Month: June 2023

In early June, sporadic but serious service disruptions plagued Microsoft’s flagship office suite — including the Outlook email and OneDrive file-sharing apps — and cloud computing platform. A shadowy hacktivist group claimed responsibility, saying it flooded the sites with junk traffic in distributed denial-of-service attacks.

Initially reticent to name the cause, Microsoft has now disclosed that DDoS attacks by the murky upstart were indeed to blame.

But the software giant has offered few details — and did not immediately comment on how many customers were affected and whether the impact was global. A spokeswoman confirmed that the group that calls itself Anonymous Sudan was behind the attacks. It claimed responsibility on its Telegram social media channel at the time. Some security researchers believe the group to be Russian.

Microsoft’s explanation in a blog post Friday evening followed a request by The Associated Press two days earlier. Slim on details, the post said the attacks “temporarily impacted availability” of some services. It said the attackers were focused on “disruption and publicity” and likely used rented cloud infrastructure and virtual private networks to bombard Microsoft servers from so-called botnets of zombie computers around the globe.

Microsoft said there was no evidence any customer data was accessed or compromised.

While DDoS attacks are mainly a nuisance — making websites unreachable without penetrating them — security experts say they can disrupt the work of millions if they successfully interrupt the services of a software service giant like Microsoft on which so much global commerce depends.

It’s not clear if that’s what happened here.

“We really have no way to measure the impact if Microsoft doesn’t provide that info,” said Jake Williams, a prominent cybersecurity researcher and a former National Security Agency offensive hacker. Williams said he was not aware of Outlook previously being attacked at this scale.

“We know some resources were inaccessible for some, but not others. This often happens with DDoS of globally distributed systems,” Williams added. He said Microsoft’s apparent unwillingness to provide an objective measure of customer impact “probably speaks to the magnitude.”

Microsoft dubbed the attackers Storm-1359, using a designator it assigns to groups whose affiliation it has not yet established. Cybersecurity sleuthing tends to take time — and even then can be a challenge if the adversary is skilled.

Pro-Russian hacking groups including Killnet — which the cybersecurity firm Mandiant says is Kremlin-affiliated — have been bombarding government and other websites of Ukraine’s allies with DDoS attacks. In October, some U.S. airport sites were hit. Analyst Alexander Leslie of the cybersecurity firm Recorded Future said it’s unlikely Anonymous Sudan is located as it claims in Sudan, an African country. The group works closely with Killnet and other pro-Kremlin groups to spread pro-Russian propaganda and disinformation, he said.

Edward Amoroso, NYU professor and CEO of TAG Cyber, said the Microsoft incident highlights how DDoS attacks remain “a significant risk that we all just agree to avoid talking about. It’s not controversial to call this an unsolved problem.”

He said Microsoft’s difficulties fending of this particular attack suggest “a single point of failure.” The best defense against these attacks is to distribute a service massively, on a content distribution network for example.

Indeed, the techniques the attackers used are not old, said U.K. security researcher Kevin Beaumont. “One dates back to 2009,” he said.

Serious impacts from the Microsoft 365 office suite interruptions were reported on Monday June 5, peaking at 18,000 outage and problem reports on the tracker Downdetector shortly after 11 a.m. Eastern time.

On Twitter that day, Microsoft said Outlook, Microsoft Teams, SharePoint Online and OneDrive for Business were affected.

Attacks continued through the week, with Microsoft confirming on June 9 that its Azure cloud computing platform had been affected.

On June 8, the computer security news site BleepingComputer.com reported that cloud-based OneDrive file-hosting was down globally for a time.

Microsoft said at the time that desktop OneDrive clients were not affected, BleepingComputer reported.
…

Nestled among the bustling city streets of Washington is a hidden oasis that many Americans don’t know exists. Congress established the U.S. National Arboretum in 1927. Vital scientific research is under way at the sprawling 183-hectare compound. VOA’s Dora Mekouar reports on the arboretum’s critical government mission. Camera: Adam Greenbaum
…

New harmful illicit drugs are inundating a flourishing market for traffickers amid violence and corruption hurting local communities across Europe, the EU’s agency monitoring drugs and addiction said Friday.

The grim finding was part of the agency’s annual report. It also said that drug users in Europe are now exposed to a wider range of substances of high purity as drug trafficking and use across the region have quickly returned to pre-COVID 19 pandemic levels.

Cannabis remains the most-used illicit substance in Europe, the agency found, with some 22.6 million Europeans over the age of 15 having used it in the last year. Cocaine seizures are “historically high” and new synthetic drugs whose effects on health are not well documented are worrying officials.

In 2022, 41 new drugs were reported for the first time by the agency.

“I summarize this with the phrase: ‘everywhere, everything, everyone,'” said European Monitoring Centre for Drugs and Drug Addiction Director Alexis Goosdeel.

“Established illicit drugs are now widely accessible and potent new substances continue to emerge,” Goosdeel added. “Almost everything with psychoactive properties can appear on the drug market.”

