39 dead in Kenya mall attack claimed by militants

Days after Twitter accounts of several billionaires were hacked to engineer a crypto scam, Twitter on Saturday said it is embarrassed, disappointed and, more than anything, sorry for what happened with some of its high-profile users as attackers successfully manipulated its employees and used their credentials to access internal systems, including getting through the two-factor protections.

In the first detailed summary of the "social engineering attack" via a crypto scam that hit at least 130 users this week, Twitter said for 45 of those accounts, the attackers were able to initiate a password reset, login to the account and send Tweets.

"We are continuing our forensic review of all of the accounts to confirm all actions that may have been taken. In addition, we believe they may have attempted to sell some of the usernames," the micro-blogging platform said in a statement.

For up to eight of the Twitter accounts involved, the attackers took the additional step of downloading the account's information via "Your Twitter Data" tool.

This is a tool that is meant to provide an account owner with a summary of their Twitter account details and activity.

"We are reaching out directly to any account owner where we know this to be true. None of the eight were verified accounts," said Twitter.

The company said the attackers were not able to view previous account passwords, as those are not stored in plain text or available through the tools used in the attack.

"Attackers were able to view personal information including email addresses and phone numbers, which are displayed to some users of our internal support tools," informed Twitter.

In cases where an account was taken over by the attacker, they may have been able to view additional information, Twitter added, saying its forensic investigation of these activities was still ongoing.

"We are actively working on communicating directly with the account-holders that were impacted".

The company said it will soon restore access for all account owners who may still be locked out as a result of the remediation efforts.

The New York Times reported on Friday that the Twitter crypto scam can be traced back to a group of hackers who congregate online at OGusers.com, a username-swapping community where people buy and sell coveted online handles.

The report said that the Twitter hack is not from Russian, Chinese or North Korean hackers but was done by a group of young people, "one of whom says he lives at home with his mother".

Huawei will be completely removed from the UK's 5G networks by the end of 2027, the UK government announced on Tuesday after a review by the country's National Cyber Security Centre (NCSC) on the impact of US sanctions against the Chinese telecommunications giant.

In the lead up to this complete removal of all Huawei kit from UK networks, there will be a total ban on the purchase of any new 5G kit after December 31, 2020.

The decision was taken at a meeting of the UK's National Security Council (NSC) chaired by Prime Minister Boris Johnson, in response to new US sanctions against the telecom major imposed in May which removed the firm's access to products which have been built based on US semiconductor technology.

5G will be transformative for our country, but only if we have confidence in the security and resilience of the infrastructure it is built upon, said Oliver Dowden, UK Secretary of State for Digital, Culture, Media and Sport (DCMS).

Following US sanctions against Huawei and updated technical advice from our cyber experts, the government has decided it necessary to ban Huawei from our 5G networks. No new kit is to be added from January 2021, and UK 5G networks will be Huawei free by the end of 2027. This decisive move provides the industry with the clarity and certainty it needs to get on with delivering 5G across the UK, he said.

The minister, who laid out the details of the UK's ban on Huawei in the House of Commons, said the government will now seek to legislate with a new Telecoms Security Bill to put in place the powers necessary to implement the tough new telecoms security framework.

By the time of the next election (2024) we will have implemented in law an irreversible path for the complete removal of Huawei equipment from our 5G networks, said Dowden.

The new law will give the government the national security powers to impose these new controls on high risk vendors and create extensive security duties on network operators to drive up standards, DCMS said.

Technical experts at the NCSC reviewed the consequences of the US sanctions and concluded that Huawei will need to do a major reconfiguration of its supply chain as it will no longer have access to the technology on which it currently relies and there are no alternatives which we have sufficient confidence in.

They found the new restrictions make it impossible to continue to guarantee the security of Huawei equipment in the future.

After a ban on the purchase of new Huawei kit for 5G from next year, the aim is to completely remove the Chinese vendor's influence on 5G networks across the UK by the end of 2027.

