Printer

Brother Printer Bug In 689 Models Exposes Millions To Hacking (securityweek.com) 54

An anonymous reader quotes a report from SecurityWeek: Hundreds of printer models from Brother and other vendors are impacted by potentially serious vulnerabilities discovered by researchers at Rapid7. The cybersecurity firm revealed on Wednesday that its researchers identified eight vulnerabilities affecting multifunction printers made by Brother. The security holes have been found to impact 689 printer, scanner and label maker models from Brother, and some or all of the flaws also affect 46 Fujifilm Business Innovation, five Ricoh, six Konica Minolta, and two Toshiba printers. Overall, millions of enterprise and home printers are believed to be exposed to hacker attacks due to these vulnerabilities.

The most serious of the flaws, tracked as CVE-2024-51978 and with a severity rating of 'critical', can allow a remote and unauthenticated attacker to bypass authentication by obtaining the device's default administrator password. CVE-2024-51978 can be chained with an information disclosure vulnerability tracked as CVE-2024-51977, which can be exploited to obtain a device's serial number. This serial number is needed to generate the default admin password. "This is due to the discovery of the default password generation procedure used by Brother devices," Rapid7 explained. "This procedure transforms a serial number into a default password. Affected devices have their default password set, based on each device's unique serial number, during the manufacturing process."

Having the admin password enables an attacker to reconfigure the device or abuse functionality intended for authenticated users. The remaining vulnerabilities, which have severity ratings of 'medium' and 'high', can be exploited for DoS attacks, forcing the printer to open a TCP connection, obtain the password of a configured external service, trigger a stack overflow, and perform arbitrary HTTP requests. Six of the eight vulnerabilities found by Rapid7 can be exploited without authentication.
Brother has patched most of the flaws, but CVE-2024-51978 requires a new manufacturing process to fully resolve, which will apply only to future devices.
Printer

Ask Slashdot: Printer Recommendation For Family With Kids? 92

jalvarez13 writes: My venerable HP Officejet Pro 8600 Plus is showing its age and it has become expensive to operate due to the cost of the original cartridges. I tried some alternative cartridges but the printer rejects them.

Now that schools still require kids to print stuff at home (mine are in 2nd and 4th grade), and my wife also needs to use the printer, I think it may be wise to invest in a good-quality printer that has a lower cost per page (maybe laser?).

In that context, I'd love to have unbiased information about brand quality, printing technology, cost efficiency, and other factors that I might have missed. Any thoughts?
AI

Applebee's and IHOP Plan To Introduce AI in Restaurants (msn.com) 56

The company behind Applebee's and IHOP plans to use AI in its restaurants and behind the scenes to streamline operations and encourage repeat customers. From a report: Dine Brands is adding AI-infused tech support for all of its franchisees, as well as an AI-powered "personalization engine" that helps restaurants offer customized deals to diners, said Chief Information Officer Justin Skelton. The Pasadena, Calif.-based company, which also owns Fuzzy's Taco Shop and has over 3,500 restaurants across its brands, is taking a "practical" approach to AI by focusing on areas that can drive sales, Skelton said.

Streamlining tech support for Dine Brands' more than 300 franchisees is important because issues like a broken printer take valuable time away from actually managing restaurants, Skelton said. Dine Brands' AI tool, which was built with Amazon's Q generative AI assistant, allows the company's field technology services staff to query its knowledge base for tech help using plain English, rather than needing to manually search for answers.

Desktops (Apple)

Endangered Classic Mac Plastic Color Returns As 3D-Printer Filament (arstechnica.com) 53

An anonymous reader quotes a report from Ars Technica: On Tuesday, classic computer collector Joe Strosnider announced the availability of a new 3D-printer filament that replicates the iconic "Platinum" color scheme used in classic Macintosh computers from the late 1980s through the 1990s. The PLA filament (PLA is short for polylactic acid) allows hobbyists to 3D-print nostalgic novelties, replacement parts, and accessories that match the original color of vintage Apple computers. Hobbyists commonly feed this type of filament into commercial desktop 3D printers, which heat the plastic and extrude it in a computer-controlled way to fabricate new plastic parts.

