Microsoft has responded to the April release of KrbRelayUp, a tool that streamlines several earlier public tools to escalate privileges from a low-privileged Windows domain user to a high-privileged domain user by joining unauthorized devices to Active Directory (AD), Microsoft’s on-premise authentication and identity service. The tools rely on resource-based constrained delegation (RBCD), a legitimate method in Windows that enables an attacker to “impersonate an administrator and eventually run a code as the SYSTEM account of a compromised device”, according to Microsoft....

Microsoft’s nation-state tracking team, Microsoft Threat Intelligence Center (MSTIC), has assessed with “high confidence” that the campaign is affiliated with Iran’s Ministry of Intelligence and Security (MOIS). US Cyber Command tracks the group as MuddyWater, which it assesses is a “subordinate element” of MOIS. Targeting SysAid apps is a new approach for Mercury, which in the past has used Log4Shell remote code execution flaws in VMware apps to carry out attacks....

Again, I asked Microsoft if they’d say this publicly. No word back so far. Update (August 1): Microsoft updated its blog post on the Release Preview test build of Windows 10 22H2 with the following information: “This build is focused on validating the servicing technology. Windows 10, version 22H2 has a scoped set of features and Microsoft will share more details on this update later this year.” Microsoft officials have not said when to expect Windows 10 22H2 (or Windows 11 22H2, for that matter) to start rolling out to the mainstream....

Microsoft is interested in sustainable fuels as a way to make its cloud datacenters less dependent on diesel fuel. LanzaJet says it will bring lower-cost sustainable aviation fuel and renewable diesel to the global market. LanzaJet says its plant will use waste-based ethanol feedstock as the source for its converted fuel. Microsoft officials have said the company is committed to being carbon-negative by 2030 and removing from the environment all the carbon it has emitted to date by 2050....

You’ve researched whether your computer will be compatible. If it isn’t (officially), you’ll have tried to find some clever way around it, courtesy of a sinisterly cheery presenter on YouTube. When Windows 11 is freely available, you’ll be among the first to experience it in real time. But do you really know all that you should about Microsoft’s new software? Really? Windows 11: Here’s how to get Microsoft’s free operating system update...

Also: Why ChatGPT won’t discuss politics or respond to these 20 controversial questions Users with access to Bing Chat have over the past week demonstrated that it is vulnerable to so-called ‘prompt injection’ attacks. As Ars Technica’s AI reporter Benj Edwards explains, prompt injection attacks allow the user to bypass previous instructions in a language model prompt and substitute it with a new one. Edwards detailed the attack in an earlier story....

But in Windows 11, which Microsoft released a week ago to Windows Insiders testers, the B in the BSOD acronym has changed from blue to black. SEE: Windows 10 Start menu hacks (TechRepublic Premium) It’s not a massive change, but the blue screen BSOD is familiar to millions of people across the world. Via Neowin, the new black screen was discovered by Windows Insider participant Martin Nobel, who’s posted a video of the new BSOD....

Windows Studio Effects arrived with Windows 11 22H2 and uses AI to improve video and audio calls on apps like Teams, as well as creator tools and gaming features. But the feature depends on laptops having a Neural Processing Unit (NPU), which includes the Surface Pro X with SQ1/SQ2 processors — co-developed by Microsoft and Qualcomm — as well as the latest SQ3, available as variant of the newly announced Surface Pro 9....

Fans of polls now have a one-click instant poll feature that lets meeting participants quickly round up opinions with binary responses like yes/no, thumb up/down, heart/broken heart. These can be done on the fly by presenters, so they can be reactive rather than pre-staged. Microsoft boasts that Teams is the only app with one-click instant binary polling. “With our competitors, presenters must take time to draft a poll in advance,” Microsoft notes in its November 2022 Teams update....

The issue stems from Microsoft’s OneDrive cloud file service and could mean files that were synced locally remain on a computer after a local or remote reset, which admins might do before handing the device to a new owner. This issue can occur when attempting a manual reset from Windows or a remote reset from Intune or other mobile device management platforms, Microsoft warns. SEE: Best Windows laptop: Top notebooks compared “When attempting to reset a Windows device with apps which have folders with reparse data, such as OneDrive or OneDrive for Business, files which have been downloaded or synced locally from OneDrive might not be deleted when selecting the “Remove everything” option,” Microsoft says in an update to its known issues for Windows 11 21H2....

