On Wednesday, vpnMentor published a report on the security incident, in which an unsecured bucket was left exposed online. The server, which did not have authentication controls in place and was, therefore, accessible by anyone to view, contained 157GB of data, or just under an estimated 200,000 files. After discovering the open system, the researchers traced the owner as Phlebotomy Training Specialists. The LA-based organization offers phlebotomy certification and courses in states including Arizona, Michigan, Texas, Utah, and California....

The PetitPotam take on the NTLM Relay attack was discovered last week by French security researcher Gilles Lionel, as first reported by The Record. The tool Lionel posted can “coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw function,” he explains. In other words, the attack can make a remote Windows server authenticate with an attacker and share Microsoft NTLM authentication credentials and certificates. Microsoft notes that PetitPotam “is a classic NTLM Relay Attack” that it describes in a 2009 security advisory, which it says “can potentially be used in an attack on Windows domain controllers or other Windows servers....

Windows 11 might be the future for the OS, but take up so far has been pretty gradual. Slow adoption is fine since Microsoft will support Windows 10 until October 2025, but Microsoft is trying to persuade enterprise customers that Windows 11 security enhancements make it worth upgrading – so long as their hardware meets the minimum requirements. Microsoft is confident most customers will have refreshed their hardware sufficiently before 2025, so that customers aren’t left behind....

Tabs for Notepad is a top requested feature from users according to Microsoft, and follows on from tabbed File Explorer in Windows 11 after user requests. Also: How to control Windows 11 with your voice Uses can manage and organize multiple files with tabs in one Notepad window, or break out a new window by dragging a tab out. Also, Microsoft has added a new setting that lets user choose whether files open in new tabs or a new window by default....

Update (July 28): A spokesperson said: “At this time, Microsoft does not have anything to share” regarding the future of the Server Insider program. Earlier this year, Microsoft announced a change in its servicing plans for Windows 10 Enterprise LTSC, whereby new versions of that product will only get five years of support total instead of 10 years. The next Windows 10 Enterprise LTSC release is due this fall, in conjunction with the Windows 10 21H2 release....

Microsoft officials said that Phil Spencer will become CEO of Microsoft Gaming once the transaction closes, and the Activision Blizzard business will report to him. Microsoft execs also said once the deal is finalized, Microsoft will become the world’s third-largest gaming company by revenue, behind Tencent and Sony. Microsoft officials said the acquisition also will bolster the company’s Game Pass portfolio, since Microsoft will put Activision Blizzard games into Game Pass....

Microsoft is rolling out a public preview of Microsoft Endpoint Manager for managing devices that run on Android Open Source Project (AOSP), which developers use to build custom implementations of Android. Endpoint Manager already supports iOS and Android. The expansion of Endpoint Manager to open-source Android is aimed at purpose-built devices, such as RealWear head-mounted wearables, which already have integration with Teams. “With new developments in Microsoft Endpoint Manager, it’s easy to locate a lost device so workers can spend more time on customers and tasks,” Microsoft said....

MinIO founders, however, were not most people – so they took that bet. Coming from a background of distributed file systems, storage, and open source, Anand Babu Periasamy, Garima Kapoor and Harshavardhana invested in creating open source cloud storage software to address the demands of unstructured data growth in the cloud. Today, MinIO Inc., creators of the MinIO multi-cloud object storage suite, announced that it has raised $103 million in Series B funding at a $1 billion valuation....

“I have elevated cyber to big priority in the portfolio,” Andrews said, speaking as part of the CEDA State of the Nation 2021 conference on Thursday. “The Critical Infrastructure legislation is particularly important to us, and I think that what it demonstrates is people’s perception of what is critical infrastructure, which is way beyond the physical bricks and mortar, is crucial to us,” Andrews said. The Bill brings in the likes of communications, financial services, data storage and processing, higher education and research, energy, food and grocery, healthcare and medical, space technology, transport, and water and sewerage sectors to the definition of critical infrastructure....

AI is potentially a powerful tool for keeping talent on board and engaged, For example, Kshitij Dayal senior VP at Legion points to AI-driven capabilities, such as AI-powered workforce management and demand forecasting, scheduling agility through better workforce management, and, importantly, fostering a positive work environment by increasing knowledgeability about employee wants and needs. Automating tasks with AI, or augmenting human labor, means greater productivity across the board. Acute skills shortages are better addressed, while workers and managers can concentrate on higher-level tasks....

