May 13, 2017 – Page 152 – Tech Today w/ Ken May

Ram is recalling more than a million trucks for faulty software

Enlarge / A 2015 Ram 1500, one of the models affected by this recall. (credit: FCA) Dodgy software code controlling side airbags and safety belt pretensioners is responsible for a recall affecting more than a million Ram pickup trucks. On Friday, Fiat Chrysler Automobiles (FCA) announced that it will be recalling Ram 1500 and 2500 trucks (model years 2013 to 2016) and Ram 3500 trucks (model years 2014 to 2016) beginning in June in order to rectify the problem. The software error, which could prevent side airbag deployment and belt pretensioning in cases where a vehicle rolls over following an underbody impact—say, hitting road debris or something when off-roading—has already been implicated in one death. Although the code has not been conclusively fingered as the culprit, FCA says it is issuing the recall proactively. A similar issue forced General Motors to recall more than 4 million vehicles in 2016. Read 1 remaining paragraphs | Comments

Continue Reading:
Ram is recalling more than a million trucks for faulty software

New Ransomware ‘Jaff’ Spotted; Malware Groups Pushing 5M Emails Per Hour To Circulate It

An anonymous reader writes: The Necurs botnet has been harnessed to fling a new strain of ransomware dubbed “Jaff”. Jaff spreads in a similar way to the infamous file-encrypting malware Locky and even uses the same payment site template, but is nonetheless a different monster. Attached to dangerous emails is an infectious PDF containing an embedded DOCM file with a malicious macro script. This script will then download and execute the Jaff ransomware. Locky — like Jaff — also used the Necurs botnet and a booby-trapped PDF, security firm Malwarebytes notes. “This is where the comparison ends, since the code base is different as well as the ransom itself, ” said Jerome Segura, a security researcher at Malwarebytes. “Jaff asks for an astounding 2 BTC, which is about $3, 700 at the time of writing.” Proofpoint reckons Jaff may be the work of the same cybercriminals behind Locky, Dridex and Bart (other nasty malware) but this remains unconfirmed. And Forcepoint Security Labs reports that malicious emails carrying Jaff are being cranked out at a rate of 5 million an hour on Thursday, or 13 million in total at the time it wrote up a blog post about the new threat. Read more of this story at Slashdot.

‘WannaCry’ ransomware attack spreads worldwide (update)

England’s healthcare system came under a withering cyberattack Friday morning, with ” at least 25 ” hospitals across the country falling prey to ransomware that locked doctors and employees out of critical systems and networks. The UK government now reports that this is not a (relatively) isolated attack but rather a single front in a massive regionwide digital assault. #nhscyberattack pic.twitter.com/SovgQejl3X — gigi.h (@fendifille) May 12, 2017 The attack has impacted hospitals and transportation infrastructure across Europe, Russia and Asia. Organizations in dozens of countries have all been hit with the same ransomware program, a variant of the WannaCry virus, spouting the same ransom note and demanding $300 for the encryption key, with the demand escalating as time passes. The virus’s infection vector appears to through a known vulnerability, originally exploited and developed by the National Security Agency. That information was subsequently leaked by the hacking group known as Shadow Broker which has been dumping its cache of purloined NSA hacking tools onto the internet since last year. The virus appears to have originally spread via email as compressed file attachment so, like last week’s Google Docs issue, make sure you confirm that you email’s attachments are legit before clicking on them. Also, make sure your computers are using software that’s still receiving security updates, and that you’ve installed the latest updates available. Microsoft released a fix for the exploit used as a part of its March “Patch Tuesday” release, but unpatched Windows systems remain vulnerable. Update : Reuters reports a statement from Microsoft indicating that engineers have added detection and protection against the “Ransom:Win32.WannaCrypt” malware, so make sure your Windows Defender or other antivirus is updated before logging on to any corporate networks that may be infected. In a statement, a FedEx representative confirmed its systems are being impacted, saying “Like many other companies, FedEx is experiencing interference with some of our Windows-based systems caused by malware. We are implementing remediation steps as quickly as possible. We regret any inconvenience to our customers.” Source: New York Times

Visit link:
‘WannaCry’ ransomware attack spreads worldwide (update)

Watching two waves of hot lava in the Solar System’s largest volcano

Enlarge / Loki Patera, in the lower-center, has a central island that divides two waves of molten material. (credit: NASA/JPL/USGS ) Volcanic activity appears to be a common feature in our Solar System; we have evidence of it on three planets and two moons and hints of it elsewhere. But that doesn’t mean all volcanic activity is the same. Venus’ activity is driven by a simple version of plate tectonics. On the Moon, massive lava flows were released by large impacts, and Mars just seems to have vented heat left over from its formation. There are also hints of cryovolcanoes, which belch up ice rather than lava, on some of the bodies of the outer Solar System. But when it comes to sheer volume of activity, all of this takes a back seat to Jupiter’s moon Io. Io is partially molten due to gravitational stress from its proximity to three large moons and a massive planet. The results are active volcanoes and vast pools of molten material on the Moon’s surface. And we just got a good look inside the biggest of them. Slicing up Loki Loki Patera is the most powerful active volcano in the Solar System. It’s an enormous crater with a central island; around that island is a sea of hot material that covers more than 20,000 square kilometers. By all appearances, that hot material isn’t stable, since the entire surface seems to be reworked every few years, temporarily replaced by new hot material. Read 10 remaining paragraphs | Comments

