Match Systems, a leading authority in crypto crimes investigations and crypto AML solutions provider, has published a comprehensive analytical report examining the potential implications of Central Bank Digital Currency (CBDC) implementation.
In a landscape where the debate between cryptocurrency proponents and CBDC advocates intensifies, Kutin’s report offers a balanced perspective on the advantages and drawbacks of transitioning to a digital currency framework. The report delves into the nuanced dynamics surrounding CBDC adoption, shedding light on its multifaceted impacts on financial systems, governments, businesses, and individuals.
Kutin’s insights come at a critical juncture, as the rise in crypto fraud and the sophistication of asset theft methods prompt a reevaluation of traditional stances. While crypto activists often oppose CBDC implementation, Kutin’s analysis highlights the shifting attitudes within the industry towards embracing regulatory measures for enhanced safety and accountability.
“The dichotomy between free cryptocurrencies and centralized CBDCs presents society with two extremes,” remarks Andrei Kutin. “The optimal solution likely lies in a middle ground, where governments establish unified global standards for cryptocurrency circulation, safeguarding individuals while preserving economic autonomy.”
Match Systems is a company specializing in AML services, blockchain investigations, and implementation of compliance procedures for cryptocurrency projects around the world.
Samsung has released a new update for the Galaxy Z Fold 4 and Galaxy Z Flip 4 in the US. Sadly, it doesn’t bring One UI 6.1. The 2022 foldables are only getting the April security patch, which contains over 40 vulnerability fixes. The One UI 6.1 update may follow later this month or in early May.
Galaxy Z Fold 4 and Flip 4 get the April security update in the US
Over the past few days, Samsung has pushed the April SMR (Security Maintenance Release) to several Galaxy devices worldwide. The Galaxy Z Fold 4 and Galaxy Z Flip 4 are the latest entrants to the party. The new security update is currently available for the carrier-locked and unlocked variants of the former and only unlocked variants of the latter in the US.
For the Fold model, the new firmware build numbers are F936USQS4EXD1 (locked) and F936U1UES4EXD1 (unlocked). The locked variant of the Flip model is getting the update with the build number F721USQS4EXD1. Its unlocked counterpart should pick up the update soon. Global versions of the foldables should also receive the April update in the coming days.
Since the devices are awaiting the One UI 6.1 update, Samsung could bundle the April SMR with it in some regions. We will keep a close eye on the ongoing developments and let you know accordingly. For users in the US, the latest update for the Galaxy Z Fold 4 and Galaxy Z Flip 4 is all about this month’s security fixes, which include one critical Android OS fix and dozens of high-severity fixes.
The new SMR for 2023 foldables is available globally
The Galaxy Z Fold 5 and Galaxy Z Flip 5 (Review) were the first phones to get the One UI 6.1 update from Samsung, alongside the Galaxy S23 series. Days after the big feature update, the company pushed the April SMR to the new foldables (the April update for the Galaxy S23 series may have been delayed due to bugs in One UI 6.1). The rollout began in Europe and gradually expanded to other regions, including the US.
In the US, Samsung first updated the carrier-locked variants of the foldable duo but quickly covered the unlocked units. If you are using recent Galaxy foldables, the April security patch should reach you soon. While you should get a notification once the update hits your phone, you can also manually check for updates from the Settings app. Go to the Software update menu and tap on Download and install.
Approximately 70 million individuals worldwide are affected by speech disorders, displaying symptoms such as stuttering, repetitions, or prolongations of sounds, words, or syllables. Historically, these challenges have been tackled through rhythm therapy, a technique designed to enhance linguistic fluency by ingraining a subconscious rhythm in the brain. Certainly, Samsung identified the potential to incorporate technology into this therapeutic method, resulting in the development of Impulse.
How Impulse works
Impulse uses Natural Language Processing (NLP) algorithms to evaluate words and transform them into rhythmic vibrations. These vibrations are transmitted to the user’s wrist through Galaxy smartwatches, creating a tactile link with spoken patterns. Consequently, through the utilization of haptic feedback, Impulse aids users in recognizing their speech patterns and overcoming obstacles in articulation. This groundbreaking technique enables individuals to take charge of their speech and communication once again.