According to Haugen, events like the Capitol riots, and other social media-fuelled conflicts, are a foretaste of what’s yet to come. “I have no doubt that the events we’re seeing around the world, things like Myanmar and Ethiopia, those are the opening chapters,” said Haugen. “Because engagement-based rating does two things. One, it prioritises and amplifies divisive, polarising, extreme content. And two, it concentrates it.” SEE: Twitter stock price up after meeting revenue, user growth expectations Haugen was speaking in London before the UK Parliament as part of an investigation into the draft Online Safety Bill that was put forward by the government earlier this year....

The GPC – required under the California Consumer Protection Act (CCPA) and Europe’s Global Data Protection Regulation (GDPR) – tells websites not to sell or share your personal data. Mozilla said the GPC is a prerelease feature available for experimental use in Firefox Nightly. A Mozilla spokesperson said they were excited to see GPC getting traction both in California and Colorado. Now that they expect sites to start honoring it, they want to start getting experience with it in the field....

Here is a small list of my top tech items to kick-off 2022. I have tested everything on this list under real-world conditions, and nothing has found its way on this list based on a snazzy press release. Everything featured here is the tech that I use and rely on daily. Must read: Paying money to make Google Chrome faster and use less RAM The power bank is robust and delivers the promised power....

It’s a magnetic breakaway USB-C connector reminiscent of Apple’s MagSafe connector that you can fit into all your devices, even MacBooks that don’t have it. Also: Protect your data with a USB condom And the best thing of all is that it doesn’t slow down data transfer or charging. I know, because I’ve been testing a bunch of them to find you the best and cheapest! A magnetic breakaway USB-C connector consists of two parts....

Also: Revolut’s clumsy automated bank compliance results in frozen accounts As I said in previous posts at the beginning of the year, when Revolut is working performance is satisfactory but their black-box approach to interactions with the rest of the world results in countless compliance disasters for users. After writing about the widespread horror stories you can easily find online of frozen accounts and lack of timely support problem resolution, I had assumed that Revolut would be improving their performance and offerings as they matured from an immature startup to what could be a credible financial services company....

InSight has been roaming the red planet for the past 3.5 years, capturing images and data that allowed scientists to approximate its crust and core, and refine models of how planets evolved from dust circling the Sun. InSight’s scientific mission is set to conclude in summer after which it will run out of power. The lander is solar-powered, but dust covering the seven-feet wide solar panels has reduced its production capacity from around 5,000 watt-hours per sol to 500 watt-hours per sol....

As NASA notes, space junk consists mostly of mission-related and fragmentation debris, non-functional spacecraft, and abandoned rocket stages – all made by humans. NASA says it takes the threat of orbital debris seriously. “Orbital debris is one of the great challenges of our era,” said Bhavya Lal, associate administrator for NASA headquarters’ Office of Technology, Policy, and Strategy. SEE: What is Artemis? Everything you need to know about NASA’s new moon mission The research NASA is funding aims to understand the dynamics of the orbital environment and explore policies to limit the creation of debris and mitigate the impact of existing debris....

“The Weekly Progress Report (Build) is currently being reviewed by NBN Co for any impacts of the global equipment and component shortage on the NBN HFC network. Publishing of the next Weekly Progress Report (Build) will resume as soon as possible,” the company said in an update on its report page. Curiously, the report does not break down its numbers by technology – only whether a connection is fixed brownfields, fixed greenfields, satellite, or wireless....

You can use Paramount+ and Sling TV to live stream the entire 2023 NCAA tournament. The Final Four and NCAA National Championship will stream exclusively on Paramount+ this year. Live streams for the rest of the tournament are split across CBS (Paramount+) and TBS, TNT and truTV (Sling TV). If you’re outside the USA, follow the guide below to stream NCAA college basketball from anywhere: College basketball fans might also opt for free sports streaming sites to avoid signing up for multiple platforms....

One mistake on your part – or on the part of the weakest link in your organization – and that data can be in the hands of anyone. If that data is sensitive, then you’re going to have some serious headaches, along with the potential for legal troubles and fines. Must read: Apple broke the bad news to iPhone fans Far better to have that data properly secured and encrypted when it’s on a physical device, and as a tool that makes that as simple as possible is the Apricorn Aegis Padlock SSD....