Share This On Social

Apple’s senior security manager told the Congress on Sunday that the company had found no signs of suspicious transmissions or other evidence for data access during the complex attack on its supply chain.

Apple Information Security Vice President George Stathakopoulos wrote in a letter to the Senate and Congress Committees that the company has repeatedly investigated and found no evidence of the main accusations of a Bloomberg Businessweek article published on Thursday that the chips in servers sold to Apple from Super Micro Computer Inc (SMCI.PK) have allowed China to enter steal technology.

“Apple’s security tools are constantly scanning for such kind of outbound traffic, as they would indicate the presence of malware or other malicious activity. Nothing has been discovered”, wrote George Stathakopoulos to the Senate.

George Stathakopoulos reiterated Apple’s press release that the company had never detected malicious chips or vulnerabilities, nor the Federal Bureau of Investigation (FBI) had contacted the company for such concerns. He said he would be available to inform Congress staff on this issue this week.

The letter follows Friday’s statements by the British National Cyber ​​Security Center and Saturday’s statement of the US Department of Homeland Security that these agencies have no reason to doubt that Apple and Amazon have not detected infected chips.

“We currently have no reason to doubt the statements of the companies mentioned in the report”, said Tyler Houlton, a press secretary at the Department of Homeland Security.

The infiltration of computer systems stemming from servers assembled by San Jose-based Super Micro Computer has been investigated as part of a FBI operation, officials said. The ministry may not have been involved in the operation.

Bloomberg Businessweek said on Friday that it is behind the material, referring to anonymous sources from intelligence agencies and companies, according to which Chinese spies have put computer chips into equipment used by about 30 companies and several US government agencies, which may grant Beijing secret access to internal networks. Bloomberg emphasizes that the analysis is being prepared for one year and is based on over 100 interviews.

Journalists have found that during production in China, microchips, not much larger than a grain of sand, were installed in Supermicro subcontractors. The company based in San Jose, California, is one of the world’s largest server motherboard vendors.

Investigating journalists have found that chips allow attackers to create a hidden door in any network. Bloomberg Businessweek reported on Thursday that Chinese spies have used vulnerabilities in the US supply chain to penetrate the computer networks of nearly 30 US companies, including Amazon, Apple, a large bank, and government agencies. Among the targets of the attack is a subcontractor, who creates drones management software used by a number of agencies.