Executive Summary

From August 15 to August 29, 2026, China’s military and intelligence agencies significantly expanded their global reach. Through synchronized maritime, aerospace, and cyber campaigns, the People’s Liberation Army (PLA) and the Ministry of State Security (MSS) worked to project power beyond the First Island Chain, normalize pressure on Taiwan, and hide state-sponsored cyber espionage behind decentralized networks.

The PRC focused on three main objectives during these two weeks. First, Beijing is changing the maritime status quo in the Indo-Pacific. China completed the initial phase of a large artificial island base at Antelope Reef in the South China Sea and surged oceanographic research vessels to map anti-submarine warfare (ASW) routes east of Taiwan. In a serious escalation of “gray zone” tactics, Chinese maritime militia vessels escorted these civilian research ships into Taiwan’s Exclusive Economic Zone (EEZ) to exhaust allied defense resources.

Second, the PLA is refining its ability to deploy forces long distances. It sent advanced J-16 fighters to North Africa for joint exercises with the Egyptian Air Force and held urban combat drills in Wuhan with Belarusian airborne troops and Z-20K helicopters. These events show the PLA is testing its ability to work with both partners and non-aligned nations far from home.

Third, Chinese cyber operations are evolving to prioritize deniability. U.S. authorities recently disrupted the QScan and QTRouter botnets, which revealed a “quartermaster” model where private Chinese firms manage compromised devices to route attacks through domestic networks. This hides the geographic origin of the strikes. Meanwhile, the use of AI-driven hacking tools against Taiwan signals a shift toward automated warfare.

These developments show a more confident PLA and MSS willing to challenge international norms. As they move from local deterrence to global power projection, allies must adapt their defense, counter-intelligence, and infrastructure security.

Main Body: Key Developments and Analysis

Maritime Operations and Gray Zone Expansion

The PRC has moved from occasional pressure to a permanent, multi-layered presence in the maritime domain. These aggressive expansions focus on consolidating territory in the South China Sea and preparing the battlespace around Taiwan.

South China Sea Fortification (Antelope Reef) Satellite imagery confirms that China has finished the first major phase of an artificial island at Antelope Reef. According to research from the Center for Strategic and International Studies (CSIS)¹, reclamation efforts created a 1,490-acre landmass with a deep-water harbor. Construction of a potential 9,000-foot runway is also underway, which is long enough to handle heavy bombers and transport aircraft.

The Antelope Reef base will significantly expand the PLA’s defensive umbrella over the northern South China Sea. While the Global Times claimed on August 20 that the construction is for local residents and fishermen, this follows a well-known pattern of using civilian excuses to mask military fortification².

Additionally, the South China Sea Institute of Oceanology approved plans on August 18 for an automated observation network at Scarborough Shoal and Macclesfield Bank¹. PRC officials stated that they intend to automate 70% of maritime monitoring by 2030, using drones and AI to provide the Coast Guard with real-time data to enforce territorial claims¹.

Subsurface Mapping and Escorts East of Taiwan, Chinese vessels like the Xiang Yang Hong 03 and Tong Ji have been mapping the Ryukyu and East Taiwan Trenches³. The Tong Ji was recently spotted just outside Taiwan’s contiguous zone near the Penghu archipelago⁴.

These missions help the PLA Navy build anti-submarine databases. By studying water temperatures and sea-floor depth, China is learning how to hide its submarines while making it harder for U.S. and allied subs to operate during a conflict³.

Tactics are also changing. For the first time, observers saw maritime militia fishing boats escorting a civilian research vessel in Taiwan’s waters³. These “gray zone” operations aim to tire out Taiwan’s defenses and establish a new normal without starting an outright war³.

The scale of this activity is massive. In July 2026, a record 244 Chinese ships were detected around Taiwan, and that high tempo continued through August with over 150 vessels spotted in the first three weeks³.

Naval Diplomacy and Transits China is also using diplomacy to legitimize its presence. On August 12, a Chinese frigate held joint drills with an Indonesian frigate in the Philippine Sea⁵. While IndAlthough Indonesia described the exercise as routine, Beijing seized the opportunity to assert itstion over waters east of Taiwan⁷.

In response, on August 21, the U.S. 7th Fleet flew a P-8A Poseidon aircraft through the Taiwan Strait to uphold freedom of navigation. Beijing tracked the flight and reaffirmed its claim over the waterway⁸.

Taiwanese Defensive Posturing and Counter-Measures

Taiwan has ramped up its defense preparations, focusing on asymmetric warfare, coastal security, and civil resilience to counter the PRC’s growing pressure.

