Futurism – Lifeboat News: The Blog

Oct 5
2022

Mitigation for Exchange Zero-Days Bypassed! Microsoft Issues New Workarounds

Microsoft has revised its mitigation measures for the newly disclosed and actively exploited zero-day flaws in Exchange Server after it was found that they could be trivially bypassed.

The two vulnerabilities, tracked as CVE-2022–41040 and CVE-2022–41082, have been codenamed ProxyNotShell due to similarities to another set of flaws called ProxyShell, which the tech giant resolved last year.

In-the-wild attacks abusing the shortcomings have chained the two flaws to gain remote code execution on compromised servers with elevated privileges, leading to the deployment of web shells.

Oct 5
2022

Microsoft updates mitigation for ProxyNotShell Exchange zero days

Microsoft has updated the mitigations for the latest Exchange zero-day vulnerabilities tracked as CVE-2022–41040 and CVE-2022–41082, also referred to ProxyNotShell.

The initial recommendations were insufficient as researchers showed that they can be easily bypassed to allow new attacks exploiting the two bugs.

Unfortunately, the current recommendations are still not enough and the proposed mitigation can still allow ProxyNotShell attacks.

Oct 5
2022

Saudi Arabia’s $500 billion megacity NEOM will host winter games in desert

The event will take place in a man-made city with a year-round winter sports complex.

Can you make snow in the desert? It seems you can, as Saudi Arabia will be hosting the 2029 Asian Winter Games, according to a report.

The games will take place at an under-construction US$500 billion megacity called Neom that is set to boast a year-round winter sports complex along with other futuristic amenities and features.

Oct 5
2022

Water-based chips could be the future of neural networks

Researchers are working on water-based microprocessors that could one day be used as a more diverse alternative to the current wafer architecture of today, with applications ranging from AI to DNA synthesis and likely beyond.

The chips in question are still in the prototype stage, so don’t expect processors with built in water cooling just yet, but the way they work is really exciting. They use a technique called ionics, which involves manipulating different ion species in liquid, as opposed to the standard electrons shooting through our semiconductors today.

Oct 5
2022

Rush-The Weapon (Part II of Fear) (Lyrics)

About Vladimir Putin

I did not write this song and I do not intend any copyright infringement.

Rush-The Weapon (Part II of Fear) from the 1982 album ‘Signals’. Enjoy!
Check my channel for more Rush videos.

Oct 4
2022

Longer-Than-Expected Twirls for Polariton Condensates

A polariton condensate can spontaneously rotate, causing it to live significantly longer than individual polaritons would.

Oct 4
2022

‘Spooky’ quantum-entanglement experiments win physics Nobel

This is pioneering work for quantum teleportation as well making entanglement the main way for quantum teleportation communications in the future.

Award goes to three experimental physicists whose pioneering research has laid the groundwork for quantum information science.

Oct 4
2022

This 250-Square-Foot Prefab Cabin Fits a Queen Bed and a Fireplace

Road-Haus by Wheelhaus challenges small-space cliches with high ceilings and oversize windows.

Oct 4
2022

The Mediterranean Sea Is So Hot, It’s Forming Carbonate Crystals

In the rapidly warming Eastern Mediterranean, water stratifies into layers, like a cake. That’s allowing carbon-spewing crystals to form.

Oct 4
2022

Microsoft confirms hackers are actively exploiting Exchange zero-day flaws

Were you unable to attend Transform 2022? Check out all of the summit sessions in our on-demand library now! Watch here.

Microsoft Exchange server is one of those enterprise staples, but it’s also a key target for cybercriminals. Last week, GTSC reported attacks had begun chaining two new zero-day Exchange exploits as part of coordinated attacks.

While information is limited, Microsoft has confirmed in a blog post that these exploits have been used by a suspected state-sponsored threat actor to target fewer than 10 organizations and successfully exfiltrate data.