Skip to main content

Microsoft Reportedly Cuts China's Early Access to Bug Disclosures, PoC Exploit Code

2 months 2 weeks ago
An anonymous reader quotes a report from The Register: Microsoft has reportedly stopped giving Chinese companies proof-of-concept exploit code for soon-to-be-disclosed vulnerabilities following last month's SharePoint zero-day attacks, which appear to be related to a leak in Redmond's early-bug-notification program. The software behemoth gives some software vendors early bug disclosures under its Microsoft Active Protections Program (MAPP), which typically delivers info two weeks before Patch Tuesday. MAPP participants sign a non-disclosure agreement, and in exchange get vulnerability details so that they can provide updated protections to customers more quickly. According to Microsoft spokesperson David Cuddy, who spoke with Bloomberg about changes to the program, MAPP has begun limiting access to companies in "countries where they're required to report vulnerabilities to their governments," including China. Companies in these countries will no longer receive "proof of concept" exploit code, but instead will see "a more general written description" that Microsoft sends at the same time as patches, Cuddy told the news outlet. "A leak happened here somewhere," Dustin Childs, head of threat awareness at Trend Micro's Zero Day Initiative (ZDI), told The Register in July. "And now you've got a zero-day exploit in the wild, and worse than that, you've got a zero-day exploit in the wild that bypasses the patch, which came out the next day." Childs said the MAPP change "is a positive change, if a bit late. Anything Microsoft can do to help prevent leaks while still offering MAPP guidance is welcome." "In the past, MAPP leaks were associated with companies out of China, so restricting information from flowing to these companies should help," Childs said. "The MAPP program remains a valuable resource for network defenders. Hopefully, Microsoft can squelch the leaks while sending out the needed information to companies that have proven their ability (and desire) to protect end users."

Read more of this story at Slashdot.

BeauHD

Nvidia Tapped To Accelerate RIKEN’s FugakuNext Supercomputer

2 months 2 weeks ago

It has been clear for some time that Japan wants to have a certain amount of economic and technical independence when it comes to cloud computing in the Land of the Rising Sun. …

Nvidia Tapped To Accelerate RIKEN’s FugakuNext Supercomputer was written by Timothy Prickett Morgan at The Next Platform.

Timothy Prickett Morgan

Waymo Granted First Permit To Being Testing Autonomous Vehicles In NYC

2 months 2 weeks ago
Waymo has received its first permit from the New York City Department of Transportation to begin testing autonomous vehicles in Manhattan and Downtown Brooklyn, marking the city's first official rollout of self-driving car trials. The program will initially deploy up to eight vehicles with safety drivers through late September, with the potential to extend and expand into other boroughs. CNBC reports: New York state law requires the company to have a driver behind the wheel to operate. "We're a tech-friendly administration and we're always looking for innovative ways to safely move our city forward," [Mayor Eric Adams] said in a release. "New York City is proud to welcome Waymo to test this new technology in Manhattan and Brooklyn, as we know this testing is only the first step in moving our city further into the 21st century." The news comes just two months after the company said it filed permits to test its cars in the city with a trained specialist behind the wheel. [...] As part of the permit, Waymo must regularly meet and report data to DOT and work closely with law enforcement and emergency services.

Read more of this story at Slashdot.

BeauHD

Meta Signs $10 Billion Cloud Deal With Google

2 months 2 weeks ago
Google has signed a six-year cloud computing deal with Meta worth over $10 billion, making it the second major partnership after a recent agreement with OpenAI. The deal will see Meta rely on Google Cloud's infrastructure to support its massive AI data center buildout, as the company ramps up capital spending into the tens of billions. The Information (paywalled) first reported the deal.

Read more of this story at Slashdot.

BeauHD