Stay informed on Huawei's latest infosec developments. Browse news, updates, and analysis related to Huawei's cybersecurity impact and strategies.
Search across headline titles and summaries.
Background for this topic.
Huawei is a China-based technology provider whose portfolio includes carrier radio and core networks, enterprise networking, cloud services, and connected devices. Its information-security relevance is greatest where equipment sits in telecommunications or other critical networks: vulnerabilities in firmware, web interfaces, APIs, or management systems could enable unauthorized configuration, credential exposure, or access to sensitive network data. Proprietary components and complex supply chains can also make code assurance, firmware provenance, and long-term patch availability important parts of risk assessment.
Security teams should inventory exact Huawei models and software versions, track Huawei security advisories and relevant CVEs, restrict and monitor management-plane access, segment exposed equipment, and verify updates through trusted channels. Telecom deployments also require assessment of logging, telemetry, data handling, and support arrangements against privacy and regulatory requirements. Government concerns about possible state access are allegations and do not establish a particular compromise, but they make supplier assurance, procurement controls, independent testing where feasible, and replacement or continuity planning material considerations.
The Government of Canada announced its intention to ban the use of Huawei and ZTE telecommunications equipment and services across the country's 5G and 4G networks. [...]
Ban on shopping from September, rip and replace order with 2024 deadline The Canadian government has joined many of its allies and banned the use of Huawei and ZTE tech in its 5G networks, as part of a new telecommunications security framework.…