Orders for the Humane Wearable AI Projector kick off this year

andreasc
-
0
Orders for the Humane Wearable AI Projector kick off this year
[ad_1]

The Humane Wearable AI Projector which will soon be on sale is proof that technology is rapidly evolving. This piece of technology took the spotlight during a TED Talk about a month ago. Most people present really had to take in a lot regarding how much this AI projector is able to do.

The idea of this projector is to further shrink technology and make it blend into our everyday life. Over the past few years, netizens have seen a decrease in the size of tech products, from bulky monitors to AR glasses. Technology is evolving and Imran Chaudhri the CEO of Humane is positive that his new product will reshape the tech industry in drastic ways.

With the Humane Wearable AI Projector, netizens can say goodbye to screens and interact with their palms and other surfaces. That sounds like something straight out of a Star Wars movie right? Possibly the company, Humane, got the idea of their coming product from a sci-fi movie, but it’s still worth having a look at.

Humane Wearable AI Projector aims to push the boundary of technology a bit further

At the moment there is no official image of this product, but there is a demo. Humane is bringing AI into the picture with the design of what they feel is the future of technology. Although AI has been rustling a lot of bushes, it still plays a vital role in the world of technology.

So what exactly is this AI Projector from Humane, and how does it work? The first thing you need to note, asides from its reliance on AI, is that this projector is a wearable device. It aims to interact with the real world along with its use as they go through their daily activity.

Interacting with the real world might get some people uneasy due to privacy concerns. But Imran Chaudhri assures users that this product is privacy-oriented and safe to use. Can netizens take his word for it and order this AI Projector once it becomes available for purchase this year?

Maybe and maybe not, but, it is good to note that this device will not need any smartphone to pair with before it can function. Well, the full details of this product remain bleak, but during the TED talk it sits on the pocket level of Imran Chaudhri’s jacket. It seems to be a very compact device that brings AI into the everyday life of users.

Currently, there is a waitlist for those willing to purchase this device later this year. Its pricing is not clear, but since it aims to replace smartphones, it should have similar pricing to what is attainable in the smartphone industry. More information on this product will be made available in the coming months.


[ad_2]
Source link

NHS Psychiatrist Jailed; Dark Web Forum and 7,000 Images Seized

andreasc
-
0
NHS Psychiatrist Jailed; Dark Web Forum and 7,000 Images Seized
[ad_1]

Dr. Kabir Garg was administering “The Annex,” a notorious dark web platform for child sexual abuse, which had over 30,000 registered members.

An Indian psychiatrist who worked at South London and Maudsley NHS Trust has been sentenced to six years in prison for his involvement in a large-scale dark web child sexual abuse scandal. He was arrested by the UK’s National Crime Agency (NCA) in November 2022.

The Annex

According to the NCA, 33-year-old Kabir Garg from Lewisham, London moderated a dark web chat site called The Annex, which boasted 90,000 members worldwide.

He was responsible for sharing hundreds of links to indecent images of children daily on this site, maintaining decorum, and helping other visitors how to share images on the forum and evade law enforcement. Members of the site used the Tor anonymity browser to access the platform.

Kabir Garg: Image Courtesy National Crime Agency

A Shocking Crime!

The special prosecutor for the Crown Prosecution Service’s Organised Child Sexual Abuse Unit, Bethany Raine, claimed that it was a shocking crime, considering that Garg was an NHS psychiatrist whose primary duty was to treat vulnerable members of society. He should have understood the devastating impact of sexual abuse on children’s psyche.

Thousands of Indecent Images Uncovered

When the NCA searched his apartment, they recovered several devices, including a laptop and an SD card, from which they found around 7,000 indecent images. Out of these, 522 were category A images, which is the most serious category of indecent material.

In addition, they discovered medical journals and articles on the psychological impact of sexual abuse on children, with titles such as “Puberty and Adolescent Sexuality,” “Effects and Aftermath of Rape,” and “A Study on Child Abuse in India.” This indicates that Garg was well aware of the impact of his actions on children.

