Defense Secretary Pete Hegseth made a significant announcement on Wednesday regarding the Department of Defense’s decision to prohibit Chinese nationals from working as coders on Pentagon cloud systems. This move comes after growing concerns about security risks associated with this practice. For years, a program similar to Microsoft’s internal arrangements allowed foreign nationals, including developers from China, to contribute code to DoD systems under the supervision of US contractors. However, Hegseth emphasized that this arrangement should have never been permitted, stating that it does not align with the principles of putting America first and exercising common sense. He expressed disbelief that such a practice was ever allowed to happen and stressed the importance of prioritizing US national security over profit maximization for vendors working with the Department of Defense.
The decision to end the use of Chinese nationals in servicing Department of Defense cloud environments was prompted by a review launched by Hegseth upon learning about the vulnerability posed by the program. Microsoft, a key cloud contractor for the Pentagon, is currently conducting an audit to identify any vulnerabilities associated with the program. The company has terminated the use of China-based engineering teams for DoD cloud systems and is committed to collaborating with the US Government to meet security expectations. Hegseth further stated that all Department of Defense software vendors will be required to terminate any Chinese involvement in DoD systems, emphasizing the need to prioritize national security.
The Defense Department expressed surprise over the use of the escort program by Microsoft, with concerns raised about the lack of strong policies to prevent abuse. Following reports by ProPublica on the practice, Microsoft promptly announced changes to its programs with the Pentagon, ceasing the use of engineers based in China for technical support. To address the potential risks associated with the program, Hegseth revealed that both Microsoft’s internal audit and an independent review by the Pentagon are underway to detect any malware or backdoors that may have been introduced through the escort program.
The outcome of these investigations will play a crucial role in shaping the Pentagon’s approach to its reliance on private technology providers. Hegseth’s directive ensures that foreign engineers from China will no longer be involved in maintaining the Defense Department’s cloud systems, emphasizing the importance of safeguarding national security interests.