Among the new popular substances, ketamine and nitrous oxide — so-called laughing gas — are raising concern over reported cases of bladder problems, nerve damage and lung injuries associated with users. Alongside the high availability of heroin on the continent, synthetic opioids are on the rise and have been linked to deaths by overdose in Baltic countries.

The report said the opioids situation in Europe is not comparable with the dramatic picture in North America, where overdoses caused by fentanyl and other opioids have fueled a drug crisis. But the agency warned that this group of drugs is a threat for the future, with a total of 74 new synthetic opioids identified on the market since 2009.

“We must make sure America’s present does not become Europe’s future,” said Ylva Johansson, the European Commissioner for Home Affairs.

New cannabis products such as the cannabinoid HHC produce strong psychoactive effects and pose another source of concern, especially since they can be found legally in several countries from the 27-nation bloc due to legislation loopholes. France, for instance, only added it to the list of prohibited substances earlier this week.

Meanwhile, record amounts of cocaine are being seized in Europe, with 303 tons stopped by EU member countries in 2021. According to the report, 75% of that quantity was seized in Belgium, the Netherlands and Spain, with the ports of Antwerp and Rotterdam now the main gateways for Latin American cocaine cartels into the continent.

The EMCDDA said the quantity of cocaine seized in Antwerp, Europe’s second largest seaport, rose to 110 tons from 91 in 2021, according to preliminary data.

In addition, EU countries reported the destruction of 34 cocaine labs as well as large seizures of a precursor necessary to produce cocaine, confirming that “large-scale cocaine production steps take place in the European Union.”

The expansion of the cocaine market has been accompanied by a rise in violence and corruption in the EU, with fierce competition between traffickers leading to a rise in homicides and intimidation.

In Belgium, federal authorities say drug trafficking is penetrating society at quick speed as foreign criminal organizations have built deep roots in the country, bringing along their violent and ruthless operations.

“Criminals use the profits from drug trafficking to buy people, buy police officers, and to buy murder,” Johansson said. “Violence is growing in scale and brutality. In the past, criminals shot people in the leg as a warning, now they shoot them in the head.”

In the Netherlands, killings hit ever more prominent people, while trafficking in Antwerp has led to a surge of violence in recent years, with gun battles and grenade attacks taking place regularly. In Brussels, the justice minister was put under strict protection last year following the arrest of four alleged drug criminals suspected of taking part in a plot to kidnap him.

“It’s time to realize organized crime is as big a threat towards our society as terrorism,” Johansson said.
…

Researchers have been exploring the presence of cancer in animals from elephants to mollusks to learn about cancer in wild animals. They also hope their research will help with human cancers.

“Studying wildlife cancer, and more generally the evolution of cancer across the tree of life, is extremely promising to develop innovative therapies to treat cancer in humans,” Mathieu Giraudeau, a researcher at France’s La Rochelle University who has been focusing on cancer in wild animals since 2018, told VOA.

“The idea behind this is that some species have evolved some mechanisms to limit cancer initiation and progression,” he said. “If we identify and understand these mechanisms, then the goal is to use them as a source of inspiration to develop new therapies.”

Cancer affects both humans and animals but its impact on wild animals has been difficult to uncover.

“There are no basic blood tests to detect cancer in the wild animals,” Giraudeau told VOA, “so most of the studies have to use necropsies [post-mortem examinations of animals] to detect cancer cases in wild animals. That’s why using zoo animals is a fantastic opportunity, since a necropsy is performed for most of the animals dying in zoos.”

Researchers say there are more questions than answers regarding cancer in wild animals, which are hard to study in their natural habitat because they move around and are therefore difficult to observe over time.

“We don’t really know much about the different kinds of animals species that get cancer or how much,” biologist Carlo Maley, director of the Arizona Cancer Evolution Center at Arizona State University, where he is studying cancer in wild animals, told VOA.

“We’ve been focusing on collecting data to find which species are super susceptible or super resistant to cancer,” he said, “and we’re looking at questions such as how has nature figured out how to prevent cancer and then, can we translate that to humans.

It seems large and long-lived species “have evolved some powerful mechanisms to fight against cancer, and we now need to understand these mechanisms,” Giraudeau said.

They include elephants and whales.

“Elephant cells are super sensitive to DNA damage, and even with just a little DNA damage, the cell will commit suicide and not risk getting mutations,” Maley said. “So it seems to be a strategy for avoiding cancer by killing off a potentially dangerous cell, rather than risk getting a mutation that could lead to cancer.”

In Australia, however, that has not been the case for a much smaller animal, the Tasmanian devil. The carnivorous marsupials have been nearly wiped out from cancerous tumors growing in and around their mouths.

“Devils bite each other, particularly around the face, as part of their normal behavior,” Cambridge University veterinary medicine professor Elizabeth Murchison told VOA.

Murchison, a researcher on the genetics and evolution of transmissible cancers, added, “Tasmanian Devils have a transmissible cancer that spreads between the animals by the transfer of living cancer cells. There are, in fact, two independent transmissible cancers in Tasmanian devils, which was a surprise, and both are spread during biting, and result in fatal facial tumors.”

