Security issues with the ASUS Live Update utility, which is claimed to have been used in a supply chain attack by a nation-state, were highlighted as far back as 2016, with a security analysis of OEM updaters by three researchers from the firm Duo Security slamming the Taiwan-based firm over its lax approach to updating.
Russian security firm Kaspersky Lab claims to have uncovered a sophisticated supply chain attack which used the live update utility that comes on hardware made by ASUS, the fifth largest PC supplier which is based in Taiwan, with the attack having taken place between June and November 2018.
The investigation into the attack on the networks of the Australian Parliament and the three main political parties — Liberal, Labor and National — is ongoing and the Australian Signals Directorate says it can offer no comment on it now.
Because hardwired connections to drones, trucks, cars, phones, smart watches, etc don't make sense, that's why.
economic espionage. This spyware crap is exploitable by design. Fools. Why not just connect to the fibre backhaul ? Nobody[…]
Beyond political reasons, I'd go so far as to assert the anti-Huawei 'espionage' rhetoric and the accompanying red-baiting being cheerled[…]
The USA only banned Huawei for political reasons and for protecting the telco industry in the USA because they're far[…]
If only, if only, but unfortunately our politicians don't seem to have the necessary to say NO to theses rabid[…]