The Platinum color, which Apple used in its desktop and portable computer lines starting with the Apple IIgs in 1986, has become synonymous with a distinctive era of classic Macintosh aesthetic. Over time, original Macintosh plastics have become brittle and discolored with age, so matching the "original" color can be a somewhat challenging and subjective experience.
Strosnider said he paid approximately $900 to develop the color. "Rather than keeping the formulation proprietary, he arranged for Polar Filament to make the color publicly available [for $21.99 per kilogram]," adds Ars.
Windows

'The People Stuck Using Ancient Windows Computers' (bbc.com) 137

The BBC visits "the strange, stubborn world of obsolete Windows machines." Even if you're a diehard Apple user, you're probably interacting with Windows systems on a regular basis. When you're pulling cash out, for example, chances are you're using a computer that's downright geriatric by technology standards. (Microsoft declined to comment for this article.) "Many ATMs still operate on legacy Windows systems, including Windows XP and even Windows NT," which launched in 1993, says Elvis Montiero, an ATM field technician based in Newark, New Jersey in the US. "The challenge with upgrading these machines lies in the high costs associated with hardware compatibility, regulatory compliance and the need to rewrite proprietary ATM software," he says. Microsoft ended official support for Windows XP in 2014, but Montiero says many ATMs still rely on these primordial systems thanks to their reliability, stability and integration with banking infrastructure.
And a job listing for an IT systems administrator for Germany's railway service "were expected to have expertise with Windows 3.11 and MS-DOS — systems released 32 and 44 years ago, respectively. In certain parts of Germany, commuting depends on operating systems that are older than many passengers." It's not just German transit, either. The trains in San Francisco's Muni Metro light railway, for example, won't start up in the morning until someone sticks a floppy disk into the computer that loads DOS software on the railway's Automatic Train Control System (ATCS). Last year, the San Francisco Municipal Transit Authority (SFMTA) announced its plans to retire this system over the coming decade, but today the floppy disks live on.
Apple is "really aggressive about deprecating old products," M. Scott Ford, a software developer who specialises in updating legacy systems, tells the BBC. "But Microsoft took the approach of letting organisations leverage the hardware they already have and chasing them for software licenses instead. They also tend to have a really long window for supporting that software."

And so you get things like two enormous LightJet printers in San Diego powered by servers running Windows 2000, says photographic printer John Watts: Long out of production, the few remaining LightJets rely on the Windows operating systems that were around when these printers were sold. "A while back we looked into upgrading one of the computers to Windows Vista. By the time we added up the money it would take to buy new licenses for all the software it was going to cost $50,000 or $60,000 [£38,000 to £45,000]," Watts says. "I can't stand Windows machines," he says, "but I'm stuck with them...."

In some cases, however, old computers are a labour of love. In the US, Dene Grigar, director of the Electronic Literature Lab at Washington State University, Vancouver, spends her days in a room full of vintage (and fully functional) computers dating back to 1977... She's not just interested in early, experimental e-books. Her laboratory collects everything from video games to Instagram zines.... Grigar's Electronic Literature Lab maintains 61 computers to showcase the hundreds of electronic works and thousands of files in the collection, which she keeps in pristine condition.

Grigar says they're still looking for a PC that reads five-and-a-quarter-inch floppy disks.
Printer

Starbucks Opens Its First 3D-Printed Store (fastcompany.com) 45

What can you build with a 3D printer? Starbucks just printed itself a new store — a drive-through location in the southern tip of Texas.

Fast Company says it's a store that "looks more like the future of construction than your average café." Built with layers of concrete piped out by a giant robotic printer, the 1,400-square-foot structure is part of the company's ongoing effort to modernize operations and trim costs... Peri-3D, a German company, used a giant 3D printer to pump out layers of concrete mixture to create the structure. According to the Texas Department of Licensing and Regulation, the cost for building the small scale coffee shop was about $1.2 million...

Of course, the new method is a first for the brand. And builders say, the more they use the technology, the more efficient they are at it. In Georgetown, Texas, an entire community of 100 homes was recently built using 3D-printing. The company who built the community, Lennar, says they're seeing costs drop with each build. Stuart Miller, chairman and co-CEO of Lennar, told CNBC earlier this year that the construction company says their costs and cycle time go down "by half" by adopting 3D-printing. "This is significant improvement in evolving a housing market that has the ability to change over time and being more adaptable and more functional in providing affordable and attainable housing for a broader swath of the market," said Miller...