More here:
Watching two waves of hot lava in the Solar System’s largest volcano

Windows Server will add the Linux subsystem, join the Insider program

(credit: Microsoft) SEATTLE—When Microsoft first introduced the Windows Subsystem for Linux (WSL) at last year’s Build developer conference , it said that it was doing so to make developers who were familiar with the Linux command line feel comfortable on Windows . The immediate and inevitable question was “Well, what about Windows Server?” Development is one thing, but what if organizations wanted to occasionally deploy their Linux software on Windows? Although Windows Server 2016 and Windows 10 share many components, the Server operating system hasn’t thus far included WSL, consistent with the “developer only” rationale. But that’s going to change: at Build this week, Microsoft announced that WSL will be included in Server later this year. Microsoft still isn’t positioning this as a way of running Linux server in production on Windows; rather, the company says the addition will be useful for administrative tasks. With WSL, Windows can run scripts written for Linux. But we’re hard-pressed to see things stopping there; it seems inevitable that at some point, Windows will offer the ability to run Linux server software as one of its features. Read 3 remaining paragraphs | Comments

Visit site:
Windows Server will add the Linux subsystem, join the Insider program

Today’s Massive Ransomware Attack Was Mostly Preventable—Here’s How To Avoid It

Ransomware may be mostly thought of as a (sometimes costly) nuisance, but when it hinders the ability of doctors and nurses to help people with an emergency medical problems, that qualifies as armed robbery. Read more…

Keylogger Found in Audio Driver of HP Laptops, Says Report

An anonymous reader writes: The audio driver installed on some HP laptops includes a feature that could best be described as a keylogger, which records all the user’s keystrokes and saves the information to a local file, accessible to anyone or any third-party software or malware that knows where to look. Swiss cyber-security firm modzero discovered the keylogger on April 28 and made its findings public today. According to researchers, the keylogger feature was discovered in the Conexant HD Audio Driver Package version 1.0.0.46 and earlier. This is an audio driver that is preinstalled on HP laptops. One of the files of this audio driver is MicTray64.exe (C:windowssystem32mictray64.exe). This file is registered to start via a Scheduled Task every time the user logs into his computer. According to modzero researchers, the file “monitors all keystrokes made by the user to capture and react to functions such as microphone mute/unmute keys/hotkeys.” Read more of this story at Slashdot.

Continued here:
Keylogger Found in Audio Driver of HP Laptops, Says Report

Ubuntu Arrives in the Windows Store, Suse and Fedora Are Coming To the Windows Subsystem For Linux

At its Build developer conference today, Microsoft announced that Ubuntu has arrived in the Windows Store. From a report: The company also revealed that it is working with Fedora and Suse to bring their distributions to the Windows Subsystem for Linux (WSL) in Windows 10. At the conference last year, Microsoft announced plans to bring the Bash shell to Windows. The fruits of that labor was WSL, a compatibility layer for running Linux binary executables (in ELF format) natively on Windows, which arrived with the Windows 10 Anniversary Update released in August 2016. Microsoft also partnered with Canonical to allow Ubuntu tools and utilities to run natively on top of the WSL. By bringing Ubuntu to the Windows Store, the company is now making it even easier for developers to install the tools and run Windows and Linux apps side by side. Working with other Linux firms shows that Microsoft’s deal with Canonical was not a one-time affair, but rather part of a long-term investment in the Linux world. Read more of this story at Slashdot.

Read the article:
Ubuntu Arrives in the Windows Store, Suse and Fedora Are Coming To the Windows Subsystem For Linux

New Windows look and feel, Neon, is officially the “Microsoft Fluent Design System”

Enlarge / Project Neon in the Groove Music app. (credit: Tom Hounsell ) SEATTLE—Earlier this year, pictures of a new Windows look and feel leaked . Codenamed Project Neon , the new look builds on Microsoft Design Language 2 (MDL2), the styling currently used in Windows 10, to add elements of translucency and animation. Neon has now been officially announced, and it has an official new name: the Microsoft Fluent Design System. The awkward MDL2 name exists because the original codename for the geometric, text-centric style introduced with Windows Phone 7 and incrementally iterated ever since was subject of a trademark dispute. That look and feel was internally named Metro, but Microsoft had to stop using the Metro name after pushback from a German supermarket chain . The company didn’t initially have any particularly good name to refer to the styling formerly known as Metro, so many people continued to use that term for lack of anything better. It wasn’t until a couple of months after dropping “Metro” that a new name, “Microsoft Design Language,” was settled on. Our understanding is that Neon befell a similar fate; someone out there is using the Neon name, forcing Microsoft to pick a different appellation. This time around, however, the company has recognized that it’s important to have an official name for the style that it can talk about and describe, giving us “Microsoft Fluent Design System.” Read 6 remaining paragraphs | Comments

Windows 10 fall update will restore (and improve) OneDrive’s best feature

Microsoft Windows 10 was a big improvement over Windows 8.1 in most important ways, but it made a big change to the way OneDrive syncing worked. In Windows 8.1, you could see all the files you had stored in OneDrive, but the operating system would only actually download and open the file when you needed to open it. At least for PCs that usually have Internet connections, this was a neat way to offer cloud file syncing without consuming gigabytes of space for infrequently used files on every computer you were signed into. But the behavior could be error-prone—apps could attempt to open the placeholder files created by OneDrive rather than the files themselves—and it could create confusion about which files were actually available offline. So in the initial releases of Windows 10, Microsoft changed the behavior to be more Dropbox-esque . All OneDrive files are now downloaded to your PC when you sign in, though as with Dropbox you can choose to only sync selected folders based on what you need to have available at all times. Read 4 remaining paragraphs | Comments

Read the article:
Windows 10 fall update will restore (and improve) OneDrive’s best feature