Stay informed on Huawei's latest infosec developments. Browse news, updates, and analysis related to Huawei's cybersecurity impact and strategies.
Search across headline titles and summaries.
Background for this topic.
Huawei is a China-based technology provider whose portfolio includes carrier radio and core networks, enterprise networking, cloud services, and connected devices. Its information-security relevance is greatest where equipment sits in telecommunications or other critical networks: vulnerabilities in firmware, web interfaces, APIs, or management systems could enable unauthorized configuration, credential exposure, or access to sensitive network data. Proprietary components and complex supply chains can also make code assurance, firmware provenance, and long-term patch availability important parts of risk assessment.
Security teams should inventory exact Huawei models and software versions, track Huawei security advisories and relevant CVEs, restrict and monitor management-plane access, segment exposed equipment, and verify updates through trusted channels. Telecom deployments also require assessment of logging, telemetry, data handling, and support arrangements against privacy and regulatory requirements. Government concerns about possible state access are allegations and do not establish a particular compromise, but they make supplier assurance, procurement controls, independent testing where feasible, and replacement or continuity planning material considerations.
A new malware botnet was discovered targeting Realtek SDK, Huawei routers, and Hadoop YARN servers to recruit devices into DDoS (distributed denial of service) swarm with the potential for massive attacks. [...]