❌

Normal view

A Cyberattack Was Part of the US Assault on Venezuela

6 January 2026 at 17:08

We don’t have many details:

President Donald Trump suggested Saturday that the U.S. used cyberattacks or other technical capabilities to cut power off in Caracas during strikes on the Venezuelan capital that led to the capture of Venezuelan President NicolΓ‘s Maduro.

If true, it would mark one of the most public uses of U.S. cyber power against another nation in recent memory. These operations are typically highly classified, and the U.S. is considered one of the most advanced nations in cyberspace operations globally.

Understanding global AI diffusion

Artificial intelligence is transforming the way we work, learn, and innovateβ€”and it’s doing so at a pace that surpasses every major technology before it. Microsoft’s inauguralΒ AI Diffusion ReportΒ offers a comprehensive look at how AI adoption is accelerating worldwide, drawing on data from more than 100 countries. In less than three years, more than 1.2 billion people have used AI tools, a rate of adoption faster than the internet, the personal computer, or even the smartphone. This rapid diffusion underscores AI’s potential as a general-purpose technology but also highlights the urgent need to ensure equitable access.

The report introduces three indicesβ€”the AI Frontier Index, the AI Infrastructure Index, and the AI Diffusion Indexβ€”to help policymakers, researchers, and industry leaders understand where breakthroughs are happening, where capacity exists to scale, and where AI is being used to improve lives. These insights show that adoption is fastest where connectivity and digital infrastructure are strongest, while nearly four billion people still lack the basics needed to participate in the AI economy. Bridging this gap is essential to avoid deepening global divides.

Beyond the numbers, the report illustrates the need for collaborative action to expand access to digital infrastructure, strengthen skills development, and promote responsible AI policies. By investing in these foundational elements, governments and organizations can unlock AI’s potential for growth and innovation. The data makes clear that speed alone does not guarantee shared prosperityβ€”broad accessibility does.

To explore the full findings and recommendations, read the AI Diffusion Report.

The post Understanding global AI diffusion appeared first on Microsoft On the Issues.

Microsoft’s $15.2 billion USD investment in the UAE

3 November 2025 at 13:00

As Abu Dhabi and Dubai kick off a significant week hosting annual energy and technology conferences, we want to share details of our ongoing and planned investments in the United Arab Emirates.Β Roughly twoΒ and a half years ago, we embarked on a new AI initiative with the encouragement and support of both the United States and UAE governments. Much of this progress has involved a new partnership with G42, the UAE’s sovereign AI company, with whomΒ we’reΒ making critical progress.Β Β Β 

All told, Microsoft will investΒ $15.2 billionΒ USDΒ in the UAE between the start of this initiative in 2023 and the end of this decade, in 2029. This is not money raised in the UAE.Β It’sΒ moneyΒ we’reΒ spending in the UAE. And as we do everywhere in the world,Β we’reΒ focused not just on growing our business but also on contributing to the local economy. This involves bringing together three critical factors – technology, talent, and trust.Β Β Β 

On some days, it feels like the tech sector is gripped in a rhetorical race to announce ever larger, sky-high numbers. We believe in moving fast while staying grounded and being transparent about our investment details. And we want to share our strong conviction that our investmentsΒ benefitΒ the shareholders of our company, the people of the UAE, and the relationship between our two nations.Β Β Β 

Our investment numbersΒ Β 

OurΒ $15.2 billionΒ USDΒ investment includes the following:Β Β 

  • Beginning in 2023 and through the end of this calendar year, Microsoft will have invested and spent just overΒ $7.3 billionΒ in the UAE. This includes ourΒ $1.5 billionΒ equity investment in G42, more thanΒ $4.6 billionΒ in capital expenses in advanced AI and cloud datacenters in the country, and more thanΒ $1.2 billionΒ in local operating expenses and the cost of goods sold.Β Β Β 
  • From the start of 2026 to the end of 2029, we will spend more thanΒ $7.9 billionΒ in the UAE. This includes more thanΒ $5.5 billionΒ in capital expenses for ongoing and planned expansion of our AI and cloud infrastructure, including new steps we will share publicly in Abu Dhabi this week. It also includes almostΒ $2.4 billionΒ in planned local operating expenses and the cost of goods sold.Β Β 

An investment in world-leading technologyΒ Β 

Some of our most important work involves exporting world-leading technology from the United States to the UAE. This includes the GPUs essential to power AI in our datacenters across the country that support the UAE’s people and institutions.Β Β 