Image credit: Impulse
Features and functionalities
The Impulse app provides a complete set of exercises designed to improve different aspects of speech control. With over 250 rhythm and tone exercises available in four modes: Boost your voice, Boost your rhythm, Boost your tone, and Boost your speech, users can enhance their speech abilities effectively. Each mode includes three levels of difficulty for gradual growth. Samsung commits to continuous updates and improvements to enhance the app’s features.
Image credit: Impulse
Availability and future prospects
Currently, the Impulse app can be downloaded from the Google Play Store in Spain, supporting both Android phones and Galaxy Watch 6-series devices (Review). Although Samsung has not announced a worldwide release, the company continues to prioritize accessibility and equality through technological innovations. With the potential to positively impact individuals worldwide dealing with speech disorders, Impulse is gaining recognition and adoption.
Facebook Messenger will finally get support for HD photos
As many of you who use Facebook Messenger know, the app tends to really downgrade the quality of pictures you send to someone. I personally experienced that so many times that I stopped sending pictures and videos via Messenger altogether, despite the fact it’s my primary way of talking to people.
Having said that, once you get this update, you’ll be able to select an image you want to send, and then turn on the ‘HD’ toggle. You can see what I mean below. We’re not sure if this will work if you send images straight from the gallery, but let’s hope it will.
Shared Albums are also coming for group chats
In addition to HD photos, Meta now also allows you to create shared albums on Facebook Messenger. You can create albums to share with your family, friends, coworkers, or whoever you want in there.
You can then, of course, add photos and videos to the album you create. The app will allow you to create those albums from group chats, all you’ll have to do is select multiple photos and then create an album for them. Yes, you can assign names to those albums, of course.
Do note that everyone in the group chat can then view, add, delete, and download the pictures and videos in that shared album. This feature will roll out last out of the ones we’re talking about here, it seems. It’ll roll out in the coming weeks.
You’ll be able to add people by simply scanning their QR code
Another added feature is the ability to add people to Messenger with a QR code. Every user will have a QR code, and all you need to add someone is to scan that QR code.
The last addition is… increase the size limit for files. Messenger will allow you to send files up to 100 MB. Do note that all major formats are supported, Word, Excel, PDF, and even ZIP.
Do note that Meta showed off screenshots from the iOS version of the Messenger app. We’re assuming the changes will first roll out to iOS, or perhaps Meta used those screenshots just for the sake of it. Regardless the same changes are expected on Android, and soon.
In order for AI models to learn, they have to be fed a ton of data. At first, AI models were mostly trained on text-based data. This is mostly important for chatbots. However, as time went on, they gained the ability to process image data. Several chatbots give you the ability to upload your own images to either be reconstructed or ascertained.
Gemini 1.5 Pro can understand audio files
When Google first introduced Gemini to the public, the company said that it would eventually be able to ascertain multiple forms of media such as images, audio, and video. Well, it’s been able to ascertain images for a while, and the company has just checked off another one. Gemini 1.5 Pro is the company’s newest AI model, and it’s currently in testing. What’s neat about this model is that it’s actually even more powerful than Gemini Ultra. So, the company is outdoing itself.
This latest update gives it the ability to analyze and process audio files. So, if you want a summary of a long keynote, conversation, earnings call, etc., you will be able to upload the audio directly to Gemini. While there are tools that can summarize conversations (there are even tools available on smartphones), this implementation is different. Current tools will transcribe the speech into text and then summarize the conversation based on the text. However, Gemini 1.5 will be able to cut out the middleman and listen to the audio directly. This could possibly increase the accuracy.
If you want to use this functionality, there is some disappointing news. In order to use this function, you will need to use Google’s development platform called Vertex AI. Also, you’ll be able to use it if you are using AI Studio. So, if you’re waiting for a public release, you will just have to be patient.
A new Google Photos update might be right around the corner that will hopefully get you back some storage space. This feature will let you convert your backed-up “Original” quality photos to the space-saving “Storage saver” format directly within the app.
