Samsung was the victim of a cybersecurity breach that resulted in Galaxy source code being leaked

mylesillidge

mylesillidge

Journalist
Joined
Jul 29, 2021
Messages
4,275
Reaction score
4,580
Samsung hacked — Galaxy source code leaked

Samsung Electronics Co. suffered a cybersecurity breach that exposed internal company data, including source code for the operation of its Galaxy smartphones, the company said on Monday.

The statement came after a claim over the weekend that LAPSUS$, a hacking group that stole proprietary information from Nvidia Corp.'s networks, had gained access to Samsung data.
 
How the hell do you not AIRGap your bloody complete software package??? I would have thought that Samsung had the best security personnel/Advisors....
 
Ooops...code for the biometric authentication. I'm sure they will fine a few holes there.

Amazing how hackers can transfer 190GB to a external site and no one notices.

And we entrust them with securing our phones?!
 
gregmcc said:
Ooops...code for the biometric authentication. I'm sure they will fine a few holes there.

Amazing how hackers can transfer 190GB to a external site and no one notices.

And we entrust them with securing our phones?!
Click to expand...
For an entity like Samsung.. 190gb transfer wouldn't even blip the radar.
 
Magnum said:
How the hell do you not AIRGap your bloody complete software package??? I would have thought that Samsung had the best security personnel/Advisors....
Click to expand...

Heh? How do you keep working on said software if it’s airgapped?

How would they do any development?

Airgap only makes sense for static data with a value frozen in time.
 
Whoops.
Seems like LAPSUS$ is making the rounds, first, Nvidia, now Samsung.
That is extremely damaging....The source code is a goldmine to anyone interested to hack/root/gain access on those devices..
Expect hacks, and companies who hoard this for spyware... Pegasus, anyone?
 
SauRoNZA said:
Heh? How do you keep working on said software if it’s airgapped?

How would they do any development?

Airgap only makes sense for static data with a value frozen in time.
Click to expand...
Agreed, most likely they gained access to the source-control servers...
Air gapping is not an option here, you have your engineers and support people working remotely, needs access to their source, how would they manage it if air gapped?
 
MeestaR said:
Agreed, most likely they gained access to the source-control servers...
Air gapping is not an option here, you have your engineers and support people working remotely, needs access to their source, how would they manage it if air gapped?
Click to expand...

I mean even without working remotely airgapping is just a fancy jargon security word that has no possible relevance here.
 
Among the items listed were algorithms for Samsung smartphone biometric authentication and bootloader source code to bypass some operating system controls.
Click to expand...
If it's fingerprint recognition code, there's unlikely to be anything earth shattering, but facial recognition code is potentially a different story.

I would be more concerned about the bootloader code since it already has OS bypasses that will now be more easily exploited.
 
MeestaR said:
Agreed, most likely they gained access to the source-control servers...
Air gapping is not an option here, you have your engineers and support people working remotely, needs access to their source, how would they manage it if air gapped?
Click to expand...

Via a skybridge...
 
If Samsung can't keep the code safe, they must have poor security.
US should ban Samsung using security concerns (same as Huawei)
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X