Microsoft was one of the few companies during theΒ previousΒ administration to secure export licenses from the Commerce Department to ship GPUs to the UAE. In no small measure, this is because of the substantial work we did to meet the strong cybersecurity, national security, and other technology conditions required by these licenses. These licenses enabled us to accumulate in the country the equivalent of 21,500 Nvidia A100 GPUs, based on a combination of A100, H100, and H200 chips.Β Β 

Microsoft was also the first company this year under the Trump administration to secure export licenses from the Commerce Department to ship GPUs to the UAE. Approved in September, these were based on updated and stringentΒ technologyΒ safeguards. These licenses enable us to ship the equivalent of 60,400Β additionalΒ A100 chips, in this instance involving Nvidia’s even more advanced GB300 GPUs.Β Β 

While the chips are powerful and the numbers are large, more important is their positive impact across the UAE.Β We’reΒ using these GPUs to provide access to advanced AI models from OpenAI, Anthropic, open-source providers, and Microsoft itself.Β We’re supportingΒ AI-enabled applications, including our Copilot applications,Β from a wide variety of local and international providers. AndΒ we’reΒ partnering with G42 to support public and private sector organizations across the UAE economy, as well as consumers across the country.Β Β 

The UAE’s ranking in the MicrosoftΒ AI Diffusion ReportΒ published last week shows the country leading the world in per capita AI usage. With 59.4 percent of the population using generative AI, the UAE is ahead of Singapore, which is in second place at 58.6 percent. Beyond these two, no other country tops the 50 percent mark. Microsoft’s infrastructure challenge in the UAE is notΒ aΒ risk of getting ahead of demand but keeping pace with it.Β Β 

Investing in talentΒ Β 

Microsoft’s investment in the UAE is not just aboutΒ technology,Β it’sΒ alsoΒ about people. By cultivating AI talent and skilling individuals to develop, deploy, and use AI in a way that reflects the region’s unique needs, Microsoft is helping to ensure that the UAEΒ remainsΒ on the leading edge of AI diffusion.Β Β 

Today, Microsoft’s presence in the UAE reflects this commitment. Our growing team includes almost 1,000 full-time employees and related staffΒ representingΒ 40 nationalities.Β Nearly 100Β of our employees are engineers, supported by an Emirati partner ecosystem that has grown almost threefold in just two years, now with 1,400 firms employingΒ nearly 45,000Β professionals across the country.Β Β 

This year, weΒ establishedΒ the Global Engineering Development Center in Abu Dhabi to attract world-class tech talent to the UAE. Our engineers not only develop new products and services for Microsoft, but support institutions and businesses across the region so they can use AI and cloud technologies to transform their own operations. As we look to the future, we aspire to grow our engineering teamsΒ furtherΒ and add a new focus on domain-specific AI models and applications that will propel advances in key scientific and technological fields.Β Β 

We also opened a new center for the Microsoft AI for Good Lab in Abu Dhabi, staffed byΒ PhD levelΒ research talent specializing in large-scale AI models, vision-language models, andΒ post trainingΒ techniques. Backed by AzureΒ computeΒ grantsΒ allocatedΒ to partner organizations, this team collaborates with nonprofits, start-ups, researchers, academic institutions,Β and local businesses to address humanitarian challenges across the Middle East and Africa using AI. Already, theΒ Lab has partnered with researchers to train large language models for low-resource languages, including those spoken in Malawi, Tanzania, Kenya, Uganda, and the Democratic Republic of the Congo – helping ensure that AI serves communities that risk being left behind in the AI age.Β Β Β Β 

As the Microsoft AI Diffusion Report underscores, people need digitalΒ proficiencyΒ to fullyΒ participateΒ in an AI-driven economy. Without the right skills, AI risks deepening inequality rather than broadening opportunity.Β That’sΒ why skilling is a core pillar of our investment in the UAE.Β Β Β 

Last November, we committed to skill one million people in the UAE by the end of 2027–andΒ we’reΒ well on our way to meet – and exceed–our goal. Last month at GITEX, Microsoft partnered with UAE government entities to launch an initiative to upskill 120,000 government employees across the federal government, Abu Dhabi, Dubai, and Sharjah. We will also skill 175,000 students andΒ 39,000 teachersΒ through collaborations with GEMS, Abu Dhabi Department of Education (ADEK), and the Knowledge and Human Development Authority (KHDA). We will announce new steps in this area on Thursday in Dubai.Β Β 

