Google’s new Weather interface will feature improved short-term forecasts

andreasc
-
0
Google’s new Weather interface will feature improved short-term forecasts
[ad_1]
Google has started to offer its updated Weather interface on both of its large-screened Pixel devices, the Pixel Tablet and the Pixel Fold. So far though, the new Weather interface has yet to be pushed out to Pixel phones. According to Android Police reports that the new interface includes a larger, bolder current temperature reading and a transparent system navigation bar.
Perhaps more important than the redesign is the improved accuracy of the short-term weather forecasts delivered by the interface. Android Police notes that the interface will now update weather data multiple times each hour. This data comes from the Multi-Radar Multi-Sensor (MRMS) system that uses multiple radars and algorithms to help improve the accuracy of hazardous weather forecasts and warnings. 
The new and improved Google Weather interface has yet to hit Pixel handsets - Google's new Weather interface will feature improved short-term forecasts

The new and improved Google Weather interface has yet to hit Pixel handsets

Also being used to improve the accuracy of the forecasts for the Google Weather interface is High-Resolution Rapid Refresh (HRRR) which is an atmospheric model that updates every 15 minutes. Both MRMS and HRRR are systems belonging to the National Oceanic and Atmospheric Administration (NOAA). 

More accurate weather forecasts will help Pixel Tablet and Pixel Fold users plan their day around a  precise and accurate weather forecast. And when the weather changes abruptly, the Google Weather interface will show users the latest forecast in time to prepare for the new weather activity on the way.

How to add the current Weather interface to your Pixel's homescreen - Google's new Weather interface will feature improved short-term forecasts

How to add the current Weather interface to your Pixel’s homescreen

It isn’t clear when the Pixel handsets will get the new weather interface. Right now, to get the Google Weather interface on your Pixel phone, open the Google app and swipe the carousel underneath the search bar until you see the local weather and temperature. Tap on it and about half the page will be dedicated to the current weather. Tap the three-button overflow menu icon on the right of the screen where you’ll see the “Weather/Today” heading and a menu that includes an option to “Add to homescreen.”
Once you add the weather icon to the homescreen of your Pixel phone, you’re just a tap away from seeing Froggy, the latest temperature, and the forecast. Since it is available on Android 13 for the Pixel Fold and Pixel Tablet, we are not simply awaiting the update to Android 14 to see it on Pixel handsets. But when it does become available on Pixel phones, it will allow users to get the information they want without having to scroll to the bottom of the screen.

[ad_2]
Source link

Microsoft the Most Phished Brand in Q2 2023

andreasc
-
0
Microsoft the Most Phished Brand in Q2 2023
[ad_1]

Technology giants like Google and Apple are also among the top brands impersonated in Q2 2023 phishing attacks, Check Point Research finds.

Check Point Research (CPR) has released its highly anticipated Brand Phishing Report for the second quarter of 2023. The report reveals a shift in cybercriminal tactics, with three major technology companies dominating the list of most frequently imitated brands. The report also highlights the fact that cybersecurity is essential for brand protection.

Should this come as a surprise? Not at all. The prevalence of malicious Office documents accounted for 43% of all malware downloads in 2020. During the 3rd quarter of that year, approximately 38% of all downloadable malware was discovered concealed within Microsoft Office documents.

Microsoft

Microsoft, the global technology giant, claimed the top spot with a staggering 29% of all brand phishing attempts during Q2. This marks a significant leap for Microsoft, which had previously held the third position in the first quarter of the year.

New Phishing Attack Spoofs Microsoft 365 Authentication System
A recently spotted phishing scam aiming at login credentials of Microsoft and Adobe users

The rise in phishing attempts can be attributed to a targeted campaign aimed at Microsoft account holders, wherein cybercriminals sent fraudulent messages regarding unusual sign-in activity.

These deceptive emails appeared to originate from within the company and included detailed information about the alleged security breach, leading users to malicious websites to steal their credentials and personal information.

