Russian State-Sponsored Group, Midnight Blizzard, Infiltrates Microsoft Leadership Email Accounts


Title: Russian State-Sponsored Group, Midnight Blizzard, Infiltrates Microsoft Leadership Email Accounts

In a regulatory filing on Friday, Microsoft revealed that a Russian hacking group, identified as Midnight Blizzard, gained unauthorized access to email accounts of senior leaders within the company. The breach, detected by Microsoft’s security team on January 12, 2024, prompted an immediate activation of response measures to investigate, disrupt malicious activities, mitigate the attack, and prevent further access by the threat actor.

Midnight Blizzard, previously known for the SolarWinds breach in 2020, targeted a limited number of Microsoft corporate email accounts, including those of senior leadership, as well as employees in the cybersecurity and legal departments. The intrusion resulted in the exfiltration of some emails and attached documents. Microsoft, however, emphasized that the attackers seemed to be specifically interested in information related to Midnight Blizzard, similar to their tactics during the SolarWinds breach.

The company confirmed that the compromise, initiated through a “password spray attack” in late November 2023, is currently under investigation. Microsoft is in the process of notifying affected employees, assuring that there is no evidence of the hackers gaining access to customer environments or AI systems.

Microsoft pledged ongoing collaboration with law enforcement and regulatory bodies, vowing to share additional information as the investigation progresses. The incident underscores the persistent threat posed by well-resourced nation-state actors like Midnight Blizzard to organizations, emphasizing the need for heightened cybersecurity measures.

Microsoft’s systems have recently been targeted in various high-profile hacking attempts. The Cybersecurity and Infrastructure Security Agency has not yet responded to requests for comment, and Microsoft has declined additional comments. The FBI acknowledged the incident, stating that they are actively working with federal partners to provide assistance and urging any cyber incident victims to contact their local FBI field office.

Microsoft CEO Satya Nadella Expresses Hope for the Future of AI and Advocates for Global Standards

Microsoft CEO Satya Nadella conveyed his “hopeful” and “optimistic” outlook on the future of artificial intelligence (AI) during the World Economic Forum in Switzerland on Tuesday. Emphasizing the importance of international cooperation, Nadella urged countries to align on adopting a set of industry standards for AI.

In a conversation with Klaus Schwab, chairperson of the World Economic Forum, Nadella delved into the trajectory of the AI industry and stressed the necessity of global safety guardrails. He also highlighted recent developments by Microsoft in the AI space.

Addressing the challenges faced by the digital technology industry, Nadella reflected on the need to proactively consider the unintended consequences of new technologies alongside their benefits. He advocated for a simultaneous and thoughtful approach, rather than waiting for issues to arise before addressing them.

While AI holds the potential to significantly enhance productivity, leading to improved job opportunities, education, and disease treatments, concerns about rising unemployment and potential societal upheaval have also emerged. Acknowledging these dual perspectives, Nadella echoed sentiments expressed by others in Silicon Valley, including Bill Gates, who highlighted historical patterns of fear followed by new opportunities with the advent of every technological advancement.

The ongoing debate surrounding AI regulations prompted Nadella to express his belief in the desirability of a global regulatory approach. He emphasized the necessity for global norms and standards to effectively address challenges and facilitate crucial research advancements in the field. Despite recognizing a broad consensus emerging on this front, Nadella urged the industry to collectively prioritize safety, trust, and equity.

Nadella commended the industry’s transformation over the past decade, noting a fundamental shift in mindset. He asserted that the industry’s “license to operate” depends on prioritizing safety, trust, and equity, addressing significant global concerns.

Expressing optimism about the future, Nadella highlighted the positive dialogue within the industry, with key players actively working to raise standards on safety. Microsoft’s substantial investment in OpenAI, the company behind the ChatGPT chatbot, and the subsequent integration of the technology into its products further solidify its position in the rapidly evolving AI landscape.

Nadella concluded by expressing enthusiasm for AI’s potential impact across various industries, from science and education to streamlining software engineering processes. He anticipates that the year 2024 will witness the widespread scaling of AI technologies.

eBay Agrees to $3 Million Fine for Harassment Campaign Against Critical Bloggers

eBay has reached a settlement to pay a $3 million (£2.36 million) fine in connection with harassment charges targeting bloggers who were critical of the company. According to court documents, eBay executives, including former senior director Jim Baugh, orchestrated a campaign against Ina and David Steiner, sending live spiders and cockroaches to their residence due to their production of the newsletter EcommerceBytes, which was disapproved by the company’s leadership.

