The Quiet War Behind the Chip Race

 

The unfolding controversy involving Nvidia chief executive Jensen Huang offers a sobering reminder that the battle for technological supremacy is no longer fought exclusively through military confrontation, trade restrictions or conventional industrial competition. 

Increasingly, it is fought through intelligence gathering, corporate relationships, strategic investments, human networks and the acquisition of technological secrets. The allegations surrounding Nvidia should therefore be examined beyond the personal controversy involving its chief executive. They raise fundamental questions about how vulnerable the world's most valuable technology companies are to foreign intelligence operations.

On 8 November 2026, Nvidia's board announced an independent investigation following reports that Huang had been targeted by a foreign intelligence operation involving Alice Huang, a former executive of Singapore-based Megaspeed. US intelligence reportedly suspected that she had gathered information for Beijing. 

Huang subsequently acknowledged an extramarital relationship, while denying any implication that he knowingly participated in espionage. The company maintained that it had no reason to believe its national security interests or proprietary information had been compromised (Associated Press, 2026; NVIDIA Corporation, 2026).

The controversy escalated when shareholders initiated a class action lawsuit alleging that Nvidia had failed to disclose material risks to investors. Although the allegations remain subject to investigation and judicial scrutiny, the incident demonstrates how personal vulnerabilities involving senior executives can potentially become corporate and national security concerns.

Sun Tzu's Intelligence Doctrine

More than 2,000 years ago, Chinese military strategist Sun Tzu wrote in The Art of War that foreknowledge of an adversary's intentions and capabilities was essential to victory. Chapter 13, commonly translated as "The Use of Spies", identifies five categories of intelligence agents: local spies, internal spies, converted spies, expendable spies and surviving spies (Sun Tzu, 1910).

The significance of this doctrine lies in its understanding that intelligence is not necessarily obtained through military confrontation. It can be acquired through human relationships, institutional access, commercial engagement and the exploitation of weaknesses within an adversary's organisation.

Applied to contemporary technological competition, this provides a useful framework for understanding how intelligence operations might target technology companies. An individual with access to senior executives, research personnel, investment information or commercial negotiations could potentially become an intelligence source. 

Similarly, employees, business intermediaries, contractors, researchers and supply-chain partners may possess access to information that would otherwise be difficult to obtain.

However, it would be inaccurate to suggest that the Nvidia allegations establish that Beijing deliberately implemented Sun Tzu's five categories of espionage. Rather, the ancient doctrine provides an analytical lens through which contemporary intelligence risks can be examined.

Technology Theft as Strategic Competition

The technological competition between Washington and Beijing has increasingly centred on artificial intelligence, advanced semiconductors, quantum computing, military applications and sophisticated manufacturing capabilities. Advanced AI processors are particularly important because they support military simulation, intelligence analysis, autonomous systems, surveillance and strategic decision-making.

The United States has repeatedly raised concerns about Chinese economic espionage, intellectual property theft and cyber intrusions. The Federal Bureau of Investigation identifies the protection of American businesses, universities and researchers against economic espionage as a major counterintelligence priority (Federal Bureau of Investigation, n.d.). 

These are official American assessments, rather than proof that every Chinese company or individual participates in espionage.

The concern is not limited to the United States. European institutions have also recognised technology leakage, critical infrastructure vulnerabilities and strategic supply-chain dependencies as significant economic security risks. The European Commission's economic security initiatives specifically identify technology security and technology leakage as areas requiring coordinated protection (European Commission, 2024).

The Nvidia controversy illustrates the potential importance of human intelligence within this competition. While cyber espionage can penetrate computer networks, human intelligence may provide access to corporate relationships, executive thinking, confidential business discussions and organisational decision-making.

The reported commercial relationship between Nvidia and Megaspeed also highlights another vulnerability: the complexity of international technology supply chains. According to Associated Press reporting, Megaspeed had purchased substantial quantities of Nvidia processors. 

The US authorities' reported concerns about possible information gathering and chip-related export restrictions therefore extend beyond the private relationship itself (Associated Press, 2026).

It is important to distinguish alleged diversion or circumvention of export controls from the theft of proprietary chip designs. They are different security problems, although both can undermine technological advantage.

Malaysia: An Emerging Strategic Vulnerability?

Malaysia cannot regard this controversy as an exclusively American problem. The country occupies an important position in the international semiconductor ecosystem, particularly in assembly, testing and packaging. 

The National Semiconductor Strategy seeks to move Malaysia towards higher-value activities, including integrated circuit design, advanced packaging, research and development, and semiconductor manufacturing (Ministry of Investment, Trade and Industry, 2024).

This ambition creates economic opportunities but also increases the strategic value of Malaysian industrial capabilities.

As Malaysia attracts international semiconductor companies, advanced manufacturing investments, foreign researchers and technology partnerships, it inevitably becomes more exposed to competing commercial and geopolitical interests. 

Industrial espionage could target proprietary manufacturing processes, chip designs, production technologies, customer information, supply-chain arrangements and commercially sensitive research.

The vulnerability is not necessarily confined to sophisticated cyberattacks. A compromised employee, inadequately screened contractor, commercially motivated intermediary or trusted business associate could potentially provide access to sensitive information.

Universities and research institutions deserve particular attention. International research collaborations, technology transfers and industry partnerships can generate innovation, but inadequate safeguards may expose unpublished research, defence-related applications and commercially valuable intellectual property.

Malaysia must also consider the security implications of its growing digital infrastructure. Data centres, cloud computing facilities, telecommunications networks, financial institutions, energy systems and government databases are attractive targets for intelligence collection because they contain information essential to national economic and administrative operations.

Nevertheless, there is insufficient publicly established evidence to conclude that Malaysia's strategic assets have already been systematically penetrated by a particular foreign intelligence service. 