Right now, if you need to save some storage, unless you had the “Storage Saver” backup option on to begin with, the only way to compress your photos after the fact is through Google Photos on the web. But a sneaky tip from the folks at PiunikaWeb, along with the tech-savvy AssembleDebug, hints that this is about to change.
Current settings within Google Photos that let you initially backup photos in “Storage Saver” mode
After some tinkering with hidden flags in the most recent version of the Google Photos Android app, they managed to manually activate a hidden “Recover storage” feature. This feature promises to be a game-changer, especially if you’re bumping up against Google’s storage limits. Sure, your photos might lose a tiny bit of sharpness, but for many of us, freeing up gigabytes to keep capturing memories is an easy trade-off.
While this feature isn’t live yet, when it rolls out, you’ll likely be able to access it via Photos Settings > Backup > Manage storage > Convert photos to Storage saver. This will bring up a notice to warn you about the photo quality change, at which point you’ll have to check the “I understand…” box and proceed to “Compress existing photos and videos.”
New settings within Google Photos that will let you compress your already backed up photos in order to save space
Credit: PiunikaWeb
If you’re a Google Photos user, especially with tons of memories stored in the cloud, this will be a handy feature to have available on your phone, although you can do this right now on the web. You never know, you might be able to save enough space that you may no longer need the Google One storage that you currently have and can downgrade and save yourself some money in the process.
Google is an extremely well-known company in this day and age. It is still best known for its search engine, but there are a ton of other software-based services the company offers. You’ve all heard of Gmail, the most popular email domain in the world. Google Maps is also a service almost everyone knows, and the same goes for Google Chrome, the most popular web browser out there. There are many other such services that may not be as well-known, but they’re still extremely popular. Some people use them and they’re not even aware that they do. Google Drive comes to mind, that’s for sure. It’s a service every Google user uses, whether you realize it or not. That’s what we’re here to talk about, Google Drive. If you’d like to know more about it, read on.
What is Google Drive?
So, what exactly is Google Drive? The simplest explanation is that it’s a cloud-based file storage service. It’s basically a hard drive on the Internet that you can use to store your files. The thing is, Google Drive also stores your emails, photos, contacts, and more… well, presuming you have a Google account and you use it, of course. It’s essentially your cloud-based hard drive for all your Google-related stuff. It also allows for automatic file synchronization, file sharing, and so much more. We’ll get more into that later on when we get around to talk about the best features it has to offer. Google Drive has been around for almost exactly 12 years at this point, as it launched back on April 24, 2012.
Is the Google Drive app free to use?
If you’re wondering whether Google Drive is free to use or not, well, the answer is both yes and no. How come? Well, as long as you stay within the 15 GB limit, yes, it’s free to use. If you go over 15 GB of used storage, you’ll need to pay up in order to use Google Drive. For most people, this will be more than enough. However, considering that you do store various files on Google Drive, people can easily go over that limit. Google Drive is pulling multimedia from Google Photos, so if you use that, and you shoot plenty of images and videos, going over the limit is very simple. If you do step over, you can choose between 100 GB, 200 GB, and 2 TB tiers.
What platforms is Google Drive available on?
Google Drive is Google’s very own service, so it’s available on both Android and ChromeOS. That’s not difficult to guess. That includes Android TV, of course. However, it’s also available on iOS and iPadOS, and you can access it from any web browser, really. So regardless of what operating system you use on your desktop PC, you can access Google Drive. It’s accessible from drive.google.com. So not only do the two biggest mobile platforms support it, but you can get access to it from any desktop OS, including Windows, macOS, any Linux distribution, and more. Basically anything out there.
Do note that it may not be available on newer Huawei devices, though. Huawei does not have support for Google services due to the US ban, and that can affect the functionality of Google apps. In fact, it does, almost all of them. You’ll need to run an emulator or something of the sort to make it work at all. So, there are exceptions in the Android world. Huawei devices still run Android but with Huawei’s services, not Google services.
What are Google Drive’s competitors/alternatives?
