Apple cut ties with server supplier Super Micro Computer in 2016 after unearthing a potential security vulnerability in at least one of its data center servers, reports The Information.
The vulnerability in the server, which was part of Apple's technical infrastructure powering its web-based services, was discovered in the early months of 2016. According to Super Micro senior vice president of technology Tau Leng, Apple ended its business relationship with Super Micro Computer shortly after uncovering the security issue.
Leng's account of the incident makes it sound like Apple received bad firmware from an FTP site hosted by Super Micro that may have been infiltrated, which may have compromised the server.
According to Leng, when Apple was asked to provide the version number of the firmware it had downloaded after experiencing issues, Apple provided an invalid number. After that, Apple refused to provide more information to Super Micro.
"Apple is deeply committed to protecting the privacy and security of our customers and the data we store," the spokesperson told The Information. "We are constantly monitoring for any attacks on our systems, working closely with vendors and regularly checking equipment for malware."
It's not quite clear what caused the vulnerability that led to the end of the agreement between Super Micro and Apple, but Apple has since moved on to other server suppliers, increasing orders from ZT and purchasing servers from Inspur.
The vulnerability in the server, which was part of Apple's technical infrastructure powering its web-based services, was discovered in the early months of 2016. According to Super Micro senior vice president of technology Tau Leng, Apple ended its business relationship with Super Micro Computer shortly after uncovering the security issue.
Leng's account of the incident makes it sound like Apple received bad firmware from an FTP site hosted by Super Micro that may have been infiltrated, which may have compromised the server.
According to Leng, when Apple was asked to provide the version number of the firmware it had downloaded after experiencing issues, Apple provided an invalid number. After that, Apple refused to provide more information to Super Micro.
Mr. Leng said Super Micro regularly provides firmware updates that data center customers like Apple can download from a private "FTP" site, hosted by Super Micro. He said the firmware updates come from outside chip manufacturers--in this case, a networking chip maker that he declined to name.Sources who spoke to The Information said servers that handled Siri requests and App Store search functionality may have been compromised, but an Apple spokesperson said Apple did not receive bad firmware nor was any customer data stolen.
"Apple is deeply committed to protecting the privacy and security of our customers and the data we store," the spokesperson told The Information. "We are constantly monitoring for any attacks on our systems, working closely with vendors and regularly checking equipment for malware."
It's not quite clear what caused the vulnerability that led to the end of the agreement between Super Micro and Apple, but Apple has since moved on to other server suppliers, increasing orders from ZT and purchasing servers from Inspur.
30 comments
Apple this morning began offering promo codes to Apple Music subscribers that allow them to buy a HomePod at a discounted price for a limited time, in a holiday-themed promotion.
As of writing,...
Microsoft today updated its suite of Office for Mac apps, including Word, Excel, PowerPoint, and Outlook, with support for Dark Mode on macOS Mojave and several other new features. The updates are...
It is now possible to use the My Verizon app to activate eSIM service on an iPhone XS, iPhone XS Max, or iPhone XR in the United States.
The app was updated today to allow Verizon customers...
Apple today seeded the first beta of iOS 12.1.2 to public beta testers, one day after seeding the same beta to developers and six days after the release of the iOS 12.1.1 update with expanded eSIM...
Apple Pay made its long-awaited debut in Germany this evening, allowing iPhone and Apple Watch users in the country to finally take advantage of the contactless mobile payments service if their card...
Samsung today introduced its latest smartphone, the Galaxy A8s. It is Samsung's first smartphone with an Infinity-O display, which has a nearly edge-to-edge, uninterrupted design beyond a small...
Epic Games today announced that its Infinity Blade role-playing game trilogy has been removed from the App Store.
In a blog post, the video game studio said "it has become increasingly...
It took nearly two months following the on-sale date for the iPhone XR, but Apple's highly anticipated clear case for the colorful device is now available. We're not entirely sure what the...
