunications, NIFTY, and BIGLOBE. Breach date was 16 May 2026; KDDI detected and blocked access on 17 June 2026. Forensic investigation confirmed exposure of 12.2 million email addresses and 7.6 million passwords. KDDI reported the incident to Japan's Ministry of Internal Affairs and Communications. No evidence of system access beyond the exploited vulnerability; no malware deployment confirmed. No attribution to known threat actor.
AssessmentDisclosure of a zero-day without a CVE number or named vendor is analytically unusual and limits defenders. KDDI's telecom infrastructure sits at the heart of Japanese digital connectivity; shared ISP platform architecture means a single exploit achieved multi-operator exposure. No threat actor attribution available at time of publication. Magnitude scored 4 (High) on the basis of scale — 12.2 million credentials exposed across national telecom infrastructure — though service availability was not degraded.
8 Jul 2026
RC09
CBL-PERMIT
TechnologyDigital.DigitalInfrastructure
ObsOn 8 July 2026 the FCC announced via Federal Register (DA 26-684 / 91 Fed. Reg. 42137) that the remaining provisions of its First Report and Order on Submarine Cable Landing License Rules — held pending OMB PRA approval — became effective. These provisions include mandatory prior-approval and notification requirements for cable landing licensees that become or propose to become foreign adversary-controlled (47 CFR 1.70009) as well as updated application and definitional requirements. The rules constitute the first comprehensive overhaul of US submarine cable licensing in over 25 years and presumptively preclude landing license grants to entities owned by or subject to the direction of a foreign adversary including China. Entities owning or operating SLTE on US-connected cables — including Indo-Pacific trans-Pacific systems — are now brought within this licensing framework.
AssessmentThis effective-date announcement operationalises the structural exclusion of Chinese entities from US-connected trans-Pacific cable infrastructure. For Indo-Pacific cable systems with US termini (e.g. Pacific Light Cable Network TGN-Pacific Unity FASTER HKA and others transiting the Luzon/Bashi and trans-Pacific corridors) the practical effect is that any Chinese-linked ownership or SLTE operation requires FCC pre-approval or faces presumptive denial. The 8 July effective date coincides with the ongoing SEA-H2X commercial launch (see RC09WSA-2026-07-006) and the I-2SEA build announcement creating a clear bifurcation of the Indo-Pacific cable market along trusted/non-trusted vendor lines. Confidence High per Federal Register official document.
9 Jul 2026
RC09
CMP-CAPEX
TechnologyDigital.SemiconductorAndCompute
ObsMicron poured first concrete at its Clay New York $100B semiconductor megafab on 9 July 2026 — more than one quarter ahead of the original schedule. The milestone marks transition from site preparation to vertical construction on what will be the largest semiconductor facility in US history with up to four fabs planned. Simultaneously Micron raised its total planned US investment from $200B to more than $250B through 2035. The campus targets DRAM and HBM memory production. First wafer output at Micron's Idaho plants is expected mid-2027 and late 2028. Governor Hochul described it as the largest private investment in New York State history. CHIPS Act grants underpin the investment.
Assessment"Largest private investment in New York State history" per Governor Hochul. Provides a US-domiciled DRAM/HBM source that reduces dependence on Korean and Taiwanese memory supply transiting Taiwan Strait and Luzon chokepoints. HBM is the critical memory substrate for AI accelerators; domestic HBM capacity is directly relevant to US AI compute resilience in a Taiwan Strait contingency. Timeline risk exists given first Idaho fab output not until mid-2027.
9 Jul 2026
RC09
CMP-INPUT
TechnologyDigital.SemiconductorAndCompute
ObsMicron announced on 9 July 2026 a $500M strategic financing package to GlobalWafers America and a 10-year supply agreement for 300mm raw silicon wafers from GlobalWafers' Sherman Texas facility — the only CHIPS-program-participating 300mm wafer supplier manufacturing on US soil. The deal is part of a broader $3B Micron US supply-chain investment. GlobalWafers' Texas facility will approximately double installed capacity to ~600K 12-inch wafers/month upon expansion completion. Binding contracts and regulatory approvals remain pending as of announcement date. GlobalWafers (Taiwan-headquartered) is the world's third-largest silicon wafer supplier.
AssessmentRaw 300mm silicon wafers are a critical upstream input for all advanced DRAM and logic fabrication. GlobalWafers' Sherman TX site is the sole US-domiciled advanced 12-inch wafer source; this deal reduces dependence on Taiwanese and Japanese wafer supply that would be disrupted by Taiwan Strait or western Pacific sea-lane interdiction. Wedbush analysts flag wafer supply as a potential chokepoint for the 2028–2030 AI memory ramp. Confidence Medium — binding contracts not yet finalised as of announcement.
10 Jul 2026
RC09
CMP-CTRL
TechnologyDigital.SemiconductorAndCompute
ObsBIS published a Final Rule effective 10 July 2026 (Federal Register 14 July 2026 2026-14132) reclassifying the UAE from EAR Country Groups D:3 and D:4 into Country Group A:5. The rule provides UAE Government entities and approved commercial entities — specifically G42 and Core42 — with licence-free access to advanced computing items including Nvidia Blackwell and AMD Instinct AI chips. US hyperscaler subsidiaries in the UAE are also approved under Supplement No. 8 to Part 740. The rule is effective immediately; G42 and Core42 STA eligibility expires 270 days from 10 July 2026 unless they become US companies. Rule text cites the May 2025 US-UAE AI Acceleration Partnership framework.
AssessmentDe-escalatory for US-UAE bilateral tech relationship but escalatory in the structural sense: institutionalises a non-Taiwan AI compute node of strategic scale. Stargate UAE Phase 1 (200MW ~100k GB300 chips) is confirmed for Q3 2026 go-live. Regulatory primary text available at Federal Register. Diversion risk from UAE to third parties (including PRC-connected entities) is non-trivial given UAE's role as a transit hub; BIS affiliate rule snaps back November 2026. Confidence High — primary source is Federal Register.
14 Jul 2026
RC09
AID-TRANSFER
TechnologyDigital.AIGovernanceAndDataSovereignty
SoutheastAsia
ObsOn 13–14 July 2026 the Vietnamese Ministry of Justice released a formal assessment of the draft Law on Data Security. The draft introduces a four-tier data classification system (ordinary, internal, important, core) and permanently bans cross-border transfer of core data. Important data and large-scale personal data may only be transferred abroad with prior Ministry of Public Security approval. Draft open for public comment 17 July–5 August 2026; government targeting October 2026 National Assembly session for passage. The draft constitutes the fourth statutory data governance layer in approximately 24 months, stacking atop the Law on Data (Jul 2025), PDPL (Jan 2026), and Cybersecurity Law (Jul 2026). No deconfliction mechanism between overlapping regimes specified. Raises potential CPTPP inconsistency flagged by analysts.
AssessmentPre-legislative at this stage (magnitude 4 reflects extraterritorial reach and structural rerouting potential if enacted). The hard ban on core data exports and prior-approval gate for important data would, if enacted, constitute a magnitude-5 severance/rerouting event. Classified as Intent/Escalatory now based on draft text; should be upgraded upon passage. CPTPP inconsistency risk adds a secondary escalation vector.