Accused Pleaded Guilty

At the hearing on January 9th, the accused pleaded guilty to one count of facilitating the exploitation of children, three counts of sharing indecent images of children, one count of possessing prohibited images of children, and three counts of making indecent images of children. Raine stated that, given the evidence recovered from his residence, Garg had no choice but to plead guilty, and such platforms should not have any place in society.

According to the Crown Prosecution Service press release, the Woolwich Crown Court sentenced Garg on June 23rd, and he was jailed on Friday. Garg will be registered as a sex offender for life and will also be subject to a Serious Harm Prevention Order.

Indian Psychiatrist Jailed in UK: Dark Web Forum and 7,000 Images Seized
Profile of Kabir Garg

A Sigh of Relief

After Garg’s sentencing, the NHS Foundation Trust released a statement hoping that it might bring a “sense of justice and closure” to the victims of his “deplorable actions.”

On the other hand, the General Medical Council has temporarily suspended Garg until the results of a full GMC investigation are received. Once the results arrive, the GMC will decide whether to refer this case to a full tribunal hearing to determine Garg’s fate as a doctor.

Thankfully, the Annex is now defunct. It was revealed that during its active period, it had 30 administrators. Garg was initially a member and became a moderator after impressing the admins with his dedication and “hard work”. He completed his MBBS from King George Medical University, Lucknow, and worked for the National Institute of Mental Health and Neurosciences before moving to the UK.

  1. Authorities seize world’s biggest dark web child abuse site
  2. 100,000 Hacked ChatGPT Accounts Discovered on Dark Web
  3. Unreleased Music Stolen and Sold on Dark Web: Hacker Fined
  4. Microsoft sued for alleged misuse of stolen Dark Web credentials
  5. Google’s Latest Android Feature Drop: Dark Web Search for Gmail ID

[ad_2]
Source link

Serious IDOR Vulnerability Found In Microsoft Teams

andreasc
-
0
Serious IDOR Vulnerability Found In Microsoft Teams
[ad_1]

Researchers found a severe security vulnerability in Microsoft Teams that allows malware distribution. Specifically, an IDOR vulnerability riddles Microsoft Teams, permitting malicious file delivery from external sources. Exploiting the vulnerability risks organizations using Microsoft Teams for routine work.

Microsoft Teams IDOR Vulnerability

According to a recent advisory from JUMPSEC Labs, two researchers, Max Corbridge, and Tom Ellson, discovered the malware-introducing IDOR vulnerability in Microsoft Teams’ latest version.

As explained, their researchers noticed the flaw with the default Microsoft Teams configuration that allowed bypassing client-side security controls. In turn, it allowed an adversary to deliver malware via maliciously crafted files to a target user, tricking the user into accepting the file from external tenants.

Although, an incoming message from an external tenant usually comes with a warning banner clearly mentioning the external sender. However, despite being a clear alert, users often ignore such prompts and interact with incoming messages. That’s where the attackers succeed in attacking the target systems with malware.

But Microsoft Teams prevents such threats by restricting easy interactions via client-side controls, particularly regarding file delivery, from external tenants.

However, JUMPSEC researchers could bypass those security controls using a traditional IDOR technique. The researchers switched the internal and external recipient ID on the POST request, usually at /v1/users/ME/conversations/<RECIPIENT_ID>/messages. Next, the malware actually hosted on a SharePoint domain appears as a file to the victim user instead of a link. Hence, the target user will likely download the malware without any warnings.

This technique typically bypasses almost all existing anti-phishing measures. Hence, it posed a huge threat to organizations, where potential attackers could abuse Microsoft Teams to target their networks.

Recommended Mitigations Until (And If) A Fix Arrives

Following this discovery, the researchers reported the vulnerability to Microsoft. While the tech giant acknowledged the bug’s legitimacy, it did not consider it to “meet the bar for immediate servicing“.

That means the vulnerability still exists and threatens the organizations. Therefore, the researchers advise Microsoft Teams users to remain careful when interacting with emails from external tenants. This includes implementing everything from reviewing external tenant permission to message the firm’s staff to maintaining allow-lists for trusted external tenants and training the staff for tackling such threats.

Let us know your thoughts in the comments.


