الثلاثاء، 31 ديسمبر 2013

Report: NSA ‘Uses Vulnerabilities To Exploit Networking Gear’


NSA ‘Intercepted PC Shipments To Install Malware’


The National Security Agency U.S. (NSA ) has its own catalog of vulnerabilities that is used to exploit commercial network equipment in order to insert backdoors to conduct surveillance, according to a report published over the weekend in the German magazine Der Spiegel.

The report is based on material filtered by NSA whistleblower Edward Snowden and details the new revelations about the NSA unit , the Operations Unit of the measure, or TAO , which performs operations that allow you to access the PC users and computer networks in a number of ways . One of the more elaborate forms of the NSA is able to insert backdoors intercepting shipments of technology is a supplier to a user, load malware on the device, then forward the technology to its original destination.

exploitation

According to the report , TAO is also able to get information is by exploiting error reports sent from Microsoft Windows PC users. Microsoft has recently taken steps to bolster their own efforts encryption in an effort to improve safety in light of the latest revelations of the NSA operation .

© m00osfoto Shutterstock 2012Microsoft Security is not the only technology provider U.S. TAO NSA has been able to exploit . According to Der Spiegel 's report , there is a 50-page document that reads like a catalog mail order of the feats that the body can use to infiltrate the myriad technologies technology vendors in the United States.

Among the suppliers listed in the report as being exploitable is networking giant Cisco Systems . In one publicly disclosed , director of Cisco security , statement John Stewart denied any knowledge of the vulnerabilities of the NSA backdoor on company equipment .

" We are deeply concerned with anything that may affect the integrity of our products or our customers' networks and keep looking for additional information, " Stewart said. "Right now , we have no information available about new product vulnerabilities , and continue to seek all avenues to determine if you need to deal with new problems . "

Concerns about the NSA 's activities in general have had an impact on Cisco in 2013. During the fiscal first quarter 2014 earnings call Cisco , John Chambers , CEO had to answer a question about the impact of the NSA analyst . At the time , Chambers said the NSA spying was affecting Cisco business efforts in emerging markets.

RSA controversy

In recent weeks , at least one U.S. technology provider has been publicly identified as working with the NSA to provide backdoor access . On December 20 , Reuters reported that the U.S. security company RSA had a secret contract with the NSA to allow different forms of backdoor access .

Cisco, however, has repeatedly denied that worked directly with the NSA to allow unauthorized access .

"As we have said before, and communicated to Der Spiegel, do not work with any government to weaken our products for exploitation , nor implement any so-called ' back doors ' safety in our products," Stewart said.

ليست هناك تعليقات:

إرسال تعليق