The hacking group behind the SolarWinds compromise was able to break into Microsoft Corp. and access some of its source code, Microsoft said Thursday. In a blog post, Microsoft said its investigation into the SolarWinds breach had turned up irregularities with a “small number of internal accounts” and that one of the accounts “had been used to view source code in a number of source code repositories.” It added that the account had no ability to modify the code. The disclosure adds to the growing picture of the compromises associated with the SolarWinds hack, which used the Texas-based company’s flagship network monitoring software as a springboard to break into sensitive U.S. government networks and other tech companies. Microsoft had disclosed that, like other firms, it found malicious versions of SolarWinds’ software inside its network, but the source code disclosure is new. FILE – A woman walks in front of the Microsoft stand during the Cybersecurity Conference in Lille, northern France, Jan. 29, 2020.A company’s source code, the underlying set of instructions that run a piece of software or an operating system, is typically among its most closely guarded secrets. It is not clear how many or specifically which source code repositories the hackers were able to access or how long the hackers were lurking in Microsoft’s systems. A Microsoft spokesman declined to elaborate on the blog post. Modifying source code, which Microsoft said the hijacked account could not do, could have potentially disastrous consequences, but experts said that even just being able to review the code could offer hackers insight that might help them subvert Microsoft products or services. “The source code is the architectural blueprint of how the software is built,” said Andrew Fife of Israel-based Cycode, a source code protection company. “If you have the blueprint, it’s far easier to engineer attacks.” Both he and Ronen Slavin, Cycode’s chief technology officer, said a key unanswered question was which source code repositories were accessed. Microsoft has a huge range of products, from its flagship Windows operating system to lesser-known software such as social networking app Yammer and the design app Sway. Slavin said he was also worried by the possibility that the SolarWinds hackers were poring over Microsoft’s source code as prelude for something more ambitious. “To me the biggest question is, ‘Was this recon for the next big operation?’ ” he said. In its blog post, Microsoft said it had found no evidence of access “to production services or customer data.” “The investigation, which is ongoing, has also found no indications that our systems were used to attack others,” it said.
…
Day: December 31, 2020
The world’s 7.8 billion people are bidding a hearty farewell to 2020, but without the usual fanfare and public gatherings because of the novel coronavirus pandemic. Japan rang in the new year quietly due to rising cases. Tokyo’s governor, Yuriko Koike, had asked people not to attend countdown ceremonies. “The coronavirus knows no year-end or New Year’s holidays,” she said. World Bids Farewell to Year 2020Pandemic restrictions limiting crowds and many people bidding farewell to a year they’d prefer to forget. South Korea, where the government banned gatherings of more than five, saw a different New Year’s Eve as a traditional bell ringing in Seoul was cancelled for the first time since 1953. Beaches where South Koreans flock to watch sunrise were closed with some outlets planning on broadcasting it instead. Ski resorts and other tourist spots were closed. In Taiwan, officials held a fireworks show near the iconic Taipei 101 tower. A New Year’s morning flag-raising ceremony took place in front of the Presidential Office Building, but it was limited to government officials and invited guests. Taiwan is seen as a success story in fighting COVID-19, registering only seven deaths and fewer than 1,000 total cases, the Associated Press reported. COVID-19 is the illness caused by the coronavirus. Hong Kong cancelled public celebrations for the second year in a row. Last year, it was due to public security concerns. Restaurants closed at 6 p.m. local time and live performances were cancelled. Gatherings were limited to two people, but the AP reported crowds were still present in shopping areas. The small central Pacific island nations of Tonga, Samoa and Kiribati were first to welcome 2021 due to their location on the international date line, with the bigger regional powers of New Zealand, Australia, Japan and South Korea following. New Zealand’s port city of Auckland rang in the new year with a major laser light show and fireworks display at the iconic Sky Tower, as residents celebrated the island nation’s successful response to the coronavirus outbreak that resulted in just 2,162 coronavirus infections and 25 deaths. Many of the traditional celebrations around the world that mark the chronological changeover have either been curtailed or called off, as public officials struggle to contain a rising surge in the number of infections. In Australia, the one million people who normally gather at the Sydney Harbor to watch the world-famous fireworks display over the city’s renowned Opera House watched the proceedings from home. New South Wales Premier Gladys Berejiklian announced earlier this week that the public will not be allowed at the harbor due to an outbreak at its Northern Beach suburbs. The pandemic forced the cancellation of the midnight fireworks show over Berlin’s Brandenburg Gate, as well as the pyrotechnics over the River Thames in London, which has been under a strict lockdown that curtailed Christmas celebrations and shopping sprees. Across the Atlantic, New York City’s historic Times Square is banning visitors from gathering to witness the traditional “ball drop” that counts down the final minute of the outgoing year. In Rio de Janeiro, Brazil, officials have called off its annual New Year’s Eve beach party, which normally attracts hundreds of thousands of people with live music and a spectacular fireworks display.