Google and Apple

Google secured the second position, accounting for 19.5% of brand phishing attempts. Meanwhile, Apple made its debut on the list, featuring in 5.2% of phishing events during the last quarter. The technology sector itself was the most impersonated industry, followed closely by banking and social media networks.

Gmail phishing page targeting Windows users

The report also highlighted a worrisome trend concerning the finance industry. American banking organization Wells Fargo ranked fourth this quarter, becoming a prime target for cybercriminals through a series of malicious emails requesting account information. Other notable brands impersonated in phishing attempts included Amazon, Walmart, Roblox, LinkedIn, Home Depot, and Facebook.

Omer Dembinsky, Data Group Manager at Check Point Software, emphasized the need for vigilance when dealing with suspicious emails, stating, “While the most impersonated brands move around quarter to quarter, the tactics that cybercriminals use scarcely do. This is why we all must commit to stop and review, taking a moment before clicking on any link we don’t recognize.”

Brand phishing attacks involve cybercriminals imitating well-known brands, and deploying deceptive domains and web page designs that resemble genuine sites to steal users’ personal data, credentials, or payment details. These attacks can be delivered through emails, text messages, or fraudulent mobile applications.

The top phishing brands for Q2 2023 were as follows:

  1. Microsoft (29%)
  2. Google (19.5%)
  3. Apple (5.2%)
  4. Wells Fargo (4.2%)
  5. Amazon (4%)
  6. Walmart (3.9%)
  7. Roblox (3.8%)
  8. LinkedIn (3%)
  9. Home Depot (2.5%)
  10. Facebook (2.1%)

Cybersecurity experts stress the importance of being cautious and conducting due diligence before interacting with any unfamiliar links or providing personal information online. As cybercriminals continue to evolve their tactics, proactive measures and advanced security technologies become increasingly vital in the fight against brand phishing.

  1. 4 Essential Facets of Brand Protection
  2. 42,000 phishing domains found mimicking popular brands
  3. 16,000+ Scam Domains Aimed at FIFA World Cup Fans in Qatar
  4. Google, Microsoft &Oracle generated most vulnerabilities in 2021
  5. Microsoft, PayPal & Facebook most targeted phished brands- 2019

[ad_2]
Source link

Sophisticated DDoS Attacks Have Evolved Rapidly

andreasc
-
0
Sophisticated DDoS Attacks Have Evolved Rapidly
[ad_1]

Sophisticated DDoS attacks have become a favored tool for hackers, enabling them to target not only large organizations but also individuals.

This means that both businesses, regardless of their size, and private individuals find themselves vulnerable to these malicious activities.

Typically, a DDoS attack uses multiple machines to send a massive amount of traffic or load to a targeted device or website in order to either slow it down or cause it to collapse.

DDoS Attacks on Rise

In recent times, there has been a notable surge in both the frequency and magnitude of Distributed Denial of Service (DDoS) attacks.

In an increasingly alarming trend, attackers have been employing highly advanced techniques to successfully elude detection and countermeasures.

In the second quarter of 2023, the sophisticated DDoS attack gained major escalation.

The Cryptocurrency companies are the highly targeted ones; reports show the attacks increased by 600%, reads the Cloudflare report.

The most attacked industries were Computer Software, Gambling & Casinos, and Gaming. Telecommunications and Media outlets came in fourth and fifth, respectively.

DDoS Attacks Sophistication

The number of HTTP DDoS attacks rose by 15% compared to the previous quarter. However, Cloudflare has noticed a concerning increase in extremely randomized and sophisticated HTTP DDoS attacks in recent months.

During attacks, threat actors aim to maintain a relatively low attack rate per second to evade detection and blend in with legitimate traffic.

Organizations face significant challenges with the DNS Laundering attack, as it is difficult to distinguish from genuine traffic.

With the DNS Laundering attack, attackers query subdomains managed by the victim’s DNS server. 

Attackers take advantage of the randomized sub-domain prefix; recursive DNS servers will never have a cached response and will need to forward the query to the victim’s authoritative DNS server.

With the queries, the authoritative DNS server will be bombarded and fail to handle legitimate queries.

