newsweek--2020-12-17--Trump Self-Pardon Could Be Admission of Guilt: Ex-Watergate Prosecutor

A former Watergate lawyer has warned that pardons given by President Donald Trump—including a pre-emptive one for himself—could be considered an admission of guilt in court and pose significant legal problems in the future .
Nick Akerman , who was assistant special Watergate prosecutor in the case that led to the resignation of former president Richard Nixon , criticized the clemency rulings made by Trump , which included his adviser , Roger Stone and his former national security advisor Michael Flynn .
He told CNN that pardons at the end of a presidency would typically come at the recommendation of @ @ @ @ @ @ @ of Justice for candidates who `` led exemplary lives '' and may have been the victim of `` some kind of injustice in their conviction . ''
`` The type of people he is pardoning are people like Roger Stone who never served a day in jail but was convicted for covering up the Russia investigation for Donald Trump , '' Akerman said .
`` That is not the purpose of the pardon power , '' Akerman told anchor Erin Burnett , `` I mean , what we 're witnessing is a pretty @ @ @ @ @ @ @ power . ''
When asked about speculation that Trump might use the pardon power on himself , or his family members , Akerman said that such a move would not provide cover for state-level court cases .
The New York Times reported that Trump has asked advisers about `` preemptively '' pardoning his three eldest children and in 2018 , he said he had the `` absolute right '' to pardon himself , although legal experts dispute this .
In the segment on Wednesday , Burnett introduced a clip of the attorney general @ @ @ @ @ @ @ who is currently pursuing a civil investigation into the president , in which she said would continue when `` Trump becomes a private citizen . ''
Akerman believed that Trump `` could be in a lot of trouble ... even if he tried to pardon himself , which I do n't think he can . ''
Akerman said that in 1915 the U.S. Supreme Court had ruled that to `` accept any kind of pardon is basically a confession of guilt . ''
`` So if he or his family want to confess @ @ @ @ @ @ @ pardons , which presumably could even be used against them in the state proceedings .
`` So by accepting a federal pardon , they could basically be admitting to guilt that could be used against them in a court of law in the state of New York or New Jersey . ''
The Supreme Court case Akerman refers to the case Burdick v. United States in which someone wanted to reject a pardon because it made him look guilty of something he said he had not done .
There is some disagreement about @ @ @ @ @ @ @ University law professor Brian Kalt last month told Newsweek : `` It is incorrect to say , as many , many people do , that accepting a pardon equals an official admission of guilt . ''
Newsweek has contacted the White House for comment .

A former Watergate lawyer has warned that pardons given by President Donald Trump—including a pre-emptive one for himself—could be considered an admission of guilt in court and pose significant legal problems in the future.
Nick Akerman, who was assistant special Watergate prosecutor in the case that led to the resignation of former president Richard Nixon, criticized the clemency rulings made by Trump, which included his adviser, Roger Stone and his former national security advisor Michael Flynn.
He told CNN that pardons at the end of a presidency would typically come at the recommendation of the pardon of office and the Department of Justice for candidates who "led exemplary lives" and may have been the victim of "some kind of injustice in their conviction."
"The type of people he is pardoning are people like Roger Stone who never served a day in jail but was convicted for covering up the Russia investigation for Donald Trump," Akerman said.
"That is not the purpose of the pardon power," Akerman told anchor Erin Burnett, "I mean, what we're witnessing is a pretty widespread pattern of corruption using this pardon power."
When asked about speculation that Trump might use the pardon power on himself, or his family members, Akerman said that such a move would not provide cover for state-level court cases.
The New York Times reported that Trump has asked advisers about "preemptively" pardoning his three eldest children and in 2018, he said he had the "absolute right" to pardon himself, although legal experts dispute this.
In the segment on Wednesday, Burnett introduced a clip of the attorney general of New York, Letitia James, who is currently pursuing a civil investigation into the president, in which she said would continue when "Trump becomes a private citizen."
Akerman believed that Trump "could be in a lot of trouble... even if he tried to pardon himself, which I don't think he can."
Akerman said that in 1915 the U.S. Supreme Court had ruled that to "accept any kind of pardon is basically a confession of guilt."
"So if he or his family want to confess to guilt, they would be accepting pardons, which presumably could even be used against them in the state proceedings.
"So by accepting a federal pardon, they could basically be admitting to guilt that could be used against them in a court of law in the state of New York or New Jersey."
The Supreme Court case Akerman refers to the case Burdick v. United States in which someone wanted to reject a pardon because it made him look guilty of something he said he had not done.
There is some disagreement about this among legal scholars. Michigan State University law professor Brian Kalt last month told Newsweek: "It is incorrect to say, as many, many people do, that accepting a pardon equals an official admission of guilt." Newsweek has contacted the White House for comment.


newsweek--2020-12-17--'Nasrin' Documentary Is a Profile in Courage for the 21st Century

Nasrin Sotoudeh , the subject of Nasrin the compelling new documentary by Jeff Kaufman and Marcia Ross , may be the bravest person you never met .
She is a lawyer for women 's rights and human rights in Iran , a country that does not seem to value either very much .
To be more accurate : The government is intent on suppressing the rights of dissidents in general and women in particular .
As seen throughout the film , the people of Iran are among the most welcoming and friendly in the world .
Sotoudeh is her country @ @ @ @ @ @ @ for the rights of the underserved .
She usually stays just within the law , but she is ready to go to prison , and in fact at this writing she is in prison—and has been several times .
But she persists .
She does not always wear a hijab , the head covering scarf that women in Iran must wear in public .
What to some Western eyes , would seem to be a relatively innocuous act , it a very big deal in this repressive state , an act of defiance @ @ @ @ @ @ @ defense of women not wearing a hijab has also led to her arrest .
Nasrin is very public in her opposition , if not open defiance of the law and as such has a target on her back .
At one point , a colleague suggests that she should have a bodyguard , but Nasrin dismisses this offhand : She ca n't have a bodyguard all day every day .
But it is clear that this is not an unreasonable request .
Since the 1979 Islamic Revolution in Iran , the situation got @ @ @ @ @ @ @ one dissident says that people were promised that the prisons would be turned into universities .
Then he was arrested .
And he saw that his fellow prisoners turned out to be professors and intellectuals .
So the prisons did indeed become universities .
That Sotoudeh has had any success is amazing .
The odds are stacked against her .
Even when she argues the letter of the law in court , she is treated with a total lack of respect .
She knows that that the government would not be happy with @ @ @ @ @ @ @ deter her .
And this riveting film shines a light on one of the most enlightened , exciting and courageous people in the fight for human rights .
Viewers should be forgiven if they feel like they are watching a 1960s- or 1970s-era paranoia film , like Three Days of the Condor , Parallax View or even Missing .
But this is as real as it gets .
People here are going about their daily lives , but no one feels truly safe .
If Big Brother is not watching , then someone @ @ @ @ @ @ @ one slip-up or one betrayal away from disappearing into a Kafkaesque nightmare .
Against this background , Sotoudeh and her husband , Reza Khandan , work diligently for their cause .
And in so doing they seem to embolden the people .
Women remove their hijabs in public and flaunt their defiance for the cameras .
Sotoudeh 's defense of these women proves to be the last straw for the government , which steps in and arrests her .
But unlike anything in Kafka , Nasrin Sotoudeh is far from forgotten , as @ @ @ @ @ @ @ much a cause as a defender of a cause .
And Nasrin is a profile in courage for the 21st century and a movie that really has to be seen .
Note : Since the film was completed , Sotoudeh was released from prison for health reasons , diagnosed with COVID-19 , but on December 2 she was returned to prison .

Nasrin Sotoudeh, the subject of Nasrin the compelling new documentary by Jeff Kaufman and Marcia Ross, may be the bravest person you never met. She is a lawyer for women's rights and human rights in Iran, a country that does not seem to value either very much. To be more accurate: The government is intent on suppressing the rights of dissidents in general and women in particular. As seen throughout the film, the people of Iran are among the most welcoming and friendly in the world.
Sotoudeh is her country's Nelson Mandela: a courageous fighter for the rights of the underserved. She usually stays just within the law, but she is ready to go to prison, and in fact at this writing she is in prison—and has been several times. But she persists.
She does not always wear a hijab, the head covering scarf that women in Iran must wear in public. What to some Western eyes, would seem to be a relatively innocuous act, it a very big deal in this repressive state, an act of defiance that is almost unheard of.
Her defense of women not wearing a hijab has also led to her arrest. Nasrin is very public in her opposition, if not open defiance of the law and as such has a target on her back.
At one point, a colleague suggests that she should have a bodyguard, but Nasrin dismisses this offhand: She can't have a bodyguard all day every day. But it is clear that this is not an unreasonable request.
Since the 1979 Islamic Revolution in Iran, the situation got extremely repressive. Before the revolution, one dissident says that people were promised that the prisons would be turned into universities. Then he was arrested. And he saw that his fellow prisoners turned out to be professors and intellectuals. So the prisons did indeed become universities.
That Sotoudeh has had any success is amazing. The odds are stacked against her. Even when she argues the letter of the law in court, she is treated with a total lack of respect.
She knows that that the government would not be happy with any publicity. But nothing seems to deter her. And this riveting film shines a light on one of the most enlightened, exciting and courageous people in the fight for human rights.
Viewers should be forgiven if they feel like they are watching a 1960s- or 1970s-era paranoia film, like Three Days of the Condor, Parallax View or even Missing. But this is as real as it gets. People here are going about their daily lives, but no one feels truly safe. If Big Brother is not watching, then someone else probably is; and Sotoudeh is one slip-up or one betrayal away from disappearing into a Kafkaesque nightmare.
Against this background, Sotoudeh and her husband, Reza Khandan, work diligently for their cause. And in so doing they seem to embolden the people. Women remove their hijabs in public and flaunt their defiance for the cameras. Sotoudeh's defense of these women proves to be the last straw for the government, which steps in and arrests her. But unlike anything in Kafka, Nasrin Sotoudeh is far from forgotten, as this film attests. She is as much a cause as a defender of a cause. And Nasrin is a profile in courage for the 21st century and a movie that really has to be seen.
Note: Since the film was completed, Sotoudeh was released from prison for health reasons, diagnosed with COVID-19, but on December 2 she was returned to prison.
Nasrin opens December 18 nationwide in virtual cinemas.


