While it was announced a few months ago that the NFL Sunday Ticket would have a new home, this fall. We didn’t know the pricing, nor when it would be available to sign up for. And well, we know today how much. it’ll cost.
For those on the YouTube TV base package, it’ll cost you $249 for the season. You can also get it bundled with NFL RedZone for $289 for the season during the presale.
The presale period is ongoing from now until June 6. Once the presale period is over, the NFL Sunday Ticket will jump in price by $100, to $349 for the season.
How does that compare with DIRECTV? Well, when DIRECTV offered NFL Sunday Ticket, it was $293.94 for the seasons, or $395.94 for the season with the Max package that offers extra content. So it is going up in price, but not by as much as many had though – as long as you have YouTube TV.
Remember that YouTube touted that you don’t need to subscribe to YouTube TV to get NFL Sunday Ticket. So how much is it without YouTube TV? Well, during the presale period, it’ll be $349 for the season. Afterwards, it’ll jump to $449 for the season.
Why is NFL Sunday Ticket so pricey?
Many may be wondering why the NFL Sunday Ticket package is so expensive? Well, to put it simply, it has to be. That’s because the NFL already has deals with CBS and FOX for airing local games, and since the NFL Sunday Ticket airs in-market and out-of-market games, it has to be more expensive to air those in-market games. So it has always been rather expensive.
YouTube is also likely looking to recoup some of the money that it paid the NFL for the package. It’s reported that Google is paying the NFL around $2 billion per year for the NFL Sunday Ticket.
The company has also debuted a new multiview feature, that lets users watch multiple games at the same time. It debuted during March Madness and should be part of the NFL Sunday Ticket package.
A new ALPHV (aka BlackCat Ransomware) has been found and tracked under the ID UNC4466. This ransomware affiliate uses Veritas Backup Exec Installations, which are vulnerable to CVE-2021-27876, CVE-2021-27877, and CVE-2021-2787878. However, these CVEs are used for the initial access only.
A commercial internet scanning tool found a massive 8500 installations of Veritas Backup Exec installations. The count of unpatched versions might still be a significant number.
The ALPHV intrusions were usually from stolen credentials in the past but originated from targeting known vulnerabilities, which states that criminals have emerged.
BLACKMATTER and DARKSIDE ransomware are the predecessors of ALPHV ransomware, released in November 2021 as ransomware-as-a-service. Some ransomware is designed to avoid critical infrastructure, but ALPHV is still in the wild targeting sensitive industries.
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
Apply updates per vendor instructions.
2023-04-28
Source : CISA
Timeline
March 2021 – Veritas published advisories for Veritas Backup Exec 16. x, 20. x and 21.x
September 23, 2022 – Metasploit releases module to exploit Veritas Backup Exec versions.
October 22, 2022 – Veritas Vulnerabilities are being exploited, which is observed by Mandiant.
Attack Phases of ALPHV
Initial Compromise and Establish Foothold
UNC4466 used the Metasploit module exploit/multi/veritas/beagent_sha_auth_rce to exploit internet-facing Windows servers with Veritas Backup Exec running. The Metasploit persistence module was used for maintaining permanent access to the systems as part of the remaining intrusion.
Internal Reconnaissance
Once the UNC4466 accessed the Veritas Backup Exec server, they used internet explorer to download Famatech’s Advanced IP scanner from the website. This tool could scan both individual and range of IP addresses, ports, hostnames, and system hardware information.
The UNC4466 also did an Active Directory Recon using the ADRecon to gather network, host, and account information of the victim’s environment.
With a privileged domain account, ADRecon will generate several reports about the AD environment, Trusts, sites, subnets, password policies, and computer and user account listings.
Another advantage is that these reports can be downloaded in the required formats like CSV, XML, JSON, and HTML.
Ingress Tool Transfer
Once they gained privileged access, they transferred additional tools like LAZAGNE, LIGOLO, WINSW, RCLONE, and the ALPHV ransomware encryptor.
C&C (Command and Control)
For achieving communication between these systems, the UNC4466 used SOCK5 tunneling with the victim network. Tools like LIGOLO and REVSOCKS are deployed for evasion, evading all the network defenses or other intrusion prevention systems.
