A few days ago Bloomberg published about how China deployed malicious computer chips in servers of leading enterprises like Amazon and Apple. Though Apple and Amazon Web Services have denied these claims and now the U.S. and British security agencies have backed their statements. Department Homeland Security on Saturday said – “At this time we have no reason to doubt the statements from the companies named in the story.”
Britain’s National Cyber Security Centre, on Friday, made a statement which said the agency had “no reason to doubt the detailed assessments made by AWS and Apple.”
As we already mentioned before there was a sensational story published by Bloomberg which mentioned about the Chinese spies implanting tiny spy chips on server motherboards supplied by Super Micro Computing Inc. The so-called activity was carried out in more than 30 companies which also included the tech giants like Apple and AWS. The espionage operation of such staggering proportions certainly is a matter of concern and cannot be ignored.
There were reactions expressed by all the parties involved like Apple, AWS, and Supermicro in denial of the report.
.Reacting to the story AWS Chief Information Security Officer Steve Schmidt wrote in a blog post – “At no time, past or present, have we ever found any issues relating to modified hardware or malicious chips in Supermicro motherboards in any Elemental or Amazon systems.”
Apple reacted to the reports saying it has repeatedly explained Bloomberg correspondents over the past 12 months, that there is no truth in the claims that Apple found malicious chips implanted in its servers back in 2015.
George Stathakopoulos, VP of Information Security, Apple in a letter to the Congress said they have found no indication of outbound traffic from its networks or other evidence of a supply-chain compromise as published in the Bloomberg story.
Both Apple and Amazon even denied to Bloomberg claim of the tech giants reporting the matter to US officials. They said they have never taken part in any such investigations.
Bloomberg is standing strongly by its report which also involved another 17 anonymous corporate and government sources.
There has always been fear expressed by many cybersecurity experts of the vulnerability of corporate supply chains to hacking. Earlier in 2017, America’s counterintelligence agency witnessed an increase in public reporting of big software supply-chain breaches, There were around seven incidents reported compared to just four between 2014 and 2016.
The DHS and NCSC reacted the Bloomberg story in their own way, where the NCSC urged – “anybody with credible intelligence about these reports to contact us. DHS on the other hand tired to show off its recent efforts with critical infrastructure companies to get a clearer picture of supply-chain.
- Why Huawei Does Not Supply Kirin Processor To Other Smartphones
- WhatsApp Messenger 2.18.301 Beta Release
- iOS YouTube App Gets HDR Support