Yazılar

Mass Federal Layoffs Could Undermine U.S. Cybersecurity, Warns Former NSA Official

Former National Security Agency (NSA) director of cybersecurity, Rob Joyce, warned on Wednesday that the mass reduction in federal workers will have a “devastating” impact on U.S. cybersecurity and national security. Joyce testified before the House Select Committee on the Chinese Communist Party, discussing the harmful consequences of cutting government employees, particularly in areas critical for countering Chinese cyber threats.

Joyce explained that eliminating probationary employees would destroy a vital pipeline for new talent essential to combatting cyber threats from China. These workers play a key role in protecting U.S. critical infrastructure, telecommunications, and other sectors from ongoing cyberattacks.

Over 100,000 federal employees have either taken early retirement or been laid off under the direction of former President Donald Trump and advisor Elon Musk’s initiative to drastically reduce the size of federal agencies. While it’s unclear how many NSA employees have been affected, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has already cut more than 130 positions as of mid-February. CISA is tasked with defending civilian federal networks and facilitating collaboration between private industry and the government on cybersecurity issues.

Despite national security jobs being exempt from the cuts, some critical cybersecurity positions have still been eliminated, further raising concerns about the long-term impact on U.S. cyber defense. The White House and NSA did not respond to requests for comment, while DHS stated that the cuts would save $50 million, emphasizing that efforts are ongoing to eliminate positions that do not align with the agency’s mission.

US Congressional Panel Urges Americans to Ditch China-Made Routers

A U.S. congressional committee has called for Americans to remove Chinese-made wireless routers, particularly those produced by TP-Link, citing national security concerns. The House of Representatives Select Committee on China warned that these devices could serve as entry points for Chinese hackers aiming to infiltrate U.S. critical infrastructure. The committee has also urged the Commerce Department to investigate TP-Link Technology Co., the world’s leading seller of Wi-Fi routers by volume, according to research firm IDC.

At a hearing on Wednesday, former NSA cybersecurity director Rob Joyce stated that TP-Link routers exposed users to cyber vulnerabilities, which could be exploited by hackers to launch attacks on U.S. infrastructure. He emphasized the need for action, suggesting that Americans replace these devices to prevent them from being used in cyberattacks. Reports have also surfaced that U.S. authorities are considering a potential ban on the sale of TP-Link routers.

In response, TP-Link denied any links to the Chinese government, asserting that no government controls the design or production of its products. The company further clarified that it had separated from its former Chinese affiliate and now manufactures routers in Vietnam. TP-Link’s president, Jeff Barney, described the committee’s claims as “baseless” and without merit.

During the hearing, Democratic Representative Raja Krishnamoorthi advised against using TP-Link routers, holding one up as an example. He echoed concerns about the growing sophistication of Chinese government-linked hackers, stating that they were approaching parity with U.S. cyber capabilities. Rep. Krishnamoorthi also proposed a more aggressive approach, suggesting the U.S. might need to enlist private companies to counteract hackers.

In 2023, the Cybersecurity and Infrastructure Security Agency (CISA) identified a vulnerability in TP-Link routers that could be exploited to execute remote code. U.S. lawmakers have stressed the need for stronger cyber defenses and more proactive measures to deter Chinese hackers.

U.S. Lawmakers Call for Scrutiny of Baicells, Chinese Telecom Firm

Baicells, a Chinese telecom hardware manufacturer founded by former Huawei employees, is facing heightened scrutiny from U.S. lawmakers over national security concerns. John Moolenaar, the top Republican on the House Select Committee on China, emphasized the need for rigorous government oversight of Baicells, citing potential cyber vulnerabilities in the company’s products. He warned that any presence of such companies in U.S. networks, particularly in sensitive areas, should raise significant national security alarms.

Despite Baicells’ reassurances that its products do not pose security risks, the company is under investigation by the FBI and the U.S. Department of Commerce. The company has provided base stations and routers to more than 700 U.S. networks, including those near military installations. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged Baicells’ firmware for cyber vulnerabilities, further raising concerns.

Baicells’ chairman, Sun Lixin, defended the company by stating that all tech companies, regardless of their size, continuously release updates to address security vulnerabilities. He also expressed willingness to cooperate with U.S. inquiries.

The scrutiny of Baicells is part of a broader concern in Washington over the potential for Chinese-linked companies to compromise U.S. telecommunications networks. U.S. officials have warned that China-linked suppliers, including state-backed hacking groups like “Volt Typhoon,” could exploit network vulnerabilities for espionage.

Democratic leaders in Congress, including Frank Pallone and Mark Warner, have called for greater accountability and quicker responses to national security risks posed by foreign adversaries in U.S. telecom networks. They argue that focusing on individual companies without addressing systemic risks is insufficient to protect critical infrastructure.