The September 24 round of US-China technology talks has picked up an agenda item that did not exist in the last cycle. According to Nikkei Asia’s sources, the American side plans to raise the prevention of AI-directed cyberattacks, meaning intrusions where the planning and execution sit with a model rather than a person at a keyboard. Beijing, for its part, is expected to return to its standing complaint about export controls.
The asymmetry in that pairing is the whole story. Washington wants behavioral commitments on a capability that is hard to attribute and harder to verify. Beijing wants relief from a rule set that is published, numbered, and enforced at customs. One side is asking for restraint on something invisible. The other is asking for the removal of something concrete.
Why the cyber item surfaced now
Agentic tooling has collapsed the cost of the middle of an intrusion campaign. Reconnaissance, credential reuse, lateral movement, writing the lure in idiomatic English or idiomatic Mandarin: all of it now runs at a tempo that used to need a staffed team on shift. Volume rises, and volume is what eventually forces a diplomatic conversation, even a performative one.
What Washington cannot do is verify any commitment it might extract. You can inspect a fab. You can count tool shipments. You cannot inspect intent inside a rented cluster, and the operator running the campaign may be three contractual layers away from anything a state would admit to owning. Whatever language comes out of September 24 on this point will be a norm-setting gesture, not a control.
What Beijing brings to the table
Export controls remain the only file China consistently wants opened. The pitch has been the same for three years: the restrictions are protectionism dressed as security, they distort the market, they should be relaxed as a gesture of good faith. The pitch has not worked, and there is no sign the current US position is softer than the previous one.
So the likely outcome is a session where each side raises the thing the other cannot concede, and both note the exchange of views. That is not nothing. Talks that keep happening are how attribution disputes stay below the level where someone does something irreversible.