Category: Australia Tech News

Quick Read

• TeamViewer was targeted in a cyberattack, reportedly by the Russian group APT29.
• APT29, also referred to as “Cozy Bear,” has connections to the Russian foreign intelligence service.
• No customer information or product area was compromised.
• The incident underscores the persistent cybersecurity threats facing global organizations.

TeamViewer’s Cyberattack Ordeal

German software firm TeamViewer disclosed a cyberattack earlier this week, blaming the breach on the Russian hacker group APT29, which is also referred to as “Cozy Bear” or Midnight Blizzard. This group is infamous for its connections to Russia’s foreign intelligence agency.

Who is APT29?

APT29 is an advanced cyber espionage organization thought by Western intelligence to be working on behalf of Russia’s foreign intelligence service. This group has been associated with numerous significant cyberattacks, such as the notorious SolarWinds breach.

Previous Involvements

In March, Alphabet’s Mandiant cyber unit discovered that APT29 was trying to trick significant German political figures with phishing emails. This event highlights the group’s ongoing attempts to penetrate high-value targets.

Impact on TeamViewer

TeamViewer focuses on cloud-based technologies that facilitate remote computer access and control. They reported that hackers breached their corporate IT infrastructure, but did not reach the product environment or any customer information. This containment averted potentially disastrous outcomes for the company and its users.

Implications for Cybersecurity

This attack underscores the persistent danger presented by hacking groups backed by nation-states. Organizations globally need to continually improve their cybersecurity protocols to safeguard sensitive data and uphold the integrity of their operations.

Summary

The recent cyberattack on TeamViewer, executed by the Russian-linked hacker group APT29, highlights the ongoing and evolving threats within the digital realm. Although TeamViewer managed to control the breach, the event emphasizes the critical need for strong cybersecurity strategies for organizations worldwide.

Frequently Asked Questions: Essential Inquiries Addressed

Q: Can you explain what TeamViewer is?

TeamViewer, a German software firm, offers cloud-based solutions for remote access, control, and support across multiple computing devices.

APT29, also known as Cozy Bear, is a Russian cyber espionage group affiliated with the Russian intelligence agencies, specifically the SVR (Foreign Intelligence Service) and the FSB (Federal Security Service). This group is known for its sophisticated and persistent cyber operations targeting government, military, security, and other organizations globally, with the intent to gather intelligence and conduct cyber espionage.

APT29, also known by the names “Cozy Bear” or Midnight Blizzard, is a hacker organization suspected to be connected to Russia’s foreign intelligence service and is engaged in various cyber-espionage operations.

Q: In what way did APT29 infiltrate TeamViewer?

Group members accessed TeamViewer’s corporate IT infrastructure but did not breach the product environment or jeopardize customer information.

Q: What makes this attack important?

The assault emphasizes the ongoing risk from state-backed hacking groups and underscores the necessity for strong cybersecurity protocols for organizations globally.

Q: What measures can organizations take to safeguard themselves?

Organizations ought to allocate resources toward robust cybersecurity strategies, consistent monitoring, employee education on phishing threats, and prompt updates of software and systems.

Quick Read

• Meta might prevent access to news content in Australia if mandated to pay licensing fees.
• In 2023, the company implemented a comparable measure in Canada.
• Meta has current agreements with Australian media, however, it will not extend them past 2024.
• Australia’s assistant treasurer is contemplating the implementation of the law.
• Significant Australian television networks are reducing their workforce as a result of revenue declines linked to the expiration of agreements with Meta.
• Meta argues that it adheres to other laws and claims it would follow media laws in a different manner.

Background

Meta, the owner of Facebook, is contemplating the removal of news content from its Australian platform if the government mandates licensing fees. This information was disclosed by Mia Garlick, Meta’s regional policy director, at a parliamentary session.

Political and Regulatory Environment

The possible action arises from an untested law enacted in 2021, which gives the Australian government the authority to impose fees on US tech companies for linking to domestic media content. Garlick noted that Meta is awaiting Canberra’s decision on whether this law will be put into effect.

Comparisons to Canada

This strategy reflects Meta’s response in Canada in 2023 when a comparable law was enacted. The technology corporation adopted a stringent position by restricting news sharing to evade the licensing fees.

Effect on Media in Australia

Although Meta had earlier established agreements with Australian media organizations such as News Corp and the ABC, these contracts will conclude by the end of 2024, and Meta does not plan on extending them. As a result, Australia’s two major free-to-air TV broadcasters, Nine Entertainment and Seven West Media, have declared job reductions owing to projected revenue declines.

Official Statements

Australia’s assistant treasurer is still consulting on whether to implement the law. He suggested that Meta seems to only follow laws that are in its favor. In reaction, Garlick mentioned that restricting news content would also be a way of complying with the law, though it would differ from adherence to other rules such as tax and privacy laws.