The harassment left the Steiners “emotionally, psychologically, and physically” traumatized, as outlined in filings by the US Attorney’s Office in the District of Massachusetts. Baugh and six associates engaged in a series of intimidations, including sending live insects, a foetal pig, and a funeral wreath to the Steiners’ home in Natick, Massachusetts. They also installed a GPS tracking device on the couple’s car and posted invitations for sexual encounters at their residence on Craigslist.

The individuals responsible for these acts were terminated by eBay shortly after the incident. In 2021, Philip Cooke, an eBay employee, received an 18-month prison sentence, and the following year, Baugh was sentenced to nearly five years.

Baugh’s defense argued that he faced pressure from former eBay CEO Devin Wenig to control the Steiners’ coverage of the company. Wenig, who stepped down in 2019, has not been charged in the case and denies any knowledge of the harassment campaign.

Commenting on the matter, acting Massachusetts US Attorney Josh Levy stated, “eBay engaged in absolutely horrific, criminal conduct.” He described the campaign as a “petrifying” effort by eBay employees and contractors to silence the Steiners’ reporting and protect the eBay brand.

Apple Initiates Payouts in US Class Action Lawsuit Over iPhone Slowdown

Apple has commenced the disbursement of funds in an extended legal battle involving allegations of intentionally slowing down certain iPhones in the United States. The resolution, agreed upon in 2020, entails a $500 million (£394 million) settlement, with claimants set to receive approximately $92 (£72) per claim.

In 2017, Apple confirmed suspicions by acknowledging that it deliberately slowed down some iPhones as they aged, attributing it to the diminished performance of aging batteries. The admission led to a public outcry, as Apple was accused of throttling iPhone performance without informing customers. In response, the tech giant offered discounted battery replacements, and the settlement was reached in 2020.

Despite Apple’s denial of any wrongdoing, the company expressed concerns about the escalating costs associated with ongoing litigation. At the time of the settlement, it was initially estimated that each affected individual might receive as little as $25. However, the actual payout now appears to be nearly four times that amount, with claimants set to receive around $92 per claim.

Meanwhile, a similar case is underway in the United Kingdom, seeking £1.6 billion in compensation. Apple attempted to block this mass action lawsuit in November of the previous year but was unsuccessful. The UK case, initiated by Justin Gutmann in June 2022, represents an estimated 24 million iPhone users.

Apple has consistently dismissed the UK lawsuit as “baseless,” maintaining that it has never intentionally shortened the life of any product or degraded the user experience to drive customer upgrades. Mr. Gutmann welcomed news of the US payments but cautioned that it doesn’t impact the UK case, stating, “It’s a moral victory but not much use to me. I’ve got to plough on and pursue the case in the UK jurisdiction.”

He emphasized that Apple is vigorously contesting the UK class action and expects it to go to trial in late 2024 or early 2025, although the timeline remains uncertain. The next development in the UK case will be a hearing at the Court of Appeal, where Apple seeks to halt the proceedings. Mr. Gutmann remains determined to continue the legal battle, emphasizing the significance of the case in holding Apple accountable for its alleged actions in the UK.

Apple Initiates Payments in US Class Action Lawsuit Over iPhone Slowdown Controversy

Apple has commenced compensatory payments in the long-standing class action lawsuit concerning allegations of intentionally slowing down specific iPhones in the United States.

Claimants are set to receive a share of a $500 million (£394 million) settlement, equating to approximately $92 (£72) per claim.

In 2020, Apple agreed to settle the lawsuit, asserting its denial of any wrongdoing while expressing concerns about the escalating costs of prolonged litigation.

A parallel case in the United Kingdom seeks £1.6 billion in compensation.

The origins of the US case trace back to December 2017 when Apple confirmed suspicions by admitting to intentionally slowing down some iPhones as they aged. Apple argued that, as batteries aged, their performance declined, and the intentional “slowdown” aimed to prolong the phones’ overall lifespan.

However, Apple faced accusations of throttling iPhone performance without informing customers, resulting in widespread dissatisfaction. To address the issue, Apple offered discounted battery replacements, leading to the initiation of the US legal action. Initial estimates suggested each person might receive as little as $25, but the actual payout now appears to be nearly four times that amount.