Overall, the company reported total revenue was down 9.4% to AU$10.9 billion, earnings before interest, tax, depreciation, and amortisation (EBITDA) fell almost 15% to AU$3.5 billion, and net profit was slashed by 34% from AU$1.1 billion to AU$700 million. Looking at its underlying figures, which removed one-off gains from assets sales from the same time last year, total revenue was still down 4.4% to AU$10.7 billion, while EBITDA increased by 5....

Some 32% of these IT leaders tapped their work phones for personal activities, higher than 18% of employees who did likewise, according to a study commissioned by KnowBe4, which provides security awareness training. Its chief hacking officer and reformed hacker Kevin Mitnick designed the US vendor’s training modules. The study further found that 53% of IT decision-makers in Singapore were concerned about phishing as a risk to their organisation, while 40% expressed similar concerns about business email compromise attacks....

InteraXon’s Muse (2nd Gen) headband has the fix; it integrates a mix of employed electroencephalography (EEG) technology for built-in brain sensors that provide after-meditation feedback. Combined with the app’s goal-based meditation exercises, the accessory has the potential to turn the abstract practice of meditating into a more concrete exercise. I’ve been testing the wearable for the past week and while the Muse has no doubt kept me accountable, I still wonder if the sensors are legit or simply an expensive placebo....

As reported by Bleeping Computer, a cybersecurity researcher took umbrage when the cybercriminals publicly said they supported Russia’s invasion of Ukraine. In revenge, the individual, believed to hail from Ukraine, has been giving the ransomware operators a taste of their own hacking medicine. Conti is a Russian-speaking ransomware group that also operates a ransomware-as-a-service (RaaS) business model. While some ransomware payments are made in the millions, Coveware estimates that the average demand made by Conti members is just over $765,000....

Gadget Discovery Club is the number one gadget subscription box in the world. It provides exciting experiences right in your home by delivering the most unique, innovative gadgets to you every three months. Unlike some subscription boxes, Gadget Discovery Club provides free shipping and free returns. So you get to discover all kinds of new gadgets completely risk-free. Every quarter, you’ll receive a mystery box that holds up to four gadgets of the highest quality....

“That inclusion piece is something, I’ll be honest, I really did not keep my eye on over the last two or three years, and I realised that in the middle of the pandemic where my mum, for example … she’s got a son who’s minister for digital, but has got no idea when it comes to digital … so her journey has to be part of our collective journey,” he told audience at the Future....

In partnership with digital estate planning companies Trust & Will and Willful, it surveyed 1,000 American millennials aged 25-40 years old for its Great Wake up Call Report. It wanted to discover how this generation favours securing important documents and passwords and storing and transferring digital assets before and after death. Over two in three (68%) of millennials do not have a will, and under two in five (38%) of millennials have provided clear guidance on how they’d like their digital accounts managed after they die....

The latest example? Panda Express has rolled out a robotic wok, dubbed the Panda Auto Wok (PAW). The move comes on the heels of fast-casual restaurants like White Castle, Chipotle, and Jack in the Box adopting robotic systems for the back of the house cooking. Is this the end of the fast food worker? Do consumers even care in a pandemic-influenced market where convenience and touchless delivery reign supreme? I connected with Stanley Liu, VP of Operation Services, to talk about tofu, changing priorities in the food business and robots....

The Arm-based M1 and M2 chips used in the latest Mac models can no longer run the Intel x86 version of Windows, so those Macs had to rely on the Arm version of Windows – which itself has had something of a bumpy ride over the last few years. Also, along with various performance and compatibility issues faced when attempting to run existing Intel-based apps and software, Windows on Arm (WoA) is primarily licensed to OEM PC manufacturers, which meant that Parallels’ core business – running Windows on Mac – was starting to look like something of a dead end....

Also: The 5 best rowing machines The Row still has the features Pelotons are loved for, such as a 23.8-inch HD swivel screen, live classes and a sleek design. It can also be stowed vertically to minimize how much space it takes up with a compact 8ft x 2ft footprint. The machine will come with new content and instructors for people of all levels to enjoy a unique low-impact, full-body cardio and strength workout as well as post-class rating and insights....