newsweek--2020-12-17--US Government Reliance on Commercial Software Makes It Susceptible to Future Cyber Attacks

The cyber supply chain attack that infiltrated a software company used by top federal and corporate institutions is just a preview of larger risks that lie ahead .
A certain level of system vulnerability is unavoidable in a world where the government must assume that private sector certifications consistently meet the security standards that adequately protect some of our most valued information .
Experts say the problem , at its heart , is a matter of time and trust .
`` How do you know what 's going on in your computer ? ''
asks Herbert Lin , leading cybersecurity @ @ @ @ @ @ @ answer is you do n't , you just trust that the thing works . ''
To some extent , that 's what the federal government does .
Lin , who has held various cyber-related academic positions , and served on former President Barack Obama 's Commission on Enhancing National Cybersecurity , now holds a dual role as senior research scholar at the Center for International Security and Cooperation and a fellow at the Hoover Institution 's Cyber Policy and Security at Stanford University .
He has decades of experience in defending against unwanted @ @ @ @ @ @ @ possibly unprecedented hack that hit SolarWinds , however , Lin is particularly concerned about vulnerabilities as they relate to software supply chains , because of the unique risk they pose to nearly every level of society — including the U.S. government .
Lin told Newsweek that it boils down to a simple fact of modern life : `` Nobody builds a computer from scratch anymore . ''
Among the countless points of transit from libraries of raw source code to the finished product operating on some of the most important desks across the @ @ @ @ @ @ @ anywhere along the way could entail a widespread compromise of catastrophic proportions .
That is exactly what happened in the case of SolarWinds .
While officials and experts are scrambling to investigate the degree to which malware may have allowed illicit access to public and private sector secrets , what is known is that for months — potentially since March — up to tens of thousands of networks were infiltrated by a cybersecurity operation whose very definition and danger are unknown to much of the population .
Josephine Wolff , professor of Cybersecurity @ @ @ @ @ @ @ University , explained why even well-equipped institutions fail to guard against supply chain attacks .
`` Supply chain attacks are dangerous because they exploit organizations ' trust in their vendors , '' Wolff told Newsweek , `` and parts of their organization that they do not have direct exposure to monitoring and protecting because they are being carried out by third parties who are part of the supply chain , rather than in-house . ''
That makes supply chain attacks an exceedingly challenging threat , especially to a government that relies on such @ @ @ @ @ @ @ They ] can be very difficult to detect , and require tremendous scrutiny and diligence on the part of the supply chain entities , otherwise the targets may not be aware of them until much later , '' Wolff said .
`` In this case , the breach is particularly damaging because a single compromise granted such broad and high-level access to so many high-value public and private sector organizations through their shared supply chain vendor , SolarWinds . ''
But SolarWinds is just the beginning .
The Department of Homeland Security 's @ @ @ @ @ @ @ it `` has evidence of additional initial access vectors , other than the SolarWinds Orion platform , '' though these remain under investigation .
Those familiar with how the hack appears to have played out described SolarWinds , specifically an update to the Orion IT product , as an initial access point , a door , for the adversaries to gain entry into the networks of clients that place trust in their certified tools .
While the exact point of access has not yet been determined , news that the update server 's @ @ @ @ @ @ @ inspire confidence among experts and laymen alike .
Access to this server would allow a particularly tech-savvy actor to quietly upload a spoofed update that walks and talks just like the real thing , but includes hidden malware .
Such updates are vetted for functionality , but are not screened for internal intruders .
Once inside the target system , the possibilities for further and widespread malign activities are nearly endless .
Experts can only speculate as to what the intruders could do , ranging from broad espionage to remote code execution granting @ @ @ @ @ @ @ .
`` Current security info efforts evaluate by looking from the outside looking in , '' a cybersecurity expert who requested anonymity because they were not authorized to speak with the media told Newsweek .
`` This changes the game because you have to go from the inside looking out , because nobody threatens models you already trust . ''
But the answer is n't to forgo patches that provide vital updates addressing existing vulnerabilities .
The extreme alternative would be something another cybersecurity expert with two decades of experience termed `` zero @ @ @ @ @ @ @ , every update is finely reviewed in a manner that would prove challenging if not impossible in a modern-day setting .
`` That is the mechanism to guard against this , '' the expert said , `` very difficult and costly and very hard to do , because it would require you to check everything . ''
Another expert , a cybersecurity executive , said that conducting increased scrutiny of every patch would create a new host of problems , not the least of which is increased system vulnerability .
`` There are @ @ @ @ @ @ @ can hire an army of network engineers — this does n't scale — or you can allow time to do a full review of each security patch in the supply chain , '' the executive said .
`` Now the patch that is being introduced has to be viewed as a potential threat and reviewed , you have to accept the lag time , but both come with a premium . ''
Such a reform is difficult , perhaps even impossible , in the contemporary competitive atmosphere in which U.S. public and private @ @ @ @ @ @ @ have the time to vet patches in my workflow , '' the executive said .
`` We do n't question a patch from a company that has met every security requirement along the way .
Ninety-nine percent of federal agencies and corporate America do n't have the ability to even change that model . ''
The malware that got through to SolarWinds was so sophisticated that it knew not to activate when it was in a sandbox , or testing , mode , and only awoke after 14 days of dormancy once in @ @ @ @ @ @ @ .
This is why the supposedly stringent security measures that SolarWinds incorporated into its operation in 2017 in order to earn an Evaluation Assurance Level ( EAL ) 2 rating ( based on a scale of one to four , with one being the highest ) failed to break the chain of infection that brought digitally signed malware to customers .
`` In this case , the attacker was able to subvert the software build system , software creation system , '' Art Manion , a senior member of the Vulnerability Analysis team @ @ @ @ @ @ @ University 's Software Engineering Institute , told Newsweek , `` and the malicious software was still signed , so a normal defense mechanism of digital signature was not effective in this case . ''
Other defense mechanisms involve costly micromanagement measures akin to the `` zero trust '' model '' that also are n't always best suited to the rapidly transforming environment in which these systems operate .
And ultimately , the value of a target like SolarWinds will always be a liability in security terms .
`` The very hard problem is @ @ @ @ @ @ @ entry point , '' Manion told Newsweek .
`` A highly resourced and skilled adversary just needs to find one way . ''
And that 's exactly the kind of adversary the U.S. faces .
`` There is a class of adversary that is either nation-state , part of nation-state government , or it is funded by nation-states , is well-funded , well-resourced , '' Manion said , `` so [ it has ] skills , time , the number of people , if necessary , perhaps good planning and patience . ''
@ @ @ @ @ @ @ projects designed to help close the gaps left by software supply chains .
One such endeavor would seek to do so through the establishment of a `` Software Bill of Materials '' ( SBOM ) , which would provide a transparent inventory of exactly what goes into software — a list of ingredients , essentially , that can be reviewed by all stakeholders involved .
`` If we know what software is in our software , many other things are now enabled or unlocked , '' Manion said .
`` So we can @ @ @ @ @ @ @ manage licenses , all sorts of things happen . ''
The initiative is being conducted by the National Telecommunications and Information Administration , part of the Commerce Department , which was affected by the SolarWinds hack .
But if policymakers remain complacent , they should expect to see more breaches on exponentially larger scales .
`` We will definitely see more of this , '' Manion said .
`` It 's the nature of complicated software these days .
This whole supply chain is everywhere , it 's unavoidable , and it 's @ @ @ @ @ @ @ . ''
As to reported indications of Moscow 's involvement , the Russian embassy in Washington has refuted claims of what it deemed `` unfounded attempts of the U.S. media to blame Russia for hacker attacks on U.S. governmental bodies . ''
`` We declare responsibly : malicious activities in the information space contradict the principles of the Russian foreign policy , national interests and our understanding of interstate relations , '' the embassy said in a statement reiterated to Newsweek on Tuesday .
`` Russia does not conduct offensive operations in the @ @ @ @ @ @ @ was behind the hack , Lin also warned of potentially worse things to come if the industry did n't change course in its ravenous approach toward building bigger , better systems with little regard for all the ways in which they can malfunction or be manipulated .
`` We seem to want our computer systems to do more and more , we want our computer systems to sing and dance and play , to have pretty pictures , to have sound , to have touch interfaces , '' he told Newsweek .
`` @ @ @ @ @ @ @ more complicated , more complex .
You want to do more , you have to do more programming , you have to make the programs bigger . ''
This deep-seated addiction to convenience comes with a price .
`` The more complicated things are , the more things that go wrong , '' Lin said .
`` Now the bad guy can get in and more places , and he can do more mischief . ''
`` The only way in the long run to deal with this is to moderate your appetite @ @ @ @ @ @ @ willing to put some limits on my appetite for functionality because of the security problems that it creates , ' '' Lin said .
But that 's easier said than done , he said .
`` As to how you do that ? ''
Lin asked .
`` That 's a judgment question .
But at least somebody needs to be thinking about that and , in fact , nobody thinks about that . ''

