Technology firms let Russia probe software widely used by US Government
Summary
But those same products protect some of the most sensitive areas of the US government — including the Pentagon, NASA, the State Department, the FBI and the intelligence community — against hacking by sophisticated cyber adversaries like Russia. The Pentagon said in a previously unreported letter to Democratic Senator Jeanne Shaheen that source code reviews by Russia and China "may aid such countries in discovering vulnerabilities in those products". Private sector cyber experts, former US security officials and some US tech companies said allowing Russia to review the source code may expose unknown vulnerabilities that could be used to undermine US network defences. "Even letting people look at source code for a minute is incredibly dangerous," said Steve Quane, executive vice president for network defence at Trend Micro, which sells TippingPoint security software to the US military. Ms Shaheen had questioned the Pentagon about the practice following the Reuters report on ArcSight, which also prompted Micro Focus to say it would restrict government source code reviews in the future.