3D-printing is also much faster, meaning that projects can be completed in a fraction of the time, potentially drastically cutting labor costs. According to the World Economic Forum, 3D-printing can cost just 30% of what building structures the old-fashioned way costs.

The article offers more examples of 3D-printed buildings. ("in Japan, a 3D-printed train station was just erected. And Peri-3D, itself, has completed at least 15 construction projects, including residential buildings in Europe and Germany.")

3D-printing has even been incorporated into some restaurants for customizing food, the article notes, "but building restaurants with the technology is a brand-new development."

Although not everyone seems convinced. Instagram comments on a picture of Starbucks' new 3D-printed drive-through characterized its aesthetic as "dirty", "fugly", "violently hideous", and "like hot garbage".
HP

HP Escapes Customer Payouts in Printer-Bricking Lawsuit Settlement (arstechnica.com) 44

A United States District Court judge has approved a settlement between HP and customers who sued the company for firmware updates that prevented printers from working with non-HP ink cartridges.

The class-action lawsuit, filed in December 2020, alleged HP "wrongfully compels users" to buy only HP ink by issuing updates that block competitors' cartridges. Under the settlement, HP admits no wrongdoing and won't pay monetary damages to affected customers, though it will pay $5,000 each to the three plaintiffs and $725,000 in attorneys' fees.

HP has agreed to allow users of specific printer models impacted by the November 2020 update to decline firmware updates containing "Dynamic Security" features -- HP's term for technology that blocks cartridges using non-HP chips. The settlement applies only to 21 specific printer models, leaving numerous other HP printers subject to Dynamic Security restrictions. HP has previously paid millions in similar cases in Europe, Australia, and California related to printer bricking.
Printer

Microsoft: Recent Windows Updates Make USB Printers Print Random Text (bleepingcomputer.com) 65

Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. From a report: The known issue affects Windows 10 (version 22H2) and Windows 11 (versions 22H2 and 23H2), but according to an update to the Windows release health dashboard, the latest Windows 11 24H2 is not impacted.

"After installing the January 2025 Windows preview update (KB5050092), released January 29, 2025, or later updates, you might observe issues with USB connected dual-mode printers that support both USB Print and IPP Over USB protocols," Redmond explains. "You might observe that the printer unexpectedly prints random text and data, including network commands and unusual characters."

On affected systems, users will often see erroneously printed text that begins with the header "POST /ipp/print HTTP/1.1," followed by other IPP (Internet Printing Protocol) related issues headers. These printing issues are more frequent when the printer is turned on or reconnected after being disconnected. Affected users will observe the printer unexpectedly printing when the print spooler sends IPP protocol messages to the printer and the printer driver is installed on the Windows device.

Printer

Firmware Update Bricks HP Printers, Makes Them Unable To Use HP Cartridges (arstechnica.com) 72

An anonymous reader quotes a report from Ars Technica: HP, along with other printer brands, is infamous for issuing firmware updates that brick already-purchased printers that have tried to use third-party ink. In a new form of frustration, HP is now being accused of issuing a firmware update that broke customers' laser printers -- even though the devices are loaded with HP-brand toner. The firmware update in question is version 20250209, which HP issued on March 4 for its LaserJet MFP M232-M237 models. Per HP, the update includes "security updates," a "regulatory requirement update," "general improvements and bug fixes," and fixes for IPP Everywhere. Looking back to older updates' fixes and changes, which the new update includes, doesn't reveal anything out of the ordinary. The older updates mention things like "fixed print quality to ensure borders are not cropped for certain document types," and "improved firmware update and cartridge rejection experiences." But there's no mention of changes to how the printers use or read toner.

