China’s Cyber Capabilities Now Equal to the US, Warns Dutch Intelligence

Why It Matters

Parity with the United States signals a markedly elevated cyber threat to Western infrastructure, compelling governments and enterprises to rethink detection, attribution, and resilience strategies.

Key Takeaways

• MIVD declares China equals US in offensive cyber power.
• Only a fraction of Chinese attacks on Dutch assets are detected.
• PLA’s 2024 Cyberspace Force boost enables rapid tool adaptation.
• Campaigns like Salt Typhoon target routers of Dutch ISPs and telecoms.

Pulse Analysis

The Dutch Defence Intelligence Service’s annual report marks a watershed moment in Western cyber threat assessments, declaring that Beijing’s offensive capabilities now match those of the United States. This conclusion is bolstered by parallel findings from the U.S. Office of the Director of National Intelligence and Google’s Threat Intelligence Group, which documented a surge in zero‑day exploits by Chinese actors in 2025. By positioning China as a peer rather than a challenger, the MIVD signals that traditional attribution models may no longer suffice, prompting a shift toward more proactive, collaborative defense frameworks across the EU and NATO.

At the technical core of this escalation is the PLA’s 2024 reorganization, which dissolved the Strategic Support Force and created a dedicated Cyberspace Force. The new structure grants Chinese hackers the agility to continuously refine tooling, exploit edge devices such as routers, firewalls, and VPNs, and run competing internal units to discover vulnerabilities. Campaigns like Salt Typhoon and RedMike illustrate this approach, compromising routers of smaller Dutch hosting providers and targeting telecom firms deemed high‑value for intelligence gathering. The report also highlights China’s “whole‑of‑society” doctrine, where citizens, corporations, and academic institutions are legally obliged to support state intelligence, amplifying the scale and persistence of cyber‑espionage.

For businesses and policymakers, the parity assessment translates into urgent operational imperatives. Companies must accelerate patch management, especially for edge hardware, and adopt threat‑intelligence sharing platforms that can surface low‑visibility attacks. Governments should consider expanding legal tools—such as the 2025 Dutch espionage law amendment—to deter foreign actors and strengthen public‑private partnerships. Ultimately, the convergence of Chinese cyber prowess with conventional military strategy, particularly around Taiwan, demands a holistic resilience strategy that integrates cyber, diplomatic, and economic dimensions to safeguard critical infrastructure and innovation ecosystems.