Han Kuang 42 Exercises Taiwan’s annual Han Kuang exercises in August were more comprehensive than usual. They focused on countering a full invasion and blockade, involving both the military and civilian sectors⁶.

President William Lai participated in a drill simulating an evacuation during a PLA special forces attack¹¹. This highlights fears that China is practicing decapitation strikes using scale models of Taipei. The exercises also included joint Navy and Coast Guard drills to practice breaking a naval blockade⁶.

Taiwan also tested its cyber and electronic warfare defenses. Drills simulated an internet slowdown to see how public services would cope, and the Coast Guard practiced deploying electronic warfare vehicles near Taipei. On August 17, Taiwan held its first live-fire FPV drone exercises to test tactics against mechanized forces¹.

Defending Penghu The Penghu Islands have become a priority. Located in the middle of the Taiwan Strait, they are considered a vital frontline that China would need to capture before any amphibious assault on the main island¹⁰.

Taiwan recently moved Hsiung Feng anti-ship missiles to Penghu. This allows them to target Chinese ships coming from multiple directions. Experts at the Institute for National Defense and Security Research say this presence forces the PLA to deal with Penghu directly, as any fleet bypassing the islands would be open to a flanking attack¹.

Local resilience programs are also in place. Over 1,200 civilians in Penghu are now trained in first aid and logistics, and agreements have been signed to secure food and medicine in case of a blockade. This initiative follows a 2025 wargame that showed how quickly the islands could fall without better preparation¹⁰.

T-Dome Missile Defense To defend against missiles, Taiwan revealed the specs of its new Tien Kung IV interceptor on August 22. This system is part of a larger “T-Dome” network designed to provide multiple layers of protection against ballistic and cruise missiles⁴.

The T-Dome concept integrates the new interceptors with existing Patriot and Tien Kung III systems. Taiwan has also approved a $2 billion drone budget to build its asymmetric combat capabilities¹⁶. A new Littoral Combat Command (LCC) will oversee the use of these drones for coastal defense¹¹.

Aerospace Power Projection and Defense Diplomacy

In late August, the PLA projected its airpower far beyond the Western Pacific. These long-range missions show the PLA is moving toward global operational reach and testing new logistics and maintenance chains.

Eagles of Civilization 2026 On August 22, the PLAAF and Egyptian Armed Forces began joint air drills in Egypt. Chinese J-16 fighters flew alongside Egyptian Rafale jets. The 6,000-kilometer trip to North Africa was a major test of China’s aerial refueling and strategic airlift capabilities¹⁷.

The J-16 is one of China’s most advanced multirole fighters. By training with French-made Rafales, the PLA is learning more about the performance of Western-aligned aircraft¹⁷. This also helps Beijing market its military hardware to other nations in the Global South.

These drills follow claims from Pakistan that its Chinese-made J-10C fighters outperformed Rafales in recent border conflicts. By showing off the more powerful J-16 next to the Rafale in Egypt, China is signaling its intent to compete with Western military suppliers¹⁸.

Swift Eagle 2026 At the same time, the PLA finished drills with Belarusian troops in Wuhan, China. The exercise used Z-20K helicopters for urban combat and counter-terrorism training². The Z-20K is an indigenous helicopter similar to the U.S. Black Hawk, and its use in these drills demonstrates technical progress and strategic alignment with Belarus⁷.

The drills focused on urban warfare, including live-fire room clearance and surveillance. By building these partnerships, Beijing is putting pressure on the eastern flank of NATO while showing off its modern rotary-wing assets⁷.

Cyber Warfare and Signals Intelligence Operations

In the cyber domain, U.S. authorities shut down a massive botnet used by Chinese intelligence to hide their attacks. This reveal shows how China is restructuring its offensive cyber infrastructure for better stealth and scale.

Disrupting QScan and QTRouter On August 26, U.S. agencies seized control of the QScan and QTRouter hacking platforms. These were operated by “QTFY,” a state-sponsored group working for a private firm in Nanjing that acts as a “quartermaster” for Chinese intelligence¹⁹.

This infrastructure was designed for stealth and worked in two phases:

1. QScan: This tool scanned the internet to find and infect vulnerable home and small office routers¹⁹.
2. QTRouter: Once infected, these devices were linked together into an obfuscation network. Operators also used domestic proxy services in China to further mask their traffic²².

When MSS or PLA hackers launched an attack, the traffic looked like it was coming from a regular U.S. residential router instead of a military base in China. This tactic makes it much harder for defenders to block the attacks or prove who is responsible²¹.

Targets and Impact Court documents show this network has been active since 2018, targeting NASA, the Federal Reserve, the U.S. Senate, and various government labs²⁰. While some attacks were stopped, others were successful as recently as late 2024²¹.