[ad_2]
Source link

Nothing Phone owners can create their own Glyph ringtones

andreasc
-
0
Nothing Phone owners can create their own Glyph ringtones
[ad_1]

Nothing is preparing to launch the Phone 2 soon, and in celebration of that the company is adding a Glyph Composer feature. Coming to both the Nothing Phone 1 and Nothing Phone 2, the Glyph Composer will let you create your very own Glyph ringtones.

If you’re unfamiliar with the Glyph ringtones, they’re a neat feature of the device. They’re a combination of the actual ringtone and the flashing lights on the back. So you’ll see the lights flash in sync with the tone.

The feature is a collaboration with Swedish House Mafia. Who helped create a special sound pack that Nothing Phone owners can use to make the tones. To create a Glyph ringtone, users can hit a record button inside the composer and select from a series of different tones. There’s 5 different tones and sound mixes total that can be used. Complete glyph ringtones are also a composition of 8-10 seconds in length and are set as “multitrack audio files,” Nothing says.

The Glyph Composer will launch alongside Nothing Phone 2

While the new Glyph Composer feature will come to the first phone, it’s not available just yet. Nothing says it’ll launch alongside Phone 2. Which is supposed to happen in July. July 11 to be specific. So there’s still a bit of a wait.

Nothing will likely show this feature off during the launch event. If you’re curious to see it in action, then you’ll want to watch. Because that’ll be your best chance to see it prior to testing it on your own device.

In addition to composing your own Glyph ringtones, the compose includes a pre-made one created by Swedish House Mafia. You can use this if you aren’t up to creating your own. Though creating your own is likely more fun. That being said, the Swedish House Mafia Glyph sound pack and Glyph ringtone will be available sometime this Summer. So it might not launch right when the Glyph Composer does.


[ad_2]
Source link

The European price for the Sony WF-1000XM5 might upset you

andreasc
-
0
The European price for the Sony WF-1000XM5 might upset you
[ad_1]

Sony is a leading company in the wearable audio market, and we’re all looking forward to the Sony WF-1000XM5. These are the company’s upcoming TWS earbuds, and they promise to be an improvement over the previous version. Well, according to the European price, it seems that the Sony WF-1000XM5 might have a price increase.

Sony’s new earbuds have been popular, but the Sony WF-1000XM4 were a hit among audiophiles. If you’re looking for a great audio experience, you don’t want to spend too much money, and you don’t mind using an older set of earbuds, then you can look into picking up a pair of those earbuds. You can find them on Amazon as low as $199 if you look.

The European price of the Sony WF-1000XM5 point to a price bump

When the Sony WF-1000XM4 launched back in 2021, they retailed for €279. While that’s still a hefty price, the Sony WF-1000XM5 could see a 15% price increase. According to Notebookcheck.com (via Techradar), the Sony WF-1000XM5 might cost €319.99 in Europe. That’s about a €40 increase. If this is true, then we might be looking at a price of $319.99 in the US and £287 in the UK.

That’s unfortunate for people who were expecting a comparable price to 2021’s release. However, as you can expect with a two-year jump, the Sony WF-1000XM5 are going to be a notable improvement over the Sony WF-1000XM4.

Rumors have it that these earbuds will come with two in-house chips that will give them superior audio quality. Aside from that, the microphones will also see an improvement along with the drivers. Also, they’re expected to be almost 20% lighter at about 5.9g.

Right now, it’s hard to tell if these earbuds will be worth the extra money, but it seems like they will. If you’re a fan of Sony’s earbuds, then you might just have an amazing experience with these new earbuds.


[ad_2]
Source link

Mallox Ransomware Attacks IT Industries With New Attack Pattern

andreasc
-
0
Mallox Ransomware Attacks IT Industries With New Attack Pattern
[ad_1]
Mallox Ransomware

A new variant of Mallox ransomware, also known as “Target company” ransomware, adopts a unique method of appending the name of the targeted company as a file extension to encrypt the files and launch the ransomware attack.

The Mallox threat actor distributes ransomware via a downloader attached to spam emails by targeting unsecured internet-facing Microsoft SQL servers.  