The computational and bandwidth resources of virtual machines allow attackers to launch hyper-volumetric DDoS attacks with a very less number of machines.

According to the Quarter results, the US has once again become the country that is the most targeted in terms of attacks, with Canada and Singapore following closely behind.


[ad_2]
Source link

You can now install WhatsApp on your Wear OS 3 smartwatch

andreasc
-
0
You can now install WhatsApp on your Wear OS 3 smartwatch
[ad_1]

WhatsApp is officially rolling out to Wear OS smartwatches, The Verge reports. The launch of the app was announced by Meta on July 19, a couple of months after the company confirmed it would be bringing its app to the platform. At the time of the initial announcement, Meta CEO Mark Zuckerberg only mentioned that the app would be coming later this year. But he didn’t mention an exact time.

That time appears to be now as long as you have the right watch for it. The only requirement really is that your watch has to be running on Wear OS 3. Of which there are now more than a few. If you meet that requirement, then you should be able to install the app. Upon opening up the Play Store, users will likely be greeted with the message that “WhatsApp is now available,” and tapping on that message takes you to the app’s install page. There you’ll see a big blue “install” button. Tap that and let the watch do its thing.

WhatsApp for Wear OS 3 offers features you’d expect

As you’d expect the WhatsApp Wear OS 3 app comes in hot with the standard features. This includes starting new message threads and responding to existing threads. You can also use the app to make voice calls. So long as you either have your phone on you or you have an LTE model of your watch.

The app features voice message and emoji support as well. And quick replies are present too. So, a pretty full-featured smartwatch app. It was announced back at Google I/O this year that WhatsApp was finally coming to the platform. After users have been heavily requesting it for quite some time. And this is Google and Meta making good on the promise to bring the app forward.

It’s landing at a good time, too. As Samsung is rumored to launch its next Galaxy smartwatches in just over a week. Giving users another device with support all the latest Wear OS features.


[ad_2]
Source link

AT&T is lowering its AutoPay discounts on credit cards

andreasc
-
0
AT&T is lowering its AutoPay discounts on credit cards
[ad_1]

After T-Mobile, AT&T is lowering its AutoPay discounts for users paying their phone bills through credit cards. The carrier recently announced that accounts that use credit cards for AutoPay and paperless billing will see their monthly discounts drop from $10 to $5 per line starting October 2, 2023. T-Mobile has completely ended AutoPay discounts for credit cards, Google Pay, and Apple Pay.

AutoPay is a program that all major wireless providers in the US offer to their customers. It enables them to automatically debit the monthly phone bill from the customer’s registered payment method every billing cycle. The companies offer AutoPay discounts for each line enrolled in the program. The discounts vary from carrier to carrier, usually ranging from $5 to $10 per line per month.

Until recently, T-Mobile and AT&T offered AutoPay discounts with all payment methods. But, the former ended the discount for credit cards and wallets last month. It previously offered a $5 discount on the monthly phone bill for those payment methods. AT&T is now following the same route, at least for payments made through credit cards. It isn’t completely ending AutoPay discounts, though. It’s decreasing the discount from $10 to $5 per line.

According to the official announcement from AT&T, this change will also affect the AT&T-branded Points Plus Card from Citi. If you use this card or any other credit card to automatically pay your monthly AT&T phone bills, your bill amount will increase by $5 starting in October. Like T-Mobile, AT&T is encouraging those users to update their payment methods to a debit card or bank account.

You can update your AT&T AutoPay payment method by visiting the company’s official website. You can also reach a customer support executive over the phone call at (800) 331-0500. Note that it can take a couple of days for your payment type to change. AT&T lets you manually make a one-time payment if needed if your bill is due within that timeframe.

This AutoPay change will save AT&T a few bucks on processing fees

Wireless carriers pay a higher processing fee on credit card transactions than on debit cards or bank payments. By ending or reducing AutoPay discounts on credit cards, the companies are trying to save a few bucks. However, this change may annoy a few AT&T and T-Mobile customers as some credit card operators offer additional benefits such as phone insurance if they pay their phone bill every month with their cards. Note that Verizon still offers AutoPay discounts on its Verizon Visa credit card.