Murchison, who grew up in Tasmania, “passionately” hopes the endangered species can be saved.

“There is currently no way to control the disease,” she said. “Research directed towards developing a vaccine is ongoing, but it will be a long road to developing an effective protective vaccine.”

Even much smaller creatures, like shellfish, are dying from cancer.

On Whidbey Island in Washington state, a massive die-off of cockles, a type of bivalve mollusk, were found on the beach. It turns out the cockles had a leukemia-like contagious cancer that affects the cells that live in their hemolymph, the equivalent of blood.

It is another transmissible cancer, found in many shellfish species worldwide, but first discovered in these cockles in 2018. The cancer cells in the sea can float to enter nearby cockles, spreading the disease.

“The whole cell of the cancer moves from one animal to the next,” unlike conventional human cancer that arises due to cell mutations that don’t move from one person to another, said Michael Metzger, assistant investigator at the Pacific Northwest Research Institute in Seattle, Washington.

Researchers are working to find the cause of the contagious cancer and using genetic analysis, to learn how the disease evolves.

It’s not clear how the cockles first got the disease.

It’s possible it could have been brought to the area by a boat carrying diseased shellfish, he said. He also said environmental stressors may have played a part, including global warming.

Scientists say there is a long way to go before cancer in wild animals is widely understood and how that may help battle human cancers in the future. Besides genetics, they are also looking at the effect of viruses, pesticides, habitat destruction and pollution.

Human cancers are short-lived, from an evolutionary perspective,” Murchison said. “Our work gives us insight into how cancers evolve over long time-periods.”

“I think the main benefit is going to be preventing cancer as opposed to curing it,” said Maley. But there’s some possibility that the mechanisms that prevent cancer could also be translated into potential therapies.”
…

The first large-scale battery to be built at an Australian coal site has been switched on in Victoria’s Latrobe Valley, east of Melbourne.

The 150-megawatt battery is at the site of the former Hazelwood power station in the southern Australian state of Victoria. The station was built in the 1960s and closed in 2017.

The new battery was officially opened Wednesday and has the ability to power about 75,000 homes for an hour during the evening peak. The decommissioned coal plant produced 10 times more electricity, but the battery’s operators aim to increase its generating capacity over time.

The Latrobe Valley has been the center of Victoria’s coal-fired power industry for decades, but the region is changing.

The new battery will store power generated by offshore wind farms and is run by the French energy giant Engie, and its partners Eku Energy and Fluence.

Engie chief executive Rik De Buyserie told reporters it is an important part of Australia’s green energy future.

“The commissioning of this battery represents a key milestone in this journey and marks an important step in the transition of the La Trobe Valley from a thermal energy power to a clean energy power provider,” he said.

The state of Victoria aims to have at least 2.6 gigawatts of battery storage connected to the electricity grid by 2030 and 6.3 gigawatts by 2035.

Lily D’Ambrosio, Victoria’s minister for climate action, energy and resources, told reporters that the state government is committed to boosting its renewable energy sector.

“It is important that we just do not sit around waiting for old technology to disappear, close down, but we actually get in front of it and make sure that we have more than sufficient supply to meet our needs,” she said. “That is what keeps downward pressure on prices.”

Australia has legislated a target to cut carbon emissions by 43% from 2005 levels by 2030 and to achieve net zero emissions by 2050.

Electricity generation in Australia is still dominated by coal and gas but there is a distinct shift to renewable sources of power.

In April the Clean Energy Council, an industry association, said that clean energy accounted for 35.9% of Australia’s total electricity generation in 2022, up from 32.5% in 2021.
…

U.S. security officials say the U.S. Energy Department and several other federal agencies have been hacked by a Russian cyber-extortion gang.

Homeland Security officials said Thursday the agencies were caught up in the hacking of MOVEit  Transfer, a file-transfer program that is popular with governments and corporations.

The Energy Department said two of its entities were “compromised” in the hack.

The Russia-linked extortion group CI0p, which claimed responsibility for the hacking, said last week on the dark web site that its victims had until Wednesday to negotiate a ransom or risk having sensitive information dumped online.  It added that it would delete any data stolen from governments, cities and police departments.

Jen Easterly, director of the Cybersecurity and Infrastructure Security Agency, said while the intrusion was “largely an opportunistic one” that was superficial and caught quickly, her agency was “very concerned about this campaign and working on it with urgency.”

Reuters reports that the Britain’s Shell Oil Company, the University of Georgia, Johns Hopkins University and the Johns Hopkins Health System were also among those targeted in the hacking campaign. The Associated Press quoted a senior CISA official as saying U.S. military and intelligence agencies were not affected.

MOVEit said it is working with the federal agencies and its other customers to help fix their systems.

Information for this report was provided by The Associated Press and Reuters.  
…

An announcement by YouTube that it will no longer remove content containing misinformation on the U.S. 2020 presidential election has some experts divided.