By seizing the domains used for control, the FBI severed the link between the hackers and the botnet. However, analysts believe the MSS will likely rebuild this infrastructure using new domains soon²².

This disruption is part of a larger trend of Chinese state hackers positioning themselves within critical infrastructure systems. Unlike typical espionage for theft, these operations aim to cause disruptions during a crisis³⁰. In mid-2026, for example, hackers targeted over 100 U.S. water systems through internet-exposed controllers¹⁹.

Autonomous AI Hacking In Taiwan, hackers used autonomous AI tools to map government networks. These tools use multiple AI agents to work together, allowing them to probe defenses at a speed that traditional security systems can’t match¹⁶.

This use of AI for offensive cyber operations is a major shift. It aligns with Chinese military goals to use “intelligentized” warfare to overwhelm enemies with rapid precision strikes⁴. The fact that these tools are already being used against Taiwan shows the PLA is turning these theories into real-world capabilities³².

Cognitive Warfare and Covert Espionage

The battle for intelligence also involves subverting military personnel through psychological and political operations.

On August 18, a retired Taiwanese sergeant was indicted for espionage. He had been recruited by the “Wolong Society,” a Chinese spy ring that targets Taiwanese service members with personal debt¹. In exchange for money to pay off his debts, the sergeant leaked documents via Telegram and even reenlisted after retirement just to keep spying¹.

The spy ring also forced him to record a “surrender video” supporting China’s annexation of Taiwan. Beijing collects these videos to use as psychological warfare, aiming to damage Taiwanese morale by making the military look compromised¹.

China is also using economic “goodwill” to influence politics. It recently announced measures to integrate the island of Kinmen with the mainland city of Xiamen. Analysts see the move as a way to build support for pro-Beijing candidates in upcoming local elections by linking local prosperity directly to Chinese support².

Chronological Timeline of Events

The following table details the verified significant actions executed by Chinese military and intelligence entities over the reviewed period, demonstrating the high operational tempo across multiple geographic theaters.

Date	Description of Activity	Location / Domain	Entities Involved
August 12, 2026	Joint naval passing exercise (communications and formation maneuvers) normalizes PLA presence east of Taiwan.	Philippine Sea	PLAN Frigate Honghe, Indonesian Frigate KRI I Gusti Ngurah Rai-332 [cite: 5, 6]
August 13, 2026	Research vessel begins extensive ASW bathymetric mapping over deep-sea trenches while escorted by Coast Guard.	East of Taiwan	Ministry of Natural Resources (Xiang Yang Hong 03), CCG4
August 18, 2026	SCSIO announces plans for a “three-dimensional marine observation network” to automate territorial enforcement.	Zhongsha Islands (South China Sea)	South China Sea Institute of Oceanology1
August 18, 2026	Taiwanese prosecutors indict a military sergeant linked to the “Wolong Society” PRC spy ring for leaking documents and creating surrender videos.	Taiwan	MSS operatives, Taiwanese Reserve Command1
August 19, 2026	Satellite imagery analysis confirms completion of the first construction phase of a 1,490-acre artificial island and harbor.	Antelope Reef (Paracel Islands)	PRC state construction entities, PLA1
August 20, 2026	Research vessel equipped with UUV capabilities tracked 0.3 nautical miles outside Taiwan’s contiguous zone.	Northwest of Penghu	PRC Research Vessel Tong Ji, Taiwan Coast Guard4
August 21, 2026	PLA tracks and monitors a United States P-8A Poseidon anti-submarine patrol aircraft transiting international airspace.	Taiwan Strait	PLAAF, US Navy 7th Fleet8
August 22, 2026	Launch of the “Eagles of Civilization 2026” joint air exercise, projecting PLA airpower into North Africa.	Multiple Air Bases, Egypt	PLAAF (J-16 fighters), Egyptian Armed Forces17
August 24, 2026	Closing ceremony of the “Swift Eagle 2026” joint counter-terrorism and urban combat training exercise.	Wuhan, China	PLA Airborne Troops (Z-20K), Belarusian Airborne Troops2
August 26, 2026	US authorities seize command domains of the QScan and QTRouter botnets, disrupting a major PRC obfuscation network.	Global Cyberspace	DOJ, FBI, NSA, Nanjing Xinjiuwei Network Tech Co., MSS, PLA21
August 28, 2026	Record levels of maritime intimidation continue; Taiwan tracks 13 Chinese naval and official vessels encircling the island.	Waters surrounding Taiwan	PLAN, CCG, Taiwan Ministry of National Defense10

Conclusion

The last 14 days show that the PRC is aggressively expanding its military and intelligence capabilities. The record number of ships around Taiwan and the deployment of fighters to Egypt show a clear shift in doctrine from regional defense to assertive, global power projection.

