Connect with us

Tech

SolarWinds warns over dangerous RCE flaw | Computer Weekly

Published

on

SolarWinds warns over dangerous RCE flaw | Computer Weekly


SolarWinds is urging users of its Web Help Desk helpdesk ticketing and asset management software to ensure their instances are up-to-date after patching a newly-uncovered remote code execution (RCE) flaw.

Tracked as CVE-2025-26399, the bug bypasses a fix for a previous flaw, CVE-2024-28988, which was discovered and disclosed by Guy Lederfein of Trend Micro Security Research 12 months ago, in September 2024. However, in a twist reminiscent of the nursery rhyme about old ladies swallowing spiders to catch flies, CVE-2024-28988 itself bypassed a fix for a third issue, CVE-2024-28986.

Like the preceeding vulnerabilities, the latest issue once again takes the form of an unauthenticated AjaxProxy deserialisation RCE vulnerability that enables a threat actor to run commands on the host machine, should they succeed in exploiting it.

A warning from history

Computer Weekly understands that there is currently no evidence of any threat actors having exploited CVE-2025-26399 in the wild.

However, SolarWinds’ Web Help Desk tool is in extensive use at major enterprises and government and public sector bodies alike, and the earlier ‘versions’ of the new flaw were considered serious enough to be added to the Known Exploited Vulnerabilities catalogue run by the US’ Cybersecurity and Infrastructure Security Agency (CISA).

The addition of a bug to the KEV catalogue obliges all agencies of the federal civilian executive branch (FCEB) in the US to take action to address them in a specific timeframe, but the list also serves as a useful indicator of which flaws organisations should be prioritising to patch.

In light of this, it is highly-probable that CVE-2025-26399 will be targeted by threat actors in the very near future, if such activity has not already started.

Furthermore, the events of the 2020-2021 Solorigate/Sunburst incident impacting SolarWinds users also serves as a warning from history, according to Ryan Dewhurst, head of proactive threat intelligence at watchTowr, an exposure management specialist, who noted that SolarWinds is a name that “needs no introduction” in cyber security circles.

“The infamous supply chain attack… allowed months long access into multiple Western government agencies and left a lasting mark on the industry. Fast forward to 2024: an unauthenticated remote deserialisation vulnerability was patched… then patched again. And now, here we are with yet another addressing the very same flaw. Third time’s the charm?” said Dewhurst.

“The original bug was actively exploited in the wild, and while we’re not yet aware of active exploitation of this latest patch bypass, history suggests it’s only a matter of time.”

The Sunburst incident saw almost 20,000 SolarWinds customers download and install a malicious update to the firm’s Orion platform, with prominent victims including US government bodies such as the Department of Energy (DoE) and the National Nuclear Safety Administration (NNSA) that maintains America’s nuclear arsenal.

Earlier this year SolarWinds and the Securities and Exchange Commission (SEC) reached a settlement in principle resolving a case against the organisation and its security leadership over the circumstances that led to the compromise of Orion.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

How electric cars and heat pumps can help Switzerland implement its energy strategy

Published

on

How electric cars and heat pumps can help Switzerland implement its energy strategy


According to a new report, heat pumps and electric cars could act as key flexibility providers for the Swiss electricity system in the future. Credit: Image generated with AI: Lea Rüfenacht / ETH Zurich

In the future, flexibly operated heat pumps and electric cars could reduce both electricity imports and electricity prices. That is according to a new study by a Swiss research consortium led by ETH Zurich.

Electric cars and could play a major role when it comes to implementing the Swiss Energy Strategy. The Federal Council is aiming for Switzerland’s energy supply to be carbon-neutral by 2050. The plan is for heat pumps to replace oil and gas-fired heating systems and for to gradually replace combustion vehicles. This will result in a significant increase in demand for electricity—from around 56 terawatt-hours (TWh) a year today to around 75 TWh a year by 2050.

A new report by the Swiss “PATHFNDR” research consortium, which is part of the “SWEET” program, has now shown that, alongside hydropower, heat pumps and electric cars could be key providers of flexibility for the Swiss power system in 2050.

Christian Schaffner, Director of the Energy Science Center at ETH Zurich and Deputy Director of the project, explains, “The two technologies serve to better coordinate rising with from renewable energy sources. This relieves the burden on the , reduces imports and brings down wholesale electricity prices—particularly in the winter months.”

Only consume if the grid is not at full capacity

This flexibility is apparent on an everyday basis. For example, at outdoor temperatures of 0°C, intelligently controlled heat pumps can switch off for up to 10 hours in buildings meeting the Minergie standard without a noticeable drop in room temperature. This helps to avoid having too many heat pumps running at the same time and overloading the grid.

Electric cars, too, are often connected to the grid for much longer than is necessary for a full charge—for example if they are plugged in to charge in the garage at the end of the working day. This allows for an optimum charging pattern that is in line with electricity supply. The study claims that the best thing would be to charge the car at work: “During the day, when the sun is shining, many vehicles are parked anyway. Charging them there would make optimum use of photovoltaic production,” explains Siobhan Powell, an energy researcher at ETH Zurich and one of the main authors of the study.