The cyber supply chain attack that infiltrated a software company used by top federal and corporate institutions is just a preview of larger risks that lie ahead. A certain level of system vulnerability is unavoidable in a world where the government must assume that private sector certifications consistently meet the security standards that adequately protect some of our most valued information.
Experts say the problem, at its heart, is a matter of time and trust.
"How do you know what's going on in your computer?" asks Herbert Lin, leading cybersecurity expert at Stanford University. "The answer is you don't, you just trust that the thing works."
To some extent, that's what the federal government does.
Lin, who has held various cyber-related academic positions, and served on former President Barack Obama's Commission on Enhancing National Cybersecurity, now holds a dual role as senior research scholar at the Center for International Security and Cooperation and a fellow at the Hoover Institution's Cyber Policy and Security at Stanford University.
He has decades of experience in defending against unwanted online intrusions. In light of the possibly unprecedented hack that hit SolarWinds, however, Lin is particularly concerned about vulnerabilities as they relate to software supply chains, because of the unique risk they pose to nearly every level of society — including the U.S. government.
Lin told Newsweek that it boils down to a simple fact of modern life: "Nobody builds a computer from scratch anymore."
Among the countless points of transit from libraries of raw source code to the finished product operating on some of the most important desks across the globe, a quiet infection gone undetected anywhere along the way could entail a widespread compromise of catastrophic proportions.
That is exactly what happened in the case of SolarWinds.
A cyber warfare operations officer watches members of the 175th Cyberspace Operations Group analyze log files and provide a cyber threat update utilizing a Kibana visualization on the large data wall in the Hunter's Den at Warfield Air National Guard Base, Middle River, Maryland, June 3, 2017. While the Pentagon utilizes the compromised SolarWinds software, a spokesperson told Newsweek that there has so far been no evidence of unauthorized access. J.M. Eddins Jr./Airman Magazine/U.S. Air Force
While officials and experts are scrambling to investigate the degree to which malware may have allowed illicit access to public and private sector secrets, what is known is that for months — potentially since March — up to tens of thousands of networks were infiltrated by a cybersecurity operation whose very definition and danger are unknown to much of the population.
Josephine Wolff, professor of Cybersecurity Policy at The Fletcher School at Tufts University, explained why even well-equipped institutions fail to guard against supply chain attacks.
"Supply chain attacks are dangerous because they exploit organizations' trust in their vendors," Wolff told Newsweek, "and parts of their organization that they do not have direct exposure to monitoring and protecting because they are being carried out by third parties who are part of the supply chain, rather than in-house."
That makes supply chain attacks an exceedingly challenging threat, especially to a government that relies on such commercial software for security.
"[They] can be very difficult to detect, and require tremendous scrutiny and diligence on the part of the supply chain entities, otherwise the targets may not be aware of them until much later," Wolff said. "In this case, the breach is particularly damaging because a single compromise granted such broad and high-level access to so many high-value public and private sector organizations through their shared supply chain vendor, SolarWinds."
But SolarWinds is just the beginning.
The Department of Homeland Security's Cybersecurity and Infrastructure Agency revealed Thursday that it "has evidence of additional initial access vectors, other than the SolarWinds Orion platform," though these remain under investigation.
Those familiar with how the hack appears to have played out described SolarWinds, specifically an update to the Orion IT product, as an initial access point, a door, for the adversaries to gain entry into the networks of clients that place trust in their certified tools. While the exact point of access has not yet been determined, news that the update server's password was "solarwinds123" did not inspire confidence among experts and laymen alike.
Access to this server would allow a particularly tech-savvy actor to quietly upload a spoofed update that walks and talks just like the real thing, but includes hidden malware. Such updates are vetted for functionality, but are not screened for internal intruders.
Once inside the target system, the possibilities for further and widespread malign activities are nearly endless. Experts can only speculate as to what the intruders could do, ranging from broad espionage to remote code execution granting command and control capabilities against infected servers.
"Current security info efforts evaluate by looking from the outside looking in," a cybersecurity expert who requested anonymity because they were not authorized to speak with the media told Newsweek. "This changes the game because you have to go from the inside looking out, because nobody threatens models you already trust."
But the answer isn't to forgo patches that provide vital updates addressing existing vulnerabilities.
The extreme alternative would be something another cybersecurity expert with two decades of experience termed "zero trust," in which every patch, every update is finely reviewed in a manner that would prove challenging if not impossible in a modern-day setting.
"That is the mechanism to guard against this," the expert said, "very difficult and costly and very hard to do, because it would require you to check everything."
Another expert, a cybersecurity executive, said that conducting increased scrutiny of every patch would create a new host of problems, not the least of which is increased system vulnerability.
"There are a couple of solutions. First you can hire an army of network engineers — this doesn't scale — or you can allow time to do a full review of each security patch in the supply chain," the executive said. "Now the patch that is being introduced has to be viewed as a potential threat and reviewed, you have to accept the lag time, but both come with a premium."
Such a reform is difficult, perhaps even impossible, in the contemporary competitive atmosphere in which U.S. public and private entities operate.
"I don't have the time to vet patches in my workflow," the executive said. "We don't question a patch from a company that has met every security requirement along the way. Ninety-nine percent of federal agencies and corporate America don't have the ability to even change that model."
The malware that got through to SolarWinds was so sophisticated that it knew not to activate when it was in a sandbox, or testing, mode, and only awoke after 14 days of dormancy once in production mode, Newsweek learned from officials.
This is why the supposedly stringent security measures that SolarWinds incorporated into its operation in 2017 in order to earn an Evaluation Assurance Level (EAL) 2 rating (based on a scale of one to four, with one being the highest) failed to break the chain of infection that brought digitally signed malware to customers.
"In this case, the attacker was able to subvert the software build system, software creation system," Art Manion, a senior member of the Vulnerability Analysis team in the CERT Program at Carnegie Mellon University's Software Engineering Institute, told Newsweek, "and the malicious software was still signed, so a normal defense mechanism of digital signature was not effective in this case."
Other defense mechanisms involve costly micromanagement measures akin to the "zero trust" model" that also aren't always best suited to the rapidly transforming environment in which these systems operate. And ultimately, the value of a target like SolarWinds will always be a liability in security terms.
"The very hard problem is the defender has to defend every possible entry point," Manion told Newsweek. "A highly resourced and skilled adversary just needs to find one way."
And that's exactly the kind of adversary the U.S. faces.
A partial list of SolarWinds customers as per the company's website as seen on December 14. SolarWinds
"There is a class of adversary that is either nation-state, part of nation-state government, or it is funded by nation-states, is well-funded, well-resourced," Manion said, "so [it has] skills, time, the number of people, if necessary, perhaps good planning and patience."
Manion has worked on a number of projects designed to help close the gaps left by software supply chains. One such endeavor would seek to do so through the establishment of a "Software Bill of Materials" (SBOM), which would provide a transparent inventory of exactly what goes into software — a list of ingredients, essentially, that can be reviewed by all stakeholders involved.
"If we know what software is in our software, many other things are now enabled or unlocked," Manion said. "So we can play better defense, we can better manage licenses, all sorts of things happen."
The initiative is being conducted by the National Telecommunications and Information Administration, part of the Commerce Department, which was affected by the SolarWinds hack. But if policymakers remain complacent, they should expect to see more breaches on exponentially larger scales.
"We will definitely see more of this," Manion said. "It's the nature of complicated software these days. This whole supply chain is everywhere, it's unavoidable, and it's going to be the target for adversaries."
As to reported indications of Moscow's involvement, the Russian embassy in Washington has refuted claims of what it deemed "unfounded attempts of the U.S. media to blame Russia for hacker attacks on U.S. governmental bodies."
"We declare responsibly: malicious activities in the information space contradict the principles of the Russian foreign policy, national interests and our understanding of interstate relations," the embassy said in a statement reiterated to Newsweek on Tuesday. "Russia does not conduct offensive operations in the cyber domain."
Regardless of who was behind the hack, Lin also warned of potentially worse things to come if the industry didn't change course in its ravenous approach toward building bigger, better systems with little regard for all the ways in which they can malfunction or be manipulated.
"We seem to want our computer systems to do more and more, we want our computer systems to sing and dance and play, to have pretty pictures, to have sound, to have touch interfaces," he told Newsweek. "But inevitably, that makes computer systems more complicated, more complex. You want to do more, you have to do more programming, you have to make the programs bigger."
This deep-seated addiction to convenience comes with a price.
"The more complicated things are, the more things that go wrong," Lin said. "Now the bad guy can get in and more places, and he can do more mischief."
"The only way in the long run to deal with this is to moderate your appetite, and say, 'I'm willing to put some limits on my appetite for functionality because of the security problems that it creates,'" Lin said.
But that's easier said than done, he said.
"As to how you do that?" Lin asked. "That's a judgment question. But at least somebody needs to be thinking about that and, in fact, nobody thinks about that."


newsweek--2020-12-17--Advertiser Rethinking Tucker Carlson Slots After Segment Calling Jill Biden 'Illiterate'

Fox News host Tucker Carlson 's recent disparagement of incoming First Lady Dr. Jill Biden has led at least one advertiser to reevaluate its sponsorship of Carlson 's program .
Remarks made by Carlson caused some companies to stop advertising on his program in June .
Biden received her doctorate from the University of Delaware .
Her dissertation focused on retaining students at community colleges .
An op-ed piece published in December by the Wall Street Journal asserted that Biden 's lack of a medical degree precluded her from using the `` Dr. '' prefix .
Some observers criticized the @ @ @ @ @ @ @ Carlson took aim at Biden 's dissertation , which he described as `` incredibly embarrassing , '' on Wednesday by pointing out a number of typographical errors .
`` Dr. Jill needs reading glasses , '' Carlson said .
`` Either that , or she 's borderline illiterate . ''
Food subscription service ButcherBox took exception to Carlson 's description of Biden .
`` Tucker Carlson called Jill Biden 'illiterate ' on last night 's show , '' tweeted Washington Post media reporter Jeremy Barr .
`` A @ butcherbox ad ran .
@ @ @ @ @ @ @ are in no way a reflection of ButcherBox 's beliefs , ' a rep says , 'and we will be evaluating how we can restrict this particular time slot from future ad buys ' '' the tweet continued .
Carlson further described Jill Biden 's dissertation as `` pure nonsense like pig Latin or dogs barking '' and referred to her paper as `` our national shame . ''
Carlson also alleged that Jill Biden was `` a lot smarter than the man she married , '' President-elect Joe Biden .
Some public @ @ @ @ @ @ @ following the op-ed piece , including former Secretary of State Hillary Clinton .
`` Her name is Dr. Jill Biden , '' Clinton tweeted on Sunday .
`` Get used to it . ''
JIll Biden reacted to the op-ed piece published by the Journal in a Sunday tweet .
`` Together , we will build a world where the accomplishments of our daughters will be celebrated , rather than diminished , '' she wrote .
In June , Carlson 's remarks concerning protests over the death of Black man George Floyd at @ @ @ @ @ @ @ some major advertisers to abandon Carlson 's program .
Carlson appeared to blame advocacy group Black Lives Matter for a number of demonstrations .
Carlson said that the protests were `` definitely not about Black lives .
Remember that when they come for you and , at this rate , they will . ''
Papa John 's , Disney , T-Mobile and Poshmark stopped running ads on the program in response to Carlson 's remarks .
Amid the controversy , Carlson 's program continues to be a hit .
According to ratings firm @ @ @ @ @ @ @ received its highest ratings ever in 2020 while grabbing an average of 798,000 viewers in the 25 to 54 age range demographic .
Newsweek reached out to ButcherBox and the Biden transition team for further comment .

