The hacking group behind the SolarWinds compromise was able to break into Microsoft and access some of its source code, the technology giant said late on Thursday, something experts said sent a worrying signal about the spies' ambition.
Source code - the underlying set of instructions that run a piece of software or operating system - is typically among a technology company's most closely guarded secrets and Microsoft has historically been particularly careful about protecting it.
It is not clear how much or what parts of Microsoft's source code repositories the hackers were able to access, but the disclosure suggests that the hackers who used software company SolarWinds as a springboard to break into sensitive US government networks also had an interest in discovering the inner workings of Microsoft products as well.
Microsoft had already disclosed that like other firms it found malicious versions of SolarWinds' software inside its network, but the source code disclosure is new.
Three people briefed on the matter said Microsoft had known for days that the source code had been accessed.
A Microsoft spokesman said security employees had been working "around the clock" and that "when there is actionable information to share, they have published and shared it”.
The SolarWinds hack is among the most ambitious cyber operations ever disclosed, compromising at least half-a-dozen federal agencies and potentially thousands of companies and other institutions.
US and private sector investigators have spent the holidays combing through logs to try to understand whether their data has been stolen or modified.
Modifying source code - which Microsoft said the hackers did not do - could have potentially disastrous consequences given the ubiquity of Microsoft products, which include the Office productivity suite and the Windows operating system. But experts said that even just being able to review the code could offer hackers insight that might help them subvert Microsoft products or services.
"The source code is the architectural blueprint of how the software is built," said Andrew Fife of Israel-based Cycode, a source code protection company.
"If you have the blueprint, it is far easier to engineer attacks," he added.
Matt Tait, an independent cybersecurity researcher, agreed that the source code could be used as a roadmap to help hack Microsoft products. He also cautioned that elements of the company's source code were already widely shared, for example with foreign governments. He said he doubted that Microsoft had made the common mistake of leaving cryptographic keys or passwords in the code.
"It's not going to affect the security of their customers, at least not substantially,” Mr Tait said.
Microsoft noted that it allows broad internal access to its code, and former employees agreed that it is more open than other companies.
In its blog post, Microsoft said it had found no evidence of access "to production services or customer data."
"The investigation, which is ongoing, has also found no indications that our systems were used to attack others," it said.
South and West: From a Notebook
Joan Didion
Fourth Estate
Normal People
Sally Rooney, Faber & Faber
Our family matters legal consultant
Name: Hassan Mohsen Elhais
Position: legal consultant with Al Rowaad Advocates and Legal Consultants.
Earth under attack: Cosmic impacts throughout history
- 4.5 billion years ago: Mars-sized object smashes into the newly-formed Earth, creating debris that coalesces to form the Moon
- 66 million years ago: 10km-wide asteroid crashes into the Gulf of Mexico, wiping out over 70 per cent of living species – including the dinosaurs.
- 50,000 years ago: 50m-wide iron meteor crashes in Arizona with the violence of 10 megatonne hydrogen bomb, creating the famous 1.2km-wide Barringer Crater
- 1490: Meteor storm over Shansi Province, north-east China when large stones “fell like rain”, reportedly leading to thousands of deaths.
- 1908: 100-metre meteor from the Taurid Complex explodes near the Tunguska river in Siberia with the force of 1,000 Hiroshima-type bombs, devastating 2,000 square kilometres of forest.
- 1998: Comet Shoemaker-Levy 9 breaks apart and crashes into Jupiter in series of impacts that would have annihilated life on Earth.
-2013: 10,000-tonne meteor burns up over the southern Urals region of Russia, releasing a pressure blast and flash that left over 1600 people injured.