However, users have been reporting sudden problems using HP-brand toner in their M232-M237 series printers since their devices updated to 20250209. Users on HP's support forum say they see Error Code 11 and the hardware's toner light flashing when trying to print. Some said they've cleaned the contacts and reinstalled their toner but still can't print. "Insanely frustrating because it's my small business printer and just stopped working out of nowhere[,] and I even replaced the tone[r,] which was a $60 expense," a forum user wrote on March 8.
HP said in a statement: "We are aware of a firmware issue affecting a limited number of HP LaserJet 200 Series devices and our team is actively working on a solution. For assistance, affected customers can contact our support team at: https://support.hp.com." It's unclear how widespread the problems are.
Printer

Brother Denies Bricking Printers Using Third-Party Ink (arstechnica.com) 78

Brother has rejected claims that its firmware updates intentionally disable printer functionality when third-party cartridges are installed. The controversy emerged after a YouTube video by Louis Rossman, which has garnered over 160,000 views, alleged the company had joined competitors in anti-consumer practices. The allegations stem from online reports, including a 2022 Reddit post claiming firmware update W1.56 disabled automatic color registration on a Brother MFC-3750 using non-Brother toner, rendering it "effectively non-functional."

In a statement to Ars Technica, Brother explicitly denied these accusations: "Please be assured that Brother firmware updates do not block the use of third-party ink in our machines." The company said it recommends genuine supplies for "optimal performance" and performs a "Brother Genuine check" during troubleshooting, which may have caused "misunderstanding."
Printer

Brother Accused of Locking Down Third-Party Printer Ink Cartridges Via Forced Firmware Updates (tomshardware.com) 119

Fabled RepairTuber and right-to-repair crusader Louis Rossmann accuses Brother of implementing forced firmware updates that block third-party ink cartridges and remove older firmware versions from support portals. These updates also prevent color calibration with aftermarket ink, rendering cheaper cartridges unusable. Tom's Hardware reports: As mentioned in the intro, Rossmann has seen two big issues emerge for Brother printer users with recent firmware updates. Firstly, models that used to work with aftermarket ink, might refuse to work with the same cartridges in place post-update. Brother doesn't always warn about such updates, so Rossmann says that it is important to keep your printer offline, if possible. Moreover, he reckons it is best to keep your printers offline, and "I highly suggest that you turn off your updates," in light of these anti-consumer updates. Another anti-consumer problem Rossmann highlights affects color devices. He cites reports from a Brother MFP user who noticed color calibration didn't work with aftermarket inks post-update. They used to work, and if the update doesn't allow the printer to calibrate with this aftermarket ink the cheaper carts become basically unusable.

Making matters worse, and an aspect of this tale which seems particularly dastardly, Rossmann says that older printer firmware is usually removed from websites. This means users can't roll back when they discover the unwanted new 'features' post-update. While he admittedly can't do much about these printer industry machinations, Rossmann says it feels important to document these changes which show that property rights for individuals are disappearing.
Additional info about Brother's issues are available on Rossmann's wiki.
Printer

Fast New 3D Printing Technique Shines Holograms into Resin (3dprintingindustry.com) 14

Can a new 3D-printing technique shorten 3D printing times to just seconds? A team of researchers in Europe has modified Tomographic Volumetric Additive Manufacturing, which can "create entire objects in one shot by shining light patterns into liquid resin," according to the 3D Printing Industry blog. (The liquid resin then solidifies when the light intensity is high enough...) While this approach can fabricate support-free, micro-scale parts within tens of seconds, it is "highly inefficient." This is because under 1% of the encoded light reaches the resin vial. Conventional TVAM can also lead to unwanted distortions and poor resolution due to light blurring and projection artifacts. To address these limitations, the researchers developed HoloVAM, a new technique that uses a 3D hologram instead of conventional volumetric light projections. This approach reportedly boosts light efficiency by 20 times, resulting in faster and more accurate 3D printing.

According to their paper, published in Nature Communications, HoloVAM successfully fabricated several millimeter-scale objects in under 60 seconds with fine details as small as 31 micrometers...

They believe this new approach offers value for medical bioprinting applications, thanks to HoloVAM's use of "self-healing beams." These can generate and retain their shape when passing through materials, which is particularly valuable when 3D printing with cell-laden bio-resins and hydrogels.

