Dutch Intelligence Agencies Warn of Rising Chinese Cyberattacks on Edge Devices

Chinese Hackers Target Edge Devices, Dutch Agencies Warn

Dutch intelligence agencies are warning organizations to prepare for more cyberattacks by Chinese hackers targeting VPN servers, firewalls, and other edge devices. The General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD) say they expect such attacks to increase in the coming years.

According to the agencies, Chinese hackers possess in-depth knowledge of edge devices. By reverse engineering source code, they have studied Western hardware and software, allowing them to use sophisticated techniques to infiltrate corporate networks by exploiting vulnerabilities in edge devices. The agencies say this enables extensive research into vulnerabilities without the manufacturer's knowledge, and that artificial intelligence helps hackers identify and exploit vulnerabilities more quickly.

Defenses and Recommendations

The agencies have published a cybersecurity advisory with recommendations to prevent unauthorized access. They advocate a "defense in depth" approach involving custom-configured firewalls, intrusion detection systems, organization-wide multi-factor authentication, network segmentation, and data encryption at various layers within the network.

The advisory also recommends centralized logging, security monitoring, and forensic readiness so compromised organizations can immediately launch a digital forensic investigation. The agencies note that victims of cyberattacks are often unable to provide necessary log files, as logs are frequently not stored, kept for very short retention periods, or stored locally on devices where attackers can alter or delete them. Training staff and periodically practicing digital forensic investigations can better prepare companies for cyberattacks, the agencies conclude.

Sources: Cybernews