Samsung bans employees from using AI tools like ChatGPT

andreasc
-
0
Samsung bans employees from using AI tools like ChatGPT
[ad_1]

Samsung has reportedly banned its employees from using generative AI tools such as ChatGPT and Google Bard on company-owned devices and internal networks. The move comes after some employees inadvertently leaked confidential information through ChatGPT a few weeks back.

Samsung bans the use of ChatGPT and Bard on official devices

Like many other companies, Samsung also planned to use generative AI tools for business growth. It hoped AI to help boost its faltering chip business. However, things didn’t pan out as planned. Shortly after the company gave its employees access to ChatGPT to speed up various processes in mid-March, reporters emerged that the AI chatbot leaked confidential semiconductor information.

This happened after some Samsung employees fed internal data to the AI tool created by Microsoft-backed OpenAI. Where they erred is that they didn’t realize that the likes of ChatGPT and Bard permanently store any information fed to them. These tools use the information for learning purposes. But in the process, they could also end up sharing the information with other users. And since they store the data on external servers, it’s difficult for Samsung to retrieve and delete it.

It’s unclear what information Samsung employees inadvertently leaked through ChatGPT. However, the leaks happened in three separate instances within three weeks. The company has now sent a memo to employees ordering them to stop using the AI tool on official devices and internal networks. Employees are also advised not to feed any company-related information to generative AI tools on their personal devices. They are also barred from sharing personal data that could reveal the company’s intellectual property.

According to a Bloomberg report, Samsung has warned its employees that breaking these policies could cost them their jobs. “We ask that you diligently adhere to our security guidelines and failure to do so may result in a breach or compromise of company information resulting in disciplinary action up to and including termination of employment,” part of the memo reads. The memo was sent to employees at one of Samsung’s biggest divisions on Monday, the report states.

Samsung is developing its own AI tools for internal use

Samsung may have banned the use of ChatGPT and Bard on its official devices, but it still sees AI going a long way in boosting its business. The company is reportedly creating its own generative AI tools for internal use. It plans to use those tools “for translation and summarizing documents as well as for software development”. At the same time, Samsung is also working on ways to block external AI services from obtaining sensitive company information. ChatGPT recently added an “incognito” mode where it doesn’t save conversations for learning purposes.

“Interest in generative AI platforms such as ChatGPT has been growing internally and externally. While this interest focuses on the usefulness and efficiency of these platforms, there are also growing concerns about security risks presented by generative AI,” Samsung told staff. “HQ is reviewing security measures to create a secure environment for safely using generative AI to enhance employees’ productivity and efficiency. However, until these measures are prepared, we are temporarily restricting the use of generative AI,” the memo added.


[ad_2]
Source link

Critical Vulnerabilities Spotted In Zyxel Firewall

andreasc
-
0
Critical Vulnerabilities Spotted In Zyxel Firewall
[ad_1]

Heads up, Zyxel users! The vendors have patched a few critical vulnerabilities in Zyxel Firewall that could allow remote command execution attacks. Users must rush to update their devices with the latest software releases to receive the patches.

Multiple Vulnerabilities Found In Zyxel Firewall

Zyxel – the Chinese technology and networking giant – has patched multiple Firewall vulnerabilities with the latest releases.

Specifically, the vendors have addressed three security vulnerabilities affecting their Firewall devices.

The first of these is a critical-severity remote command execution vulnerability, CVE-2023-28771 (CVSS 9.8). According to Zyxel’s advisory, the flaw existed due to improper message handling, allowing an unauthenticated remote adversary to execute OS commands on the target firewall devices. Exploiting the flaw required the attacker to send maliciously crafted data packets to the target device.

The devices affected by this vulnerability include ATP ZLD V4.60 to V5.35, USG FLEX ZLD V4.60 to V5.35, VPN ZLD V4.60 to V5.35, ZyWALL/USG ZLD V4.60 to V4.73. Zyxel has credited TRAPA Security for detecting and reporting this flaw.

The next vulnerability, CVE-2023-27990, is a high-severity (CVSS 8.8) cross-site scripting (XSS) vulnerability in Zyxel firewalls. Exploiting this flaw could let an authenticated adversary with admin privileges store malicious scripts on the target device. The scripts would execute if a user visits the Logs page.

