China eats NSA's lunch, uses its zero-days for a year

Hobbs, Kerckhoffs and Shannon were right: Security by obscurity is no security at all. Chinese state-sponsored hackers have been making fools of the US National Security Agency. It turns out that Shadow Brokers weren’t the first to steal the NSA’s secret exploits. "NObody But US"—NOBUS, the NSA doctrine of not reporting vulnerabilities so it can keep them for itself—is once again under fire. It’s now believed that China has been using the NSA’s own spy tools since early 2016—months before any previously known leak. You gotta be kidding me! Nope. In this week’s Security Blogwatch, we jest not.
Continue to article