Latest news with #AriNatter
Bloomberg
3 days ago
- Business
- Bloomberg
Trump's Treasury Set to Decide Fate of Hundreds of Wind, Solar Projects
By and Ari Natter Save A Treasury Department decision due next week threatens to undermine the financial viability of hundreds of planned clean energy projects, adding to an escalating Trump administration campaign against wind and solar power. President Donald Trump last month ordered the department to tighten long-standing guidance used to determine whether projects can qualify for clean-energy tax credits.
Business Insider
23-07-2025
- Business Insider
U.S. nuclear weapons agency breached in SharePoint cyberattack, Bloomberg says
The U.S. National Nuclear Security Administration was among those hacked amid a cyberattack of Microsoft's (MSFT) SharePoint document management software, Bloomberg's Ari Natter reports, citing a person with knowledge of the matter. No sensitive or classified data is known to have been affected by the breach, the author notes. Elevate Your Investing Strategy: Take advantage of TipRanks Premium at 50% off! Unlock powerful investing tools, advanced data, and expert analyst insights to help you invest with confidence. Published first on TheFly – the ultimate source for real-time, market-moving breaking financial news. Try Now>>
&w=3840&q=100)
Business Standard
23-07-2025
- Politics
- Business Standard
Chinese hackers exploit Microsoft flaw, breach US nuclear agency systems
By Jake Bleiberg, Ari Natter, Ryan Gallagher and Patrick Howell O'Neill Microsoft Corp. warned that Chinese state-sponsored hackers are among those exploiting flaws in its SharePoint software to break into institutions globally, with the US agency responsible for designing nuclear weapons now among those breached. In a blog post, the tech giant identified two groups supported by the Chinese government, Linen Typhoon and Violet Typhoon, as leveraging flaws in the document-sharing software that rendered customers who run it on their own networks, as opposed to in the cloud, vulnerable. Another hacking group based in China, which Microsoft calls Storm-2603, also exploited them, according to the blog. The number of companies and agencies subjected to breaches as a result of these exploits is meanwhile mounting: Hackers have used the SharePoint flaws to break into the US National Nuclear Security Administration, according to a person with knowledge of the matter who wasn't authorized to speak publicly. Bloomberg also reported Monday that systems belonging to the US Education Department, Florida's Department of Revenue and the Island General Assembly were compromised. While Microsoft has patched its software in recent days, cybersecurity researchers have already detected breaches on more than 100 servers representing 60 victims thus far, including organizations in the energy sector, consulting firms and universities. Hackers have also exploited the software to break into the systems of national governments from Europe to the Middle East, according to a person familiar with the matter. The SharePoint flaws have been used in hacks since at least July 7, said Adam Meyers, senior vice president at CrowdStrike Holdings Inc. Early exploitation resembled government-sponsored activity, and then spread more widely to include hacking that 'looks like China,' Meyers said. CrowdStrike's investigation into the campaign is ongoing, he said. Microsoft said in its blog that its investigations into other threat actors using these exploits 'is still ongoing.' The company said it has 'high confidence' that hackers will 'continue to integrate them into their attacks.' In a statement, the Chinese Embassy in Washington said China firmly opposes all forms of cyberattacks and cybercrime. 'At the same time, we also firmly oppose smearing others without solid evidence,' it said. 'We hope that relevant parties will adopt a professional and responsible attitude when characterising cyber incidents, basing their conclusions on sufficient evidence rather than unfounded speculation and accusations.' No sensitive or classified information is known to have been compromised in the attack on the National Nuclear Security Administration, the person with knowledge of the breach said. The semiautonomous arm of the Energy Department is responsible for producing and dismantling nuclear arms. Other parts of the department were also compromised. An Energy Department spokesman said by email that the SharePoint exploitation began affecting the agency on July 18, but it was limited by the fact that the department uses Microsoft's cloud. Representatives of the US Department of Education and Rhode Island legislature meanwhile didn't respond to calls and emails seeking comment. The Florida Department of Revenue said the SharePoint weaknesses were being investigated 'at multiple levels of government' but declined further comment. The hackers have also breached the systems of a US-based health-care provider and targeted a public university in Southeast Asia, according to a report from a cybersecurity firm reviewed by Bloomberg News. The report doesn't identify either entity by name, but says the hackers have attempted to breach SharePoint servers in countries including Brazil, Canada, Indonesia, Spain, South Africa, Switzerland, the UK and the US. The firm asked not to be named because of the sensitivity of the information. Hackers have stolen sign-in credentials, including usernames, passwords, hash codes and tokens, from some systems, according to a person familiar with the matter, who asked not to be identified discussing sensitive information. 'What makes this especially concerning is SharePoint's deep integration with Microsoft's platform, including their services like Office, Teams, OneDrive and Outlook, which has all the information valuable to an attacker,' he said. The cyber firm Eye Security said the flaws allow hackers to access SharePoint servers and steal keys that can let them impersonate users or services even after the server is patched. It said hackers can maintain access through backdoors or modified components that can survive updates and reboots of systems. The breaches have drawn new scrutiny to Microsoft's efforts to shore up its security after a series of high-profile failures. The firm has hired executives from places like the US government and holds weekly meetings with senior executives to make its software more resilient. The company's tech has been subject to several widespread and damaging hacks in recent years, and a 2024 US government report described the company's security culture as in need of urgent reforms. Eye Security has detected compromises on more than 100 servers representing 60 victims, including organizations in the energy sector, consulting firms and universities. Victims were also located in Saudi Arabia, Vietnam, Oman and the United Arab Emirates, according to the company. In early July, Microsoft issued patches to fix the security holes, but hackers found another way in. 'There were ways around the patches' that enabled hackers to break into SharePoint servers by tapping into similar vulnerabilities, said Vaisha Bernard, Eye Security's chief hacker and co-owner. 'That allowed these attacks to happen.' The intrusions, he said, were not targeted and instead were aimed at compromising as many victims as possible. He declined to identify the identity of organizations that had been targeted, but said they included government agencies and private companies, including 'bigger multinationals.' The victims were located in countries in North and South America, the European Union, South Africa and Australia, he said.
Bloomberg
14-07-2025
- Business
- Bloomberg
Live Q&A: The Future of US Clean Energy Under Trump's Tax Law
The major tax and spending bill signed into law by President Donald Trump is a sharp pivot in US clean energy policy. The law will impact solar, wind and electric vehicle projects across the country — even in conservative states that saw an infusion of green investments and jobs. What can investors, companies and homeowners expect? Ahead of Bloomberg Green Seattle, Akshat Rathi will speak with Ari Natter, Michelle Ma and Mark Chediak in a Live Q&A on Monday, July 14 at 1pm EDT. Bloomberg digital subscribers and Terminal clients have exclusive access to sign in and ask our team questions during the live broadcast. A recording of this conversation will be made available to listen and share.
Bloomberg
26-01-2025
- Business
- Bloomberg
Trump Seizes Wartime Powers in Battle for More Fossil Fuels
By and Ari Natter Save President Donald Trump's declaration of an energy emergency opens the door to wield sweeping Cold War-era powers and little-known authorities to fast track pipelines, expand power grids and save struggling coal plants. By invoking the country's national and economic security, the plan lays the foundation for energy projects to move forward with unprecedented speed — even if it involves encroaching on habitat for endangered species or tapping powers usually reserved for wartime.