Then, the third vulnerability, CVE-2023-27991, could also allow OS command injection attacks. The flaw impacted the CLI command of firewalls, allowing an authenticated attacker to execute remote commands.

According to Zyxel’s advisory, these two vulnerabilities affected the ATP ZLD V4.32 to V5.35, USG FLEX ZLD V4.50 to V5.35, USG FLEX 50(W)/USG20(W)-VPN ZLD V4.16 to V5.35, and VPN ZLD V4.30 to V5.35. Zyxel attributed Alessandro Sgreccia from Tecnical Service SRL for reporting both vulnerabilities.

Patches Rolled Out

Zyxel patched all three vulnerabilities with the latest software releases for vulnerable devices. Specifically, the patched releases include ATP ZLD V5.36, USG FLEX ZLD V5.36, VPN ZLD V5.36, ZyWALL/USG ZLD V4.73 Patch 1 (bug fix for CVE-2023-28771), and USG FLEX 50(W) / USG20(W)-VPN ZLD V5.36 (bug fix for CVE-2023-27990, CVE-2023-27991).

While the updates might reach the affected automatically, users must check for possible updates for their devices manually to ensure receiving the patches in time.

Let us know your thoughts in the comments.


[ad_2]
Source link

Android 13 with May security patch is rolling out to Pixels

andreasc
-
0
Android 13 with May security patch is rolling out to Pixels
[ad_1]

Google has started rolling out Android 13 with a May security patch to the Pixels. After the previous couple of security updates got delayed, it’s nice to see that the one for May is rolling out on time.

Android 13 with May security patch is now hitting Google’s Pixel phones

This update has started rolling out to the Pixel 4a, 4a 5G, 5, 5a, 6, 6 Pro, 6a, 7, and 7 Pro. Do note that the rollout is staged, so it may take some time to reach all devices, as per usual.

As far as security issues are concerned, 18 of them are resolved in the Android 13 May patch dated 2023-05-01, and 29 for 2023-05-05. It is also worth noting that vulnerabilities range from moderate to high. Two additional security fixes are listed in Google’s dedicated bulletin, though.

This update is mostly focused on security fixes, of course, but some additional changes are also listed. The changelog mentions a “fix for issue occasionally causing lock screen UI elements to overlap with home screen launcher interface”. Another change is noted, but only for the Pixel 7 Pro: “Improvements for touch screen response in certain conditions”.

We’re getting the next Pixel Feature Drop in a month, so stay tuned for that

So, there’s not much to talk about here. That was to be expected, though. The June update is the quarterly update that we’re waiting for. That will be Google’s Pixel Feature Drop update, of course.

As mentioned earlier, this update is rolling out in stages. The rollout has started, but if you’re unwilling to wait for the update to reach your device, you can always install it manually. You’ll find both factory images and OTA update files by clicking here. Make sure to download the files for your device, though, of course.


[ad_2]
Source link

Samsung is hoping 3nm chips to improve its foundry share

andreasc
-
0
Samsung is hoping 3nm chips to improve its foundry share
[ad_1]

Samsung has reportedly improved the yield rates of its 3nm semiconductor chips and is now trying to win back customers that it lost to foundry rival TSMC in recent times. According to the Korean media, the company is sending 3nm prototypes to fabless chipmakers in an attempt to sway them on its side.

It is weaponizing the use of Gate-All-Around (GAA) transistor architecture in its pitch. The GAA tech is said to be more efficient in terms of performance, power, and chip size than the FinFET (Fin field-effect transistor) architecture used by TSMC.

Samsung is desperately trying to close the gap with TSMC in the foundry market

Samsung has long played second fiddle to TSMC in the semiconductor foundry industry. The latter has stretched the gap up top in recent months as the former struggled with its yield rates.

Several fabless companies switched from Samsung to TSMC for manufacturing their next-gen solutions due to this issue. The Taiwanese firm started the mass production of 3nm chips after Samsung but it has already achieved better yield.

However, the latest word from the industry is that Samsung has improved its 3nm yield rates to about 60-70 percent in recent months. It is now desperately trying to steal a few customers from TSMC and close the gap to it in the foundry segment. The journey is quite long (the two firms had a market share of 15.8 percent and 58.8 percent respectively in Q4 2022), but the Korean firm is making its moves.

