Latest news
The Los Alamos National Laboratory in New Mexico - one of the two U.S. laboratories that are engaged in designing nuclear weapons - has removed at least two network switches made by H3C Technologies from its systems because devices produced by the China-based manufacturer are considered to be a potential threat to national security, Reuters reports.The fact was revealed in an internal letter sent by the lab's chief information officer to the National Nuclear Security Administration's assistant manager for safeguards and security.
It seems to imply that even though there is no evidence that the devices in question are compromised in any way, the recent recommendation by the U.S. House of Representatives' Permanent Committee on Intelligence for U.S. companies and agencies to avoid using devices manufactured by ZTE and Huawei has produced the hoped-for effect.
It seems that no matter the assurances and offers of testing equipment and source code by the hands of government and independent security experts, U.S. government agencies might have already decided to err on the side of caution and are looking to minimize the attack surface as much as possible.
The Australian government also took its cue from those views and has recently decided not to let Huawei compete for lucrative national contracts. The reaction of these two countries is generally thought to have triggered state-owned telecom China Unicom's decision to replace all Cisco System devices from one of its major backbone networks.
The letter sent by Los Alamos' CIO appears to be a reply to the House Armed Services Committee for the Department of Energy's request for a report on possible supply chain risks.
The Los Alamos laboratory and the National Nuclear Security Administration are yet to comment on the letter.


Spotlight

Review: Logging and Log Management
Posted on 22 May 2013. | Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities
Posted on 22 May 2013. | Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage
Posted on 21 May 2013. | Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance
Posted on 20 May 2013. | Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware
Posted on 20 May 2013. | A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.




