Microsoft has a new image search tool that uses facial recognition

0
[ad_1]

Delving deeper into facial recognition technology, Microsoft has designed a new image search tool that can identify individuals within a cloud database. Once integrated with platforms like OneDrive, the tool will likely provide a more dynamic searching experience, identifying individuals as you do so.

Microsoft patents a facial recognition tool to search, identify, and catalog people in images

Apart from features such as Windows Hello in Windows 11 for keyless sign-in and Azure AI face for detecting and analyzing human faces on images, Microsoft recently filed a patent that indicates other uses of this technology. The patent also states that it will group the photos by people, not only identifying them but also cataloging them.

This tool will enable grouped images if they feature the same person or group of people. Additionally, WindowsReport explained how the image search tool may rank these images using additional data such as connections with family and friends to improve its precision and efficiency.

The ranking engine may prioritize larger-entity groupings over smaller ones and give higher rankings to groupings with a larger number of faces belonging to friends or family. Furthermore, social media applications could also employ the tool to facilitate user identification.

There are still some ethical repercussions for people if they use this technology

Nevertheless, integration of this sort of facial recognition technology has some ethical repercussions especially when privacy and data usage issues. When discussing Azure services, Microsoft has come up with responsible AI guidelines wherein user consent is paramount along with adherence to ethical standards.

However, there is hope yet for a facial-recognition-based image searching tool in platforms like OneDrive which already have AI-based search capabilities. This kind of technology being incorporated could make users reorganize their digital content thus giving rise to an improved search insight.

As Microsoft refines its facial recognition technologies even further. However, user privacy concerns must remain at the forefront. With proper utilization though this tool may lead to better experiences for consumers while maintaining privacy and ethical guidelines.


[ad_2]
Source link

Patch Your Systems Now (CVE-2024-3094)

0
[ad_1]
Backdoor Discovered in XZ Utils: Patch Your Systems Now (CVE-2024-3094)

Critical Backdoor Alert! Patch XZ Utils Now (CVE-2024-3094) & Secure Your Linux System. Learn how a hidden backdoor puts Linux at risk and how to patch it immediately.

A critical security vulnerability, designated CVE-2024-3094, was recently discovered in the widely used XZ Utils package. This vulnerability threatens Linux systems with backdoor attacks.

For your information, XZ Utils is a collection of open-source command-line tools for data compression and decompression. It includes the popular xz command and the liblzma library, which is used by other software, most notably OpenSSH – the program that enables secure remote access to Linux systems.

The Backdoor Explained

The vulnerability involved a malicious backdoor hidden within the source code of XZ Utils, specifically in the liblzma library. This backdoor code, if triggered, could allow an attacker to gain unauthorized remote access to a vulnerable system through SSH. The attacker wouldn’t even need valid credentials, potentially granting complete control over the system.

Impact and Discovery

The potential impact of this vulnerability is severe. An attacker exploiting CVE-2024-3094 could steal sensitive data, install malware, disrupt critical operations, or even use the compromised system to launch further attacks.

Fortunately, the backdoor was discovered by the security community in late March 2024 before widespread distribution. This prevented a large-scale security breach. However, some Linux users remain vulnerable, especially those using unstable or rolling-release distributions.

Who is Affected?

According to OpenSSH’s report, the specific versions of XZ Utils containing the backdoor were 5.6.0 and 5.6.1. These versions were only recently released and did not make it into the stable branches of most major Linux distributions. However, users who manually compiled these versions from source code or installed them from non-standard repositories could be at risk.

Commenting on this, John Bambenek, President at Bambenek Consulting warned, “The original reports of this backdoor showed exploitation of this vulnerability via SSH which means it can be triggered even if the victim machine’s users don’t use XZ and its library. It seems this library tends to be installed by default on modern Linux distributions so organizations should immediately prioritize downgrading the package until a safe update is released, even if they don’t use the tools themselves.“

Mitigation and Prevention

The most critical step to address this vulnerability is to update your system immediately. Most Linux distributions have released patch updates for XZ Utils. Here’s how to update depending on your distribution:

  • Debian/Ubuntu: Use sudo apt update and sudo apt upgrade commands.
  • Red Hat/CentOS/Fedora: Use sudo dnf update command.
  • Other Distributions: Refer to your distribution’s specific update instructions.