…
This New Year’s Eve is being celebrated like no other, with pandemic restrictions limiting crowds and many people bidding farewell to a year they’d prefer to forget. Australia will be among the first nations to ring in 2021 because of its proximity to the International Date Line. In past years 1 million people crowded Sydney’s harbor to watch fireworks that center on the Sydney Harbor Bridge. Authorities this year are advising revelers to watch on television. People are only allowed in downtown Sydney if they have a restaurant reservation or are one of five guests of an inner-city apartment resident. People won’t be allowed in the city center without a permit. Some harborside restaurants are charging up to 1,690 Australian dollars ($1,294) for a seat, Sydney’s The Daily Telegraph newspaper reported Wednesday. A man and woman pose for a photo in front of a 2021 sign as a limited number of people begin celebrating New Year’s Eve at the Sydney Harbour waterfront amidst tightened COVID-19 prevention regulations in Sydney, Australia, Dec. 31, 2020.Sydney is Australia’s most populous city and has its most active community transmission of COVID-19 in recent weeks. Melbourne, Australia’s second-most populous city, has cancelled its fireworks this year. For the first time in many, many years we made the big decision, difficult decision to cancel the fireworks,'' Melbourne Mayor Sally Capp said. We did that because we know that it attracts up to 450,000 people into the city for one moment at midnight to enjoy a spectacular display and music. We are not doing that this year,” she added. New Zealand, which is two hours ahead of Sydney, and several of its South Pacific island neighbors have no COVID-19, and New Year celebrations there are the same as ever. In Chinese societies, the Lunar New Year celebration that falls in February in 2021 generally takes precedence over solar New Year, on Jan. 1. While celebrations of the Western holiday have been growing more common in recent decades, this year will be more muted. Beijing will hold a countdown ceremony with just a few invited guests, while other planned events have been cancelled. And nighttime temperatures plunging to -15 Celsius (- 5 Fahrenheit) will likely discourage people from spending the night out with friends. Taiwan will host its usual New Year’s celebration, a fireworks display by its capital city’s iconic tower, Taipei 101, as well as a flag-raising ceremony in front of the Presidential Office Building the next morning. The island has been a success story in the pandemic, registering only 7 deaths and 700 confirmed cases of COVID-19. Hong Kong, with its British colonial history and large expatriate population, has usually seen raucous celebrations along the waterfront and in bar districts. For the second year running, however, New Year’s Eve fireworks have been cancelled, this time over coronavirus rather than public security concerns. Still roiled by its coronavirus outbreak, Hong Kong social distancing regulations restrict gatherings to only two people. Restaurants must close by 6 p.m. Live performances and dancing are not allowed. But crowds still throng shopping centers. In Japan, some people skipped what’s customarily a chance to return to ancestral homes for the holidays, hoping to lessen health risks for extended families amid the coronavirus pandemic. Rural restaurants saw business drop, while home deliveries of traditional New Year’s good luck'' food calledosechi” boomed. Emperor Naruhito is delivering a video message for the new year, instead of waving from a window with the imperial family as cheering crowds throng the palace. Train services that usually carry people on shrine visits overnight December 31, as well as some countdown ceremonies, have been cancelled. Meiji Shrine in downtown Tokyo, which attracts millions of people every year during New Year holidays and is usually open all night on New Year’s Eve, will close its doors at 4 p.m. on December 31 this year, the shrine announced on its website. In South Korea, Seoul’s city government has canceled its annual New Year’s Eve bell-ringing ceremony in the Jongno neighborhood for the first time since it first held the event in 1953, months after the end of the Korean War. The event, in which citizens ring a large bell at a traditional pavilion when the clock strikes twelve, drew an estimated 100,000 people and was broadcast live. Authorities in eastern coastal areas say they’ll close beaches and other spots where hundreds of thousands of people typically gather on New Year’s Day to watch the sunrise. The southeastern city of Pohang says it instead plans to broadcast live the sunrise at several beaches under its jurisdiction on its YouTube channel on January 1. Earlier this week, South Korea’s central government said it will ban private social gatherings of more than five people and shut down ski resorts and major tourist spots nationwide from Christmas Eve until January 3 as efforts to bring a recent viral resurgence under control. Associated Press journalists Huizhong Wu in Taipei, Taiwan, Raf Wober in Hong Kong, Mary Yamaguchi and Yuri Kageyama in Tokyo, and Hyung-jin Kim in Seoul, South Korea, contributed to this report.
