Daily Archives

25 Articles

your ad here
Posted by Ukrap on

Ліга Європи: «Манчестер Юнайтед» розбив «Рому», «Вільярреал» обіграв «Арсенал»

За підсумками першого тайму «Манчестер Юнайтед» поступався з рахунком 1:2, однак в другому таймі англійська команда забила п’ять голів

your ad here
Posted by Worldkrap on

US Government Probes VPN Hack Within Federal Agencies, Races to Find Clues

For at least the third time since the beginning of this year, the U.S. government is investigating a hack against federal agencies that began during the Trump administration but was only recently discovered, according to senior U.S. officials and private sector cyber defenders.  It is the latest supply chain cyberattack, highlighting how sophisticated, often government-backed groups are targeting vulnerable software built by third parties as a steppingstone to sensitive government and corporate computer networks.  The new government breaches involve a popular virtual private network (VPN) known as Pulse Connect Secure, which hackers were able to break into as customers used it.  More than a dozen federal agencies run Pulse Connect Secure on their networks, according to public contract records. An emergency cybersecurity directive last week demanded that agencies scan their systems for related compromises and report back.  The results, collected Friday and analyzed this week, show evidence of potential breaches in at least five federal civilian agencies, said Matt Hartman, a senior official with the U.S. Cybersecurity Infrastructure Security Agency.  “This is a combination of traditional espionage with some element of economic theft,” said one cybersecurity consultant familiar with the matter. “We’ve already confirmed data exfiltration across numerous environments.”  The Ivanti logo and cyber binary codes are seen in this illustration taken April 20, 2021.The maker of Pulse Connect Secure, Utah-based software company Ivanti, said it expected to provide a patch to fix the problem by this coming Monday, two weeks after it was first publicized. Only a “very limited number of customer systems” had been penetrated, it added.  Over the last two months, CISA and the FBI have been working with Pulse Connect Secure’s maker and victims of the hack to kick out the intruders and uncover other evidence, said another senior U.S. official who declined to be named but is responding to the hacks. The FBI, Justice Department and National Security Agency declined to comment.  The U.S. government’s investigation into the Pulse Connect Secure activity is still in its early stages, said the senior U.S. official, who added the scope, impact and attribution remain unclear.  Security researchers at U.S. cybersecurity firm FireEye and another firm, which declined to be named, say they’ve watched multiple hacking groups, including an elite team they associate with China, exploiting the new flaw and several others like it since 2019.  FILE – Security firm FireEye’s logo is seen outside the company’s offices in Milpitas, California.In a statement last week, Chinese Embassy spokesperson Liu Pengyu said China “firmly opposes and cracks down on all forms of cyberattacks,” describing FireEye’s allegations as “irresponsible and ill-intentioned.”  The use of VPNs, which create encrypted tunnels for connecting remotely to corporate networks, has skyrocketed during the COVID-19 pandemic. Yet with the growth in VPN usage so too has the associated risk.  “This is another example in a recent pattern of cyber actors targeting vulnerabilities in widely used VPN products as our nation largely remains in remote and hybrid work postures,” Hartman said.  Three cybersecurity consultants involved in responding to the hacks told Reuters that the victim list is weighted toward the United States and so far includes defense contractors, civilian government agencies, solar energy companies, telecommunications firms and financial institutions.  The consultants also said they were aware of fewer than 100 combined victims so far between them, suggesting a fairly narrow focus by the hackers.  Analysts believe the malicious operation began around 2019 and exploited older flaws in Pulse Connect Secure and separate products made by cybersecurity firm Fortinet before invoking the new vulnerabilities.  Hartman said the civilian agency hacks date to at least June 2020.  Hacking the supplyA recent report by the Atlantic Council, a Washington think tank, studied 102 supply chain hacking incidents and found they surged the last three years. Thirty of the attacks came from government-backed groups, primarily in Russia and China, the report said.  The Pulse Connect Secure response comes as the government is still grappling with the fallout of three other cyberattacks.  FILE – The SolarWinds logo is seen outside its headquarters in Austin, Texas, Dec. 18, 2020.The first is known as the SolarWinds hack, in which suspected Russian government hackers commandeered the company’s network management program to burrow inside nine federal agencies.  A weakness in Microsoft’s email server software, named Exchange, exploited by a different group of Chinese hackers, also required a massive response effort, although there was ultimately no impact to federal networks, according to U.S. officials.  Then a weakness at a maker of programming tools called Codecov left thousands of customers exposed inside their coding environments, the company disclosed this month.  Some government agencies were among the customers whose credentials were taken by the Codecov hackers for further access to code repositories or other data, according to a person briefed on the investigation. Codecov, the FBI and the Department of Homeland Security declined to comment on that case.  The U.S. plans to address some of these systemic issues with an upcoming executive order that will require agencies to identify their most critical software and promote a “bill of materials” that demands a certain level of digital security across products sold to the government.  “We think [this is] the most impactful way to really impose costs on these adversaries and make it that much harder,” said the senior U.S. official. 