They used BITS Transfer to download several resources to the staging directory “C:\ProgramData,” supported by SOCK5 tunneling, REVSOCKS, and LIGOLO.
Escalate Privileges
For dumping the credentials, the threat actor used tools like Mimikatz, LaZagne, and Nanodump to gather the credentials in clear text.
As per reports, In November 2022, UNC4466 used MIMIKATZ Security Support Provider Injection Module (MISC::MemSSP), which manipulates the Local Security Authority Server Service (LSASS) and collects credentials in clear-text and stores it in a file named “C:\Windows\System32\mimilsa.log”.
Source: MandiantSource: Mandiant
Complete Mission
ALPHV is a rust programming-based ransomware that UNC4466 deploys. The group also changed the default domain policy, which performs malicious actions like disabling security software, downloading the ALPHV encryptor, and executing.
Exposure
As stated, a commercial internet scanning tool found nearly 8500 IP addresses running Veritas Backup Exec service (Symantec/Veritas Backup Exec ndmp) on ports 10000, 9000, and 10001.
However, systems running vulnerable versions were not identified on this scan; threat actors could potentially exploit this.
Detection
For systems running with Veritas Backup Exec versions before 21.2, every system facing the internet should be highly prioritized.
Exploited systems can see the particular logs on the Backup Exec log file. For detection and alerting of these events, it is recommended to forward the file to the SIEM and create an alert for specific events.
[nnnn] YYYY-mm-ddTHH:MM:SS.sss [ndmp\ndmpcomm] – ndmpRun: Control connection accepted : connection established between end-points [Server IP]:10000 and [Remote IP]:[remote port]
For further information on this report, Mandiant has provided a complete analysis of the MITRE Framework and other technical details.
Samsung‘s 2023 flagship tablets may bring a handful of notable upgrades over the 2022 models. Among them could be an AMOLED display for the base model. According to Ross Young, the CEO of Display Supply Chain Consultants (DSCC), the 11-inch Galaxy Tab S9 will get an AMOLED panel this year. Last year’s base model arrived with a TFT LCD screen.
The Korean firm has equipped its flagship tablets with AMOLED displays since the first-gen Galaxy Tab S in 2014. Over time, it expanded the series to launch multiple models of varying sizes. But they differ in more areas and not just size. Most notably, the past two generations (Tab S7 and Tab S8) of Galaxy tablets included a base model with an LCD screen. The bigger models (Plus and Ultra) came with an AMOLED display.
It appears Samsung no longer plans to continue this disparity. The latest rumor in the industry is that the entire Galaxy Tab S9 lineup will feature AMOLED displays, including the smallest model. AMOLED displays consume less power and offer better contrast and colors than LCD panels. As said earlier, the base model will feature an 11-inch display. The Galaxy Tab S9+ should feature a 12.4-inch display, while the Galaxy Tab S9 Ultra should get a 14.6-inch AMOLED panel. All three models will support the S Pen and should boast a 120HZ refresh rate.
This display upgrade for the base Galaxy Tab S9 may be just one of many upgrades Samsung has planned for its next-gen flagship Android tablets. Most notably, we are expecting the lineup to boast an official IP rating for dust and water resistance. All three models are said to arrive with an IP67 rating. It would be a first for the Galaxy Tab S series. Samsung’s rugged Active series tablets do offer protection against dust, water, and drops, but those aren’t geared toward the masses.
Samsung may launch two Galaxy Tab S9 FE models as well
Samsung may launch a total of five Galaxy Tab S9 models this year. Along with the three aforementioned flagships, we may get a couple of FE (Fan Edition) models with modest specs. These tablets recently appeared in benchmark listings with mid-range processors. While there aren’t any rumors so far, the two Galaxy Tab S9 FE devices will probably keep an LCD screen. We should find out soon as Samsung continues the development of the new tablets. The Galaxy Tab S9 series is expected to arrive in the second half of this year.
The first store, called Apple BKC, will be located in Mumbai’s business district, Bandra Kurla Complex, and will open to the public on April 18th. Apple made an official announcement about this store earlier in April and now confirmed that it will inaugurate the store on April 18, 2023.