The DCMS said Tuesday's decision takes into account the UK's specific national circumstances and how the risks from these sanctions are manifested in the country.

The existing restrictions on Huawei in sensitive and critical parts of the network remain in place, it highlighted.

The DCMS said the US action also affects Huawei products used in the UK's full fibre broadband networks. However, the UK has managed Huawei's presence in the UK's fixed access networks since 2005 and we also need to avoid a situation where broadband operators are reliant on a single supplier for their equipment.

As a result, following security advice from experts, DCMS is advising full fibre operators to transition away from purchasing new Huawei equipment. A technical consultation will determine the transition timetable, but it is expect this period to last no longer than two years.

The government said its new approach strikes the right balance by recognising full fibre's established presence and supporting the connections that the public relies on, while fully addressing the security concerns.

It stressed that its new policy in relation to high risk vendors has not been designed around one company, one country or one threat but as an enduring and flexible policy that will enable the UK to manage the risks to the network, now and in the future.

Feb 5: Pakistan will buy more palm oil from Malaysia, Prime Minister Imran Khan said on Tuesday, aiming to help offset lost sales after top buyer India put curbs on Malaysian imports last month amid a diplomatic row.

India imposed restrictions on refined palm oil imports and informally asked traders to stop buying from Malaysia, the world's biggest producer of the edible oil. Sources said the move was in retaliation for Malaysia's criticism of India's policy on Kashmir.

Malaysian Prime Minister Mahathir Mohamad said on Tuesday that he discussed palm oil with Khan who was on a visit to Malaysia and that Pakistan had indicated it would import more from Malaysia.

"That's right, especially since we noticed India threatened Malaysia for supporting the Kashmir cause, threatened to cut palm oil imports," Khan told a joint news conference, referring to India's Muslim-majority region of Kashmir.

"Pakistan will do its best to compensate for that."

India is a Hindu-majority country while Malaysia and Pakistan are mainly Muslim. India and Pakistan have been mostly hostile to each other since the partition of British India in 1947, and have fought two of their three wars over competing territorial claims in Kashmir.

Pakistan may have bought around 135,000 tonnes of Malaysian palm oil last month, a record high, India-based dealers who track such shipments told Reuters on condition of anonymity.

The figure is close to estimates of 141,500 tonnes from Refinitiv, which show sales to India in January may have plunged 80% from a year earlier to 40,400 tonnes.

Malaysia will release official export data on Monday.

Pakistan bought 1.1 million tonnes of palm oil from Malaysia last year, while India bought 4.4 million tonnes, according to the Malaysian Palm Oil Council.

Malaysian palm oil futures rose on Tuesday after Khan's comments and on expectations of a steep drop in production in January.

STRONG TIES

India has repeatedly objected to Mahathir speaking out against its move last year to strip Kashmir's autonomy and make it easier for non-Muslims from neighbouring Muslim-majority Bangladesh, Pakistan and Afghanistan to gain citizenship.

At the news conference, Mahathir did not refer to Kashmir but Khan did.

"The way you, PM, have stood with us and spoken about this injustice going on, on behalf of Pakistan I really want to thank you," Khan said.

He also said he was sad he had been unable to attend a summit of Muslim leaders in Malaysia in December. Saudi Arabia did not attend the summit, saying it was the wrong forum to discuss matters affecting the world's Muslims and Khan belatedly pulled out.

Some Pakistani officials, unnamed because they were not authorised to speak to the media, said at the time that Khan pulled out under pressure from Saudi Arabia, a close ally, although local media reported his officials denied that was the reason for his absence.

"Unfortunately our friends, who are very close to Pakistan as well, felt that somehow the conference was going to divide the ummah," Khan said, using the Arabic word for the Muslim community but not mentioning Saudi Arabia by name.

"It is clearly a misconception, as that was not the purpose of the conference."