Talent is the engine of AI leadership. Attracting, nurturing, and building AI talent andΒ know-howΒ is essential to theΒ UAEΒ turning its vision of becoming a global leader into a reality.Β Β Β 

Strengthening trustΒ Β Β 

Ultimately, theΒ use of AI depends on trust. People and institutions need to trust that AI will be developed and deployed with responsible safeguards. They need to have confidence that the cybersecurity of AI chips, models, and services will be protected. And they rightly expect AI to serve the public broadly, withΒ causeΒ for optimism that AI will reach and support the Global South.Β Β 

Given the role of export controls and other trade issues, the flow of advanced GPUs and AI models also requires trust between nations. This in turn requires clear rules and agreements, coupled with effective compliance systems. And as always, trust between nations depends on strong relationships between its people, grounded in mutual respect and appreciation for each other’s cultures.Β Β 

We’reΒ focused on supporting all these needs.Β Β Β 

One important part of this is the Responsible AI Future Foundation, or RAIFF. G42, Microsoft, and Mohamed bin Zayed University of Artificial Intelligence (MBZUAI) founded this new foundation in AbuΒ DhabiΒ in FebruaryΒ to promote responsible AI standards and best practices in the Middle East and across the Global South. This foundation is advancing research on the technical and ethical elements ofΒ responsible AI and is developing frameworks to ensure ethical development and deployment of AI systems, accounting for cultural diversity.Β Β Β 

A second element comes to life through the first annualΒ Abu Dhabi Global AI Summit,Β whichΒ began Sunday. Hosted by G42, Microsoft, the Responsible AI Future Foundation, and Eurasia Group’s GZERO Media, this Summit bringsΒ government ministers, private sector executives, and AI leaders together to discussΒ what’sΒ needed to drive AI diffusion across the Global South. We meet at a time when there is a growing risk that uneven AI diffusion may widen the economic and societal gaps that divide the world.Β It’sΒ imperative that governments, businesses, and non-governmental organizations collaborate and take new steps to promote broader access to AI.Β Β 

Both these elements build on a third and deeper initiative that Microsoft and G42 have advanced during the past two years. In conjunction with ourΒ $1.5 billionΒ investment, Microsoft and G42 created last April aΒ first–of–its–kind binding frameworkΒ between two private companies. Developed in close consultation with the U.S. and UAE governments, this Intergovernmental Assurance Agreement (IGAA) ensures that both our companies meet or exceed U.S. standards in critical areas such as cybersecurity and physical security, export controls and technology transfer, data protection and responsible AI, and Know Your Customer (KYC) best practices.Β Β Β 

As we drafted the IGAA, we consulted not only leaders from government ministries in our two countries, but with members and staff of both political parties in both houses of Congress in Washington, D.C. We listened to feedback and adapted the IGAA to address their suggestions. AndΒ we’veΒ built a strong compliance infrastructure to implement these requirements based on industry best practices and auditing standards.Β Β Β 

All these steps help bolster mutual confidence and trust between our two governments. But trust between nations also grows through relationships among people.Β That’sΒ whyΒ we’reΒ advancing a fourth and new element this week, traveling to Abu Dhabi with a Seattle delegation of public and private leaders. The group includes a former Governor and local leaders in economic development, higher education, medical research, the non-profit community, and sports. The goal is to deepen understanding, exchange ideas, and explore solutions that can advance both regions.Β Β Β 

Looking to the futureΒ Β 

Microsoft is committed to the future of the UAE and a strong relationship between our two nations. We believe in the UAE’s long-term economic vision and the role the UAE and the U.S. continue to play together to support peace, stability, and growth across the Middle East.Β Β 

As we do everywhere we do business, Microsoft is committed to a broad perspective and long-term approach. Our work in the UAE has underscored the importance of connecting technology investments to initiatives to attract and develop the talent needed for a vibrant and self-sustaining tech ecosystem. And work to advance trust, which may seem peripheral to some, is in fact ofΒ central importance. From stronger business practices to broader international ties, trust is a critical catalyst forΒ technologyΒ success at a local and global level.Β Β 

Technology is our business andΒ we’reΒ as excited as anyone by its potential. But we know thatΒ ultimately thereΒ is only one test that matters.Β It’sΒ how our technology empowersΒ others to achieve more. Like every public company, our shareholders rightly expect us to deliver value to customers in ways that enable us to continue to grow. But we also judge ourselves by whether we are generating local opportunities and growth that go well beyond ourselves. Across the UAE,Β we’reΒ committed to passing this test.Β Β 

The post Microsoft’s $15.2 billion USD investment in the UAE appeared first on Microsoft On the Issues.

