
Reference #18.c5d07868.1778829346.6347c74b
https://errors.edgesuite.net/18.c5d07868.1778829346.6347c74b
Source link

Reference #18.c5d07868.1778829346.6347c74b
https://errors.edgesuite.net/18.c5d07868.1778829346.6347c74b
Reference #18.490dde17.1778829220.4344b0bb
https://errors.edgesuite.net/18.490dde17.1778829220.4344b0bb
On May 15, Palestinians across historic Palestine and the diaspora commemorate the ‘Nakba’ or the ‘catastrophe’ of 1948. Al Jazeera’s Hala Al Shami explains how Zionist militias tore through Palestinian society and displaced 800,000 people after the British laid the foundations for dispossession.
Published On 15 May 2026
Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2026-42897 (CVSS score: 8.1), has been described as a spoofing bug stemming from a cross-site scripting flaw. An anonymous researcher has been credited with discovering and reporting the issue.
“Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network,” the tech giant said in a Thursday advisory.
Microsoft, which tagged the vulnerability with an “Exploitation Detected” assessment, said an attacker could weaponize it by sending a crafted email to a user, which, when opened in Outlook Web Access and subject to other “certain interaction conditions,” can allow arbitrary JavaScript code to be executed in the context of the web browser.
Redmond also noted that it’s providing a temporary mitigation through its Exchange Emergency Mitigation Service, while it’s readying a permanent fix for the security defect.
The Exchange Emergency Mitigation Service will provide the mitigation automatically via a URL rewrite configuration, and is enabled by default. It’s not on, users are advised to enable the Windows service.
According to Microsoft, Exchange Online is not impacted by this vulnerability. The following on-premises Exchange Server versions are affected –
If using the Exchange Emergency Mitigation Service is not an option due to air-gap restrictions, the company has outlined the following series of actions –
Microsoft said it’s also aware of a known issue where mitigation shows the “Mitigation invalid for this exchange version” in the Description field. “This issue is cosmetic and the mitigation DOES apply successfully if the status is shown as ‘Applied,'” the Exchange Team said. “We are investigating on how to address this.”
There are currently no details on how the vulnerability is being exploited, the identity of the threat actor behind the activity, or the scale of such efforts. It’s also unclear who the targets are and if any of those attacks were successful. In the interim, it’s recommended to apply the mitigations recommended by Microsoft.
Thousands of British Gas customers who had prepayment meters force-fitted in their homes will receive up to £112m in compensation and debt write-offs on their energy bills.
Great Britain’s energy regulator found that British Gas forced prepayment meters on homes that were not keeping up with their bills at the height of the Russian gas crisis, in one of the most complex Ofgem investigations in its history.
Over three years after the scandal emerged, British Gas must pay a £20m penalty into Ofgem’s voluntary redress fund to compensate customers who suffered unfair treatment and write off debt worth up to £70m.
The supplier will also continue to provide the remainder of a £22.4m voluntary support package that it launched in the wake of the scandal which is aimed at supporting customers on prepayment meters (PPMs).
Tim Jarvis, Ofgem’s chief executive, said: “It is clear that British Gas fell short in its treatment of an unacceptable number of vulnerable customers who had a PPM installed without consent, and it’s right that they’ve taken action to put things right. Because of our action customers will receive a substantial package of redress, compensation and debt write-off.”
Ofgem temporarily banned the practice of forcing prepayment meters on households that missed repeated payments on their bills after the Times reported in early 2023 that debt agents working for British Gas had ignored signs of vulnerability to fit the meters.
The regulator later found that most of Great Britain’s major energy suppliers had forced prepay meters into the homes of customers as the energy cost crisis in 2022 caused many to miss payments on their bills.
The investigation into British Gas concluded about one year after a separate investigation found that ScottishPower, EDF, E.ON, Octopus Energy, Utility Warehouse, Good Energy, TruEnergy and Ecotricity had fallen short of the regulator’s standards when fitting prepayment meters to reclaim unpaid energy debts.
The suppliers collectively agreed last May to pay 40,000 households more than £18.6m in compensation and debt write-offs on their energy bills.
“The installation of prepayment meters under warrant should only be a last resort, with rigorous checks to ensure debt is recovered lawfully, proportionately and safely,” Jarvis said.
“This investigation forms part of Ofgem’s wider work to raise standards across the energy market and strengthen consumer protections. We continue to challenge suppliers to do more to identify and support customers in difficulty and proactively offer support, and our priority remains driving lasting improvements so customers can have confidence they will be treated fairly,” he added.
Chris O’Shea, the chief executive of Centrica, which owns British Gas, said: “What happened should never have happened, and I am sorry to the prepayment customers who were affected.
“Over the last three years, we have treated this matter with the seriousness it deserves and have made changes to our practices and put safeguards in place to ensure we deliver the standards our customers have every right to expect.”
The regulator allowed suppliers to restart forced meter installations less than a year after its moratorium, although forced fittings in homes with young children or residents over the age of 75 remain banned.
Gold discounts in India jumped to a record this week as a sharp import duty hike slowed demand and triggered investor selling, while investment demand kept Chinese premiums firm.
Dealers in India quoted discounts of up to $207 an ounce over official domestic prices this week, inclusive of 15 per cent import and 3 per cent sales levies, up from the previous week’s discounts of up to $15 an ounce and premiums of $6.
The sudden price rise prompted investors to sell, while jewelers and retail buyers stayed on the sidelines, said a jeweler based in Hyderabad.
Earlier this week, India raised import tariffs on gold and silver to 15 per cent from 6 per cent. The world’s second-largest consumer of gold also tightened rules for duty-free gold imports for jewelery exports by capping imports at 100 kilograms per license.
Domestic gold prices in India were trading around ₹1,60,500 per 10 grams on Friday, after rising to ₹1,64,497 earlier this week, the highest in more than two months.
Gold discounts jumped to unusually high levels as demand virtually disappeared and scrap supplies increased, said a Mumbai-based bullion dealer.
“Firmer demand from China will likely counter India’s weaker demand after the latter’s policy changes,” ANZ said in a note.
In top consumer China, bullion traded at premiums of $15 to $20 an ounce over the global benchmark price, largely in line with last week’s premiums of $14 to $20.
Premiums remained steady this week, supported by resilient investment demand and aggressive industrial buying, said Bernard Sin, regional director of Greater China at MKS PAMP.
“Import restrictions remain a key constraint, though loosening is widely anticipated soon. Industrial stockpiling by solar and electronics firms is particularly aggressive, amplified by the removal of VAT (value-added tax) export rebates,” he said.
Spot gold prices have declined 2.8 per cent so far in the week, as higher energy prices fuelled inflation concerns and reinforced expectations of prolonged higher interest rates.
In Hong Kong, gold traded at par to premiums of $2, while in Japan, gold was sold at a discount of $0.50. In Singapore, gold was sold at premiums of $1 to $3.30.
($1 = 95.94 Indian rupees)
Published on May 15, 2026
Reference #18.490dde17.1778830827.43477a86
https://errors.edgesuite.net/18.490dde17.1778830827.43477a86