[ad_2]
Source link

WhatsApp finally rolls out standalone smartwatch app for Wear OS

andreasc
-
0
WhatsApp finally rolls out standalone smartwatch app for Wear OS
[ad_1]

Meta had finally announced that WhatsApp for Wear OS is now rolling out to smartwatch users around the world in the coming days. After months of testing, the standalone smartwatch app is finally ready for primetime.

The Verge reports that the rollout is starting today, and that the new standalone app is compatible with all smartwatches powered by Google’s Wear OS 3. To avoid confusing users, WhatsApp’s smartwatch app is as simple as it gets.

The main features the app offers are the ability to send and receive text and voice messages, as well as emojis and quick replies. It might sound pretty basic, but this is more than enough considering that all of these features are available from your wrists.

As a slightly more advanced feature, users will be able to take VoIP calls when their smartwatch is not connected to their smartphones, as well as reply to messages and start new conversations.

Unsurprisingly, watchOS users haven’t been blessed with the same level of support, so their WhatsApp experience will be rather limited in comparison with Wear OS users. Apple Watch users can’t send messages or make calls through their smartwatch using WhatsApp, but they can reply to messages from their wrists. Not to mention that iPad users don’t even have an official app yet.

Usually, competition is good for consumers, but when it comes to WhatsApp, Meta seems to favor Wear OS over watchOS users. If you’re using a Wear OS 3 smartwatch, look for the standalone WhatsApp in the coming days.


[ad_2]
Source link

Critical Zero-Day Vulnerability in Citrix NetScaler Products

andreasc
-
0
Critical Zero-Day Vulnerability in Citrix NetScaler Products
[ad_1]

NetScaler ADC and NetScaler Gateway (previously Citrix ADC and Citrix Gateway) contain multiple discovered vulnerabilities.

Citrix ADC is a powerful networking solution that ensures fast, secure, and reliable delivery of applications across networks.

While the NetScaler Gateway is a secure remote access solution that enables users to access their applications and data from anywhere securely.

Citrix recently issued a security bulletin, cautioning users about three new vulnerabilities impacting their above-mentioned product line.

Here below, we have mentioned those three vulnerabilities:-

Hackers Exploiting Zero-Day

While the cybersecurity analysts at Rapid7 marked the CVE-2023-3519 as the critical zero-day vulnerability among the three, enabling unauthenticated attackers to execute code on vulnerable Gateway systems remotely.

Since the CVE-2023-3519 is currently exploited in the wild, poses a significant risk. Due to the popularity of this product line among threat actors, Rapid7 advises immediate emergency updates instead of waiting for the regular patch cycle.

To exploit the security issue, hackers target vulnerable appliances configured as gateways (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or authentication virtual servers (AAA server).

Zero-Day flaw profile

  • CVE ID: CVE-2023-3519
  • Description: Unauthenticated remote code execution
  • CVSS: 9.8
  • Severity: Critical
  • CWE: CWE-94
  • Pre-requisites: Appliance must be configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

Affected Products

The vulnerabilities impact the following supported versions of NetScaler ADC and NetScaler Gateway:-

  • NetScaler ADC and NetScaler Gateway 13.1 before 13.1-49.13
  • NetScaler ADC and NetScaler Gateway 13.0 before 13.0-91.13
  • NetScaler ADC 13.1-FIPS before 13.1-37.159
  • NetScaler ADC 12.1-FIPS before 12.1-65.36
  • NetScaler ADC 12.1-NDcPP before 12.65.36

Fixed Product Versions

Here below we have mentioned all the fixed product versions:-

  • NetScaler ADC and NetScaler Gateway 13.1-49.13  and later releases
  • NetScaler ADC and NetScaler Gateway 13.0-91.13  and later releases of 13.0
  • NetScaler ADC 13.1-FIPS 13.1-37.159 and later releases of 13.1-FIPS
  • NetScaler ADC 12.1-FIPS 12.1-65.36 and later releases of 12.1-FIPS
  • NetScaler ADC 12.1-NDcPP 12.1-65.36 and later releases of 12.1-NDcPP

Moreover, to mitigate these security flaws, make sure to apply patches in affected versions of NetScaler ADC and NetScaler Gateway on an immediate basis.


