https://www.newsweek.com/yes-cyber-spying-that-bad-opinion-1556487
The United States has been attempting to strengthen its cybersecurity since at least 1988, when it enacted the first Computer Security Act—replaced in 2002 by the Federal Security Management Act. It sounds great in concept: federal agencies are required to “develop, document, and implement” programs for security management “including those provided or managed by another agency, contractor, or other source.”
How’s it working out?
Solarwinds, a network management software company, was recently discovered to have had malware inserted into its products. Its clients’ systems have been compromised for as long as nine months. Someone—possibly the Russians, possibly the Chinese—has been inside the U.S. Department of Defense, the Department of Homeland Security, the Treasury Department and major American industries. The list gets longer every day.
The U.S. has a cybersecurity industry that costs the government and private companies billions of dollars. But all that is money down the toilet if the entire infrastructure is compromised—which it currently is. Virtually every computer and computer processor used in the United States is, in part or entirely, made in foreign countries, with China directly and indirectly providing 90 percent of the hardware. We haven’t been looking at hardware for possible infiltration, but we should have been.