Apple issued information about patches against three actively exploited zero-days in WebKit. One vulnerability is new, two were patched earlier this month.
Apple has rolled out security updates for Safari 16.5, watchOS 9.5, tvOS 16.5, iOS 16.5, iPadOS 16.5, iOS 15.7.6, iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Ventura 13.4, and macOS Monterey 12.6.6.
Among the security updates were patches for three actively exploited zero-day vulnerabilities. All these actively exploited vulnerabilities are directly related to the WebKit browser engine.
WebKit is the engine that powers the Safari web browser on Macs as well as all browsers on iOS and iPadOS (all web browsers on iOS and iPadOS are obliged to use it). It is also the web browser engine used by Mail, App Store, and many other apps on macOS, iOS, and Linux.
Devices impacted by the identified exploits include:
All iPad Pro models
iPad Air (3rd generation and later)
iPad (5th generation and later)
iPad Mini (5th generation and later)
iPhone 6s and later models
Mac workstations and laptops running macOS, Big Sur, Monterey, and Ventura
Apple Watch (series 4 and later)
Apple TV 4K and HD
The updates may already have reached you in your regular update routines, but it doesn’t hurt to check if your device is at the latest update level. If a Safari update is available for your device, you can get it by updating or upgrading macOS, iOS, or iPadOS:
The Common Vulnerabilities and Exposures (CVE) database lists publicly disclosed computer security flaws. The CVE containing the information about the new zero-day is:
CVE-2023-32409: An issue where remote attacker may be able to break out of Web Content sandbox was addressed with improved bounds checks.
The notes about the security updates also revealed some information about the Apple’s Rapid Security Response (RSR) update we reported about earlier this month.
RSR is a new type of software patch delivered between Apple’s regular, scheduled software updates. Previously, Apple security fixes came bundled along with features and improvements, but RSRs only carry security fixes. They’re meant to make the deployment of security improvements faster and more frequent.
We now know that the CVEs patched in that RSR update are listed as:
CVE-2023-28204: An out-of-bounds read issue in WebKit was addressed with improved input validation. Processing web content may disclose sensitive information.
CVE-2023-32373: A use-after-free issue in WebKit which was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.
An out-of-bounds write or read flaw makes it possible to manipulate parts of the memory which are allocated to more critical functions. This could allow an attacker to write code to a part of the memory where it will be executed with permissions that the program and user should not have.
Use after free (UAF) is a vulnerability due to incorrect use of dynamic memory during a program’s operation. If after freeing a memory location a program does not clear the pointer to that memory, an attacker can use the error to manipulate the program.
We don’t just report on vulnerabilities—we identify them, and prioritize action.
Last year, it was Mastodon; this year, it’s Bluesky. This upcoming decentralized social media app is getting a lot of attention as a potential alternative to Twitter. It’s another destination for people to migrate to after leaving the Musk-owned social media platform. Now, according to Engadget, you can use Flipboard to browse your Bluesky feed.
In case you don’t know what Bluesky is, this app is backed by Jack Dorsey, one of the founders of Twitter. This is meant to be a Twitter alternative that will prioritize decentralization. The app has been in development since 2019, and it is still in beta testing. We’re not sure exactly when the app will launch, but it’s going to be pretty soon.
As for Flipboard, this app has been around for a while. It will aggregate articles from different sites and publications and display them on a feed. You will scroll through your feed to access all of the latest articles. If you want to stay up to date with all of your favorite news, then you should give it a try.
You can use Flipboard to navigate your Bluesky feed
This move is part of Bluesky’s plan to take on Twitter. Also, this is a part of Flipboard’s plan. The newsfeed platform has integrated with another decentralized social media platform, Mastodon. With this integration, Flipboard is now a much more desirable news aggregation platform.
Using Flipboard, you’ll be able to flip through your Bluesky feed. This is extremely useful if you happen to use both apps. Instead of hopping from app to app, you can see your news articles and your social media feed all in one place. This is a very interesting integration, as Bluesky is not even out of beta testing Yet.
As Twitter continues to fumble, other platforms seem to be conspiring to steal as many people from it as they can. A lot of people have been claimed by Mastodon, and even Hive Social is getting a bit of a following. Bluesky is the latest, and we’ll just have to see how it fares.
