VMware bug with 9.8 severity rating exploited to install witch’s brew of malware

If you haven’t patched CVE-2022-22954 yet, now would be an excellent time to do so.

Image of ones and zeros with the word

(credit: Pixabay)

Hackers have been exploiting a now-patched vulnerability in VMware Workspace ONE Access in campaigns to install various ransomware and cryptocurrency miners, a researcher at security firm Fortinet said on Thursday.

CVE-2022-22954 is a remote code execution vulnerability in VMware Workspace ONE Access that carries a severity rating of 9.8 out of a possible 10. VMware disclosed and patched the vulnerability on April 6. Within 48 hours, hackers reverse-engineered the update and developed a working exploit that they then used to compromise servers that had yet to install the fix. VMware Workspace ONE access ​​helps administrators configure a suite of apps employees need in their work environments.

In August, researchers at Fortiguard Labs saw a sudden spike in exploit attempts and a major shift in tactics. Whereas before the hackers installed payloads that harvested passwords and collected other data, the new surge brought something else—specifically, ransomware known as RAR1ransom, a cryptocurrency miner known as GuardMiner, and Mirai, software that corrals Linux devices into a massive botnet for use in distributed denial-of-service attacks.

Read 3 remaining paragraphs | Comments

Experten sicher: Russland kann Ölpreisdeckel der G7-Staaten leicht umgehen

Preisobergrenze für Erdöl erreicht ihr Ziel nicht. Russland ist nicht auf westliche Schiffe und Versicherungen angewiesen. Haben die G7-Staaten ihren Einfluss auf die Märkte überschätzt?

Preisobergrenze für Erdöl erreicht ihr Ziel nicht. Russland ist nicht auf westliche Schiffe und Versicherungen angewiesen. Haben die G7-Staaten ihren Einfluss auf die Märkte überschätzt?

AI tool colorizes black-and-white photos automatically

Automatically add color to old photos, then refine the colors with a written caption.

Palette.fm does AI photo colorization using text prompts for refinement.

Enlarge / Palette.fm does AI photo colorization using text prompts for refinement. (credit: Benj Edwards / Ars Technica)

A Swedish machine learning researcher named Emil Wallner has released a free web tool called Palette.fm that automatically colorizes black-and-white photos using AI. After uploading a photo, users can choose a color filter or refine the colors using a written text description.

Palette.fm uses a deep learning model to classify images, which guides its initial guesses for the colors of objects in a photo or illustration. "I’ve made a custom AI model that uses the image and text to generate a colorization," Wallner wrote in a message to Ars. "One model creates the text and the other takes the image and the text to generate the colorization."

After you upload an image, the site's sleek interface provides an estimated caption (description) of what it thinks it sees in the picture. If you don't like any of the preset color filters, you can click the pencil icon to edit the caption yourself, which guides the colorization model using a text prompt.

Read 3 remaining paragraphs | Comments

Myth, busted: Formation of Namibia’s fairy circles isn’t due to termites

Plants are “ecosystem engineers” that survive by forming optimal geometric patterns.

Drone image of car driving through the NamibRand Nature Reserve, one of the fairy-circle regions in Namibia.

Enlarge / Drone image of car driving through the NamibRand Nature Reserve, one of the fairy-circle regions in Namibia. (credit: Stephan Getzin)

So-called "fairy circles" are bare, reddish-hued circular patches notably found in the Namibian grasslands and northwestern Australia. Scientists have long debated whether these unusual patterns are due to termites or to an ecological version of a self-organizing Turing mechanism. A few years ago, Stephan Getzin of the University of Göttingen found strong evidence for the latter hypothesis in Australia. And now his team has found similar evidence in Namibia, according to a new paper published in the journal Perspectives in Plant Ecology, Evolution and Systematics.

"We can now definitively dismiss the termite hypothesis, as the termites are not prerequisite to form new fairy circles," Getzin told Ars. This holds both for Australian and Namibian fairy circles.