In the maritime domain, China has established a permanent presence around Taiwan using a mix of the Coast Guard, research fleets, and maritime militia. This forces Taiwan to stay on high alert while China maps the seafloor and practices for a future blockade.

In cyberspace, the quartermaster model shows that Chinese intelligence is prioritizing automation and stealth. Using botnets on residential hardware lets them infiltrate secure networks while maintaining plausible deniability.

Looking ahead, analysts should watch for new military hardware at Antelope Reef and an immediate pivot to new cyber infrastructure. China is likely to continue expanding its capabilities after recent disruptions.

Appendix: Methodology

This report was compiled using open-source intelligence (OSINT) and cross-referencing multiple authoritative sources to ensure accuracy and objectivity.

Source Categories and Validation

Data was gathered from a variety of sources to avoid bias. These include:

1. Official Government and Military Statements: Bulletins and press releases from the PRC Ministry of National Defense¹⁷, the Taiwan Ministry of National Defense¹⁰, the United States Department of Justice, the Federal Bureau of Investigation, the National Security Agency, and the Cybersecurity and Infrastructure Security Agency²⁰.
2. Established Think Tanks and Research Institutes: Technical and strategic analysis from organizations such as the Institute for the Study of War (ISW) and the Center for Strategic and International Studies (CSIS)¹.
3. Cybersecurity Threat Intelligence: Forensic reports and technical teardowns detailing infrastructure, indicators of compromise, and malware signatures, specifically those documenting the QScan and QTRouter platforms published by private security researchers and federal authorities¹⁹.
4. Mainstream Journalistic Investigations: Reports from verified, top-tier news organizations providing on-the-ground contextual reporting regarding military exercises, geopolitical developments, and defense procurements³.

To filter out propaganda, any claims from state-owned media were checked against independent satellite imagery and other verified reports. Statements about technical successes or the peaceful nature of construction projects were treated as official narratives rather than facts unless they could be independently proven⁴.

Data Collection Constraints and Visibility Gaps

While this report provides a strong operational picture, some details remain classified or hidden. Specific technical data on Taiwan’s new missiles and the full extent of recent cyber breaches in the U.S. defense sector are not publicly available. Additionally, the exact reasons for the recent surge in maritime militia activity remain unclear due to the opaque nature of China’s internal decision-making.

---

Please share the link on Facebook, Forums, with colleagues, etc. Your support is much appreciated and if you have any feedback, please email us in**@*********ps.com. If you’d like to request a report or order a reprint, please click here for the corresponding page to open in new tab.

