"The Register has a story about a Windows backdoor that waits silently in memory for a 'magic packet' before springing into action," writes Slashdot reader fred133. "No outgoing traffic, just waiting..." From the report: Like a sleeper cell awaiting activation, a never-before-seen Windows backdoor dubbed Sleepwalker waits silently in memory for one specifically crafted network packet to wake it up and deliver commands using the malware's 23-instruction language. The commands can do everything from running code directly in memory to moving data off the computer. Malware researcher Dominik Reichel discovered the passive backdoor, which also has its own command language, and detailed Sleepwalker in a technical analysis on Monday. "What makes it worth writing up is what that packet carries: not a readable command, but a short program written in a command language of the backdoor's own design," Reichel said. "Its 23 instructions cover scheduling, several ways to move data, staged file delivery and running code directly in memory. Recovering the encryption key is not enough to understand one of these programs. The internal command language must be reverse engineered as well." In addition to having its own command language, it's also notable that the remote host can be a VMware VMCI target instead of a normal network address. "Taken as a whole, the approach here is consistent with a targeted, well-resourced operation rather than an opportunistic one," Reichel wrote. The malware, hidden inside a 64-bit Windows DLL file, impersonates Microsoft's dpapi.dll, part of Windows' data protection API for protecting sensitive data. It exports the same seven functions as the real dpapi.dll, but attempts to forward calls to a file named dpapisvc.dll, which is not a real Windows component. The file also has a forged ESET Management Agent version resource, and loads via side-loading into ERAAgent.exe, the Windows executable for ESET Management Agent. After confirming that its host process is named ERAAgent.exe, Sleepwalker goes to sleep inside the computer's memory, which also helps it remain hidden from traditional anti-virus tools. Unlike most backdoors, which call back to an attacker-controlled command-and-control (C2) server and start receiving commands, Sleepwalker lies in wait, checking every packet that passes through the network looking for a specific pattern - this is called a magic packet. Once it sniffs out a packet that matches the exact pattern, the backdoor decrypts the data and treats it as a command. "Because the backdoor never sends anything out on its own and does not open any obvious listening port by default, tools that watch for connections to known-bad domains or unusual outbound traffic will not see anything unusual," Reichel wrote. "The absence of outbound connections to known-bad infrastructure does not rule out an infection, either. A machine can be fully compromised by this backdoor while producing nothing at all for a network monitor to flag."

Read more of this story at Slashdot.

A developer says AliExpress is using the browser's WebAudio API to help fingerprint users by playing inaudible audio and measuring tiny differences in how their devices process it. CyberNews reports: The developer, "laserphile," wrote on their blog that they recently ran into some weird issues with their Bluetooth headphones. They couldn't play music via their phone when, at the same time, the AliExpress website was open on their PC. The headphones, laserphile explained, support multipoint Bluetooth audio so they can be connected to the PC and phone at the same time, for instance, playing music on the phone and announcing notifications through the PC. "Shortly after loading the AliExpress homepage, audio from my phone would stop playing. Closing the AliExpress tab fixes it immediately," the developer said in the blog post. "Muting the tab/Firefox/Windows does not help, and there is no visible video, music, or other media playing on the page. This seemed suspicious enough to investigate." It turns out that Alibaba has been secretly leveraging AliExpress users' audio systems to track them and build detailed fingerprints of them. [...] The AliExpress site was using the browser's WebAudio API to run invisible sound waves at zero volume. By measuring tiny hardware differences in how each PC processed those signals, the site created a unique digital fingerprint to track devices -- without user knowledge or consent. The secret audio path froze the developer's Bluetooth connection while covertly scraping hardware memory, screen dimensions, and network data in the background. The data collection extends beyond audio. Further inspection revealed that the same scripts also measure canvas, WebGL, hardware specs, WebRTC, mouse/touch events, and automation indicators. All of these form a broad device fingerprint that is sent back to Alibaba's telemetry servers. The simplest fix is to use a privacy-focused browser such as Firefox or Brave, which can limit or block this kind of fingerprinting. Brave goes further by randomizing fingerprint data and blocking the AliExpress tracking scripts involved.

Read more of this story at Slashdot.