Thanks to Slashdot reader BizarreVR for sharing the news.
HP

HP Deliberately Adds 15 Minutes Waiting Time For Telephone Support Calls (theregister.com) 165

HP will impose a minimum 15-minute wait time for consumer PC and printer support calls in five European countries, seeking to push customers toward digital channels, according to internal documents seen by The Register. The policy, implemented February 18, affects retail customers in Britain, Ireland, France, Germany and Italy. The outlet added that it anticipates "more countries could be added."
Printer

The World's Most Printed 3D Model, 3DBenchy, Is Now Public Domain (hackaday.com) 23

Hackaday reports: Good news for everyone who cannot get enough from improbably shaped boats that get referred to as a bench: the current owner (NTI Group) of the copyright has announced that 3DBenchy has been released into the public domain. This comes not too long after Prusa's Printables website had begun to purge all derived models to adhere to the 'no derivatives' license. According to NTI, the removal of these derived models was not requested by NTI, but by a third-party report, unbeknownst to NTI or the original creator of the model. Recognizing its importance to the community, 3DBenchy can now be downloaded & modified freely.

NTI worked together with the original creator [Daniel Norée] and former Creative Tools CEO [Paulo Kiefe] to transition 3DBenchy and the associated website to the public domain
More details at Tom's Hardware and Fabbaloo.
Printer

How 3D-Printed Parts Changed the NASCAR Cup Series (popsci.com) 40

Longtime Slashdot reader schwit1 shares a report from Popular Science: In 2021, NASCAR unveiled its Next Gen platform that included a number of rule changes from the previous iteration. Now fully symmetrical and using composite body panels instead of metal, the latest NASCAR vehicles are more like the street versions of the Chevrolet Camaro, the Ford Mustang, and the Toyota TRD Camry. Race car driving isn't an inexpensive sport, and one of the goals for the Next Gen platform was to reduce operating costs and create parity across the board. Technique Chassis, the sole chassis manufacturer for the NASCAR Cup Series, builds a modular offering in three parts. As a result, everyone is starting with the same platform, and finding a competitive advantage is in the tiniest details. One smart way to differentiate from the competition is 3D-printed parts. But this isn't your hobbyist level 3D printing.

Minnesota-based Stratasys specializes in "additive manufacturing," the process of creating an object by building it one layer at a time. Stratasys Senior Global Director of Automotive & Mobility Fadi Abro explains that this term is synonymous with 3D printing. However, the industry often reserves that description for hobby-level projects on smaller, non-industrial printers, while additive manufacturing represents robust industrial solutions. Additive manufacturing is the exact inverse of subtractive manufacturing, which requires cutting away at a solid chunk of material to achieve a final product. In art terms, additive manufacturing would be like sculpting with modeling clay while subtractive is akin to carving a shape from a block of marble. As it relates to NASCAR, Stratasys provides parts like ducts, covers, brackets, and tubing. Together with the racing organization, Stratasys reviews the current driver needs and makes recommendations for other parts and modifications. [...]

The kind of printers Stratasys builds aren't the type you buy at your local electronics store, either. Each industrial-grade 3D printer costs anywhere from $20,000 to $600,000. Using this kind of equipment isn't without precedent, and builds at SEMA's annual extravaganza feature 3D parts we wouldn't have dreamed of a few years ago. [...] In the past few months, Stratasys has been on a roll, signing an extension to its 20-year partnership with the Joe Gibbs Racing team and earning the title of "Official 3D Printing Partner of NASCAR." Competition for this market continues to heat up, however, as there are startups and legacy companies pushing hard. Around the world, 3D printing companies abound. Stratasys has one major factor on its side: 35 years of experience. What's new is that today's printing is more accurate, it's faster, the materials are more robust, Abro says.
"I think what's changed drastically over the past five to seven years has been all about material development," Abro explains. "We're seeing materials that are just incredible, whether it's how resistant to heat they are or how strong they are compared to how much they weigh."

"It's better, faster, cheaper. It's faster to print something than to mill it, and then it's certainly cheaper in a multitude of different ways. Number one, there's not as much skill required for 3D printing as there is in CNC machining; you need a more traditional manufacturing method."
Printer

Bambu Labs' 3D Printer 'Authorization' Update Beta Sparks Concerns (theverge.com) 47

Slashdot reader jenningsthecat writes: 3D printer manufacturer Bambu Labs has faced a storm of controversy and protest after releasing a security update which many users claim is the first step in moving towards an HP-style subscription model.
Bambu Labs responded that there's misinformation circulating online, adding "we acknowledge that our communication might have contributed to the confusion." Bambu Labs spokesperson Nadia Yaakoubi did "damage control", answering questions from the Verge: Q: Will Bambu publicly commit to never requiring a subscription in order to control its printers and print from them over a home network?