Fox News host Tucker Carlson's recent disparagement of incoming First Lady Dr. Jill Biden has led at least one advertiser to reevaluate its sponsorship of Carlson's program.
The advertiser, ButcherBox, is still advertising on Fox News, but has pulled their ads from Tucker Carlson Tonight, a spokesperson for the network told Newsweek. A ButcherBox ad ran during Thursday's Hannity.
Biden received her doctorate from the University of Delaware. Her dissertation focused on retaining students at community colleges. An op-ed piece published in December by the Wall Street Journal asserted that Biden's lack of a medical degree precluded her from using the "Dr." prefix. Some observers criticized the article for taking a misogynistic tone.
Carlson took aim at Biden's dissertation, which he described as "incredibly embarrassing," on Wednesday by pointing out a number of typographical errors.
"Dr. Jill needs reading glasses," Carlson said. "Either that, or she's borderline illiterate."
Food subscription service ButcherBox took exception to Carlson's description of Biden. "Tucker Carlson called Jill Biden 'illiterate' on last night's show," tweeted Washington Post media reporter Jeremy Barr. "A @butcherbox ad ran."
"'Carlson's views and comments are in no way a reflection of ButcherBox's beliefs,' a rep says, 'and we will be evaluating how we can restrict this particular time slot from future ad buys'" the tweet continued.
Tucker Carlson called Jill Biden "illiterate" on last night's show. A @butcherbox ad ran.
"Carlson's views and comments are in no way a reflection of ButcherBox’s beliefs," a rep says, "and we will be evaluating how we can restrict this particular time slot from future ad buys" — Jeremy Barr (@jeremymbarr) December 17, 2020
Carlson further described Jill Biden's dissertation as "pure nonsense like pig Latin or dogs barking" and referred to her paper as "our national shame." Carlson also alleged that Jill Biden was "a lot smarter than the man she married," President-elect Joe Biden.
Controversial comments by Fox News host Tucker Carlson have led to advertisers choosing to spend their money elsewhere. Chip Somodevilla/Getty
Some public figures came to Jill Biden's defense following the op-ed piece, including former Secretary of State Hillary Clinton. "Her name is Dr. Jill Biden," Clinton tweeted on Sunday. "Get used to it."
JIll Biden reacted to the op-ed piece published by the Journal in a Sunday tweet. "Together, we will build a world where the accomplishments of our daughters will be celebrated, rather than diminished," she wrote.
Together, we will build a world where the accomplishments of our daughters will be celebrated, rather than diminished. — Dr. Jill Biden (@DrBiden) December 14, 2020
In June, Carlson's remarks concerning protests over the death of Black man George Floyd at the hands of Minneapolis police officers caused some major advertisers to abandon Carlson's program. Carlson appeared to blame advocacy group Black Lives Matter for a number of demonstrations. Carlson said that the protests were "definitely not about Black lives. Remember that when they come for you and, at this rate, they will."
Papa John's, Disney, T-Mobile and Poshmark stopped running ads on the program in response to Carlson's remarks.
Amid the controversy, Carlson's program continues to be a hit. According to ratings firm Nielsen Media Research, Tucker Carlson Tonight received its highest ratings ever in 2020 while grabbing an average of 798,000 viewers in the 25 to 54 age range demographic.
Newsweek reached out to ButcherBox and the Biden transition team for further comment.


newsweek--2020-12-17--Microsoft Hit in SolarWinds Hack, But Denies Software Used For More Attacks

Microsoft has denied a report that it was attacked in the recent SolarWinds hacking incident that breached security at several key federal government agencies .
A Thursday report from Reuters claimed that Microsoft was hacked and the company 's compromised software was used for additional attacks on others , citing information from anonymous people said to be familiar with the situation .
The report did not indicate what Microsoft software was involved or how many of the company 's customers may have been affected .
`` Like other SolarWinds customers , we have been actively looking for indicators of this @ @ @ @ @ @ @ malicious Solar Winds binaries in our environment , which we isolated and removed , .
We have not found evidence of access to production services or customer data , '' a Microsoft spokesperson told Newsweek .
`` Our investigations , which are ongoing , have found absolutely no indications that our systems were used to attack others . ''
`` We believe the sources for the Reuters report are misinformed or misinterpreting their information , '' the spokesperson added .
Microsoft has taken several steps to safeguard its Windows operating system and block @ @ @ @ @ @ @ few days , according to ZDNet .
Yesterday , SolarWinds ' compromised Orion app was forced into `` quarantine '' by Microsoft Defender antivirus software running on Windows computers .
U.S. government agencies that were known targets of the suspected Russian campaign include the Department of Homeland Security , the Treasury Department , the Department of Commerce 's National Telecommunications and Information Administration , the National Institutes of Health , the Cybersecurity and Infrastructure Agency and the Department of State .
A Thursday report published by Bloomberg claimed that the Energy Department 's @ @ @ @ @ @ @ maintaining the country 's nuclear stockpile , was breached along with government networks in three unidentified states .
The Intercept reported on the same day that the government network of Austin , Texas also was targeted and breached in the attack .
The attack was discovered after cybersecurity company FireEye , which was also hacked , investigated how its own systems were compromised .
A `` backdoor '' in the SolarWinds software was found to be the source of the breach .
Multiple reports suggest that the Russian intelligence-linked hacking group known as @ @ @ @ @ @ @ behind the attacks .
The group was also believed to be behind the breach of Democratic National Committee servers that occurred during the 2016 presidential election .
Dmitry Peskov , a spokesperson for Russian President Vladimir Putin , told the Russian state-run news agency TASS that the country was not behind the attacks on Monday .
`` I reject these statements , these accusations , once again , '' Peskov insisted .
`` Even if it is true there have been some attacks over many months and the Americans managed to do nothing @ @ @ @ @ @ @ to groundlessly blame Russians right away .
We have nothing to do with this . ''

Microsoft has denied a report that it was attacked in the recent SolarWinds hacking incident that breached security at several key federal government agencies.
A Thursday report from Reuters claimed that Microsoft was hacked and the company's compromised software was used for additional attacks on others, citing information from anonymous people said to be familiar with the situation. The report did not indicate what Microsoft software was involved or how many of the company's customers may have been affected.
A Microsoft spokesperson told Newsweek the report was erroneous.
"Like other SolarWinds customers, we have been actively looking for indicators of this actor and can confirm that we detected malicious Solar Winds binaries in our environment, which we isolated and removed,. We have not found evidence of access to production services or customer data," a Microsoft spokesperson told Newsweek. "Our investigations, which are ongoing, have found absolutely no indications that our systems were used to attack others."
"We believe the sources for the Reuters report are misinformed or misinterpreting their information," the spokesperson added.
Microsoft was reportedly attacked in the recent SolarWinds hacking incident that breached security at several key federal government agencies. Noam Galai/Getty
Microsoft has taken several steps to safeguard its Windows operating system and block the compromised SolarWinds software in the past few days, according to ZDNet. Yesterday, SolarWinds' compromised Orion app was forced into "quarantine" by Microsoft Defender antivirus software running on Windows computers.
U.S. government agencies that were known targets of the suspected Russian campaign include the Department of Homeland Security, the Treasury Department, the Department of Commerce's National Telecommunications and Information Administration, the National Institutes of Health, the Cybersecurity and Infrastructure Agency and the Department of State.
A Thursday report published by Bloomberg claimed that the Energy Department's National Nuclear Security Administration, responsible for maintaining the country's nuclear stockpile, was breached along with government networks in three unidentified states. The Intercept reported on the same day that the government network of Austin, Texas also was targeted and breached in the attack.
The attack was discovered after cybersecurity company FireEye, which was also hacked, investigated how its own systems were compromised. A "backdoor" in the SolarWinds software was found to be the source of the breach.
Multiple reports suggest that the Russian intelligence-linked hacking group known as APT29, or Cozy Bear, was behind the attacks. The group was also believed to be behind the breach of Democratic National Committee servers that occurred during the 2016 presidential election.
Dmitry Peskov, a spokesperson for Russian President Vladimir Putin, told the Russian state-run news agency TASS that the country was not behind the attacks on Monday.
"I reject these statements, these accusations, once again," Peskov insisted. "Even if it is true there have been some attacks over many months and the Americans managed to do nothing about them, possibly it is wrong to groundlessly blame Russians right away. We have nothing to do with this."


newsweek--2020-12-17--Brief Government Shutdown Possible as Congress Tries to Hammer Out Stimulus Deal