We take a look at a case where Google is agreeing to pay $40m as a result of disclosure related to location tracking issues.
Google is going to pay $39.9 million to Washington State to put to rest a lawsuit about its location tracking practices which has been in play since last year. Google was accused of “misleading consumers” by State Attorney General Bob Ferguson. From the AG press release:
Attorney General Bob Ferguson today announced Google will pay $39.9 million to Washington state as a result of his office’s lawsuit over misleading location tracking practices. Google will also implement a slate of court-ordered reforms to increase transparency about its location tracking settings.
Ferguson’s lawsuit against Google asserted that the tech giant deceptively led consumers to believe that they have control over how Google collects and uses their location data. In reality, consumers could not effectively prevent Google from collecting, storing and profiting from their location data.
The lawsuit itself, announced back in January 2022, claimed Google used a “number of deceptive and unfair practices” to obtain user content for tracking. Practices highlighted included “hard to find” location settings, misleading descriptions of location settings, and “repeated nudging” to enable location settings alongside incomplete disclosures of Google’s location data collection.
These practices were set alongside the large amount of profit Google generated from using consumer data to sell advertising. Google made close to $150 billion from advertising in 2020, and the case pointed out that location data is a key component of said advertising. As per the Attorney General:
(Google) has a financial incentive to dissuade users from withholding access to that data.
The location based argument is focused on the discrepancy between claims related to what data Google stores in theory with location data turned off, and what it obtains in practice:
When users enable a setting called “Location History,” Google saves data on users’ location to, as it says in its account settings, “give you personalised maps, recommendations based on places you’ve visited, and more.”
Google told users that when Location History was disabled, the company did not continue to store the user’s location. For years, Google’s help page stated, “With Location History off, the places you go are no longer stored.” That statement was false. For example, the company collects location data under a separate setting — “Web & App Activity” — that is defaulted “on” for all Google Accounts.
The consent decree filed on Wednesday means Google will need to be more transparent with regard to tracking. The search engine giant will also need to provide more detailed information in cases where location technologies are involved.
AG Ferguson had this to say:
Google denied Washington consumers the ability to choose whether the company could track their sensitive location data, deceived them about their privacy options and profited from that conduct. Today’s resolution holds one of the most powerful corporations accountable for its unethical and unlawful tactics.
Google has been on the receiving end of legal action led by Ferguson for some time now. Just last month, he partnered with the US Department of Justice and a bipartisan group of attorneys general for an antitrust lawsuit aiming to break up Google’s monopolisation of display advertising. There have also been other antitrust lawsuits in this space, and in 2021 Google paid $423,659.76 in relation to violating the state’s campaign finance disclosure law.
We still don’t know how these proposed changes will take shape in terms of what consumers will see. “…with no federal law governing online privacy in the United States, state regulators are forced to make do with what they have” according to Android Central. With Ferguson showing no signs of letting up, Washington State is taking that philosophy to the max.
Malwarebytes EDR and MDR removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.
The wind through your hair, the rumble of the bike on the dirt path, the feeling of the soft living room couch under your bottom. There are a ton of great BMX games on the Google Play Store that you can download and play from the comfort of your couch. Here are some of the best BMX games that you can download now.
These games either involve doing sick tricks to rack up points, racing opponents, or navigating through obstacles. So, get your helmet on, and don’t forget your shoulder pads!
Top 10 Best BMX Android Games Summary
Before we get going, here’s a quick overview of the apps including the prices and in-app purchases associated with them.
Game
Download Cost
In-app cost (per item)
Touchgrind BMX 2
Free
$0.99 – $24.99
Trail Boss BMX
$3.99
None
Max Air BMX
Free
$1.99 – $14.99
Xtreme BMX Offroad Cycle Game
Free
$2.99 – $36.99
BMX Cycle Race: Cycle Stunts
Free
$0.99 – $11.99
Flip Rider – BMX Tricks
Free
$1.99 – $14.99
Trial Xtreme 4 Bike Racing
Free
$0.10 – $199.99
BMX FE3D 2
Free
$1.49 – $9.99
BMX Boy
Free
None
BMX Space
Free
$0.99 – $19.99
Top 10 Best BMX Android Games
Below, we have a more in-depth explanation of all of the games on this list.
