Tag Archives: blunder

Mystery moon crash due to China’s space ‘blunder’, claim scientists – Times of India – IndiaTimes

  1. Mystery moon crash due to China’s space ‘blunder’, claim scientists – Times of India IndiaTimes
  2. Mystery over UFO that crashed into moon leaving strange 100ft ‘double crater’ has finally been solved by sc… The US Sun
  3. Double Moon crater riddle solved? Spent Chinese rocket booster carrying mystery payload crash landed The Register
  4. Rogue rocket that slammed into the moon last year confirmed to be Chinese vehicle Yahoo! Voices
  5. Chinese rocket banged into Moon creating a 29-metre-wide crater, scientists say WION
  6. View Full Coverage on Google News

Read original article here

Billionaire investor Stanley Druckenmiller accuses Janet Yellen of making the ‘biggest blunder in Treasury history’ – Yahoo Finance

  1. Billionaire investor Stanley Druckenmiller accuses Janet Yellen of making the ‘biggest blunder in Treasury history’ Yahoo Finance
  2. Druckenmiller: Secretary Yellen made the worst mistake in Treasury history Seeking Alpha
  3. Janet Yellen Made ‘Biggest Blunder’ in Treasury History: Druckenmiller Markets Insider
  4. Stanley Druckenmiller slams Janet Yellen for ‘biggest blunder in Treasury history’: failing to lock in rock-bottom interest rates msnNOW
  5. Stanley Druckenmiller slams Janet Yellen for not locking in long-term rates, calls it ‘biggest blunder in Treasury history’ MarketWatch
  6. View Full Coverage on Google News

Read original article here

Billionaire investor Stanley Druckenmiller accuses Janet Yellen of making the ‘biggest blunder in Treasury history’ – Fortune

  1. Billionaire investor Stanley Druckenmiller accuses Janet Yellen of making the ‘biggest blunder in Treasury history’ Fortune
  2. Druckenmiller: Secretary Yellen made the worst mistake in Treasury history Seeking Alpha
  3. Janet Yellen Made ‘Biggest Blunder’ in Treasury History: Druckenmiller Markets Insider
  4. Stanley Druckenmiller slams Yellen for ‘biggest blunder in Treasury history’ MarketWatch
  5. Stanley Druckenmiller slams Janet Yellen for ‘biggest blunder in Treasury history’: failing to lock in rock-bottom interest rates msnNOW
  6. View Full Coverage on Google News

Read original article here

Bad day for Alex Cora, Red Sox only gets worse when game ends in loss to Blue Jays on base-running blunder – The Boston Globe

  1. Bad day for Alex Cora, Red Sox only gets worse when game ends in loss to Blue Jays on base-running blunder The Boston Globe
  2. Cora sits Verdugo before Red Sox loss, takes ‘responsibility’ – ESPN ESPN
  3. Alex Verdugo benched: Red Sox’s Alex Cora calls it ‘manager’s decision’ MassLive.com
  4. Red Sox manager says ‘we took a step back as a team’ after Alex Verdugo benched for late arrival, per report CBS Sports
  5. Red Sox’s Alex Verdugo Responds To Alex Cora’s ‘Manager’s Decision’ Vs. Blue Jays NESN
  6. View Full Coverage on Google News

Read original article here

Furman Paladins capitalize on late blunder to pull off stunning March Madness upset against Virginia Cavaliers – CNN

  1. Furman Paladins capitalize on late blunder to pull off stunning March Madness upset against Virginia Cavaliers CNN
  2. NCAA KPIX Survivor challenge: Jocelyn’s upset pick of Furman over Virginia lifts her into first day KPIX | CBS NEWS BAY AREA
  3. Virginia’s big blunder in March Madness upset to Furman has social media baffled: ‘What are we doing?!?!?’ Fox News
  4. WATCH: 13-Seed Furman University Upsets UVA With Massive Last-Second Shot The Daily Beast
  5. Furman vs. Virginia – First Round NCAA tournament extended highlights March Madness
  6. View Full Coverage on Google News

Read original article here

Furman Paladins capitalize on late blunder to pull off stunning March Madness upset against Virginia Cavaliers – CNN