A brief government shutdown is possible over the weekend , as funding expires Friday at midnight and congressional leaders had yet to reach an agreement Thursday on a coronavirus relief package .
Passing another stopgap spending bill , known as a continuing resolution ( CR ) , could keep the government open for a few more days while leaders on Capitol Hill try to iron out their differences over a $ 900 billion package .
Congress has yet to pass the annual budget because leaders plan to approve both it and the final stimulus concurrently .
But a top Senate @ @ @ @ @ @ @ into resistance over a swift CR approval .
It only takes one member to prevent immediate passage and cause Congress to run past the midnight deadline , something several members flirted with last week when a separate potential shutdown was narrowly averted .
`` I know people who are gon na object to that , [ who ] want to keep pressure on the process until we get a deal , '' said Senate Majority Whip John Thune ( R-S.D . )
, the top vote-counter to Senate Majority Leader Mitch McConnell .
@ @ @ @ @ @ @ , to do a short-term CR . ''
Sen. Josh Hawley ( R-Mo . )
, who plans to force an up-or-down vote Friday on passing a second round of $ 1,200 checks , left the door open as to whether he might object to a CR .
`` I would say all options are on the table , '' Hawley told reporters .
`` But they need to get this package done .
My sense is there 's a fair amount of disarray at the moment . ''
Another top GOP senator @ @ @ @ @ @ @ , advised any member against blocking a CR and thought a shutdown was unlikely .
`` That just seems like unnecessary , self-inflicted damage , '' he said .
`` Adding another element of chaos and challenge does n't seem prudent .
I 'd be surprised . ''
House Democratic leadership was hesitant to acknowledge they 'll need a CR , holding out longshot hope that a deal will be reached Thursday night .
But top Democrats signaled that , if one is needed , they 'll pass it .
`` We 'll @ @ @ @ @ @ @ and figure out what we 're going to do , '' House Majority Leader Steny Hoyer ( D-Md . )
said .
Congressional leaders—House Speaker Nancy Pelosi ( D-Calif. ) , House Minority Leader Kevin McCarthy ( R-Calif. ) , McConnell and Senate Minority Leader Chuck Schumer ( D-N.Y. ) —still have not reached agreement over what is expected to be around a $ 900 billion package .
However , both sides remain hopeful , despite hang-ups over provisions like stimulus check eligibility and emergency money for Federal Emergency Management Agency that could @ @ @ @ @ @ @ `` We must not slide into treating these talks like routine negotiations to be conducted at Congress ' routine pace , '' said McConnell , who warned senators that the chamber will be working through the weekend and will not leave town for the holidays until aid is passed .
`` We need to complete this work and we need to complete it right away . ''
The $ 900 billion package is currently expected to include a second round of checks worth $ 600 , supplemental unemployment insurance of $ 300 per @ @ @ @ @ @ @ for small businesses , among other things .
But among the remaining sticking points are who should qualify for another check , as well as concerns among Republicans that the FEMA money could be used as a `` slush fund '' for state and local governments .
Democrats agreed to exclude a separate pot of state and local aid due to GOP opposition .
`` Checks [ are ] complicated .
I think designing that in a way that maximizes the amount that an individual or family can receive and try and target @ @ @ @ @ @ @ the most I think is one the biggest challenges , '' Senate Majority Whip Thune said .
`` And then figuring out this FEMA fund , and how that gets distributed and putting guardrails in there to make sure that it 's not just a slush fund for state and local governments , which would create a lot of problems on our side . ''

A brief government shutdown is possible over the weekend, as funding expires Friday at midnight and congressional leaders had yet to reach an agreement Thursday on a coronavirus relief package.
Passing another stopgap spending bill, known as a continuing resolution (CR), could keep the government open for a few more days while leaders on Capitol Hill try to iron out their differences over a $900 billion package. Congress has yet to pass the annual budget because leaders plan to approve both it and the final stimulus concurrently.
But a top Senate Republican signaled the upper chamber will run into resistance over a swift CR approval. It only takes one member to prevent immediate passage and cause Congress to run past the midnight deadline, something several members flirted with last week when a separate potential shutdown was narrowly averted.
"I know people who are gonna object to that, [who] want to keep pressure on the process until we get a deal," said Senate Majority Whip John Thune (R-S.D.), the top vote-counter to Senate Majority Leader Mitch McConnell. "It would take consent, obviously, to do a short-term CR."
Sen. Josh Hawley (R-Mo.), who plans to force an up-or-down vote Friday on passing a second round of $1,200 checks, left the door open as to whether he might object to a CR.
A snowman is setup on a ledge near the US Capitol as a snow storm develops in Washington, DC on December 16. Photo by ANDREW CABALLERO-REYNOLDS/AFP/Getty
"I would say all options are on the table," Hawley told reporters. "But they need to get this package done. My sense is there's a fair amount of disarray at the moment."
Another top GOP senator, Sen. John Cornyn (R-Texas), advised any member against blocking a CR and thought a shutdown was unlikely.
"That just seems like unnecessary, self-inflicted damage," he said. "Adding another element of chaos and challenge doesn't seem prudent. I'd be surprised."
House Democratic leadership was hesitant to acknowledge they'll need a CR, holding out longshot hope that a deal will be reached Thursday night. But top Democrats signaled that, if one is needed, they'll pass it.
"We'll have to make a decision tomorrow morning and figure out what we're going to do," House Majority Leader Steny Hoyer (D-Md.) said.
Congressional leaders—House Speaker Nancy Pelosi (D-Calif.), House Minority Leader Kevin McCarthy (R-Calif.), McConnell and Senate Minority Leader Chuck Schumer (D-N.Y.)—still have not reached agreement over what is expected to be around a $900 billion package.
However, both sides remain hopeful, despite hang-ups over provisions like stimulus check eligibility and emergency money for Federal Emergency Management Agency that could be used by states and cities.
"We must not slide into treating these talks like routine negotiations to be conducted at Congress' routine pace," said McConnell, who warned senators that the chamber will be working through the weekend and will not leave town for the holidays until aid is passed. "We need to complete this work and we need to complete it right away."
The $900 billion package is currently expected to include a second round of checks worth $600, supplemental unemployment insurance of $300 per week and more than $300 billion for small businesses, among other things.
But among the remaining sticking points are who should qualify for another check, as well as concerns among Republicans that the FEMA money could be used as a "slush fund" for state and local governments. Democrats agreed to exclude a separate pot of state and local aid due to GOP opposition.
"Checks [are] complicated. I think designing that in a way that maximizes the amount that an individual or family can receive and try and target it to the people who need it the most I think is one the biggest challenges," Senate Majority Whip Thune said. "And then figuring out this FEMA fund, and how that gets distributed and putting guardrails in there to make sure that it's not just a slush fund for state and local governments, which would create a lot of problems on our side."


newsweek--2020-12-17--Russian Hackers Breached Texas City in October, Potentially Accessing Sensitive Information

Russian hackers are believed to have gained access to the official network of one of the largest U.S. cities in what may have been a months-long campaign , according to a Thursday report by The Intercept .
News of the potential citywide network breach in Austin , Texas , came in the midst of a reckoning within the U.S. government regarding a wider hacking incident that is believed to have compromised several federal agencies .
Documents obtained from the Microsoft Threat Intelligence Center ( MSTIC ) show a Russian hacking group known as Berserk Bear gained access to Austin 's @ @ @ @ @ @ @ 's report .
A different Russian hacking group known as Cozy Bear is believed to have been behind the cyberattacks targeting federal agencies , according to a report by The Washington Post .
City officials in Austin did not confirm the alleged hack with The Intercept .
Newsweek reached out to Mayor Steve Adler 's office for comment but did not receive a response in time for publication .
Recent discussions among city officials and briefs from the U.S. Cybersecurity and Infrastructure Security Agency ( CISA ) and the Federal Bureau of Investigation @ @ @ @ @ @ @ been warning signs about a possible network breach .
The Intercept 's report points to two Austin City Council meeting agendas in which council members discussed `` confidential network security information '' in conversations that were not open to the public .
The report also addresses two warnings from CISA and the FBI in October , the first of which sounded the alarm about potential threats directed at government networks on the `` federal and state , local , tribal , and territorial '' levels .
A second warning issued on October 22 @ @ @ @ @ @ @ APT [ advanced persistent threat ] actor '' that the advisory said `` conducted a campaign against a wide variety of U.S .
targets . ''
The advisory identified Berserk Bear and the other names by which the group is known as the suspected agent .
News of the reported Austin network hack came four days after Reuters reported that SolarWinds , an Austin-based IT company , acknowledged its Orion products were compromised in a separate incident .
In a U.S. Securities and Exchange Commission filing on Monday , SolarWinds said it alerted @ @ @ @ @ @ @ fewer than 18,000 customers who downloaded or updated their Orion products between March and June of this year may have been impacted .
SolarWinds ' products are used by several federal and state agencies .
The list of federal agencies that were impacted by the cyberattack include the Commerce Department , Treasury Department , Department of State , Department of Homeland Security and the Pentagon , according to The New York Times .
Russian leaders denied responsibility for the SolarWinds cyberattack earlier this week .