In a June blog post, YouTube said it was ending its policy — enforced since December 2020 — that removed tens of thousands of videos that falsely claimed the 2020 election was impaired by “widespread fraud, errors or glitches.”

“We find that while removing this content does curb some misinformation, it could also have the unintended effect of curtailing political speech without meaningfully reducing the risk of violence or other real-world harm,” the post said.

The Google-owned platform says the move is to support free speech, but some experts in tech and disinformation say it could allow harmful content to again be easily shared.

“The message that YouTube is sending is that the election denial crowd is now welcome again on YouTube and can resume its campaign of undermining trust in American elections and democratic institutions,” said Paul Barrett, deputy director at New York University’s Stern Center for Business and Human Rights.

But others say the policy caused “legitimate” content to be removed and that the core issue is a wider societal problem, not something confined to YouTube.

YouTube’s other election misinformation policies remain unchanged, the platform said.

These include prohibiting content aimed at misleading people about the time and place for voting and claims that could significantly discourage voting.

Google spokesperson Ivy Choi told VOA in an email that the company has “nothing to add beyond what we shared in our blog post.”

Still, some U.S. lawmakers and experts are concerned about how harmful content circulates on YouTube.

Representative Zoe Lofgren, who sat on the House January 6 committee, said the idea that election denial disinformation is “no longer harmful — including that they do not increase the risk of violence — is simply wrong.”

“The lies continue to have a dramatic impact on our democracy and on the drastic increase in threats faced by elected officials at all levels of government,” Lofgren told VOA in an emailed statement.

Lofgren, a Democrat from California, added that YouTube’s parent company Alphabet should reconsider its decision.

Justin Hendrix, founder and editor of the nonprofit website Tech Policy Press, questioned whether YouTube’s policy had even been successful.

“There is, to me, a bigger question about whether YouTube was ever really effectively removing information that promoted false claims about the 2020 election,” Hendrix told VOA. “I wonder whether this is a capitulation to the reality that the company was never able to effectively take action against false claims in the 2020 election.”

YouTube is one of the most popular social media platforms in the United States, and it has over 2 billion users around the world.

But despite the platform’s popularity, it has escaped the level of scrutiny given to Twitter and Facebook, according to Barrett. The main reason: the difficulty in analyzing videos in bulk.

YouTube is the main place people go for videos on innocuous things like how to fix your car or do your makeup, said Barrett. “But it’s also the go-to place for video for people with extreme political ideas,” he added.

Videos on YouTube amplified the false narratives that the 2020 election was rigged and that the entire American election system is corrupt, according to a 2022 report Barrett and Hendrix co-authored, A Platform ‘Weaponized’: How YouTube Spreads Harmful Content – And What Can Be Done About It.

Election misinformation was also cited by the January 6 committee as it investigated the circumstances that resulted in a mob of former President Donald Trump’s supporters storming the U.S. Capitol on the day the election results were due to be certified.

In a report on the insurrection, the committee said the platform “included efforts to boost authoritative content” and that it “labeled election fraud claims — but did so anemically.”

Some free-speech experts like Jennifer Stisa Granick, the surveillance and cybersecurity counsel at the American Civil Liberties Union, believe the policy change is good.

“There have been some legitimate discussions about voting and the legitimacy of the election that have been adversely impacted” under the former policy, Granick said.

“Election disinformation was not spread by YouTube or other online platforms, but by [Trump] himself. And the misinformation that circulates online is a drop in the bucket compared to what the [former] president of the United States says,” Granick said.

The bigger problem, she said, is that for some political candidates, “election denial is a fundamental part of their campaigns.”

People who complain that YouTube is evading its responsibility are “looking to the platform to solve a social and political problem that the United States has,” Granick said.

Roy Gutterman, director of the Tully Center for Free Speech at Syracuse University, believes any policy that openly fosters free speech is worthwhile.

“But calls to violence, which may accompany some of this discourse, would still not be protected,” Gutterman told VOA.

Barrett, however, is concerned that the reversal creates the potential for YouTube to be exploited.

The broader effect, Barrett said, “is the erosion of trust more generally” — not just in American elections.

Studies have shown that exposure to misinformation and disinformation is tied to lower trust in the media.

The YouTube policy change is hardly the main cause of that process, Barrett said, but it’s a contributing factor.

The policy change comes as several major social media companies face criticism for failing to quell election misinformation and disinformation on their platforms. The recent development with YouTube is part of a broader trend in the tech industry, according to Hendrix.

“I’m concerned that we’re seeing across the board almost a kind of throwing up the hands around some of these issues,” he said, pointing to staff layoffs, including those in trust and safety departments.

All of these factors contribute to “an erosion of even more than democracy,” Barrett said. “That’s an erosion of the social connections that hold society together.”
…

Suspected state-backed Chinese hackers used a security hole in a popular email security appliance to break into the networks of hundreds of public and private sector organizations globally, nearly a third of them government agencies including foreign ministries, the U.S. cybersecurity firm Mandiant said Thursday.

