Investigators probing a massive hack of the U.S. government and businesses say they have found concrete evidence the suspected Russian espionage operation went far beyond the compromise of the small software vendor publicly linked to the attack. From a report: Close to a third of the victims didn’t run the SolarWinds software initially considered the main avenue of attack for the hackers, according to investigators and the government agency digging into the incident. The revelation is fueling concern that the episode exploited vulnerabilities in business software used daily by millions [Editor’s note: the link may be paywalled; alternative source]. Hackers linked to the attack have broken into these systems by exploiting known bugs in software products, by guessing online passwords and by capitalizing on a variety of issues in the way Microsoft cloud-based software is configured, investigators said.

Approximately 30% of both the private-sector and government victims linked to the campaign had no direct connection to SolarWinds, Brandon Wales, acting director of the Cybersecurity and Infrastructure Security Agency, said in an interview. The attackers “gained access to their targets in a variety of ways. This adversary has been creative,” said Mr. Wales, whose agency, part of the U.S. Department of Homeland Security, is coordinating the government response. “It is absolutely correct that this campaign should not be thought of as the SolarWinds campaign.” Corporate investigators are reaching the same conclusion. Last week, computer security company Malwarebytes said that a number of its Microsoft cloud email accounts were compromised by the same attackers who targeted SolarWinds, using what Malwarebytes called “another intrusion vector.”

Read more of this story at Slashdot.

Source: Slashdot – Suspected Russian Hack Extends Far Beyond SolarWinds Software, Investigators Say

Securities regulators said Friday they plan to closely review the actions of some brokerage firms [Editor’s note: the link may be paywalled; alternative source] that restricted investors’ ability to trade volatile stocks such as GameStop this week. From a report: The Securities and Exchange Commission’s statement on Friday is the clearest indication yet that regulators are examining potential misconduct around the trading mania that swamped stocks such as GameStop, AMC Entertainment and Novavax. Robinhood Markets restricted investors’ ability to purchase shares in GameStop and 12 other companies on Thursday as it dealt with the impact on its financial requirements of a surge in trading. Robinhood raised $1 billion to shore up its ability to clear and execute trades in those popular and volatile stocks, which the broker on Friday allowed clients to resume trading. Regulators also said they are on the lookout for potentially manipulative trading. This week’s sharp price swings have been aided by bullish individual traders communicating on websites such as Reddit’s WallStreetBets about which shares to buy. Traders drove up demand for stocks that other investors such as hedge funds had bet against, resulting in a “short squeeze” that ramped up the prices of GameStop more than 10-fold.

Read more of this story at Slashdot.

Source: Slashdot – SEC To Review Brokers’ Restrictions on GameStop, AMC Trading

Robin George Andrews, reporting for National Geographic: A 62-year-old adventure mystery that has prompted conspiracy theories around Soviet military experiments, Yetis, and even extraterrestrial contact may have its best, most sensible explanation yet — one found in a series of avalanche simulations based in part on car crash experiments and animation used in the movie Frozen. In an article published this week in the journal Communications Earth and Environment, researchers present data pointing to the likelihood that a bizarrely small, delayed avalanche may have been responsible for the gruesome injuries and deaths of nine experienced hikers who never returned from a planned 200-mile adventure in Russia’s Ural Mountains in the winter of 1959.

In what has become known as the Dyatlov Pass incident, ten members of the Urals Polytechnic Institute in Yekaterinburg — nine students and one sports instructor who fought in World War II — headed into the frigid wilderness on a skiing and mountaineering expedition on January 23, 1959. One student with joint pain turned back, but the rest, led by 23-year-old engineering student Igor Dyatlov, continued on. According to camera film and personal diaries later found on the scene by investigators, the team made camp on February 1, pitching a large tent on the snowy slopes of Kholat Saykhl, whose name can be interpreted as “Dead Mountain” in the language of the region’s Indigenous Mansi people. The nine — seven men and two women — were never heard from again.

When a search team arrived at Kholat Saykhl a few weeks later, the expedition tent was found just barely sticking out of the snow, and it appeared cut open from the inside. The next day, the first of the bodies was found near a cedar tree. Over the next few months, as the snow thawed, search teams gradually uncovered more spine-chilling sights: All nine of the team members’ bodies were scattered around the mountain’s slope, some in a baffling state of undress; some of their skulls and chests had been smashed open; others had eyes missing, and one lacked a tongue. Each body was a piece in a grim puzzle, but none of the pieces seemed to fit together. A criminal investigation at the time blamed their deaths on an “unknown natural force,” and the Soviet bureaucracy kept the case quiet. The lack of detail about this shocking event, an apparent massacre that transpired in a deeply secretive state, gave rise to dozens of long-lived conspiracy theories, from clandestine military tests to Yeti attacks.

Read more of this story at Slashdot.

Source: Slashdot – Has Science Solved One of History’s Greatest Adventure Mysteries?