More electricity, less electricity imports

By 2050, Switzerland wants to cover 50 to 60% of its electricity demand (45 TWh per year) with new such as photovoltaics, wind energy or biomass. The researchers’ model calculations now show that this target will be easier to reach thanks to the flexible power consumption of heat pumps and electric vehicles.

If heat pumps and electric cars are coordinated and controlled flexibly on a nationwide basis, around 4% more renewable electricity could be available in Switzerland in 2050. “Most of this is solar power in spring and summer, which would be utilized more efficiently so that it does not need to be curtailed,” explains Powell.

Moreover, flexible heat pumps and electric cars could reduce net electricity imports by around 20% across the whole year, particularly due to higher net exports in spring and summer. “These amount to some 1.8 TWh of electricity, which is equivalent to the annual consumption of around 0.5 million Swiss households,” says Powell. According to the study, Switzerland’s electricity imports would also be reduced by around 0.7 TWh in the winter months. That corresponds to a 4.4% reduction in net imports in winter compared to an energy system without flexibly operated heat pumps and electric cars.

Cheaper electricity and fewer gas power stations

In addition, the study shows that wholesale electricity prices could also be lower due to a more even distribution of supply and demand with the help of flexible heat pumps and electric cars. This reduction in is greatest in the winter months of January to March, when wholesale prices could be reduced by up to 6%.

The researchers also estimate that an electricity system supported by flexible heat pumps and electric cars could be operated with around 4% lower costs than a system without these two flexibility providers.

Moreover, the use of flexibly operated heat pumps and electric cars would also mean the construction of fewer gas power stations and battery storage systems by 2050. Estimates show that the necessary investment in gas power stations and batteries would fall by around a third. “Above all, gas power stations and batteries are necessary to compensate for peaks in electricity demand. If electric vehicles and heat pumps take over this function, we’ll need fewer of them,” explains Powell.

Flexibility yes, but also convenience

According to a representative survey carried out as part of the study, about 70% of the Swiss population is willing to contribute to grid stability through flexible heating and charging, provided their convenience is not impacted and operation is automatic. About 30% of respondents even said they would accept minor inconveniences if this would bring down their electricity costs.

Lower peak loads in neighborhoods and reduced grid expansion

If a large number of households are charging their cars or running their heat pumps at the same time, there is a risk of bottlenecks in the distribution grid. Many of today’s power cables and transformers are not designed for these loads and would need to be reinforced.

The researchers analyzed about 50 grid areas in Switzerland and concluded that flexibly operated heat pumps and electric cars would reduce peak loads in neighborhoods and could therefore delay and reduce the need for expensive reinforcement work on distribution grids. The actual size of these effects also depends on whether the areas in question are urban or rural.

Electricity tariffs that reward citizens

So that electrical vehicles and heat pumps can actually act as flexibility providers by 2050, they must be equipped with the necessary control and communication technology. At present, this is not the case across the board. The authors of the study therefore recommend that further systems only be subsidized if they allow flexible and intelligent operation.

In addition, the operators of electric vehicles and heat pumps should be incentivized to change their heating and charging behavior. To this end, the study recommends measures including dynamic electricity tariffs that reward flexible charging and heating. However, significant local differences in tariffs and feed-in payments would hinder this measure’s implementation in Switzerland, states the study.

The researchers also point out that the promotional instruments in Switzerland are very heterogeneous and that there is, as yet, no national “right to charge” for tenants with electric vehicles—something they say ought to be resolved quickly.

More information:
Flexibility provision from electromobility and buildings – Synthesis Report (2025). DOI: 10.3929/ethz-c-000787060

Citation:
How electric cars and heat pumps can help Switzerland implement its energy strategy (2025, November 11)
retrieved 11 November 2025
from https://techxplore.com/news/2025-11-electric-cars-switzerland-energy-strategy.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Tech

New algorithm enhances Doppler resolution of unmanned vehicle radars

Published

on

New algorithm enhances Doppler resolution of unmanned vehicle radars


System model. Credit: Journal of Electrical Engineering & Technology (2025). DOI: 10.1007/s42835-025-02453-6

A research team has developed an extrapolation-based Doppler resolution enhancement algorithm for frequency modulated continuous wave radars. The algorithm improves system performance, offering an advancement that is superior to existing ultra-high-resolution technologies.

The findings are published in the Journal of Electrical Engineering & Technology. The team was led by Sang-dong Kim and Bong-seok Kim, affiliated with the DGIST Division of Mobility Technology, in collaboration with a team led by Professor Youngdoo Choi, affiliated with the Republic of Korea Naval Academy (ROKNA).

Improving radar accuracy without extra hardware

This research introduces a technology that improves detection accuracy without the need for additional complex computations or hardware. The technology is expected to contribute to enhancing radar on various intelligent unmanned platforms such as unmanned aerial vehicles (UAVs), unmanned ships, and autonomous vehicles.

