adplus-dvertising
Connect with us

News

Exclusive-iPhone flaw exploited by second Israeli spy firm-sources

Published

 on

A flaw in Apple’s software exploited by Israeli surveillance firm NSO Group to break into iPhones in 2021 was simultaneously abused by a competing company, according to five people familiar with the matter.

QuaDream, the sources said, is a smaller and lower profile Israeli firm that also develops smartphone hacking tools intended for government clients.

The two rival businesses gained the same ability last year to remotely break into iPhones, according to the five sources, meaning that both firms could compromise Apple phones without an owner needing to open a malicious link. That two firms employed the same sophisticated hacking technique – known as a “zero-click” – shows that phones are more vulnerable to powerful digital spying tools than the industry will admit, one expert said.

“People want to believe they’re secure, and phone companies want you to believe they’re secure. What we’ve learned is, they’re not,” said Dave Aitel, a partner at Cordyceps Systems, a cybersecurity firm.

Experts analyzing intrusions engineered by NSO Group and QuaDream since last year believe the two companies used very similar software exploits, known as ForcedEntry, to hijack iPhones.

An exploit is computer code designed to leverage a set of specific software vulnerabilities, giving a hacker unauthorized access to data.

The analysts believed NSO and QuaDream’s exploits were similar because they leveraged many of the same vulnerabilities hidden deep inside Apple’s instant messaging platform and used a comparable approach to plant malicious software on targeted devices, according to three of the sources.

Bill Marczak, a security researcher with digital watchdog Citizen Lab who has been studying both companies’ hacking tools, told Reuters that QuaDream’s zero-click capability seemed “on par” with NSO’s.

Reuters made repeated attempts to reach QuaDream for comment, sending messages to executives and business partners. A Reuters journalist last week visited QuaDream’s office, in the Tel Aviv suburb of Ramat Gan, but no one answered the door. Israeli lawyer Vibeke Dank, whose email was listed on QuaDream’s corporate registration form, also did not return repeated messages.

An Apple spokesman declined to comment on QuaDream or say what if any action they planned to take with regard to the company.

ForcedEntry is viewed as “one of the most technically sophisticated exploits” ever captured by security researchers.

So similar were the two versions of ForcedEntry that when Apple fixed the underlying flaws in September 2021 it rendered both NSO and QuaDream’s spy software ineffective, according to two people familiar with the matter.

In a written statement, an NSO spokeswoman said the company “did not cooperate” with QuaDream but that “the cyber intelligence industry continues to grow rapidly globally.”

Apple sued NSO Group over ForcedEntry in November, claiming that NSO had violated Apple’s user terms and services agreement. The case is still in its early stages.

In its lawsuit, Apple said that it “continuously and successfully fends off a variety of hacking attempts.” NSO has denied any wrongdoing.

Spyware companies have long argued they sell high-powered technology to help governments thwart national security threats. But human rights groups and journalists have repeatedly documented the use of spyware to attack civil society, undermine political opposition, and interfere with elections.

Apple notified thousands of ForcedEntry targets in November, making elected officials, journalists, and human rights workers around the world realize they had been placed under surveillance.

In Uganda, for example, NSO’s ForcedEntry was used to spy on U.S. diplomats, Reuters reported .

In addition to the Apple lawsuit, Meta’s WhatsApp is also litigating over the alleged abuse of its platform. In November, NSO was put on a trade blacklist by the U.S. Commerce Department over human rights concerns.

Unlike NSO, QuaDream has kept a lower profile despite serving some of the same government clients. The company has no website touting its business and employees have been told to keep any reference to their employer off social media, according to a person familiar with the company.

REIGN

QuaDream was founded in 2016 by Ilan Dabelstein, a former Israeli military official, and by two former NSO employees, Guy Geva and Nimrod Reznik, according to Israeli corporate records and two people familiar with the business. Reuters could not reach the three executives for comment.

Like NSO’s Pegasus spyware, QuaDream’s flagship product – called REIGN – could take control of a smartphone, scooping up instant messages from services such as WhatsApp, Telegram, and Signal, as well as emails, photos, texts and contacts, according to two product brochures from 2019 and 2020 which were reviewed by Reuters.

REIGN’s “Premium Collection” capabilities included the “real time call recordings”, “camera activation – front and back” and “microphone activation”, one brochure said.

Prices appeared to vary. One QuaDream system, which would have given customers the ability to launch 50 smartphone break-ins per year, was being offered for $2.2 million exclusive of maintenance costs, according to the 2019 brochure. Two people familiar with the software’s sales said the price for REIGN was typically higher.

Over the years, QuaDream and NSO Group employed some of the same engineering talent, according to three people familiar with the matter. Two of those sources said the companies did not collaborate on their iPhone hacks, coming up with their own ways to take advantage of vulnerabilities.

Several of QuaDream’s buyers have also overlapped with NSO’s, four of the sources said, including Saudi Arabia and Mexico – both of whom have been accused of misusing spy software to target political opponents.