Touchgrind BMX 2
Download Cost: Free
In-App Cost: $0.99 – $24.99
Size: 815MB
Google Play Rating: 4.4 stars out of 5
This game doesn’t really bother with adding human characters. Instead, it focuses on the only part that matters, the bike. In this game, you’ll pilot an unmanned bike and perform all sorts of stunts to earn points.
This game definitely stands out from the other games for only having you control a bike. However, as you play, you’ll be able to unlock different bike designs as you play, and they’re all pretty nice to look at. You can also customize your bikes.
As for the gameplay, you’ll hold two fingers on your phone and move them accordingly to do different tricks when you gain some air. There are a ton of tricks that you can do, so most of the fun will just be in learning the tricks.
This is one of the more robust games on this list. Trail Boss has five different difficulty levels that offer a range of challenge. The point of this game is to ride along different trails and make your way to the end of them. While you’re riding, you’ll be able to perform tricks when you gain air.
There are a bunch of customization options that you can use to personalize your bike. You can customize the color of the frame, fork, handlebars, grips, stems, tires, tire walls, rims, chain, cranks, hubs, spokes, pedals, seat post, seat, hardware, and chainring.
There are no in-app purchases in this game. You just pay the $3.99 to get it and that’s it. If you have Google Play Pass, then you can get it for free.
MAx Air BMX is a pretty simple BMX game that has you performing tricks in a 2.5D environment. The stages are ramps that you go back and forth on while performing tricks. As you perform tricks, you’ll earn coins that you can use to unlock more characters.
You’ll go down the ramp and hold your finger down once you get air. The longer you hold your finger down, the more points you’ll gather. However, you’ll need to be careful not to have your finger down when your character lands. If that happens, then your character will fall.
The longer you go without falling, the faster your character will ride. This means that you’ll gain more air and earn more points.
This is a BMX racing game that has you racing in different locations and types of environments. It strives for authenticity, so it’s a bit more realistic than other games.
When you start, you can choose between a male and a female racer. When you choose, you’ll be thrown right into the action. The game is a bit slower-paced than some of the other games on this list, but it makes for a more realistic experience. You’ll need to control your speed to navigate the changing terrain and avoid obstacles.
The gameplay is pretty simple with the steering control on the left of the screen and the acceleration and brake on the right of the screen. It’s a fun and simple game to play.
If you’re looking for a more robust BMX game, then you’ll want to try this one. In this game, you’ll be racing other riders in different locations for the gold. You’ll be racing through race tracks, but you’ll also race on roads where you’ll need to avoid traffic and other hazards.
Along the way, you’ll be performing stunts, and this adds some neat variety to the game. It’s a pretty high-octane experience that will keep you coming back for more. The conrol scheme is similar to other games like it. The steering controls are on the left of the screen and the acceleration and brakes are on the right.
Flip Rider is a fun and simple BMX game that has you flipping on a ramp to earn you points. In this game, you’ll be on a bike ramp, and when you gain air, you’ll need to do flips. The point of the game is to see how many flips you can do before you land.
If you keep landing your tricks through the round, you’ll start to see a trail develop behind you, and your speed will increase. This means that you’ll be able to catch more air to perform tricks.
As you play the game, you’ll unlock more stages and environments. This adds some nice variety to the game and gives you an incentive to land more tricks.
In this game, you’re racing other players on impossible BMX tracks. They defy the laws of physics, and that makes it that much more fun. This is a 2.5D game, so you’ll be moving along one plane while racing the opponent.
As you race, you’ll need to be sure to keep your bike steady in the air when you make jumps. You’ll tap either one of the buttons on the left side of the screen to control your bike. It’s important to land your jumps properly because that affects your speed.
What’s neat about this game is the selection of customizations you have for your bike. You can change the look of your bike with tons of different add-ons. You can do this along with upgrading your bike’s performance.
This game takes an approach similar to the Tony Hawk Pro Skater games from back in the day. When you start off, you’ll customize your character with some basic customizations and get going.
When you start, you’ll be placed in one of several different parks. Your job is to reawaken the 90s kid in you and perform trick after trick. Just like the old Pro Skater games, you’ll hop on the ramps, half-pikes, and other structures to perform a myriad of different insane stunts.
As you play, you’ll be able to upgrade your character’s stats. This way, you’ll be able to perform the stunts more easily as time goes on. It’s a great game to play if you’re looking for a nostalgic experience.