“This is the broadest cyber espionage campaign known to be conducted by a China-nexus threat actor since the mass exploitation of Microsoft Exchange in early 2021,” Charles Carmakal, Mandiant’s chief technical officer, said in an emailed statement. That hack compromised tens of thousands of computers globally.

In a blog post Thursday, Google-owned Mandiant expressed “high confidence” that the group exploiting a software vulnerability in Barracuda Networks’ Email Security Gateway was engaged in “espionage activity in support of the People’s Republic of China.” It said the activity began as early as October.

The hackers sent emails containing malicious file attachments to gain access to targeted organizations’ devices and data, Mandiant said. Of those organizations, 55% were from the Americas, 22% from the Asia Pacific region and 24% from Europe, the Middle East and Africa, and they included foreign ministries in Southeast Asia and foreign trade offices and academic organizations in Taiwan and Hong Kong. the company said.

Mandiant said the majority impact in the Americas may partially reflect the geography of Barracuda’s customer base.

Barracuda announced on June 6 that some of its email security appliances had been hacked as early as October, giving the intruders a back door into compromised networks. The hack was so severe that the California company recommended fully replacing the appliances.

After discovering it in mid-May, Barracuda released containment and remediation patches, but the hacking group, which Mandiant identifies as UNC4841, altered its malware to try to maintain access, Mandiant said. The group then “countered with high-frequency operations targeting a number of victims located in at least 16 different countries.”

Blinken trip

Word of the breach comes as U.S. Secretary of State Antony Blinken departs for China this weekend as part of the Biden administration’s push to repair deteriorating ties between Washington and Beijing.

His visit had initially been planned for early this year but was postponed indefinitely after the discovery and shootdown of what the U.S. said was a Chinese spy balloon over the United States.

Mandiant said the targeting at both the organizational and individual account levels focused on issues that are high policy priorities for China, particularly in the Asia Pacific region. It said the hackers searched for email accounts of people working for governments of political or strategic interest to China at the time they were participating in diplomatic meetings with other countries.

In an emailed statement Thursday, Barracuda said about 5% of its active Email Security Gateway appliances worldwide showed evidence of potential compromise. It said it was providing replacement appliances to affected customers at no cost.

The U.S. government has accused Beijing of being its principal cyber espionage threat, with state-backed Chinese hackers stealing data from both the private and public sector.

In terms of raw intelligence affecting the U.S., China’s largest electronic infiltrations have targeted OPM, Anthem, Equifax and Marriott.

Earlier this year, Microsoft said state-backed Chinese hackers have been targeting U.S. critical infrastructure and could be laying the technical groundwork for the potential disruption of critical communications between the U.S. and Asia during future crises.

China says the U.S. also engages in cyber espionage against it, hacking into computers of its universities and companies.
…

Advisers to the U.S. Food and Drug Administration met Thursday to discuss and vote on whether to recommend targeting one of the currently dominant XBB coronavirus variants in updated COVID-19 shots being developed for a fall vaccination campaign. 

FDA staff reviewers in documents released this week said available evidence suggests this year’s shots should target an XBB variant. XBB and its offshoots, which now account for most U.S. infections, are descendants of the omicron variant that caused COVID cases to surge to record levels early last year. 

U.S. regulators are looking to bring the next COVID shots more closely in line with the circulating virus.  

The next-generation shots should select a single XBB-related target, the FDA’s staff reviewers suggested. A so-called monovalent vaccine would be a change from the most recent bivalent COVID boosters that targeted both the original strain of the coronavirus and omicron. 

Top FDA official Peter Marks said there was concern about another COVID wave over the 2023-24 winter, when population immunity could wane further.  

The expert panel meeting comes after an advisory group to the World Health Organization last month recommended the next wave of COVID booster shots be updated to target XBB subvariants. Europe’s medicine regulators backed that recommendation. 

The U.S. Centers for Disease Control and Prevention recommended booster shots broadly last year. But panel member Dr. Paul Offit questioned whether the shots needed to be recommended for “everybody every season,” noting that the highest risk groups are those most likely to benefit from an annual booster. 

Only about 17% of the U.S. population, about 56.5 million people, received a COVID booster during the 2022-23 vaccination season, according to government data through early May. Older Americans were boosted at a higher rate than the general population. 

“The highest-risk people are really older adults as well as people with significant comorbidities,” said Dr. Paul Sax from Brigham and Women’s Hospital in Boston, who is not on the advisory panel. “That’s the primary group to target.” 

The FDA will consider recommendations from its outside experts before deciding on the composition of the shots. 

COVID vaccine makers Pfizer, BioNTech, Moderna and Novavax are developing versions of their respective vaccines targeting XBB.1.5 and other currently circulating subvariants. Preclinical data from all three were presented at the meeting.  