One of QuaDream’s first clients was the Singaporean government, two of the sources said, and documentation reviewed by Reuters shows the company’s surveillance technology was pitched to the Indonesian government as well. Reuters couldn’t determine if Indonesia became a client.

Mexican, Singaporean, Indonesian and Saudi officials did not return messages seeking comment about QuaDream.

 

(Reporting by Christopher Bing and Raphael Satter in Washington. Joseph Menn in San Francisco, Nir Elias in Ramat Gan, Israel, Dan Williams in Jerusalem, and Michele Kambas in Nicosia, Cyprus contributed reporting. Editing by Chris Sanders and Edward Tobin)

News

STD epidemic slows as new syphilis and gonorrhea cases fall in US

Published

 on

 

NEW YORK (AP) — The U.S. syphilis epidemic slowed dramatically last year, gonorrhea cases fell and chlamydia cases remained below prepandemic levels, according to federal data released Tuesday.

The numbers represented some good news about sexually transmitted diseases, which experienced some alarming increases in past years due to declining condom use, inadequate sex education, and reduced testing and treatment when the COVID-19 pandemic hit.

Last year, cases of the most infectious stages of syphilis fell 10% from the year before — the first substantial decline in more than two decades. Gonorrhea cases dropped 7%, marking a second straight year of decline and bringing the number below what it was in 2019.

“I’m encouraged, and it’s been a long time since I felt that way” about the nation’s epidemic of sexually transmitted infections, said the CDC’s Dr. Jonathan Mermin. “Something is working.”

More than 2.4 million cases of syphilis, gonorrhea and chlamydia were diagnosed and reported last year — 1.6 million cases of chlamydia, 600,000 of gonorrhea, and more than 209,000 of syphilis.

Syphilis is a particular concern. For centuries, it was a common but feared infection that could deform the body and end in death. New cases plummeted in the U.S. starting in the 1940s when infection-fighting antibiotics became widely available, and they trended down for a half century after that. By 2002, however, cases began rising again, with men who have sex with other men being disproportionately affected.

The new report found cases of syphilis in their early, most infectious stages dropped 13% among gay and bisexual men. It was the first such drop since the agency began reporting data for that group in the mid-2000s.

However, there was a 12% increase in the rate of cases of unknown- or later-stage syphilis — a reflection of people infected years ago.

Cases of syphilis in newborns, passed on from infected mothers, also rose. There were nearly 4,000 cases, including 279 stillbirths and infant deaths.

“This means pregnant women are not being tested often enough,” said Dr. Jeffrey Klausner, a professor of medicine at the University of Southern California.

What caused some of the STD trends to improve? Several experts say one contributor is the growing use of an antibiotic as a “morning-after pill.” Studies have shown that taking doxycycline within 72 hours of unprotected sex cuts the risk of developing syphilis, gonorrhea and chlamydia.

In June, the CDC started recommending doxycycline as a morning-after pill, specifically for gay and bisexual men and transgender women who recently had an STD diagnosis. But health departments and organizations in some cities had been giving the pills to people for a couple years.

Some experts believe that the 2022 mpox outbreak — which mainly hit gay and bisexual men — may have had a lingering effect on sexual behavior in 2023, or at least on people’s willingness to get tested when strange sores appeared.

Another factor may have been an increase in the number of health workers testing people for infections, doing contact tracing and connecting people to treatment. Congress gave $1.2 billion to expand the workforce over five years, including $600 million to states, cities and territories that get STD prevention funding from CDC.

Last year had the “most activity with that funding throughout the U.S.,” said David Harvey, executive director of the National Coalition of STD Directors.

However, Congress ended the funds early as a part of last year’s debt ceiling deal, cutting off $400 million. Some people already have lost their jobs, said a spokeswoman for Harvey’s organization.

Still, Harvey said he had reasons for optimism, including the growing use of doxycycline and a push for at-home STD test kits.

Also, there are reasons to think the next presidential administration could get behind STD prevention. In 2019, then-President Donald Trump announced a campaign to “eliminate” the U.S. HIV epidemic by 2030. (Federal health officials later clarified that the actual goal was a huge reduction in new infections — fewer than 3,000 a year.)

There were nearly 32,000 new HIV infections in 2022, the CDC estimates. But a boost in public health funding for HIV could also also help bring down other sexually transmitted infections, experts said.

“When the government puts in resources, puts in money, we see declines in STDs,” Klausner said.

___

The Associated Press Health and Science Department receives support from the Howard Hughes Medical Institute’s Science and Educational Media Group. The AP is solely responsible for all content.

Source link

Continue Reading

News

World’s largest active volcano Mauna Loa showed telltale warning signs before erupting in 2022

Published

 on

 

WASHINGTON (AP) — Scientists can’t know precisely when a volcano is about to erupt, but they can sometimes pick up telltale signs.

That happened two years ago with the world’s largest active volcano. About two months before Mauna Loa spewed rivers of glowing orange molten lava, geologists detected small earthquakes nearby and other signs, and they warned residents on Hawaii‘s Big Island.