…
Health officials in the U.S. state of California said a patient there has been infected with a coronavirus variant first detected in Britain, and that it is likely more cases will be identified in the United States.California is the second state with the COVID-19 variant strain, following a case in Colorado earlier this week.As was true with the Colorado case, the California Department of Public Health said the person infected there also had no known travel history.California Health and Human Services Secretary Mark Ghaly called the development “concerning” and stressed the importance of known methods of preventing coronavirus spread, such as wearing masks, social distancing, staying home and avoiding travel.”It appears that this particular mutation does make the virus better at transmitting from one person to another,” said Dr. Anthony Fauci, the top U.S. infectious disease specialist.During an online discussion Wednesday with California Gov. Gavin Newsom, Fauci said virus mutations are normal, and that he was “not surprised” additional cases of the COVID-19 variant would be found in the country.He also said the variant is not believed to cause more severe illness than earlier forms, and that vaccines already being deployed should be just as effective against it.The United States has begun vaccinations of frontline health care workers and high-risk populations such as those living in nursing homes using two vaccines given emergency use authorization.The vaccines will then be made available to other groups in the coming months.Fauci said if the vaccination program progresses as it should through May, June and July, then by early fall there will be “enough good herd immunity to be able to really get back to some strong semblance of normality – schools, theaters, sports events, restaurants.”The United States has recorded 342,000 COVID-19 deaths, including more than 3,700 on Wednesday, according to the Johns Hopkins Coronavirus Resource Center.
…
Tough New Year’s Eve restrictions are being put in place as Australia’s biggest city struggles to contain growing coronavirus clusters.Sydney’s COVID-19 outbreak has been described by health officials as “a bit of a roller coaster ride.” Australia’s biggest city accounts for most of the estimated 204 active infections across the country.Parts of its northern coastal suburbs, where a cluster of cases emerged about two weeks ago, remain in lockdown. Infections have been detected in other parts of the city.The authorities have banned large gatherings on New Year’s Eve to “avoid super spreading events.” Sydney’s famous fireworks display will go ahead, but crowds won’t be allowed to gather around the harbor to watch.Gatherings have been limited, and visits to nursing homes banned for at least a week to try to curb the spread of the virus.“Please, the last thing we want is to welcome in 2021 with a super-spreading event,” said New South Wales Premier Gladys Berejiklian. “2021, all of us are hoping, will be easier on us than 2020 and let us start the year off on a positive foot by doing the right thing, by respecting the restrictions that are in place, but also demonstrating common sense.”Experts are calling for the state government to impose a citywide lockdown as infections grow.In response, other Australian states and territories are restricting travel for residents from Sydney.In Victoria, six coronavirus cases have been reported in the past two days, which authorities have linked to infections further north in Sydney.Residents in Victoria are being urged not to travel to neighboring New South Wales, and masks will become mandatory indoors. Residents are not required to wear a mask inside their own homes, but they must if they visit friends or go shopping.Victoria’s Health Minister Martin Foley said a swift response to the outbreak is needed.“Now that we have got links to the New South Wales outbreaks here in Victoria, we are having to respond really quickly to get on top of that, and a part of that is to make sure that as the situation seemingly continues to deteriorate in New South Wales that we respond appropriately,” he said.Australia has recorded 28,380 COVID-19 cases since the pandemic began. Its just over 200 active estimated COVID-19 cases is small by many international standards, but in the context of Australia, a country that has taken a very cautious approach to the virus, the number is cause for alarm.With fewer than 1,000 deaths related to COVID-19 since the pandemic, Australia has fared better than many other developed nations.Health officials in Sydney have blamed “an avalanche of complacency” for recent outbreaks.
