Nexperia - A Bigger Threat Than Huawei?

Britain's largest semiconductor chip manufacturer, Newport Wafer Fab (pictured), which has over a dozen UK government research contracts, is for sale and the potential new owners are Nexperia a wholly owned subsidiary of China's Wingtec. 

An analysis of the company by Datenna found that at least 30 percent of Wingtec's ownership could be traced back to the Chinese government. It has also received state subsidies for its consumer electronics manufacturing plants in China.

According to the former head of the UK's National Cyber Security Centre, Ciaran Martin, this would be a "first order strategic issue". 

Based in South Wales, the Newport Wafer Fab produces around 8,000 wafers a week which are primarily used by the automotive industry. Despite the critical nature of semiconductor fabs and growing hostility towards Chinese investors, the acquisition is not being reviewed under the newly introduced National Security and Investment Act.

Newport Wafer Fab has over a dozen UK government research contracts, largely funded by the British government’s innovation agencyInnovate UK through various grant schemes that amount to around £55 million ($75 million) according to sources. 

The prospect of  Britain’s largest semiconductor foundry falling into the hands of an entity from a country that has a track record of using technology to create geopolitical leverage bears comparison with the British government's rejection of af another Chinese firm, Huawei, as a supplier of equipment to the UK's fast growing 5G telecoms network. 

Huawei: No Improvement

The most recent annual UK government report from the Huawei Cyber Security Evaluation Center (HSEC), a special  telecoms equipment assessment centre says that “During 2020, Huawei have made strong progress at remediating an out-of- mainstream-support component within products in the UK’s networks. Huawei has also made progress, in line with expectations, on binary equivalence, fixed access issue, and vulnerability management.”

“Nonetheless, cognisant of the impact of COVID-19, the work of HCSEC continues to uncover issues that indicate there has been no overall improvement over the course of 2020 to meet the product software engineering and cyber security quality expected by the NCSC.”

Gov.UK:         CNBC:       Telegraph:     Data Center Dynamics:     NCSC:

You Might Also Read: 

The Semiconductor Shortage Is Causing Cyber Security Problems:

 

« Home Working Creates More Cyber Attacks
AI Tool Promises A Medical Revolution »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Tines

Tines

The Tines security automation platform helps security teams automate manual tasks, making them more effective and efficient.

Sentia

Sentia

Sentia is an IT and infrastructure firm, with focus on Outsourcing, IT operation and management, Hosting, Co-location, Network, and IT security.

idappcom

idappcom

idappcom provides unique industry approved software solutions for auditing and enhancing the threat recognition and response capabilities of your corporate security defences.

Seric Systems

Seric Systems

Seric is a technology business specialising in security, infrastructure and data management.

Me Learning

Me Learning

Me Learning provides engaging, informative and clearly explained learning materials for complex and challenging professional environments in areas including GDPR and Information Governance.

CSIRT-CY

CSIRT-CY

CSIRT-CY is the National Computer Security Incident Response Team for Cyprus.

SGBox

SGBox

SGBox is a highly flexible and scalable solution for IT security. Choose the modules which your company needs and implement it without any modification to your network infrastructure.

Keyavi Data

Keyavi Data

With Keyavi’s evolutionary data protection technology, your data stays within the bounds of your control in perpetuity.

BigPanda

BigPanda

BigPanda is the first provider of Autonomous Operations solutions that empower IT Operations at large, complex enterprises.

MAXXeGUARD Data Safety

MAXXeGUARD Data Safety

MAXXeGUARD: The High Security Shredder. MAXXeGUARD easily destroys hard disks up to the highest security levels as well as other digital data carriers like SSD’s, LTO’s, USB’s, CD’s etc.

Redpoint Security

Redpoint Security

Redpoint Security is an application security consulting firm that is focused on all aspects of code security.

Quantum eMotion (QeM)

Quantum eMotion (QeM)

Quantum eMotion is a Montreal-based advanced developer leading the way towards a new generation of quantum-safe encryption for the quantum computing age.

Center for Information Security Awareness (CFISA)

Center for Information Security Awareness (CFISA)

CFISA was formed by a group of academics, security and fraud experts to explore ways to increase security awareness among audiences, including consumers, employees, businesses and law enforcement.

FusionAuth

FusionAuth

FusionAuth is the customer authentication and authorization platform that makes developers' lives awesome.

GetReal Security

GetReal Security

GetReal Security is the world’s leading authority on malicious digital content and deepfake protection.

DevOcean

DevOcean

DevOcean, the leader in Cybersecurity Exposure Remediation, helps organizations cut through the chaos by automatically consolidating, prioritizing, and streamlining fixes.

Equixly

Equixly

Equixly is revolutionizing application security by empowering developers and organizations to build more secure software, elevate their security posture, and stay ahead of emerging threats.