In the UK, Apple’s attempt to block a similar mass action lawsuit failed in November. The case, initiated by Justin Gutmann in June 2022, represents an estimated 24 million iPhone users.

While Apple has consistently dismissed the lawsuit as “baseless” and emphasized its commitment to product longevity, Mr. Gutmann, while acknowledging the US payments, highlighted that it does not impact the UK case.

“It’s a moral victory but not much use to me. I’ve got to plough on and pursue the case in the UK jurisdiction,” stated Mr. Gutmann, noting Apple’s staunch resistance to the UK class action. The case is set to progress to the Court of Appeal, where the firm seeks to halt the proceedings. Mr. Gutmann anticipates a potential trial in late 2024 or early 2025 but acknowledges the challenge of establishing a precise timeline.

Microsoft Unveils Revolutionary AI Key on Keyboards, Integrating Copilot for Enhanced User Experience

In a groundbreaking move, Microsoft has revealed its most significant keyboard transformation in three decades, introducing an artificial intelligence (AI) key that grants users access to Copilot, Microsoft’s advanced AI tool, on the latest Windows 11 PCs.

This innovation comes as a result of Microsoft’s substantial investment in OpenAI, the driving force behind the AI capabilities of Copilot. The integration of AI into various products, including Microsoft 365 and Bing search, marked a notable milestone for the tech giant in 2023.

Notably, Microsoft’s rival, Apple, has incorporated a Siri button or option on its MacBooks’ touch bars for several years.

Copilot, designed to assist users with tasks such as searching, composing emails, and creating images, is at the forefront of Microsoft’s technological advancements.

Yusuf Mehdi, Microsoft’s executive vice president, referred to this development as a “transformative” moment, drawing parallels to the introduction of the Windows key nearly 30 years ago. Mehdi emphasized that the AI key would “simplify” and “amplify” the overall user experience.

Anticipated to be featured in new products starting February, Microsoft will showcase these innovative keyboards with the Copilot key at the upcoming CES tech event in Las Vegas next week.

When Copilot was integrated into Office 365 products like Word, PowerPoint, and Teams, it demonstrated its ability to summarize meetings, compose emails, and create presentations. The tool has also found its way into Microsoft’s Bing search engine.

According to Professor John Tucker, a computer scientist at the University of Swansea, the introduction of this dedicated key is a “natural step” and underscores the company’s commitment to this feature’s potential to engage users across various products. However, he noted that the minimal evolution of keyboards over the past 30 years is not a point of pride.

While Windows 11 users can currently access Copilot by pressing the Windows key + C, the new AI key signifies Microsoft’s emphasis on the feature and its potential to unify users across its product ecosystem.

It’s worth noting that Google, the world’s leading search engine, has its own AI system called Bard. Microsoft’s partner, OpenAI, introduced the powerful AI tool ChatGPT in 2022, prompting competitors to hurriedly release their own versions. Copilot itself is built upon OpenAI’s GPT-4 large language model.

The UK’s competition watchdog is currently examining Microsoft’s relationship with OpenAI following boardroom upheaval that led to a close association between the two companies.

Huawei Bounces Back Strongly with Anticipated 2023 Revenue of Over $99 Billion

In a surprising turn of events, Huawei, the embattled tech giant at the center of the US-China technological rivalry, announced on Friday that it is “back on track” with a projected revenue exceeding 700 billion yuan ($99 billion) for the year 2023. This marks a remarkable 9% increase from the 2022 figure of 642.3 billion yuan ($92.4 billion), signifying a significant recovery for the Chinese conglomerate.

Ken Hu, Huawei’s rotating chairman, expressed optimism in a year-end message to employees, stating, “After years of hard work, we’ve managed to weather the storm. And now we’re pretty much back on track.” Hu’s message follows the successful launch of the Mate 60 Pro smartphone in August, a device that defied industry expectations and showcased Huawei’s technological prowess.

The Mate 60 Pro’s advanced features captivated consumers, enabling Huawei to gain market share in China at the expense of its American rival, Apple. Counterpoint Research reported that Huawei secured the fifth position in the Chinese market by the end of September, growing its share from 10% in the first quarter to 14% in the third quarter. During the same period, Apple saw a decline from 20% to 15% in its market share.