More on Quran memorisation:
Infiniti QX80 specs
Engine: twin-turbocharged 3.5-liter V6
Power: 450hp
Torque: 700Nm
Price: From Dh450,000, Autograph model from Dh510,000
Available: Now
Desert Warrior
Starring: Anthony Mackie, Aiysha Hart, Ben Kingsley
Director: Rupert Wyatt
Rating: 3/5
The specs: 2017 Porsche 718 Cayman
Price, base / as tested Dh222,500 / Dh296,870
Engine 2.0L, flat four-cylinder
Transmission Seven-speed PDK
Power 300hp @ 6,500rpm
Torque 380hp @ 1,950rpm
Fuel economy, combined 6.9L / 100km
Scream%20VI
%3Cp%3E%3Cstrong%3EDirectors%3A%3C%2Fstrong%3E%20Matt%20Bettinelli-Olpin%20and%20Tyler%20Gillett%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStars%3A%3C%2Fstrong%3E%20Melissa%20Barrera%2C%20Jasmin%20Savoy%20Brown%2C%20Jack%20Champion%2C%20Dermot%20Mulroney%2C%20Jenna%20Ortega%2C%20Hayden%20Panettiere%20and%20Courteney%20Cox%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%3C%2Fstrong%3E%203%2F5%3C%2Fp%3E%0A
Guardians%20of%20the%20Galaxy%20Vol%203
%3Cp%3E%3Cstrong%3EDirector%3A%20%3C%2Fstrong%3EJames%20Gunn%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStars%3A%3C%2Fstrong%3E%20Chris%20Pratt%2C%20Zoe%20Saldana%2C%20Dave%20Bautista%2C%20Vin%20Diesel%2C%20Bradley%20Cooper%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%3C%2Fstrong%3E%204%2F5%3C%2Fp%3E%0A
At Everton Appearances: 77; Goals: 17
At Manchester United Appearances: 559; Goals: 253
Cryopreservation: A timeline
- Keyhole surgery under general anaesthetic
- Ovarian tissue surgically removed
- Tissue processed in a high-tech facility
- Tissue re-implanted at a time of the patient’s choosing
- Full hormone production regained within 4-6 months
Essentials
The flights
Emirates, Etihad and Malaysia Airlines all fly direct from the UAE to Kuala Lumpur and on to Penang from about Dh2,300 return, including taxes.
Where to stay
In Kuala Lumpur, Element is a recently opened, futuristic hotel high up in a Norman Foster-designed skyscraper. Rooms cost from Dh400 per night, including taxes. Hotel Stripes, also in KL, is a great value design hotel, with an infinity rooftop pool. Rooms cost from Dh310, including taxes.
In Penang, Ren i Tang is a boutique b&b in what was once an ancient Chinese Medicine Hall in the centre of Little India. Rooms cost from Dh220, including taxes.
23 Love Lane in Penang is a luxury boutique heritage hotel in a converted mansion, with private tropical gardens. Rooms cost from Dh400, including taxes.
In Langkawi, Temple Tree is a unique architectural villa hotel consisting of antique houses from all across Malaysia. Rooms cost from Dh350, including taxes.
Your rights as an employee
The government has taken an increasingly tough line against companies that fail to pay employees on time. Three years ago, the Cabinet passed a decree allowing the government to halt the granting of work permits to companies with wage backlogs.
The new measures passed by the Cabinet in 2016 were an update to the Wage Protection System, which is in place to track whether a company pays its employees on time or not.
If wages are 10 days late, the new measures kick in and the company is alerted it is in breach of labour rules. If wages remain unpaid for a total of 16 days, the authorities can cancel work permits, effectively shutting off operations. Fines of up to Dh5,000 per unpaid employee follow after 60 days.
Despite those measures, late payments remain an issue, particularly in the construction sector. Smaller contractors, such as electrical, plumbing and fit-out businesses, often blame the bigger companies that hire them for wages being late.
The authorities have urged employees to report their companies at the labour ministry or Tawafuq service centres — there are 15 in Abu Dhabi.
Super heroes
Iron Man
Reduced risk of dementia
Alcohol consumption could be an issue
Hulk
Cardiac disease, stroke and dementia from high heart rate
Spider-Man
Agility reduces risk of falls
Increased risk of obesity and mental health issues
Black Panther
Vegetarian diet reduces obesity
Unknown risks of potion drinking
Black Widow
Childhood traumas increase risk of mental illnesses
Thor
He's a god
Traces%20of%20Enayat
%3Cp%3E%3Cstrong%3EAuthor%3A%3C%2Fstrong%3E%20Iman%20Mersal%3Cbr%3E%3Cstrong%3EPublisher%3A%3C%2Fstrong%3E%20And%20Other%20Stories%3Cbr%3E%3Cstrong%3EPages%3A%3C%2Fstrong%3E%20240%3C%2Fp%3E%0A