A: For our current product line, yes. We will never require a subscription to control or print from our printers over a home network...

Q: Will Bambu publicly commit to never putting any existing printer functionality behind a subscription?

Yes...

Bambu's site adds that the security update "is beta testing, not a forced update. The choice is yours. You can participate in the beta program to help us refine these features, or continue using your current firmware."

Hackaday notes another wrinkle: This follows the original announcement which had the 3D printer community up in arms, and quickly saw the new tool that's supposed to provide safe and secure communications with Bambu Lab printers ripped apart to extract the security certificate and private key... As the flaming wreck that's Bambu Lab's PR efforts keeps hurtling down the highway of public opinion, we'd be remiss to not point out that with the security certificate and private key being easily obtainable from the Bambu Connect Electron app, there is absolutely no point to any of what Bambu Lab is doing.
The Verge asked Bambu Labs about that too: Q: Does the private key leaking change any of your plans?

No, this doesn't change our plans, and we've taken immediate action.

Bambu Labs had said their security update would "ensure only authorized access and operations are permitted," remembers Ars Technica. "This would, Bambu suggested, mitigate risks of 'remote hacks or printer exposure issues' and lower the risk of 'abnormal traffic or attacks.'" This was necessary, Bambu wrote, because of increases in requests made to its cloud services "through unofficial channels," targeted DDOS attacks, and "peaks of up to 30 million unauthorized requests per day" (link added by Bambu).
But Ars Technica also found some skepticism online: Repair advocate Louis Rossmann, noting Bambu's altered original blog post, uploaded a video soon after, "Bambu's Gaslighting Masterclass: Denying their own documented restrictions"... suggesting that the company was asking buyers to trust that Bambu wouldn't enact restrictive policies it otherwise wrote into its user agreements.
And Ars Technica also cites another skeptical response from a video posted by open source hardware hacker and YouTube creator Jeff Geerling: "Every IoT device has these problems, and there are better ways to secure things than by locking out access, or making it harder to access, or requiring their cloud to be integrated."
Printer

Proposed New York Law Could Require Background Checks Before Buying 3D Printers (news10.com) 225

A new law is being considered by New York's state legislature, reports a local news outlet, which "if passed, will require anyone buying a 3D printer to pass a background check. If you can't legally own a firearm, you won't be able to buy one of these printers..." It is illegal to print most gun parts in New York. Attorney Greg Rinckey believes the proposal is an overreach. "I think this is also gonna face some constitutional problems. I mean, it really comes down to a legal parsing of what are you printing and at what point is it technically a firearm...?"

[Ascent Fabrication owner Joe] Fairley thinks lawmakers should shift their focus on those partial gun kits that produce the metal firing components. Another possibility is to require printer manufacturers to install software that prevents gun parts from being printed. "They would need to agree on some algorithm to look at the part and say nope, that is a gun component, you're not allowed to print that part somehow," said Fairley. "But I feel like it would be extremely difficult to get to that point."

Printer

Xerox To Buy Printer Maker Lexmark From Chinese Owners in $1.5 Billion Deal (xerox.com) 30

Xerox has agreed to acquire printer maker Lexmark for $1.5 billion, bringing the Kentucky-based company back under U.S. ownership after seven years of Chinese control.

The deal, announced Monday, will be financed through cash and debt, creating a vertically integrated printing equipment manufacturer and service provider. Lexmark, formed from IBM in 1991, was previously acquired by Chinese investors including Ninestar for $2.54 billion in 2016. The merger comes as Xerox faces declining equipment sales and a 50% year-to-date stock drop, with its market value at just over $1 billion.
Wireless Networking

Russian Spies Jumped From One Network To Another Via Wi-Fi (wired.com) 18

"Steven Adair, of cybersecurity firm Veloxity, revealed at the Cyberwarcon security conference how Russian hackers were able to daisy-chain as many as three separate Wi-Fi networks in their efforts to attack victims," writes Longtime Slashdot reader smooth wombat. Wired reports: Adair says that Volexity first began investigating the breach of its DC customer's network in the first months of 2022, when the company saw signs of repeated intrusions into the customer's systems by hackers who had carefully covered their tracks. Volexity's analysts eventually traced the compromise to a hijacked user's account connecting to a Wi-Fi access point in a far end of the building, in a conference room with external-facing windows. Adair says he personally scoured the area looking for the source of that connection. "I went there to physically run down what it could be. We looked at smart TVs, looked for devices in closets. Is someone in the parking lot? Is it a printer?" he says. "We came up dry."

