🇬🇧 Integration of Untrusted Software (07 décembre 2022)
ID: d33a86d2-492c-5821-b0cd-c727113af064
STIX ID: report--d33a86d2-492c-5821-b0cd-c727113af064
Feed Name: CERT-FR
This short report warns that software mandated by regulatory frameworks can introduce supply-chain and backdoor risks when integrated into corporate environments; it cites past examples (backdoor-like functionality in some China-required software and the 2017 NotPetya supply-chain attack) and recommends isolating such software in dedicated, contained areas to limit impact.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.