  1. Furman Paladins capitalize on late blunder to pull off stunning March Madness upset against Virginia Cavaliers CNN
  2. NCAA KPIX Survivor challenge: Jocelyn’s upset pick of Furman over Virginia lifts her into first day KPIX | CBS NEWS BAY AREA
  3. Virginia’s big blunder in March Madness upset to Furman has social media baffled: ‘What are we doing?!?!?’ Fox News
  4. Furman vs. Virginia – First Round NCAA tournament extended highlights March Madness
  5. WATCH: 13-Seed Furman University Upsets UVA With Massive Last-Second Shot The Daily Beast
  6. View Full Coverage on Google News

Read original article here

College basketball’s 10 takes: UNC can’t shake bad habits, Michigan is in late-game hell, SEC’s DPOY blunder – 247Sports

  1. College basketball’s 10 takes: UNC can’t shake bad habits, Michigan is in late-game hell, SEC’s DPOY blunder 247Sports
  2. How many more wins does Michigan need to make the NCAA Tournament? MLive.com
  3. Maize&BlueReview – Trending towards an unceremonious March, Michigan is at an inflection point Rivals.com – Michigan
  4. College basketball bracketology: UNC among CBS Sports’ bubble teams in Last Four In, First Four Out projection 247Sports
  5. basketball is a Tournament-caliber team. But it shouldn’t make it. The Michigan Daily
  6. View Full Coverage on Google News

Read original article here

ACC Power Rankings: Officiating blunder could play role in deciding regular-season champ – syracuse.com

  1. ACC Power Rankings: Officiating blunder could play role in deciding regular-season champ syracuse.com
  2. Duke basketball’s Jon Scheyer still fuming at ACC’s handling of UVA game The Fayetteville Observer
  3. Duke basketball must move on after Virginia controversy: ‘We need a quick response’ Raleigh News & Observer
  4. ACC admits blown call at end of regulation in Virginia’s overtime win over Duke Fox News
  5. NCAA coordinator of officials affirms rule misapplied in Virginia’s win over Duke Richmond Times-Dispatch
  6. View Full Coverage on Google News

Read original article here

How a Microsoft blunder opened millions of PCs to potent malware attacks

Getty Images

For almost two years, Microsoft officials botched a key Windows defense, an unexplained lapse that left customers open to a malware infection technique that has been especially effective in recent months.

Microsoft officials have steadfastly asserted that Windows Update will automatically add new software drivers to a blocklist designed to thwart a well-known trick in the malware infection playbook. The malware technique—known as BYOVD, short for “bring your own vulnerable driver”—makes it easy for an attacker with administrative control to bypass Windows kernel protections. Rather than writing an exploit from scratch, the attacker simply installs any one of dozens of third-party drivers with known vulnerabilities. Then the attacker exploits those vulnerabilities to gain instant access to some of the most fortified regions of Windows.

It turns out, however, that Windows was not properly downloading and applying updates to the driver blocklist, leaving users vulnerable to new BYOVD attacks.

As attacks surge, Microsoft countermeasures languish

Drivers typically allow computers to work with printers, cameras, or other peripheral devices—or to do other things such as provide analytics about the functioning of computer hardware. For many drivers to work, they need a direct pipeline into the kernel, the core of an operating system where the most sensitive code resides. For this reason, Microsoft heavily fortifies the kernel and requires all drivers to be digitally signed with a certificate that verifies they have been inspected and come from a trusted source.

Even then, however, legitimate drivers sometimes contain memory corruption vulnerabilities or other serious flaws that, when exploited, allow hackers to funnel their malicious code directly into the kernel. Even after a developer patches the vulnerability, the old, buggy drivers remain excellent candidates for BYOVD attacks because they’re already signed. By adding this kind of driver to the execution flow of a malware attack, hackers can save weeks of development and testing time.

BYOVD has been a fact of life for at least a decade. Malware dubbed “Slingshot” employed BYOVD since at least 2012, and other early entrants to the BYOVD scene included LoJax, InvisiMole, and RobbinHood.

Over the past couple of years, we have seen a rash of new BYOVD attacks. One such attack late last year was carried out by the North Korean government-backed Lazarus group. It used a decommissioned Dell driver with a high-severity vulnerability to target an employee of an aerospace company in the Netherlands and a political journalist in Belgium.

In a separate BYOVD attack a few months ago, cybercriminals installed the BlackByte ransomware by installing and then exploiting a buggy driver for Micro-Star’s MSI AfterBurner 4.6.2.15658, a widely used graphics card overclocking utility.

In July, a ransomware threat group installed the driver mhyprot2.sys—a deprecated anti-cheat driver used by the wildly popular game Genshin Impact—during targeted attacks that went on to exploit a code execution vulnerability in the driver to burrow further into Windows.