BMX Boy is reminiscent of those simple biker games that you’d play on your internet browser. It’s very straightforward, and it has a certain charm to it. When you start, you’ll tap the screen to hop over the obstacles in your way. Along the way, you’ll gather these blue stars. As you collect them, you’ll gain XP points to level up.
You’ll use the acceleration button on the left of the screen to control your speed, and you’ll tap on the right side to tilt the titular BMX Boy forward. It’ll be a balancing act of tilting your character forward just enough to land your jumps. It’s a fun and simple time waster.
BMX Space is a fun and straightforward game to pass the time. When you start, you’ll be able to customize your character and the bike. This game is a level-based game where you have to perform different tricks before the time runs out. There are a bunch of levels that you’ll need to go through.
You’ll use the joystick on the left of the screen to move and the one on the right to control your character in the air. Using the combination, you’ll be able to perform a myriad of different stunts.
CERT-UA has identified and addressed a cyber attack on the government information systems of Ukrainian governmental state bodies.
Through investigation, it was discovered that the department’s email address received communications on April 18, 2023, and April 20, 2023, appearing to originate from the authentic email account of the Embassy from Tajikistan (In Ukraine).
Weaponized DOCX File
Suspected to be a result of the compromised state of the embassy, these emails comprised an attachment in the form of a document that contained a macro in the initial case while referring to the same document in the later incident.
When the document is downloaded, and its macro is activated, it creates and opens a DOCX file called “SvcRestartTaskLogon” with a macro that generates another file with the “WsSwapAssessmentTask” macro.
While it also includes a “SoftwareProtectionPlatform” file categorized as HATVIBE, which can load and execute additional files.
During the course of technical investigation, it was documented that on April 25, 2023, supplementary programs were generated on the computer, possibly facilitated by HATVIBE, under uncertain circumstances.
Here below, we have mentioned those additional generated apps:-
LOGPIE keylogger
CHERRYSPY backdoor
The files are created with Python and secured with PyArmor, while the “pytransform” module, providing encryption and code obfuscation, is further safeguarded with Themida.
The STILLARCH malware is employed for searching and exfiltrating files, including data from the LOGPIE keylogger, with file extensions such as:-
Further analysis of infrastructure and associated data determined that the group’s targets include organizations from various countries engaging in espionage activities under the code name UAC-0063, which have been monitored since 2021.
To minimize the vulnerability scope, it is advisable to limit user accounts from executing “mshta.exe,” Windows Script Host (“wscript.exe,” “cscript.exe”), and the Python interpreter, thereby reducing the potential attack surface.
An employee that tried to take advantage of a ransomware attack on his own company has pleaded guilty after 5 years of denying he had anything to do with it.
A 28-year old IT Security Analyst pleaded guilty and will consequently be convicted of blackmail and unauthorized access to a computer with intent to commit other offences.
It all started when the UK gene and cell therapy company Oxford BioMedica fell victim to a cybersecurity incident which involved unauthorized access to part of the company’s computer systems on 27 February, 2018. The intruder notified senior staff members at the company and demanded a ransom. As an IT Security Analyst at the company, Ashley Liles was tasked with investigating the incident.
He worked alongside colleagues and the police in an attempt to mitigate the incident. But at some point he must have decided to use the circumstances to enrich himself. According to the South East Regional Organised Crime Unit (SEROCU), Liles commenced a separate and secondary attack against the company.
As part of his plan he changed the Bitcoin payment address of the attacker to his own in emails to the board members. And he set up an email address very similar to that of the attacker. From that email address he began emailing his employer to pressurize the company to pay the ransom.
Unfortunately for Liles, a payment was never made and the unauthorized access to the private emails was noticed during the investigation. Due to some poor choices when it came to his own security, the police arrested Liles and searched his home.
The unauthorized access to the emails could be traced back to his home address, which gave the police sufficient grounds to seize a computer, laptop, phone, and a USB stick. Despite his attempts to wipe the data from his devices, the police was able to recover enough data to act as evidence to prove his crimes and establish his direct involvement.
Liles denied any involvement for five years. But on May 17, 2023 during a hearing at Reading Crown Court, he changed his plea to guilty. The case has now been adjourned for sentencing at the same court on July 11, 2023.