COVID deaths and hospitalizations have declined in 2023, and the U.S. government in May ended its COVID Public Health Emergency, which had allowed millions of Americans to receive vaccines, tests and treatments at no cost.
…

Chinese manufacturers of electric vehicles are stepping up their push to dominate the European market. As Amy Guttman reports from London, they are making progress in Britain, where car shoppers are eager to buy the lower-cost electric cars that Chinese automakers are offering.
…

Microsoft Founder Bill Gates was in China on Thursday for what he said were meetings with global health and development partners who have worked with his charitable foundation.

“Solving problems like climate change, health inequity and food insecurity requires innovation,” Gates tweeted. “From developing malaria drugs to investing in climate adaptation, China has a lot of experience in that. We need to unlock that kind of progress for more people around the world.”

Gates said global crises stifled progress in reducing death and poverty in children and that he will next travel to West Africa because African countries are particularly vulnerable “with high food prices, crushing debt, and increasing rates of TB and malaria.”

Reuters, citing two people familiar with the matter, said Gates would meet with Chinese President Xi Jinping.

Gates is the latest business figure to visit China year, following Apple’s Tim Cook and Tesla’s Elon Musk.

Some information for this report came from The Associated Press, Agence France-Presse and Reuters.
…

Experts are raising concerns that a recent Cambodian government order allocating around $1 million to a local company for a facial recognition technology project could pave the way for the technology to be used against citizens and human rights defenders.

The order, signed by Prime Minister Hun Sen and released in March in a recent tranche of government documents, would award the funds to HSC Co. Ltd., a Cambodian company led by tycoon Sok Hong that has previously printed Cambodian passports and installed CCTV cameras in Phnom Penh, Cambodia’s capital.

The Oct. 17 order appears to be the first direct indication of Cambodia’s interest in pursuing facial recognition, alarming experts who say such initiatives could eventually be used to target dissenters and build a stronger surveillance state similar to China’s. In recent months, the government has blocked the country’s main opposition party from participating in the July national elections, shut down independent media and jailed critics such as labor organizers and opposition politicians.

Neither the Interior Ministry nor the company would answer questions about what the project entails.

“This is national security and not everyone knows about how it works,” Khieu Sopheak, secretary of state and spokesperson for the Interior Ministry, told VOA by phone. “Even in the U.S., if you ask about the air defense system, they will tell you the same. This is the national security system, which we can’t tell everyone [about].”

The order names HSC, a company Sok Hong founded in 2007, as the funds’ recipient. HSC’s businesses span food and beverage, dredging and retail.

HSC also has close ties to the government: in addition to printing passports and providing CCTV cameras in Phnom Penh, it runs the system for national ID cards and has provided border checkpoint technology. Malaysian and Cambodian media identify Sok Hong as the son of Sok Kong, another tycoon who founded the conglomerate Sokimex Investment Group. Both father and son are oknhas or “lords,” a Cambodian honorific given to those who have donated more than $500,000 to the government.

When reached by phone, Sok Hong told VOA, “I think it shouldn’t be reported since it is related to national security.”

Cambodia’s history of repression, including monitoring dissidents in person and online, has raised suspicions that it could deploy such technology to target activists. Last year, labor leaders reported they were recorded via drones during protests.

“Authorities can use facial recognition technology to identify, track individuals and gather vast amounts of personal data without their consent, which could eventually lead to massive surveillance,” said Chak Sopheap, director of the Cambodian Center for Human Rights. “For instance, when a government uses facial recognition to monitor attendance at peaceful gatherings, these actions raise severe concerns about the safety of those citizens.”

In addition, giving control of facial recognition technology to a politically connected firm, and one that already has access to a trove of identity-related information, could centralize citizens’ data in a one-stop shop. That could make it easier to fine-tune algorithms quickly and later develop more facial recognition tools to be shared with the government in a mutually beneficial relationship, Joshua Kurlantzick, Council on Foreign Relations senior fellow for Southeast Asia, told VOA.

China — one of Cambodia’s oldest and closest allies — has pioneered collecting vast amounts of data to monitor citizens. In Xinjiang, home to about 12 million Uyghurs, Chinese authorities combine people’s biometric data and digital activities to create a detailed portrait of their lives.

In recent years, China has sought to influence Southeast Asia, “providing an explicit model for surveillance and a model for a closed and walled-garden internet,” Kurlantzick said, referring to methods of blocking or managing users’ access to certain content.

Some efforts have been formalized under the Digital Silk Road, China’s technology-focused subset of the Belt and Road initiative that provides support, infrastructure and subsidized products to recipient countries.

China’s investment in Cambodian monitoring systems dates back to the early days of the Digital Silk Road. In 2015, it installed an estimated $3 million worth of CCTV cameras in Phnom Penh and later promised more cameras to “allow a database to accumulate for the investigation of criminal cases,” according to reports at the time. There is no indication China is involved in the HSC project, however.

While dozens of countries use facial recognition technology for legitimate public safety uses, such investments must be accompanied by strict data protection laws and enforcement, said Gatra Priyandita, a cyber politics analyst at the Australian Strategic Policy Institute.

Cambodia does not have comprehensive data privacy regulations. The prime minister himself has monitored Zoom calls hosted by political foes, posting on Facebook that “Hun Sen’s people are everywhere.”

