The think tank noted that many technology firms avoid directly naming China due to fears over market access and potential commercial repercussions
Technology companies should be incentivised by governments to publicly call out China-linked cyber attacks rather than remain silent out of commercial caution, according to a new report by the Australian Strategic Policy Institute.
The report argues that failing to attribute cyber intrusions weakens deterrence, leaves the public underinformed and reduces pressure on governments to respond decisively. It criticises Palo Alto Networks for not publicly naming China in relation to a recent cyber campaign, suggesting the hesitation stemmed from concerns about retaliation against the company or its clients.
The think tank noted that many technology firms avoid directly naming China due to fears over market access and potential commercial repercussions. In contrast, it highlighted the approach of Google, whose Threat Intelligence Group has publicly stated that China leads global cyber threat campaigns by volume, including operations targeting defence suppliers and emerging technologies such as drones and uncrewed systems.
“Without a patriotic partnership between Western governments and industry, both players will continue treating their relationships with China as too big to fail,” the report stated, warning that financial interests should not override national security considerations.
It recommended that governments work more closely with industry to reward transparency through reputational benefits and preferential market access. The report also suggested that the three AUKUS nations could adopt policies restricting companies with operations in China from participating in advanced capability projects under Pillar Two of the pact.
“Naming malicious state activity is not escalation but clarification,” the report emphasised, arguing that public attribution informs citizens, shapes diplomatic messaging and limits plausible deniability.
The findings add to growing debate over how democracies should balance economic engagement with China against mounting cybersecurity threats.
