Inside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices | WIRED
For years, it's been an inconvenient truth within the cybersecurity industry that the network security devices sold to protect customers from spies and cybercriminals are, themselves, often the machines those intruders hack to gain access to their targets. Again and again, vulnerabilities in “perimeter” devices like firewalls and VPN appliances have become footholds for sophisticated hackers trying to break into the very systems those appliances were designed to safeguard. Now one cybersecurity vendor is revealing how intensely—and for how long—it has battled with one group of hackers that have sought to exploit its products to their own advantage. For more than five years, the UK cybersecurity firm Sophos engaged in a cat-and-mouse game with one loosely connected team of adversaries who targeted its firewalls. The company went so far as to track down and monitor the specific devices on which the hackers were testing their intrusion techniques, surveil the hackers at work, and ultimate
Save this story Save this story For years, it's been an inconvenient truth within the cybersecurity industry that the network security devices sold to protect customers from spies and cybercriminals are, themselves, often the machines those intruders hack to gain access to their targets. Again and again, vulnerabilities in “perimeter” devices like firewalls and VPN appliances have become footholds for sophisticated hackers trying to break into the very systems those appliances were designed to safeguard. Now one cybersecurity vendor is revealing how intensely—and for how long—it has battled wi
saved by
related reading
- Assessing Claude Mythos Preview’s cybersecurity capabilities \ Anthropicred.anthropic.com
- Project Glasswing: Securing critical software for the AI era \ Anthropicanthropic.com
- Researchers Say China State-backed Hackers Breached a Digital Certificate Authoritythehackernews.com
- Citron Research | Executive Editor Andrew Left | Publishing Since 2001citronresearch.com
- China's Technological Playbookthecounterfactual.substack.com
- China Flaunts Its Offensive Cyber Powerwarontherocks.com
- U.S. government is 'biggest buyer' of zero-day vulnerabilities, report claims | CSO Onlinecsoonline.com
- Nicole Perlroth | Who's Winning the Cyberweapons Arms Race? | Jordan Harbingerjordanharbinger.com
- full English translation of Phineas Fisher's account of how he took down HackingTeam - https://www.reddit.com/r/netsec/comments/4f3e6p/full_english_translation_of_phineas_fishers/gist.github.com
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
- How a Tiny Startup Became the Most Important Hacking Shop You’ve Never Heard Ofvice.com
- The Letter - Stop Hacklore!hacklore.org