China Used Secret Microchip to Spy on US Computers

In 2010, the U.S. Department of Defense found thousands of its computer servers sending military network data to China — the result of code hidden in chips that handled the machines’ startup process.

In 2014, Intel Corp. discovered that an elite Chinese hacking group breached its network through a single server that downloaded malware from a supplier’s update site.

And in 2015, the Federal Bureau of Investigation warned multiple companies that Chinese operatives had concealed an extra chip loaded with backdoor code in one manufacturer’s servers.

Share

Iran ‘hides spyware in wallpaper, restaurant and games apps’

Iran is running two surveillance operations in cyber-space, targeting more than 1,000 dissidents, according to a leading cyber-security company.

The efforts were directed against individuals in Iran and 12 other countries, including the UK and US, Check Point said.

It said the two groups involved were using new techniques to install spyware on targets’ PCs and mobile devices.

And this was then being used to steal call recordings and media files.

Share

Don’t Pardon the Intrusion – Edward Snowden’s actions immeasurably weakened the United States and strengthened our adversaries.

The most surprising thing about the failure of U.S. intelligence to discover for nearly nine months the SolarWinds penetration of U.S. government agencies, reportedly including the State, Energy, and Homeland Security Departments as well as private contractors, is that anyone is surprised. After all, the National Security Agency, responsible for protecting the communications of the U.S. government, had such a massive hole punched in its capabilities by a breach in 2013 that Michael McConnell, the former director of first the NSA and then the Office of National Intelligence, assessed “This [breach] will have an impact on our ability to do our mission for the next 20 to 30 years.”

Share

Orion Cyber Attack: Threats in Space

Recent Russian and Chinese aggressions bode ill for the future of American military security.

Last Tuesday, Russia successfully tested a direct-ascent anti-satellite missile. The test wasn’t their first. It was a progression of the Russians’ development of kinetic satellite killers, including hunter-killer satellites. The Chinese have been developing and testing such weapons since at least 2007. (The Chinese are also developing ground-based laser anti-satellite weapons.)

Share

Dozens of Al Jazeera journalists allegedly hacked using Israeli firm’s spyware

Spyware sold by an Israeli private intelligence firm was allegedly used to hack the phones of dozens of Al Jazeera journalists in an unprecedented cyber-attack that is likely to have been ordered by Saudi Arabia and the United Arab Emirates, according to leading researchers.

In a stunning new report, researchers at Citizen Lab at the University of Toronto said they discovered what appears to be a major espionage campaign against one of the world’s leading media organisations, which is based in Qatar and has long been a thorn in the side of many of the region’s autocratic regimes.

The report, written by some of the world’s top digital surveillance researchers, also raises troubling new questions about the apparent vulnerability of the Apple iPhone, which has sought to promote a reputation for security and commitment to privacy.

Share

Mike Pompeo: ‘We can say pretty clearly’ Russia was behind hack of US agencies

Mike Pompeo has become the first member of the Trump administration to blame Russia for wide-ranging hacks of US government agencies and private companies.

“This was a very significant effort,” the secretary of state told rightwing talk radio host Mark Levin on Friday night. “I think it’s the case that now we can say pretty clearly that it was the Russians that engaged in this activity.”

On Saturday, Pompeo announced the closure of two US consulates in Russia at which activity had already been curtailed, due to Covid-19.

Share

Hackers Breach U.S. Government Agency That Maintains Nuclear Weapons Stockpile

Hackers Breach U.S. Government Agency That Maintains Nuclear Weapons Stockpile

Hackers have reportedly breached the U.S. government agency responsible for maintaining the nation’s stockpile of nuclear weapons, according to news reports and government officials.

“They found suspicious activity in networks belonging to the Federal Energy Regulatory Commission (FERC), Sandia and Los Alamos national laboratories in New Mexico and Washington, the Office of Secure Transportation at NNSA, and the Richland Field Office of the DOE,” Politico reported. “The hackers have been able to do more damage at FERC than the other agencies, and officials there have evidence of highly malicious activity, the officials said, but did not elaborate.”

Share

Hack of Federal Government Larger Than Previously Thought, Warns CISA

Hack of Federal Government Larger Than Previously Thought, Warns CISA

The federal Cybersecurity and Infrastructure Security Agency (CISA) said Thursday that the hacking campaign that targeted the federal government is larger than what was previously known.

The alleged foreign actors gained backdoor access in more ways than through the SolarWinds software, which was publicly disclosed by the FBI and Department of Homeland Security (DHS) earlier this week.

Share

Orion hack exposed vast number of targets – impact may not be known for a while

If there is one silver lining to the months-long global cyber-espionage campaign discovered when a prominent cybersecurity firm learned it had been breached, it might be that the sheer numbers of potentially compromised entities offers them some protection.

By compromising one piece of security software – a security tool called Orion developed by the Texan company SolarWinds – the attackers gained access to an extraordinary array of potential targets in the US alone: more than 425 of the Fortune 500 list of top companies; all of the top 10 telecommunications companies; all five branches of the military; and all of the top five accounting firms.

But they are just a fraction of SolarWinds’ 300,000 global customers, which also include UK government agencies and private sector companies.

Share

Kremlin-backed hackers breach US Treasury and Commerce: Report

A “sophisticated hacking group” backed by the Russian government reportedly infiltrated the Department of Treasury’s systems and stole information related to internet and telecommunications policymaking as part of a broader campaign that also hacked the Commerce Department and other government agencies.

The FBI is investigating the attacks and is looking into the Russian hacking group APT29, also known as Cozy Bear, as a potential culprit, according to the Washington Post. The foreign-backed hack was first reported by Reuters.

As a result of the hack, the National Security Council held a meeting at the White House on Sunday.

Share