Just two days later, on April 20th, Apple will open its second store in India, named Apple Saket, located in Delhi’s Select City Walk Mall. The store will offer the latest Apple products, support services, and Today at Apple sessions. Apple says the Saket store logo draws inspiration from “Delhi’s many gates, each signifying a new chapter to the city’s storied past.”
The Apple BKC store in India will be a flagship Apple outlet spanning across 22,000 square feet with a flagship architecture. The company has reportedly even demanded 22 rival brands to stay away from the nearby location of the Apple BKC store. The store in Delhi, however, will be a smaller store and not a flagship retail outlet.
India has become a crucial market for Apple, with the country poised to contribute significantly to the company’s revenue in the near future. To strengthen its presence in India, Apple suppliers have even opened several assembly plants, with plans for more in the pipeline.
Reports suggest that Apple CEO Tim Cook may attend the opening of the company’s BKC retail store in India, indicating the tech giant’s commitment to the Indian market. However, at this moment, it is unknown if Cook will be present at the Delhi store opening.
You can now take a first look at the Xiaomi 13 Ultra design. MySmartPrix published the phone’s CAD-based renders, in collaboration with @OnLeaks. Considering the track record of that tipster, these are probably entirely accurate.
These CAD-based renders provide us with the very first look at the Xiaomi 13 Ultra
As you can see, the phone will feature an entirely different-looking camera island on the back, compared to its sibling. It will include a large circular camera island, which will be centered in the upper portion of the phone’s back.
Four cameras will be included in there, as expected. Chances are the phone will use the same camera sensors as the Xiaomi 13 Pro, with the addition of a periscope telephoto camera. The device is also tipped to add variable aperture to the main sensor.
The phone’s sides will be flat, while the backplate will curve into the frame on the sides. The display will likely be the same one as on the Xiaomi 13 Pro. It will be curved, but only slightly.
All the physical buttons will sit on the right-hand side. The phone’s bezels will be truly thin, while the display camera hole will be centered up top. This phone looks like a combo between the Xiaomi 13 and Xiaomi 13 Pro, with the addition of an entirely different camera island.
The phone will be both large and rather thick
The Xiaomi 13 Ultra will measure 163.18 x 74.64 x 9.57mm, claims the source. If you count in the camera bump, however, it will measure 15.61mm. So, it definitely won’t be small, or thin, but that’s understandable considering how much tech it will pack in.
A Type-C USB port sits on the bottom, as does a SIM card tray, and a speaker grille. An infrared port can be found at the top of the device, as expected.
It’s expected to launch on April 18, with a glorious spec sheet
The phone is expected to launch on April 18, though that hasn’t been officially confirmed yet. The Xiaomi 13 Ultra will launch globally as well, that is something Xiaomi confirmed already.
Xiaomi will utilize the Snapdragon 8 Gen 2 SoC here, while the device is said to offer 90W wired, and 50W wireless charging. A 4,900mAh battery will be included, along with a 6.73-inch QHD+ AMOLED display with a 120Hz refresh rate.
Four 50-megapixel cameras are expected, along with Leica lenses for all of them. Android 13 will come pre-installed on the device, with MIUI 14 on top of it.
Reuters reported that between 2019 and 2022, groups of Tesla employees secretly shared via internal messaging system occasionally highly intrusive recordings and photographs captured by consumers’ car cameras.
A notable statement from Tesla Inc. is that it guarantees the millions of owners of electric cars that their privacy “is and will always be enormously important to us.”
According to a statement on its website, the driving assistance cameras the company installs in cars are “designed from the ground up to protect your privacy.”
A few of the recordings showed Tesla customers in unpleasant circumstances—a video of a man approaching a vehicle while entirely naked was described by one ex-employee.
Many staff received copies of the photographs, which were made into memes showcasing customers’ dogs and hilarious road signs. In contrast, others showed car crashes and instances of road rage, including one video showing a Tesla hitting a child riding a bike.
Tesla claims its “camera recordings remain anonymous and are not linked to you or your vehicle” in its online “Customer Privacy Notice.”
However, seven ex-workers revealed that computer software they used at the time might expose the location of recordings, which might indicate a Tesla owner’s residence.
True Objectives of Tesla Cameras
Tesla’s cameras are designed to capture driving events while also enabling autopilot and auto park capabilities by spotting roadside obstacles like street signs and traffic signals.