Conventional analyze the Doppler effect to determine the velocity of a target, but the fast Fourier transform (FFT)-based approach has limitations regarding resolution (i.e., the accuracy of velocity discrimination). To address this, the joint DGIST–ROKNA research team applied a signal extrapolation technique and has proposed a new algorithm that enhances Doppler resolution without extending observation time.

Performance gains and real-world applications

The proposed method successfully reduces the root mean square error of velocity estimation by up to 33% and decreases the target miss rate by up to 68%, representing a substantial improvement over the conventional approach. Notably, the proposed method maintains the same computational complexity level as the conventional FFT method, thereby simultaneously achieving fast processing speed and .

This technology can effectively solve the problem of signal overlap between targets moving at similar velocities, particularly when UAVs or radar systems detect multiple objects simultaneously. It can therefore greatly enhance the ability to distinguish closely spaced targets and improve detection accuracy, marking a new milestone in the advancement of high-resolution target detection technology.

Additionally, the technology is highly regarded for its industrial applicability because it requires no additional hardware resources and features a simple computational structure that enables real-time implementation.

Sang-dong Kim, principal researcher at the Division of Mobility Technology (concurrently serving the interdisciplinary engineering major), said, “This study demonstrates an improvement in both the efficiency and precision of radar , enabling more accurate target detection without the need for additional equipment. It is expected to evolve into a key technology for defense, autonomous driving, and unmanned systems.”

More information:
Youngdoo Choi et al, Doppler Resolution Enhancement Algorithm Based on Extrapolation for FMCW Radar, Journal of Electrical Engineering & Technology (2025). DOI: 10.1007/s42835-025-02453-6

Citation:
New algorithm enhances Doppler resolution of unmanned vehicle radars (2025, November 11)
retrieved 11 November 2025
from https://techxplore.com/news/2025-11-algorithm-doppler-resolution-unmanned-vehicle.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Tech

Spray 3D concrete printing simulator boosts strength and design

Published

on

Spray 3D concrete printing simulator boosts strength and design


Spray-based concrete 3D printing also allows builders more flexibility in the design of their builds. Credit: Carnegie Mellon University Mechanical Engineering

Concrete 3D printing reduces both time and cost by eliminating traditional formwork, the temporary mold for casting. Yet most of today’s systems rely on extrusion-based methods, which deposit material very close to a nozzle layer by layer. This makes it impossible to print around reinforcement bars (rebars) without risk of collision, limiting both design flexibility and structural integrity of builds.

Kenji Shimada and researchers in his Carnegie Mellon University’s Computational Engineering and Robotics Laboratory (CERLAB), are breaking through that limitation with a new simulation tool for spray-based concrete 3D .

“Spray-based concrete 3D printing is a new process with complicated physical phenomena,” said Shimada, a professor of mechanical engineering. “In this method, a modified shotcrete mixture is sprayed from a nozzle to build up on a surface, even around rebar.”

The ability to print freely around reinforcement is especially important in places like Japan and California, where earthquakes are an imminent threat and structural strength is critical.

“To make this technology viable, we must be able to predict exactly how the concrete will spray and dry into the final shape,” Shimada explained. “That’s why we developed a simulator for concrete spray 3D printing.”

The new simulator can model the viscoelastic behaviors of shotcrete mixtures, including drip, particle rebound, spread, and solidification time. This way, contractors can assess multiple printing paths based on a CAD design with the simulator to evaluate whether spray 3D printing is a feasible fabrication technique for their structure.






The team traveled to Tokyo, Japan, where Shimizu Corporation already operates spray 3D printing robots to validate their model. In the first test, the team focused on the simulator’s ability to predict shape based on the speed of the nozzle’s movement. With 90.75% accuracy, the simulator could predict the height of the sprayed concrete. The second test showed that the could predict printing over rebar with 92.3% and 97.9% accuracy for width and thickness, respectively.

According to Soji Yamakawa, a research scientist in Shimada’s lab and the lead author of the team’s published in IEEE Robotics and Automation Letters, a simulation of this kind would typically take hours, if not days, to run.

“By making wild assumptions, we were able to successfully simplify a super complex physics simulation into a combination of efficient algorithms and data structures and still achieved highly realistic output,” Yamakawa said.






Future work will aim to increase accuracy by identifying environmental parameters like humidity, optimizing performance, and adding plastering simulation to create smoother finished products.

“There are still so many applications and technologies that we can develop with robotics,” said Kyshalee Vazquez-Santiago, a co-author of the paper and a mechanical engineering Ph.D. candidate leading the Mobile Manipulators research group within CERLAB.

“Even in concrete 3D printing, we are working with an entirely new type of application and approach that has so many advantages but leaves so much room for further development.”

More information:
Soji Yamakawa et al, Concrete Spray 3D Printing Simulator for Nozzle Trajectory Planning, IEEE Robotics and Automation Letters (2025). DOI: 10.1109/lra.2025.3615038

Citation:
Spray 3D concrete printing simulator boosts strength and design (2025, November 11)
retrieved 11 November 2025
from https://techxplore.com/news/2025-11-spray-3d-concrete-simulator-boosts.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Trending