Lessons Learned

The discovery of CVE-2024-3094 emphasizes the importance of various security measures. Firstly, keeping software and systems updated with regular patches is crucial to mitigate potential risks.

Secondly, maintaining a sharp review process for open-source projects aids in the early detection of vulnerabilities. Thirdly, promoting security awareness among users and employees through education about risks and best practices is essential for enhancing overall protection. Adhering to these practices enables us to reduce the impact of vulnerabilities like CVE-2024-3094 and safeguard the security of our systems.

  1. New Linux Malware Alert: ‘Spinning YARN’ Hits Docker
  2. Crypto Stealing PyPI Malware Hits Windows, Linux Users
  3. Magnet Goblin Using Ivanti Flaws to Deploy Linux Malware
  4. Bifrost RAT Variant Hits Linux Devices, Mimics VMware Domain
  5. Xamalicious Backdoor Infects Android Apps, Affects 327K Devices

[ad_2]
Source link

Android 15’s color contrast settings will make apps easier to read

0
[ad_1]

The Android operating system runs on billions of devices worldwide, which means it’s used by not just young, tech savvy users but also by people of all demographics. Google, the company that develops Android, has created multiple accessibility options to ensure their mobile operating system can be enjoyed by just about anyone. In the upcoming Android 15 release, which is set to debut this fall, Google may be adding new “color contrast” settings that will help users make apps easier to read.

Earlier today, Google released a new Android 14 beta dubbed Android 14 QPR3 Beta 2.1. The hallmark of point releases like this one is the many bug fixes they bring, and QPR3 Beta 2.1 is no different. However, QPR3 Beta 2.1 also surprisingly brings some new features, including the new high-quality mode for the Android webcam feature first seen in Android 15 Developer Preview 2. Under the hood, the QPR3 Beta 2.1 update also adds a hidden “color contrast” settings page that I managed to manually activate.

First look at Android’s color contrast settings

This page lets the user adjust the contrast of text, buttons, and icons to make them stand out more in apps. Users can choose from “default”, “medium”, or “high” contrast levels for colors as well as toggle “maximize text contrast” to “add a black or white background around text to increase contrast.” The page also includes a mockup of an app that serves as a preview of these toggles, though users should be aware that “some apps may not support all color and text contrast settings.”

Here is an image gallery that showcases the various color contrast settings in both light and dark modes.

Notably, Google was previously seen working on a “contrast level” slider in preview builds of Android 14. At the time, I discovered that this slider would work with apps that utilize Google’s Material components library to enable Material You theming. The purpose of the slider is to adjust the tone (lightness) of colors with backgrounds to become closer to their background as the contrast lowers, and to become further when the contrast increases. The slider was moved under Android’s developer options in the first beta build of Android 14, where it remains today.

When will Android’s color contrast settings arrive?

This new “color contrast” settings page is likely the user-facing version of the “contrast level” slider seen in the previous release but with the addition of the “high contrast text” option currently found in Android’s display size and text settings. However, as I previously said, the “color contrast” page is not currently visible in the latest QPR3 Beta 2.1 release. Once it does go live in a future update, it should appear under Settings > Accessibility > Color and motion. This page will likely be added as part of this year’s Android 15 update, which is poised to introduce other UI-related changes, such as a revamped volume panel.


[ad_2]
Source link

Android 14 QPR3 Beta 2.1 rolls out and addresses tons of bugs

0
[ad_1]

Google has just started rolling out the 2.1 beta version for Android 14 QPR3, and it’s mostly about further enhancing the experience by way of bug fixes. In fact, the patch is a pretty large list of bug fixes that Google wasn’t able to address with the last update, Android 14 QPR3 Beta 2.

Google specifically states that this release doesn’t get rid of all bugs. However, it does iron out more than a few issues that were plaguing the previous releases. With Android 14 QPR3 Beta 2 for example, some users were experiencing launcher crashes when trying to open up their recent apps menu. If you’re using the gesture navigation on Android, then you open up the recent apps by swiping upward from the bottom edge of the display.

