Security News > 2018 > October > Chinese Supply Chain Hardware Attack
2018-10-04 16:30
Bloomberg is reporting about a Chinese espionage operating involving inserting a tiny chip into computer products made in China. I wrote about (alternate link) this threat more generally in May. Supply-chain security is an insurmountably hard problem. Our IT industry is inexorably international, and anyone involved in the process can subvert the security of the end product. No one wants...
News URL
https://www.schneier.com/blog/archives/2018/10/chinese_supply_.html
Related news
- GitHub supply chain attack spills secrets from 23,000 projects (source)
- Supply chain attack on popular GitHub Action exposes CI/CD secrets (source)
- Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos (source)
- GitHub Action hack likely led to another in cascading supply chain attack (source)
- Chinese military-linked companies dominate US digital supply chain (source)
- GitHub Action supply chain attack exposed secrets in 218 repos (source)
- Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed (source)
- ⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More (source)
- Chinese FamousSparrow hackers deploy upgraded malware in attacks (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)