14 Jul 2026
RC09
SPC-SATCOM
TechnologyDigital.DigitalInfrastructure
SouthChinaSea
Philippines
ObsOn 14 July 2026 Philippines carrier Cebu Pacific announced a partnership with SpaceX Starlink to bring LEO satellite in-flight connectivity to its fleet from 2027, making it the first low-cost carrier in Southeast Asia to adopt Starlink. The deal is part of a coordinated deployment by investor Indigo Partners across more than 1,000 aircraft (also covering Frontier Airlines, Wizz Air, Volaris, and JetSMART). Starlink service will cover passenger broadband and operational crew connectivity. Financial terms were not disclosed. Cebu Pacific operates 101 aircraft on 35 domestic and 26 international routes including routes transiting the South China Sea and Luzon Strait corridor.
AssessmentAs the first SEA LCC Starlink agreement, this embeds SpaceX's LEO constellation as the connectivity backbone for Philippine aviation at operational and passenger levels. Flights crossing the Luzon Strait and SCS chokepoints will carry Starlink-dependent navigation and crew communications. This deepens Philippine aviation's dependency on a US-headquartered LEO operator, raising both resilience and geopolitical-dependency signals vis-à-vis Chinese alternative constellations (Qianfan/SpaceSail) seeking market entry across the region.
15 Jul 2026
RC01
CAC Anthropomorphic AI Interaction Measures Enter Force – Data Governance Expanded
TechnologyDigital.AIGovernanceAndDataSovereignty
ObsThe Interim Measures for the Administration of AI Anthropomorphic Interactive Services, jointly issued by the CAC and four co-regulators on 10 April 2026, entered force on 15 July 2026. The measures establish China's first dedicated regulatory regime for AI services that simulate human personality — covering virtual companions, emotional support bots, and AI chatbots. Obligations include mandatory CAC algorithm filing, security assessments, user disclosure, anti-addiction safeguards, and data localisation. ByteDance (Doubao) and Alibaba (Qwen) shut down personalized AI agent features that could not meet compliance requirements in time.
AssessmentThe entry into force of these measures extends China's AI governance architecture into the affective and social computing domain, imposing data localisation and security review requirements that create extraterritorial compliance burdens for non-Chinese platforms serving Chinese users. The forced shutdown of Alibaba and ByteDance agent features underscores the real enforcement weight behind the framework and sets a precedent likely studied by other Indo-Pacific regulators developing AI governance norms.
16 Jul 2026
RC01
WAICO Founded – China-Led Global AI Governance Body Established by 29 States
TechnologyDigital.AIGovernanceAndDataSovereignty
China → Russia
ObsOn 16 July 2026, representatives of 29 countries signed the founding agreement of the World Artificial Intelligence Cooperation Organization (WAICO) in Shanghai. WAICO is headquartered in Shanghai and oriented toward the Global South. China's Foreign Minister Wang Yi signed on behalf of Beijing; UN Secretary-General António Guterres attended. Founding members include Russia, Indonesia, Brazil, Pakistan, Kazakhstan, Laos, Belarus, Serbia, Cuba, Venezuela, and 10 African and 12 Asian countries. The G7 advanced economies — the US, Japan, UK, Germany, France, South Korea, Canada, and Australia — were not founding members. WAICO is viewed as rivalling the US-led Pax Silica initiative.
AssessmentWAICO is the most strategically significant digital governance development of the July 2026 window. Beijing has converted its WAIC platform advantage into a permanent intergovernmental institution headquartered on Chinese soil, with an Indo-Pacific-heavy founding membership that includes key Southeast Asian states. The exclusion of all G7 nations signals a deliberate bifurcation of global AI governance architecture. For the Indo-Pacific, WAICO creates a competing standard-setting locus that Beijing will use to advance Chinese AI norms, data governance frameworks, and infrastructure preferences in developing economies currently contested between US and Chinese digital ecosystems.
16 Jul 2026
RC09
AID-ENFORCE
TechnologyDigital.AIGovernanceAndDataSovereignty
Australia
ObsOn 16 July 2026 the OAIC published its report concluding preliminary inquiries into the 2025 Qantas data breach affecting approximately 5.12–5.67 million Australians. Breach occurred via social engineering (vishing) attack on an overseas third-party call centre provider in Manila. OAIC assessed compliance with APPs 1 (management), 8 (cross-border disclosure) and 11 (security). Commissioner Carly Kind found no evidence of breach of Privacy Act obligations; declined to commence a Commissioner-Initiated Investigation at this stage but retained discretion to re-open. No penalty imposed. Inquiry conducted between 11 July 2025 and 1 June 2026. The incident involved cross-border data processing via an overseas outsourced provider.
AssessmentThe no-further-action outcome is analytically significant as a precedent-setter: it clarifies that APP 8 cross-border disclosure obligations can be satisfied through third-party contractual compliance measures even when a breach occurs at an offshore provider. De-escalatory for regulated entities regarding cross-border outsourcing risk but does not reduce overall sector risk posture. Magnitude 2 given no penalty and no binding determination against the respondent.
16 Jul 2026
RC09
CAP-STD
TechnologyDigital.CyberOperationsAndCapacity
SoutheastAsia
SouthKorea
ObsSouth Korea's Telecommunications Technology Association (TTA) adopted the Joint Declaration for the Promotion of ICT Standards and Capacity Building in the Asia-Pacific Region with the ITU at the ITU Regional Development Forum for Asia and the Pacific (RDF-ASP) in Bangkok on 16 July 2026. The declaration focuses on ICT standardisation and human capacity building, expanded expert participation, stronger exchanges, and sharing of best practices to promote uptake of ITU standards in the region. The cooperation builds on TTA's information-security standards training conducted in February 2026 for 15 Asia-Pacific and CIS countries.
AssessmentKorea is positioning TTA as the lead standards-capacity-building partner for ITU in the Asia-Pacific, projecting K-standards internationally and building regulatory alignment with Seoul. This declaration directly expands Korean vendor and standards influence across the region, with implications for competition with Chinese standards-promotion efforts through ITU channels. The ITU's hosting of the RDF-ASP at Bangkok, co-located with APT's ADF-23, amplifies regional reach.
17 Jul 2026
RC01
WAIC 2026 – Xi Jinping Keynote and Huawei Atlas 950 SuperPoD Debut
TechnologyDigital.SemiconductorAndCompute
ObsThe 2026 World Artificial Intelligence Conference (WAIC) opened in Shanghai on 17 July 2026 with Xi Jinping delivering his first-ever WAIC keynote. Huawei debuted the Atlas 950 SuperPoD — the industry's largest super-node architecture enabling 1,024 Ascend NPU cards to operate as a single compute unit (the physical unit features 8,192 Ascend cards per cluster). Over 300 AI products made their global debut; more than 1,100 enterprises participated across an exhibition exceeding 100,000 sq metres. Xi announced China would provide 5,000 exchange-programme quotas and establish AI cooperation centres with ASEAN, the Arab League, the African Union, CELAC, BRICS, and SCO partners over five years.
AssessmentWAIC 2026 served as China's primary technology diplomacy platform for July, combining hardware capability demonstration with institutional and normative outreach. The Huawei Atlas 950 debut is a direct Capability signal: it demonstrates that China is assembling frontier-class AI compute infrastructure from domestic components despite US chip controls. Xi's 5,000 scholarship pledge and ASEAN/Global South cooperation centre announcements are concrete instruments for embedding Chinese AI platforms and training norms in Indo-Pacific institutions.
