Forest Global Training Partners

Cyber Risks · Krebs on Security

Supply Chain Security is the Whole Enchilada, But Who’s Willing to Pay for It?

Summary: Bloomberg Businessweek published an investigation alleging Chinese cyber spies used San Jose-based Supermicro to embed rice-sized chips on circuit boards in servers and components bought by almost 30 companies, allegedly including Amazon and Apple, with data sent back to the Chinese military. Amazon, Apple and Supermicro categorically denied most of the claims, while Bloomberg cited six current and former senior national security officials and 17 anonymous sources in a story that took more than a year to report.

Key Takeaway: A typical Supermicro motherboard holds hundreds of chips and only one compromised chip subverts the whole product, yet Bloomberg reported that three years after the briefing in McLean no commercially viable way to detect such attacks had emerged - and few companies have the resources of Apple and Amazon, which needed luck to spot it.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related