国庆请假休29天

What's Really Behind US Defense Firm's Botched Deal to Acquire Pegasus Spyware Maker?_我的网站

一 |     　　8月24日盘后，药明康德（603259.SH，股价155.84元，市值4650亿元）发布《自愿性公告》，披露其生物学业务板块的DNA Encoded Library平台（DEL平台）近期遭遇一起网络安全事件。
　　公告显示，事件发生后公司已立即启动应急响应机制，聘请外部网络安全专家及法律顾问共同应对并展开全面调查，截至目前公司信息技术系统均运作正常，DEL平台安全性亦受控，尚未发现任何证据显示有资料被公开、滥用或被不当利用。    "American defense and intelligence contractors like L3Harris want to make money, and there is a market for spyware, domestically and globally," explains retired US Air Force Lt. Col. Karen Kwiatkowski, a former analyst for the US Department of Defense. "With the NSO Group sanctioned by the USG for surveillance abuse against Americans and others, buying the Israeli company, its codes, software and tools, and hiring its people directly is a way to get that access (and in theory removing it from the sanction list by incorporating it under a different US company entity).",The controversial negotiations between NSO and L3Harris were jointly reported by the Guardian, the Washington Post and Haaretz on June 14. At the time, The Guardian quoted a senior White House official as saying: "Such a transaction, if it were to take place, raises serious counterintelligence and security concerns for the US government.",The US Commerce Department blacklisted Israeli firm NSO Group in November 2021 for providing spyware called Pegasus to foreign governments that "used these tools to maliciously target" journalists, embassy workers and activists. According to the Biden administration, NSO acted "contrary to the national security or foreign policy interests of the United States.",Israeli Police Chief Orders Creation of Commission to Investigate Pegasus Spyware Scandal7 February, 14:16 GMT,"Pegasus is a 'zero-click' hacking tool that can remotely extract everything from a target’s mobile phone, including messages, contacts, photos and videos without the user having to click on a phishing link to give it remote access," wrote The New York Times, adding that the Israeli wonder-tool could also turn the target's mobile phone "into a tracking and recording device.",Nonetheless, L3Harris kicked off covert talks with NSO, claiming that US intelligence officials quietly supported its plans to purchase the firm's core spyware technology as well as a possible transfer of NSO personnel to the American defense contractor. What’s more, NSO's technology has long been "of intense interest" to the FBI and the CIA, according to NYT.,Thus, in March 2022, FBI Director Christopher Wray testified to Congress that the agency had bought NSO's spyware Pegasus, claiming that the agency acquired the tool for evaluation but did not use it.,"The FBI has not and did not use the NSO products operationally in any investigation," Wray told the lawmakers. "I can confirm that we bought a limited license for testing and investigation. We routinely evaluate technologies that are out there: what are the security concerns raised by those products?",Top Polish Politician Admits Country Bought Israeli Pegasus Spyware7 January, 11:30 GMT,The L3Harris-NSO negotiations continued in secret until June 2022, when the US and Israeli mainstream press leaked information about the possible sale, prompting a storm of criticism from the White House. According to The Guardian, Washington denied that the US intelligence community had ever been "supportive" of the deal. However, this possibility cannot be ruled out, according to Kwiatkowski.,"The outcry of US citizenry and media about illegal and harmful surveillance by the NSO group drove the Biden sanctions; Intel community bureaucrats and their contractors have very different interests, they want to use the most capable (and cost effective) software surveillance and tracking tools out there," she explains.,Kwiatkowski has no doubts that if NSO hacking technology were acquired, it would have been used on American citizens. Furthermore, she does not rule out that "it is already being used, much as before sanctions, and the purchase is in part designed to ensure its use can continue and be expanded.",According to Kwiatkowski, "if left only to lawyers and politicians, this purchase in some form… would proceed and happen, and ultimately serve as a relief from existing sanctions for several aspects of NSO Group's products and services.",Apparently, the "hypocritical and self-serving" deal was slowed down and stopped due to the fact that it was widely publicized, according to the former Pentagon analyst.,Report: US Intel Operatives Backed Plans to Buy Infamous NSO Group Before Negotiations Were Axed11 July, 01:26 GMT,Meanwhile, NSO Group is said to be involved in a broad campaign in the United States to get off Washington's blacklist, according to ProPublica nonprofit newsroom and Shomrim, an Israel-based nonpartisan news organization.,"NSO has invested hundreds of thousands of dollars in the past year in payments to lobbyists, public relations companies and law firms in the US, in the hope of reversing the Biden administration’s November decision, according to public records filed under the Foreign Agent Registration Act and conversations with people familiar with the effort," ProPublica and Shomrim reported on 12 July.,Moreover, NSO is currently trying to get the matter raised during a meeting between US President Joe Biden and Israeli Prime Minister Yair Lapid, according to the news organizations.,"So far, the lobbying campaign has generated little response," the report said. "NSO has not been told what it needs to do to remove itself from the list, according to the people familiar with the campaign."。　　已全面开展事件调查 　　药明康德是国内领先的医药研发生产外包（CXO）龙头，业务可以分为化学业务（WuXi Chemistry）、测试业务（WuXi Testing）、生物学业务（WuXi Biology）和其他业务（Others）。　　此次遭遇网络安全事件的DEL平台，正是其生物学业务板块用于早期发现项目的专业编码化学合成物库。　　根据公司2026年8月24日盘后发布的《自愿性公告》，本次网络安全事件发生后，公司已主动联系受本次网络安全事件影响的生物学业务板块客户，开展充分的客户沟通解释工作，目前公司运营一切正常，为客户提供服务的能力未受影响。　　公司表示，其高度重视数据资料安全并将其列为首要处理事项，正与网络安全专家及外部法律顾问紧密合作，全面开展事件调查并进一步加强公司网络系统安全防护措施。　　据公司2022年年度业绩演示材料，药明康德拥有全球领先的DNA编码化合物库（DEL），当时服务客户超1500个，DEL化合物分子数量超过900亿个，拥有6000个独有的分子支架、35000个分子砌块。　　上市公司受到网络攻击已非个案 　　药明康德此次披露的网络安全事件，也让市场再度聚焦A股上市公司面临的网络安全风险。

二 | 事实上，近年来已有多家A股上市公司遭遇黑客攻击或网络入侵。　　比如，今年4月，隆平高科（000998.SZ）披露，控股子公司隆平农业发展股份有限公司的境外经营主体受到有组织的专业黑客攻击，于2025年底造成一笔资金支付至美国的银行账户。

三 | 　　事件发生后，上市公司第一时间向巴西警方、美国警方、所在国内省市公安机关报案，根据掌握的相关线索启动了跨境追索程序。　　4月时，案件取得一定进展。不过，鉴于追回滞留海外601.78万美元存有不确定性，上市公司已对此全额计提，即对2025年度归母净利润影响为2124.30万元。　　此外，隆平高科称，事件为偶发独立事件，不会对公司及隆平发展正常生产经营造成重大不利影响　　2024年7月，圣晖集成（603163.SH）服务器突遭黑客攻击。网络攻击事件发生后，公司迅速反应，IT部门立即启动资讯安全防卫与复原机制，并采取委请外部专业IT安全顾问共同处理等应对措施。　　上市公司当时称，没有证据表明这次网络攻击造成任何数据被泄露或披露，对公司营运未造成重大不利影响。　　本次网络攻击事件为偶发性事件，公司后续将进一步审视现有资讯安全架构。（文章来源：每日经济新闻）。

四 |

Current article:http://w8e.chengjuecannaobianmouqueduoyu.shop/bv5oz/20260826/86463.html

Published on:12:25:53