17 Jul 2026
RC09
AID-TRANSFER
TechnologyDigital.AIGovernanceAndDataSovereignty
NortheastAsia
Japan
ObsJapan's amended Act on the Protection of Personal Information (APPI) was promulgated on 17 July 2026 as Law No. 56 following Diet passage on 10 July 2026. Cabinet approved the amendment bill on 7 April 2026 for submission to the Diet. Key AI-relevant changes: introduces administrative monetary fines for the first time (replacing criminal-penalty-only regime); creates a new consent exemption for statistical analysis and AI model training allowing use of publicly available sensitive personal data without consent subject to transparency measures and contractual safeguards; strengthens protections for children's data and biometric data. Effective date to be set by Cabinet order within two years of promulgation (i.e. by July 2028). Extraterritorial reach applies to foreign companies handling personal information of individuals in Japan.
AssessmentStructural shift: Japan's APPI amendment is enacted law even though not yet in force. The consent exemption for AI training data responds directly to domestic AI development imperatives and signals a deliberate 'data-free-flow with trust' deregulatory posture that diverges from the EU AI Act trajectory. The introduction of administrative fines represents the most significant enforcement upgrade to the APPI since the 2017 revision. Affects all Indo-Pacific operators running AI workloads involving Japanese personal data.
20 Jul 2026
RC09
AID-REG
TechnologyDigital.AIGovernanceAndDataSovereignty
SoutheastAsia
ObsSingapore Personal Data Protection Commission published final Advisory Guidelines on Use of Personal Data in Generative AI on 20 July 2026 at the inaugural Singapore Data Festival; guidelines took effect immediately from 20 July. Guidelines are non-binding but introduce first-of-kind AI-specific notification requirement across the AI supply chain covering development, testing, deployment and procurement stages; PDPC consultation closed 1 July 2026 and final text incorporates accountability and data-minimisation obligations. Date in force: 20/7/2026.
AssessmentNon-binding advisory guidance that nonetheless sets PDPC regulatory expectations and signals Singapore is hardening its AI accountability posture ahead of any standalone AI law; the AI-specific notification requirement is a structural first for PDPC and will inform industry practice regionally. Represents Signalling rather than structural binding shift at this stage.
20 Jul 2026
RC09
CAP-TRAIN
TechnologyDigital.CyberOperationsAndCapacity
SouthPacific
US → Australia
ObsPacific Cyber Week 2026 opened in Port Moresby on 20 July co-convened by Papua New Guinea, Australia and the United States with Pacific partners, running alongside the PNG Digital Transformation Summit 20-22 July. The week-long programme covered cybersecurity, AI, digital public infrastructure, online safety and cybercrime, and culminated in a Pacific ICT Ministers Meeting. Australian Ambassador for Cyber Affairs and Critical Technology Jessica Hunter and Australian High Commissioner Ewen McDonald attended the opening alongside PNG PM Marape and ICT Minister Naguri.
AssessmentPattern confirms deepening AUS-US bilateral delivery architecture for Pacific cyber capacity. Joint convening with PNG government signals host-country co-ownership model; the pairing with the Pacific ICT Ministers Meeting and Lagatoi Declaration implementation elevates the event above a routine workshop to a structurally significant annual platform. Repeated co-delivery with the US reinforces a complementary donor bloc competing with Chinese digital-infrastructure financing in the Pacific.
20 Jul 2026
RC09
CAP-FUND
TechnologyDigital.CyberOperationsAndCapacity
SouthPacific
Australia
ObsAt the opening of Pacific Cyber Week on 20 July 2026, Australia confirmed two key capital-infrastructure initiatives with PNG: the Pukpuk Digital Connectivity Initiative to expand PNG's international submarine cable connectivity, and the PNG Telecommunications Blueprint, an independent assessment to guide future investment and reform priorities. Both were presented as joint AUS-PNG partnership deliverables.
AssessmentThis pair of initiatives signals Australia's intent to anchor PNG's digital-infrastructure investment pipeline within a trusted-partner framework. The Pukpuk cable initiative directly competes with Chinese cable-financing offers in the Pacific and provides a concrete capacity signal beyond diplomatic rhetoric. Committed programme and named deliverables place this at magnitude 4.
20 Jul 2026
RC09
CAP-NORM
TechnologyDigital.CyberOperationsAndCapacity
SoutheastAsia
ASEAN
ObsAt the official dinner of the 4th Digital Defence Symposium on 20 July 2026, Singapore's Permanent Secretary (Defence) Joseph Leong announced a suite of ASEAN cyber-norms initiatives to be advanced under Singapore's ADMM Chairmanship in 2027: (1) working with ASEAN defence establishments toward collective implementation of the 11 UN GGE cyber norms; (2) expanding ACICE-UNIDIR cyber norms workshops for ASEAN member states (first completed April 2026, next in August 2026); (3) hosting the inaugural ASEAN Regional Cyber Exercise co-organised with Singapore's Digital and Intelligence Service; and (4) building on the inaugural ACICE-US Cyber Capacity Building Course. Singapore also identified the ADMM-Plus EWG on Cybersecurity as co-chaired by Cambodia and Australia.
AssessmentThis announcement constitutes the most significant ASEAN cyber-norms initiative for the period. Singapore is leveraging upcoming ADMM chairmanship to set the normative agenda for ASEAN defence cyber cooperation — specifically anchoring regional norms to the UN GGE framework rather than alternative frameworks. The inaugural ASEAN Regional Cyber Exercise is a standing-institution-level commitment. The explicit naming of the ACICE-US course and the Cambodia-Australia EWG co-chair identifies the network of complementary Western-aligned mechanisms.
20 Jul 2026
RC09
SPC-SPEC
TechnologyDigital.DigitalInfrastructure
SouthPacific
ObsOn 20 July 2026 — the opening day of the Digital Transformation Summit 2026 in Port Moresby — PNG's National Information and Communications Technology Authority (NICTA) formally announced the release of 5G spectrum in Papua New Guinea, with NICTA chairman Brian Riches confirming its regulatory review ahead of deployment is nearing completion. The summit (20–22 July) was co-convened with Australia and the United States as part of Pacific Cyber Week and culminated in the first-ever Pacific Islands Forum ICT Ministerial Meeting. Digicel PNG had already declared 5G readiness in a prior consultation period; NICTA's July 2026 announcement represents the formal regulator confirmation triggering the commercial licensing pathway. The 2300 MHz and 3500 MHz bands are under consideration for 5G assignment.
AssessmentPNG's formal 5G release creates an immediate vendor-selection moment for a Pacific state that sits astride key maritime and aerial corridors between Australia and the broader Indo-Pacific. The co-location of the announcement with Pacific Cyber Week — co-hosted by PNG, Australia, and the US — and the Pacific ICT Ministers Meeting signals that trusted-technology concerns are embedded in the decision context. The vendor chosen for PNG's 5G build will have strategic implications for the rest of the Pacific island arc given PNG's infrastructure leadership role.
21 Jul 2026
RC09
CAP-NORM
TechnologyDigital.CyberOperationsAndCapacity
SouthPacific
ObsThe Counter Ransomware Initiative held its Pacific Regional Meeting on 21 July 2026 at Pacific Cyber Week in Port Moresby. The meeting provided an opportunity for Pacific governments and practitioners to discuss ransomware threats and collective response options within the CRI framework. Financial assistance for Pacific delegates was provided by New Zealand, the United States and Australia.