CSN

Mallox ransomware encrypts files on compromised machines and typically adds a “. mallox” extension to the affected files. 

Mallox targets industries such as Manufacturing, Energy & Utilities sectors, IT & ITES, and Professional Services.

Mallox Ransomware Attack Vector

Mallox ransomware initiates the attack via a malicious attachment that can either be an executable file that downloads Bat Loader from a remote server or may directly contain it. 

The new variant doesn’t need a downloader to retrieve the ransomware payload from a remote server. The bat loader will be delivered directly through the attachment in a phishing email.  

Instead, the ransomware payload is contained within a batch script, which is then injected into “MSBuild.exe”, without saving it on the disk 

Infection Chain

 
Once the user clicks on the attachment, the various variables defined in random sequences in the batch script file will be combined through concatenation to execute commands. 

Secondly, Base64 encoded content provided as a parameter is executed for extracting the ransomware payload from the BatLoader.  

The script achieves this extraction by scanning the initial BatLoader and identifying lines with the substring “ck”. When a line with “ck” is found, the script appends the substring following “ck” to an object using the Append method. 

This PowerShell script also drops a batch script named “killerrr.bat” in the %TEMP% directory, which can perform the following operations: 

  • Kill over 600 processes using the taskkill /IM command. 
  • Stops over 200 services using the net stop command. 
  • Disables over 13 services using the sc config Service_Name start= disabled power. 
  • Deletes over 200 services using the sc delete command. 
  • Removes 2 directories “C:\Program Files (x86)\Kingdee\K3ERP\K3Express\KDHRAPP\client\log” and “C:\Program Files\Kingdee\K3ERP\K3Express\Logs” 

Finally, The ransomware binary is injected into the MSBuild.exe through this PowerShell script. Here is the ransomware notes where attackers provided the details about the contact information and the ransom demand to decrypt the files.

Mallox ransomware has publicly disclosed details of over 20 victims from over 15 countries, with India being the most targeted nation, followed by the United States, Cyble Researchers said.

To prevent data breaches due to ransomware attacks, one must follow the below steps 

  • Conduct regular backup practices and keep those backups offline or in a separate network.  
  • Keep updated on your computer, mobile, and other connected devices wherever possible and pragmatic.  
  • Use a reputed anti-virus and Internet security software package on your connected devices, including PC, laptop, and mobile.  
  • Refrain from opening untrusted links and email attachments without verifying their authenticity.  

“AI-based email security measures Protect your business From Email Threats!” – Request a Free Demo.

Indicators of Compromise (IOCs) 

Indicators Indicator Type Description 
dcf060e00547cfe641eff3f836ec08c8 
8054569d8b449e4cd0211cb2499c19f42557fb21 
2565158b0a023299c1922423a065b982g5fd1769f1a87ffd2031375a0e893d523318 		MD5 
SHA1 
SHA256 		BatLoader 
9a239885dc7044a9289610d58585167b 
28b8b4c9fe29ba0e815e525d2529b92217877e85 
0de0da8037176c3c9cb403e2865a7699e53ff5a013070132ba512b9dab7a0126 		MD5 
SHA1 
SHA256 		Killerrr.bat 

[ad_2]
Source link

Fake Super Mario 3 Installers Drop Crypto Miner, Data Stealer

andreasc
-
0
Fake Super Mario 3 Installers Drop Crypto Miner, Data Stealer
[ad_1]

The malware has the potential to target large-scale victims since games like Super Mario 3 are famous among and adored by children around the world.

Recently, Cyble researchers discovered a trojanized version of the Super Mario 3: Mario Forever installer. The malware hidden inside the installer can perform various malicious tasks, such as stealing sensitive data, deploying cryptocurrency miners, and launching ransomware.

Beware of Fake Super Mario 3 Installer

Researchers have noted that game installers have emerged as a lucrative way to maximize monetary gains. Threat actors prefer to exploit game installers for delivering malware due to their extensive user base, powerful hardware, and large file size, which allows them to easily hide malware. Gamers trust these installers, considering them legitimate software, but social engineering can allow attackers to exploit this trust and trick gamers into downloading malware.

