Everybody Does It: The Messy Truth About Infiltrating Computer Supply Chains

guest · Jan 25, 2019

Everybody Does It: The Messy Truth About Infiltrating Computer Supply Chains
January 24, 2019
https://theintercept.com/2019/01/24/computer-supply-chain-attacks/

[...] the danger of China compromising hardware supply chains is very real, judging from classified intelligence documents.

A classified 2011 Department of Defense “Strategy for Operating in Cyberspace” refers to supply chain vulnerabilities as one of the “central aspects of the cyber threat,” [...]
Another classified document, a 2009 National Intelligence Estimate about “The Global Cyber Threat to the US Information Infrastructure,” assessed with “high confidence” that there was an increased “potential for persistent, stealthy subversions” in technology supply chains [...]

While supply chain operations are used in real cyberattacks, they seem to be rare compared to more traditional forms of hacking, like spear-phishing and malware attacks over the internet.
“The reality is that most organizations have plenty of vulnerabilities that don’t require supply chain attacks to exploit.”
Click to expand...

Log in or Sign up

Everybody Does It: The Messy Truth About Infiltrating Computer Supply Chains

guest Guest

Log in or Sign up

Everybody Does It: The Messy Truth About Infiltrating Computer Supply Chains

guest Guest

Useful Searches