As said earlier, Samsung is producing its 3nm chips using the GAA architecture. TASM, on the other hand, is sticking to the FinFET tech for one more generation.

It plans to switch to GAA with 2nm chips in 2025. The Korean firm would be using this theoretical upper hand in architecture in its pitch to fabless companies as it sends them early prototypes. By the time TSMC moves to the GAA architecture, Samsung would have about two years of expertise in it.

It remains to be seen if the Korean giant manages to win back a few customers from TSMC. Most of its current 3nm clients are high-performance computing (HPC) companies that need high-performance and low-power semiconductors, the new report states. It also has some mobile customers, but the Taiwanese firm has already captured all the big names.

TSMC isn’t sitting idle either

It’s not like Samsung is making all the moves and TSMC is sitting idle. The Taiwanese firm reportedly held a foundry technology symposium in the US recently. It targeted major customers in the US and unveiled a roadmap for mass production of the next-gen advanced process.

The company has already secured large orders from Apple, AMD, MediaTek, Nvidia, and Qualcomm. It plans to start mass-producing 3nm chips for these customers early next year. TSMC will manufacture 3nm chips for HPC in 2025 and automobiles in 2026.


[ad_2]
Source link

A week in security (April 24 -30)

andreasc
-
0
A week in security (April 24 -30)
[ad_1]

The most interesting security related news of the week from April 24 till April 30

Last week on Malwarebytes Labs:

Malwarebytes removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW


[ad_2]
Source link

Another image] Official image shows us main Pixel Fold display and its odd bezels

andreasc
-
0
Another image] Official image shows us main Pixel Fold display and its odd bezels
[ad_1]

UPDATE: In addition to the main display of the Pixel Fold, and the shot of the device in a folded state from a side, Evan Blass just shared another image. This one shows us the device in a folded state, but front the front, as you can see in the image below.

Google Pixel Fold official render leak 7

ORIGINAL ARTICLE: A well-known tipster, Evan Blass aka @evleaks, shared a couple of official Pixel Fold images over the weekend. He shared an official render showing the back side of the phone when unfolded, and the device from a profile when folded. What he did not show us is the phone’s main display. Well, you guessed it, the main Pixel Fold display just got shown in an official image.

The puzzle is complete, as the official image just showed us the main Pixel Fold display too

That image comes from the same source, actually. In addition to it, he showed us the Pixel Fold in another color when folded. Let’s start from the top, though. If you check out the first image in the gallery below the article, you’ll see the phone’s main display.

As you can see, we’re looking at rather odd bezel distribution here. The top and bottom bezels are thicker than the side bezels. This does look odd, and it may annoy some people, but at least it hides the cameras and all sensors inside the bezels. We don’t have to deal with a display camera hole.

Some people may consider those bezels to be a bit thick, and that’s understandable, especially the top and bottom ones. This panel also shows that Google is aiming at a horizontal aspect ratio when the phone is unfolded.

The phone’s main panel will have a 6:5 aspect ratio

The main display on the device will feature a 6:5 aspect ratio, as Evan Blass revealed. That will make its cover display rather short and wide. The cover display will measure 5.79 inches, while the phone itself will measure 139.7 x 79.5 x 12.1mm when folded. When folded, it will be wider than most regular smartphones. Evan Blass actually revealed the phone’s detailed specs, click here if you’d like to know more.

Having said that, the second image in the gallery below shows us a different color variant of a phone when folded. The image Blass first shared showed us the black model (Obsidian), this one leans towards the silver color. This color variant will be called ‘Porcelain’.

The Pixel Fold will be made out of metal and glass, and it’s coming later this month. The device will be announced during the Google I/O keynote on May 10. It is tipped to go on pre-order that day, and become available for purchase on June 27. It’s also said to cost $1,799.


[ad_2]
Source link

How to buy Bitcoin using Blockforia

andreasc
-
0
How to buy Bitcoin using Blockforia
[ad_1]

There is no debate about it, Bitcoin has definitely become the most popular cryptocurrency in the world. Over the last few years, more and more people have started showing a lot of interest in learning about Bitcoin; and some have been actively buying it every day.