A month earlier, criminals spreading the AvosLocker ransomware likewise abused the vulnerable Avast anti-rootkit driver aswarpot.sys to bypass virus scanning.

Entire blog posts have been devoted to enumerating the growing instances of BYOVD attacks, with this post from security firm Eclypsium and this one from ESET among the most notable.

Microsoft is acutely aware of the BYOVD threat and has been working on defenses to stop these attacks, mainly by creating mechanisms to stop Windows from loading signed-but-vulnerable drivers. The most common mechanism for driver blocking uses a combination of what’s called memory integrity and HVCI, short for Hypervisor-Protected Code Integrity. A separate mechanism for preventing bad drivers from being written to disk is known as ASR, or Attack Surface Reduction.

Unfortunately, neither approach seems to have worked as well as intended.

Read original article here

Barclays hit by $361 million U.S. penalty for ‘staggering’ blunder

Sept 30 (Reuters) – British lender Barclays (BARC.L) agreed a $361 million penalty with U.S. regulators on Thursday for “staggering” failures that led it to oversell $17.7 billion of structured products, racking up further costs for an error that has blighted CEO C.S. Venkatakrishnan’s first year in charge.

The bank said after London market close on Friday that its own review led by external lawyers into the error had also concluded, adding it would consider individual accountabilities and whether to take disciplinary action or dock pay packets based on the findings.

Barclays’ shares closed down 0.2% on the day.

Register now for FREE unlimited access to Reuters.com

The conduct concerned dates back to March this year when Barclays disclosed that it had accidentally oversold complex structured and exchange-traded notes, overshooting by about 75% a $20.8 billion limit on such sales it had agreed with the Securities and Exchange Commission.

The bank had failed to implement any internal controls to track such transactions in real time, the SEC found.

“While we acknowledge Barclays’ efforts to identify, disclose and remediate this conduct, the control deficiencies and the scope of the conduct at issue here was simply staggering,” Gurbir Grewal, director of the SEC’s Division of Enforcement, said in a statement.

Barclays will pay the penalty without admitting or denying the SEC’s findings, it said.

Barclays said its review found the over-issuance happened primarily because of a failure to identify and escalate to senior executives the consequences of a change in its issuer status and because of a decentralised structure for securities issuances.

The error was not due to “a general lack of attention to controls by Barclays”, the bank said its review concluded.

Buyers of the notes, considered “unregistered securities,” had the right to demand Barclays buy back the products at the original price plus interest. The bank took a charge of 1.3 billion pounds in the second quarter to cover the costs of buying back the securities, denting its profits. read more

On Thursday, the SEC said Barclays had agreed to pay a $200 million civil penalty for the control lapses. In addition, it agreed to pay disgorgement and interest of more than $161 million, although the regulator said that additional charge was satisfied by the buyback offer.

While the SEC settlement helps draw a line under the incident, which has been an embarrassment for Venkatakrishnan – known at the bank as ‘Venkat’ – it still faces private litigation relating to the incident. read more

Barclays also still has to outline the final costs of its so-called rescission offer to buy back the securities it sold in error. The bank said on Friday the full financial impact would be “materially in line” with that disclosed in its half-year financial results, with further details in its third quarter results on Oct 26.

Barclays said this month that investors had submitted claims for $7 billion out of the $17.7 billion worth of securities it over-sold. read more

WELL-SEASONED ISSUER

Under a previous enforcement settlement Barclays agreed with the SEC in 2017, the bank was stripped of its “well known seasoned issuer” status that had allowed it to sell notes in the United States with flexible filing requirements.

As a result, Barclays had to quantify the total number of securities that it anticipated offering and selling and pay registration fees for those offerings in advance. In August 2019, the bank and the SEC agreed Barclays could offer or sell approximately $20.8 billion of securities, for a period of three years.

Given this requirement, staff knew they had to keep close track of actual offers and sales of securities against the amount of registered offers and sales on a real-time basis, but the bank failed to establish a mechanism to do this, the SEC said.

Around March 9, staff realized that they had oversold the agreed amount of securities and alerted regulators a few days later, the SEC said.

Register now for FREE unlimited access to Reuters.com

Reporting by John McCrank in New York, Kanishka Singh in Washington and Iain Withers in London; editing by Deepa Babington, Jason Neely and Nick Zieminski

Our Standards: The Thomson Reuters Trust Principles.

Read original article here