…
Does it spread more easily? Make people sicker? Mean that treatments and vaccines won’t work? Questions are multiplying as fast as new variants of the coronavirus, especially the one moving through England and now popping up in the U.S. and other countries.Scientists say there is reason for concern and more to learn but that the new variants should not cause alarm.Worry has been growing since before Christmas, when Britain’s prime minister said the coronavirus variant seemed to spread more easily than earlier ones and was moving rapidly through England. On Tuesday, Colorado health officials said they had found it there. And on Wednesday, California officials reported a case.Here are some questions and answers on what’s known about the virus so far.Q: Where did this new variant come from?A: New variants have been seen almost since the virus was first detected in China nearly a year ago. Viruses often mutate, or develop small changes, as they reproduce and move through a population.Most changes are trivial. “It’s the change of one or two letters in the genetic alphabet that doesn’t make much difference in the ability to cause disease,” said Dr. Philip Landrigan, a former Centers for Disease Control and Prevention scientist who directs a global health program at Boston College.A more concerning situation is when a virus mutates by changing the proteins on its surface to help it escape from drugs or the immune system, or if it acquires a lot of changes that make it very different from previous versions.Q: How does one variant become dominant?A: That can happen if one variant takes hold and starts spreading in an area, or because “super spreader” events helped it become established.It also can happen if a mutation gives a new variant an advantage, such as helping it spread more easily than other ones that are circulating.Scientists are still working to confirm whether the variant in England spreads more easily, but they are finding some evidence that it does. The variant “out-competes the other strains and moves faster and infects more people, so it wins the race,” Landrigan said.The British variant was first detected in September, WHO officials said. A new South African variant also has emerged.Q: What’s worrisome about the British variant?A: It has many mutations — nearly two dozen — and eight are on the spike protein that the virus uses to attach to and infect cells. The spike is what vaccines and antibody drugs target.Dr. Ravi Gupta, a virus expert at the University of Cambridge in England, said modeling studies suggest it may be up to two times more infectious than the version that’s been most common in England so far. He and other researchers posted a report of it on a website scientists use to quickly share developments, but it has not been formally reviewed or published in a journal.Q: Does it make people sicker or more likely to die?A: “There’s no indication that either of those is true, but clearly those are two issues we’ve got to watch,” Landrigan said. As more patients get infected with the new variant, “they’ll know fairly soon if the new strain makes people sicker.”A WHO outbreak expert, Maria Van Kerkhove, said that “the information that we have so far is that there isn’t a change” in the kind of illness or its severity.Q: What do the mutations mean for treatments?A: A couple of cases in England raise concern that the mutations in some of the emerging new variants could hurt the potency of drugs that supply antibodies to block the virus from infecting cells.Studies on antibody response are under way, Van Kerkhove said.One drugmaker, Eli Lilly, said that tests in its lab suggest that its drug remains fully active.Q: What about vaccines?A: Scientists believe current vaccines will still be effective against the variant, but they are working to confirm that. On Wednesday, British officials reiterated that there is no data suggesting the new variant hurts the effectiveness of the available vaccines.Vaccines induce broad immune system responses besides just prompting the immune system to make antibodies to the virus, so they are expected to still work, several scientists said.Q: What can I do to reduce my risk?A: Follow the advice to wear a mask, wash your hands often, maintain social distance and avoid crowds, public health experts say.”The bottom line is we need to suppress transmission” of the coronavirus, said the WHO’s director-general, Dr. Tedros Adhanom Ghebreyesus.”The more we allow it to spread, the more mutations will happen.”