The more defensible conclusion is that the country's expanding technological and economic exposure creates vulnerabilities that require stronger counterintelligence measures.

Beyond Cybersecurity: Protecting National Assets

Malaysia has already established an important legislative foundation through the Cyber Security Act 2024 (Act 854), which came into operation on 26 August 2024. The legislation establishes obligations for National Critical Information Infrastructure (NCII) entities, including cybersecurity risk assessments, audits and incident notifications (National Cyber Security Agency, n.d.).

However, cybersecurity compliance alone cannot address the full spectrum of foreign intelligence threats.

First, Malaysia should strengthen economic counterintelligence through closer coordination between NACSA, the National Security Council, the Royal Malaysia Police, the Malaysian Security Intelligence Organisation and relevant economic ministries. 

Security assessments should extend beyond network vulnerabilities to include foreign investment risks, sensitive research partnerships, technology transfers and access to strategically important corporate information.

Second, organisations controlling critical technology should introduce stronger personnel security arrangements. These should include proportionate background screening for sensitive positions, conflict-of-interest declarations, access restrictions, insider-threat monitoring and clear procedures for reporting suspicious approaches. Such measures must protect individual rights and avoid discrimination based on nationality or ethnicity.

Third, Malaysia should establish more comprehensive technology protection requirements for semiconductor companies, universities, research laboratories and government-linked institutions. Sensitive research should be classified according to its strategic value, with appropriate restrictions on access, data transfer and external collaboration.

Fourth, foreign investment screening should incorporate national security considerations without undermining Malaysia's attractiveness as an international investment destination. The objective should not be to discourage foreign participation, but to ensure that strategic technologies, critical infrastructure and commercially sensitive information remain adequately protected.

Finally, Malaysia should strengthen intelligence-sharing arrangements with trusted international partners, particularly in semiconductor security, export-control enforcement, cyber threat intelligence and emerging technologies.

The Strategic Lesson

Sun Tzu's enduring lesson is that victory often depends on understanding an adversary before confrontation becomes necessary. In today's technological environment, this principle has acquired a new dimension. Intelligence is not simply about discovering military secrets; it is also about understanding the people, institutions, relationships and technologies that sustain national power.

The Nvidia controversy remains an unfolding investigation, not proof of a successful espionage operation. Nevertheless, it exposes a vulnerability that governments and corporations cannot afford to ignore: even the most technologically advanced organisations remain dependent on human judgement, institutional trust and the security of their commercial relationships.

For Malaysia, the question is not whether foreign intelligence agencies are interested in the country's strategic assets. It is whether our institutions, corporations and research establishments are sufficiently prepared to protect them.

As Malaysia moves towards becoming a higher-value semiconductor and digital economy, national security must develop alongside technological ambition. 

Otherwise, the country risks becoming an important contributor to global technological advancement while remaining insufficiently equipped to protect the intellectual property, industrial capabilities and strategic information that will determine its future competitiveness.

References

1. Associated Press. (2026, November 9). Nvidia investigates whether CEO Jensen Huang was targeted by Chinese spy with whom he had an affair. https://apnews.com/article/nvidia-jensen-huang-investigation-chinese-spy-68839e7ca6ba2b121529f7e475e501d6

2. European Commission. (2024). Advancing European economic security: An introduction to five new initiatives (COM(2024) 22 final). https://place-based-innovation.ec.europa.eu/publications/advancing-european-economic-security-introduction-five-new-initiatives_en

3. Federal Bureau of Investigation. (n.d.). The China threat. https://www.fbi.gov/investigate/counterintelligence/the-china-threat

4. Ministry of Investment, Trade and Industry. (2024). National semiconductor strategy. https://www.miti.gov.my/miti/resources/NSS_141024.pdf

5. National Cyber Security Agency. (n.d.). Cyber Security Act 2024 (Act 854). https://www.nacsa.gov.my/act854.php

6. NVIDIA Corporation. (2026, November 8). Statement from NVIDIA Board of Directors. https://investor.nvidia.com/news/press-release-details/2026/Statement-from-NVIDIA-Board-of-Directors/default.aspx

7. Sun Tzu. (1910). The art of war (L. Giles, Trans.). Project Gutenberg. https://www.gutenberg.org/files/132/132-h/132-h.htm

8. U.S.-China Economic and Security Review Commission. (2022). China's cyber capabilities. https://www.uscc.gov/sites/default/files/2022-11/Chapter_3_Section_2--Chinas_Cyber_Capabilities.pdf

9. Beaumier, G., & Cartwright, M. (2024). Cross-network weaponization in the semiconductor supply chain. International Studies Quarterly, 68(1), sqae003. https://academic.oup.com/isq/article/68/1/sqae003/7578750

10. Rekhi, S., Amberiadis, K., Akib, A. A., & Srivastava, A. (2025). Analyzing collusion threats in the semiconductor supply chain (NIST Cybersecurity White Paper 46). National Institute of Standards and Technology. https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.46.pdf

11. Pellegrino, M. (2015). The threat of state-sponsored industrial espionage. European Union Institute for Security Studies https://op.europa.eu/en/publication-detail/-/publication/9de4b721-6256-43f0-b7df-988e3c4c9451

12. U.S. Government Accountability Office. (2024). China: Managing the economic relationship requires balancing benefits and risks (GAO-24-107189). https://www.gao.gov/products/gao-24-107189

13. Allen, G. C., & Goldston, I. (2025, March 14). Understanding U.S. allies' current legal authority to implement AI and semiconductor export controls. Center for Strategic and International Studies. https://www.csis.org/analysis/understanding-us-allies-current-legal-authority-implement-ai-and-semiconductor-export

10.11.2026

Kuala Lumpur.

© All rights reserved.