However, this doesn’t mean that buying Bitcoin is an easy process, especially if you are a beginner. But thankfully, there are platforms that can completely simplify the process of buying Bitcoin and creating a Bitcoin wallet for you. And one of the best platforms out there is Blockforia, which specializes in just that – helping you buy your favorite cryptocurrencies with a few clicks.

Don’t worry, it doesn’t matter if you are an experienced trader or just a complete beginner, you will be able to quickly learn how to buy Bitcoin using this incredible platform. So, now, let’s dive into the world of Blockforia and help you buy your favorite cryptocurrencies in a safe and easy way.

Getting Started with Blockforia

Let’s start with the basics. Before you can actually buy Bitcoin using Blockforia, you obviously need to create an account on the platform. But don’t stress about it, the registration process is really straightforward and it will only take a few minutes. So, here’s how to get started with Blockforia:

1) Go to the Blockforia website and click on the “Get Started” button in the upper right-hand corner of the homepage. Then, click on the “Sign Up” button and choose your country.

2) Fill in your details on the registration form. This will include your name, email address, and password. If you use an electronic ID solution, some information may be fetched automatically.

3) Verify your email address by clicking on the verification link sent to the email address you provided during registration.

4) And finally, to complete the verification process, provide some additional information, like your phone number and proof of identity. This step is essential to ensure that your account is secure and meets regulatory requirements.

Once you have completed the registration process, you can log in to your Blockforia account and start buying Bitcoin. However, before you can buy Bitcoin, you need to fund your account first.

Funding Your Account

Now that you know how to create an account, you need to know how to fund it before actually buying Bitcoin. This is also not that hard, because Blockforia even accepts multiple payment methods, which will make it easier for you to deposit funds into your account. So, here’s how you can fund your Blockforia account:

1) Start by logging in to your Blockforia account and click on the “Deposit” button.

2) Now, select the payment method you want to use to fund your account. Blockforia accepts multiple payment methods, so you will definitely find the method that suits you best.

3) After choosing the payment method, just follow the provided instructions to complete the deposit process. Remember to make sure you provide accurate details, including the correct amount you wish to deposit.

4) Confirm that your deposit has been successfully processed, and the funds should be available in your Blockforia account within minutes.

Keep in mind that some payment methods may take longer to process than others. For example, bank transfers can take several days to clear, but credit/debit card deposits are usually instantly processed.

And, once your account is funded, you can start buying Bitcoin on Blockforia.

Buying Bitcoin

Now that you have funded your Blockforia account, let’s go over how to actually buy Bitcoin using Blockforia:

1) First log in to your Blockforia account and click on the “Buy/Sell” button.

2) You can proceed to buy Bitcoin, the only supported currency at time of writing.

3) Choose the payment method you would like to use, such as your favorite credit or debit card.

4) Place the amount of Bitcoin you want to buy and Blockforia will automatically calculate the cost based on the current market price.

5) Now, it’s important to carefully review the details of your transaction. Check the amount you are paying and the amount of Bitcoin you will receive, to make sure that everything is in order.

6) All that remains is to confirm your transaction and wait for it to be processed. Depending on the payment method you choose, your Bitcoin will be available in your account within minutes or several days.

Congratulations! You have now successfully bought Bitcoin on Blockforia. The Bitcoin you bought will be stored in your Blockforia wallet. But there is one more important thing, however – securing your Bitcoin.

Securing Your Bitcoin

When this whole process is completed and you have bought your Bitcoin, it’s important to take steps to secure it and keep it safe. So, here are some tips on how to better secure your Bitcoin:

Password Protection

Always use a secure password and enable two-factor authentication (2FA) on your Blockforia account. This adds an extra layer of security to your account and helps protect your Bitcoin from unauthorized access.

Use a Secure Wallet

Store your Bitcoin in a secure wallet. Blockforia will provide you with a wallet to store your Bitcoin, but it’s important to remember that your wallet is only as secure as your Blockforia account. So, consider using an external one, like a hardware wallet, to have an additional layer of security, just in case.

Backup Your Wallet.

Make sure to backup your wallet and keep that backup in a safe place. This will help you recover your Bitcoin if you lose access to your wallet or if it gets hacked.

