Security Researchers Warn a Widely Used Open Source Tool Poses a ‘Persistent’ Risk to the US

Spread the love

“The domestic states take a strategic position,” Former Deputy Director of the National Security Organization George Berns said, who spent 36 years in the NSA and now served as senior adviser and Investor in the victim labsThe Burns says that hackers in Russian intelligence agencies were seen as a possible opportunity for Ezizson to abuse Ezizson in the future.

Burns says “This is a completely skilled code. There is no familiar weakness about it, so no other company could identify anything wrong,” said Burns. “Yet the people who actually own it are behind the VK, which is hard with the Kremlin,” he says. “If I sit there at GRU or FSB and I look at the laundry list of opportunities … it’s perfect it is just lying there,” Burns said, refer to foreign military and domestic security agencies in Russia.

VK did not respond to Ward’s request for comments about Group Ezizson. The US Defense Department did not respond to any request to comment on the inclusion of Ezizson in its software setup.

A spokesman for the National Protection Organization said, “NSA has no comments to create this specific software.” The NSA CyberCsis Cooperation Center welcomes the tips from the private sector – when any tips are available, the Tips against our own insights to fully understand the NSA threat are trivial. A spokesperson of the infrastructure security agency, who contains In the face of the rise Second Trump said under the administration: “We’re going to bring you back to the labs hunting.”

A code owned by Microsoft says that it will investigate the problems and take action where its principles are broken, it is unaware of the polluted code in Egypt and VK itself is not approved. VK’s treatment of other technology companies changes. After the approval of Britain leaders Russian banks who own stakes For example, Apple removed its social media app from its App Store in VK in September 2022.

Dan Lorenak, CEO of Supply Chain Security Farm Chowgard, has said that the connections to Russia with Ezizson are “simple visible” and there is a “slightly more” risk to other software libraries. He also added that the red flags around the other open source technology may not be so obvious.

“In the overall open source space, you do not know where people are mostly,” Lorenak says many developers do not reveal their identity or locations online, and even if they do it, it is not always possible to verify whether the details are correct. “The code is to trust and the systems used to create codes and those codes. People are important, but we are not just in a world where we can drop the faith to individuals,” Laurenk says.

As the full-scale aggression of Russia’s Ukraine has been exposed, investigation has been increased on the impact of the impact of the entities involved in the use and development of open source systems. In October last year, a Linux kernel maintainer 11 Russian developer has moved Those who were involved in the Open Saus project mentioned the restrictions as the cause of a wide range of changes. Then in January of this year, Linux Foundation has issued guidance International sanctions cover how open sources can affect the developers who they contact with and be careful about the nature of the interaction.

Leave a Reply

Your email address will not be published. Required fields are marked *