Press Release
Microsoft rushes to register credentials-leaking Autodiscover domains.
Microsoft is hurrying to register Internet domains that are used to intercept Windows credentials transmitted via subpar Microsoft Exchange Autodiscover deployments.
Amit Serper of Guardicore published further research on Monday describing how the problem resulted in the exposing of almost 100,000 different Windows and email credentials.
The app will attempt to authenticate to numerous Autodiscover URLs connected to Microsoft Exchange servers for their company when users configure their Exchange accounts on email clients. The Exchange server will send back the settings that the mail client should use if authentication is successful. Although many mail clients wrongly implement the Autodiscover protocol, causing them to attempt to authenticate to third-party autodiscover, including some variations of Microsoft Outlook and Office 365. [tld] URLs that have nothing to do with a user’s company.
Autodiscover.com, Autodiscover.uk, and Autodiscover.de are a few examples of such domains.
Threat actors might register autodiscover.[tld] domains and start gathering the stolen Windows and email login information in preparation for assaults on the company.
Microsoft rushes to register domains for autodiscovery
Microsoft has been aware of the problem for years. Research regarding incorrect Microsoft Autodiscover protocol implementations exposing Windows passwords is not new.
A formal research paper describing the leaks and the findings were both initially presented at Black Hat Asia 2017 briefing. Other researchers claimed that when they previously reported the problem to Microsoft, they were informed that it wasn’t a bug.
But after Serper published his findings, Microsoft told BleepingComputer that they were unaware of the material.
Additionally, BleepingComputer is aware of 38 additional domain names that have been registered since September 22nd but whose owners are obscured by privacy or WHOIS limitations. These names were probably registered by Microsoft, researchers, or prospective threat actors.
Since Microsoft registered numerous autodiscover domains for the same TLD, such as autodiscover.com.es and autodiscover.org.es, BleepingComputer believes the true number of registered domains is significantly higher.
It is unclear who the owner is of one domain, autodiscover.ch, which has been registered since at least 2015 and utilises microsoftonline.com as its DNS servers.
Microsoft will need to release solutions for the subpar Autodiscover implementation in their Microsoft Outlook and Office 365 mail clients to resolve the issue further, even though registering autodiscover.[tld] domains will stop some of the leaks.
Microsoft will also need to provide instructions on how to properly design Autodiscover URLs so that credentials are not transferred to dubious domains, as other non-Microsoft applications also have flawed protocol implementations.
Press Release
Russian processor manufacturers are prohibited from using ARM because of UK sanctions.
On Wednesday, the UK government expanded its list of sanctioned Russian organisations by 63. The two most significant chip manufacturers in Russia, Baikal Electronics and MCST (Moscow Center of SPARC Technologies), are among them.
Since the licensee, Arm Ltd., is situated in Cambridge, England, and must abide by the penalties, the two sanctioned firms will now be denied access to the ARM architecture.
contacting inactive entities
The UK government provided the following justification for the restrictive measures put in place against Baikal and MCST:
The clause’s goal is to persuade Russia to stop acting in a way that threatens Ukraine’s territorial integrity, sovereignty, or independence or that destabilises Ukraine.
The two companies are important to Russia’s ambitions to achieve technical independence since they are anticipated to step up and fill the gaps left by the absence of processors built by Western chip manufacturers like Intel and AMD.
The two currently available most cutting-edge processors are:
Eight ARM Cortex A57 cores running at 1.5 GHz and an ARM Mali-T628 GPU running at 750 MHz make up the 35 Watt Baikal BE-M1000 (28nm) processor.
MCST Elbrus-16S (28nm), a 16-core processor clocked at 2.0 GHz, is capable of 1.5 TFLOP calculations, which is a tenth of what an Xbox Series X can do. Baikal BE-S1000 (16nm), a 120 Watt processor featuring 48 ARM cores clocked at 2.0 GHz, MCST Elbrus-8C (28nm), a 70 Watt processor featuring eight cores clocked at 1.3 GHz,
Russian businesses and organisations that evaluated these chips in demanding applications claim that they fall short of industry standards and are even unacceptably priced.
Although the performance of these processors and the far poorer mid-tier and low-tier chips with the Baikal and MCST stickers is not very spectacular, they could keep some crucial components of the Russian IT sector operating amid shortages.
In reality, MCST recently bragged that it was “rushing to the rescue” of vital Russian enterprises and organisations, successfully filling the void left in the domestic market.
sanctions’ effects
Given that Russia has previously demonstrated its willingness to relax licencing requirements in order to mitigate the consequences of Western-imposed limitations, it is simple to discount the application and impact of the UK’s sanctions.
It is crucial to keep in mind that the Baikal and MCST processors are produced in foreign foundries, such as those owned by Samsung and TSMC, and that neither of them would violate Arm’s licencing policies or international law to serve Russian objectives.
The only option is to bring the production home and break the law as Baikal, which has a legitimate licence to produce at 16nm, only has a design licence for its next products.
The fact that chip fabrication in Russia can only now be done at the 90nm node level presents yet another significant issue. That was the same technology NVIDIA employed in 2006 for its GeForce 7000-series GPUs.
To combat this in April 2022, the Russian government has already approved an investment of 3.19 trillion rubles (38.2 billion USD), although increasing domestic production will take many years. In the best-case scenarios, 28nm circuits will be able to be produced by Russian foundries by 2030.
Press Release
Zuckerberg says Facebook is dealing with Spotify on a songs assimilation job codenamed Task Boombox (Salvador Rodriguez/CNBC).
Zuckerberg says Facebook is working with Spotify on a music integration project codenamed Project Boombox (Salvador Rodriguez/CNBC)
Salvador Rodriguez / CNBC:
Zuckerberg says Facebook is working with Spotify on a music integration project codenamed Project Boombox — – Facebook CEO Mark Zuckerberg on Monday announced that the company is building audio features where users can engage in real-time conversations with others.
Press Release
THE UNITIONS OF WEARABLE DEVICE SHIPMENTS FOR 2020 GREW 28.4% TO 444.7M UNITS, TEAHING FROM APPLE, WHICH GREW 27.2% IN Q4 AND HAS 36.2% MARKETSHARE, FOLLOWED BY XIAOMI AT *9% (IDC).
Wearable device shipments for 2020 grew 28.4% to 444.7M units globally, led by Apple which grew 27.2% in Q4 and has 36.2% marketshare, followed by Xiaomi at ~9% — Worldwide shipments of wearable devices reached 153.5 million in the fourth quarter of 2020 (4Q20), a year-over-year increase …
-
Apps1 year ago
Why is Everyone Talking About Hindi Keyboards?
-
Social Media1 year ago
Who is Rouba Saadeh?
-
Apps1 year ago
Things you need to know about Marathi keyboard today
-
Apps1 year ago
Stuck with Your default Bangla keyboard? Isn’t it time for a change?
-
Games1 year ago
Top 7 Popular Puzzle and Card Games for Relaxing Your Brain on Mobile, Featuring Solitaire
-
Social Media1 year ago
Mati Marroni Instagram Wiki (Model’s Age, Net Worth, Body Measurements, Marriage)
-
Entertainment1 year ago
12 Online Streaming Sites that Serve as Best Alternatives to CouchTuner
-
Entertainment1 year ago
Movierulz Website: Movierulzz 2021 Latest Movies on Movierulz.com