As we've reported previously, Himba bushmen in the Namibian grasslands have passed down legends about the region's mysterious fairy circles. They can be as large as several feet in diameter. Dubbed "footprints of the gods," it's often said they are the work of the Himba deity Mukuru, or an underground dragon whose poisonous breath kills anything growing inside those circles.

Read 9 remaining paragraphs | Comments

Myth, busted: Formation of Namibia’s fairy circles isn’t due to termites

Plants are “ecosystem engineers” that survive by forming optimal geometric patterns.

Drone image of car driving through the NamibRand Nature Reserve, one of the fairy-circle regions in Namibia.

Enlarge / Drone image of car driving through the NamibRand Nature Reserve, one of the fairy-circle regions in Namibia. (credit: Stephan Getzin)

So-called "fairy circles" are bare, reddish-hued circular patches notably found in the Namibian grasslands and northwestern Australia. Scientists have long debated whether these unusual patterns are due to termites or to an ecological version of a self-organizing Turing mechanism. A few years ago, Stephan Getzin of the University of Göttingen found strong evidence for the latter hypothesis in Australia. And now his team has found similar evidence in Namibia, according to a new paper published in the journal Perspectives in Plant Ecology, Evolution and Systematics.

"We can now definitively dismiss the termite hypothesis, as the termites are not prerequisite to form new fairy circles," Getzin told Ars. This holds both for Australian and Namibian fairy circles.

As we've reported previously, Himba bushmen in the Namibian grasslands have passed down legends about the region's mysterious fairy circles. They can be as large as several feet in diameter. Dubbed "footprints of the gods," it's often said they are the work of the Himba deity Mukuru, or an underground dragon whose poisonous breath kills anything growing inside those circles.

Read 9 remaining paragraphs | Comments

Pixel 7 Pro review: Google makes refinements to the best Android phone

The new additions and features didn’t work out, but the basics are still great.

Pixel 7 Pro review: Google makes refinements to the best Android phone

Enlarge (credit: Ron Amadeo)

The Pixel 7 might be Google's first-ever flagship smartphone sequel.

That might seem like a strange thing to say about "version 7" of a smartphone, but before now, every flagship Pixel has switched manufacturers or used an all-new design from year to year. This strategy is the exact opposite of the one used by the larger, more serious hardware companies like Apple or Samsung, from which you can expect steady, iterative smartphone designs, with big redesigns coming every few years. When you're scrambling to build a smartphone from scratch every year, it's hard to do much in the way of error correction, improvements, or adjusting to customer feedback.

The Pixel 6 Pro was already the best Android phone you could buy, so Google didn't have to do too much to turn in a good smartphone this year. All the important bits from the Pixel 6 are here, like the category-leading price tag, great camera, and speedy, clean software. But even with that solid base, Google did a good job of fixing some of our minor complaints about the Pixel 6. There's no reason to upgrade if you have a Pixel 6, but an actual "version 2" of Google's flagship smartphone might entice more people to try the brand.

Read 48 remaining paragraphs | Comments

Biden looks to Musk’s Starlink to deliver promised Internet access in Iran

Setting up Starlink Internet access in Iran presents new risks and challenges.

Biden looks to Musk’s Starlink to deliver promised Internet access in Iran

Enlarge (credit: NurPhoto / Contributor | NurPhoto)

Last month, Elon Musk offered activists protesting in Iran uncensored Internet access, and a US State Department official said that the US would also be taking steps to help Iranians connect. Without delay, Musk activated SpaceX’s satellite Internet service Starlink, and he said all he needed to get Iranian protesters online was to somehow install special terminals in Iran that could receive the signal. So far, Musk has tweeted that only a few terminals have been installed in the country.

More are still needed, and now it looks like the US could possibly be taking steps to help with that. CNN reports that multiple US officials have confirmed that the Biden administration is in talks with Musk to potentially follow through on Biden's promise earlier this month and actually help set up broad access to Starlink in Iran. CNN says it’s not clear yet if those discussions will lead to the US offering to pay for the special terminals to be set up, however.

“We have our foot on the gas to do everything we possibly can to support the aspirations of the Iranian people,” one senior administration official told CNN.

