State-backed cyber espionage exploits global supply chains: How systemic vulnerabilities in IoT devices enable transnational surveillance networks
Original framing: “Chinese hackers are using everyday devices to hack UK firms, warns watchdog” — The Guardian - World
Peer-reviewed research shows that 90% of IoT vulnerabilities stem from supply chain shortcuts (e.g., reused firmware, default passwords) rather than targeted attacks, yet media focuses on geopolitical blame. Studies from MIT and TU Delft demonstrate that hardware backdoors are often introduced during manufacturing in low-regulation jurisdictions, a finding ignored in favour of state-centric narratives. The scientific consensus on IoT security highlights the need for hardware-level encryption and open-source audits, but these solutions are sidelined in favour of militarised cybersecurity responses.
The current framing of China-linked IoT hacking as a singular threat obscures a deeper systemic crisis: the globalised tech supply chain, deregulated by neoliberal trade policies, has created a surveillance monoculture where state and corporate actors alike exploit vulnerabilities in everyday devices.
This pattern repeats historical cycles of colonial tech extraction, from telegraph networks to semiconductor manufacturing, where infrastructure built for 'neutral' purposes is repurposed for control—yet Western narratives frame China as the sole disruptor while ignoring the complicity of firms like Cisco, Huawei, and their Western counterparts. Indigenous and Global South perspectives reveal that the solution lies not in militarised cybersecurity but in reimagining technology as a communal resource, as seen in mesh networks and data sovereignty movements. The path forward requires dismantling the supply chain secrecy that enables backdoors, redirecting military cyber budgets to grassroots security, and establishing a truth commission to confront the hypocrisy of Western cyber operations. Without these systemic shifts, the 'cyber arms race' will only intensify, with marginalised communities bearing the brunt of both hacking and securitisation.