Keep Your Private Keys Secure

Your private keys are essential to access your Bitcoin, so it’s really important to keep them safe. Consider storing them in a secure location and never share them with anyone.

Final Thoughts

As you have seen by now, buying Bitcoin is actually not a complicated process, but only if you use Blockforia. Having this platform in your corner will make buying Bitcoin not only simple and straightforward but a rewarding experience as well.

By following these instructions and combining them with Blockforia’s user-friendly platform, you can create an account, fund it and buy Bitcoin in a matter of hours, or even minutes.

So, in conclusion, Blockforia is much more than a shortcut to buying Bitcoin, it’s also a reliable and secure way to invest in cryptocurrencies. Thanks to this incredible platform, you can enjoy the benefits of owning one of the most popular and valuable digital assets in the world!


[ad_2]
Source link

Google blocked 1.4 Million Malicious Apps From Google Play Store

andreasc
-
0
Google blocked 1.4 Million Malicious Apps From Google Play Store
[ad_1]

Since Google bought Android 2005, its sole responsibility has been to provide the best user experience and ensure security for its users.

Google Play Protect was installed on every Android device to ensure every application was secure. 

Google stated that they had prevented around 1.43 million policy-violating applications from publishing on the Google Play Store as they have improved their security features and policies.

Google has also stopped several malicious developers and banned more than 173K accounts, preventing $2 billion in fraudulent or abusive transactions.

Google has also partnered with SDK providers to limit sensitive data access and sharing, which can enhance the security posture for a million Google Play apps.

Google has brought in many verification methods for Android app developers like Phone, email, and other verification methods, which will prevent malicious developers from deploying their apps in Google Play Store.

Google stated, “With strengthened Android platform protections and policies, and developer outreach and education, we prevented about 500K submitted apps from unnecessarily accessing sensitive permissions over the past three years.”

Blocked actions

Developer Support and Collaboration to Help Keep Apps Safe

Adaption to the Android operating system has expanded the Android developer community, leading to educating newbie Android developers about the tools, knowledge, and support for building a secure and trustworthy application that focuses on the user’s security and privacy.

The App Security Improvements Program was launched by Google in 2022, in which 500K security weaknesses that affected nearly 300K applications were fixed. These fixes have secured about 250B installed devices (300K applications’ install base).

Google Play SDK Index

Google introduced the Google Play SDK index to provide a better understanding to the developers for evaluating the SDK’s reliability for their business requirements. 

Along with these improvements, Google has improved ad policies, data transparency, security controls, security tools, and other security and user experience-based things.

In 2022, Google Play Store gave a display badge for any application that has gone through Mobile App Security Assessment (MASA) review, making it the first commercial app store to do this.

In addition, McAfee and Trend Micro have joined with Google to reduce app-based malware and Android user protection.

Google has published a complete analysis report on their security improvements and reports. Security and safety announcements in 2023 are yet to be announced.

EHA

Struggling to Apply The Security Patch in Your System? – 
Try All-in-One Patch Manager Plus


[ad_2]
Source link

How to protect your small business from social engineering

andreasc
-
0
How to protect your small business from social engineering
[ad_1]

Small businesses are frequent targets of social engineering. Here’s what it is and how to protect against it.

When Alvin Staffin received an email from his boss, he didn’t question it. In the email, Gary Bragg, then-president of Pennsylvania law firm O’Neill, Bragg & Staffin, asked Staffin to wire $580,000 to a Bank of China account. Staffin, who was VP and in charge of banking, sent the money through as asked. An hour later, he realized the request was fraudulent—he hadn’t been contacted by Bragg at all.

A hacker had gained access to Bragg’s email account and used it, along with information they’d learned about an ongoing loan transaction, to pose as Staffin’s boss. Nothing in the exchange made Staffin suspect that something was off until he called Bragg, who was out of town at the time, to discuss the transfer.

Both Staffin and his employer were victims of business email compromise (BEC), also known as CEO fraud, a type of social engineering attack. Social engineering attacks are cyberattacks where a criminal tricks a victim into doing something against their interests, such as revealing sensitive information of making a bank transfer.

BEC is one of the most damaging forms of social engineering attacks faced by small businesses. In the 2022 Internet Crime Report, the FBI ranked it as the second most damaging fraud, in terms of financial losses, after investment fraud.