AssessmentThe CRI Pacific Regional Meeting marks a deliberate effort to extend a Western-aligned multilateral ransomware-norms instrument into the Pacific Islands Forum space. Holding it as an embedded side-event of Pacific Cyber Week institutionalises CRI engagement with Pacific states whose cyber-incident response capacity remains nascent. The donor-funded attendance model reflects influence-building as well as capacity delivery.
21 Jul 2026
RC09
CAP-TRAIN
TechnologyDigital.CyberOperationsAndCapacity
SoutheastAsia
ObsThe ADMM Cybersecurity and Information Centre of Excellence (ACICE) and RSIS co-hosted the 4th Digital Defence Symposium (DDS) on 21-22 July 2026 at Raffles City Convention Centre, Singapore. The symposium convened ASEAN and partner-nation defence officials on the theme 'Building Digital and Information Resilience: Technology, Norms, and the Cyber Information Continuum', alongside the 4th ASEAN Roundtable on Navigating the Digital Space and the 5th ACICE Advisory Board Meeting. Partner nations attending included Australia, China, Estonia, Germany, Italy, Japan, Lithuania, the UK and the US.
AssessmentThe DDS is ACICE's flagship multilateral training-and-norms platform. The simultaneous inclusion of China and Western partners reflects ACICE's formal ASEAN centrality posture, but the deliberate listing of like-minded partners signals Singapore's management of dual-track engagement. The accompanying ACICE Advisory Board meeting adds institutional continuity beyond the symposium itself.
21 Jul 2026
RC09
SPC-ITU
TechnologyDigital.DigitalInfrastructure
Regionwide
SouthKorea
ObsSouth Korea's Electronics and Telecommunications Research Institute (ETRI) led the development and approval of an ITU-R Spectrum Management Study Group 1 report titled 'Methodologies for assessing or predicting spectrum availability' using machine learning techniques. The report was approved at the SG1 meeting in Geneva in the week ending 27 July 2026 and is undergoing final editorial procedures before formal publication. ETRI's leadership of this standardisation work positions South Korea as a proponent of AI-driven spectrum management norms within the ITU-R framework, with implications for how future spectrum assessments — including contested cross-border allocations — are conducted internationally. (Using publication date as proxy for approval date per Cenerva week-to-27-July-2026 report.)
AssessmentThis is a standards-layer signal rather than an allocation decision, but it is analytically significant: AI-based spectrum-availability assessments approved under ITU-R could reshape how Indo-Pacific states defend or contest spectrum filings in future WRC negotiations. South Korea's authorship gives it first-mover positioning in a methodology that may eventually be applied to contested NGSO coordination disputes between China and its neighbours — including over Ku/Ka satellite slots covering the SCS.
22 Jul 2026
RC09
CAP-NORM
TechnologyDigital.CyberOperationsAndCapacity
SoutheastAsia
Philippines → ASEAN
ObsThe Quad Foreign Ministers met in Manila on 22 July 2026 on the sidelines of the ASEAN Post-Ministerial Conference and issued the first-ever dedicated Quad joint statement on cooperation with ASEAN. The statement affirmed cooperation on shared priorities including critical and emerging technologies, maritime and transnational security, and pledged closer coordination against malicious cyber activity. Ministers also committed to action against North Korean cyber activities funding Pyongyang's weapons programmes.
AssessmentThe Quad's first dedicated joint statement with ASEAN is a structural milestone in Quad-ASEAN cyber-diplomacy. By framing Quad partners as 'ASEAN Comprehensive Strategic Partners', the document positions the grouping as an inside stakeholder in ASEAN's digital-governance agenda rather than an external counterweight. The explicit cyber reference is non-binding but politically significant given ASEAN's prior wariness of the Quad.
22 Jul 2026
RC09
SPC-VENDOR
TechnologyDigital.DigitalInfrastructure
ExtraRegional
ObsFCC voted 22 July 2026 to close the component-part loophole in its Covered List rules by prohibiting FCC equipment authorisation for any device incorporating logic-bearing hardware components produced by Huawei, ZTE, Hikvision, Dahua, Hytera, DJI, or Autel. The order moves the ban from the assembled-device level to the chipset level — the deepest expansion yet — and effectively bars HiSilicon-chipped devices from the US market regardless of the assembling brand. A Further NPRM proposes mandatory full bill-of-materials disclosure for all FCC applicants, which would create the first supply-chain transparency mechanism for consumer electronics in US regulatory history. This follows a June 2026 FCC action that already extended the import ban to pre-2022 legacy Covered List models effective July 2026.
AssessmentThe chipset-level ban reshapes global supply chains for consumer and commercial electronics exported through or to US-aligned Indo-Pacific partners. Vendors supplying 5G RAN or CPE equipment to Southeast Asian and Pacific operators who also seek US market access or US-funded connectivity programmes will face intensified vendor-selection pressure. This is the highest-impact vendor-restriction signal of the July window and directly amplifies existing Five Eyes exclusion pressure on regional operators still carrying Huawei/ZTE infrastructure.
22 Jul 2026
RC09
SPC-SATCOM
TechnologyDigital.DigitalInfrastructure
Regionwide
ObsOn 22 July 2026 the FCC adopted a landmark Report and Order titled 'Space Modernization for the 21st Century' that replaces the legacy Part 25 satellite-licensing framework with a new Part 100. Key changes: processing rounds for NGSO constellations revised; most space station and earth station licence terms extended to 20 years; a new Variable Trajectory Space Station licence category created; red tape cut to reduce review timelines from years to months; and operators required to share space situational awareness data. The order was accompanied by a Further NPRM seeking comment on intersatellite links between US-licensed and non-US-licensed satellites, operational envelopes, and secondary market transactions.
AssessmentThe Part 100 overhaul materially lowers barriers for US-based LEO operators — primarily SpaceX/Starlink — to obtain and modify authorisations for Indo-Pacific gateway and earth-station siting. Faster licence processing directly accelerates Starlink's ability to expand ground infrastructure across the Pacific island arc and in Southeast Asian markets where regulatory approvals have been a bottleneck. The new requirement to share space situational awareness data also has implications for non-US operators seeking coordination agreements.
22 Jul 2026
RC09
SPC-SPEC
TechnologyDigital.DigitalInfrastructure
ExtraRegional
ObsFCC voted 22 July 2026 to auction 160 MHz of upper C-band spectrum (3.98–4.14 GHz) by July 2027 — the agency's first new commercial spectrum auction in five years. The order reallocates the band for terrestrial flexible-use (5G/6G), creates 3,248 new licences, and sets a 30 December 2030 deadline for incumbent Fixed Satellite Service operators to vacate. Combined with lower C-band already auctioned, this creates a contiguous 440 MHz 'super band' from 3.7–4.14 GHz. The FCC authorised gross incentive payments of approximately USD 5.6 billion for SES and USD 504 million for Eutelsat contingent on clearing deadlines. Eligible space station operators must file initial transition plans by 5 November 2026.
AssessmentClearing incumbent FSS operators from the upper C-band displaces satellite capacity currently used for broadcast distribution and enterprise connectivity in the Asia-Pacific, as both SES and Eutelsat operate fleets that serve the region. The transition will require new satellites and significant re-engineering of downlink infrastructure. For Indo-Pacific states dependent on C-band for rural connectivity or broadcast contribution, this is a structural supply signal that warrants tracking against regional gateway investment timelines.
