FBI, CIA & NSA Officials Agree: Stay Away From Huawei Phones

In the age of fake news, collusion, coercion, and bots, the heads of all three US intelligence agencies all agree on one thing: don’t buy Huawei phones.

CBS News reports that FBI Director Christopher Wray, CIA Director Mike Pompeo, and Director of National Intelligence Dan Coats each gave testimony on Capitol Hill recently to address the cybersecurity threats facing the nation and all admitted that they would never willingly use a Huawei handset.

The impact on you at home: The intelligence community has been warning about the risk of Huawei for years, but the timing of the message here is clear: buy the Mate 10 Pro at your own risk. Ever since a 2012 investigative report, in which Huawei was wholly uncooperative, lawmakers have been warning about the potential dangers of using Huawei phones, but with the company on the verge of a US breakout, the rhetoric has been ramped up considerably. 

Even without any hard evidence, the intelligence community seemingly has ample reason to suspect Huawei of cyber espionage, and it is stopping at nothing to ensure the Mate 10 Pro isn't a big seller in the US.

While Huawei wasn’t specifically targeted in the officials’ prepared statements on the threat assessment, Senate Intelligence Committee chairman Sen. Richard Burr steered the conversation to China when he stated, “The focus of my concern today is China, and specifically Chinese telecoms companies like Huawei and ZTE that are widely understood to have extraordinary ties to the Chinese government.”

ZTE might be a small player in the smartphone industry, but Huawei is the No. 2 or No. 3 phone maker in the world and has been desperately trying to break into the US market for years. Heading into CES it seems as though it had finally gained a foothold with a US carrier, but AT&T pulled out at the last minute after pressure from a bipartisan group of lawmakers.
When asked whether they would recommend US citizens buy phones from these manufacturers, none said they would, with committee member Sen. Mark Warner adding, “We need to make sure that this is not a new way for China to gain access to sensitive technology.”

In his opening remarks, Coats said the US is facing "a complex, volatile, and challenging threat” from foreign entities “using cyber to penetrate virtually every major action that takes place in the US.” While the agencies have yet to produce specific evidence that Huawei is working with the Chinese government to siphon data from its customers, Huawei has long been suspected of using its technology to spy on users.

With the $799 Mate 10 Pro due to begin shipping this month, Huawei had this to say in response, “Huawei is aware of a range of US government activities seemingly aimed at inhibiting Huawei’s business in the US market. Huawei is trusted by governments and customers in 170 countries worldwide and poses no greater cyber-security risk than any ICT vendor, sharing as we do common global supply chains and production capabilities.”

Recently, Huawei was caught bribing users to leave glowing reviews for the new handset on BestBuy.com. Those comments have since been removed. 

PCWorld

You Might Also Read:

Report Claims Huawei Don’t Pose a Risk to UK Security:

Public-Private Partnerships in the Cyber Domain:
 

 

« Cybersecurity Is A Job for CEOs, Not Just The IT Team
Your Questions Answered By The GDPR Advisory Board »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

VMworld

VMworld

VMworld is a global conference for virtualization and cloud computing, including associated security issues.

Fortinet

Fortinet

Fortinet is a provider of network security systems. Our products provide protection against dynamic security threats while simplifying the IT security infrastructure.

Cyber Secure Forum

Cyber Secure Forum

The Cyber Secure Forum is a premier cybersecurity event dedicated to bringing together experts, and professionals to explore the latest trends, share knowledge, and discuss strategies.

Identity Automation

Identity Automation

Identity Automation is a leading provider of Identity and Access Management software.

Crest International

Crest International

Crest is focused on professionalizing the technical cyber security market whilst driving quality and standards of organizations that operate within it.

Saudi Federation for Cyber Security and Programming (SAFCSP)

Saudi Federation for Cyber Security and Programming (SAFCSP)

SAFCSP is a national institution under the umbrella of the Saudi Arabian Olympic Committee, which seeks to build national and professional capabilities in the fields of cyber security and programming.

CSIRT-NQN

CSIRT-NQN

CSIRT-NQN is the Computer Incident Response Team for the Argentine province of Neuquen.

SECFORCE

SECFORCE

SECFORCE is a leading information security consultancy specialising in bespoke penetration testing and red team engagements.

Microchip Technology

Microchip Technology

Microchip Technology Inc. is a leading provider of smart, connected and secure embedded control solutions.

ProofID

ProofID

ProofID is a specialist provider of Identity Access Management (IAM) solutions. We focus on the solving the complex needs of the modern enterprise.

Extreme Engineering Solutions (X-ES)

Extreme Engineering Solutions (X-ES)

Extreme Engineering Solutions is a leader in the design, manufacture, testing, and support of hardware and software solutions for the embedded computing market.

GrayMatter

GrayMatter

GrayMatter provides Advanced Industrial Analytics, OT Cybersecurity, Digital Transformation and Automation & Control services to clients across the U.S. and Canada.

Cybergroot

Cybergroot

Cybergroot provides Cybersecurity Assessment services and professional Information Security trainings.

Vectra AI

Vectra AI

Vectra threat detection & response - see and stop threats across hybrid and multi-cloud enterprises.

Nexer

Nexer

Nexer is a modern tech company with expertise in strategy, technology and communication with a strong vision.

Praxis Security Labs

Praxis Security Labs

Praxis Security Labs is a research driven cybersecurity company that helps our customers to reduce risk and improve security.