UAE%20FIXTURES
%3Cp%3EWednesday%2019%20April%20%E2%80%93%20UAE%20v%20Kuwait%3Cbr%3EFriday%2021%20April%20%E2%80%93%20UAE%20v%20Hong%20Kong%3Cbr%3ESunday%2023%20April%20%E2%80%93%20UAE%20v%20Singapore%3Cbr%3EWednesday%2026%20April%20%E2%80%93%20UAE%20v%20Bahrain%3Cbr%3ESaturday%2029%20April%20%E2%80%93%20Semi-finals%3Cbr%3ESunday%2030%20April%20%E2%80%93%20Third%20position%20match%3Cbr%3EMonday%201%20May%20%E2%80%93%20Final%3C%2Fp%3E%0A
UAE%20athletes%20heading%20to%20Paris%202024
%3Cp%3E%3Cstrong%3EEquestrian%3C%2Fstrong%3E%3Cbr%3EAbdullah%20Humaid%20Al%20Muhairi%2C%20Abdullah%20Al%20Marri%2C%20Omar%20Al%20Marzooqi%2C%20Salem%20Al%20Suwaidi%2C%20and%20Ali%20Al%20Karbi%20(four%20to%20be%20selected).%3Cbr%3E%3Cstrong%3EJudo%3C%2Fstrong%3E%3Cbr%3EMen%3A%20Narmandakh%20Bayanmunkh%20(66kg)%2C%20Nugzari%20Tatalashvili%20(81kg)%2C%20Aram%20Grigorian%20(90kg)%2C%20Dzhafar%20Kostoev%20(100kg)%2C%20Magomedomar%20Magomedomarov%20(%2B100kg)%3B%20women's%20Khorloodoi%20Bishrelt%20(52kg).%3Cbr%3E%3Cbr%3E%3Cstrong%3ECycling%3C%2Fstrong%3E%3Cbr%3ESafia%20Al%20Sayegh%20(women's%20road%20race).%3Cbr%3E%3Cbr%3E%3Cstrong%3ESwimming%3C%2Fstrong%3E%3Cbr%3EMen%3A%20Yousef%20Rashid%20Al%20Matroushi%20(100m%20freestyle)%3B%20women%3A%20Maha%20Abdullah%20Al%20Shehi%20(200m%20freestyle).%3Cbr%3E%3Cbr%3E%3Cstrong%3EAthletics%3C%2Fstrong%3E%3Cbr%3EMaryam%20Mohammed%20Al%20Farsi%20(women's%20100%20metres).%3C%2Fp%3E%0A
A timeline of the Historical Dictionary of the Arabic Language
- 2018: Formal work begins
- November 2021: First 17 volumes launched
- November 2022: Additional 19 volumes released
- October 2023: Another 31 volumes released
- November 2024: All 127 volumes completed
CHELSEA'S NEXT FIVE GAMES
Mar 10: Norwich(A)
Mar 13: Newcastle(H)
Mar 16: Lille(A)
Mar 19: Middlesbrough(A)
Apr 2: Brentford(H)
RIVER%20SPIRIT
%3Cp%3E%3Cstrong%3EAuthor%3A%20%3C%2Fstrong%3ELeila%20Aboulela%C2%A0%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EPublisher%3A%3C%2Fstrong%3E%20Saqi%20Books%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EPages%3A%3C%2Fstrong%3E%20320%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EAvailable%3A%3C%2Fstrong%3E%20Now%3C%2Fp%3E%0A
THE SIXTH SENSE
Starring: Bruce Willis, Toni Collette, Hayley Joel Osment
Director: M. Night Shyamalan
Rating: 5/5
Brief scores:
Day 2
England: 277 & 19-0
West Indies: 154
The Lowdown
Us
Director: Jordan Peele
Starring: Lupita Nyong'o, Winston Duke, Shahadi Wright Joseqph, Evan Alex and Elisabeth Moss
Rating: 4/5
UPI facts
More than 2.2 million Indian tourists arrived in UAE in 2023
More than 3.5 million Indians reside in UAE
Indian tourists can make purchases in UAE using rupee accounts in India through QR-code-based UPI real-time payment systems
Indian residents in UAE can use their non-resident NRO and NRE accounts held in Indian banks linked to a UAE mobile number for UPI transactions
FIGHT CARD
Bantamweight Hamza Bougamza (MAR) v Jalal Al Daaja (JOR)
Catchweight 67kg Mohamed El Mesbahi (MAR) v Fouad Mesdari (ALG)
Lighweight Abdullah Mohammed Ali (UAE) v Abdelhak Amhidra (MAR)
Catchweight 73kg Mostafa Ibrahim Radi (PAL) v Yazid Chouchane (ALG)
Middleweight Yousri Belgaroui (TUN) v Badreddine Diani (MAR)
Catchweight 78kg Rashed Dawood (UAE) v Adnan Bushashy (ALG)
Middleweight Sallaheddine Dekhissi (MAR) v Abdel Emam (EGY)
Catchweight 65kg Rachid Hazoume (MAR) v Yanis Ghemmouri (ALG)
Lighweight Mohammed Yahya (UAE) v Azouz Anwar (EGY)
Catchweight 79kg Omar Hussein (PAL) v Souhil Tahiri (ALG)
Middleweight Tarek Suleiman (SYR) v Laid Zerhouni (ALG)
MATCH INFO
Uefa Champions League final:
Who: Real Madrid v Liverpool
Where: NSC Olimpiyskiy Stadium, Kiev, Ukraine
When: Saturday, May 26, 10.45pm (UAE)
TV: Match on BeIN Sports
UAE currency: the story behind the money in your pockets
Top tips to avoid cyber fraud
Microsoft’s ‘hacker-in-chief’ David Weston, creator of the tech company’s Windows Red Team, advises simple steps to help people avoid falling victim to cyber fraud:
1. Always get the latest operating system on your smartphone or desktop, as it will have the latest innovations. An outdated OS can erode away all investments made in securing your device or system.