Misinformation and Scams

Garlick stood up for Meta’s methods in handling complaints related to harmful misinformation or scams. However, she pointed out that all content moderation centers are based outside of Australia. This issue gained significance in light of the ongoing lawsuit by Australian mining billionaire Andrew Forrest, who is suing Meta for displaying cryptocurrency scam ads that used his image.

Advertising Ethics

At the hearing, Greens Senator Sarah Hanson-Young challenged Meta’s classification as an advertising company, given that some advertisements spread misinformation. Garlick replied that Meta uses policies and tools designed to prevent misleading ads.

Summary

Meta is considering the possibility of restricting news content on Facebook in Australia if required to pay licensing fees mandated by a 2021 law. This mirrors a strategy previously employed in Canada in 2023. The ultimate decision lies with Australia’s assistant treasurer, who is currently gathering recommendations on the issue. In the interim, leading Australian television networks are experiencing financial strain due to the impending expiration of their existing agreements with Meta.

Frequently Asked Questions

Q: What reasons is Meta considering for potentially blocking news content on Facebook in Australia?

Meta might prohibit news content if the Australian government implements a law mandating tech companies to pay licensing fees for linking to domestic media content.

Has Meta implemented similar measures in other countries?

A: Yes, Meta adopted a similar strategy in Canada in 2023 when confronted with analogous legislation.

What effect might this have on Australian media organizations?

Significant broadcasters, including Nine Entertainment and Seven West Media, have already disclosed layoffs in anticipation of revenue declines following the expiration of agreements with Meta.

What responsibility does Australia’s assistant treasurer hold in this context?

The assistant treasurer will determine whether to implement the 2021 legislation mandating Meta to pay licensing fees for news material.

Q: What measures does Meta take to address grievances related to false information and fraudulent activities?

Although Meta has measures to tackle these problems, all its content moderation centers are situated outside of Australia.

Q: Which ethical issues have been highlighted concerning Meta’s advertising methods?

Critics, such as Greens Senator Sarah Hanson-Young, have raised concerns about how Meta can be regarded as an advertising company when certain ads disseminate false information.

Quick Read

• Russian hackers breached Microsoft’s systems and gained access to customer emails.
• Microsoft revealed that the breach took place approximately six months ago.
• The breach has resulted in heightened regulatory examination of Microsoft’s security measures.
• A purported Chinese hacking group had earlier broken into Microsoft, aiming at emails from the US government.
• Microsoft is actively informing impacted customers and distributing compromised emails.
• The company is revamping its security procedures in response to the breaches.

Summary of the Security Violation

Earlier this year, Russian hackers who breached Microsoft’s systems not only monitored employee inboxes but also exfiltrated emails from customers. This incident, revealed roughly six months after it first took place, has subjected Microsoft to heightened regulatory inspection.

Regulatory Scrutiny

The extensive nature of the breach has led regulators to worry about the safety of Microsoft’s software and systems in relation to foreign threats. This event comes after a different breach attributed to a purported Chinese hacking group last year, which resulted in the compromise of thousands of US government emails.

Information About the Breach

The Russian authorities have yet to address the hacking accusations, but Microsoft has reported that the hackers aimed at cybersecurity researchers examining the group’s actions. Microsoft has been alerting clients whose emails were breached by the Midnight Blizzard threat actor.

Customer Notifications

Microsoft is still providing updates on compromised emails to the affected customers. While it hasn’t revealed the total number of impacted customers or the amount of stolen emails, the company remains dedicated to maintaining transparency as the investigation goes on.

Ongoing Security Concerns

In January, Microsoft disclosed that Midnight Blizzard had infiltrated a minor portion of its corporate email accounts. Despite ongoing efforts to fortify its systems, the hackers persisted in their intrusion attempts, raising concerns among security experts and customers.

Microsoft’s Response

Due to the ongoing security violations, including the Chinese cyberattack from the previous year, there was a Congressional hearing in which Microsoft President Brad Smith announced that the company is revamping its security protocols to avert future breaches.

Summary

The latest breaches at Microsoft by hackers from Russia and China have revealed major weaknesses in the company’s security framework. As Microsoft undergoes regulatory investigation and strives to improve its security measures, impacted customers are being informed and provided with access to their affected emails. This incident highlights the escalating necessity for strong cybersecurity practices as the world becomes more digital.

Can you explain the details of the incident involving the Microsoft security breach?

Russian hackers breached Microsoft’s systems, gaining access to employee and customer emails. The incident was revealed approximately six months after it took place.

How many customers were impacted by the breach?

Microsoft has yet to reveal the specific number of customers affected or the amount of emails stolen, but they are in the process of informing those affected.

Q: Can you explain what Midnight Blizzard is?