In most cases, this works pretty flawlessly and it lets you fly between apps you’re currently using to multitask. Sometimes with great efficiency. That all goes out the window though if your launch simply crashes. Which is what was happening prior to this update. “Fixed an issue that sometimes caused a device’s launcher to crash when trying to view recent apps,” the official release notes say.

Android 14 QPR3 Beta 2.1 is rolling out to all eligible devices

Naturally, you’ll need to be using a Pixel device if you’re looking to upgrade to this latest beta patch. Although, if you’re reading this you probably already know that. As Google notes, the beta 2.1 update is rolling out to all eligible devices. Specifically those on the Android Beta for Pixel Program. That means if you’re running with the Pixel 5a or newer (like the Pixel 8 Pro), including the Pixel Fold and Pixel Tablet, you can upgrade to this beta patch. You do have to opt in with your device, though. And keep in mind that this is a beta, so things won’t necessarily always work correctly. As evidenced by the patch being entirely about fixing bugs.

In addition to the bug mentioned above, Google has fixed a wide range of issues. This includes a particularly annoying bug that was causing the Pixel Fold to only show content on half of the display when the phone was unfolded. Another particularly troubling bug was happening with the Pixel Tablet. Where sometimes, the tablet wouldn’t charge when it was connected to the dock.

Some additional bug fixes include where swiping up from the bottom of the screen didn’t always return to the home screen. The Quick Tap to start gestures not working was another issue. There were frequent errors from apps that were telling users that the “Application not responding” as well. Again keep in mind there are a few more bug fixes included. And you can read the full list of fixes in Google’s full release notes. Google also states that there’s a list of top issues that are going to be addressed in future patches.


[ad_2]
Source link

2024 State of Malware in Education report: Top 6 cyberthreats facing K-12 and Higher Ed

0
[ad_1]

Educational institutions may face a range of cyberthreats in 2024, but our 2024 State of Malware in Education report identifies the six most critical ones.

Ransomware, for example, stands out as a key threat for schools and universities. The report covers how last year, we witnessed a 92% increase in ransomware attacks in K-12 schools and a 70% increase in Higher Education. The trend appears set to continue, partly due to specialized ransomware groups like Rhysida (formerly Vice Society) targeting educational sectors.  

Education ransomware attacks, 2022 – 2023

Another major threat our 2024 State of Malware in Education covers is the reduction of conventional malware in favor of Living off The Land (LOTL) attacks. LOTL attacks exploit legitimate system tools to remain undetected while conducting harmful activities.

Our report suggests that educational institutions must employ expert staff to manually identify LOTL activities, which traditional malware detection tools miss. For example, we recently wrote how one K-12 district used MDR to uncover malicious PowerShell activity and stop an ongoing infection.

Some other trends and threats educational institutions can expect in the report to cover include:

  • Why targeting Macs has become an easy choice for criminals 
  • How CL0P is rewriting the ransomware playbook and why Big Game ransomware remains the most serious threat.
  • How cybercriminals use ‘malvertising’ to target educational institutions with malicious ads for popular for remote learning such as Zoom. 

As we progress into 2024, the reality is that educational institutions’ success in pairing state of the art security software with skilled security staff will be a deciding factor in their ability to take down the most serious cyberthreats. 

To understand the complete list of threats facing educational institutions in 2024 and how to tackle them, get the full 2024 State of Malware in Education report—tailored to either K-12 or Higher Ed—below.



[ad_2]
Source link

One UI 6.1 rolling out to Galaxy S23 FE & Galaxy Tab S9

0
[ad_1]

Samsung is slowly expanding One UI 6.1 to more Galaxy devices. Debuted with the Galaxy S24, the new One UI version recently made it into the Galaxy S23, Galaxy Z Fold 5, and Galaxy Z Flip 5. The company has also started updating the Galaxy S23 FE and Galaxy Tab S9 series to One UI 6.1.

The Galaxy S23 FE is getting One UI 6.1 globally

Samsung is rolling out the One UI 6.1 update to the Galaxy S23 FE globally. In the US, the update is available for carrier-locked and unlocked units with the firmware build numbers S711USQU2CXCH and S711U1UEU2CXCH, respectively. International versions of the phone are getting it with the build number S711BXXU2CXCF. We can confirm the rollout in Europe, Latin America, Africa, and most parts of Asia.