[ad_2]
Source link

Google wants you to back up your photos, to an annoying degree

andreasc
-
0
Google wants you to back up your photos, to an annoying degree
[ad_1]

There are several folks who like to have their photos and videos backed up to Google’s servers. However, not everyone does. Well, Google Photos has a new banner prompting people to back up their photos, according to Android Police.

In case you don’t know what backing up your photos does, here’s a quick rundown. If you’re looking to back up your files, you’ll select which folder you want to back up. After that, every photo or video you add to that folder will be uploaded to Google’s servers.

When that happens, you’ll be able to access that photo or video from the Google Photos app on any device regardless if you took the picture on that device. You can even see it on the Google Photos website in your browser.

Just know that this is an automatic process that takes place in the background. You’ll want to be careful of what you take a picture of, as it will be uploaded.

Google Photos has a new banner telling you to back up your photos

If you don’t back up your photos on Google Photos, then you’ll see a persistent banner on the top of the UI prompting you to “Unlock the power of Google Photos”. When you tap on it, you’ll be taken to a page with a checklist on it.

The checklist will have three features to enable. The first one will back up your photos, the second will enable notifications, and the third will sign you into Google Photos. If you already have these enabled, then they’ll show up as checkmarks.

Of course, Google is marketing this as a way to get the most out of Google Photos. Most tech users know what they want and what they don’t want. If they don’t have notifications enabled, then they don’t want them enabled. That also goes for backups.

However, the less tech-savvy individuals might not be as rebellious. All they’re seeing is a way to make their experience more powerful. They’re more likely to sign on without giving it a second thought. So, this could be the audience that Google is targeting. In any case, if you’re not backing up your photos, get ready to be annoyed.


[ad_2]
Source link

Samsung to make next-gen self-driving chips for Tesla

andreasc
-
0
Samsung to make next-gen self-driving chips for Tesla
[ad_1]

After initially snubbing Samsung, Tesla has reportedly returned to the Korean firm to manufacture its next-gen Full Self-Driving (FSD) chips, at least a portion of it. The Texas-based EV (electric vehicle) company had previously chosen TSMC as the sole manufacturer of the Hardware 5 (HW 5.0) auto chips. 

According to The Korea Economic Daily, this change of wind came after Samsung chief Lee Jae-yong met Tesla CEO Elon Musk in May. The duo discussed ways to strengthen their tech alliance during the meeting at the Samsung research center in Silicon Valley, San Jose. Lee offered to co-develop chips for fully autonomous vehicles and reportedly pitched “favorable contract prices” for manufacturing Tesla’s chips. Musk seemingly could not refuse the offer.

This wouldn’t be the first time Samsung would be manufacturing chips for Tesla. The Korean firm supplied FSD chips for its Model 3, Model 5, Model X, and Model Y cars in the past. But in December last year, Tesla decided to snub its long-time partner and switched to TSMC to manufacture its next-gen FSD chips. Samsung’s poor 4nm yields were said to be the reason behind this decision from the EV company.

However, Samsung has significantly improved its yield rates in recent months. Its 4nm yields are now on par with that of TSMC, while its 3nm yields have surpassed the Taiwanese firm. As such, Tesla has changed its mind and returned to Samsung. It plans to use Samsung-made 4nm HW 5.0 chips in its Level 5 autonomous driving vehicles, which should enter mass production three to four years from now.

Tesla is reportedly considering splitting the manufacturing of the next-gen auto chips between Samsung and TSMC. But it hasn’t completely ruled out the possibility of completely switching from TSMC to Samsung. Splitting next-generation chip production between the two is more likely though,” said an industry official familiar with the matter. The chips are expected to enter production next year, so Tesla still has time to decide.

