MI5 Warns Over 100 Academics Helped China's Espionage Plans

The UK’s domestic security agency has warned that over 100 academics have helped Beijing’s spies to improve their espionage capabilities.

MI5 issued the rare espionage alert on September 30, calling out the China General Technology Research Institute (CGTRI), or China Academy of General Technology (CAGT), for its connection to China's Ministry of State Security (MSS).

Unusually for a security agency, the MSS handles both domestic/counterintelligence and foreign intelligence. It is thought to employ hundreds of thousands of workers, including many hackers that have been responsible for some of China’s most audacious campaigns, via ‘groups’ such as Silk Typhoon and Salt Typhoon.

MI5’s missive is designed to warn academics that the “primary purpose” of CGTRI/CAGT is to fund research that “directly improves MSS technical capability” for this espionage activity.

“MI5 has identified that more than 100 UK-linked academics have contributed to projects funded by MSS via CGTRI. In some cases, academics may not be aware that CGTRI is funding the Chinese research project they are contributing to,” it said.

“UK academics have contributed to CGTRI-funded projects on topics including artificial intelligence, cybersecurity, covert communications systems and steganography. This activity supports MSS espionage, which poses a threat to UK national security.”

The UK’s security agency “strong advised” the country’s academic institutions to review any current or planned collaboration with CGTRI, and trace the funding source of any research collaboration with Chinese institutions to make sure there isn’t a CGTRI link.

“When scoping any research collaborations, institutions should make full use of HMG’s Research Collaboration Advice Team (RCAT) and Trusted Research guidance produced by the National Protective Security Authority (NPSA), and consider taking their own independent legal advice,” it added.

Potential Criminal Consequences

MI5’s warning also came with a reminder of the legal consequences of collaboration with foreign spies, citing sections 3 and 17 of the National Security Act 2023.

These relate to the crimes of “Assisting a Foreign Intelligence Service” and “Obtaining a Material Benefit from a Foreign Intelligence Service” respectively.

Graeme Stewart, head of public sector at Check Point, branded UK universities a part of the country’s “national security perimeter” and “an obvious target” given the valuable research, IP and expertise they host.

“If I were running security at a university today, I would be asking three questions: who has access to our most sensitive research, what can they access, and do we really know who ultimately sits behind those relationships?” he said.

“That has to go beyond checking the names on research agreements. Universities need to understand who can access networks, datasets, source code, AI models and intellectual property, how that access is controlled, and whether they would spot unusual movement of sensitive information.”

Chinese Spy Gets 20 Years for Aviation Espionage Plot News 17 November 2022

Chinese Spy Gets 20 Years for Aviation Espionage Plot

FBI and MI5 Bosses Warn of “Massive” China Threat News 7 July 2022

FBI and MI5 Bosses Warn of “Massive” China Threat

Chinese Tech Firms Linked to Salt Typhoon Espionage Campaigns News 28 August 2025

Chinese Tech Firms Linked to Salt Typhoon Espionage Campaigns

Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats News 23 October 2024

Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats

Barracuda Zero-Day Exploited by Chinese Actor News 16 June 2023

Barracuda Zero-Day Exploited by Chinese Actor

What’s Hot on Infosecurity Magazine?

Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns

Japanese Railway Operators Hit with Weekend Cyber Attacks

Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials

Trump, Six AI Giants Sign 'Super Intelligence' Safety Accord

Microsoft Warns NeedyMantis Malware Enables Persistent Network Access

RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model

Who Authorized That Agent? Enforcing AI Authority Before the Action

US: Critical Infrastructure Braces for Sweeping New Cyber Reporting Rules

AI Security Awareness is the New Frontline of Cybersecurity

Experts Alarmed Over Gyazo’s Breach of 490 Million Metadata Records

CISA Charts New "Quality Era" for Global CVE Program

Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach

From APIs to Agents: How to Secure AI at Enterprise Scale

Your Security Awareness Programme Isn't Failing, It's Just Not Relevant

Frontier AI: How Cyber Defenders Can Harness the Defender’s Window

Human Risk in Cybersecurity: Protecting Your Organization Beyond Technology

Same Front Door, New Visitors: Securing Humans and AI Agents at the Browser

Securing M365 Data and Identity Systems Against Modern Adversaries

How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies

Researchers Claim First Fully Agentic Ransomware: JadePuffer

AI is Already Powering Cyber-Attacks. Can it Power Cyber Defense?

Google Cloud's New CISO Chris Betz on Integrating AI in Cyber Defenses

How World Cup Password Trends Can Increase Active Directory Risk

New CISA Guide Helps Agencies Adopt SASE For Zero Trust