Russian hackers are believed to have gained access to the official network of one of the largest U.S. cities in what may have been a months-long campaign, according to a Thursday report by The Intercept.
News of the potential citywide network breach in Austin, Texas, came in the midst of a reckoning within the U.S. government regarding a wider hacking incident that is believed to have compromised several federal agencies.
Documents obtained from the Microsoft Threat Intelligence Center (MSTIC) show a Russian hacking group known as Berserk Bear gained access to Austin's city network, according to The Intercept's report. A different Russian hacking group known as Cozy Bear is believed to have been behind the cyberattacks targeting federal agencies, according to a report by The Washington Post.
City officials in Austin did not confirm the alleged hack with The Intercept. Newsweek reached out to Mayor Steve Adler's office for comment but did not receive a response in time for publication.
Russian hackers are believed to have gained access to the city network in Austin, Texas, according to a Thursday report by The Intercept. iStock/Getty
Recent discussions among city officials and briefs from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) suggest there may have been warning signs about a possible network breach. The Intercept's report points to two Austin City Council meeting agendas in which council members discussed "confidential network security information" in conversations that were not open to the public.
The report also addresses two warnings from CISA and the FBI in October, the first of which sounded the alarm about potential threats directed at government networks on the "federal and state, local, tribal, and territorial" levels. A second warning issued on October 22 warned specifically against a "Russian state-sponsored APT [advanced persistent threat] actor" that the advisory said "conducted a campaign against a wide variety of U.S. targets." The advisory identified Berserk Bear and the other names by which the group is known as the suspected agent.
News of the reported Austin network hack came four days after Reuters reported that SolarWinds, an Austin-based IT company, acknowledged its Orion products were compromised in a separate incident. In a U.S. Securities and Exchange Commission filing on Monday, SolarWinds said it alerted 33,000 customers of the cyberattack and believed fewer than 18,000 customers who downloaded or updated their Orion products between March and June of this year may have been impacted.
SolarWinds' products are used by several federal and state agencies. The list of federal agencies that were impacted by the cyberattack include the Commerce Department, Treasury Department, Department of State, Department of Homeland Security and the Pentagon, according to The New York Times.
Russian leaders denied responsibility for the SolarWinds cyberattack earlier this week.


newsweek--2020-12-17--Sephiroth 'Smash Ultimate' Release Date Announced, Early Access Available Now

Nintendo has announced when Sephiroth will join the roster of Super Smash Bros .
Ultimate , and is giving early adopters a chance to play as the Final Fantasy boss days before his official release .
Sephiroth will be available starting December 22 .
The character will be free for those who purchased the Fighters Pass 2 , but players who want to buy Sephiroth individually can also do so .
However , if you 've already purchased Fighters Pass 2 , then starting December 17 at 6 p.m. EST , a brand-new , limited-time mode will appear in Super @ @ @ @ @ @ @ Challenge '' will allow players to challenge the villain as a boss character .
There will be three difficulty modes to choose from : Easy , Normal , Very Hard .
Defeat Sephiroth in this mode just once and you 'll gain access to the character ahead of time .
However , only those who 've purchased Fighters Pass 2 will have access to this mode and will be able to unlock Sephiroth before his official release date .
Unlocking Sephiroth will also unlock the new Northern Cave stage that was showcased during @ @ @ @ @ @ @ based on the final battle of Final Fantasy VII .
All of this info was delivered during Thursday 's special Sephiroth Super Smash Bros .
Ultimate stream , during which series director Masahiro Sakurai also broke down how the villainous character plays in Ultimate .
Sakurai also explained that the initial plan was that , if you failed to defeat Sephiroth in the difficulty that you first chose , you wo n't be able to unlock the character until its December 22 release date .
They wanted to make it challenging for those @ @ @ @ @ @ @ but the team ultimately decided to cancel that plan .
Super Smash Bros .
Ultimate players only have until December 22 at 8 p.m. EDT to try and unlock Sephiroth early .
To participate in `` Sephiroth Challenge , '' players will have to pre-order Challengers Pack 8 , which contains Sephiroth , or purchase Fighters Pass 2 .
Fighters Pass 2 includes Min Min from ARMS !
and Minecraft Steve , along with Sephiroth and three more characters who are to be determined at a later date .
The Fighters Pass 2 @ @ @ @ @ @ @ Fighters and much more .
Fighters Pass 2 is available now for $ 29.99 .
Pre-orders for Challengers Pack 8 are up now and cost $ 5.99 .
Super Smash Bros .
Ultimate is available now for Nintendo Switch .
How do you think Sephiroth looks in Super Smash Bros .
Ultimate ?
Let us know in the comments section .

Nintendo has announced when Sephiroth will join the roster of Super Smash Bros. Ultimate, and is giving early adopters a chance to play as the Final Fantasy boss days before his official release.
Sephiroth will be available starting December 22. The character will be free for those who purchased the Fighters Pass 2, but players who want to buy Sephiroth individually can also do so.
However, if you've already purchased Fighters Pass 2, then starting December 17 at 6 p.m. EST, a brand-new, limited-time mode will appear in Super Smash Bros. Ultimate. "Sephiroth Challenge" will allow players to challenge the villain as a boss character.
Nintendo
There will be three difficulty modes to choose from: Easy, Normal, Very Hard. Defeat Sephiroth in this mode just once and you'll gain access to the character ahead of time. However, only those who've purchased Fighters Pass 2 will have access to this mode and will be able to unlock Sephiroth before his official release date.
Unlocking Sephiroth will also unlock the new Northern Cave stage that was showcased during the stream. This new stage is based on the final battle of Final Fantasy VII.
All of this info was delivered during Thursday's special Sephiroth Super Smash Bros. Ultimate stream, during which series director Masahiro Sakurai also broke down how the villainous character plays in Ultimate.
Sakurai also explained that the initial plan was that, if you failed to defeat Sephiroth in the difficulty that you first chose, you won't be able to unlock the character until its December 22 release date. They wanted to make it challenging for those who chose the Very Hard difficulty, but the team ultimately decided to cancel that plan.
Super Smash Bros. Ultimate players only have until December 22 at 8 p.m. EDT to try and unlock Sephiroth early.
To participate in "Sephiroth Challenge," players will have to pre-order Challengers Pack 8, which contains Sephiroth, or purchase Fighters Pass 2. Fighters Pass 2 includes Min Min from ARMS! and Minecraft Steve, along with Sephiroth and three more characters who are to be determined at a later date.
The Fighters Pass 2 also includes special custom items for Mii Fighters and much more. Fighters Pass 2 is available now for $29.99. Pre-orders for Challengers Pack 8 are up now and cost $5.99.
Super Smash Bros. Ultimate is available now for Nintendo Switch.
How do you think Sephiroth looks in Super Smash Bros. Ultimate? Let us know in the comments section.


newsweek--2020-12-17--Home Depot to Pay Highest Penalty Ever For Failing to Follow Lead Paint Regulations

Home Depot is set to pay $ 20.75 million after reaching a settlement for allegedly violating rules concerning lead paint safety .
The Department of Justice ( DOJ ) and the Environmental Protection Agency ( EPA ) announced the settlement , the largest ever under the Toxic Substances Control Act of 1976 , on Thursday .
In addition to the monetary penalty , the company will also be required to conduct `` a comprehensive , corporate-wide program '' to verify that contractors and firms it hires in the future are trained and certified to conduct work under lead paint safety @ @ @ @ @ @ @ significantly reduce children 's exposure to lead paint hazards , '' Susan Bodine , assistant administrator for the EPA 's Office of Enforcement and Compliance Assurance , said in a statement .
`` Home Depot will implement system-wide changes to ensure that contractors who perform work in homes constructed before 1978 are EPA-certified and follow lead-safe practices .
EPA expects all renovation companies to ensure their contractors follow these critical laws that protect public health . ''
Newer homes are not affected since lead paint was banned for residential use in 1978 .
@ @ @ @ @ @ @ built before then can pose considerable health risks because lead chips or dust can be produced by disturbing the paint if safety guidelines are not followed .
Lead poisoning is particularly dangerous to children , potentially causing serious development disabilities in those exposed .
In extreme cases , seizures or death can occur .
A Home Depot spokesperson told Newsweek that the EPA contacted the company about the issue around five years ago .
Home Depot immediately implemented a safety program , including an online portal to help contractors follow EPA rules and @ @ @ @ @ @ @ believed to be affected .
`` These instances do not represent our high standards and expectations , '' the spokesperson said .
`` When we found out about this , we moved quickly to contact all customers who might have been impacted and we significantly strengthened our lead safety systems and approach . ''
The EPA said that the alleged violations were discovered after receiving complaints from five Home Depot customers , all living in separate states .
Some of the firms hired by Home Depot to work on the customers ' homes @ @ @ @ @ @ @ maintain adequate records or provide customers with mandatory EPA pamphlets on lead paint safety .
A subsequent review discovered that additional contractors and firms hired by the company throughout the country did not have the required training and certification to work in older homes .
`` These were serious violations .
The stiff penalty Home Depot will pay reflects the importance of using certified firms and contractors in older home renovations , '' said Jonathan D. Brightbill , principal deputy assistant attorney general of DOJ 's Environment and Natural Resources Division .
`` @ @ @ @ @ @ @ built prior to 1978 , when lead based paint was in widespread use , must be certified .
These contractors have the training to recognize and prevent the hazards that can be created when lead paint is disturbed . ''
Out of the $ 20.75 million settlement , Utah will receive $ 750,000 , Massachusetts will get $ 732,000 and $ 50,000 will go to Rhode Island .
All three states had joined the government in taking legal action against Home Depot .