Huawei’s resurgence is particularly noteworthy as the company faced significant challenges due to US sanctions in recent years. The sanctions, imposed by the United States, restricted Huawei’s access to critical components for its devices, resulting in the loss of its position as the world’s second-largest seller of smartphones.

Despite ongoing allegations from US policymakers that Huawei poses a national security risk, the company has vehemently denied such claims and has been working to improve its standing in Washington. In March, Huawei declared it was “out of crisis mode” and reported progress in finding alternative components to replace those impacted by US sanctions.

The company’s success is expected to continue into the new year, contingent on its ability to expand production of handsets powered by Kirin chips, the processors featured in the popular Mate 60 Pro. Huawei recently launched new smartphones under the Nova brand, its mid-range lineup, which analysts predict will gain popularity due to their relative affordability.

However, Hu cautioned in his memo that challenges persist, emphasizing the uncertainties posed by geopolitical and economic factors, as well as the ongoing impact of technology restrictions and trade barriers on a global scale. Nevertheless, Huawei’s strong performance in 2023 suggests a remarkable turnaround for the company, proving its resilience in the face of adversity.

Apple Faces Sales Ban in the US for Watch Series 9 and Watch Ultra 2 as Biden Administration Declines Veto


In a significant development, Apple is prohibited from selling the Watch Series 9 and Watch Ultra 2 in the United States, as the Biden administration opted not to override the ban imposed by the International Trade Commission (ITC) today.

The removal of both devices from Apple’s official website occurred on December 21st, followed by their withdrawal from store shelves after December 24th. A statement from the Office of US Trade Representative Katherine Tai, reported by CNBC, revealed that the agency “decided not to reverse the ITC’s determination” after careful consideration.

Responding to the ban, an unidentified Apple spokesperson, as reported by Reuters, confirmed the company’s intention to appeal the ITC decision. The spokesperson stated, “We strongly disagree with the USITC decision and resulting exclusion order, and are taking all measures to return Apple Watch Series 9 and Apple Watch Ultra 2 to customers in the U.S. as soon as possible.”

The ITC imposed the ban after determining that Apple had violated the patent for blood oxygen saturation technology owned by the company Masimo. Additionally, the ITC directed Apple to cease selling any previously-imported devices containing the infringing technology. Despite Apple’s attempt to halt the decision during the appeal process, the ITC denied the request. The final opportunity for intervention rested with President Joe Biden, who did not veto the ban.

It’s important to note that the sales ban only impacts Apple’s stores in the US. Customers still have the option to purchase the Watch Series 9 or Watch Ultra 2 at retailers such as Best Buy and Target while supplies last. Apple will continue to offer the Watch SE, which lacks a blood oxygen sensor and remains unaffected by the ban.

The future steps for Apple remain uncertain. Analysts, including my colleague Victoria Song, explore potential paths Apple could take, such as implementing software changes to the blood oxygen sensor or disabling the sensor on imported devices. However, these approaches may not be sufficient to satisfy the ITC, leading to speculation that Apple might consider settling with Masimo as an alternative solution.

Urgent Update Required: Google Chrome Faces Critical Vulnerability Exploited by Malicious Actors

Google Chrome users are urged to take immediate action as a severe vulnerability has been identified in the popular web browser. This particular security flaw, categorized as CVE-2023-7024, is a heap buffer overflow within WebRTC, as disclosed by Google. The gravity of the situation is compounded by the fact that the vulnerability is not only known but is actively being exploited by malicious entities.

Heap buffer overflows, such as the one affecting Google Chrome, involve attackers causing a section of memory to overflow, creating an opportunity for exploitation. Google has officially confirmed the existence of an exploit for this vulnerability, making it a pressing concern for users.

To safeguard against potential security breaches, users are advised to ensure their Chrome browser is updated to version 120.0.6099.130 on Windows PCs, or alternatively, version 120.0.6099.129 for Mac or Linux. Taking prompt action is crucial, as failure to update may leave systems exposed to exploitation.

To check and update Chrome, users can access the Settings page by clicking the three-dot menu in the top-right corner of the browser. From there, navigate to the left-side panel and select ‘About Chrome’ at the bottom of the list. This action will automatically check for updates and apply any necessary upgrades.

It’s important to note that after the update, users must close all instances of the Chrome browser and reopen it to ensure the upgrade is applied. Failure to address this vulnerability promptly may result in compromised security, so users are strongly advised to verify their browser version without delay.