Stay informed on Huawei's latest infosec developments. Browse news, updates, and analysis related to Huawei's cybersecurity impact and strategies.
Search across headline titles and summaries.
Background for this topic.
Huawei is a China-based technology provider whose portfolio includes carrier radio and core networks, enterprise networking, cloud services, and connected devices. Its information-security relevance is greatest where equipment sits in telecommunications or other critical networks: vulnerabilities in firmware, web interfaces, APIs, or management systems could enable unauthorized configuration, credential exposure, or access to sensitive network data. Proprietary components and complex supply chains can also make code assurance, firmware provenance, and long-term patch availability important parts of risk assessment.
Security teams should inventory exact Huawei models and software versions, track Huawei security advisories and relevant CVEs, restrict and monitor management-plane access, segment exposed equipment, and verify updates through trusted channels. Telecom deployments also require assessment of logging, telemetry, data handling, and support arrangements against privacy and regulatory requirements. Government concerns about possible state access are allegations and do not establish a particular compromise, but they make supplier assurance, procurement controls, independent testing where feasible, and replacement or continuity planning material considerations.
Weekly headline count for the current query.
Solar Energy Spurt Comes Freighted With Chinese Nation-State Hacking WorriesThe European Commission froze funding for solar energy projects that use crucial components from Chinese companies such as Huawei, due to cybersecurity fears. The decision affects projects being funded by the European Investment Bank and other partner banks.
Revised Cybersecurity Act Would Also Boost ENISACountries across the EU could be forced to kick Chinese telecom manufacturers such as Huawei and ZTE out of their critical infrastructure supply chains, under a far-reaching proposal published by the European Commission on Tuesday.
Also, Disney Pays $10M to Settle Child Privacy Case, Spain Scraps Huawei DealThis week, Jaguar hack, Disney settled a child privacy case, Texas sued PowerSchool and federal prosecutors sued a toy maker. Spain voided a Huawei contract, Pennsylvania AG confirmed a ransomware attack. U.S. immigration enforcement resumed a spyware contract and Baltimore lost $1.5 million to BEC.
Also: Spain Defies Pressure to Eject Huawei, Hackers Leak North Korea Kimsuky DataThis week, Norway said Russian hackers attacked a flood gate, Spain defied pressure to eject Huawei, a cyberattack against the Office of the Pennsylvania Attorney General. Hackers leaked stolen North Korean Kimsuky data, Microsoft patched a Kerberos zero-day and a big Chrome bug bounty.