While this definitely qualifies as an insider threat, this one seems to have been opportunistic rather than premeditated. The term is often associated with disgruntled employees, but they can also be coerced, or jump on an opportunity that presents itself, as Liles did. The case emphasizes the need for effective access control policies, even when an emergency presents itself. You do not want to make the scope of the incident worse by giving up your access policies in light of an investigation.
Access to resources should always be limited to what is needed to get the job done. And incidental access should be revoked when the need is no longer there. We’re not saying that every employee should be treated as a suspect or potential insider threat. That will result in an unworkable situation. But you should have measures in place to limit the damage and find any culprit.
Prevent intrusions. Stop threats early before they can even infiltrate or infect your endpoints. Use endpoint security software that can prevent exploits and malware used to deliver ransomware.
Detect intrusions. Make it harder for intruders to operate inside your organization by segmenting networks and assigning access rights prudently. Use EDR or MDR to detect unusual activity before an attack occurs.
Stop malicious encryption. Deploy Endpoint Detection and Response software like Malwarebytes EDR that uses multiple different detection techniques to identify ransomware, and ransomware rollback to restore damaged system files.
Create offsite, offline backups. Keep backups offsite and offline, beyond the reach of attackers. Test them regularly to make sure you can restore essential business functions swiftly.
Don’t get attacked twice. Once you’ve isolated the outbreak and stopped the first attack, you must remove every trace of the attackers, their malware, their tools, and their methods of entry, to avoid being attacked again.
Malwarebytes EDR and MDR removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.
Samsung‘s award-winning mobile security platform Knox is ten years old! The company introduced Knox at Mobile World Congress in February 2013. Over the past decade, it has evolved into one of the most trusted security platforms for mobile devices, safeguarding billions of consumers and businesses on the way. In a recent Newsroom post celebrating the 10th anniversary of Knox, Samsung talked about its vision for the platform in the years ahead, including Knox Matrix.
Samsung Knox Matrix is the future of mobile security
At SDC 2022 in October, Samsung announced Knox Matrix as the security platform of the future. It is a private blockchain-based platform that builds on its existing solution. But instead of safeguarding a single device, it offers the same level of protection to all connected devices in an ecosystem.
According to Samsung, there are already more than 14 billion connected devices on the market. From smartphones, tablets, and TVs to refrigerators, washing machines, and robot vacuum cleaners, people use an array of connected devices in their households. This ecosystem will keep growing, and this poses a massive security risk. Existing security platforms can only protect a single device. If one of the devices in an ecosystem has weaker security, it may allow threat actors to compromise the security of other devices as well.
This is where Samsung’s Knox Matrix comes into play. It enables all devices in the ecosystem to protect one another, ensuring strong security for all. The bigger your device ecosystem is, the stronger its overall security. Moreover, should the security of one of them be compromised, the platform will automatically isolate it from the rest of the ecosystem. This allows you to use your connected devices in the same manner as before while also safeguarding them from potential exploitations.
Samsung says the whole platform relies on three critical technologies. Firstly, Trust Chain enables devices in an ecosystem to monitor each other for threats. Credential Sync secures user information as you move data between devices. Finally, Cross Platform SDK enables consistent Knox Matrix security standards for devices on various operating systems and platforms, including Android, Tizen, Windows, and others. The security platform manages all of this within a private blockchain.
Samsung’s next-gen security platform will arrive in 2024
Samsung originally planned to debut Knox Matrix this year. But the company has now delayed its launch to 2024. It is needing more time to ensure that the platform is interoperable across every device type and security system. “Knox Matrix’s development is going strong, but there are challenges on the way to the next frontier. These include reconciling the many different types of products, with varying operating systems and security standards, into a frictionless system able to work as one,” it said in the Newsroom post.
Samsung now plans to launch the first Knox Matrix-compatible models in 2024. It will start with mobile Galaxy products, such as smartphones and tablets. The Galaxy S24 series could be the first to get the new security system. If not, we might be looking at the 2024 foldables. The company will gradually add more device categories such as home appliance devices within the next two to three years. Partner devices will follow next, though the development for partner device compatibility is already underway.