Also, the company employs hundreds of people to label Tesla-taken images so that the cars’ computers can identify typical obstacles. Employees can access these records as a result.
According to the company’s website, the cameras, known as “Dashcams,” are fixed in cars and only capture video of their surroundings when the vehicle is turned on.
But, a former employee told Reuters that some recordings appeared to have been made while the car was parked and turned off.
“It was a breach of privacy, to be honest. And I always joked that I would never buy a Tesla after seeing how they treated some of these people,” said one former employee.
David Choffnes, executive director of the Cybersecurity and Privacy Institute at Northeastern University in Boston, called sharing of sensitive videos and images by Tesla employees “morally reprehensible. Any normal human being would be appalled by this.”
Tesla has been under controversy for its work environment, business procedures, and product, including claims that the “Full Self-Driving” and autopilot technologies included in select Tesla models have contributed to accidents and endanger drivers.
The Justice Department and other agencies are looking into Tesla’s use of the autopilot feature after the firm recalled hundreds of thousands of vehicles earlier this year to upgrade the software.
Tesla has acknowledged that the auto-driving feature still necessitates ongoing attention from the driver. The “Full Self-Driving” option could get around a California rule prohibiting automakers from marketing their autopilot technology as totally autonomous.
Its sentry mode system, an external camera meant to protect from theft or vandalism, has been the center of disputes claiming it could lead to non-consensual filming.
Sentry mode was the subject of a data protection agency’s investigation in the Netherlands in February. Still, it found that the car owner, not the company, was responsible for recording. It decided not to penalize Tesla after introducing features to warn people about the recording system.
Tesla’s multi-million-strong global fleet of vehicles generates a large amount of data. Before collecting data from customers’ automobiles, the firm requests their consent via the touch screens in their cars. According to Tesla’s website, “You’re Data Belongs to You.”
Because of issues with its cameras, some government compounds and residential areas in China have prohibited Teslas. In response, Musk said in a virtual talk at a Chinese forum in 2021: “If Tesla used cars to spy in China or anywhere, we will get shut down.”
Thus, as the people interviewed by Reuters no longer work at Tesla, it’s unclear if these privacy violations still occur.
A new report from 9To5Google states that Google is going to soon let you redeem your Play Points for Google t-shirts (for 2500 points) and other tangible items. The new set of rewards are part of the partner offers program that Google has linked Play Points with, and will now include a variety of different things you can spend points on.
Just like it did with discounts on Google Store purchases for Pixel phones and other hardware last year. Only this time you are just getting vouchers for Google Store purchases. You can actually redeem the points for a handful of different Google merchandise free of charge. Though some stuff will require quite a few points. The new partner offers will include rewards for the Google Merchandise Store, DoorDash, Instacart, and Povo.
Here’s an example of what you can pick up, if you have the points to pay for it. For 500 points, you can take $5 off an Instacart order of $35 or more. 1,000 points will bump that to $10 off. Or you can spend that 1,000 points on $10 off your next DoorDash order of $25 or more.
You can’t spend your Play Points to stock up on Google t-shirts
Play Points for the longest time were really only ever useful if you spent money in apps or games. But now you can actually use them for real-world items and discounts. Making them infinitely more useful.
But there are still limits. For example, you can’t rack up tens of thousands of Play Points and stock up Google t-shirts. In fact you can only redeem the t-shirt using you Play Points one time. The same goes for the other Google merchandise which includes a pair of Google sunglasses, a recycled water bottle, Chrome Dino socks, and a crewneck sweatshirt.
All of which cost 900, 1400, 2100, and 5000 points respectively. For the DoorDash and Instacart discounts, you can redeem them up to 5 times. However there will still be time limits. Meaning you’ll need to redeem the rewards by a certain date.
Bitcoin is a disruptive technology that has the potential to disrupt the way we invest, trade, and live our lives. Although it’s still early in Bitcoin’s development, and it’s impossible to tell where it’s going, Bitcoin investment has become a very hot topic over the last few years. There is a lot of hype and many speculative ventures being created all over the internet.
