Skip to content
June 28, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Technology
  • 34 tech firms signed “Cybersecurity Tech Accord” agreement that does’nt support government hacking operations
  • Technology

34 tech firms signed “Cybersecurity Tech Accord” agreement that does’nt support government hacking operations

Do Son April 19, 2018 2 minutes read
cybersecurity cooperation
Add as a preferred
source on Google

The industry consortium of 34 high-tech companies headed by Microsoft has signed a technology agreement that will protect user information security at all costs and will not provide assistance for government attacks against other countries, companies or individuals.

Microsoft, Facebook, Cisco, GitHub, Arm, Cloudflare, LinkedIn, Hewlett-Packard, Dell, SAP, Oracle, and VMWare have signed an agreement called “Cybersecurity Tech Accord”, but this list does not include Apple, Google, Amazon, and Intel.

The agreement is the idea of Brad Smith, Microsoft Chief Legal Officer, who has been talking about the idea of creating a digital Geneva Convention for the past two years. Smith has always advocated that the government should not regard users and the private sector as part of cyber attacks against other countries.

The agreement announced today at the RSA 2018 Security Conference in San Francisco was built around four key principles:

1) Strong defense – Tech companies should do their best to protect users from any type of cyber-attack, regardless of source, or the user’s native country.
2) No offense – Tech companies should never provide material support to government-backed cyber-attacks.
3) Capacity building – Companies should build and provide customers with the necessary tools to protect their data and themselves from state-sponsored attacks.
4) Collective action – Companies will collaborate with each other to share data on attacks and disclose attacks to affected users.

Today, the most difficult part of these agreements is obviously the support of government agencies. All technical agreements in the world are ineffective in the face of court orders or abuse of search warrants that the government may use to pursue dissidents or political opponents.

Related coverage

  • AWS Frontier Agents: Autonomous AI ‘Team Members’ Take Over Dev, Security, and Ops
  • Google Beam: The Future of Hyper-Realistic 3D Video Conferencing is Here
  • Intel was sued for Meltdown and Spectre bugs
  • Google Antitrust Remedy: Judge Limits Default Search Contracts to One-Year Term
  • Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Cybersecurity Tech Accord

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-42208
    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version...
  • CVE-2018-1273CVSS 9.8
    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a...
  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
  • CVE-2026-12569
    A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The...
  • CVE-2026-28496CVSS 9.4
    FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template...
  • CVE-2026-21509CVSS 7.8
    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a...
  • CVE-2026-34908CVSS 10.0
    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi...
  • CVE-2026-34909CVSS 10.0
    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS...
  • CVE-2026-34910CVSS 10.0
    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi...
  • CVE-2025-67038CVSS 9.8
    An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write...
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-58053CVSS 9.9
    Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's...
  • CVE-2026-12415CVSS 9.8
    The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due...
  • CVE-2026-28701CVSS 9.8
    Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote...
  • CVE-2026-53576CVSS 10.0
    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...
  • CVE-2026-49869CVSS 10.0
    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...
  • CVE-2026-54350CVSS 10.0
    Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor...
  • CVE-2026-54352CVSS 9.6
    Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at...
  • CVE-2026-52785CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-52782CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-52780CVSS 9.6
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.