Only after the next intrusion, when Volexity managed to get more complete logs of the hackers' traffic, did its analysts solve the mystery: The company found that the hijacked machine which the hackers were using to dig around in its customer's systems was leaking the name of the domain on which it was hosted -- in fact, the name of another organization just across the road. "At that point, it was 100 percent clear where it was coming from," Adair says. "It's not a car in the street. It's the building next door." With the cooperation of that neighbor, Volexity investigated that second organization's network and found that a certain laptop was the source of the street-jumping Wi-Fi intrusion. The hackers had penetrated that device, which was plugged into a dock connected to the local network via Ethernet, and then switched on its Wi-Fi, allowing it to act as a radio-based relay into the target network. Volexity found that, to break into that target's Wi-Fi, the hackers had used credentials they'd somehow obtained online but had apparently been unable to exploit elsewhere, likely due to two-factor authentication.

Volexity eventually tracked the hackers on that second network to two possible points of intrusion. The hackers appeared to have compromised a VPN appliance owned by the other organization. But they had also broken into the organization's Wi-Fi from another network's devices in the same building, suggesting that the hackers may have daisy-chained as many as three networks via Wi-Fi to reach their final target. "Who knows how many devices or networks they compromised and were doing this on," says Adair. Volexity had presumed early on in its investigation that the hackers were Russian in origin due to their targeting of individual staffers at the customer organization focused on Ukraine. Then in April, fully two years after the original intrusion, Microsoft warned of a vulnerability in Windows' print spooler that had been used by Russia's APT28 hacker group -- Microsoft refers to the group as Forest Blizzard -- to gain administrative privileges on target machines. Remnants left behind on the very first computer Volexity had analyzed in the Wi-Fi-based breach of its customer exactly matched that technique. "It was an exact one-to-one match," Adair says.

United Kingdom

'Operating in the Stone Age': NHS Staff's Daily Struggle With Outdated Tech 113

The Financial Times: In the paediatric centre at one of London's largest hospitals, doctors are confounded each day by a ward computer that is not connected to a printer. The computer is used for managing the daily list of patients. Doctors can only access and update the list, using one shared account. So twice a day, two doctors on the ward said one of them had to log in to this computer, update the patient list, send the list to themselves via NHS email, and then log in to another nearby computer to print it off for the team. "I am at a top London hospital and yet at times I feel as though we are operating in the Stone Age," said one paediatrician on the ward.

Tackling the frustrating delays caused by outdated technology [Editor's note: non-paywalled link] is one of health secretary Wes Streeting and Prime Minister Sir Keir Starmer's core missions, having vowed to shift the service "from an analogue to a digital NHS." The monumental task of moving the world's largest publicly funded health service into the digital age is not lost on doctors working on the frontline of the NHS. While many sectors of the economy have been "radically reshaped" by technology in recent years, a landmark report into the state of the health service in England last month concluded that the NHS stood "in the foothills of digital transformation."

But doctors and nurses point out that the basic infrastructure needs to be brought up to a minimum standard, given significant regional variations between hospitals, before politicians extol the virtues of cutting-edge tech. "Some of us just want the printers to work," noted one NHS hospital doctor. "The complete flip-a-coin nature of how equipped your hospital is is mind-boggling," they added. "I have worked in hospitals that are at least 12 years behind others." A report published in 2022 by the British Medical Association, the UK's main doctors' union, estimated that doctors in England lost 13.5mn working hours a year as a consequence of "inadequate IT systems and equipment." One reason for the outdated infrastructure is that the country has spent almost $48bn less than its peers -- such as Germany, France, Australia -- on health assets since the 2010s, according to a government-commissioned study by Lord Ara Darzi last month.

Slashdot Top Deals