Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Mandia: US-China No-Hack Pact Could Be Game Changer
Newest First  |  Oldest First  |  Threaded View
XavierA893
XavierA893,
User Rank: Apprentice
10/30/2015 | 12:53:19 PM
Mandia: US-China No-Hack Pact Could Be Game Changer
Cyberspace has become a structural facility and a modus operandi for China.

Considering the continuous investment made by China into its cyberspace critical infrastructures, the relevant PLA Units, the mighty Cyberspace Administration of China and the volume of cyberattacks reportedly from Peking as a pipeline of inputs for its civil and military industry, I can't see how China could stop conducting its policy of cyberattacks against the cornucopia of highly sensitive sectorial innovations and global market shares represented by America (and its Western partners). 

As a sort of provisional memorandum of agreement, Chinese cyberspying networks might go dormant during a while and would then resurface within a few months because the economic gain is too high as a matter of survival for the hyperpower that China has now become in its partner-competitor relationship with USA, the other hyperpower.

The ThreatConnect-DGI report about the trade in the South China Sea and the deep interest of the Naikon Group in close connection with the region via its intrusion intothe Netherlands-based Permanent Court of Arbitration tribunal provides the reader with some elements of a lucid analysis with regard to current diplomatic, military and economic topics.

Best regards,

Xavier Alfonsi

Analyst in naval and naval aviation affairs and in cyberdefense in Asia-Pacific from original sources in Chinese
Kelly Jackson Higgins
Kelly Jackson Higgins,
User Rank: Strategist
10/15/2015 | 10:17:20 AM
Re: US-CHINA No hack pact
Agreed, @TejGhandi1986. It's easy to dismiss it as a political move by both sides or at least by China. But the fact that they are having this conversation at this time has very real implications. Not sure how it will all play out, but if the US starts fining Chinese companies, something's gonna give.
TejGandhi1986
TejGandhi1986,
User Rank: Apprentice
10/15/2015 | 6:41:53 AM
US-CHINA No hack pact
It is a decision in the correct direction but it will remain to be seen how well it is implemented.Considering Chinese hacking activities of Google in the past and cyber espionage events,even copying of designs of US military aircrafts.

This pact can be vital and  be a step in correct direction.

 

Thanks

Tej Gandhi

https://www.linkedin.com/pub/tej-gandhi/2b/a88/a10


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-10072
PUBLISHED: 2023-02-04
A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address this...
CVE-2018-25079
PUBLISHED: 2023-02-04
A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version 1.2.3...
CVE-2023-0671
PUBLISHED: 2023-02-04
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-24806
PUBLISHED: 2023-02-04
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE-2013-10017
PUBLISHED: 2023-02-04
A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/admin/save_roles.php. The manipulation of the argument id leads to sql injection. The name of the patch is 6cfeb2f6b35c1b3a7320add07cd0493e4f752af3. It is recom...