The common forms of social engineering used by criminals are pretexting, phishing, baiting, and tailgating. Pretexting involves creating a false identity and situation to trick victims into providing information or access (BEC is a form of pretexting). Phishing attacks try to trick victims into giving away sensitive information, such as login credentials, using emails and websites designed to look like they belong to a person or business the victim trusts, such as their bank. Baiting is when malware-infected devices, such as USB sticks, are left in public places, in the hope that victims will take them and use them. Lastly, tailgating is when a fraudster follows an authorized person into a restricted area without proper authorization.

Protecting your business from social engineering

Securing a small business from social engineering attacks is an ongoing effort that requires constant vigilance. Because social engineering relies on a criminal’s powers of persuasion, your staff’s vigilance is your first line of defence. Security software forms a vital second line, protecting your business from some social engineers’ tools, such as phishing sites, and from social engineering attacks designed to deliver malware.

Your first priority should be to empower employees to be confident in identifying and effectively responding to social engineering tactics.

  • Run regular training to help employees understand how to properly recognize and respond to social engineering. Consider testing your staff, too, and follow up with further education for anyone who fails the test.
  • Use at least two people for financial transactions. Social engineering attacks try to isolate and hurry staff so they act without thinking. Create checks in your processes to prevent that.
  • Create an intentional culture of security so that security practices come naturally to your staff. Encourage people to report suspicious activity sooner rather than later, avoid punishing staff who fall for social engineering so that others are not afraid to be accountable, and lead by example.
  • Use endpoint security to protect against the effects of baiting attacks, to block phishing sites, and to detect malware delivered by social engineering.
  • Monitor threat intelligence to understand current and emerging threats that could affect your business.

Malwarebytes removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW


[ad_2]
Source link

Latest Sony Xperia 1 flagship design surfaces ahead of launch

andreasc
-
0
Latest Sony Xperia 1 flagship design surfaces ahead of launch
[ad_1]

The design of the coming Sony Xperia 1 V has hit the internet ahead of its launch. This disclosure came as a Reddit user and tipster shared an image of this device’s billboard promotion. From this billboard, users can see the rear design of this device as well as a few other elements.

This flagship device will hit the shelves in about a week, and it will pay attention to a certain niche. Over the years, Sony has worked on building a device for the photography-oriented user market. To do this, they pack a ton of photography and video technology and software features.

The new entry will pack some improvements to the camera technology. Even the rear camera layout as seen on the billboard shows some improvements. Let’s now delve a bit into the design of this coming flagship-level device.

Sony Xperia 1 V series design and what you need to know

Sony calls this device the Xperia 1 V and it will succeed the Xperia 1 IV that launched last year. In terms of design, netizens can expect a ton of similarities between this coming device and its predecessor. Over the past few years, Sony has put little effort into changing the design of its devices.

The Sony Xperia 1 IV came with reasonably sized bezels at its top (housing the selfie camera) and bottom (chin area). This design is a bit outdated, as most Android manufacturers have moved over to narrowing out the bezels and using dot-in camera cutouts. Some other manufacturers have also made moves over to the under-display selfie camera technology, leaving Sony in the dust.

But that doesn’t seem to bother Sony, as with each launch they offer users out-of-date bezels. Well, for their coming flagship device, it isn’t clear whether they will stick to these bezels or opt for a more recent design. The attention here might still be on photography and not design or slim bezels.

From the billboard, it is easy to spot that the coming Sony Xperia 1 series flagship device shares some design similarities with its predecessor. It will come with a side-mounted fingerprint sensor and flat sides with a bit of texture to them. For the camera cutout, there are a few design changes there that netizens can take to mind.

One such change is with the positioning of the flashlight, this will stand the Xperia 1 V apart from its predecessor. Instead of sitting above the camera cutout, the flashlight will now be integrated into the camera cutout. It might also feature a larger camera sensor that supports the LN2 low-noise mode.

Sony will launch this device on May 11 and has been able to keep leaks to the bare minimum. More details on this device will become available during the launch event. Will this flagship device also come with a headphone jack like other Sony Xperia 1 series devices? This will be made known in just a matter of days!


[ad_2]
Source link
1...1,2831,2841,285...1,480Page 1,284 of 1,480