…
California on Wednesday announced the nation’s second confirmed case of the new and apparently more contagious variant of the coronavirus, offering a strong indication that the infection is spreading more widely in the United States.Gov. Gavin Newsom announced the infection found in Southern California during an online conversation with Dr. Anthony Fauci, head of the National Institute of Allergy and Infectious Diseases.”I don’t think Californians should think that this is odd. It’s to be expected,” Fauci said.Newsom did not provide any details about the person who was infected.The announcement came 24 hours after word of the first reported U.S. variant infection, which emerged in Colorado. That person was identified Wednesday as a Colorado National Guardsman who had been sent to help out at a nursing home struggling with an outbreak. Health officials said a second Guard member may have it, too.The cases triggered a host of questions about how the version circulating in England arrived in the U.S. and whether it is too late to stop it now, with top experts saying it is probably already spreading elsewhere in the United States.”The virus is becoming more fit, and we’re like a deer in the headlights,” warned Dr. Eric Topol, head of Scripps Research Translational Institute. He noted that the U.S. does far less genetic sequencing of virus samples to discover variants than other developed nations, and thus was probably slow to detect this new mutation.The two Guard members had been dispatched Dec. 23 to work at the Good Samaritan Society nursing home in the small town of Simla, in a mostly rural area about 90 miles outside Denver, said Dr. Rachel Herlihy, state epidemiologist. They were among six Guard members sent to the home.Nasal swab samples taken from the two as part of the Guard’s routine coronavirus testing were sent to the state laboratory, which began looking for the variant after its spread was announced in Britain earlier this month, Herlihy said. Samples from staff and residents at the nursing home are also being screened for the variant at the lab, but so far no evidence of it has been found, she said.The Colorado case announced Tuesday involves a man in his 20s who had not traveled recently, officials said. He has mild symptoms and is isolating at his home near Denver, while the person with the suspected case is isolating at a Colorado hotel while further genetic analysis is done on his sample, officials said.The nursing home said it is working closely with the state and is also looking forward to beginning vaccinations next week.Several states, including California, Massachusetts and Delaware, are also analyzing suspicious virus samples for the variant, said Dr. Greg Armstrong, who directs genetic sequencing at the Centers for Disease Control and Prevention. He said the CDC is working with a national lab that gets samples from around the country to broaden that search, with results expected within days.The discovery in Colorado has added urgency to the nation’s vaccination drive against COVID-19, the disease caused by the coronavirus, that has killed more than 340,000 people and sickened nearly 20 million in the U.S., according to Johns Hopkins University.Johns Hopkins said 3,927 people died Wednesday of COVID-19 in the U.S., a new daily record.Britain is seeing infections soar and hospitalizations climb to their highest levels on record. The variant has also been found in several other countries.Scientists have found no evidence that it is more lethal or causes more severe illness, and they believe the vaccines now being dispensed will be effective against it. But a faster-spreading virus could swamp hospitals with seriously ill patients.The discovery overseas led the CDC to issue rules on Christmas Day requiring travelers arriving from Britain to show proof of a negative COVID-19 test. But U.S. health officials said the Colorado patient’s lack of travel history suggests the new variant is already spreading in this country.Topol said it is too late for travel bans.”We’re behind in finding it. Colorado is likely one of many places it’s landed here,” he said. “It’s all over the place. How can you ban travel from everywhere?”Colorado public health officials are conducting contact tracing to determine its spread.Researchers estimate the variant is 50% to 70% more contagious, said Dr. Eric France, Colorado’s chief medical officer.”Instead of only making two or three other people sick, you might actually spread it to four or five people,” France said. “That means we’ll have more cases in our communities. Those number of cases will rise quickly and, of course, with more cases come more hospitalizations.”London and southeast England were placed under strict lockdown measures earlier this month because of the variant, and dozens of countries banned flights from Britain. France also briefly barred trucks from Britain before allowing them back in, provided the drivers got tested for the virus.New versions of the virus have been seen almost since it was first detected in China a year ago. It is common for viruses to undergo minor changes as they reproduce and move through a population. The fear is that mutations at some point will become significant enough to defeat the vaccines.South Africa has also discovered a highly contagious COVID-19 variant that is driving the country’s latest spike of cases, hospitalizations and deaths.
…