22 Jul 2026
RC09
CBL-BUILD
TechnologyDigital.DigitalInfrastructure
China → Philippines
ObsOn 22 July 2026 China Mobile announced that the Southeast Asia-Hainan-Hong Kong (SEA-H2X) international submarine cable had completed its system acceptance test and launched commercially. SEA-H2X spans approximately 5746 km with eight fibre pairs and a design capacity exceeding 200 Tbps connecting Hainan China Hong Kong the Philippines Thailand and Singapore. China Mobile is the project's largest investor and holds key management responsibilities including operating the network operations centre. The cable integrates with China Mobile's existing Asia-Pacific systems (APG SJC SJC2 SEA-ME-WE 5 PEACE). The system employs Open Cable technology with spectrum sharing and is positioned to provide low-latency computing power interconnection between China and Southeast Asia. The commercial launch was announced via PRNewswire from Hong Kong and characterised by China Mobile as advancing its Belt and Road digital infrastructure objectives.
AssessmentChina Mobile's entry into commercial service on SEA-H2X represents a significant expansion of Chinese state-owned carrier control over submarine cable infrastructure transiting or terminating in Southeast Asian partner states (Philippines Thailand Singapore). The Philippines landing is of particular chokepoint significance — SEA-H2X likely crosses or runs proximate to the Luzon/Bashi corridor alongside AAG FASTER and other systems. China Mobile's role as network operations centre operator means it controls fault diagnosis performance monitoring and potentially traffic routing on a 200+ Tbps system. Simultaneous with FCC SLTE exclusion rules (RC09WSA-2026-07-004 and -005) this creates a structural divergence: the US is excluding Chinese entities from US-connected infrastructure while China Mobile is consolidating operational control on Southeast Asian routes. No independent security review of SEA-H2X by Philippine NTC or Singapore IMDA was publicly announced as of reporting date. Confidence High per China Mobile PRNewswire official press release.
22 Jul 2026
RC09
CRI-VULN
TechnologyDigital.CriticalInfrastructure
Regionwide
ObsOn 22 July 2026 CISA updated joint advisory AA26-097A expanding confirmed Iranian-affiliated exploitation of internet-facing PLCs to include Schneider Electric (Modicon M340 / BMX P34) and Siemens S7-1200 series in addition to previously confirmed Rockwell Automation/Allen-Bradley MicroLogix and CompactLogix controllers. The update added new MITRE ATT&CK Exfiltration Technique T1041 documenting theft of PLC project files using vendor configuration software on leased overseas infrastructure, and added detection guidance for malicious tampering with reusable code modules embedded in PLC programs. CVE-2021-22681 (CVSS 9.8) — an authentication bypass in Rockwell Logix controllers with no vendor patch available — remains the primary exploitation vector. Approximately 5,000-6,000 internet-exposed Rockwell devices identified via Shodan. Indo-Pacific operators of these platforms carrying equivalent exposure.
AssessmentAA26-097A update represents material capability escalation: vendor scope expanded from one to three OEM families; first confirmed PLC project-file exfiltration documented (operational reconnaissance for future tailored attack); reusable code module tampering guidance added. Rockwell has confirmed no patch exists for CVE-2021-22681. Indo-Pacific water, energy, and government ICS operators using these platforms face equivalent exposure to US victims confirmed in the advisory.
22 Jul 2026
RC09
CRI-REG
TechnologyDigital.CriticalInfrastructure
SoutheastAsia
ObsOn 22 July 2026 CSA announced at the Operational Technology Cybersecurity Expert Panel Forum 2026 that it will release an updated Cybersecurity Code of Practice (CCoP) for Critical Information Infrastructure and a first-ever CCoP for Cloud Services in H2 2026. The updated CCoP introduces mandatory board-level cyber resilience frameworks requiring documented risk tolerance, mitigation, and recovery strategies reviewed annually. The regulatory driver cited by CSA is the emergence of APTs and AI-enabled threats that allow adversaries to discover vulnerabilities faster and launch attacks at greater scale since the previous CCoP revision in 2022. Compliance certification deadlines require CII auditors to achieve certification by 31 December 2026 and CII owners by 31 December 2027.
AssessmentThis is the most sweeping overhaul of Singapore's CII cybersecurity standards since 2022 and is explicitly framed as a response to APT activity including confirmed UNC3886 targeting of Singapore telecom operators. The CCoP Cloud extension is a first-of-kind regulatory instrument for cloud-hosted critical infrastructure in Singapore. Board accountability mandate creates legal exposure for directors of CII operators under Singapore Cybersecurity Act 2018. Instrument coded Legal; OfficialDocument source is the CSA official press release.
22 Jul 2026
RC09
CRI-INTRUDE
TechnologyDigital.CriticalInfrastructure
Australia
ObsOn 22 July 2026 Origin Energy Limited identified a potential cybersecurity incident involving unauthorised access to customer data and immediately notified the Australian Cyber Security Centre (ACSC) and Australian Federal Police. By 28 July Origin confirmed approximately 900,000 current and former customer records were accessed including names, addresses, dates of birth, phone numbers, account information, and partial payment card or bank account numbers. Origin's CEO publicly acknowledged the breach. ACSC, National Office of Cyber Security, AFP, and the Office of the Australian Information Commissioner are all engaged. Core energy operational systems and customer credit card / bank details were stated not to be affected.
AssessmentOrigin Energy is one of Australia's largest electricity and gas retailers and power generators. No technical indicators of compromise published as of date of source; attack vector not disclosed. Attribution low-confidence: one researcher suggested TripleX group but this is unconfirmed. Operator and ACSC engagement confirmed; incident classified as criminal matter under AFP investigation. OT / generation systems stated unaffected; magnitude scored 3 (essential service IT-side breach; service maintained).
23 Jul 2026
RC01
APEC Chengdu Statement on Digital Technologies and AI Adopted
TechnologyDigital.AIGovernanceAndDataSovereignty
China
ObsThe 2026 APEC Digital and AI Ministerial Meeting, held in Chengdu on 23 July 2026 and chaired by China's Minister of Industry and Information Technology Li Lecheng, adopted the 'Chengdu Statement' — a ministerial-level action framework for deepening digital and AI cooperation across Asia-Pacific economies. China's Vice Premier Zhang Guoqing opened the meeting, pledging to advance joint formulation of standards and rules, promote open-source cooperation, and lead digital transformation in the region. The statement endorsed accelerating communication and computing infrastructure development and supporting digital transformation of MSMEs. The US delegation raised concerns over 'AI distillation' in closed sessions while adopting a restrained public tone.
AssessmentChina has successfully chaired an APEC-level ministerial that enshrines an action framework for Asia-Pacific digital cooperation on terms favourable to Beijing's open-source and infrastructure-led approach. The Chengdu Statement provides a multilateral imprimatur for China's AI and digital ecosystem outreach in the region, complementing WAICO. The US-China tension over AI distillation — surfaced in closed-door sessions — indicates that despite consensus language, the statement masks significant divergence on IP protection and model governance norms that will shape Indo-Pacific tech alignment choices.
