Month: July 2023

Enlarge / This artist's illustration of the ViaSat-3 Americas satellites shows the spacecraft as it would appear with its large reflector antenna fully deployed. (credit: Viasat)

A new Viasat communications satellite launched in April has been crippled by a problem when unfurling its huge mesh antenna. The problem jeopardizes Viasat’s much-needed refresh to its space-based Internet network that would let it better compete with newer broadband offerings from companies like SpaceX and OneWeb.

Viasat confirmed the antenna problem Wednesday after it was first reported by Space Intel Report. The satellite in question is named ViaSat-3 Americas, and it launched on April 30 as the primary payload on a SpaceX Falcon Heavy rocket from NASA’s Kennedy Space Center in Florida.

The satellite is one of the most powerful commercial spacecraft ever built, with two solar array wings as wide as a Boeing 767 jetliner capable of generating more than 30 kilowatts of electricity. The solar panels deployed soon after the spacecraft arrived in orbit, and the next step was to unfurl a large reflector to bounce Internet signals between the ground and transmitters and receivers on board the main body of the satellite.

Enlarge (credit: Getty Images | Aurich Lawson)

On Friday, Microsoft attempted to explain the cause of a breach that gave hackers working for the Chinese government access to the email accounts of 25 of its customers—reportedly including the US Departments of State and Commerce and other sensitive organizations.

In a post on Friday, the company indicated that the compromise resulted from three exploited vulnerabilities in either its Exchange Online email service or Azure Active Directory, an identity service that manages single sign-on and multifactor authentication for large organizations. Microsoft’s Threat Intelligence team said that Storm-0558, a China-based hacking outfit that conducts espionage on behalf of that country’s government, exploited them starting on May 15. Microsoft drove out the attackers on June 16 after a customer tipped off company researchers of the intrusion.

Above all else: Avoid the Z-word

In standard parlance among security professionals, this means that Storm-0558 exploited zero-days in the Microsoft cloud services. A “zero-day” is a vulnerability that is known to or exploited by outsiders before the vendor has a patch for it. “Exploit” means using code or other means to trigger a vulnerability in a way that causes harm to the vendor or others.