Microsoft co-founder and one of the wealthiest men on the planet Bill Gates has talked about AI and how it can reshape customer behavior. Speaking at the Goldman Sachs and SV Angel event, Gates alluded to the capability of AI to challenge Big Tech companies like Google and Amazon.
Gates predicted that the top AI company in the future would be a company that could build a personal agent to perform tasks for people. He added that AI could “radically” change user behaviors. For example, users don’t need to visit a website or shop in an online store anymore.
“Whoever wins the personal agent, that’s the big thing because you will never go to a search site again, you will never go to a productivity site, you’ll never go to Amazon again,” Gates said.
Bill Gates says a personal digital agent could abolish Google and Amazon
Microsoft co-founder added that the future AI winner could be either a startup or a tech giant, and there is a 50-50 percent chance for it. He controlled the AI-driven personal agent and would be able to understand users’ needs and read them the stuff they normally don’t have time to read.
Bill Gates also said he was impressed by some AI startups like Inflection, which was co-founded by a former DeepMind executive Mustafa Suleyman. Gates added he’d be “disappointed if Microsoft didn’t come in there.”
According to Gates, the AI digital agent still needs a few years to be ready for mainstream use. But the companies will continue to integrate chatbots like ChatGPT into their products. Gates noted that AI could help develop more advanced drugs to cure diseases like Alzheimer’s.
Finally, Bill Gates said generative AI technologies that can produce texts would affect white-collar workers. Additionally, humanoid robots that are cheaper than actual human workers will greatly impact blue-collar workers.
“As we invent these robots, we just need to make sure they don’t get Alzheimer’s,” Gates said.
Until recently, the social media routine when an important news story breaks would be as follows:
Something happens, and it’s reported on by verified accounts on Twitter
This news filters out to non-verified accounts
“Verified” accounts are now paid for by anybody who wants to sign up to the $8 a month Twitter Blue service. There’s no real guarantee that a checkmarked video game company, celebrity, or news source is in fact who they claim to be. There have been many instances of this new policy injecting some mayhem into social media already. Fake Nintendo dispensing offensive images and the infamous “Insulin is free” Tweet causing a stock dive spring to mind.
People have taken the “anything goes in checkmark land” approach and are running with it.
What’s happening now is:
Fake stories are promoted by checkmarked accounts
Those stories filter out to non-checkmarked accounts
People in search of facts try to find non-checkmarked (but real) journalists and news agencies while ignoring the checkmarked accounts.
This is made more difficult by changes to how Twitter displays replies, as paid accounts “float” to the top of any conversation. As a result, a situation where a checkmarked account goes viral through a combination of real people, genuine “verified” accounts, and those looking to spread misinformation can potentially result in disaster.
Months ago you’d look for blue check accounts when trying to get a handle on whether these reports were true.
Today? You have to wade through blue check accounts *pushing* the disinformation to try and find the *unverified* journalists.
In this case, several checkmarked accounts made claims of explosions near the Pentagon and then the White House.
Bellingcat investigators quickly debunked the imagery for what it is: Poorly done, with errors galore.
Confident that this picture claiming to show an “explosion near the pentagon” is AI generated.
Check out the frontage of the building, and the way the fence melds into the crowd barriers. There’s also no other images, videos or people posting as first hand witnesses. pic.twitter.com/t1YKQabuNL
Despite how odd the images looked, with no people, mashed up railings, and walls that melt into one another, it made no difference. The visibility of the bogus tweets rocketed and soon there was the possibility of a needless terror-attack panic taking place.
Many US Government, law enforcement, and first responder accounts no longer have a checkmark as they declined to pay for Twitter Blue. Thankfully some have the new grey Government badge, and Arlington County Fire Department was able to confirm that there was no explosion.
@PFPAOfficial and the ACFD are aware of a social media report circulating online about an explosion near the Pentagon. There is NO explosion or incident taking place at or near the Pentagon reservation, and there is no immediate danger or hazards to the public. pic.twitter.com/uznY0s7deL
— Arlington Fire & EMS (@ArlingtonVaFD) May 22, 2023
What’s interesting about this one is that it highlights how you can post terrible, amateur imagery with no attempt to polish it and enough people will still believe it to make it go viral. In this case, it went viral to the extent that the Pentagon Force Protection Agency had to help debunk it. As Bleeping Computer notes, the PFPA isn’t even verified anymore.
