Home - h4ckers-news

Everything you need to know

Android

andreasc

-

April 10, 2024

[ad_1]

Google is an extremely well-known company in this day and age. It is still best known for its search engine, but there are a ton of other software-based services the company offers. You’ve all heard of Gmail, the most popular email domain in the world. Google Maps is also a service almost everyone knows, and the same goes for Google Chrome, the most popular web browser out there. There are many other such services that may not be as well-known, but they’re still extremely popular. Some people use them and they’re not even aware that they do. Google Drive comes to mind, that’s for sure. It’s a service every Google user uses, whether you realize it or not. That’s what we’re here to talk about, Google Drive. If you’d like to know more about it, read on.

What is Google Drive?

So, what exactly is Google Drive? The simplest explanation is that it’s a cloud-based file storage service. It’s basically a hard drive on the Internet that you can use to store your files. The thing is, Google Drive also stores your emails, photos, contacts, and more… well, presuming you have a Google account and you use it, of course. It’s essentially your cloud-based hard drive for all your Google-related stuff. It also allows for automatic file synchronization, file sharing, and so much more. We’ll get more into that later on when we get around to talk about the best features it has to offer. Google Drive has been around for almost exactly 12 years at this point, as it launched back on April 24, 2012.

Is the Google Drive app free to use?

If you’re wondering whether Google Drive is free to use or not, well, the answer is both yes and no. How come? Well, as long as you stay within the 15 GB limit, yes, it’s free to use. If you go over 15 GB of used storage, you’ll need to pay up in order to use Google Drive. For most people, this will be more than enough. However, considering that you do store various files on Google Drive, people can easily go over that limit. Google Drive is pulling multimedia from Google Photos, so if you use that, and you shoot plenty of images and videos, going over the limit is very simple. If you do step over, you can choose between 100 GB, 200 GB, and 2 TB tiers.

What platforms is Google Drive available on?

Google Drive is Google’s very own service, so it’s available on both Android and ChromeOS. That’s not difficult to guess. That includes Android TV, of course. However, it’s also available on iOS and iPadOS, and you can access it from any web browser, really. So regardless of what operating system you use on your desktop PC, you can access Google Drive. It’s accessible from drive.google.com. So not only do the two biggest mobile platforms support it, but you can get access to it from any desktop OS, including Windows, macOS, any Linux distribution, and more. Basically anything out there.

Do note that it may not be available on newer Huawei devices, though. Huawei does not have support for Google services due to the US ban, and that can affect the functionality of Google apps. In fact, it does, almost all of them. You’ll need to run an emulator or something of the sort to make it work at all. So, there are exceptions in the Android world. Huawei devices still run Android but with Huawei’s services, not Google services.

What are Google Drive’s competitors/alternatives?

Does Google Drive have any competitors out there? Well yes, many of them. There are tons of cloud-based storage services available to users these days. Apple, for example, has its own version of Google Drive, iCloud. The availability of iCloud is tied to Apple’s own ecosystem, though. Dropbox is an immensely popular competitor to Google Drive, and the same can be said for Box. Many of you have also heard of OneDrive, which is Microsoft’s competitor to Google Drive. Another cloud storage solution worth noting is Mega. Each of these solutions has its advantages and disadvantages. All of them are available on Android, except for iCloud.

Can I use Google Drive if I’m not connected to the Internet?

Generally, no, but considering that Google Drive does offer you an option of saving files offline, you technically can. You just need to make sure to save the files you’ll need for offline use, and you’ll be able to access them even when you’re without an Internet connection. There are two ways to go about it. You can flat-out go to Google Drive, and download a file to your device. Alternatively, there’s a ‘Make available offline’ option. Both ‘Download’ and ‘Make available offline’ options are available with a (file) right-click on a desktop PC, or long-press on a mobile platform. What’s the difference between the two options? Well, the ‘Download’ option will download a file directly to your smartphone’s internal storage, and you’ll be able to access it via a file manager. The ‘Make available offline’ option will cache that file for use from Google Drive, but you won’t physically see it in your internal storage.

Does Google Drive require any type of configuration before you start using it?

Google Drive does not really require any configuration before you start using it. However, there are a couple of things that you should consider configuring. Three, to be exact. First and foremost, decide how much space you need. If you already know that you’ll need over 15 GB, you can sort that out from the settings. Moving on, Google Drive also allows you to set a theme for the app. So navigate to settings, and you can choose between Dark, Light, or System default (the latter will follow your system settings). And last, but not least, you should choose whether you want to allow file transfers only over Wi-Fi, or via a data connection as well. The Wi-Fi option is set as default.

What are the best features of Google Drive?

Google Drive offers plenty of features, but some are more important than others. As is the case with all the other apps, you’ll be using Google Drive differently compared to me, your friend, your neighbor, and so on. The point is, people have different use cases. So, we’ll just list some of the most important features, and some of our favorite ones. Some of these, or all, may be quite obvious to you if you’re a seasoned user, so get ready for that. In any case, let’s get to it!

Google Docs, Sheets & Slides

Google Drive comes with its own suite of tools that mimic Microsoft Office tools. So, Google Docs, Sheets, and Slides are the equivalents of Microsoft Office, Excel, and PowerPoint. You can easily open a Google Docs document by tapping the ‘New’ button in the bottom-right corner (on mobile), and get your text started. The same goes for Sheets and Slides. The integration is here, and you get easy access to all three. The best of all, all three will save your work instantly, and continuously. As you write, everything will be saved to the cloud, so you don’t have to worry about losing content.

Built-in malware protection

Google does offer security with Google Drive too. Google Drive comes with built-in protection against malware, spam, and ransomware. That’s something that Google is very proud of. Drive does “provide encrypted and secure access to your files”. Google Drive is scanning files just to be on the save side. Also, considering that Drive is cloud-native, that minimizes the threat to the devices that you’re using the service from.

Easy search & advanced search

Google Drive has an easily noticeable search bar at the top. That goes for both desktop and mobile. You can easily type in what you’re interested in, and Drive will pull up files that it finds. On the desktop, you can also fire up the so-called Advanced Search. You’ll see the search options icon at the end of the search bar. There, you’ll be able to set various other parameters, such as the location of the file, date modified, and so on. We don’t know why is that not available on a mobile app, but there you have it.

Sharing options / collaboration

Google Drive allows you to share your files/folders, if you want. There are plenty of options when it comes to that, actually. You can either just share a link to a specific file/folder, and allow anyone with the link to open that file/folder. Alternatively, you can actually add users to collaborate on a specific file/folder. You can grant them editing rights and so on. You have enough options here to set things up just the way you like them.

Microsoft Office compatibility

Earlier, I’ve mentioned that Google Docs, Sheets, and Slides are the equivalent to Microsoft Office, Excel, and PowerPoint. Well, yes, but there’s also compatibility to consider here. You can open Microsoft Office files in Google Drive/Docs, the same goes for the opposite. Google is using the same file formats as Microsoft. You could stumble upon some compatibility issues here and there, as in not everything will be aligned the same, but for the most part, it works really well. Do note that Docs, Sheets, and Slides are also available as separate apps.

Possibility for offline usage

As we talked about earlier, Google Drive does offer the possibility of offline usage. You can either straight-up download a file from Google Drive, or just make it available offline. That way you can access it, and edit it, and once you gain an Internet connection, all the changes you’ve made will be saved to the cloud as well. This works seamlessly, and I’ve used the ‘Make available offline’ feature more times than I can count.

[ad_2]
Source link

Sundar Pichai was and wasn’t surprised about AI’s rapid growth

Tech

andreasc

-

April 10, 2024

0

Sundar Pichai was and wasn’t surprised about AI’s rapid growth

[ad_1]

Sundar Pichai is one of the most notable figures in AI. He’s the CEO of Google, and Google is one of the driving AI companies in the industry. He has spoken numerous times about the technology, in this includes speaking at the 2024 Business, Government & Society Forum. Well, when asked whether or not he was surprised about AI’s rapid growth, Sundar Pichai gave a yes-and-no answer.

Many of us are still suffering from whiplash from how quickly the tech world pivoted toward AI. Before November 2022, AI was a pretty niche subject. However, in the year 2024, that term is plastered over just about every new service coming out.

Companies are pouring billions of dollars into AI by implementing tools, training models, buying GPUs, investing in AI startups, etc. For example, Apple recently purchased an AI company called Darwin AI. So, you know that AI technology is big if even Apple is making rapid shifts.

Sundar Pichai gave a yes-and-no answer on whether he surprised about the development of AI

At the forum, Pichai was asked whether he was surprised about the rapid growth of AI technology over the last 18 months. In response to that question, he said, “Yes and no,” he continued to say, “We have definitely been thinking about this for a long time.” This statement tracks, as the company has been building large TPU (Tensor Processing Units) at scale since 2016.

So, more than half a decade before generative AI became a public term, the company was very forward-thinking with AI. This should come as no surprise. In 2016, we were introduced to the incredibly powerful Google Assistant. Since then, Google has made strides and implemented its powerful AI technology into all of these products. We’ve all witnessed the powerful AI present in Google Lens, Google Photos, Etc.

So, Pichai didn’t seem all too surprised. However, he did express that he was a bit surprised at just how rapidly it blossomed. “…maybe the pace at which society would adopt it has positively surprised as well as the scale at which the people are engaging with the technology,”.

Also, we can’t forget that, soon after ChatGPT was unveiled, Google declared a code red. So, it’s obvious that there was definitely some surprise there. In any case, AI technology is still advancing at a rapid pace, and we have no idea if the next major breakthrough is just around the corner.

[ad_2]
Source link

Beware of Encrypted Phishing Attack With Weaponized SVG Files

Hacking

andreasc

-

April 10, 2024

0

Beware of Encrypted Phishing Attack With Weaponized SVG Files

[ad_1]

Attackers are now leveraging encrypted phishing emails that utilize Scalable Vector Graphics (SVG) files to execute malicious JavaScript code.

The phishing campaign begins with an email masquerading as a notification for a new voice message.

Recipients are prompted to click on a link to access this message, a classic attraction that plays on human curiosity and the urgency of communication.

Upon clicking the link, the target is taken to a page loaded with heavily obfuscated HTML data.

This is where the attackers’ creativity comes into play. They embed JavaScript code within an SVG image that is executed once the page is rendered on the victim’s system.

Document

Stop Advanced Phishing Attack With AI

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Stopping 99% of phishing attacks missed by other email security solutions. .

This new tactic, uncovered by ARC Labs, a division of Binary Defense, marks a concerning evolution in phishing campaigns, aiming to harvest credentials by tricking targets with seemingly innocuous voice message notifications.

SVG: A Vector for Attack

SVG files, commonly used for their scalability and quality in web graphics, are now being weaponized to execute JavaScript.

This method is particularly insidious as it bypasses traditional security measures that may not scrutinize image files for malicious code.

Illustration of JavaScript execution from an SVG file.

Encrypted Data and the Second Stage

Within the SVG, ARC Labs discovered encrypted data that, when decrypted, revealed a second stage in the phishing attack.

This stage prompts the victim to enter their credentials to access the voice message.

The decryption of this data is facilitated by CryptoJS, a library that allows for the encryption and decryption of data within JavaScript.

The complexity of this attack lies in the encryption of the second-stage page data across multiple HTML classes, which is dynamically decrypted using CryptoJS.

This approach not only conceals the malicious intent but also complicates the analysis and detection of the phishing attempt.

ARC Labs’ analysis of the JavaScript code during runtime was crucial in uncovering the mechanics of this attack.

By setting breakpoints at every invocation of CryptoJS, researchers recovered the decryption key, a critical step in decrypting the content and understanding the full scope of the phishing attempt.

The process of decrypting the encrypted data using CryptoJS.offer

This case study is a stark reminder of the evolving landscape of cyber threats and the innovative methods attackers employ to compromise personal information.

Users are urged to exercise caution when emails prompt action, especially those that lead to external pages requesting credential input.

For organizations, the importance of comprehensive security measures, including the analysis and understanding of emerging threats, cannot be overstated.

As attackers refine their techniques, staying informed and vigilant is the best defense against these encrypted phishing attacks.

The weaponization of SVG files in phishing campaigns represents a significant shift in the tactics used by cybercriminals.

Attracting malicious JavaScript code from encrypted data in SVG images, attackers find new ways to bypass security measures and exploit human vulnerabilities.

The analysis conducted by ARC Labs illuminates this sophisticated attack method, offering valuable insights into its mechanics and emphasizing the need for heightened awareness and security practices.

Secure your emails in a heartbeat! To find your ideal email security vendor, Take a Free 30-Second Assessment.

[ad_2]
Source link

Cypago Announces New Automation Support for AI Security and Governance

Malware

andreasc

-

April 10, 2024

0

[ad_1]

Tel Aviv, Israel, April 10th, 2024, CyberNewsWire

Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, the newest AI security and governance frameworks. With more and more companies integrating new AI tools into their business processes, daily operations, and customer-facing products and services, safe and compliant use of AI has become a pivotal challenge.

Enterprises are adopting AI-powered tools and solutions at a staggering pace, thanks to the increasing power and democratization of AI platforms, and the extensive benefits that artificial intelligence can bring to business operations. However, AI also brings many dangers, including the potential for leaking private data, lack of transparency, and increasingly complex cyber threats. Organizations also need to prepare themselves for more legislation regulating the use and application of AI in business settings.

The best way to protect against these dangers and stay ahead of AI regulations is through adherence to best practices for cyber GRC governance, which are in a constant state of flux. By providing comprehensive risk management, automated 24/7 monitoring, and cybersecurity governance tailored to AI solutions, Cypago enables companies to seamlessly secure their AI initiatives.

“The world of AI is changing quickly, with new threats arising all the time and new regulations arriving frequently. We view it as our responsibility to help organizations maximize the benefits of AI while effectively mitigating the risks and ensuring compliance with best practices and good governance,” said Arik Solomon, CEO of Cypago. “These latest features ensure that Cypago supports the newest AI and cyber governance frameworks, enabling GRC and cybersecurity teams to automate GRC with the most up-to-date requirements.”

Cypago delivers ongoing visibility into all the organization’s tools, applications, and models, while automating many processes needed for effective risk assessment and threat detection. Its heightened security measures for AI-based systems help keep data and software secure, reducing the risk of cyber threats, data breaches and regulatory violations.

What’s more, Cypago is no stranger to the implementation of safe AI, having adopted natural language models and generative AI command prompts as part of its product in 2023.

The platform streamlines security, risk management and compliance gap detection and remediation processes, enabling teams to respond more effectively to emerging threats and vulnerabilities, while ensuring compliance with international, national, and industry-specific regulations. This empowers companies to navigate the complex compliance landscape, which now encompasses the use of AI, with confidence.

About Cypago

Cypago’s revolutionary SaaS-based Cyber GRC Automation (CGA) platform redefines the three lines model by eliminating friction and bridging the gap between management, security, and operations. It transforms GRC initiatives into automated processes, enabling in-depth visibility, streamlining enforcement, and significantly reducing overall costs. The platform leverages innovative technologies, including advanced analysis and correlation engines, GenAI, and NLP models, designed to support any security framework in any IT environment, both in the cloud and on-premises. Cypago was founded in 2020 by tech leaders and cybersecurity veterans with decades of combined experience in the development, operations, and commercialization of cybersecurity solutions. For more information, visit https://cypago.com/.

Contact

PR
Dan Edelstein
InboundJunction
[email protected]

[ad_2]
Source link

How to customize the theme on your Moto G Power

Android

andreasc

-

April 10, 2024

0

How to customize the theme on your Moto G Power

[ad_1]

The Motorola Moto G Power – 2024 is a fantastic phone, and it earned a five-star rating in our review. Two high points of using this phone are the incredible design in The amazing display. This is an incredibly good-looking phone, and it definitely deserves a good-looking theme. If you’ve picked up a Moto G Power – 2024, and you want to know how to customize the theme, here’s a helpful guide. We will teach you the ins and outs of making the theme on your phone match your particular aesthetic.

Also, if you’re curious about what makes this a fantastic phone, then you should read our Moto G Power – 2024 Review. We dive into all the important aspects of this phone like the design, build quality, performance, speakers, display, software, Etc. So, if you want to know why this phone received five stars, be sure to check it out.

Before getting into the guide, if you’re curious about the less expensive sibling, the Moto G 5G – 2024 (Review), you can check out the review for that phone as well. It cost $199, and we praised it for its pleasant display, decent performance, nice speakers, and beautiful design.

How to customize the theme on your Moto G Power – 2024

When customizing the theme on your phone, you will spend most of your time in the Personalize section of the software. To access this part of the software, go to your home screen, hold your finger down on the screen, and tap on the Personalize button in the little pop-up menu. In the Personalize menu, you will see different aspects of your phone’s theme that you can change.

Customizing the wallpaper

So, let’s start off with something simple. The largest section in the Personalize menu is the wallpaper section. When you open this section, you will see a preview of your current wallpaper on both the lock screen and the home screen.

Tap on either one of the previews to edit your wallpaper. If you tap on the Move & Scale button, you will be able to adjust the position of the wallpaper. Below that, you will see a Customize button. Here, you will be able to add one of five effects to your wallpaper.

There is the Zoom function which will zoom in and out of the wallpaper, the Sway effect which will move your wallpaper when you tilt your phone, the Ripple effect which will add a ripple across the screen, the Blur effect which will blur the background, and the Brightness effect which will let you brighten or darken the screen.

Different types of wallpapers

Under the previews, you will see the Choose new wallpaper section. The first button under that section is the My Photos button. This will open your system’s default gallery app and let you assign one of your own photos as your wallpaper.

The next button is the Stylized button. This will allow you to take one of the images from your gallery and apply one of 15 different styles to it. Each style will deeply customize the photo and make it look completely different.

Next up, there is the Dynamic button. Here, you will be able to choose between 29 different live wallpapers that you can apply to the phone. They’re called “Dynamic” because they move. They are either live wallpapers that play animations or wallpapers that subtly change throughout the day.

Lastly, there is a Curated Images button. This will open the stock Android wallpaper picker. The stock Android wallpaper picker features a collection of wallpapers from an updated library of images straight from Google. Google updates its library of wallpapers with new additions every so often. There are nine different categories of images that you can look through.

Colors

In this section, you will choose what sort of color aesthetic you want for the software. Up top, you will see a preview of how the color you selected will look across the software.

Below that section, you will see a block containing colored circles. The top part of the section will have a selection of five basic colors. There will be a multicolored circle that will allow you to choose custom colors. When you tap on the circle, you will see two options. The pallet option will give you a color wheel that will let you dial in the specific hue you want the color to be.

Next to that, you will see the Gallery option. This will allow you to choose an image from your gallery. Then, the software will then let you choose a specific color from that image to apply to the software.

Under the colors section, you will see the themed icon toggle. If you turn this on, all of the icons in the interface will be turned into simple line art minimalist icons that match the color you assigned for the software.

Icon shape/icon layout/Fonts

Next to the color section, you will see the icon shape section. Here, you will be able to choose between five different shapes for your app icons. There, you can choose between squircle, circle, circle with one corner, rounded box, and blob shapes.

Above the icons option, you will see the Font section. Here, you can choose between four different fonts that you want to apply to the text throughout the software.

Directly under the color section, you will see the Layout button. This will allow you to set up the layout for the icons on the home screen. You’ll have the option to change the grid of the icons to dictate how many icons you will have on the screen at the same time. If you choose to have a more packed grid, the icons may shrink. So, you’ll want to keep that in mind.

Display size and text

This is a great section for people who might not have the best vision. Here, you can adjust the size of all the text throughout the software. You can use the font size slider to make the text bigger or smaller. Just know that if you make the text much larger than the original size, it may cause certain UI elements to be moved around.

Under the font size slider, there is the display size slider. Adjusting this will adjust the size of everything in the software. This includes all UI elements including icons, menus, text, Etc.

Under the sliders, you will see the Bold text slider. The last option is the high contrast option. This will put a border around all of the text on the screen. Black text will get a white border, white text will get a black border, Etc. This will help the text throughout the interface stand out more.

Dark mode

If you’re a fan of dark mode, then you’ll want to enable it. Dark mode will take the backgrounds throughout the software and give them a dark color. It will either be dark gray or a darker version of the color you chose for the software. When you set it to dark mode, the theme will also apply to several of your apps.

Themes

So, you want to change up the theme of your phone, but you don’t feel like going through the full process, then you will want to select one of the pre-made things. When you go into the section, you will see a selection of five different themes you can apply to the software. Each theme will have a font, icon shape, color, wallpaper, and effect chosen. All you have to do is select it, and it will be applied.

If you want to create your own theme and save it to be applied later, you can. At the top of the themes section, you will see a little plus button. When you tap on it, you’ll be taken to a page where you can choose the different aspects of the thing you want to create. Also, you can give your theme a unique name. Tap on the save button at the bottom and enjoy your theme.

With that, you now know how to customize the theme on your Moto G Power – 2024.

[ad_2]
Source link

Survey shows a spike in the use of VR devices by teens in the US

Tech

andreasc

-

April 10, 2024

0

Survey shows a spike in the use of VR devices by teens in the US

[ad_1]

A Gen Z survey report published today reveals that the use of VR devices has grown among teenagers in the US. The survey further revealed that at least 33% of teens in the US own VR devices, of which 13% use them at least once a week.

The Apple Vision Pro’s hype could be behind the use of more VR devices among teens

The findings of the Piper Sandler report come as a surprise as it was expected that the use of VR devices wouldn’t grow considering their higher price tag. As per the report, 33% of teens in the US now own a VR device. It turns out to be a 2% rise from last year’s 31% figure. That’s not all, weekly use also jumped to 13%, higher than the 10% recorded in the Fall of 2023. Considering this hike, it is evident that teenagers are more invested in Virtual Reality.

It is still unclear what VR content teens are consuming, but the influence of the Apple Vision Pro could be the reason behind the minor spike. It is worth noting that the increased interest is in line with the launch of Apple Vision Pro.

People could be hesitant about getting the Apple Vision Pro due to its hefty price tag and multiple reported issues. But, it seems the device has garnered the interest of users towards this technology. Again, the hype Apple created for the Vision Pro seemingly affected the sales of its rivals like Meta. This resulted in the company offering big discounts on Quest headsets in March.

Apart from the increase in the use of VR devices by US teens, the report also highlighted some interesting insights about teenagers around tech. The report concluded that TikTok remains at the top spot when it comes to popular apps to use among teenagers. Instagram managed to grab the second spot, while Snapchat slipped to the third. Moreover, the report also reveals the declining popularity of TikTok among teens. It could be due to controversies around the app in the United States.

[ad_2]
Source link

Google’s Magic Editor might become available to everyone for free, but there is a catch

Apps

andreasc

-

April 10, 2024

0

Google’s Magic Editor might become available to everyone for free, but there is a catch

[ad_1]

Google’s AI-powered Magic Editor, the tool that’s been turning bad phone pics into great ones by tweaking the sky, moving stuff around, or getting rid of things you don’t want in your photo, might soon be available to way more people. Right now, you can only get it if you’re part of Google One or if you’ve got a Pixel 8 or Pixel 8 Pro. However, there’s talk that it might be rolling out to a much wider audience, though there’s a catch.Thanks to some digging into the latest Google Photos app update by Android Authority, there’s a hint that things might change. A hidden string in the app suggests that Google might be gearing up to offer Magic Editor for free to users without a Google One subscription.

The catch is that there will be a limit on how many photos you can save every month when using Magic Editor. If you want unlimited saves, you’ll need to subscribe to a premium Google One plan.

More clues found in the Google Photos beta suggest that the free saves quota will reset at the beginning of each month. When you’ve used up your allowance, Photos will nudge you to upgrade to a paid One plan with 2TB or more space.

Google One is a subscription service offered by Google that provides you with increased cloud storage space. This extra space can be used across multiple Google products, including:

Google Drive
Gmail
Google Photos

With a free tier of Magic Editor and wider availability on non-Pixel devices, Google could entice non-paying One users with a sneak peek of the feature. And, to be honest, this could tempt many of them to eventually upgrade to a premium Google One tier for unlimited access to the tool. As with all leaks, it’s wise to take this information with a grain of salt. While the code strongly suggests that Google is tinkering with the idea of a free version of its Magic Editor tool, there’s no guarantee it’ll roll out anytime soon, or even at all.

[ad_2]
Source link

Flaws in 90k+ LG WebOS TVs

Hacking

andreasc

-

April 10, 2024

0

[ad_1]

Bitdefender, the cybersecurity firm, has unveiled a series of critical vulnerabilities in LG’s WebOS TVs, affecting over 91,000 devices worldwide.

These flaws, identified as CVE-2023-6317, CVE-2023-6318, CVE-2023-6319, and CVE-2023-6320, could allow attackers to gain unauthorized root access, posing risks to users’ privacy and security.

Bitdefender, renowned for creating the world’s first smart home cybersecurity hub, conducted this research as part of its ongoing efforts to enhance IoT security.

The vulnerabilities were discovered in an audit of LG TVs running WebOS versions 4 through 7, revealing a critical oversight in the devices’ security mechanisms.

The first in the series, CVE-2023-6317, allows attackers to bypass the authorization mechanism in WebOS versions 4 through 7.

Document

Stop Advanced Phishing Attack With AI

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Stopping 99% of phishing attacks missed by other email security solutions. .

By manipulating a specific variable, attackers can add an extra user to the TV set, sidestepping the intended security measures.

This vulnerability is particularly concerning as it lays the groundwork for further exploitation.

Following the initial breach, CVE-2023-6318 enables attackers to elevate their root access, granting them full control over the device.

This vulnerability is executed through authenticated command injection in the processAnalyticsReport method from the com.webos.service.cloud upload service.

By exploiting this flaw, attackers can execute arbitrary commands with the highest privileges.

CVE-2023-6319 introduces another layer of threat by allowing operating system command injection.

This flaw is found in the getAudioMetadata method from the com.webos.service.attached storage manager service, where manipulated music lyrics files can lead to unauthorized command execution.

This vulnerability underscores the diverse methods attackers can employ to infiltrate the system.

CVE-2023-6320: Authenticated Command Injection

The final vulnerability, CVE-2023-6319, permits attackers to inject authenticated commands by exploiting the com.webos.service.connectionmanager/tv/setVlanStaticAddress API endpoint.

This flaw enables the execution of commands on the device as the dbus user, who possesses permissions to the root user, further compounding the potential for exploitation.

Vulnerable OS Versions

The vulnerabilities affect a range of WebOS versions and models, including but not limited to:

webOS 4.9.7 – 5.30.40 running on LG43UM7000PLA
webOS 5.5.0 – 04.50.51 running on OLED55CXPUA
webOS 6.3.3-442 (kisscurl-kinglake) – 03.36.50 running on OLED48C1PUB
webOS 7.3.1-43 (mullet-mebin) – 03.33.85 running on OLED55A23LA

The report provides a detailed technical analysis of how the vulnerabilities were exploited.

For instance, an error in the account handler allows attackers to skip PIN verification entirely, creating a privileged user profile without user interaction.

This and other technical insights into the vulnerabilities underscore the critical need for robust security measures in IoT devices.

The discovery of these vulnerabilities in LG WebOS TVs highlights the ongoing challenges in securing smart devices.

Users are urged to update their devices as soon as possible to mitigate the risks posed by these flaws.

Bitdefender’s report serves as a crucial reminder of the importance of cybersecurity in the ever-expanding IoT landscape.

Secure your emails in a heartbeat! To find your ideal email security vendor, Take a Free 30-Second Assessment.

[ad_2]
Source link

Introducing the Digital Footprint Portal

Malware

andreasc

-

April 10, 2024

0

Introducing the Digital Footprint Portal

[ad_1]

Digital security is about so much more than malware. That wasn’t always the case.

When I started Malwarebytes more than 16 years ago, malware was the primary security concern—the annoying pop-ups, the fast-spreading viruses, the catastrophic worms—and throughout our company’s history, Malwarebytes routinely excelled against this threat. We caught malware that other vendors missed, and we pioneered malware detection methods beyond the signature-based industry standard.

I’m proud of our success, but it wasn’t just our technology that got us here. It was our attitude.

At Malwarebytes, we believe that everyone has the right to a secure digital life, no matter their budget, which is why our malware removal tool was free when it launched and remains free today. Our ad blocking tool, Browser Guard is also available to all without a charge. This was very much not the norm in cybersecurity, but I believe it was—and will always be—the right thing to do.

Today, I am proud to add to our legacy of empowering individuals regardless of their wallet by releasing a new, free tool that better educates and prepares people for modern threats that abuse exposed data to target online identities. I’d like to welcome everyone to try our new Digital Footprint Portal.

See your exposed data in our new Digital Footprint Portal.

By simply entering an email address, anyone can discover what information of theirs is available on the dark web to hackers, cybercriminals, and scammers. From our safe portal, everyday people can view past password breaches, active social media profiles, potential leaks of government ID info, and more.

More than a decade ago, Malwarebytes revolutionized the antivirus industry by prioritizing the security of all individuals. Today, Malwarebytes is now also revolutionizing digital life protection by safeguarding the data that serves as the backbone of your identity, your privacy, your reputation, and your well-being online.

