Cyberspace Administration of China issued new vulnerability disclosure regulations that oblige experts to report zero-days to the government.