Samsung will also manufacture self-driving chips for other companies

Along with Tesla, Samsung will also manufacture self-driving chips for Ambarella and Mobileye Global. The former is a fabless semiconductor design company, whereas the latter is an autonomous driving tech affiliate of Intel. To fulfill these orders, the Korean firm has significantly increased its foundry capacity at its Pyeongtack plant in Korea. It will also begin operations at its upcoming chip factory in Taylor, Texas by the end of 2024. Samsung expects its global contract chip manufacturing capacity to triple between 2022 and 2027.


[ad_2]
Source link

Hackers Use “chatgpt5[.]zip” to Trick Users into Download Malware

andreasc
-
0
Hackers Use “chatgpt5[.]zip” to Trick Users into Download Malware
[ad_1]

Hackers Use “chatgpt5 [.]zip” to Trick Users into Downloading Malware. Phishing remains a severe cybersecurity threat, deceiving employees with cleverly disguised malicious links and malware attachments, potentially causing company-wide troubles for over a decade.

The 2022 FortiGuard Labs report and the 2023 Global Ransomware Research both highlight phishing as the leading initial access method in network breaches, setting the stage for subsequent attack stages.

Threat actors employ creative names to disguise phishing attacks, with a new TLD ‘ .ZIP’ introducing a potential threat by chatgpt5 leading to malicious sites.

Reach Expansion

TLDs are vital components of domain names, like ‘.COM,’. ‘NET,. ‘ ‘.ORG,’ represents the highest level in the DNS hierarchy, shaping the structure of the web.

With internet evolution, countless gTLDs emerged for personalized web addresses, offering branding chances but also phishing opportunities that demand alertness.

The availability of public ‘.ZIP’ domains has created an unfortunate opportunity for the threat actors seeking new exploits and techniques.

The inclusion of ‘.ZIP’ as a gTLD adds complexity to phishing detection, particularly due to its association with compressed files, increasing confusion and providing phishers with a potent new tool for their attacks.

Exploiting ChatGPT

The cybersecurity researchers acknowledge the security risks of the ‘.ZIP’ TLD, but responsible individuals are actively working to mitigate the abuse of such domain names.

The hype around ChatGPT lead to the creation and registration of  “chatgpt5 [.]zip ” on May 20th, supposedly for the next GPT iteration, but surprisingly, it holds a neutral text message instead of malware.

New .ZIP domain (Source – Fortinet)
Harmless text message (Source – Fortinet)

To trick the users by claiming to safeguard students from malware, “assignment[.]zip” was registered by the threat actors on May 15th, redirecting visitors to a download of a ZIP archive containing files that are completely safe.

Fake attack for students (Source – Fortinet)

Exploiting the widespread use of the .ZIP extension, malicious actors create campaigns and websites reminiscent of early domain squatting techniques.

Domains Observed

Here below, we have mentioned all the domains observed by the researchers:-

  • joomla[.]zip on May 15th
  • msnbc[.]zip on May 15th
  • nozominetworks[.]zip on May 19th

Threat actors leverage special IDN characters to craft carefully disguised links within fake emails, directing users to malicious .ZIP domains.

  • hxxps://www[.]my-example-domain[.]com∕accounts⁄@businesscentral.zip

While the usage of IDN in .ZIP and .MOV TLDs is yet to be determined, unlike .COM and .ORG. The authority portion, [[email protected]:port number], includes optional fields like username and password. 

But, some parts can be omitted based on protocols, and the basic authentication websites require user info, while others can ignore it.

Mitigations

Here below we have mentioned all the mitigations:-

  • Make sure to block .zip domains via firewall and web filtering services.
  • Enhance protection with browser security extensions and web filters.
  • Make sure to enhance security with advanced email filtering to prevent suspicious link-containing emails.
  • Ensure all software, including antivirus programs, web browsers, and operating systems, is up to date.
  • Promote user awareness and bridge knowledge gaps through regular phishing simulations and training exercises.

[ad_2]
Source link
1...1,0741,0751,076...1,476Page 1,075 of 1,476