Day: March 9, 2024

BOSTON, MASSACHUSETTS — Microsoft said Friday it’s still trying to evict the elite Russian government hackers who broke into the email accounts of senior company executives in November and who it said have been trying to breach customer networks with stolen access data.

The hackers from Russia’s SVR foreign intelligence service used data obtained in the intrusion, which Microsoft disclosed in mid-January, to compromise some source-code repositories and internal systems, the software giant said in a blog and a regulatory filing.

A company spokesperson would not characterize what source code was accessed and what capability the hackers gained to further compromise customer and Microsoft systems. Microsoft said Friday that the hackers stole “secrets” from email communications between the company and unspecified customers — cryptographic secrets such as passwords, certificates and authentication keys — and that it was reaching out to them “to assist in taking mitigating measures.”

Cloud-computing company Hewlett Packard Enterprise disclosed on January 24 that it, too, was an SVR hacking victim and that it had been informed of the breach — by whom it would not say — two weeks earlier, coinciding with Microsoft’s discovery it had been hacked.

“The threat actor’s ongoing attack is characterized by a sustained, significant commitment of the threat actor’s resources, coordination and focus,” Microsoft said Friday, adding that it could be using obtained data “to accumulate a picture of areas to attack and enhance its ability to do so.”

Cybersecurity experts said Microsoft’s admission that the SVR hack had not been contained exposes the perils of the heavy reliance by government and business on the Redmond, Washington, company’s software monoculture — and the fact that so many of its customers are linked through its global cloud network.

“This has tremendous national security implications,” said Tom Kellermann of the cybersecurity firm Contrast Security. “The Russians can now leverage supply chain attacks against Microsoft’s customers.”

Amit Yoran, the CEO of Tenable, also issued a statement, expressing alarm and dismay. He is among security professionals who find Microsoft overly secretive about its vulnerabilities and how it handles hacks.

“We should all be furious that this keeps happening,” Yoran said. “These breaches aren’t isolated from each other, and Microsoft’s shady security practices and misleading statements purposely obfuscate the whole truth.”

Microsoft said it had not yet determined whether the incident is likely to materially affect its finances. It also said the intrusion’s stubbornness “reflects what has become more broadly an unprecedented global threat landscape, especially in terms of sophisticated nation-state attacks.”

The hackers, known as Cozy Bear, are the same hacking team behind the SolarWinds breach.

When it initially announced the hack, Microsoft said the SVR unit broke into its corporate email system and accessed accounts of some senior executives as well as employees on its cybersecurity and legal teams. It would not say how many accounts were compromised.

At the time, Microsoft said it was able to remove the hackers’ access from the compromised accounts on or about January 13. But by then, they clearly had a foothold.

It said they got in by compromising credentials on a “legacy” test account but never elaborated.

Microsoft’s latest disclosure comes three months after a new U.S. Securities and Exchange Commission rule took effect that compels publicly traded companies to disclose breaches that could negatively affect their business.
…

washington — A Pentagon study released Friday that examined reported sightings of UFOs over nearly the last century found no evidence of aliens or extraterrestrial intelligence, a conclusion consistent with past U.S. government efforts to assess the accuracy of claims that have captivated public attention for decades. 

The study from the Defense Department’s All-Domain Anomaly Resolution Office analyzed U.S. government investigations since 1945 of reported sightings of unidentified anomalous phenomena, more popularly known as UFOs. It found no evidence that any of them were signs of alien life, or that the U.S. government and private companies had reverse-engineered extraterrestrial technology and were hiding it. 

“All investigative efforts, at all levels of classification, concluded that most sightings were ordinary objects and phenomena and the result of misidentification,” said the report, which was mandated by Congress. Another volume of the report focused on more recent research will be out later. 

U.S. officials have endeavored to find answers to legions of reported UFO sightings over the years, but so far have not identified any actual evidence of extraterrestrial life. 

A 2021 government report that reviewed 144 sightings of aircraft or other devices apparently flying at mysterious speeds or trajectories found no extraterrestrial links, but it drew few other conclusions and called for better data collection. 

The issue received fresh attention last summer when a retired Air Force intelligence officer testified to Congress that the U.S. was concealing a longstanding program that retrieves and reverse engineers unidentified flying objects. The Pentagon has denied his claims and said in late 2022 that a new Pentagon office set up to track reports of unidentified flying objects — the same one that released Friday’s report — had received “several hundreds” of new reports but had found no evidence so far of alien life. 

The authors of Friday’s report said the purpose was to apply a rigorous scientific analysis to a subject that has long captured the American public’s imagination. 

“AARO recognizes that many people sincerely hold versions of these beliefs which are based on their perception of past experiences, the experiences of others whom they trust, or media and online outlets they believe to be sources of credible and verifiable information,” the report said. 

“The proliferation of television programs, books, movies, and the vast amount of internet and social media content centered on UAP-related topics most likely has influenced the public conversation on this topic and reinforced these beliefs within some sections of the population,” it added. 
…