U.S. officials say supply-chain threat is ‘very real’ regardless of Bloomberg story accuracy

FBI and Department of Homeland Security officials continued to push back Wednesday against a recent news story that described a devastating supply-chain attack on major U.S. technology companies, but their testimony in a Senate hearing also emphasized that such threats do remain “very real” in general. “This is a particularly pernicious threat … because it’s very difficult for the average citizen, company or government entity to understand every component that was put into a piece of equipment or network that they’ve purchased,” Homeland Security Secretary Kirstjen Nielsen said in a Homeland Security and Governmental Affairs Committee hearing that also featured FBI Director Christopher Wray. Bloomberg Businessweek reported last week that Chinese operatives had used rice grain-sized chips to compromise motherboards sold by Super Micro Computer (Supermicro), placing a backdoor into many companies, including Apple and Amazon Web Services. The attack, in theory, entails devastating consequences for information security at those companies and beyond. Companies mentioned in the article have issued strongly […]

The post U.S. officials say supply-chain threat is ‘very real’ regardless of Bloomberg story accuracy appeared first on Cyberscoop.

Continue reading U.S. officials say supply-chain threat is ‘very real’ regardless of Bloomberg story accuracy

10/8/18: Dtex, Insider Threat, Privacy News: Dtex Earns Leadership, Product Awards; Insider Compromises French Law Enforcement Agency; The Big Hack

Last week, awards organizations based in the United Stated and United Kingdom recognized Dtex for its product excellence and leadership. The Golden Bridge Awards honored the Dtex Advanced User Behavior Platform for innovations in insider threat detecti… Continue reading 10/8/18: Dtex, Insider Threat, Privacy News: Dtex Earns Leadership, Product Awards; Insider Compromises French Law Enforcement Agency; The Big Hack

DHS, Apple push back on Bloomberg supply chain story

U.S. and British security agencies have backed statements by Apple and Amazon Web Services disputing an explosive news report claiming that Chinese intelligence agents planted malicious computer chips in equipment used by the tech giants. “[A]t this time we have no reason to doubt the statements from the companies named in the story,” the Department Homeland Security said on Saturday. That echoed a Friday statement from Britain’s National Cyber Security Centre, which said the agency had “no reason to doubt the detailed assessments made by AWS and Apple.” The blockbuster story from Bloomberg Businessweek claims that Chinese spies placed the tiny chips on server motherboards supplied by Super Micro Computing Inc., setting up a backdoor to some 30 companies, including Apple and AWS. Such a compromise would represent an espionage operation of staggering proportions. Apple, AWS, and Supermicro all responded with vigorous, detailed denials of key elements of the story. “At […]

The post DHS, Apple push back on Bloomberg supply chain story appeared first on Cyberscoop.

Continue reading DHS, Apple push back on Bloomberg supply chain story

Chinese Spying, Facebook Shadow Contact Information, iPhone X FaceID Privacy – WB37

This is your Shared Security Weekly Blaze for October 8th 2018 with your host, Tom Eston. In this week’s episode: Chinese Spying, Facebook Shadow Contact Information and iPhone X FaceID Privacy. Silent Pocket is a proud sponsor of the Shared Secu… Continue reading Chinese Spying, Facebook Shadow Contact Information, iPhone X FaceID Privacy – WB37

Google quietly bought Mastercard credit and debit card records

The multimillion dollar data buy allows Google to link what we buy in brick-and-mortar stores to what ads we clicked online. Continue reading Google quietly bought Mastercard credit and debit card records