Does Google Drive have any competitors out there? Well yes, many of them. There are tons of cloud-based storage services available to users these days. Apple, for example, has its own version of Google Drive, iCloud. The availability of iCloud is tied to Apple’s own ecosystem, though. Dropbox is an immensely popular competitor to Google Drive, and the same can be said for Box. Many of you have also heard of OneDrive, which is Microsoft’s competitor to Google Drive. Another cloud storage solution worth noting is Mega. Each of these solutions has its advantages and disadvantages. All of them are available on Android, except for iCloud.
Can I use Google Drive if I’m not connected to the Internet?
Generally, no, but considering that Google Drive does offer you an option of saving files offline, you technically can. You just need to make sure to save the files you’ll need for offline use, and you’ll be able to access them even when you’re without an Internet connection. There are two ways to go about it. You can flat-out go to Google Drive, and download a file to your device. Alternatively, there’s a ‘Make available offline’ option. Both ‘Download’ and ‘Make available offline’ options are available with a (file) right-click on a desktop PC, or long-press on a mobile platform. What’s the difference between the two options? Well, the ‘Download’ option will download a file directly to your smartphone’s internal storage, and you’ll be able to access it via a file manager. The ‘Make available offline’ option will cache that file for use from Google Drive, but you won’t physically see it in your internal storage.
Does Google Drive require any type of configuration before you start using it?
Google Drive does not really require any configuration before you start using it. However, there are a couple of things that you should consider configuring. Three, to be exact. First and foremost, decide how much space you need. If you already know that you’ll need over 15 GB, you can sort that out from the settings. Moving on, Google Drive also allows you to set a theme for the app. So navigate to settings, and you can choose between Dark, Light, or System default (the latter will follow your system settings). And last, but not least, you should choose whether you want to allow file transfers only over Wi-Fi, or via a data connection as well. The Wi-Fi option is set as default.
What are the best features of Google Drive?
Google Drive offers plenty of features, but some are more important than others. As is the case with all the other apps, you’ll be using Google Drive differently compared to me, your friend, your neighbor, and so on. The point is, people have different use cases. So, we’ll just list some of the most important features, and some of our favorite ones. Some of these, or all, may be quite obvious to you if you’re a seasoned user, so get ready for that. In any case, let’s get to it!
Google Docs, Sheets & Slides
Google Drive comes with its own suite of tools that mimic Microsoft Office tools. So, Google Docs, Sheets, and Slides are the equivalents of Microsoft Office, Excel, and PowerPoint. You can easily open a Google Docs document by tapping the ‘New’ button in the bottom-right corner (on mobile), and get your text started. The same goes for Sheets and Slides. The integration is here, and you get easy access to all three. The best of all, all three will save your work instantly, and continuously. As you write, everything will be saved to the cloud, so you don’t have to worry about losing content.
Built-in malware protection
Google does offer security with Google Drive too. Google Drive comes with built-in protection against malware, spam, and ransomware. That’s something that Google is very proud of. Drive does “provide encrypted and secure access to your files”. Google Drive is scanning files just to be on the save side. Also, considering that Drive is cloud-native, that minimizes the threat to the devices that you’re using the service from.
Easy search & advanced search
Google Drive has an easily noticeable search bar at the top. That goes for both desktop and mobile. You can easily type in what you’re interested in, and Drive will pull up files that it finds. On the desktop, you can also fire up the so-called Advanced Search. You’ll see the search options icon at the end of the search bar. There, you’ll be able to set various other parameters, such as the location of the file, date modified, and so on. We don’t know why is that not available on a mobile app, but there you have it.
Sharing options / collaboration
Google Drive allows you to share your files/folders, if you want. There are plenty of options when it comes to that, actually. You can either just share a link to a specific file/folder, and allow anyone with the link to open that file/folder. Alternatively, you can actually add users to collaborate on a specific file/folder. You can grant them editing rights and so on. You have enough options here to set things up just the way you like them.