Home Depot is set to pay $20.75 million after reaching a settlement for allegedly violating rules concerning lead paint safety.
The Department of Justice (DOJ) and the Environmental Protection Agency (EPA) announced the settlement, the largest ever under the Toxic Substances Control Act of 1976, on Thursday. In addition to the monetary penalty, the company will also be required to conduct "a comprehensive, corporate-wide program" to verify that contractors and firms it hires in the future are trained and certified to conduct work under lead paint safety guidelines.
"Today's settlement will significantly reduce children's exposure to lead paint hazards," Susan Bodine, assistant administrator for the EPA's Office of Enforcement and Compliance Assurance, said in a statement. "Home Depot will implement system-wide changes to ensure that contractors who perform work in homes constructed before 1978 are EPA-certified and follow lead-safe practices. EPA expects all renovation companies to ensure their contractors follow these critical laws that protect public health."
Newer homes are not affected since lead paint was banned for residential use in 1978. However, renovations or repairs in homes built before then can pose considerable health risks because lead chips or dust can be produced by disturbing the paint if safety guidelines are not followed. Lead poisoning is particularly dangerous to children, potentially causing serious development disabilities in those exposed. In extreme cases, seizures or death can occur.
A Home Depot spokesperson told Newsweek that the EPA contacted the company about the issue around five years ago. Home Depot immediately implemented a safety program, including an online portal to help contractors follow EPA rules and submit documentation, while also contacting customers believed to be affected.
"These instances do not represent our high standards and expectations," the spokesperson said. "When we found out about this, we moved quickly to contact all customers who might have been impacted and we significantly strengthened our lead safety systems and approach."
A Home Depot store is pictured in Washington, D.C. on August 18, 2020. NICHOLAS KAMM/AFP/Getty
The EPA said that the alleged violations were discovered after receiving complaints from five Home Depot customers, all living in separate states. Some of the firms hired by Home Depot to work on the customers' homes did not follow safe work practices, maintain adequate records or provide customers with mandatory EPA pamphlets on lead paint safety. A subsequent review discovered that additional contractors and firms hired by the company throughout the country did not have the required training and certification to work in older homes.
"These were serious violations. The stiff penalty Home Depot will pay reflects the importance of using certified firms and contractors in older home renovations," said Jonathan D. Brightbill, principal deputy assistant attorney general of DOJ's Environment and Natural Resources Division. "Contractors hired for most work in homes built prior to 1978, when lead based paint was in widespread use, must be certified. These contractors have the training to recognize and prevent the hazards that can be created when lead paint is disturbed."
Out of the $20.75 million settlement, Utah will receive $750,000, Massachusetts will get $732,000 and $50,000 will go to Rhode Island. All three states had joined the government in taking legal action against Home Depot.


newsweek--2020-12-17--Texas Gov. Says 'No More Shutdowns' Despite Over 100K COVID Cases Recorded in Past Week

Texas Governor Greg Abbott said Thursday there will be `` no more shutdowns , '' despite the state recording more than 100,000 cases of the coronavirus over the past week .
`` One thing that has been clearly apparent , and that is there 's no governmental leader anywhere who has been able to figure out how COVID works , '' Abbott said during a press conference .
`` So the fact of the matter is it is time to put behind us shutdowns .
No more shutdowns .
We need to focus on opening up businesses . ''
Abbott @ @ @ @ @ @ @ have imposed shutdowns , such as California , and how cases of the virus have continued to rise in those places .
`` We 've seen these massive shutdowns of businesses in California that have led to only a greater spike in the spread of COVID-19 , '' Abbott said .
`` California has some of the toughest shutdowns that we have in the United States of America , and yet they are skyrocketing and leading the United States in the number of cases .
He continued , `` Oftentimes when you do @ @ @ @ @ @ @ to homes , and one thing we 've learned now is that one of the places where COVID-19 is spreading the fastest and causing the greatest problems is in the home setting . ''
The Texas governor added that it is residents ' responsibility to help mitigate the spread of the virus in the state .
`` Every adult in Texas has the responsibility to follow the same practices as we continue to work our way out of this .
If they do that , we can contain COVID-19 while we continue the @ @ @ @ @ @ @ '' Abbott said .
`` People 's lives have been crushed .
And their pocketbooks and their ability to pay rent and put food on the table have been harmed because of the shutdowns .
And so , no , we will not have any more shutdowns in Texas . ''
Texas was one of the first states to lift its stay-at-home order , on April 30 .
But on June 26 , Abbott reimposed mitigation efforts , which required all bars to close at noon , as well as capacity limits on @ @ @ @ @ @ @ efforts were then eased in September , when Abbott expanded capacity limits from 50 percent to 75 percent .
In October , Abbott issued a new executive order allowing bars and similar establishments to reopen at 50 percent capacity .
Abbott 's comments opposing shutdowns come as the state continues to see spikes in coronavirus cases , deaths and hospitalizations .
According to data from Johns Hopkins University , Texas has reported more than 100,000 new cases of the virus over the past seven days , with over 20,000 new cases on both @ @ @ @ @ @ @ there are now over 1.5 million confirmed cases of the virus , as well as at least 24,931 deaths , according to Johns Hopkins University , Texas has also seen a surge in the number of COVID-19 hospitalizations .
According to the COVID Tracking Project , 9,472 patients are hospitalized in the state .
As of Thursday , Texas had a seven-day average of 9,269 hospitalizations .
Newsweek was directed to the remarks Abbott made during the press conference after reaching out to his office for comment .

Texas Governor Greg Abbott said Thursday there will be "no more shutdowns," despite the state recording more than 100,000 cases of the coronavirus over the past week.
"One thing that has been clearly apparent, and that is there's no governmental leader anywhere who has been able to figure out how COVID works," Abbott said during a press conference. "So the fact of the matter is it is time to put behind us shutdowns. No more shutdowns. We need to focus on opening up businesses."
Abbott went on to discuss other states that have imposed shutdowns, such as California, and how cases of the virus have continued to rise in those places.
"We've seen these massive shutdowns of businesses in California that have led to only a greater spike in the spread of COVID-19," Abbott said. "California has some of the toughest shutdowns that we have in the United States of America, and yet they are skyrocketing and leading the United States in the number of cases.
He continued, "Oftentimes when you do have shutdowns, you have people going to homes, and one thing we've learned now is that one of the places where COVID-19 is spreading the fastest and causing the greatest problems is in the home setting."
The Texas governor added that it is residents' responsibility to help mitigate the spread of the virus in the state.
"Every adult in Texas has the responsibility to follow the same practices as we continue to work our way out of this. If they do that, we can contain COVID-19 while we continue the process of vaccinating our fellow Texans," Abbott said.
"People's lives have been crushed. And their pocketbooks and their ability to pay rent and put food on the table have been harmed because of the shutdowns. And so, no, we will not have any more shutdowns in Texas."
Texas was one of the first states to lift its stay-at-home order, on April 30. But on June 26, Abbott reimposed mitigation efforts, which required all bars to close at noon, as well as capacity limits on indoor restaurants and businesses. These mitigation efforts were then eased in September, when Abbott expanded capacity limits from 50 percent to 75 percent.
In October, Abbott issued a new executive order allowing bars and similar establishments to reopen at 50 percent capacity.
Abbott's comments opposing shutdowns come as the state continues to see spikes in coronavirus cases, deaths and hospitalizations.
Texas Governor Greg Abbott announces the reopening of more Texas businesses on May 18. Pool/Getty
According to data from Johns Hopkins University, Texas has reported more than 100,000 new cases of the virus over the past seven days, with over 20,000 new cases on both Thursday and Wednesday. Across Texas, there are now over 1.5 million confirmed cases of the virus, as well as at least 24,931 deaths, according to Johns Hopkins University,
Texas has also seen a surge in the number of COVID-19 hospitalizations. According to the COVID Tracking Project, 9,472 patients are hospitalized in the state. As of Thursday, Texas had a seven-day average of 9,269 hospitalizations.
Newsweek was directed to the remarks Abbott made during the press conference after reaching out to his office for comment.


newsweek--2020-12-17--GOP Sen. Josh Hawley to Call For Senate Vote on $1,200 Stimulus Checks

Missouri Republican Senator Josh Hawley said Thursday he would ask the Senate to vote on his bill that would add direct payments to the next coronavirus economic relief package .
Hawley and Vermont Senator Bernie Sanders have pushed for direct assistance to be sent to eligible Americans , a topic which has become a sticking point for lawmakers working on finalizing the legislation .
Congressional leaders initially indicated that the package could be finalized by Friday .
While some lawmakers have indicated that relief checks in the amount of $ 600 could be part of the stimulus package , Hawley @ @ @ @ @ @ @ to meet the financial needs of Americans .
`` Tomorrow I will go to the Senate floor to ask for an up or down vote on my bill to provide a direct payment of $ 1200 to working Americans , $ 2400 for couples , $ 500 for kids .
This is the # covid relief working families need , '' Hawley tweeted .
Sanders indicated on Wednesday that stimulus checks could be included in the relief package , but not in the amount that he and Hawley desired .
`` I 'm @ @ @ @ @ @ @ we 're going to fight for more , because this process is not over—the proposal , as I understand it , provides for a direct payment of $ 600 for every working class adult and $ 600 for their kids , '' Sanders said during remarks on the Senate floor .
`` It is a step forward and I 'm going to do my best to make sure that we come as close to the $ 1,200 as we possibly can , '' Sanders added .
House Speaker Nancy Pelosi told reporters Thursday @ @ @ @ @ @ @ economic stimulus plan but would not elaborate .
Newsweek reached out to Pelosi 's office for comment .
Extended unemployment benefits provided by the CARES Act , which was signed in March , are set to expire in December .
The cessation of the Pandemic Unemployment Assistance and the Pandemic Emergency Unemployment Compensation programs could affect more than 12 million Americans who are unemployed .
According to the U.S. Labor Department , the November unemployment rate was 6.7 percent .
As lawmakers attempt to finalize the details of the COVID-19 economic relief bill @ @ @ @ @ @ @ expected to run out on Friday initiating a shutdown .
Members of Congress have been working on an omnibus spending bill with an approximate price tag of $ 1.4 trillion that would fund the government for the next fiscal year .
Failure to pass the omnibus bill by midnight Friday would initiate a government shutdown .
Some lawmakers have recommended passing a short-term stop-gap measure to keep the government open until the omnibus bill can be finalized .
`` We are going to stay right here , '' Senate Majority Leader Mitch McConnell @ @ @ @ @ @ @ `` right here , until we are finished even if that means working through the weekend , which is highly likely . ''

