Day: July 2, 2024

DUBAI, United Arab Emirates — Over 20 years ago, Iran’s Supreme Leader Ayatollah Ali Khamenei stood before a crowd at Friday prayers to denounce the United States for its disenchanted electorate.

“It is disgraceful for a nation to have a 35% or 40% voter turnout, as happens in some of the nations that you see having presidential elections,” Khamenei said in 2001. “It is obvious that their people do not trust their political system, that they do not care about it and that they have no hope.”

Iran now faces what the ayatollah described.

Iran will hold a runoff presidential election Friday, only its second since the 1979 Islamic Revolution, after only 39.9% of its voting public cast a ballot the previous week. Of over 24.5 million votes, more than 1 million ballots were later rejected — typically a sign of people feeling obligated to head to the polls but wanting to reject all the candidates.

Meanwhile, public rage simmers after years of Iran’s economy cratering to new lows, along with bloody crackdowns on dissent, including over the mass protests sparked by the 2022 death of Mahsa Amini after her detention by the country’s morality police allegedly over not wearing her headscarf to their liking. Tensions with the West remain high as Iran enriches uranium closer than ever to weapons-grade levels.

Now, hard-line former nuclear negotiator Saeed Jalili faces the reformist Masoud Pezeshkian, a heart surgeon who likely needs a widespread turnout to win the presidency. Pezeshkian’s supporters warn of dark days ahead under Jalili. Meanwhile, many people are unconvinced that their vote even matters.

“I did not vote and I will not, since nobody apologized because of Mahsa and later miseries that young people face, neither the reformists nor the hard-liners,” said Leila Seyyedi, a 23-year-old university student studying graphic design.

Iranian election law requires a candidate to get over 50% of the vote to avoid a runoff. In results released Saturday, Pezeshkian got 10.4 million votes while Jalili received 9.4 million. Parliament speaker Mohammad Bagher Qalibaf came in third with 3.3 million, while Shiite cleric Mostafa Pourmohammadi had over 206,000.

Most voters for Qalibaf, a former general in Iran’s paramilitary Revolutionary Guard and national police chief known for his crackdowns against students and for corruption allegations, likely will break for Jalili after Qalibaf endorsed him, analysts say. That has put Jalili, a 58-year-old known as the “Living Martyr” for losing a leg in the 1980s Iran-Iraq war, in the lead position for the runoff.

But his recalcitrant reputation among Western diplomats during negotiations over Iran’s nuclear program is paired with concern at home over his views. One politician who has aligned himself with the moderates, former Iranian Information and Communications Technology Minister Mohammad Javad Azari Jahromi, put the choice between Jalili and Pezeshkian more starkly.

“We will not let Iran fall into the hands of the Taliban,” he wrote on social platform X.

But even such dark warnings seemingly failed to have an effect. On the streets of Tehran after the June 28 vote, many told The Associated Press they didn’t care about the election.

“I did not vote, as former presidents failed to realize their promises,” said Ahmad Taheri, a 27-year-old psychology student. “I will not vote this coming Friday either.”

Mohammad Ali Robati, a 43-year-old electronic engineer and a father of two, said Iranian officials’ apparent indifference to people’s economic pressures caused him not to vote.

“After years of economic difficulties, I have no interest in politics,” Robati said, though he held out the possibility of voting Friday.

At the time of Iran’s 2015 nuclear deal with world powers, the exchange rate for Iran’s currency was 32,000 rials to $1. Today, it’s 617,000 rials to $1 — and many have found the value of their bank accounts, retirement funds and other holdings gouged by years of depreciation. It’s nearing its record low of 700,000 rials, briefly reached after Iran’s unprecedented direct attack on Israel in April.

Phnom Penh, Cambodia — A Cambodian court on Tuesday sentenced 10 environmentalists to between six and eight years in jail for plotting to commit crimes in their activism, the latest legal crackdown on the country’s green campaigners.

The campaigners from Mother Nature, one of Cambodia’s few environmental activism groups, denied the charges, which they said were politically motivated.

Am Sam Ath, operations director of rights group LICADHO, told AFP the court sentenced the activists to jail terms ranging from six to eight years.