Microsoft Office compatibility
Earlier, I’ve mentioned that Google Docs, Sheets, and Slides are the equivalent to Microsoft Office, Excel, and PowerPoint. Well, yes, but there’s also compatibility to consider here. You can open Microsoft Office files in Google Drive/Docs, the same goes for the opposite. Google is using the same file formats as Microsoft. You could stumble upon some compatibility issues here and there, as in not everything will be aligned the same, but for the most part, it works really well. Do note that Docs, Sheets, and Slides are also available as separate apps.
Possibility for offline usage
As we talked about earlier, Google Drive does offer the possibility of offline usage. You can either straight-up download a file from Google Drive, or just make it available offline. That way you can access it, and edit it, and once you gain an Internet connection, all the changes you’ve made will be saved to the cloud as well. This works seamlessly, and I’ve used the ‘Make available offline’ feature more times than I can count.
Sundar Pichai is one of the most notable figures in AI. He’s the CEO of Google, and Google is one of the driving AI companies in the industry. He has spoken numerous times about the technology, in this includes speaking at the 2024 Business, Government & Society Forum. Well, when asked whether or not he was surprised about AI’s rapid growth, Sundar Pichai gave a yes-and-no answer.
Many of us are still suffering from whiplash from how quickly the tech world pivoted toward AI. Before November 2022, AI was a pretty niche subject. However, in the year 2024, that term is plastered over just about every new service coming out.
Companies are pouring billions of dollars into AI by implementing tools, training models, buying GPUs, investing in AI startups, etc. For example, Apple recently purchased an AI company called Darwin AI. So, you know that AI technology is big if even Appleis making rapid shifts.
Sundar Pichai gave a yes-and-no answer on whether he surprised about the development of AI
At the forum, Pichai was asked whether he was surprised about the rapid growth of AI technology over the last 18 months. In response to that question, he said, “Yes and no,” he continued to say, “We have definitely been thinking about this for a long time.” This statement tracks, as the company has been building large TPU (Tensor Processing Units) at scale since 2016.
So, more than half a decade before generative AI became a public term, the company was very forward-thinking with AI. This should come as no surprise. In 2016, we were introduced to the incredibly powerful Google Assistant. Since then, Google has made strides and implemented its powerful AI technology into all of these products. We’ve all witnessed the powerful AI present in Google Lens, Google Photos, Etc.
So, Pichai didn’t seem all too surprised. However, he did express that he was a bit surprised at just how rapidly it blossomed. “…maybe the pace at which society would adopt it has positively surprised as well as the scale at which the people are engaging with the technology,”.
Also, we can’t forget that, soon after ChatGPT was unveiled, Google declared a code red. So, it’s obvious that there was definitely some surprise there. In any case, AI technology is still advancing at a rapid pace, and we have no idea if the next major breakthrough is just around the corner.
Attackers are now leveraging encrypted phishing emails that utilize Scalable Vector Graphics (SVG) files to execute malicious JavaScript code.
The phishing campaign begins with an email masquerading as a notification for a new voice message.
Recipients are prompted to click on a link to access this message, a classic attraction that plays on human curiosity and the urgency of communication.
Upon clicking the link, the target is taken to a page loaded with heavily obfuscated HTML data.
This is where the attackers’ creativity comes into play. They embed JavaScript code within an SVG image that is executed once the page is rendered on the victim’s system.
DocumentStop Advanced Phishing Attack With AI
Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Stopping 99% of phishing attacks missed by
other email security solutions. .
This new tactic, uncovered by ARC Labs, a division of Binary Defense, marks a concerning evolution in phishing campaigns, aiming to harvest credentials by tricking targets with seemingly innocuous voice message notifications.
SVG: A Vector for Attack
SVG files, commonly used for their scalability and quality in web graphics, are now being weaponized to execute JavaScript.
This method is particularly insidious as it bypasses traditional security measures that may not scrutinize image files for malicious code.
Illustration of JavaScript execution from an SVG file.
Encrypted Data and the Second Stage
Within the SVG, ARC Labs discovered encrypted data that, when decrypted, revealed a second stage in the phishing attack.
This stage prompts the victim to enter their credentials to access the voice message.
The decryption of this data is facilitated by CryptoJS, a library that allows for the encryption and decryption of data within JavaScript.