Now a study of the volcano’s lava confirms their timeline for when the molten rock below was on the move.

“Volcanoes are tricky because we don’t get to watch directly what’s happening inside – we have to look for other signs,” said Erik Klemetti Gonzalez, a volcano expert at Denison University, who was not involved in the study.

Upswelling ground and increased earthquake activity near the volcano resulted from magma rising from lower levels of Earth’s crust to fill chambers beneath the volcano, said Kendra Lynn, a research geologist at the Hawaiian Volcano Observatory and co-author of a new study in Nature Communications.

When pressure was high enough, the magma broke through brittle surface rock and became lava – and the eruption began in late November 2022. Later, researchers collected samples of volcanic rock for analysis.

The chemical makeup of certain crystals within the lava indicated that around 70 days before the eruption, large quantities of molten rock had moved from around 1.9 miles (3 kilometers) to 3 miles (5 kilometers) under the summit to a mile (2 kilometers) or less beneath, the study found. This matched the timeline the geologists had observed with other signs.

The last time Mauna Loa erupted was in 1984. Most of the U.S. volcanoes that scientists consider to be active are found in Hawaii, Alaska and the West Coast.

Worldwide, around 585 volcanoes are considered active.

Scientists can’t predict eruptions, but they can make a “forecast,” said Ben Andrews, who heads the global volcano program at the Smithsonian Institution and who was not involved in the study.

Andrews compared volcano forecasts to weather forecasts – informed “probabilities” that an event will occur. And better data about the past behavior of specific volcanos can help researchers finetune forecasts of future activity, experts say.

(asterisk)We can look for similar patterns in the future and expect that there’s a higher probability of conditions for an eruption happening,” said Klemetti Gonzalez.

___

The Associated Press Health and Science Department receives support from the Howard Hughes Medical Institute’s Science and Educational Media Group. The AP is solely responsible for all content.

The Canadian Press. All rights reserved.

Source link

Continue Reading

News

Waymo’s robotaxis now open to anyone who wants a driverless ride in Los Angeles

Published

 on

 

Waymo on Tuesday opened its robotaxi service to anyone who wants a ride around Los Angeles, marking another milestone in the evolution of self-driving car technology since the company began as a secret project at Google 15 years ago.

The expansion comes eight months after Waymo began offering rides in Los Angeles to a limited group of passengers chosen from a waiting list that had ballooned to more than 300,000 people. Now, anyone with the Waymo One smartphone app will be able to request a ride around an 80-square-mile (129-square-kilometer) territory spanning the second largest U.S. city.

After Waymo received approval from California regulators to charge for rides 15 months ago, the company initially chose to launch its operations in San Francisco before offering a limited service in Los Angeles.

Before deciding to compete against conventional ride-hailing pioneers Uber and Lyft in California, Waymo unleashed its robotaxis in Phoenix in 2020 and has been steadily extending the reach of its service in that Arizona city ever since.

Driverless rides are proving to be more than just a novelty. Waymo says it now transports more than 50,000 weekly passengers in its robotaxis, a volume of business numbers that helped the company recently raise $5.6 billion from its corporate parent Alphabet and a list of other investors that included venture capital firm Andreesen Horowitz and financial management firm T. Rowe Price.

“Our service has matured quickly and our riders are embracing the many benefits of fully autonomous driving,” Waymo co-CEO Tekedra Mawakana said in a blog post.

Despite its inroads, Waymo is still believed to be losing money. Although Alphabet doesn’t disclose Waymo’s financial results, the robotaxi is a major part of an “Other Bets” division that had suffered an operating loss of $3.3 billion through the first nine months of this year, down from a setback of $4.2 billion at the same time last year.

But Waymo has come a long way since Google began working on self-driving cars in 2009 as part of project “Chauffeur.” Since its 2016 spinoff from Google, Waymo has established itself as the clear leader in a robotaxi industry that’s getting more congested.

Electric auto pioneer Tesla is aiming to launch a rival “Cybercab” service by 2026, although its CEO Elon Musk said he hopes the company can get the required regulatory clearances to operate in Texas and California by next year.

Tesla’s projected timeline for competing against Waymo has been met with skepticism because Musk has made unfulfilled promises about the company’s self-driving car technology for nearly a decade.

Meanwhile, Waymo’s robotaxis have driven more than 20 million fully autonomous miles and provided more than 2 million rides to passengers without encountering a serious accident that resulted in its operations being sidelined.

That safety record is a stark contrast to one of its early rivals, Cruise, a robotaxi service owned by General Motors. Cruise’s California license was suspended last year after one of its driverless cars in San Francisco dragged a jaywalking pedestrian who had been struck by a different car driven by a human.

Cruise is now trying to rebound by joining forces with Uber to make some of its services available next year in U.S. cities that still haven’t been announced. But Waymo also has forged a similar alliance with Uber to dispatch its robotaxi in Atlanta and Austin, Texas next year.

Another robotaxi service, Amazon’s Zoox, is hoping to begin offering driverless rides to the general public in Las Vegas at some point next year before also launching in San Francisco.

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending