Center Identity Launches Patented Passwordless Authentication for Businesses

0
[ad_1]

Portland, Oregon, April 4th, 2024, CyberNewsWire

Center Identity, a pioneering cybersecurity company, is excited to unveil its patented secret location authentication, reshaping how businesses manage workforce digital identity. This proprietary technology enables users to authenticate their identity using a secret location selected on a map.

The benefits of this novel approach to digital identity management include:

● Simplicity: There is no need to remember a long list of complicated passwords or seed phrases.

● Security: Secret locations are less likely to be shared and far less susceptible to brute force hacking.

● Recovery: The use of Artificial Intelligence ensures that hints for selected secret locations meet robust cybersecurity standards, offering users an easy recovery mechanism.

Compared with other passwordless authentication solutions which require the user to possess one or more hardware devices, secret locations are a cost effective solution which do not require purchasing devices for your entire workforce. Center Identity is also launching the integration of secret location authentication with OpenID Connect, a widely adopted open standard, making integration a straightforward process.

“Traditional password management and account recovery methods fail to keep pace with the rising tide of security threats. Our secret location-based algorithm changes all that by authenticating based on geo-coordinates. Users only need to remember a place of personal significance, which is both intuitive and incredibly secure,” says Matt Vogel, Founder and CTO of Center Identity.

Moreover, Center Identity addresses the security concerns of businesses with stringent endpoint security measures, taking advantage of firewalls and VPNs to enhance protection even further. “Our technology allows these organizations to block satellite map traffic based on which website the user is on, effectively neutralizing the threat of phishing by ensuring that only whitelisted websites can access map-based authentication services,” says Vogel.

This new protocol transforms access management in a way that mitigates the risks and reduces the hassles associated with traditional password-based systems. “We know that businesses lose around 30% of their time resetting passwords. Our solution not only plugs this productivity drain, but also enhances security without compromising convenience,” adds Vogel.

Users and businesses can visit Center Identity’s passwordless solutions here.

About Center Identity

Center Identity is a pioneering cybersecurity company based in the United States with a patented approach to digital identity management. Leveraging cutting-edge solutions and blockchain technology, the expert team at Center Identity ensures unparalleled security for data and networks, empowering both individuals and businesses to navigate the digital landscape with confidence.

About Matt Vogel

Matt Vogel is a distinguished software engineer with a profound impact on digital security, holding key patents in digital identity, cybersecurity, and artificial intelligence. His contributions have significantly influenced technological standards and innovations. As a recognized author and advisor, Vogel’s expertise has been instrumental in shaping industry discourse and guiding the future of technology.

For more information users can visit.

Contact

Stoyan Bojinov
[email protected]


[ad_2]
Source link

Four Google Pixel 8a models pop up on Bluetooth SIG

0
[ad_1]

Following its appearance on the FCC, the Google Pixel 8a has just surfaced on Bluetooth SIG as well. In other words, it picked up yet another required certification prior to its launch.

The Google Pixel 8a just surfaced on Bluetooth SIG as well

The G8HHN, GKV4X, G6GPR, and G576D model numbers appeared. The only detail that the listings revealed is that the phone will support Bluetooth 5.4 connectivity. It’s good to see that the latest standard will be supported.

Pixel 8a Bluetooth SIG

The Google Pixel 8a will almost certainly launch during Google I/O 2024. Google has already announced that the Google I/O will take place on May 14 and May 15 this year. The keynote will be on schedule first thing on May 14, so that’s when the phone will likely launch.

This handset also surfaced on Geekbench not long ago. That listing confirmed that the Tensor G3 will fuel it, as expected. That’s the same processor that is included inside Google’s current flagship phones.

Geekbench revealed that it will offer 8GB of RAM

The Google Pixel 8a will include 8GB of RAM, as per Geekbench. That listing also mentioned that Android 14 will come pre-installed, but we knew that already. The Pixel 8a will get Android 15 later in the year.

When it comes to its display, a 6.1-inch panel is expected, and Google could offer a higher refresh rate this time around. A 120Hz display is expected, which is not surprising considering that a price bump is also expected.

A 5,000mAh battery is tipped to be included, which is considerably larger than we expected. The phone will likely support the same charging speed as last year’s model, plus rather slow wireless charging. You also won’t get a charger in the package.

What will be included are stereo speakers. The phone could end up using the same camera setup as the Pixel 7a, by the way.


[ad_2]
Source link

iRobot just announced a brand new “Essential” Robot Vacuum for $275

0
[ad_1]

iRobot has just announced the Roomba Combo Essential robot vacuum and mop, which will cost $275. As you can tell by the name, this will feature just the essentials. It does have a mopping pad available on the bottom, but the dock is only used for charging, meaning you’ll need to empty the dustbin on your own.

Compared to the Roomba 600 series, the Roomba Combo Essential provides 18x more suction power, and also improves the navigation, so it is able to clean in neat rows, with customizable suction and liquid settings. It can provide Clean Map reports and longer battery life too.

With robot vacuums getting more and more expensive, iRobot has stepped up with a really good and inexpensive option

These days, robot vacuums are getting really crazy expensive. But the good news is that iRobot is still offering something for those who just want a robot vacuum without having to take out a second mortgage. At $275, you’re actually getting a whole lot out of this robot vacuum.

Now unfortunately, but expected, the Roomba Combo Essential does not lift the mop up off of the floor, like the more expensive Roomba Combo j7 and j9 models. Instead, you will need to add the mopping pad to the dustbin/water tank. It’s still pretty easy to do, but this does mean you’ll need to take action on the robot vacuum if you have it mopping floors and vacuuming the carpets in your home.

The mopping functionality here is really good actually. It is able to mop up to 500 square-feet of space, and it also provides you with three options for mopping water levels. Obviously, you’ll want to use more water on dirtier floors, so it can really get those messes up off of the floors in your home.

As if that wasn’t enough, iRobot is also announcing the Roomba Vac Essential for North America. This robot vacuum is going to cost $249, and won’t include the mopping functionality.

The Roomba Combo Essential and Roomba Vac Essential will be available in the US starting on April 7 and in Canada on April 12. For those in EMEA, the Roomba Combo Essential is available now, with the APAC region getting it later in April.


[ad_2]
Source link

Researchers Observed Visual Studio Code Extensions Steals

0
[ad_1]

ReversingLabs has uncovered a series of Visual Studio Code (VS Code) extensions designed to transfer sensitive information from unsuspecting users.

This discovery highlights the growing trend of supply chain attacks increasingly targeting open-source repositories and platforms.

The threat landscape has seen a dramatic 1300% increase in supply chain attacks, with malicious actors exploiting public repositories to introduce compromised packages into the development cycle.

ReversingLabs has been at the forefront of monitoring these repositories, such as npm and PyPI, and has recently expanded its vigilance to include the VS Code Marketplace.

Malicious Extensions on VS Code Marketplace

The VS Code Marketplace, a hub for developers to share and install extensions, has historically been less affected by malicious activities.

Document
Run Free ThreatScan on Your Mailbox

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Try Trustifi Free Threat Scan with Sophisticated AI-Powered Email Protection .

However, ReversingLabs’ recent investigation has revealed multiple extensions linked to a single author, VSAnalysistest, that were engineered to steal data.

These extensions, including clipboard-helper-vscodecode-ai-assistant; codegpt-helper, and mycodegpt-assistant, were promptly removed from the marketplace following their detection.

Malicious Extension Code Snippet
Malicious Extension Code Snippet

Disguised Threats and Data Exfiltration

The extensions were deceptively simple, with some masquerading as tools to enhance clipboard functionality or improve coding efficiency.

However, they harbored malicious intent, such as exfiltrating clipboard data or phishing for GitHub credentials via Discord webhooks.

Threat hunting policy
Threat hunting policy

Limited Impact but a Warning Sign

Although the impact of these extensions was limited due to their short lifespan and low download numbers, their presence serves as a cautionary tale for developers and security professionals.

It underscores the need for vigilance against software supply chain attacks, even on less popular platforms like the VS Code Marketplace.

Developers are encouraged to conduct thorough security assessments of public libraries and extensions before incorporating them into their projects.

Tools like ReversingLabs Spectra Assure are available to assist developers in ensuring their code remains secure and free from malicious content.

Activation Events in Malicious Extension
Activation Events in Malicious Extension

The discovery of these malicious VS Code extensions is a stark reminder that the threat of supply chain attacks is ever-present.

As attackers devise new methods to infiltrate software ecosystems, the community must remain proactive in safeguarding against these insidious threats.

IOCs

unique_identifierversionVSAnalysistest.clipboard-helper-vs code
VSAnalysistest.clipboard-helper-vscode0.0.1 edf04024c6e0a8927f04a26edcde4374b365e16d
VSAnalysistest.code-ai-assistant0.0.2 14f4a6f3e872c3367e6ddec16a2b183176a091c8
VSAnalysistest.code-ai-assistant0.0.1 c26fd1f6c993c6340712de86ec2b11f2f5e0535a
VSAnalysistest.codegpt-helper0.0.1 3aac5b632e1ab6802f58237aeaaf5d0a6d491a44
VSAnalysistest.codegpt-helper0.0.2 c02663d6c042f191c4d60789b068916469afbf3c
VSAnalysistest.mycodegpt-assistant0.0.1 c8e2bbd712de025620720d0febab02cfbb97f4bf

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


[ad_2]
Source link

Galaxy Z Fold 6 battery capacity & charging speed revealed

0
[ad_1]

If rumors are to be believed, Samsung‘s next foldables are just over three months away. The Galaxy Z Fold 6 and Galaxy Z Flip 6 are rumored to go official in the first half of July. Unsurprisingly, leaks about the devices are getting more detailed by the day. Yesterday, a credible source revealed the new Fold’s weight, thickness, and display details. The same source has now confirmed its battery capacity and charging speed.

Galaxy Z Fold 5’s battery and charging specs hold no surprises

According to trusted X tipster Ice Universe, Samsung will equip the Galaxy Z Fold 6 with a 4,400mAh battery. That is the same amount of battery juice on the Fold 5, Fold 4, and Fold 3 (Fold 2 had a 4,500mAh battery while the original Fold had a 4,380 mAh battery). The company was expected to increase the battery capacity this year but that doesn’t seem to be happening. The tipster claims the battery size has been finalized.

Samsung likely had to choose between a bigger battery and a slimmer profile and picked the latter. The Galaxy Z Fold 6 will reportedly measure just 5.6mm when unfolded and 12.1mm when folded. It will weigh 239 grams. Last year’s model is 6.1mm (unfolded) and 13.4mm (folded) thick and weighs 253 grams. This is a sensible move from the Korean firm as fans want foldables to be slimmer and lighter.

While we don’t have complaints about the battery capacity, the reported charging speed of 25W is a tad too slow for a phone costing almost $2,000 (unless Samsung reduces the price significantly, which is unlikely). The company could have upgraded the Galaxy Z Fold 6 to at least 45W charging. The Galaxy Z Flip 6 will also remain at 25W charging. It is about time the Korean firm offers faster charging on its flagship devices.

The Ultra foldable could get 45W charging

The Galaxy Z Fold 6 and Galaxy Z Flip 6 may not be the only two foldables Samsung launches this year. There are also rumors about one or two FE-branded mid-range offerings and a higher-specced Galaxy Z Fold 6 Ultra. While it is unclear whether these devices will debut in July, they appear to be in the company’s pipeline. The Ultra foldable is certainly looking likely to arrive sometime this year.

Not much information is available about the Ultra model, so we can’t tell how Samsung plans to differentiate it from the standard Galaxy Z Fold 6. Faster charging is certainly something it might be considering. The Ultra model could also get better cameras and a stronger build, potentially a Titanium frame. You can expect more leaks and rumors about Samsung’s 2024 foldables in the coming months.


[ad_2]
Source link

Meta’s AI tool inaccurately creates images of mixed-race couples

0
[ad_1]

Meta’s AI image generator fails to generate accurate images for fairly easy prompts. In a new report, The Verge mentioned that the Meta’s AI image generator inaccurately generated images of an Asian man with a white woman, even when prompts were tweaked multiple times.

Meta’s AI generator repeatedly fails to create accurate images of an Asian man and a woman

As per the findings in the report, Meta’s AI was consistently unable to create accurate images which hinted at bias towards people of some races. The AI image generator tool within Instagram created inaccurate images for simple prompts like Asian man and Caucasian friend or Asian man and white wife. This happened multiple times, although the prompt explicitly mentioned creating a particular image.

Adding to it further, The Verge mentions that out of all the tries, the Meta AI image generator was able to successfully create just one image with the prompt “Asian woman with Caucasian husband.” However, the image wasn’t as accurate as the AI-generated image featured an older man and a young woman with a light skin tone, indicating bias.

Only one out of ten AI-generated images was accurate

Engadget also reported similarly and noticed there was just one image out of ten that reflected the prompt. The other nine AI-generated images featured nine white faces. Worth noting, Meta’s AI image generator often added culturally specific dresses even though the written prompt didn’t mention it.

It’s still not clear why Meta’s AI image is failing to replicate these kinds of prompts. However, this is not the first time Meta’s AI image generator has been in controversy. Last year, its AI sticker generation tool faced backlash after people created NSFW images and Nintendo characters with firearms.

However, this isn’t the first instance where an AI tool failed to create images based on race and gender. In February, Google paused the Gemini AI’s image generator tool after backlash over inaccurately created images for the same matter.

Meta hasn’t come forward with any explanation about inaccurately generated AI images for now. But, in the past, it has insisted that the AI tools are in the beta stage and could make mistakes.


[ad_2]
Source link

Hosting Providers VMware ESXi Servers Hit by SEXi Ransomware

0
[ad_1]

A new ransomware variant is targeting VMware ESXi servers, a popular virtualization platform used by hosting providers worldwide.

Dubbed “SEXi” by its creators, this ransomware has already made significant waves, with Powerhost’s CEO revealing a staggering ransom demand of approximately 140 million dollars.

The attack on VMware ESXi servers marks a concerning trend for businesses relying on virtualized environments.

While the exact intrusion method remains a mystery, experts tirelessly work to uncover the initial access vector.

This lack of clarity underscores the sophisticated nature of the SEXi ransomware and the challenges faced in protecting complex network infrastructures.

Researcher German Fernandez recently tweeted about a new ransomware variant called SEXi that has targeted hosting providers’ VMware ESXi servers.

The Ransom Note: “SEXi.txt”

Upon successful infiltration, SEXi ransomware leaves a calling card in the form of a ransom note named “SEXi.txt,” it audaciously renames the extensions of the affected files to “.SEXi” as well.

Document
Run Free ThreatScan on Your Mailbox

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Try Trustifi Free Threat Scan with Sophisticated AI-Powered Email Protection .

This bold cyber vandalism is a play on the ransomware’s name and a clear indication of the attackers’ confidence in their encryption methods.

The cybersecurity community is abuzz with discussions about SEXi, with many considering it a new or emerging ransomware variant.

The novelty of SEXi poses additional risks as security teams scramble to understand its behavior and develop countermeasures.

Using a unique file extension for encrypted files is a hallmark of this new threat, signaling a potentially sophisticated and customized attack tool.

The Cost of Cybersecurity Breaches

The CEO of Powerhost has publicly stated that the ransom demanded by the attackers is a monumental sum, highlighting the severe financial implications of such cybersecurity breaches.

This incident serves as a stark reminder of the potential costs associated with ransomware attacks, not only in terms of the ransom itself but also the operational disruptions and reputational damage that can ensue.

The SEXi ransomware attack on VMware ESXi servers is a sobering reminder of the evolving threats in the digital age.

As cybercriminals continue to refine their tactics, the importance of proactive and comprehensive cybersecurity measures has never been more apparent.

Businesses must remain vigilant, informed, and prepared to defend against these insidious attacks that can have far-reaching consequences.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


[ad_2]
Source link

X is giving complimentary Premium subscriptions to accounts

0
[ad_1]

Ever since Elon Musk took over Twitter (now X), the meaning of being verified has become rather elusive. Nowadays, anyone can become verified if they pay a monthly subscription fee for a Premium membership. However, it appears that some users don’t even have to pay. According to a report, X is giving out complimentary Premium Accounts.

If you’re curious, getting verified on X doesn’t quite have a high barrier to entry. There are three payment tiers that allow you to become verified. The lowest one will cost you $3/month if you sign up via the web. If you sign up using either the Apple App Store or Google Play Store, it will cost $4/month.

The most expensive plan costs $16/month ($22/month if you sign up through your phone),  and this gives you all the features along with reduced ads, access to the Grok AI model, Etc.