An anonymous reader quotes a report from the BBC: The world's oceans are hotter than ever recorded, new data suggests, as they suffer from human-caused climate change and the growing El Nino weather phenomenon. The average surface temperature of the planet's seas outside the polar regions hit 21.1C (70F) on Saturday, according to figures from the European Copernicus climate change service. That edges past the 21.09C recorded on three separate days in March 2024, and is far above average for the time of year. [...] The data is based on sea temperatures 10m (32ft 10in) below the surface, using measurements from buoys, ships and satellites, which are combined to produce a global estimate. While the margin of record is currently very small and any global estimate comes with uncertainties, scientists say its timing is particularly notable. Average worldwide sea temperatures tend to reach their yearly peak in March or April, which corresponds to the end of summer in the southern hemisphere -- and not in August. The southern hemisphere contains more of the planet's ocean surface than the northern hemisphere and so exerts a bigger influence on average sea temperatures. What is especially concerning to scientists is that the oceans are already so hot when the natural El Nino weather phenomenon is still some way off its expected peak. "The fact that we are already breaking records is an early indicator of how strong the El Nino is becoming," said Dr Jeremy Grist, senior research fellow at the National Oceanography Centre in Southampton. "All things being equal we might expect the ocean temperature record to be broken again in March [or] April 2027," he added.

Read more of this story at Slashdot.

Amazon has raised the prices of its hardware devices by as much as 60%, blaming "significant increases in memory and storage component costs." TechCrunch reports: The price explosion impacted Fire TVs, Echos, Kindles, and Eeros. One egregious example that's been cited is that of the Echo Dot, one of Amazon's cheapest smart speakers, the price of which jumped 60% overnight, from $49.99 to $79.99. Price-tracking sites like CamelCamelCamel show the stark uptick, which has previously hovered much lower. [...] The company also said that it would continue to offer occasional promotions to customers over the course of the next year. Amazon said in a statement: "The consumer electronics industry is facing significant increases in memory and storage component costs. After absorbing these increases for as long as we could, we recently adjusted pricing across our product lines."

Read more of this story at Slashdot.

The SEC is investigating the near-collapse of AI-focused hedge fund Situational Awareness, sending subpoenas to major Wall Street banks for details about the fund's trades, borrowing, and communications with lenders. The fund, founded by former OpenAI researcher Leopold Aschenbrenner, managed over $30 billion and borrowed tens of billions more before leveraged bets unraveled, forcing it to sell most of its stock portfolio to Citadel at a discount. The New York Times reports: The subpoenas asked for details on the timing of Situational Awareness's trades and for its communications with lenders about the money it was borrowing, also known as "leverage," two of those people said. The subpoenas additionally warned the banks to preserve any information regarding the San Francisco hedge fund. The S.E.C. oversees financial markets with an eye toward protecting small investors, and has brought civil cases regularly against investment firms that produced large losses. Any investigation into Situational Awareness would be at its earliest stages, and it's no guarantee that it would lead to fines or other punishment. The hedge fund has not been accused of wrongdoing. [...] Situational Awareness had a fast rise and an even quicker retreat. Founded just two years ago by Leopold Aschenbrenner, a former researcher at OpenAI, it rode the A.I. boom to soaring investment returns. To achieve those results, however, the fund relied on heavy borrowing, as well as complicated and expensive financial instruments that magnify gains -- and losses. The latter piled up quickly last month when the stock prices of publicly traded, high-flying A.I. companies dipped. At the same time, shares in more traditional technology companies -- which the hedge fund had been betting against -- rose, compounding the problem. Situational Awareness was forced into a fire sale. It wound up selling most of its stock portfolio to a rival, Citadel, at a discount.

Read more of this story at Slashdot.

The Trump administration is proposing to make permanent a $103,265 fee on certain new H-1B visas, dramatically increasing costs for employers that rely on highly skilled foreign workers in tech, education, and research. "A federal judge in June ruled that the fee was illegal and blocked the Trump administration from collecting it," reports Reuters. "A Boston-based appeals court is reviewing that decision while a different court considers whether a judge properly rejected a challenge to the fee by a major business group." From the report: Trump's temporary fee increase expires in September, one year after it was issued. The proposed rule by the U.S. Department of Homeland Security, posted in the Federal Register on Monday, would make a fee of $103,265 permanent. It could be finalized by the end of the year. The H-1B program allows U.S. employers to hire foreign workers with training in specialty fields and offers 65,000 visas annually, with another 20,000 for workers with advanced degrees, approved for three to six years. Those visas typically came with fees between $2,000 and $5,000 before Trump's order. The fee would not apply to visas granted to foreign citizens already in the United States on student visas, who make up a large share of new H-1B recipients, or to renewals of current visas.

Read more of this story at Slashdot.

Raspberry Pi has published an official guide for building a cyberdeck, leaning into a viral trend of homemade portable computers built from repurposed cases, purses, and other oddball hardware. The guide uses a Raspberry Pi 5, keyboard, battery, and Pelican-style case. The Verge reports: Raspberry Pi's head of social, Ashley Whittaker, acknowledged the cyberdeck trend today, saying "we haven't been able to get away from cyberdecks this year." Raspberry Pi has also increased its prices multiple times this year due to rising costs for RAM and other components, which could be another reason to support this growing market of active and would-be hobbyists. The 16GB version of the Raspberry Pi 5 included in the company's official cyberdeck guide got a $100 price hike in April, nearly as much as the board's original $120 price.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Taiwan has indicted nine people -- reportedly including an Nvidia senior manager and two Supermicro employees based in the country -- who allegedly helped forge documents to cover up illegal exports of high-end AI servers to China in violation of US export controls. On Monday, Reuters reported that prosecutors in Keelung did not release any names but confirmed that the suspects were "charged with breach of trust and document forgery." One suspect linked to a related case remains at large, accused of the "siphoning of funds from a distributor company involved" in helping China get access to restricted Nvidia chips. Since 2022, the US has required a license to export semiconductors to China, with the intent of protecting national security by staying ahead of China in the AI race. But after the US arrested Supermicro co-founder Wally Liaw in March for allegedly funneling $2.5 billion in restricted AI servers to China since 2024, Taiwan launched a separate probe to learn more about the scheme. Taiwan's investigation found that co-conspirators attempted to falsify documents to make it appear that 130 B300 servers were installed and in use at a Taiwan facility. But 74 of those servers "were ultimately exported and delivered to Chinese customers," Reuters reported, while the rest, 56, were intended to go to China but were blocked once Taiwanese customs officials "detected irregularities." According to Taiwan officials, Nvidia's manager and Supermicro employees "colluded with one another at various levels for enormous profit, illegally exporting high-end servers, increasing corporate compliance costs, and severely damaging our nation's international image." Supermicro said in a statement to PCMag: "Supermicro is committed to protecting our advanced technologies and intellectual property. We are working closely with Taiwanese authorities on recent events, which underscore the importance of continued collaboration across industry and government to strengthen safeguards, enhance supply chain visibility, and facilitate the enforcement of export control laws."

Read more of this story at Slashdot.

China has delayed its ambitious Chang'e 7 lunar mission until at least 2027 after scrubbing an August 24 launch. Poor weather conditions were likely a factor, with China's Manned Space Agency (CMSA) saying the decision reflects the need for "absolute safety." Scientific American reports: China and the U.S. are in a race to send humans back to the moon, a feat that that U.S. accomplished in the 1960s and that has never been achieved by any other country. Chang'e 7 is to play to a crucial part in China's ambitions: the probe is designed to search for frozen water in the Shackleton Crater, a pit that spans some 21 kilometers (13 miles) and sits beside the lunar south pole. No spacecraft has ever landed in that region, which scientists consider to be among the likeliest places to find water on the moon. Locating water that can be used by humans is vital to establishing any long-term lunar presence. NASA and China are eyeing the region to establish a crewed base -- and because this real estate is so precious, it matters who gets their first. Ars Technica notes in its reporting that the delayed launch was "most likely" due to Typhoon Narra, "which has 45 mph winds (equivalent to a moderate Tropical Storm) and continues to meander around in the waterway separating Hainan Island, where the spaceport is located, and mainland China." As for why the next launch window won't open until next February or March? "It likely is a combination of factors, including sunlight conditions in polar landing zones as well as the mission plan that requires a 90-day lunar orbit reconnaissance before landing," reports Ars. There's also a possibility, albeit an unlikely one, that "some technical issue was discovered at the last minute with either the complex Chang'e 7 payload, or the rocket."

Read more of this story at Slashdot.

The FDA has cleared the first Alzheimer's blood test for symptomatic patients as young as 40. The test measures amyloid and tau biomarkers from a single blood draw and identified positive biomarkers with 97.6% accuracy in a validation study. New Atlas reports: PrecivityAD2 is a single blood test that quickly assesses the proteins amyloid and tau, using mass spectrometry to measure plasma AB42/40 and p-tau217/np-tau217. The results are then scored, qualifying as negative, likely positive, or positive for AD. "Just over a year ago, there were no FDA-cleared blood tests for Alzheimer's, and now we have three," Isobel Coleman, chief executive officer of the Alzheimer's Drug Discovery Foundation (ADDF), said in a statement. "This is a proof point that sustained, early investment in translational science plays a catalytic role in moving promising ideas from the lab to patients." In a recent clinical validation study, 1,142 symptomatic adults were tested using PrecivityAD2. The process accurately identified 97.6% of positive biomarkers. What's more, the results remained consistent even in patients with comorbidities like chronic kidney disease and diabetes, which can distort plasma amyloid samples. It's worth noting that the test isn't intended for general health screenings, but for patients who already show some cognitive decline. "As PrecivityAD2 and tools like it move further into clinical practice, they will enable earlier detection, sharpen clinical trials, and build the foundation for precision medicine and combination therapies," Coleman added.

Read more of this story at Slashdot.

Two humanoid robots competing at the World Humanoid Robot Games in Beijing on Saturday ran the 100-meter dash faster than Usain Bolt's 9.58-second world-record time. "[T]he Tiangong Ultra humanoid robot completed the 100-meter dash in 9.39 seconds during a preliminary heat," reports Engadget. "Developed by Beijing Humanoid Robot Innovation Center, the record-holding robot overtook Honor's Lightning robot, which completed the sprint in 9.47 seconds. From the report: Despite the impressive finish times, don't expect these humanoid robots to be used for any commercial purposes yet. After their sprints, they slammed directly into pads and some even required human assistance to be stretchered off the course. However, it's still a major improvement from last year's inaugural World Humanoid Robot Games, where the Tiangong Ultra won the 100-meter dash in 21.5 seconds. Beijing has also hosted a humanoid robot half-marathon, where Honor's Lightning won in 50 minutes and 26 seconds, which also beat the pace of another human world record. "The World Humanoid Robot Games in Beijing kicked off August 22 and will run until the 26, hosting thousands of robot participants competing in more than just track and field events, including soccer, table tennis and boxing," adds Engadget.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Gizmodo: Dr. Dre, the pioneering rapper and seven-time Grammy-winning producer behind hit songs like Tupac's "California Love" and Eminem's "The Real Slim Shady," is very much pro using artificial intelligence tools to make music. In an interview with the New York Times, Dr. Dre and Interscope Records co-founder Jimmy Iovine spoke about artificial intelligence's recent foray into music production, with the producer characterizing those who oppose AI song generation tools as "afraid of learning new things." "I don't see it as a threat. I think the only people that see it as a threat are the people who have trouble creating," Dr. Dre said. "I had a discussion with a few people a few days ago. They were against AI, and I'm like, 'OK, you sound like the person that would have been against the drum machine when it came out.' Or synthesizers, right?" [...] Iovine, the music executive and Dr. Dre's partner in Beats by Dre, for his part, says he doesn't "see the downside at all." "There will be some crappy music. There's crappy music now," Iovine told the NYT. "In the studio, when gifted people have AI, they're going to make better records." Dr. Dre said he uses AI in producing "as a tool to see what it would do with what I just did." The award-winning producer also said he is definitely not alone among his peers in his stance on AI either: many producers use AI but fear to admit it. Iovine calls them "closet AI producers," and says Timbaland, the four-time Grammy-winning singer-producer behind a long list of hits like "Promiscuous" with Nelly Furtado, is also one.

Read more of this story at Slashdot.