Given the country’s approach to digital privacy, housing facial recognition within a government-tied conglomerate is “concerning” but not surprising, Priyandita said.

“The long-term goal of these kinds of arrangements is the reinforcement of regime security, of course, particularly the protection of Cambodia’s main political and business families,” Priyandita said.

In the immediate future, Cambodia’s capacity to carry out mass surveillance is uncertain. The National Internet Gateway — a system for routing traffic through government servers which critics compared to China’s “Great Firewall” — was delayed in early 2022. Shortly before the scheduled rollout, the government advertised more than 100 positions related to data centers and artificial intelligence, sowing doubts about the technical knowledge behind the project.

Still, the government is pushing to strengthen its digital capabilities, fast-tracking controversial laws around cybercrime and cybersecurity and pursuing a 15-year plan to develop the digital economy, including a skilled technical workforce.

Sun Narin of VOA’s Khmer Service contributed to this report.
…

Chinese authorities are cracking down on political and fraud cases driven by deepfakes, created with face- and voice-changing software that tricks targets into believing they are video chatting with a loved one or another trusted person.

How good are the deepfakes? Good enough to trick an executive at a Fuzhou tech company in Fujian province who almost lost $600,000 to a person he thought was a friend claiming to need a quick cash infusion.

The entire transaction took less than 10 minutes from the first contact via the phone app WeChat to police stopping the online bank transfer when the target called the authorities after learning his real friend had never requested the loan, according to Sina Technology.

Despite the public’s outcry about such AI-driven fraud, some experts say Beijing appears more concerned about the political challenges that deepfakes may pose, as shown by newly implemented regulations on “deep synthesis” management that outlaw activities that “endanger national security and interests and damage the national image.”

The rapid development of artificial intelligence technology has propelled cutting-edge technology to mass entertainment applications in just a few years.

In a 2017 demonstration of the risks, a video created by University of Washington researchers showed then-U.S. President Barack Obama saying things he hadn’t.

Two years later, Chinese smartphone apps like Zao let users swap their faces with celebrities so they could appear as if they were in a movie. Zao was removed from app stores in 2019 and Avatarify, another popular Chinese face-swapping app, was also banned in 2021, likely for violation of privacy and portrait rights, according to Chinese media.

Pavel Goldman-Kalaydin, head of artificial intelligence and machine learning at SumSub, a Berlin-based global antifraud company, explained how easy it is with a personal computer or smartphone to make a video in which a person appears to say things he or she never would.

“To create a deepfake, a fraudster uses a real person’s document, taking a photo of it and turning it into a 3D persona,” he said. “The problem is that the technology, it is becoming more and more democratized. Many people can use it. … They can create many deepfakes, and they try to bypass these checks that we try to enforce.”

Subbarao Kambhampati, professor at the School of Computing and Augmented Intelligence at Arizona State University, said in a telephone interview he was surprised by the apparent shift from voice cloning to deepfake video calling by scammers in China. He compared that to a rise in voice-cloning phone scams in the U.S.

“Audio alone, you’re more easily fooled, but audio plus video, it would be little harder to fool you. But apparently they’re able to do it,” Kambhampati said, adding that it is harder to make a video that appears trustworthy.

“Subconsciously we look at people’s faces … and realize that they’re not exactly behaving the way we normally see them behave in terms of their facial expressions.”

Experts say that AI fraud will become more sophisticated.

“We don’t expect the problem to go away. The biggest solution … is education, let people understand the days of trusting your ears and eyes are over, and you need to keep that in the back of your mind,” Kambhampati said.

The Internet Society of China issued a warning in May, calling on the public to be more vigilant as AI face-changing, voice-changing scams and slanders became common.

The Wall Street Journal reported on June 4 that local governments across China have begun to crack down on false information generated by artificial intelligence chatbots. Much of the false content designed as clickbait is similar to authentic material on topics that have already attracted public attention.

To regulate “deep synthesis” content, China’s administrative measures implemented on January 10 require service providers to “conspicuously mark” AI-generated content that “may cause public confusion or misidentification” so that users can tell authentic media content from deepfakes.

China’s practice of requiring technology platforms to “watermark” deepfake content has been widely discussed internationally.

Matt Sheehan, a fellow in the Asia Program at the Carnegie Endowment for International Peace, noted that deepfake regulations place the onus on the companies that develop and operate these technologies.

“If enforced well, the regulations could make it harder for criminals to get their hands on these AI tools,” he said in an email to VOA Mandarin. “It could throw up some hurdles to this kind of fraud.”

But he also said that much depends on how Beijing implements the regulations and whether bad actors can obtain AI tools outside China.

“So, it’s not a problem with the technology,” said SumSub’s Goldman-Kalaydin. “It is always a problem with the usage of the technology. So, you can regulate the usage, but not the technology.”

