Senators want Commerce to help U.S. firms ditch ZTE

A bipartisan trio of senators have asked the Commerce Department to clarify that U.S. companies are welcome to remove products from their networks made by ZTE.

A bipartisan trio of senators has asked the Department of Commerce to clarify that U.S. companies are welcome to remove products from their networks made by controversial Chinese telecom company ZTE.

Republican Sens. Tom Cotton of Arkansas and Marco Rubio of Florida, along with Democrat Chris Van Hollen of Maryland, say they strongly support the department’s April “denial order” barring ZTE from buying U.S. technology components for seven years.

However, the senators are concerned that the order is ambiguous to the point of hindering the removal of ZTE gear from U.S. infrastructure. On Monday, they wrote Secretary of Commerce Wilbur Ross asking his department to issue guidance and waivers to help U.S. companies clear their networks of ZTE software and hardware.

U.S. officials have long warned that the Chinese government could leverage technology built by ZTE and fellow Chinese telecom Huawei to spy on Americans – accusations the companies deny.

The Commerce Department issued the denial order after ZTE violated an agreement that penalized it for flouting U.S. sanctions on Iran and North Korea. The order forced ZTE, a top maker of smartphones, to halt major business operations.

The senators’ pressure on Commerce comes as the Trump administration has tried to persuade lawmakers to drop their opposition to a U.S.-China trade deal that would revive ZTE’s access to U.S. suppliers if the company pays a large fine, sets up a compliance board, and fires senior executives. The proposed deal drew bipartisan criticism on Capitol Hill, with Cotton, Rubio, and Van Hollen co-sponsoring a provision blocking the deal that passed the Senate last week.

The senators say the order’s prohibition on “servicing” ZTE equipment “has created uncertainty” over whether U.S. telecom operators can replace that equipment with products from other suppliers. The sternly worded letter calls Commerce’s alleged “reluctance” to clarify the denial order “patently unjust” to customers and “profoundly unfair” to suppliers that have done no wrong in the ZTE saga.

Rubio told CyberScoop last week that U.S. officials are warning American tech companies about the risk from ZTE through classified briefings, but that the companies have prioritized market access over security concerns.

“[I]t is clear that Chinese state-directed telecommunications companies like ZTE and Huawei are used by the Chinese government and Communist Party for espionage and intellectual property theft, and therefore pose a direct threat to the national security, people, and economy of the United States,” the senators wrote.

You can read the full letter below:

[documentcloud url=”http://www.documentcloud.org/documents/4559996-E452876EEB432BB8C236DC00E3FA62F0-Rubio-Van.html”]

Senate Intel chair urges national cyber director to safeguard against open-source software threats

Tom Cotton, R-Okla., cited Chinese and Russian involvement in open-source tech and the risks to government and defense systems.

Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech

Commerce lacks intelligence resources to keep U.S. tech from fueling Chinese cyberthreat, experts warn

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure