-- Leo's gemini proxy
-- Connecting to gemini.tuxmachines.org:1965...
-- Connected
-- Sending request
-- Meta line: 20 text/gemini;lang=en-GB
Tux Machines
Posted by Roy Schestowitz on Sep 20, 2022
> Allegedly, an eighteen-year-old spammed an employee with two-factor authentication via push notifications on an employee with a known password. They got into the VPN and scanned for servers, found a file share without any access controls, and a script that could access break-the-glass credentials. With the highest level of credentials available, they then got effective root access to Slack, AWS, Google Suite, and active directory at Uber.
> Their vision: Rather than scrolling through websites or apps, people will soon stroll virtually through a three-dimensional version of the internet dubbed the "metaverse" — a digital landscape of sorts where users can work, buy things or meet their friends, and where physical and digital realities converge.
> The company told Reuters that it's investigating the breach and claims no sensitive user data had been accessed. Until the company — or the [cracker] — provide more updates, we won't really know what happened or why the hacker went after the ride-sharing giant. But it's clear, at least, that it was not a joke.
> The SEC’s order finds that, beginning in fiscal year 2019, VMware began delaying the delivery of license keys on some sales orders until just after quarter-end so that it could recognize revenue from the corresponding license sales in the following quarter. According to the SEC’s order, VMware shifted tens of millions of dollars in revenue into future quarters, building a buffer in those periods and obscuring the company’s financial performance as its business slowed relative to projections in fiscal year 2020. Although VMware publicly disclosed that its backlog was “managed based upon multiple considerations,” it did not reveal to investors that it used the backlog to manage the timing of the company’s revenue recognition.
> The company was charged with misleading investors about its order backlog management practices, which the agency said enabled it to push revenue into future quarters by delaying product deliveries to customers, thereby concealing the company's slowing performance relative to its projections.
> Without admitting or denying the findings in the SEC's order, VMware consented to a cease-and-desist order and will pay an $8 million penalty, the SEC said. VMware confirmed in a statement of its own that it reached a settlement with the SEC and agreed to pay the penalty without admitting or denying the SEC’s findings.
> VMware misled investors about its order backlog management processes that allowed it to roll revenue into future quarters by postponing product delivery dates to customers to conceal slowing sales relative to forecasts.
> Without admitting or denying the findings in the SEC's order, VMware consented to a cease-and-desist order and to pay an $8 million penalty, the SEC said.
> "VMware shifted tens of millions of dollars in revenue into future quarters, building a buffer in those periods and obscuring the company’s financial performance as its business slowed relative to projections in fiscal year 2020," the SEC said.
> In May this year, VMware announced that it had reached a deal to be acquired by Broadcom Inc. for $61 billion.
> In a statement, Rockstar said confidential information had also been taken by the attacker. "At this time, we do not anticipate any disruption to our live game services nor any long-term effect on the development of our ongoing projects," the company added.
> Take-Two Interactive Software, the parent company of Rockstar, issued an SEC filing notifying its investors of the attack.
> Take, for instance, the Kin, a social networking device which Microsoft spent a billion dollars developing just for it to be taken off the market after two months due to poor sales.
-- Response ended
-- Page fetched on Sat Jun 1 17:12:25 2024