James Lewis, senior vice president of the strategic technologies program at the Center for Strategic and International Studies in Washington, told VOA Mandarin, “Chinese law needs to be modernized for changes in technology, and I know the Chinese are thinking about that. So, the cybercrime laws you have will probably catch things like deepfakes. What will be hard to handle is the volume and the sophistication of the new products, but I know the Chinese government is very worried about fraud and looking for ways to get control of it.”

Others suggest that in regulating AI, political stability is a bigger concern for the Chinese government.

“I think they have a stronger incentive to work on the political threats than they do for fraud,” said Bill Drexel, an associate fellow for the Technology and National Security Program at Center for a New American Security.

In May, the hashtag #AIFraudEruptingAcrossChina was trending on China’s social media platform Weibo. However, the hashtag has since been censored, according to the Wall Street Journal, suggesting authorities are discouraging discussion on AI-driven fraud.

“So even we can see from this incident, once it appeared that the Chinese public was afraid that there was too much AI-powered fraud, they censored,” Drexel told VOA Mandarin.

He continued, “The fact that official state-run media initially reported these incidents and then later discussion of it was censored just goes to show that they do ultimately care about covering themselves politically more than they care about addressing fraud.”

Adrianna Zhang contributed to this report.
…

The long hunt for extraterrestrials just got a big boost.

Scientists have discovered that phosphorus, a key building block of life, lies in the ocean beneath the icy surface of Saturn’s moon Enceladus.

The finding was based on a review of data collected by NASA’s Cassini probe, and it was published Wednesday in the prestigious journal Nature.

Cassini started exploring Saturn and its rings and moons in 2004, before burning up in the gas giant’s atmosphere when its mission ended in 2017.

“This is a stunning discovery for astrobiology,” said Christopher Glein of the Southwest Research Institute, one of the paper’s co-authors, noting: “We have found abundant phosphorus in plume ice samples spraying out of the subsurface ocean.”

Geysers on Enceladus’ south pole spew icy particles through cracks on the surface out into space, feeding Saturn’s E ring — the faint ring outside the brighter main rings. 

Scientists previously found other minerals and organic compounds in the ejected ice grains, but not phosphorus, which is an essential building block for DNA and RNA. It also is found in the bones and teeth of people, animals, and even ocean plankton.

Simply put, life as we know it would not be possible without phosphorus.

While geochemical modeling had previously found it was likely phosphorus would also be present, and this prediction was published in an earlier paper, it is one thing to forecast something and another to confirm, said Glein.

“It’s the first time this essential element has been discovered in an ocean beyond Earth,” added first author Frank Postberg, a planetary scientist at Freie Universitat Berlin, in a NASA statement.

To make the new discovery, authors combed through data collected by Cassini’s Cosmic Dust Analyzer instrument, and confirmed the findings by carrying out laboratory experiments to show that Enceladus’ ocean has phosphorus bound inside different water-soluble forms.  

Over the past 25 years, planetary scientists have discovered that worlds with oceans beneath a surface layer of ice are common in our solar system.

These include Jupiter’s moon Europa, Saturn’s largest moon Titan, but even the more distant body, Pluto.

While planets like Earth that have surface oceans need to reside within a narrow window of distance from their host star to maintain the right temperatures for life, the discovery of worlds with subsurface oceans expands the number of habitable bodies that might exist.  

“With this finding, the ocean of Enceladus is now known to satisfy what is generally considered to be the strictest requirement for life,” said Glein.

“The next step is clear — we need to go back to Enceladus to see if the habitable ocean is actually inhabited.”
…

Bill Gates, Microsoft Corp’s co-founder, is set to meet Chinese President Xi Jinping on Friday during his visit to China, two people with knowledge of the matter said.

The meeting will mark Xi’s first meeting with a foreign private entrepreneur in recent years. The people said the encounter may be a one-on-one meeting. A third source confirmed they would meet, without providing details.

The sources did not say what the two might discuss. Gates tweeted on Wednesday that he had landed in Beijing for the first time since 2019 and that he would meet with partners who had been working on global health and development challenges with the Bill & Melinda Gates Foundation.

The foundation and China’s State Council Information Office, which handles media queries on behalf of the Chinese government, did not immediately respond to Reuters requests for comment. 

Gates stepped down from Microsoft’s board in 2020 to focus on philanthropic works related to global health, education and climate change. He quit his full-time executive role at Microsoft in 2008. 

The last reported meeting between Xi and Gates was in 2015, when they met on the sidelines of the Boao forum in Hainan province. In early 2020, Xi wrote a letter to Gates thanking him, and the Bill & Melinda Gates Foundation, for pledging assistance to China including $5 million for its fight against COVID. 

The meeting would mark the end of a long hiatus by Xi in recent years from meeting foreign private entrepreneurs and business leaders, after the Chinese president stopped traveling abroad for nearly three years as China shut its borders during the pandemic. 

Several foreign CEOs have visited China since it reopened early this year but most have mainly met with government ministers. 

Premier Li Qiang met a group of CEOs including Apple’s Tim Cook in March and a source told Reuters that Tesla’s Elon Musk met vice-premier Ding Xuexiang last month.
…