He said three of them, including Mother Nature co-founder Alejandro Gonzalez-Davidson, a Spaniard deported from Cambodia in 2015, were sentenced to eight years for plotting against the government and insulting the king.

Seven others were sentenced to six years in prison on unspecified plotting charges.

Six of the defendants were sentenced in absentia, while the four who were present were seized by police outside the court and taken away, according to an AFP journalist.

Human Rights Watch (HRW) last month condemned the trial as an attempt to “muzzle criticism of governmental policies.”

HRW said Mother Nature had campaigned for more than a decade against damaging infrastructure projects and “exposed corruption in the management of Cambodia’s natural resources.”

The charges against the 10 activists related to Mother Nature’s activism between 2012 and 2021.

The group raised issues around the filling-in of lakes in Phnom Penh, illegal logging, and the destruction of natural resources across the country.

The tussle over protecting or exploiting Cambodia’s natural resources has long been a contentious issue in the kingdom, with environmentalists threatened, arrested and even killed in the past decade.

Three of the activists sentenced Tuesday had previously been jailed for organizing a peaceful march protesting the filling-in of a lake in the capital to create land for real estate developments.

From 2001 to 2015, a third of Cambodia’s primary forests, some of the world’s most biodiverse and a key carbon sink, were cleared, and tree cover loss accelerated faster than anywhere else in the world, according to the World Resources Institute.

Much of the cleared land has been granted to businesses in concessions that experts say have driven deforestation and dispossession in the country.

В Кудымкаре (Пермский край) 2 июля проводят в последний путь погибшего в ходе СВО 39-летнего контрактника. Он провоевал менее месяца.

Басманный районный суд Москвы заочно приговорил живущую в Канаде активистку Марию Карташеву к семи годам колонии по делу о военных…

Cisco fixed an actively exploited NX-OS zero-day, the flaw was exploited to install previously unknown malware as root on vulnerable switches.

Cisco addressed an NX-OS zero-day, tracked as CVE-2024-20399 (CVSS score of 6.0), that the China-linked group Velvet Ant exploited to deploy previously unknown malware as root on vulnerable switches.

The flaw resides in the CLI of Cisco NX-OS Software, an authenticated, local attacker can exploit the flaw to execute arbitrary commands as root on the underlying operating system of an affected device.

“This vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command.” reads the advisory published by Cisco. “A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.”

The IT giant pointed out that only attackers with Administrator credentials can successfully exploit this vulnerability on a Cisco NX-OS device.

In April 2024, researchers reported to the Cisco Product Security Incident Response Team (PSIRT) that the issue was actively exploited in the wild.

Cybersecurity firm Sygnia observed the attacks on April 2024 and reported them to Cisco.

“Sygnia identified that CVE-2024-20399 was exploited in the wild by a China-nexus threat group as a ‘zero-day’ and shared the details of the vulnerability with Cisco. By exploiting this vulnerability, a threat group – dubbed ‘Velvet Ant’ – successfully executed commands on the underlying operating system of Cisco Nexus devices.” reads the report published by Sygnia. “This exploitation led to the execution of a previously unknown custom malware that allowed the threat group to remotely connect to compromised Cisco Nexus devices, upload additional files, and execute code on the devices.“

The vulnerability impacts the following devices:

• MDS 9000 Series Multilayer Switches (CSCwj97007)
• Nexus 3000 Series Switches (CSCwj97009)
• Nexus 5500 Platform Switches (CSCwj97011)
• Nexus 5600 Platform Switches (CSCwj97011)
• Nexus 6000 Series Switches (CSCwj97011)
• Nexus 7000 Series Switches (CSCwj94682) *
• Nexus 9000 Series Switches in standalone NX-OS mode (CSCwj97009)

Cisco recommends customers monitor the use of credentials for the administrative users network-admin and vdc-admin.

Cisco provides the Cisco Software Checker to help customers determine if their devices are vulnerable to this flaw.

In late 2023, Sygnia researchers responded to an incident suffered by a large organization that they attributed to the same China-linked threat actor ‘Velvet Ant.’

The cyberspies deployed custom malware on F5 BIG-IP appliances to gain persistent access to the internal network of the target organization and steal sensitive data.

Pierluigi Paganini

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

(SecurityAffairs – hacking, NX-OS)