There is no easy answer or collection of tips for avoiding this kind of thing on social media. At least, not on Twitter in its current setup. A once valuable source for breaking, potentially critical warnings about dangerous weather or major incidents simply cannot be trusted as it used to be.
The very best you can do is follow the Government or emergency response accounts which sport the grey badge. There are also gold checkmarks for “verified organisations”, but even there problems remain. A fake Disney Junior account was recently granted a gold check mark out of the blue and chaos ensued.
No, South Park is not coming to Disney Junior.
As for the aim of the accounts pushing misinformation, it’s hard to say. Many paid accounts are simply wanting to troll. Others could be part of dedicated dis/misinformation farms, run by individuals or collectives. It’s also common to see accounts go viral with content, and then switch out to something else entirely once enough reach has been gained. It might be about a different topic, or it could be something harmful.
Even outside the realm of paid accounts, misinformation and fakes can flourish. Just recently, Twitter experienced a return of fake NHS nurses, after having experienced a similar wave back in 2020.
lads, stop falling for these fake nurse profiles. they’re using stock photos and two seconds in their replies and you find stuff like this. you’re taking away from *actual* NHS workers and following these frauds, telling them what great jobs they’re doing etc – embarrassing pic.twitter.com/JicbQg64I7
Should any of the fake nurse accounts decide to pay $8 a month, they’ll have the same posting power as the profiles pushing fake explosions. Spam is becoming a big problem on publicly posted and private messages:
The reply spam network promoting this website consists of (at least) 9688 accounts created in March/April 2023. All have usernames ending in random digits and all have thus far tweeted exclusively via the Twitter Web App. pic.twitter.com/FKAvTcDGSr
— Conspirador Norteño (@conspirator0) May 13, 2023
AI is already capable of producing realistic looking images, yet the spammers and scammers are using any old picture without care for how convincing it looks. The combination of “breaking news” messaging and an official looking checkmark easily tips it over the edge, and those liable to fall for it simply don’t examine imagery in detail in the first place. Twitter is going to have to invest some serious time into clamping down on spam and bots which naturally help feed the disinformation waves. The big question is: Can the embattled social media giant do it?
Malwarebytes EDR and MDR removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.
Samsung is reportedly making more money off Galaxy tablets than smartphones. No, not the tablet business as a whole but per unit sold. According to Twitter tipster @Tech_Reve, the company’s operating profit margin for tablets was at around ten percent in the first quarter of this year. In comparison, the profit margin for smartphones and smartwatches was around 7-8 percent.
This is likely because of the stark difference in the market size of tablets and smartphones. When you go to buy a new Android tablet, there aren’t many options out there. In fact, Samsung is the only brand that regularly launches flagship Android tablets today. It is preparing to launch three new flagship models later this year (Galaxy Tab S9 series), following up on last year’s three Galaxy Tab S8 models.
On the other hand, the smartphone market is too crowded. There are dozens of options in every price range you look at. Even if you have strictly set your budget with no flexibility, you would find a handful of models to pick from. This stiff price competition makes companies keep their margins low so they can potentially sell more units. Smartwatches, meanwhile, don’t sell in huge volume, thus lowering their profitability.
Overall, Samsung made about KRW 300 billion (roughly $224 million) from tablets in Q1 2023. That’s almost half of the company’s total net operating profit of KRW 640 billion during that period. However, the Korean behemoth suffered massive losses from the semiconductor business in the first three months of 2023. We are talking about a loss of KRW 4.58 trillion (over $345 billion). So the profit from tablets is peanuts in the grand scheme of things. But the bottom line is that Samsung makes more money from each Galaxy tablet sold than a Galaxy smartphone or smartwatch.
The new Samsung flagship tablets may arrive in late July
As mentioned above, Samsung is gearing up to launch the Galaxy Tab S9 series later this year. The new flagship tablets will break cover during the company’s next Galaxy Unpacked event. Usually, the second Unpacked of the year takes place in August. But Samsung is said to be bringing it forward this year by 2-3 weeks. We are looking at a late July date. The new tablets will be accompanied by the Galaxy Z Fold 5 and Galaxy Z Flip 5 foldables, as well as the Galaxy Watch 6 series. We might get a new pair of TWS earbuds as well. Stay tuned for the official date of the next Galaxy Unpacked.