Read 7 remaining paragraphs | Comments

Jony Ive successor Evans Hankey leaves Apple after 3 years

No replacement has been named yet.

The Apple Park campus in Cupertino, California.

Enlarge / The Apple Park campus in Cupertino, California. (credit: Anadolu Agency | Getty)

Evans Hankey, Apple vice president of industrial design since 2019, has announced plans to leave the company in the coming months. Apple confirmed her impending departure to Bloomberg.

She has been sitting in the post of hardware design lead once famously held by Jony Ive. Prior to taking the role, Hankey reported to Ive for several years. Since 2019 she has reported to Jeff Williams, Apple's chief operating officer. She manages dozens of industrial designers at the company. Whereas Ive once oversaw both industrial and software design, Hankey's responsibility was on the hardware side only. Apple's head of software design, Alan Dye, will remain in his role, according to sources that spoke with Bloomberg.

Hankey announced her departure this week, saying she will stay for six months while Apple works out its future plans for the industrial design team. She has not publicly said what her next move is. Her role was also held for a short time by designer Richard Howarth from 2015 to 2017. Hankey took it on around the time of Ive's departure from the company just three years ago. Howarth is still with the company and could be a candidate to replace Hankey.

Read 2 remaining paragraphs | Comments

Lilbits: Is the Logitech G Cloud overpriced (and bad)? Seamless updates coming to Samsung phones, and more

The Logitech G Cloud is a handheld gaming device made for cloud gaming. It’s basically an Android tablet with a 7 inch display, but thanks to built-in game controllers it’s clearly built for gaming. And thanks to its mid-range processor, i…

The Logitech G Cloud is a handheld gaming device made for cloud gaming. It’s basically an Android tablet with a 7 inch display, but thanks to built-in game controllers it’s clearly built for gaming. And thanks to its mid-range processor, it’s clearly not meant for native gaming, but for streaming games from cloud services like Xbox […]

The post Lilbits: Is the Logitech G Cloud overpriced (and bad)? Seamless updates coming to Samsung phones, and more appeared first on Liliputing.

House of The Dragon Season Finale Leaks Early on Pirate Sites

The season finale of HBO’s “House of the Dragon” has leaked online, two days ahead of its official premiere. The popular Game of Thrones prequel was already quite popular among pirates and this release is drawing even more attention. The source of the leak is unclear but the Hebrew subtitles could be a hint.

From: TF, for the latest news on copyright battles, piracy and more.

house of dragonsThe debut of HBO’s “House of the Dragon” in August didn’t disappoint. Since then it has averaged dozens of millions of views per episode.

The show was also an instant success on pirate sites where, in true Game of Thrones spirit, it was leaked before the official premiere.

In the weeks that followed “House of The Dragon” crushed “The Lord of the Rings: The Rings of Power” in the unofficial pirate download rankings. At this rate, it’s on track to become the most pirated TV show of the year. And today’s news certainly doesn’t hurt that aspiration.

A few hours ago, copies of the tenth episode appeared on Usenet and pirate sites, two days before the general public will have access to it on legal platforms. News of the leak is spreading quickly and tens of thousands of people have already grabbed a copy.

House.Of.The.Dragon.S01E10.1080p.WEB-DL.H.264

hotd

It wouldn’t be a major surprise to see these download statistics exceed more than a million copies before Sunday. Significant numbers of people will also watch the episode through pirate streaming sites, which will boost the numbers even further.

The source of the leak remains unknown at the time of writing but there are some data points that may help to narrow things down. The video comes in 25fps, which eliminates countries such as the US, Japan, and Brazil.

In addition, a trusted source informs us that the original release came with Hebrew subtitles in a separate .srt file. These original releases are typically shared on private servers, which act as central points before distribution groups start sharing them on pirate sites.

We were not able to verify this information independently, but it could be a hint that there are links to Israel.

No matter what the source is, it will be hard to do anything about it now. The company and its licensing partners will likely spend much of the weekend sending takedown requests but for HBO, most of the damage is already done.

This is a breaking news story. If more information appears we will update this article accordingly.

From: TF, for the latest news on copyright battles, piracy and more.