Why data matters

I can’t tell you how many times I’ve read that “data is the new oil” without reading any explanations as to why people should care.

Here’s my attempt at clarifying the matter: Too much of our lives are put online without our control.

Creating a social media account requires handing over your full name and birthdate. Completing any online shopping order requires detailing your address and credit card number. Getting approved for a mortgage requires the exchange of several documents that reveal your salary and your employer. Buying a plane ticket could necessitate your passport info. Messaging your doctor could involve sending a few photos that you’d like to keep private.

As we know, a lot of this data is valuable to advertisers—this is what pundits focus on when they invoke the value of “oil” in discussing modern data collection—but this data is also valuable to an entirely separate group that has learned to abuse private information in novel and frightening ways: Cybercriminals.

Long ago, cybercriminals would steal your username and password by fooling you with an urgently worded phishing email. Today, while this tactic is still being used, there’s a much easier path to data theft. Cybercriminals can simply buy your information on the dark web.

That information can include credit card numbers—where the risk of financial fraud is obvious—and even more regulated forms of identity, like Social Security Numbers and passport info. Equipped with enough forms of “proof,” online thieves can fool a bank into routing your money elsewhere or trick a lender into opening a new line of credit in your name.

Where the risk truly lies, however, is in fraudulent account access.

If you’ve ever been involved in a company’s data breach (which is extremely likely), there’s a chance that the username and password that were associated with that data breach can be bought on the dark web for just pennies. Even though each data breach involves just one username and password for each account, cybercriminals know that many people frequently reuse passwords across multiple accounts. After illegally purchasing your login credentials that were exposed in one data breach, thieves will use those same credentials to try to log into more popular, sensitive online accounts, like your online banking, your email, and your social media.

If any of these attempts at digital safe-cracking works, the potential for harm is enormous.

With just your email login and password, cybercriminals can ransack photos that are stored in an associated cloud drive and use those for extortion. They can search for attachments that reveal credit card numbers, passport info, and ID cards and then use that information to fool a bank into letting them access your funds. They can pose as you in bogus emails and make fraudulent requests for money from your family and friends. They can even change your password and lock you out forever.

This is the future of personal cybercrime, and as a company committed to stopping cyberthreats everywhere, we understand that we have a role to play in protecting people.

We will always stop malware. We will always advise to create and use unique passwords and multifactor authentication. But today, we’re expanding our responsibility and helping you truly see the modern threats that could leverage your data.

With the Digital Footprint Portal, who you are online is finally visible to you—not just cybercriminals. Use it today to understand where your data has been leaked, what passwords have been exposed, and how you can protect yourself online.

Digitally safe

Malwarebytes and the cybersecurity industry at large could not have predicted today’s most pressing threats against online identities and reputations, but that doesn’t mean we get to ignore them. The truth is that Malwarebytes was founded with a belief broader than anti-malware protection. Malwarebytes was founded to keep people safe.

As cybercriminals change their tactics, as scammers needle their way onto online platforms, and as thieves steal and abuse the sensitive data that everyone places online, Malwarebytes will always stay one step ahead. The future isn’t about worms, viruses, Trojans, scams, pig butchering, or any other single scam. It’s about holistic digital life protection. We’re excited to help you get there.

[ad_2]
Source link

What is Google Drive?

Is the Google Drive app free to use?

What platforms is Google Drive available on?

What are Google Drive’s competitors/alternatives?

Can I use Google Drive if I’m not connected to the Internet?

Does Google Drive require any type of configuration before you start using it?

What are the best features of Google Drive?

Google Docs, Sheets & Slides

Built-in malware protection

Easy search & advanced search

Sharing options / collaboration

Microsoft Office compatibility

Possibility for offline usage

Sundar Pichai gave a yes-and-no answer on whether he surprised about the development of AI

SVG: A Vector for Attack

Encrypted Data and the Second Stage

Contact

How to customize the theme on your Moto G Power – 2024

Customizing the wallpaper

Different types of wallpapers

Colors

Icon shape/icon layout/Fonts

Display size and text

Dark mode

Themes

The Apple Vision Pro’s hype could be behind the use of more VR devices among teens

CVE-2023-6320: Authenticated Command Injection

Vulnerable OS Versions

Why data matters

Digitally safe

The OnePlus 12R gets a Magic Eraser-like tool in the latest update

A new way to power up the flashlight has been added as well