Bitcoin, in its simplest form, is a decentralized currency that operates on a peer-to-peer network where there are no third parties involved in the transaction, such as banks or credit card providers. Anyone can use Bitcoin to send money anywhere in the world, almost instantly and for less than a penny. This makes Bitcoin an extremely attractive payment method for merchants who want to avoid the high fees charged by credit cards. It also benefits consumers who want to spend their money without being charged all sorts of hidden charges. For investors, one of the biggest attractions is the fact that this currency is not regulated by any country or entity, such as a central bank. This means that its exchange rate cannot be manipulated by anyone.
Is Bitcoin an ideal investment?
Bitcoin investment is often compared to an investment in gold. This is because they are both risky assets that are not connected to any country and are not backed by any government. However, Bitcoin differs in a very important way; it has the potential to grow at an exponential rate with the right technological infrastructure in place. Large banks and governments have become aware of this, which means that there is a chance bitcoin will be regulated soon. With the price of Bitcoin going up and governments becoming worried, this could be a new trend in the future. Initial Coin Offerings (ICOs) have also become a big trend in Bitcoin investment since they allow investors to receive free coins or tokens in exchange for their investment. This can be seen as an easy way to multiply your money by investing small amounts of money into projects with lots of potential.
Another reason why people invest in Bitcoin is that it’s a deflationary currency that doesn’t experience inflation. There will only ever be 21 million Bitcoins minted, meaning that its supply is automatically reduced over time. This is very different from fiat currencies, like the Euro, which are printed by governments without end. This means that Bitcoin has the potential to be a good savings tool. The value of fiat currencies can be reduced over time due to inflation, while Bitcoin’s value is more likely to increase in the long term as a result of limited supply. All you need is to register with a cryptocurrency exchange and invest your assets to purchase your desired cryptocurrency. know more about Quantum AI official website by clicking here.
Is Bitcoin a risky investment?
Bitcoin investment can be seen as a very risky investment due to its volatile nature. You could lose all of your bitcoins if you are not able to take full advantage of the available technology, and there are many other factors that can dampen the value of bitcoin. One important factor is the fact that Bitcoin is not regulated by anyone, meaning that it can be stolen or hacked just like other digital currencies. Another factor is the fact that it’s impossible to tell where Bitcoin is going, which means that its value can massively vary in a very short period of time. One of the biggest concerns among Bitcoin investors is the instability of the exchange rate. Bitcoin’s exchange rate can be volatile, meaning that it can fluctuate depending on various factors. Many investors will find alternative ways to invest their money since they are not willing to take so much risk.
Invest in bitcoin: how to start
If you are interested in investing in bitcoin and want to know how to start, you need to consider all the factors involved. Bitcoin can be a great way to invest your money or a terrible experience if you are not taking the necessary precautions. Never invest more than you can afford to lose, and do proper research before making any decision. This is one of the most important things that should be taken into consideration when investing in bitcoin since it could turn out to be a very good investment or an awful mistake with horrible consequences. If you are planning to become a Bitcoin investor, you could take part in an Initial Coin Offering. An ICO is used to fund new cryptocurrency projects as well as crypto startups, and it represents a new type of fundraising. This is somewhat similar to the initial public offering (IPO) used by traditional companies but with the added element of bitcoin. There are many reasons why people invest in an ICO, and one of them is that they receive free coins or tokens in exchange for their investment. However, some companies have taken advantage of ICOs and used them to raise millions of dollars with their projects. This has led to various scams that are becoming more common each day. To avoid scams and bad investment decisions, you should do your own research before investing in any cryptocurrency project.
Know how to spot a scam
Bitcoin does not operate through the traditional banking system, so it is hard for most people to tell when a Bitcoin investment scam is taking place. The easiest way to spot a scam is to look at the trading volume of a cryptocurrency. Look for cryptocurrencies that have high trading volumes since this indicates a lot of people are investing in them. The trade volume should be concentrated on exchanges that are certified and registered in different jurisdictions, preferably those that have strong regulations.
You will find many mining companies that claim to be offering the best investment opportunities. However, these mining companies are often scams that make it easy to steal your bitcoins at any moment. Always do your own research when dealing with mining companies. This can be very helpful in making the right decisions about where to invest your money.