The Russian hacking group known as Midnight Blizzard is behind the breach of Microsoft’s systems, leading to the compromise of customer emails.

Q: Has Microsoft responded to the breach in any way?

A: Yes, Microsoft is in the process of revamping its security procedures and has been informing impacted customers about the breached emails.

Q: What additional data breaches has Microsoft encountered lately?

Furthermore, an alleged Chinese hacking group infiltrated Microsoft last year, compromising thousands of US government emails, in addition to the Russian cyberattack.

Q: What effect has this breach had on Microsoft’s reputation?

The breach has subjected Microsoft to heightened regulatory examination and sparked concerns among its security peers and customers regarding the susceptibility of its systems.

Quick Read

• The ATO will transition from receiving data biannually to daily data ingestion from Services Australia beginning next month.
• The goal of the initiative is to speed up the processing of Medicare levy exemption claims.
• This modification is a component of the “specified benefits and entitlements data-matching initiative” that was first introduced in 2016-17.
• During the 2021-22 period, data-matching verified 99% of Medicare Exemption Statements (MES).
• The ATO expects to handle approximately 180,000 MES checks each year.
• Ingesting data on a daily basis will tackle inefficiencies arising from exemption claims made at various times during the financial year.

Transitioning to Daily Data Ingestion

Starting next month, the Australian Taxation Office (ATO) will change from receiving data from Services Australia twice a year to a daily basis. This move is intended to speed up the processing of returns involving claims for Medicare levy and surcharge exemptions. The data is vital for the ATO’s discrepancy detection models, which analysts use to confirm the validity of exemption claims.

Qualifications and Requests for Exemptions

Individuals who were not eligible for Medicare for the entire financial year may request an exemption from the Medicare levy, as stated on the Services Australia website. This exemption applies to certain citizens, permanent residents, New Zealanders, and specific visa holders, particularly those who have not applied for permanent residency or are not covered by Medicare under their country’s reciprocal healthcare agreement.

Benefits of Collecting Data Daily

An ATO representative informed TechBest that gathering data daily would enhance client services by allowing more prompt processing of Medicare levy exemption claims. The ATO originally introduced the “specified benefits and entitlements data-matching program” in the 2016-17 financial year. As an example, during the 2021-22 period, 133,151 individuals had an MES, with 99% being verified through data-matching.

Expected Growth in Data Volume

The ATO anticipates a significant increase in the number of checks to be conducted—approximately 180,000 each year—highlighting the growing importance of daily access to MES data. The projected data population has increased due to the rise in temporary residents and their awareness of their eligibility for an MES.

Enhancing Data Precision and Processing Efficiency

Modifying the discrepancy detection models to receive daily MES data will also address inefficiencies arising from exemption claims made at varying times during the financial year. For instance, a claim for the 2022-23 financial year can be submitted within the 2023-24 and 2024-25 financial years. The ATO has revised its collection process to enhance the timeliness of information for validation, consequently reducing the need to reach out to taxpayers.

Additional Data-Matching Initiatives by the ATO

The Australian Taxation Office (ATO) website identifies 26 active data-matching programs with different purposes, data ingestion intervals, data retention durations, data sources, and timeframes for the external records. For example, a recently renewed initiative focuses on landlords who fail to declare or underreport rental income and operates on a biannual basis. The majority of the ATO’s discrepancy detection systems involve data-sharing agreements with other government agencies, but some also include private sector collaborators such as Tyro Payments, Westpac, and the Commonwealth Bank of Australia (CBA).

Summary

The Australian Taxation Office’s initiative to transition to daily data collection from Services Australia intends to greatly improve the accuracy and efficiency of processing Medicare levy exemption claims. This adjustment is part of a larger strategy that includes various data-matching programs aimed at ensuring compliance and simplifying tax-related procedures.

Q&A

Why is the ATO transitioning to daily data ingestion?

The ATO seeks to enhance both the speed and precision of processing Medicare levy exemption claims by accessing more current information.

Who is eligible to request an exemption from the Medicare levy?

Individuals who are not eligible for Medicare for the entire financial year may include certain citizens, permanent residents, New Zealanders, and holders of specific visas.

How successful was the former twice-yearly system?

In the 2021-22 period, 99% of Medicare Exemption Statements (MES) were confirmed through biannual data-matching. Nonetheless, the anticipated implementation of daily data collection could improve efficiency even more.

Q: What is the expected annual number of MES checks that the ATO plans to process?

The ATO expects to handle approximately 180,000 MES checks annually.

What other data-matching programs are operated by the ATO?

The ATO runs 26 active data-matching programs that involve diverse use cases, ingestion frequencies, and third-party data providers. These programs target landlords who underreport their rental income and include collaborations with financial institutions to match credit and debit card data.