In this case, the researchers wrote that the fake installer comes with three executable files. One of these files installs the game, while the other two files, titled java.exe and atom.exe, are installed in the AppData directory on the device. Both files are assigned different tasks.

  • Java.exe- it may look like a regular Java runtime, but in reality, it is a Monero cryptocurrency miner tasked with establishing a connection to a mining server (gulfmonerooceanstream).
  • Atom.exe- It is a self-duplicating SupremeBot mining client that creates a scheduled task for executing the copy every fifteen minutes. SupremeBot has to fetch another executable, “wime.exe,” after establishing a connection to a C2 server.

How does it work?

After the malicious installer file “super-mario-forever-v702e” is installed on the system, it launches an XMR miner and a SupremeBot mining program through two files. Once this is done, a connection to the C2 server is established to transmit data information, register the client, and obtain the required configuration to start cryptocurrency mining. This is followed by fetching the “wime.exe” executable, an open-source Umbral Stealer.

Malware-infected Super Mario game installer (left) – Malware files upon installation (right) – Screenshots credit: Cyble

The Umbral Stealer is capable of stealing sensitive user data from the targeted device, which includes stored cookies and passwords, session tokens, credentials from cryptocurrency wallets, and authentication tokens for other platforms or games. Additionally, it disables Windows Defender to evade detection if tamper protection is inactive. However, if tamper protection is active, it adds the process to the exclusion list.

Potential Dangers

The malicious Super Mario 3 installer is quite lethal as it is capable of cryptocurrency mining and data stealing. This can result in heavy financial losses for victims and drain computer resources, causing a decline in system performance.

“Malware distributed through game installers can be monetized through activities like stealing sensitive information, conducting ransomware attacks, and more,” Cyble’s report read.

  1. Alert: Android Super Mario Run is Actually Malware
  2. Minecraft declared the most malware-infected game
  3. Stop downloading fake malicious Fortnite Android apps
  4. ROBLOX, Nintendo game cracks drop ChromeLoader malware

[ad_2]
Source link

Nothing Phone (2) pre-orders will start in just a few days in India

andreasc
-
0
Nothing Phone (2) pre-orders will start in just a few days in India
[ad_1]

We’re getting closer to the launch of the Nothing Phone (2), and folks are getting excited about what this phone will do. While most of us are waiting to place our orders for this phone, some users will be able to place their orders much sooner. According to Android Central, folks in India can place their pre-orders for the Nothing Phone (2) in just a few days.

We’re still learning more information about the Nothing Phone (2). Just recently, we got a visual of how the Glyph Interface will look on this phone. It’s extremely similar to what we saw with the Nothing Phone (1). The main difference is that there are sections of the LEDs taken out.

Nothing Phone (2) pre-orders start soon in India

The official launch of the Nothing Phone (2) is nearing. The launch event will officially kick off on July 11th. That’s just a few weeks from now. Most people will put their orders in on that day, but folks in India will get the jump on the others.

Flipkart, a Walmart-owned brand, announced on its page that folks in India will be able to put in their pre-orders for the phone starting on June 29th. That’s only three days away and well before the launch event.

Those looking to put in their pre-orders will need to pay an INR 2,000 deposit (about $24.40) to secure their order. After that, the user will need to return to the site and pay their remaining balance on July 11th.

One thing to note is that you won’t pick your variant when you place your pre-order. You’ll pick your variant when you return to the site on the launch date.

If you place your pre-order, you should get your phone before the open sales begin. This deal is for people who really want to get their hands on the phone as soon as possible. For the rest of us, we’ll have to wait until July 11 to place our orders.


[ad_2]
Source link

Apple Watch Ultra 2 coming this Fall, M3-powered Macs on the way too

andreasc
-
0
Apple Watch Ultra 2 coming this Fall, M3-powered Macs on the way too
[ad_1]

Apple has quite a few new products coming in the second half of this year and potentially in early 2024. Mark Gurman mentioned in his PowerOn newsletter over the weekend that there’s an Apple Watch Ultra second generation coming alongside the Apple Watch Series 9 and the iPhone 15 series.