24 Jul 2026
RC09
AID-REG
TechnologyDigital.AIGovernanceAndDataSovereignty
ObsRBI released draft Guidance on Regulatory Principles for Model Risk Management 2026 on 24 June 2026 (Press Release No. 2026–2027/528); public consultation open until 24 July 2026. Guidance applies to all models used by regulated entities including third-party AI/ML models. Requires Board-approved Model Risk Management Framework (MRMF) covering entire model lifecycle; introduces AI-specific chapter with explainability thresholds, hallucination and bias controls, red-teaming requirements, mandatory kill-switch arrangements, and human oversight obligations; applies three-lines-of-defence governance. Once finalised, will replace the RBI's 2002 Credit Risk Model guidance. Scope covers commercially deployed AI models from any vendor. Consultation window was actively open throughout July 2026.
AssessmentConsultation stage only (magnitude 3); however, this is India's first dedicated AI/ML model governance framework for the financial sector and represents a significant expansion of sectoral AI regulation with cross-border supply-chain implications for any foreign AI vendor selling models to Indian banks. Once finalised, it will constitute a binding instrument affecting one sector with de facto extraterritorial reach over model providers. The kill-switch and explainability requirements are structurally more prescriptive than most regional peers.
26 Jul 2026
RC09
CRI-DISRUPT
TechnologyDigital.CriticalInfrastructure
Regionwide
US
ObsOn 26–27 July 2026 a coordinated cyberattack targeted water and wastewater systems across more than 30 Minnesota communities and utilities in at least seven US states. Attackers exploited internet-exposed Rockwell Automation/Allen-Bradley MicroLogix 1100 and 1400 PLCs — likely using CVE-2021-22681 — to remotely access OT networks, change IP addresses and passwords locking operators out of their own systems, and degrade water operations. At least one plant was shut down; others forced to manual operation. The FBI and EPA issued a public service announcement on 31 July 2026 confirming incidents reported to FBI since 27 July and that 'some activity degraded water operations.' CISA noted a 'significant escalation' in PLC attacks.
AssessmentFBI/EPA official PSA corroborates operational degradation across multiple states meeting the CRI-DISRUPT corroboration rule at magnitude 3+. Timing — four days after CISA updated AA26-097A on 22 July — is assessed by Tenable researchers as 'significant' and aligns with escalating Iranian-affiliated PLC campaign. Federal investigators examining Iran link; attribution assessed probable but unproven as of 31 July per MNIT statewide response statements. These same PLC models are widely deployed in Indo-Pacific water and energy infrastructure; tactical precedent directly transferable.
27 Jul 2026
RC01
CXMT Lists on STAR Market – Asia's Largest 2026 IPO Raises USD 8.6bn for DRAM Expansion
TechnologyDigital.SemiconductorAndCompute
ObsChangXin Memory Technologies (CXMT) listed on the SSE STAR Market on 27 July 2026, raising RMB 57.92 billion (USD 8.6 billion) — Asia's largest IPO of 2026 and the largest semiconductor listing ever on the STAR Market. CXMT shares surged 466% on debut, making it the most valuable China-listed company with a market cap of approximately RMB 3.31 trillion. CXMT held a 7.67% share of the global DRAM market in 2025 and ranked fourth globally in DRAM production capacity. IPO proceeds are earmarked for memory wafer mass production, DRAM technology R&D and capacity expansion. Global competitors fell sharply on the news: Micron –5%, SK Hynix ADRs –6%, SanDisk –12%. Analysts flagged potential expansion into HBM memory as a next step.
AssessmentCXMT's listing is the most consequential single capital-formation event in China's semiconductor self-reliance drive during the window. The USD 8.6bn war chest materially accelerates China's domestic DRAM capacity ahead of potential US regulatory responses and signals investor confidence in state-backed chip champions. The market impact on Samsung, Micron, and SK Hynix — all critical technology partners for Indo-Pacific allies — demonstrates that China's memory chip sector is now competitive enough to move global markets. HBM expansion ambitions directly threaten the supply-chain leverage that underpins allied chip control strategies.
27 Jul 2026
RC09
CAP-NORM
TechnologyDigital.CyberOperationsAndCapacity
Australia → ASEAN
ObsAt the 15th Singapore-Australia Joint Ministerial Committee (SAJMC) in Adelaide on 27 July 2026, ministers welcomed the renewal of the bilateral MoU on Cyber Security Cooperation (signed 24 February 2026) and confirmed its operationalisation through a senior officials' meeting. The MoU covers information sharing, training and best-practice exchange, joint cyber exercises, innovation, trade and investment promotion, regional confidence-building measures, and regional capacity building including at the ASEAN-Singapore Cybersecurity Centre of Excellence. Ministers also announced the inaugural bilateral Cyber and Digital Dialogue to be held on 30 July 2026 in Australia under the MoU on AI cooperation.
AssessmentThe SAJMC outcome bundles a renewed bilateral MoU, an inaugural Cyber and Digital Dialogue, and explicit ASEAN-Singapore CCoE regional capacity-building commitments into a single diplomatic instrument. The simultaneous activation of three institutional mechanisms — MoU, Dialogue, and CCoE — in one communiqué signals depth of digital alignment well beyond a routine reaffirmation. The CCoE commitment embeds Australia into Singapore's ASEAN-facing cyber training infrastructure.
27 Jul 2026
RC09
CBL-PERMIT
TechnologyDigital.DigitalInfrastructure
ObsOn 27 July 2026 the FCC published its Second Report and Order (FCC 26-42 adopted 25 June 2026) in the Federal Register Vol. 91 No. 142 (pages 46844–46866). The order establishes a blanket licensing regime for all owners and operators of Submarine Line Terminal Equipment (SLTE) on cables landing in the US. It explicitly excludes from the blanket licence any entity meeting foreign adversary presumptive disqualification criteria — directly targeting China Telecom China Unicom and China Mobile. Entities already owning or operating SLTE linked to Chinese adversary-controlled entities are required to remediate. SLTE owners/operators must file annual Foreign Adversary Annual Reports cybersecurity and physical security risk management plans and circuit capacity reports. The order's Federal Register publication starts the 30-day comment clock for the accompanying Further Notice and initiates compliance obligations for approximately 3136 current SLTE owners/operators globally including those on Indo-Pacific trans-Pacific routes.
AssessmentFederal Register publication locks in the effective dates and compliance timeline for the broadest expansion of US submarine cable security regulation in decades. The specific exclusion of Chinese adversary-linked entities from SLTE operation extends the security perimeter from cable landing points into inland data-centre SLTE infrastructure — a structural change to the digital chokepoint architecture on US-connected trans-Pacific routes. The companion Q2 2026 Windward data showing China-flagged high-IUU events near Pacific cable-landing hubs rising 130% QoQ reinforces the policy rationale. Confidence High per Federal Register official document.
29 Jul 2026
RC09
AID-REG
TechnologyDigital.AIGovernanceAndDataSovereignty
SoutheastAsia
ObsOn 29 July 2026 Indonesia's Deputy Minister of Communication and Digital Affairs Nezar Patria confirmed via official statement that the draft Presidential Regulation on the National AI Roadmap and AI Ethics has completed inter-ministerial review and is awaiting presidential signature. Statement also confirmed Indonesia's intent to pursue dedicated AI legislation following the Presidential Regulation. Once signed, ministerial derivative regulations will follow including mandatory AI content labelling/watermarking for digital platforms. The draft Presidential Regulation establishes risk categories, labelling requirements and ethics framework. No penalties included in the Presidential Regulation itself — enforcement relies on existing ITE Law and PDP Law. Using publication date as proxy for event date.