UK β€˜woefully’ unprepared for Chinese and Russian undersea cable sabotage, says report

CSRI finds China and Russia may be coordinating β€˜grey zone’ tactics against vulnerable western infrastructure

China and Russia are stepping up sabotage operations targeting undersea cables and the UK is unprepared to meet the mounting threat, according to new analysis.

A report by the China Strategic Risks Institute (CSRI) analysed 12 incidents in which national authorities had investigated alleged undersea cable sabotage between January 2021 and April 2025. Of the 10 cases in which a suspect vessel was identified, eight were directly linked to China or Russia through flag-state registration or company ownership.

Continue reading...

Β© Photograph: John Leicester/AP

Β© Photograph: John Leicester/AP

Β© Photograph: John Leicester/AP

Unveiling Hidden Connections: JA4 Client Fingerprinting on VirusTotal

18 October 2024 at 11:48
VirusTotal has incorporated a powerful new tool to fight against malware: JA4 client fingerprinting. This feature allows security researchers to track and identify malicious files based on the unique characteristics of their TLS client communications.

JA4: A More Robust Successor to JA3

JA4, developed by FoxIO, represents a significant advancement over the older JA3 fingerprinting method. JA3's effectiveness had been hampered by the increasing use of TLS extension randomization in https clients, which made fingerprints less consistent. JA4 was specifically designed to be resilient to this randomization, resulting in more stable and reliable fingerprints.

Unveiling the Secrets of the Client Hello

JA4 fingerprinting focuses on analyzing the TLS Client Hello packet, which is sent unencrypted from the client to the server at the start of a TLS connection. This packet contains a treasure trove of information that can uniquely identify the client application or its underlying TLS library. Some of the key elements extracted by JA4 include:
  • TLS Version: The version of TLS supported by the client.
  • Cipher Suites: The list of cryptographic algorithms the client can use.
  • TLS Extensions: Additional features and capabilities supported by the client.
  • ALPN (Application-Layer Protocol Negotiation): The application-level protocol, such as HTTP/2 or HTTP/3, that the client wants to use after the TLS handshake.

JA4 in Action: Pivoting and Hunting on VirusTotal

VirusTotal has integrated JA4 fingerprinting into its platform through the behavior_network file search modifier.Β This allows analysts to quickly discover relationships between files based on their JA4 fingerprints.

To find the JA4 value, navigate to the "behavior" section of the desired sample and locate the TLS subsection. In addition to JA4, you might also find JA3 or JA3S there.

Example Search: Let's say you've encountered a suspicious file that exhibits the JA4 fingerprint "t10d070600_c50f5591e341_1a3805c3aa63" during VirusTotal's behavioral analysis.

You can click on this JA4 to pivot using the search query behavior_network:t10d070600_c50f5591e341_1a3805c3aa63 finding other files with the same fingerprint This search will pivot you to additional samples that share the same JA4 fingerprint, suggesting they might be related. This could indicate that these files are part of the same malware family or share a common developer or simply share a common TLS library.

Wildcard Searches

To broaden your search, you can use wildcards within the JA4 hash. For instance, the search: behaviour_network:t13d190900_*_97f8aa674fd9

Returns files that match the JA4_A and JA4_C components of the JA4 hash while allowing for variations in the middle section, which often corresponds to the cipher suite. This technique is useful for identifying files that might use different ciphers but share other JA4 characteristics.

YARA Hunting Rules: Automating JA4-Based Detection

YARA hunting rules using the "vt" module can be written to automatically detect files based on their JA4 fingerprints. Here's an example of a YARA rule that targets a specific JA4 fingerprint:


This rules will flag any file submitted to VirusTotal that exhibits the matching JA4 fingerprint. The first example only matches "t12d190800_d83cc789557e_7af1ed941c26" during behavioral analysis. The second rule will match a regular expression /t10d070600_.*_1a3805c3aa63/, only matching JA4_A and JA4_C components, excluding the JA4_B cipher suite. These fingerprints could be linked to known malware, a suspicious application, or any TLS client behavior that is considered risky by security analysts.



JA4: Elevating Threat Hunting on VirusTotal

VirusTotal's adoption of JA4 client fingerprinting will provide users with an invaluable tool for dissecting and tracking TLS client behaviors, leading to enhanced threat hunting, pivoting, and more robust malware identification.

Happy Hunting.

❌