The complexity of this attack lies in the encryption of the second-stage page data across multiple HTML classes, which is dynamically decrypted using CryptoJS.
This approach not only conceals the malicious intent but also complicates the analysis and detection of the phishing attempt.
ARC Labs’ analysis of the JavaScript code during runtime was crucial in uncovering the mechanics of this attack.
By setting breakpoints at every invocation of CryptoJS, researchers recovered the decryption key, a critical step in decrypting the content and understanding the full scope of the phishing attempt.
The process of decrypting the encrypted data using CryptoJS.offer
This case study is a stark reminder of the evolving landscape of cyber threats and the innovative methods attackers employ to compromise personal information.
Users are urged to exercise caution when emails prompt action, especially those that lead to external pages requesting credential input.
For organizations, the importance of comprehensive security measures, including the analysis and understanding of emerging threats, cannot be overstated.
As attackers refine their techniques, staying informed and vigilant is the best defense against these encrypted phishing attacks.
The weaponization of SVG files in phishing campaigns represents a significant shift in the tactics used by cybercriminals.
Attracting malicious JavaScript code from encrypted data in SVG images, attackers find new ways to bypass security measures and exploit human vulnerabilities.
The analysis conducted by ARC Labs illuminates this sophisticated attack method, offering valuable insights into its mechanics and emphasizing the need for heightened awareness and security practices.
Secure your emails in a heartbeat! To find your ideal email security vendor, Take a Free 30-Second Assessment.
Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, the newest AI security and governance frameworks. With more and more companies integrating new AI tools into their business processes, daily operations, and customer-facing products and services, safe and compliant use of AI has become a pivotal challenge.
Enterprises are adopting AI-powered tools and solutions at a staggering pace, thanks to the increasing power and democratization of AI platforms, and the extensive benefits that artificial intelligence can bring to business operations. However, AI also brings many dangers, including the potential for leaking private data, lack of transparency, and increasingly complex cyber threats. Organizations also need to prepare themselves for more legislation regulating the use and application of AI in business settings.
The best way to protect against these dangers and stay ahead of AI regulations is through adherence to best practices for cyber GRC governance, which are in a constant state of flux. By providing comprehensive risk management, automated 24/7 monitoring, and cybersecurity governance tailored to AI solutions, Cypago enables companies to seamlessly secure their AI initiatives.
“The world of AI is changing quickly, with new threats arising all the time and new regulations arriving frequently. We view it as our responsibility to help organizations maximize the benefits of AI while effectively mitigating the risks and ensuring compliance with best practices and good governance,” said Arik Solomon, CEO of Cypago. “These latest features ensure that Cypago supports the newest AI and cyber governance frameworks, enabling GRC and cybersecurity teams to automate GRC with the most up-to-date requirements.”
Cypago delivers ongoing visibility into all the organization’s tools, applications, and models, while automating many processes needed for effective risk assessment and threat detection. Its heightened security measures for AI-based systems help keep data and software secure, reducing the risk of cyber threats, data breaches and regulatory violations.
What’s more, Cypago is no stranger to the implementation of safe AI, having adopted natural language models and generative AI command prompts as part of its product in 2023.
The platform streamlines security, risk management and compliance gap detection and remediation processes, enabling teams to respond more effectively to emerging threats and vulnerabilities, while ensuring compliance with international, national, and industry-specific regulations. This empowers companies to navigate the complex compliance landscape, which now encompasses the use of AI, with confidence.
About Cypago
Cypago’s revolutionary SaaS-based Cyber GRC Automation (CGA) platform redefines the three lines model by eliminating friction and bridging the gap between management, security, and operations. It transforms GRC initiatives into automated processes, enabling in-depth visibility, streamlining enforcement, and significantly reducing overall costs. The platform leverages innovative technologies, including advanced analysis and correlation engines, GenAI, and NLP models, designed to support any security framework in any IT environment, both in the cloud and on-premises. Cypago was founded in 2020 by tech leaders and cybersecurity veterans with decades of combined experience in the development, operations, and commercialization of cybersecurity solutions. For more information, visit https://cypago.com/.
