Cyber Security Roundup for August 2018

The largest data breach disclosed this month was by T-Mobile, the telecoms giant said there had been “unauthorised access” to potentially 2 million of their 77 million customer accounts. According to the media, a hacker took advantage of a vulnera… Continue reading Cyber Security Roundup for August 2018

Networking vendors patch ​against new cryptographic attack

Vulnerable IPSec IKE implementations used in Cisco, Huawei, ZyXel and Clavister networking devices can allow attackers to retrieve session keys and decrypt connections, researchers have found. The attack Dennis Felsch, Martin Grothe and Jörg Schwenk fr… Continue reading Networking vendors patch ​against new cryptographic attack

UK government worried Huawei software could facilitate cyberespionage

Huawei Technologies, the Chinese ICT infrastructure and smart device manufacturer, is now on UK’s security blacklist following technical “shortcomings” in the software used, writes Reuters. UK officials are concerned telecom companies… Continue reading UK government worried Huawei software could facilitate cyberespionage

DNC tells candidates not to use Huawei or ZTE devices

The Democratic National Committee has warned candidates running in the 2018 midterm elections not to use devices made by Chinese telecom firms Huawei and ZTE because of security concerns. “[P]lease make sure that you are not using or purchasing ZTE or Huawei devices anywhere within your staff – for personal or work-related use,” DNC Chief Security Officer Bob Lord wrote in an email obtained by CyberScoop. Lord sent the email Friday to Democratic state parties and the DNC’s sister committees. U.S. intelligence officials have long expressed concerns that equipment from Huawei and ZTE could be used to spy on Americans due to the companies’ alleged links to the Chinese government. Both companies have vigorously denied the allegations. Lord cited congressional testimony from February, in which U.S. intelligence directors raised security concerns about the Chinese companies. “I wanted to highlight that the intelligence community does not make statements like this lightly,” […]

The post DNC tells candidates not to use Huawei or ZTE devices appeared first on Cyberscoop.

Continue reading DNC tells candidates not to use Huawei or ZTE devices

Fighting Chinese cyber-espionage could cost U.S. 5G dominance

As the U.S. government works to neutralize its Chinese counterparts’ efforts to conduct surveillance via commercial telecom products, it may unintentionally jeopardize the United States’ bid to beat China to a nationwide 5G network.   This summer, U.S. officials, policymakers and allies have cracked down on Huawei and ZTE, two large Chinese smartphone and telecommunications equipment manufacturers. The pair are believed to have a cozy relationship with the Chinese Communist Party and People’s Liberation Army. Washington fears that relationship could lead Beijing to tap into equipment owned by those companies to siphon sensitive information and possibly lay the groundwork for cyberattacks.   But many industry, trade and technological experts are worried the measures may come at a steep price. The quest to upend China’s surveillance capabilities may be hurting America’s competitiveness in the race to develop and roll out 5G wireless technology. The dilemma presents the latest — and perhaps fiercest — technological showdown between Washington […]

The post Fighting Chinese cyber-espionage could cost U.S. 5G dominance appeared first on Cyberscoop.

Continue reading Fighting Chinese cyber-espionage could cost U.S. 5G dominance

Economic cyber-espionage is here to stay, U.S. counterintelligence report says

A new report from a U.S. counterintelligence agency details persistent efforts by China, Iran, and Russia to steal U.S. trade secrets, warns that those campaigns are here to stay and raises concerns about the software supply chain as a vector for economic espionage. China, Iran, and Russia are “three of the most capable and active cyber actors tied to economic espionage,” and they will “remain aggressive and capable collectors of sensitive U.S. economic information and technologies, particularly in cyberspace,” the report from the National Counterintelligence and Security Center (NCSC) states. Last year was a “watershed” year in public reporting of big software supply-chain operations, with seven incidents reported compared to just four between 2014 and 2016, according to the NCSC, which is part of the Office of the Director of National Intelligence (ODNI). The counterintelligence agency cites the seminal NotPetya attack, which U.S. officials blamed on Moscow, and the CCleaner backdoor, which […]

The post Economic cyber-espionage is here to stay, U.S. counterintelligence report says appeared first on Cyberscoop.

Continue reading Economic cyber-espionage is here to stay, U.S. counterintelligence report says

American companies protest FCC pressure on Huawei

In the face of regulatory pressure from the U.S. government, Huawei, a Chinese telecom company at the center of long-running cyber-espionage allegations, is flouting its apparent American beneficiaries. “Ripping out and replacing” a raft of Chinese-made telecom gear from existing U.S. infrastructure won’t be easy, a group of regional U.S. telecommunications companies protested to the Federal Communication Commission (FCC) this week. Trade groups representing these smaller American service providers have joined with Huawei in slamming the FCC’s proposal to ban American telecoms from using federal subsidies to purchase Chinese-made equipment, based on messages shared with the agency. In a second wave of comments filed to the FCC on Monday, Huawei defended itself, writing that its products do not pose security risks, that the opposition to its American presence is driven by protectionism and economic competition and that its American clients choose its products because they are cheap, reliable and effective. Huawei cited roughly a dozen other entities […]

The post American companies protest FCC pressure on Huawei appeared first on Cyberscoop.

Continue reading American companies protest FCC pressure on Huawei

Senators want Commerce to help U.S. firms ditch ZTE

A bipartisan trio of senators have asked the Department of Commerce to clarify that U.S. companies are welcome to remove products from their networks made by controversial Chinese telecom company ZTE. Republican Sens. Tom Cotton, Ark., and Marco Rubio, Fla., along with Sen. Chris Van Hollen, D-Md., say they strongly support the department’s April “denial order” barring ZTE from buying U.S. technology components for seven years. However, the senators are concerned that the order is ambiguous to the point of hindering the removal of ZTE gear from U.S. infrastructure. On Monday, they wrote Secretary of Commerce Wilbur Ross asking his department to issue guidance and waivers to help U.S. companies clear their networks of ZTE software and hardware. U.S. officials have long warned that the Chinese government could leverage technology built by ZTE and fellow Chinese telecom Huawei to spy on Americans – accusations the companies deny. The Commerce Department […]

The post Senators want Commerce to help U.S. firms ditch ZTE appeared first on Cyberscoop.

Continue reading Senators want Commerce to help U.S. firms ditch ZTE