Stay informed on Huawei's latest infosec developments. Browse news, updates, and analysis related to Huawei's cybersecurity impact and strategies.
Search across headline titles and summaries.
Background for this topic.
Huawei is a China-based technology provider whose portfolio includes carrier radio and core networks, enterprise networking, cloud services, and connected devices. Its information-security relevance is greatest where equipment sits in telecommunications or other critical networks: vulnerabilities in firmware, web interfaces, APIs, or management systems could enable unauthorized configuration, credential exposure, or access to sensitive network data. Proprietary components and complex supply chains can also make code assurance, firmware provenance, and long-term patch availability important parts of risk assessment.
Security teams should inventory exact Huawei models and software versions, track Huawei security advisories and relevant CVEs, restrict and monitor management-plane access, segment exposed equipment, and verify updates through trusted channels. Telecom deployments also require assessment of logging, telemetry, data handling, and support arrangements against privacy and regulatory requirements. Government concerns about possible state access are allegations and do not establish a particular compromise, but they make supplier assurance, procurement controls, independent testing where feasible, and replacement or continuity planning material considerations.
Still dominant in Germany's networks, among others The European Commission (EC) wants a revised Cybersecurity Act to address any threats posed by IT and telecoms kit from third-country sources, potentially forcing member states to confront the thorny issue of suppliers such Huawei in their national networks.…
Revised Cybersecurity Act Would Also Boost ENISACountries across the EU could be forced to kick Chinese telecom manufacturers such as Huawei and ZTE out of their critical infrastructure supply chains, under a far-reaching proposal published by the European Commission on Tuesday.