AssessmentAn announcement without instrument text — magnitude capped at 2 per scoring anchors; however, inter-ministerial completion is the final administrative step before presidential signature, making this a verifiable pre-enactment milestone that alters the near-term regulatory trajectory for Indonesia's digital economy. Raises to 3 upon confirmation of presidential signature. Once enacted, the Presidential Regulation will be the first comprehensive national AI framework for the world's fourth most populous nation, with significant downstream dependency implications for regional AI compute and platform flows.
29 Jul 2026
RC09
CMP-CAPEX
TechnologyDigital.SemiconductorAndCompute
TaiwanStrait
Taiwan
ObsCentral Taiwan Science Park Administration Director Hsu Mao-hsin confirmed on 29 July 2026 that construction of TSMC's $49B 1.4nm (A14) fab at Taichung Phase II Park is significantly ahead of schedule. Foundation piling is largely complete; the first two of four planned fabs have entered the steel structure phase; the central utility plant and office buildings are under construction. First fab building completion is now expected before April 2027. Supply-chain sources indicate pilot production could begin Q3 2027 and mass production by mid-2028 — at least one quarter earlier than the prior 2H28 target. The node uses second-generation GAAFET (NanoFlex Pro) with current EUV. Notably 1.4nm is not included in TSMC's US fab plans; it remains exclusively Taiwan-sited.
AssessmentThe 1.4nm node being Taiwan-only deepens Taiwan's irreplaceable role in sub-2nm AI chip production for at least the 2028–2032 window. Any Taiwan Strait contingency that disrupts the Taichung Science Park — located on Taiwan's west coast facing the strait — would eliminate the world's only planned mass-production source of 1.4nm-class chips. Accelerated schedule modestly increases the period of Taiwan-dependent leading-edge concentration. Confidence High on construction progress per official park administration statement.
| Date | RC | Indicator | Domain | Theatre | Mode | Mag | Effect | Conf | Source |
|---|---|---|---|---|---|---|---|---|---|
| 2026-07-09 | RC09 | CMP-CAPEX | TechnologyDigital.SemiconductorAndCompute | Overt | 5 | Deterrence | Low | MediaReport | |
| 2026-07-16 | RC01 | WAICO Founded – China-Led Global AI Governance Body Established by 29 States | TechnologyDigital.AIGovernanceAndDataSovereignty | Overt | 5 | Escalation | Low | MediaReport | |
| 2026-07-22 | RC09 | SPC-VENDOR | TechnologyDigital.DigitalInfrastructure | ExtraRegional | Overt | 5 | Signalling | Low | MediaReport |
| 2026-07-22 | RC09 | SPC-SATCOM | TechnologyDigital.DigitalInfrastructure | Regionwide | Overt | 5 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-02 | RC01 | Chinese GLM-5.2 model gains global developer traction | TechnologyDigital.AIGovernanceAndDataSovereignty | ExtraRegional | Deniable | 4 | NotAssessed | Low | MediaReport |
| 2026-07-05 | RC09 | CRI-INTRUDE | TechnologyDigital.CriticalInfrastructure | SoutheastAsia | Overt | 4 | Signalling | Medium | IndustryReport |
| 2026-07-07 | RC01 | Beijing weighs controls on overseas access to frontier AI models | TechnologyDigital.AIGovernanceAndDataSovereignty | ExtraRegional | Deniable | 4 | NotAssessed | Low | MediaReport |
| 2026-07-08 | RC09 | CBL-PERMIT | TechnologyDigital.DigitalInfrastructure | Overt | 4 | Deterrence | Medium | OfficialDocument | |
| 2026-07-09 | RC09 | CMP-INPUT | TechnologyDigital.SemiconductorAndCompute | Overt | 4 | Deterrence | Medium | IndustryReport | |
| 2026-07-10 | RC09 | CMP-CTRL | TechnologyDigital.SemiconductorAndCompute | Overt | 4 | Signalling | Medium | OfficialDocument | |
| 2026-07-14 | RC09 | SPC-SATCOM | TechnologyDigital.DigitalInfrastructure | SouthChinaSea | Overt | 4 | Signalling | Low | MediaReport |
| 2026-07-15 | RC01 | CAC Anthropomorphic AI Interaction Measures Enter Force – Data Governance Expanded | TechnologyDigital.AIGovernanceAndDataSovereignty | Overt | 4 | Signalling | Medium | OfficialDocument | |
| 2026-07-22 | RC09 | CAP-NORM | TechnologyDigital.CyberOperationsAndCapacity | SoutheastAsia | Overt | 4 | Signalling | Medium | OfficialDocument |
| 2026-07-22 | RC09 | SPC-SPEC | TechnologyDigital.DigitalInfrastructure | ExtraRegional | Overt | 4 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-26 | RC09 | CRI-DISRUPT | TechnologyDigital.CriticalInfrastructure | Regionwide | Overt | 4 | Escalation | Medium | OfficialDocument |
| 2026-07-27 | RC01 | CXMT Lists on STAR Market – Asia's Largest 2026 IPO Raises USD 8.6bn for DRAM Expansion | TechnologyDigital.SemiconductorAndCompute | Overt | 4 | CapacityDisplay | Low | MediaReport | |
| 2026-07-27 | RC09 | CBL-PERMIT | TechnologyDigital.DigitalInfrastructure | Overt | 4 | Deterrence | Medium | OfficialDocument | |
| 2026-07-29 | RC09 | CMP-CAPEX | TechnologyDigital.SemiconductorAndCompute | TaiwanStrait | Overt | 4 | CapacityDisplay | Low | MediaReport |
| 2026-07-01 | RC09 | AID-LOCAL | TechnologyDigital.AIGovernanceAndDataSovereignty | SoutheastAsia | Overt | 3 | Escalation | Medium | OfficialDocument |
| 2026-07-02 | RC01 | India-Japan economic security declaration targets semiconductors and ICT | TechnologyDigital.SemiconductorAndCompute | NortheastAsia | Overt | 3 | NotAssessed | Medium | OfficialDocument |
| 2026-07-02 | RC01 | India-Japan AI cooperation elevated to strategic R&D partnership | TechnologyDigital.AIGovernanceAndDataSovereignty | NortheastAsia | Overt | 3 | NotAssessed | Medium | OfficialDocument |
| 2026-07-02 | RC01 | IndiaAI and Japan METI link AI compute and project support | TechnologyDigital.SemiconductorAndCompute | NortheastAsia | Overt | 3 | NotAssessed | Medium | OfficialDocument |
| 2026-07-02 | RC01 | Taiwan probe targets alleged AI server exports to China | TechnologyDigital.SemiconductorAndCompute | TaiwanStrait | SubThreshold | 3 | NotAssessed | Low | MediaReport |
| 2026-07-02 | RC09 | CBL-BUILD | TechnologyDigital.DigitalInfrastructure | Overt | 3 | CapacityDisplay | Medium | OfficialDocument | |
| 2026-07-03 | RC01 | Taiwan opens Phoenix office to anchor semiconductor corridor | TechnologyDigital.SemiconductorAndCompute | TaiwanStrait | Overt | 3 | NotAssessed | Medium | OfficialDocument |