---

Sources Used

1. China & Taiwan Update, August 21, 2026 | ISW, https://understandingwar.org/research/china-taiwan/china-taiwan-update-august-21-2026/
2. http://eng.mod.gov.cn/2025xb/N/T/16481284.html#:~:text=Participating%20troops%20conduct%20tactical%20live,the%20Chinese%20PLA%20Air%20Force.
3. China deploys record number of ships around Taiwan as pressure, https://www.freemalaysiatoday.com/category/world/2026/08/27/china-deploys-record-number-of-ships-around-taiwan-as-pressure-grows
4. China & Taiwan Update, August 25, 2026 | ISW, https://understandingwar.org/research/china-taiwan/china-taiwan-update-august-25-2026/
5. Indonesia-China Naval Drill Could Help Normalize Beijing’s, https://www.eurasiareview.com/28082026-indonesia-china-naval-drill-could-help-normalize-beijings-presence-east-of-taiwan-analysis/
6. China’s maritime presence around Taiwan is becoming the new, https://acleddata.com/report/chinas-maritime-presence-around-taiwan-becoming-new-normal
7. China-Belarus Swift Eagle 2026 joint training concludes, http://eng.mod.gov.cn/2025xb/N/T/16481284.html
8. US Navy aircraft transits Taiwan Strait ahead of Xi-Trump meeting, https://www.straitstimes.com/asia/east-asia/us-navy-aircraft-transits-taiwan-strait-before-planned-xi-trump-meeting
9. PLA tracks, monitors US P-8A’s transit through Taiwan Straits: source, https://www.globaltimes.cn/page/202608/1368726.shtml
10. Taiwan fortifies Penghu as frontline against China | Taiwan News, https://www.taiwannews.com.tw/en/news/6430120
11. China & Taiwan Update, August 14, 2026 | ISW, https://understandingwar.org/research/china-taiwan/china-taiwan-update-august-14-2026/
12. An Analysis of the Evolution of Chinese Special Operations Forces, https://blog.roninsgrips.com/an-analysis-of-the-evolution-of-chinese-special-operations-forces/
13. World’s strongest military alliance faces new Chinese move as Beijing deploys Z-20Ks near NATO borders while it’s African exercises continues, https://africa.businessinsider.com/local/markets/worlds-strongest-military-alliance-faces-new-chinese-z-20k-assault-helicopters-after/kvfw74x
14. China SITREP – Week Ending January 24, 2026 – Ronin’s Grips, https://blog.roninsgrips.com/china-sitrep-week-ending-january-24-2026/
15. On islands key to Taiwan’s defense, troops prepare for a Chinese, https://www.japantimes.co.jp/news/2026/08/28/asia-pacific/taiwan-defense-chinese-strike-prepare/
16. China & Taiwan Update, August 18, 2026 | ISW, https://understandingwar.org/research/china-taiwan/china-taiwan-update-august-18-2026/
17. Egypt, China launch ‘Eagles of Civilization 2026’ air exercise, https://sis.gov.eg/en/media-center/news/egypt-china-launch-eagles-of-civilization-2026-air-exercise/
18. China’s J-16 fighter jets share skies with Rafales in Egypt, https://m.economictimes.com/news/defence/chinas-j-16-fighter-jets-share-skies-with-rafales-in-egypt/articleshow/133452929.cms
19. This Week in Cyber – August 20–26, 2026 – CrunchAtlas, https://www.crunchatlas.com/insights/this-week-in-cyber-august-2026-2026
20. NSA News & Highlights – National Security Agency, https://www.nsa.gov/Press-Room/News-Highlights/
21. US says Chinese-linked hackers attacked NASA, Senate, and gov’t, https://www.aljazeera.com/news/2026/8/26/us-says-chinese-linked-hackers-attacked-nasa-senate-and-govt-agencies
22. FBI Seizes Domains Behind China-Linked Hacking Operation, https://www.esecurityplanet.com/threats/news-fbi-china-hacking-qscan-qtrouter-takedown/
23. FBI, DOJ Seize China-Linked Hacking Platforms Targeting Federal, https://www.meritalk.com/articles/fbi-doj-seize-china-linked-hacking-platforms-targeting-federal-agencies/
24. https://www.justice.gov/opa/pr/justice-department-and-fbi-seize-platforms-operated-and-used-china-state-sponsored-hackers
25. US seizes domains for Chinese QScan and QTRouter hacking tools, https://www.telecomstechnews.com/news/us-seizes-domains-for-chinese-qscan-and-qtrouter-hacking-tools/
26. China-Linked Hacking Group QTFY Targets Military and Critical, https://media.defense.gov/2026/Aug/26/2003986916/-1/-1/0/JCSA_CHINA_QTFY_MALICIOUS_SYSTEMS.PDF
27. US says Chinese hackers broke into Justice Department, NASA, Federal Reserve, Senate, https://indianexpress.com/article/technology/tech-news-technology/us-says-chinese-hackers-broke-into-justice-department-nasa-federal-reserve-senate-10851631/
28. Beijing denies US claims it backed hacking operation – Taipei Times, https://www.taipeitimes.com/News/world/archives/2026/08/28/2003863288
29. DOJ, FBI say China-backed hackers breached Fed, other US agencies, https://www.housingwire.com/articles/doj-fbi-seize-qscan-qtrouter-prc-botnet-critical-infrastructure/
30. China Threat Overview and Advisories – CISA, https://www.cisa.gov/topics/cyber-threats-and-advisories/nation-state-cyber-actors/china
31. 2026 Cyber Threat Assessment – NJCCIC – NJ.gov, https://www.cyber.nj.gov/threat-landscape/2026-cyber-threat-assessment
32. AI’s Military Role – Ronin’s Grips, https://blog.roninsgrips.com/military-ai-analytics-and-reporting/
33. China’s Shift to Intelligentized Warfare: Implications for Global Security, https://blog.roninsgrips.com/chinas-shift-to-intelligentized-warfare-implications-for-global-security/
34. Military Analytics and Reporting – Ronin’s Grips, https://blog.roninsgrips.com/military-special-operations-forces-analytics-and-reporting/
35. Taiwan tracks 13 Chinese ships around country | Aug. 26, 2026 10:10, https://www.taiwannews.com.tw/news/6427908
36. Taiwan detects Chinese military activity around its territory, https://www.aninews.in/news/world/asia/taiwan-detects-chinese-military-activity-around-its-territory20260824084834