Gurman did not mention to much about the second-generation Ultra, and what to expect. Though, that might be a good thing, since the last time leakers were sure of an Apple Watch leak, it turned out to be the opposite.

Apple likely to launch M3-powered Macs later this year, or early 2024

Now that the last of the M2-powered Macs have been announced, it’s time to look at M3. And Gurman stated in his newsletter that MacBook and MacBook Pro devices with M3 are not expected until later this year, or early 2024. He also notes that iMacs with 24-inch screens are in the work. Which is currently the oldest Mac that hasn’t been updated since the M1 series of chips came out. It looks like the iMac will skip the M2 generation.

On top of that, the report also mentions that Apple is working on a larger iMac model, potentially something larger than 30-inches. Many are speculating that this could be the long awaited iMac Pro powered by Apple Silicon.

Keep in mind that Apple used to offer two different sizes of iMacs in the past, with Intel chips. There was a 21.5-inch and a 27-inch iMac. And later, Apple launched an iMac Pro which featured an Intel Xeon CPU. And that would fit nicely in Apple’s current lineup, especially for those that want all-in-ones, versus just a tower like the Mac Studio or Mac Mini.

Finally, Gurman also reiterated that the iPad is getting some updates for 2024. Which includes OLED displays coming to the iPad Pro models. And there’s also an updated iPad Air coming in 2024.


[ad_2]
Source link

Fortinet Addressed Critical RCE Vulnerability In FortiNAC Systems

andreasc
-
0
Fortinet Addressed Critical RCE Vulnerability In FortiNAC Systems
[ad_1]

The cybersecurity and technology provider, Fortinet, has recently addressed multiple security flaws affecting FortiNAC systems. This includes patching a critical remote code execution vulnerability that allowed unauthenticated code execution on the target FortiNAC system.

FortiNAC Vulnerability Could Allow Remote Attacks

The security researcher Florian Hauser from Code White Security discovered two different security issues in the latest FortiNAC versions.

Hauser became interested in analyzing this product after Fortinet addressed the critical vulnerability (CVE-2022-39952) in February this year. The researcher decided to analyze the FortiNAC version 9.4.1 to look for additional vulnerabilities, and he found two notable issues.

The first is a critical remote code execution vulnerability in FortiNAC (CVE-2023-33299; CVSS 9.6). Exploiting this RCE vulnerability could allow an unauthenticated remote adversary to execute arbitrary commands on target FortiNAC systems.

As elaborated in Fortinet’s advisory, this vulnerability existed due to deserialization of untrusted data. An attacker could exploit the flaw by sending maliciously crafted requests to the tcp/1050 service.

This vulnerability affected numerous FortiNAC versions, which include versions 9.4.0 through 9.4.2, 9.2.0 through 9.2.7, 9.1.0 through 9.1.9, 7.2.0 through 7.2.1, and all versions of FortiNAC 8.8, 8.7, 8.6, 8.5, 8.3.

The second issue is a medium-severity vulnerability (CVE-2023-33299; CVSS 4.8). As explained in Fortinet’s advisory,

An improper neutralization of special elements used in a command (‘command injection’) vulnerability [CWE-77] in FortiNAC tcp/5555 service may allow an unauthenticated attacker to copy local files of the device to other local directories of the device via specially crafted input fields.

However, exploiting the flaw required an attacker to have prior access to the target FortiNAC device with sufficient privileges.

This vulnerability affected FortiNAC versions 9.4.0 through 9.4.3 and 7.2.0 through 7.2.1.

The researcher has shared a detailed technical analysis of both vulnerabilities in his blog post.

Fortinet Patched The Flaw

Before publishing the write-up, the researcher responsibly disclosed the flaws to Fortinet and discussed with them the disclosure timeline. Fortinet agreed to the timeline, releasing the bug fixes in time with the latest FortiNAC version 9.4.1 and the subsequent releases of other versions.

Since the updates have been released, users must ensure updating their respective systems with the latest versions to avoid threats.

Let us know your thoughts in the comments.


[ad_2]
Source link
1...1,1451,1461,147...1,480Page 1,146 of 1,480