• Dev Notes
  • Posts
  • Chinese Hackers Exploit Visual Studio Code

Chinese Hackers Exploit Visual Studio Code

PLUS: Google Says Its New Quantum Chip Indicates That Multiple Universes Exist

Good Morning! Chinese hackers have discovered a clever exploit using VS Code's Remote Tunnels, marking a creative evolution in cybersecurity threats. Google's Willow quantum chip is shattering computing limits by performing calculations that would take traditional computers billions of years. In a major shift for autonomous vehicles, GM is shutting down its Cruise robotaxi venture to focus on practical driver assistance tech.

Chinese Hackers Exploit Visual Studio Code

Chinese APT operators have found a creative new way to maintain persistent access to compromised systems - by hijacking Visual Studio Code's Remote Tunnels feature. The campaign, dubbed "Operation Digital Eye," targeted B2B IT service providers in Southern Europe between June and July 2024.

What's New: The attackers leveraged VS Code's Remote Tunnels in what researchers call the "first instance" of Chinese APT groups using this technique. By running VS Code as a Windows service, they established backdoor connections through Microsoft's legitimate Azure infrastructure - pretty clever, right? The best part (or worst, depending on which side you're on): since the executables are Microsoft-signed and the tunneling uses Azure servers, it's incredibly difficult to detect.

Key components of the attack chain:

  • Initial Access: SQL injection via SQLmap

  • Persistence: PHPsert webshell deployment

  • Lateral Movement: Custom Mimikatz variant (bK2o.exe)

  • Command & Control: VS Code tunnels connecting to *.devtunnels.ms domains

For the dev-ops folks out there: this is a wake-up call to monitor VS Code launches and remote tunnel usage. Consider implementing allowlists to block unauthorized portable VS Code executions and keep an eye on Windows services for suspicious 'code.exe' processes. The attackers' workday pattern (9 AM - 9 PM China time) suggests state-sponsored activity, making this a significant addition to the threat intelligence landscape.

Read More Here

Google Says Its New Quantum Chip Indicates That Multiple Universes Exist

Context: Google just dropped a quantum computing bombshell with their new Willow chip. The headline-grabber? A computation that would take today's fastest supercomputer 10 septillion years (that's 10^25 years!) was completed in under five minutes. For perspective, that's longer than the universe has existed.

The real breakthrough isn't just speed - it's error handling. Quantum computers typically become more error-prone as you add qubits (quantum bits), but Willow flips this script. The chip shows exponential error reduction as it scales up, tested across various qubit grid configurations (3x3, 5x5, 7x7).

Core improvements:

  • "Below threshold" quantum system achievement

  • Real-time error correction capability

  • Extended quantum coherence time

  • 105-qubit architecture

  • Beyond-breakeven error correction status

Here's where it gets wild - Google Quantum AI's lead, Hartmut Neven, suggests this performance might indicate computation happening across parallel universes. While this aligns with David Deutsch's quantum computation theories, it's worth noting that this interpretation remains contentious among physicists.

Reality Check: The benchmark test (Random Circuit Sampling) was specifically designed for quantum systems. While impressive, we're still waiting for practical, real-world applications. Google's currently running a $5M competition to find commercial use cases for this technology.

Read More Here

GM Pulls the Plug on Cruise: What's Next for Autonomous Driving?

In a seismic shift for the autonomous vehicle industry, General Motors has announced it's ending funding for Cruise, its robotaxi subsidiary. After pouring over $10 billion into the venture since 2016 and weathering a challenging year marked by safety concerns, GM is now pivoting to focus on consumer-facing driver assistance technology.

What's New: GM plans to fold Cruise's technical expertise into its existing automotive operations, focusing on enhancing systems like Super Cruise - their hands-off, eyes-on driving feature. The restructuring aims to cut spending by more than $1 billion annually, with changes expected to complete by mid-2025.

The autonomous vehicle landscape is experiencing significant reshuffling:

  • Waymo (Alphabet): Expanding to Miami, fully public in LA

  • Tesla: Planning autonomous Model Y/3 deployment in 2024

  • Ford: Previously exited via Argo AI shutdown in 2022

  • Cruise: Operations suspended after October 2023 incident

Technical Shift: GM's strategic pivot suggests a more pragmatic approach to autonomous technology. Rather than pursuing full autonomy through robotaxis, they're doubling down on advanced driver assistance systems (ADAS) - a move that could accelerate the development of consumer-ready autonomous features while potentially lowering technical barriers to market entry.

This shift marks a significant moment in the autonomous vehicle industry, highlighting the challenges of scaling full autonomy while suggesting a more incremental approach to self-driving technology might be the immediate future.

Read More Here

🔥 More Notes

📹 Youtube Spotlight

How Will We Know When AI is Conscious?

Was this forwarded to you? Sign Up Here