| 2026-07-07 | RC05 | PRC Cyberespionage Social-Engineering Network Charged in Taiwan | TechnologyDigital.CyberOperationsAndCapacity | TaiwanStrait | Deniable | 3 | Signalling | Medium | OfficialDocument |
| 2026-07-07 | RC09 | CRI-INTRUDE | TechnologyDigital.CriticalInfrastructure | NortheastAsia | Overt | 3 | Signalling | Low | MediaReport |
| 2026-07-17 | RC01 | WAIC 2026 – Xi Jinping Keynote and Huawei Atlas 950 SuperPoD Debut | TechnologyDigital.SemiconductorAndCompute | Overt | 3 | CapacityDisplay | Medium | OfficialDocument | |
| 2026-07-17 | RC09 | AID-TRANSFER | TechnologyDigital.AIGovernanceAndDataSovereignty | NortheastAsia | Overt | 3 | DeEscalation | Medium | OfficialDocument |
| 2026-07-20 | RC09 | AID-REG | TechnologyDigital.AIGovernanceAndDataSovereignty | SoutheastAsia | Overt | 3 | Signalling | Low | MediaReport |
| 2026-07-20 | RC09 | CAP-FUND | TechnologyDigital.CyberOperationsAndCapacity | SouthPacific | Overt | 3 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-20 | RC09 | CAP-NORM | TechnologyDigital.CyberOperationsAndCapacity | SoutheastAsia | Overt | 3 | Signalling | Medium | OfficialDocument |
| 2026-07-20 | RC09 | SPC-SPEC | TechnologyDigital.DigitalInfrastructure | SouthPacific | Overt | 3 | Signalling | Medium | OfficialDocument |
| 2026-07-21 | RC09 | SPC-ITU | TechnologyDigital.DigitalInfrastructure | Regionwide | Overt | 3 | Signalling | Low | MediaReport |
| 2026-07-22 | RC09 | CBL-BUILD | TechnologyDigital.DigitalInfrastructure | Overt | 3 | CapacityDisplay | Low | MediaReport | |
| 2026-07-22 | RC09 | CRI-VULN | TechnologyDigital.CriticalInfrastructure | Regionwide | Overt | 3 | Escalation | Medium | Advisory |
| 2026-07-22 | RC09 | CRI-INTRUDE | TechnologyDigital.CriticalInfrastructure | Overt | 3 | Signalling | Low | MediaReport | |
| 2026-07-23 | RC01 | APEC Chengdu Statement on Digital Technologies and AI Adopted | TechnologyDigital.AIGovernanceAndDataSovereignty | Overt | 3 | Signalling | Medium | OfficialDocument | |
| 2026-07-01 | RC01 | XPHOR Silicon Photonics STAR Market IPO Filing Accepted | TechnologyDigital.SemiconductorAndCompute | Overt | 2 | CapacityDisplay | Low | MediaReport | |
| 2026-07-01 | RC09 | AID-CLOUD | TechnologyDigital.AIGovernanceAndDataSovereignty | SoutheastAsia | Overt | 2 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-02 | RC01 | India-Japan internet registry cooperation advances IPv6 and security | TechnologyDigital.DigitalInfrastructure | NortheastAsia | Overt | 2 | NotAssessed | Medium | OfficialDocument |
| 2026-07-07 | RC01 | FCC blocks Chinese-linked telecom services firm | TechnologyDigital.DigitalInfrastructure | ExtraRegional | Overt | 2 | NotAssessed | Low | MediaReport |
| 2026-07-14 | RC09 | AID-TRANSFER | TechnologyDigital.AIGovernanceAndDataSovereignty | SoutheastAsia | Overt | 2 | Escalation | Medium | OfficialDocument |
| 2026-07-16 | RC09 | CAP-STD | TechnologyDigital.CyberOperationsAndCapacity | SoutheastAsia | Overt | 2 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-20 | RC09 | CAP-TRAIN | TechnologyDigital.CyberOperationsAndCapacity | SouthPacific | Overt | 2 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-21 | RC09 | CAP-NORM | TechnologyDigital.CyberOperationsAndCapacity | SouthPacific | Overt | 2 | Signalling | Medium | OfficialDocument |
| 2026-07-21 | RC09 | CAP-TRAIN | TechnologyDigital.CyberOperationsAndCapacity | SoutheastAsia | Overt | 2 | CapacityDisplay | Medium | OfficialDocument |
| 2026-07-22 | RC09 | CRI-REG | TechnologyDigital.CriticalInfrastructure | SoutheastAsia | Overt | 2 | DeEscalation | Medium | OfficialDocument |
| 2026-07-27 | RC09 | CAP-NORM | TechnologyDigital.CyberOperationsAndCapacity | Overt | 2 | Signalling | Medium | OfficialDocument | |
| 2026-07-16 | RC09 | AID-ENFORCE | TechnologyDigital.AIGovernanceAndDataSovereignty | Overt | 1 | DeEscalation | Medium | OfficialDocument | |
| 2026-07-24 | RC09 | AID-REG | TechnologyDigital.AIGovernanceAndDataSovereignty | Overt | 1 | Signalling | Medium | OfficialDocument | |
| 2026-07-29 | RC09 | AID-REG | TechnologyDigital.AIGovernanceAndDataSovereignty | SoutheastAsia | Overt | 1 | Signalling | Low | MediaReport |
How to Read This Brief
Magnitude — computed
Magnitude is not judged directly. It is the sum of three coded components, banded 1–5. Hover a magnitude pill to see its components.
Reversibility1 reversible · 2 costly · 3 irreversible
Scope1 bilateral · 2 sub-regional · 3 regional · 4 systemic
Novelty1 routine · 2 variation · 3 first observed
5sum 9–10
4sum 7–8
3sum 5–6
2sum 4
1sum 3
Strategic Effect
SignallingCommunicates intent or resolve
DeterrenceDesigned to prevent adversary action
CapacityDisplayDemonstration of existing or growing capability
EscalationRaises tension or crosses a threshold
DeEscalationReduces tension or creates off-ramps
MixedOrAmbiguousCross-cutting or unclear primary effect
NotAssessedEffect not assigned
Mode — how it was conducted
OvertAcknowledged, conducted openly
SubThresholdAttributable, calibrated below armed conflict
DeniableAttribution contested or refused
Mode is a property of conduct, not of subject matter. Only non-Overt modes are tagged in the timeline.
Capability · Intent · Leverage
CapabilityWhat an actor can do
IntentWhat an actor plans or seeks
LeverageWhat an actor uses to influence others
Confidence — computed
Derived from source reliability (A–E) and corroboration (number of independent sources on the same event), not judged directly. Most signals in this register are single-sourced and therefore sit at Medium or below.
Timeline entries show Obs (raw event) and Assessment (IPSC analysis) separately.
Citation & Licence
Cite as
Indo-Pacific Studies Center. Technology & Digital Competition — July 2026, Strategic Brief Issue 001. Indo-Pacific Studies Center, 19 August 2026.
Plain text
Indo-Pacific Studies Center. "Technology & Digital Competition — July 2026," Strategic Brief Issue 001. Indo-Pacific Studies Center, 19 August 2026.
Copyright
© 2026 Indo-Pacific Studies Center (www.indo-pacificstudiescenter.org). Licensed under CC BY-NC-ND 4.0 — attribution required; no commercial use; no derivatives. This brief is produced for analytical and informational purposes and does not constitute official policy advice.
© 2026 Indo-Pacific Studies Center · CC BY-NC-ND 4.0 · www.indo-pacificstudiescenter.org
Technology & Digital Competition · Strategic Brief · Issue #001