China-based government hackers have exploited a bug in Microsoft Corp’s e-mail server software to target US organizations, the company said on Tuesday.
Microsoft said that a “highly skilled and sophisticated” state-sponsored group operating from China has been trying to steal information from a number of targets in the US, including universities, defense contractors, law firms and infectious-disease researchers.
Microsoft has released security upgrades to fix the vulnerabilities to its Exchange Server software, which is used for work e-mail and calendar services, mostly for larger organizations that have their own in-person e-mail servers, the company said.
Photo: Swayne B. Hall, AP
It does not affect personal e-mail accounts or Microsoft’s cloud-based services, it added.
The hacking group it calls Hafnium was able to trick Exchange servers into allowing it to gain access, Microsoft said.
The hackers then masqueraded as someone who should have access and created a way to control the server remotely so that they could steal data from an organization’s network, it added.
Microsoft said that the group is based in China, but operates from leased virtual private servers in the US, which helps it avoid detection.
The company declined to name any specific targets or say how many organizations were affected.
Reston, Virginia-based cybersecurity company Volexity Government Solutions LLC, which Microsoft credits for helping to detect the intrusions, said that its network security monitoring service began investigating a suspiciously large data transfer in late January.
“They’re just downloading e-mail, literally going to town,” Volexity president Steven Adair said, adding that the targets included defense contractors, think tanks, non-governmental organizations, and international aid and development organizations.
Adair said that he is concerned that the hackers might accelerate their activity in the coming days before organizations are able to install Microsoft’s security upgrades.
“As bad as it is now, I think it’s about to get a lot worse,” he said. “This gives them a limited amount of opportunity to go and exploit something. The patch isn’t going to fix that if they left their backdoor behind.”
In Italy’s storied gold-making hubs, jewelers are reworking their designs to trim gold content as they race to blunt the effect of record prices and appeal to shoppers watching their budgets. Gold prices hit a record high on Thursday, surging near US$5,600 an ounce, more than double a year ago as geopolitical concerns and jitters over trade pushed investors toward the safe-haven asset. The rally is putting undue pressure on small artisans as they face mounting demands from customers, including international brands, to produce cheaper items, from signature pieces to wedding rings, according to interviews with four independent jewelers in Italy’s main
Japanese Prime Minister Sanae Takaichi has talked up the benefits of a weaker yen in a campaign speech, adopting a tone at odds with her finance ministry, which has refused to rule out any options to counter excessive foreign exchange volatility. Takaichi later softened her stance, saying she did not have a preference for the yen’s direction. “People say the weak yen is bad right now, but for export industries, it’s a major opportunity,” Takaichi said on Saturday at a rally for Liberal Democratic Party candidate Daishiro Yamagiwa in Kanagawa Prefecture ahead of a snap election on Sunday. “Whether it’s selling food or
CONCERNS: Tech companies investing in AI businesses that purchase their products have raised questions among investors that they are artificially propping up demand Nvidia Corp chief executive officer Jensen Huang (黃仁勳) on Saturday said that the company would be participating in OpenAI’s latest funding round, describing it as potentially “the largest investment we’ve ever made.” “We will invest a great deal of money,” Huang told reporters while visiting Taipei. “I believe in OpenAI. The work that they do is incredible. They’re one of the most consequential companies of our time.” Huang did not say exactly how much Nvidia might contribute, but described the investment as “huge.” “Let Sam announce how much he’s going to raise — it’s for him to decide,” Huang said, referring to OpenAI
The global server market is expected to grow 12.8 percent annually this year, with artificial intelligence (AI) servers projected to account for 16.5 percent, driven by continued investment in AI infrastructure by major cloud service providers (CSPs), market researcher TrendForce Corp (集邦科技) said yesterday. Global AI server shipments this year are expected to increase 28 percent year-on-year to more than 2.7 million units, driven by sustained demand from CSPs and government sovereign cloud projects, TrendForce analyst Frank Kung (龔明德) told the Taipei Times. Demand for GPU-based AI servers, including Nvidia Corp’s GB and Vera Rubin rack systems, is expected to remain high,