X is giving out complimentary Premium memberships

If you’re a person who’s been wanting to get a verification check mark without paying the monthly fee, then you’re definitely going to have to build up a following. The company announced that it would give complimentary checkmarks to users who have over 2,500 verified followers. So, this is not going out to just anyone. In order to get over 2,500 verified followers, you’re probably going to have to rack up tens of thousands of followers altogether.

If you score as many followers, you will get a complimentary subscription to the standard $8/month X Premium subscription. If you’re able to double the amount of verified followers you have, then you’ll get a free subscription to the Premium+ account. That’s the highest-paid account.

It’s a bit confusing why the company chose to do this. At this point, pretty much any person who wants to be verified can do so. It is as easy as paying $3/month. So, most people who aren’t verified remain unverified by choice. So, pushing the verification on them just seems like an annoying move by the company.


[ad_2]
Source link

Huawei P70 Art camera module shown, 1-inch camera sensor in tow

0
[ad_1]

The Huawei P70 Art is expected to become the company’s most powerful smartphone soon, and its camera module has just been shown, as the entire phone does look rather unique.

The Huawei P70 Art camera module has surfaced online

This smartphone is expected to arrive alongside the Huawei P70 and Huawei P70 Pro in the near future We still don’t know when exactly will Huawei announce the devices, but it could happen as soon as this month. One rumor suggested that it will occur on April 2, but that was false. Some rumors even indicated that the even has been postponed.

In any case, if you check out the images in the gallery below, you’ll get to see the phone itself (design created by Teme based on info he acquired, published in late February), and in a separate image, its camera module too. As you can see, this camera module has a very interesting shape. It includes three cameras, and the ‘XMAGE’ camera branding is also visible.

This design looks quite interesting

The back side of the Huawei P70 Art looks quite interesting too. This particular model combines white and gray colors to create a rather interesting pattern. Huawei will most likely use glass to cover up that pattern on the back.

You can also see that all the physical buttons sit on the right-hand side and that the back glass is curved on all four sides. Huawei’s logo is placed in the bottom-left corner, and it’s vertically oriented.

Now, based on some additional information provided, the Huawei P70 Art will include the Sony IMX989 1-inch sensor. That is something we’ve heard before, and chances are it’s accurate.

The Huawei P70 Art will likely utilize a 1-inch camera sensor, and add variable aperture to the table

This will make the Huawei P70 Art the very first smartphone from the company to utilize a 1-inch camera sensor. Chances are that Huawei will also add a variable aperture to the table, a 10-stop variable aperture. That, in combination with this sensor, and Huawei’s camera software, could prove to be a lethal combination.

The Huawei P70 Art is also expected to utilize either the Kirin 9000S SoC or a new, more powerful chip. An AMOLED display will also be included, and it will offer an adaptive refresh rate (1-120Hz).

Huawei is also expected to utilize LPDDR5X RAM and UFS 4.0 flash storage here, plus a bunch of other high-end specs. A periscope telephoto camera will sit on the back too, and an ultrawide unit as well.


[ad_2]
Source link

Following Meta’s outages, the App Store and other Apple services also gave out

0
[ad_1]

If you were feeling a bit “disconnected” these days, that’s not just you. Instagram, WhatsApp, Facebook, and Facebook Messenger were having outage issues (now resolved). Meta reported the incident as a “Major Disruption” on its Business API Status page.

25,000 of Whatsapp’s users said they were having an issue at noon yesterday and 68% of the complaints were about issues with the app, and 26% were not able to receive messages.

Also, yesterday was not an easy day for Apple services like the App Store (and more). Reuters reports that there were brief Apple outages globally, but the issues have been currently sorted out.

Problems arose in multiple regions for Apple services like the App Store, video and music streaming platforms Apple TV+ and Apple Music, and affected many users.

As many as 6,400 users flagged issues with the App Store. Both Apple TV+ and Apple Music had reports in the thousands at the peak of the outage in the United States, according to platforms that track outages by collating status reports from several sources, including users.

Apple’s fitness service Apple Fitness+, as well as Arcade, Audiobooks, Books and Podcasts (according to Apple’s system status pages) were not passed by and were also impacted by outages.

Apple services were down for users in countries including the United States, Britain, India, China and Australia.


[ad_2]
Source link