2. After installing the latest OS version, keep it patched; this means repairing system vulnerabilities which are discovered after the infrastructure components are released in the market. The vast majority of attacks are based on out of date components – there are missing patches.
3. Multi-factor authentication is required. Move away from passwords as fast as possible, particularly for anything financial. Cybercriminals are targeting money through compromising the users’ identity – his username and password. So, get on the next level of security using fingertips or facial recognition.
4. Move your personal as well as professional data to the cloud, which has advanced threat detection mechanisms and analytics to spot any attempt. Even if you are hit by some ransomware, the chances of restoring the stolen data are higher because everything is backed up.
5. Make the right hardware selection and always refresh it. We are in a time where a number of security improvement processes are reliant on new processors and chip sets that come with embedded security features. Buy a new personal computer with a trusted computing module that has fingerprint or biometric cameras as additional measures of protection.
Five personal finance podcasts from The National
To help you get started, tune into these Pocketful of Dirham episodes
·
Balance is essential to happiness, health and wealth
·
What is a portfolio stress test?
·
What are NFTs and why are auction houses interested?
·
How gamers are getting rich by earning cryptocurrencies
·
Should you buy or rent a home in the UAE?
Company profile
Company name: Dharma
Date started: 2018
Founders: Charaf El Mansouri, Nisma Benani, Leah Howe
Based: Abu Dhabi
Sector: TravelTech
Funding stage: Pre-series A
Investors: Convivialite Ventures, BY Partners, Shorooq Partners, L& Ventures, Flat6Labs
If you go…
Emirates launched a new daily service to Mexico City this week, flying via Barcelona from Dh3,995.
Emirati citizens are among 67 nationalities who do not require a visa to Mexico. Entry is granted on arrival for stays of up to 180 days.
Profile
Co-founders of the company: Vilhelm Hedberg and Ravi Bhusari
Launch year: In 2016 ekar launched and signed an agreement with Etihad Airways in Abu Dhabi. In January 2017 ekar launched in Dubai in a partnership with the RTA.
Number of employees: Over 50
Financing stage: Series B currently being finalised
Investors: Series A - Audacia Capital
Sector of operation: Transport
%3Cp%3E%3Ca%20href%3D%22https%3A%2F%2Fwww.thenationalnews.com%2Fbusiness%2Feconomy%2Fislamic-economy-consumer-spending-to-increase-45-to-3-2tn-by-2024-1.936583%22%20target%3D%22_self%22%3EGlobal%20Islamic%20economy%20to%20grow%203.1%25%20to%20touch%20%242.4%20trillion%20by%202024%3C%2Fa%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp%3E%3Ca%20href%3D%22https%3A%2F%2Fwww.thenationalnews.com%2Fbusiness%2Feconomy%2Fuk-economy-plunges-into-worst-ever-recession-after-record-20-4-contraction-1.1062560%22%20target%3D%22_self%22%3EUK%20economy%20plunges%20into%20worst-ever%20recession%20after%20record%2020.4%25%20contraction%3C%2Fa%3E%3C%2Fp%3E%0A%3Cp%3E%3Ca%20href%3D%22https%3A%2F%2Fwww.thenationalnews.com%2Fbusiness%2Feconomy%2Fislamic-economy-consumer-spending-to-increase-45-to-3-2tn-by-2024-1.936583%22%20target%3D%22_self%22%3EIslamic%20economy%20consumer%20spending%20to%20increase%2045%25%20to%20%243.2tn%20by%202024%3C%2Fa%3E%3C%2Fp%3E%0A
The%20specs
%3Cp%3E%3Cstrong%3EEngine%3A%20%3C%2Fstrong%3ESingle%20front-axle%20electric%20motor%3Cbr%3E%3Cstrong%3EPower%3A%20%3C%2Fstrong%3E218hp%3Cbr%3E%3Cstrong%3ETorque%3A%20%3C%2Fstrong%3E330Nm%3Cbr%3E%3Cstrong%3ETransmission%3A%20%3C%2Fstrong%3ESingle-speed%20automatic%3Cbr%3E%3Cstrong%3EMax%20touring%20range%3A%20%3C%2Fstrong%3E402km%20(claimed)%3Cbr%3E%3Cstrong%3EPrice%3A%20%3C%2Fstrong%3EFrom%20Dh215%2C000%20(estimate)%3Cbr%3E%3Cstrong%3EOn%20sale%3A%20%3C%2Fstrong%3ESeptember%3C%2Fp%3E%0A