Conclusion
If you are considering investing in Bitcoin, the first step is looking into all the factors involved. The trading volume of a cryptocurrency, its use case, the technology, and its community are just some of the factors that need to be taken into consideration before making any decision. Always invest only as much as you can afford to lose, and do your own research before making any investment decision. This will help you make better investment decisions in the long run.
What’s new with the latest Android 13 QPR3 Beta 2.1 update? This program brings modem updates to certain Google Pixel devices that got the update. These devices include the Google Pixel 4a, 4a (5G), 5, 5a, 6 series and Pixel 7 series.
Not all Pixel users will get this feature, including those that might be using any of the devices mentioned above. The update in focus on this article is only available to those that installed the Beta testing update. So if you aren’t a Beta tester, you will not get this update until it is ready for a stable release.
There are a few things to be mindful of before installing this update or joining the Beta program. Before installing this new Android 13 Beta version, it is important to know the improvements it brings.
Here is everything new with the Android 13 QPR3 Beta 2.1 update
This new Beta update brings improvements to certain Google Pixel devices. If you are a Beta tester using any device from the Pixel 4a to the 7 Pro, you can benefit from this update. Older Pixel devices won’t get this update, since Google has stopped offering updates to those devices.
By improving the modem on these devices, Google is stepping up their internet connection speed. Beta testers with these devices will be able to enjoy faster internet connectivity. They might enjoy this alone for a while until Google rolls out this update to Pixel users that aren’t on the beta program.
If you want to get this improvement before the stable release, you will need to join the beta program. To do that, simply click on this link and follow the guidelines to join the program. After that, head over to your device settings and then to ‘System’ to install the beta system update.
It is important to note that beta testing updates aren’t always stable, as there might be a few issues. Once you have installed the beta update, there is no going back. Any attempt to uninstall the beta update will completely wipe out your device’s memory.
So before you rush to install the Android 13 QPR3 Beta 2.1 update, weigh your options. You can always wait for the features packed in the update to roll out globally before you access them. The date for the stable release of this beta update isn’t available, but it might come with future security updates.
Chinese shopping app Temu first caught my eye when I kept seeing ads for a pair of Lenovo true wireless earbuds they were selling for some ridiculously cheap price lower than $3. According to AFP News, Temu has been the most downloaded app in the U.S. since the beginning of the year. There is no denying that the Temu app is full of low-priced items. It reminds this writer of the Spencer Gift catalogs that are full of cheap and often useful items.
The Temu app includes electronics (like cheap charging cables and adapters), products for the kitchen and the home, and make-up. First-time users get to spin a virtual wheel that could result in the shopper getting as many as two free items with the purchase of one item. Shipping is always free.
And it seems that American consumers can’t get enough of the stuff that Temu is selling. A 65-year-old Californian named Silva told AFP, “I’ve seen so many things in their catalog… offered on Amazon and other online retailers for much more.” She has gone on to place 20 orders through the app buying jewelry, craft supplies, and gifts.
Delivery of the items ordered from Temu is pretty fast according to another customer, 38-year-old Stephanie Wolfe, who says, “It got here so quick, I couldn’t believe it. Once I realized it was legit, I just started ordering more.”
Helping to promote the app, Temu ran expensive ads during this year’s Super Bowl game. The commercials, viewed by 100 million people, told Americans that through the Temu app they can “shop like a billionaire.” The ads helped as the app has been installed over 33 million times in the U.S. since its launch. The company has a U.S. office located near Boston although most of its products are sourced and shipped from China.
One concern is that the app is collecting huge amounts of personal data from U.S. consumers. However, a research paper written by Georgia Institute of Technology professor Milton Mueller, using Chinese short-form video app TikTok as an example, stated that “data collected by TikTok can only be of espionage value if it comes from users who are intimately connected to national security functions and use the app in ways that expose sensitive information.”
Wolfe, one of the Temu shoppers we mentioned earlier in this article, said that she is not concerned although she uses a VPN (virtual private network) and pays for her purchases with PayPal. “Because I’m taking precautions, I’m not worried,” she said.
If you’d like to install Temu on your Android phone, click on this link which will take you to the Google Play Store. If you use an iPhone, tap on this link to be taken to the App Store so you can install the app on your iPhone.