Missouri Republican Senator Josh Hawley said Thursday he would ask the Senate to vote on his bill that would add direct payments to the next coronavirus economic relief package.
Hawley and Vermont Senator Bernie Sanders have pushed for direct assistance to be sent to eligible Americans, a topic which has become a sticking point for lawmakers working on finalizing the legislation. Congressional leaders initially indicated that the package could be finalized by Friday. While some lawmakers have indicated that relief checks in the amount of $600 could be part of the stimulus package, Hawley has contended that the amount is insufficient to meet the financial needs of Americans.
"Tomorrow I will go to the Senate floor to ask for an up or down vote on my bill to provide a direct payment of $1200 to working Americans, $2400 for couples, $500 for kids. This is the #covid relief working families need," Hawley tweeted.
Tomorrow I will go to the Senate floor to ask for an up or down vote on my bill to provide a direct payment of $1200 to working Americans, $2400 for couples, $500 for kids. This is the #covid relief working families need — Josh Hawley (@HawleyMO) December 17, 2020
Sanders indicated on Wednesday that stimulus checks could be included in the relief package, but not in the amount that he and Hawley desired.
"I'm happy to say that as of now—and we're going to fight for more, because this process is not over—the proposal, as I understand it, provides for a direct payment of $600 for every working class adult and $600 for their kids," Sanders said during remarks on the Senate floor.
"It is a step forward and I'm going to do my best to make sure that we come as close to the $1,200 as we possibly can," Sanders added.
Republican Senator Josh Hawley plans on calling for a Senate vote on Friday to give eligible Americans a $1,200 direct payment in the next COVID-19 economic stimulus package. Greg Nash-Pool/Getty
House Speaker Nancy Pelosi told reporters Thursday that progress had been made on the economic stimulus plan but would not elaborate. Newsweek reached out to Pelosi's office for comment.
Extended unemployment benefits provided by the CARES Act, which was signed in March, are set to expire in December. The cessation of the Pandemic Unemployment Assistance and the Pandemic Emergency Unemployment Compensation programs could affect more than 12 million Americans who are unemployed. According to the U.S. Labor Department, the November unemployment rate was 6.7 percent.
As lawmakers attempt to finalize the details of the COVID-19 economic relief bill, funding for the U.S. Government is expected to run out on Friday initiating a shutdown. Members of Congress have been working on an omnibus spending bill with an approximate price tag of $1.4 trillion that would fund the government for the next fiscal year. Failure to pass the omnibus bill by midnight Friday would initiate a government shutdown.
Some lawmakers have recommended passing a short-term stop-gap measure to keep the government open until the omnibus bill can be finalized.
"We are going to stay right here," Senate Majority Leader Mitch McConnell said in a Thursday floor speech, "right here, until we are finished even if that means working through the weekend, which is highly likely."


newsweek--2020-12-17--HHS Denies Slashing COVID Vaccine Shipments, Says States Expected More Doses Than Allocated

Federal officials responsible for overseeing COVID-19 vaccine distribution addressed reports that states ' shipment sizes were smaller than anticipated on Thursday , calling them as `` incorrect '' and clarifying what seemed to be a series of miscommunications .
According to the Department of Health and Human Services ( HHS ) , which helps manage vaccine deliveries through Operation Warp Speed , all previously agreed upon shipments will be sent to states as planned .
However , the wave of announcements from governors and health departments , referencing scaled-down dosage figures , suggests some discrepancies between expected vaccine quantities and @ @ @ @ @ @ @ separate rounds of vaccine allocation with states over the past month , and in some cases , official dosage volumes differed from those discussed initially .
`` Operation Warp Speed allocation numbers locked in with states have not been changed or adjusted , '' an HHS spokesperson told Newsweek on Thursday .
The spokesperson explained that formal allocations were determined for two preliminary vaccine shipments , from Pfizer and Moderna , respectively , as well as an additional round of shipments from Pfizer .
`` Those are the only allocation numbers that have @ @ @ @ @ @ @ .
They explained that states where upcoming vaccine shipments appeared to be reduced by half would receive the latter 50 percent within three weeks of receiving the first , since both immunizations require two installments spaced 21 days apart to provide full protection against COVID-19 .
In other states where additional shipment sizes contained 30 or 40 percent fewer doses than anticipated , the spokesperson said deliveries will take place over several days until all scheduled vaccines are distributed .
Operation Warp Speed will offer weekly updates regarding vaccine availabilities and subsequent allocation @ @ @ @ @ @ @ , who said it is `` on track '' to vaccinate roughly 20 million Americans with initial immunization doses before January .
Earlier Thursday , government and public health authorities in a number of states , including Illinois , Iowa , Texas and Washington , voiced concern and surprise over what they described as reductions in their upcoming vaccine shipments .
Washington Governor Jay Inslee recounted correspondence between state leaders and the Centers for Disease Control and Prevention ( CDC ) on Twitter , saying the agency `` has informed us that WA @ @ @ @ @ @ @ 40 percent next week—and that all states are seeing similar cuts . ''
`` This is disruptive and frustrating .
We need accurate predictable numbers to plan and ensure on-the-ground success , '' Inslee continued , adding , `` No explanation was given . ''
Pfizer , the pharmaceutical corporation that partnered with German biotechnology company BioNTech to develop the first COVID-19 vaccine approved for emergency use by the U.S. Food and Drug Administration , responded to the reports from states shortly after they surfaced .
The company affirmed any changes to vaccine @ @ @ @ @ @ @ distribution challenges , and noted that 2.9 million doses were dispensed to states this week per federal instruction .
`` We have millions more doses sitting in our warehouse but , as of now , we have not received any shipment instructions for additional doses , '' Pfizer 's statement read .
The corporation said it remained `` confident '' in its ability to fulfill its intended shipments totaling 50 million doses worldwide by the end of the year .
Moderna , the biotech company behind a second COVID-19 vaccine candidate in talks @ @ @ @ @ @ @ , similarly indicated its production plans were proceeding on schedule in additional comments to Newsweek on Thursday afternoon .
`` Distribution decisions are in the [ U.S. government 's ] hands , '' a Modern spokesperson said .
`` We remain confident of our expectations of providing approximately 20 million finished doses in the U.S. this month , and between 85-100 million doses in U.S. during the first quarter . ''
Newsweek reached out to the CDC for comment but did not receive a reply in time for publication .

Federal officials responsible for overseeing COVID-19 vaccine distribution addressed reports that states' shipment sizes were smaller than anticipated on Thursday, calling them as "incorrect" and clarifying what seemed to be a series of miscommunications.
According to the Department of Health and Human Services (HHS), which helps manage vaccine deliveries through Operation Warp Speed, all previously agreed upon shipments will be sent to states as planned. However, the wave of announcements from governors and health departments, referencing scaled-down dosage figures, suggests some discrepancies between expected vaccine quantities and finalized numbers.
The government confirmed three separate rounds of vaccine allocation with states over the past month, and in some cases, official dosage volumes differed from those discussed initially.
"Operation Warp Speed allocation numbers locked in with states have not been changed or adjusted," an HHS spokesperson told Newsweek on Thursday. The spokesperson explained that formal allocations were determined for two preliminary vaccine shipments, from Pfizer and Moderna, respectively, as well as an additional round of shipments from Pfizer.
"Those are the only allocation numbers that have been provided," the spokesperson said.
They explained that states where upcoming vaccine shipments appeared to be reduced by half would receive the latter 50 percent within three weeks of receiving the first, since both immunizations require two installments spaced 21 days apart to provide full protection against COVID-19. In other states where additional shipment sizes contained 30 or 40 percent fewer doses than anticipated, the spokesperson said deliveries will take place over several days until all scheduled vaccines are distributed.
Operation Warp Speed will offer weekly updates regarding vaccine availabilities and subsequent allocation numbers, according to the HHS spokesperson, who said it is "on track" to vaccinate roughly 20 million Americans with initial immunization doses before January.
Earlier Thursday, government and public health authorities in a number of states, including Illinois, Iowa, Texas and Washington, voiced concern and surprise over what they described as reductions in their upcoming vaccine shipments.
Washington Governor Jay Inslee recounted correspondence between state leaders and the Centers for Disease Control and Prevention (CDC) on Twitter, saying the agency "has informed us that WA's vaccine allocation will be cut by 40 percent next week—and that all states are seeing similar cuts."
"This is disruptive and frustrating. We need accurate predictable numbers to plan and ensure on-the-ground success," Inslee continued, adding, "No explanation was given."
A spokesperson from the U.S. Department of Health and Human Services said vaccine shipments to states will proceed according to finalized plans on Thursday, after several governors and health departments announced their allocation sizes were smaller than expected. The Pfizer-BioNTech COVID-19 vaccine is prepared prior to an event at Kaiser Permanente Capitol Hill Medical Center on December 17 Washington, D.C. Shawn Thew/Pool/Getty Images
Pfizer, the pharmaceutical corporation that partnered with German biotechnology company BioNTech to develop the first COVID-19 vaccine approved for emergency use by the U.S. Food and Drug Administration, responded to the reports from states shortly after they surfaced. The company affirmed any changes to vaccine shipments were not rooted in production or distribution challenges, and noted that 2.9 million doses were dispensed to states this week per federal instruction.
"We have millions more doses sitting in our warehouse but, as of now, we have not received any shipment instructions for additional doses," Pfizer's statement read. The corporation said it remained "confident" in its ability to fulfill its intended shipments totaling 50 million doses worldwide by the end of the year.
Moderna, the biotech company behind a second COVID-19 vaccine candidate in talks for emergency use approval at the FDA, similarly indicated its production plans were proceeding on schedule in additional comments to Newsweek on Thursday afternoon.
"Distribution decisions are in the [U.S. government's] hands," a Modern spokesperson said. "We remain confident of our expectations of providing approximately 20 million finished doses in the U.S. this month, and between 85-100 million doses in U.S. during the first quarter."
Newsweek reached out to the CDC for comment but did not receive a reply in time for publication.