your ad here
Posted by Ukrap on

До України повернулася 25-та Українська антарктична експедиція

your ad here
Posted by Worldkrap on

Arrests in US Capitol Attack Surpass 430

U.S. federal agents have arrested more than 430 people in connection with the January 6 assault on the U.S. Capitol, a senior Justice Department official told lawmakers Thursday, adding that the number of arrests continues to grow.The figure, announced by Deputy Assistant Attorney General Brad Wiegmann, represents more than half of an estimated 800 supporters of former President Donald Trump who breached the Capitol to try to prevent Congress from declaring Joe Biden the winner of the November presidential election.FILE – In this Jan. 6, 2021, file photo, smoke fills the walkway outside the Senate Chamber as violent rioters loyal to President Donald Trump are confronted by U.S. Capitol Police officers inside the Capitol in Washington.The attack, which left five people dead, including a Capitol Police officer, and more than 100 other officers injured, triggered one of the largest criminal investigations in U.S. history. Justice Department officials have said the investigation could lead to charges against as many as 500 people.“As the investigation continues, and as sufficient additional evidence is gathered and other criminal perpetrators are identified, we will continue to charge additional defendants with offenses relating to the events of January 6th,” Wiegmann testified before a U.S. House of Representatives subcommittee on commerce and justice.The arrestees include hundreds of Trump supporters with no known ties to extremist organizations but also several dozen members of far-right groups, as well as current and former law enforcement and military personnel.FBI Assistant Director of the Counterterrorism Division Jill Sanborn speaks during a Senate Committee on Homeland Security and Governmental Affairs and Senate Committee on Rules and Administration joint hearing, March 3, 2021.Jill Sanborn, the FBI’s counterterrorism chief, told the subcommittee that the number of law enforcement and military personnel under investigation for domestic violent extremism was “relatively small.”“It is primarily on individuals that are formers, not currents,” Sanborn said.According to a tally by the George Washington University Program on Extremism, 43 former and three current members of the military and nine former and four current members of law enforcement have been charged in connection with the Capitol riot.While the pace of arrests stemming from the attack has slowed considerably in recent weeks, the FBI continues to make arrests nearly every day.This week, FBI agents arrested three men — Reed Christensen of Oregon, Jonathan Munafo of New York and Landon Copeland of Utah — suspected of assaulting Capitol Police officers guarding the Capitol from the violent rioters.Christensen and Munafo, who were seen in a video punching the officers, face six criminal counts, including assaulting a law enforcement officer and engaging in violence in a Capitol building. Copeland was seen throwing a bike rack at several police officers, according to a criminal complaint. He was charged with assaulting a police officer and three other counts.   Priorities for GarlandAttorney General Merrick Garland has said investigating the Capitol rioters and fighting domestic terrorism are his top priorities.Wiegmann told lawmakers that the January 6 attack was not “an isolated event,” warning that some domestic violent extremists “may have been emboldened by the attack,” as the FBI recently assessed.The FBI expects domestic violent extremists, such as violent white supremacists and anti-government militiamen, to “pose the greatest domestic terrorism threats in 2021 and likely into 2022,” Sanborn testified. Between 2015 and 2020, racially or ethnically motivated violent extremists were responsible for the most deadly domestic terrorism attacks, she added.In response to the growing threat, she said, the FBI increased its domestic terrorism personnel by 260% last year when cases of domestic terrorism doubled.That does not mean the threat of international terrorism has diminished, Sanborn emphasized. In fact, for the first time in two decades, she said, “the threats from domestic terrorism, Salafi jihadism and state-sponsored terrorism are all elevated simultaneously.”

your ad here
Posted by Ukrap on

США та НАТО почали виводити війська з Афганістану

29 квітня Білий дім повідомив, що американські війська почали виводити з Афганістану. За даними CNN, менш ніж 100 військових залишили Афганістан авіатранспортом

your ad here
Posted by Worldkrap on

A Gaunt Navalny Appears in Court After Hunger Strike

In his first court appearance since ending a three-week hunger strike, Kremlin critic Alexey Navalny called Russian President Vladimir Putin a “naked, thieving king.” Navalny appeared Thursday in a video link from prison to a Moscow courtroom where he was appealing a guilty verdict for defaming a World War 2 veteran. According to news reports, Navalny appeared thin, and his head was shaved. “I looked in the mirror. Of course, I’m just a dreadful skeleton,” he said. Yulia Navalnaya, wife of Russian opposition leader Alexey Navalny, is seen in a courtroom, in Moscow, Russia, April 29, 2021, in this still image taken from video. (Press Service of Babushkinsky District Court of Moscow/Handout via Reuters)Navalny began his hunger strike March 3 and ended it April 23. Later in Thursday’s hearing, he took the opportunity to attack Putin. “I want to tell the dear court that your king is naked,” he said of Putin. “Millions of people are already shouting about it, because it is obvious. … His crown is hanging and slipping.” He also reiterated his claim of innocence on the embezzlement allegations that ostensibly landed him in prison. “Your naked, thieving king wants to continue to rule until the end. … Another 10 years will come, a stolen decade will come,” Navalny said referring to Putin. Last week, authorities in Russia disbanded several regional offices of Navalny’s anti-corruption group, the Anti-Corruption Foundation. A Russian court is considering branding the group extremist. FILE – Demonstrators march during a rally in support of jailed Russian opposition politician Alexey Navalny, in Saint Petersburg, Russia, April 21, 2021.Last week, more than 1,900 Navalny supporters were detained during protests in cities across the country. From his Instagram account, he said he felt “pride and hope” after learning about the protests. Navalny survived a near-fatal poisoning last year and was arrested when he returned to Moscow in January following lifesaving treatment in Germany. The Kremlin denies any role in the poisoning. He was sentenced to two-and-a-half years in prison in February on an embezzlement charge and was being held at the Pokrov correctional colony, which he described as “a real concentration camp.” The United States and other countries have sanctioned Kremlin officials over the poisoning, and many are calling for Navalny’s release. 
 

your ad here
Posted by Ukrap on

Пуск ракети Vega з українським двигуном відбувся успішно – бюро «Південне»

your ad here
Posted by Ukrap on

Суд залишив Семенченка під вартою – адвокат

За словами адвоката, ухвала суду не підлягає оскарженню, у зв’язку з тим, що вона є рішенням на клопотання захисту