720-891-1663

Security News Update for the Week Ending April 19, 2024

Feds Give Another Chip Maker Subsidy to Build in US Last week the feds announced a subsidy to Taiwan Semi to build multiple chip plants (fabs) in Arizona. This week the feds announced, based on last year’s CHIPS Act, a subsidy to Samsung to build multiple plants in Texas. This creates a lot of construction […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending April 29, 2022

Sungard Files for Chapter 11 Bankruptcy Protection – Again Sungard, the king of disaster recovery and business continuity needs to figure out a new business. They previously filed for Chapter 11 in 2019 and shed $800 million in debt, but they have a fundamental problem. As businesses move from private data centers to the cloud […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Supply Chain Risk in the Software Process

I have been talking a lot about supply chain risk lately and there is a good reason. From open source products with backdoors like Webmin or Rubygems to NotPetya a few years ago which shut down many companies around the world to the recent attacks against SolarWinds or Centreon, supply chain attacks are running rampant. […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending June 21, 2019

Asus Was Not Alone I wrote about the Asus supply chain attack in March (search for Asus in the blog search box).  Attackers, somehow, compromised the development environment, injected malware and allowed the system to compile, digitally sign and distribute it through the software update process.  Hundreds of thousands of clients were infected as a […]

Continue reading → [DISPLAY_ACURAX_ICONS]

More Supply Chain Woes, Courtesy of Asus

Here is an interesting combination of countries. Multi-billion dollar Taiwan based computer make Asus makes a wide range of computers sold worldwide. Russian anti-virus maker Kaspersky, whom the White House says is a threat to national security and should be banned (which I basically think is mostly true), identified that hackers attacked Asus’s software update […]

Continue reading → [DISPLAY_ACURAX_ICONS]