The Galaxy S23 FE doesn’t yet seem to have received One UI 6.1 in South Korea and Canada. However, it should just be a matter of time now. Samsung is pushing the new One UI version with the March security patch, which the device picked up with a separate update early last month. But we aren’t interested in the security fixes. After all, One UI 6.1 is a feature update that brings Galaxy AI.

Galaxy AI is a suite of AI features Samsung introduced with One UI 6.1 on the Galaxy S24 series. Circle to Search, real-time translation of calls, Interpreter tool for real-time translation of in-person conversations, instant translation and summarization of documents and webpages, automatic transcription of voice recordings, AI-powered wallpapers, and Generative Edit are some AI features that Galaxy devices are getting.

One UI 6.1 also brings some UI changes and other features and improvements to the Galaxy S23 FE. These goodies are also rolling out to the Galaxy Tab S9 series. The update appears to be currently limited to Europe, Australia, and parts of Asia where the tablets are getting the build number X916BXXU2BXC9. Samsung should soon expand the rollout to other regions, including the US.

More Galaxy devices will get these features

One UI 6.1 will also be available for the Galaxy S22, Galaxy S21, Galaxy Z Fold 4, Galaxy Z Fold 3, Galaxy Z Flip 4, Galaxy Z Flip 3, and some mid-range Galaxy devices. Some models may miss out on certain features due to hardware limitations but most of the changes should roll out to all eligible devices. You can check for updates from the Settings app. We will keep you posted as Samsung updates more devices to One UI 6.1.


[ad_2]
Source link

US Congress may ban Microsoft Copilot citing security concerns

0
[ad_1]

AI has reached and knocked on all doors! The US Congress isn’t unfamiliar with generative AI and ChatGPT, as a Congressman once delivered an AI-drafted speech. Now, the US Congress is planning to ban Microsoft Copilot citing security concerns, according to a report from Axios.

US Congress could ban Microsoft Copilot

According to Congress’ Chief Administrative Officer, Catherine Szpindor, Microsoft Copilot is “unauthorized for House use” citing the security concerns that information shared by House staff might leak and reach places where it’s not supposed to be. As a result, the US Congress will expunge and ban Copilot, which serves as an optional generative AI add-on, on all Windows devices under its jurisdiction. Meanwhile, Microsoft assures that they are working on government-friendly versions of their AI tools that will meet the strict security requirements of the federal government.

It raises questions about its impact on congressional staff and their workflow; if not Copilot, then what? A Microsoft spokesperson might have an answer to this. They explained that they understand how important it is for the government to have an extra layer of security. That’s why they plan to make AI tools like Copilot specially designed to meet these high-security standards. The Chief Administrative Office’s office clarified that the advice they’re giving right now is for regular folks, not government workers. But once the government version is ready, they’ll check it out and decide what to do.

More importantly, Microsoft Copilot is a collaborative effort between Microsoft and ChatGPT-owner OpenAI. Plus, it has several plans to choose from, especially for businesses. A bunch of perks come with the paid version, like allowing users to integrate it with Microsoft Office Suite programs like World, Excel, Outlook, and PowerPoint. Hence, the AI indeed comes helpful among congressional staff but the potential ban has a solid argument that there have been multiple instances where there is always a risk of data leakage. Such leaks, especially in terms of government, pose enormous risks.


[ad_2]
Source link

New Shazam Wear OS update gives the app independence from your phone

0
[ad_1]
Music lovers who are also the owners of a Wear OS watch will be pleased to know that there is a new version of Shazam for you. Shazam for Wear OS just got a major upgrade that will pretty much make the app independent of your phone and work completely on its own on your smartwatch. This means you can now identify songs directly from your wrist without needing to have your phone nearby.
With this update (version 14.18) of Shazam, there will be no longer a need to fumble around to connect with your phone app (via 9to5Google). As a matter of fact, you won’t even need the Shazam app installed on your Android phone anymore. Even offline, your smartwatch Shazam will now record a snippet and then once you’re back online, it’ll work its magic and tell you the song’s name. This will make it so much easier to identify songs on the go.

Images Credit: Google Play Store

Furthermore, if you happen to have more than one device, songs you Shazam on your smartwatch will now instantly sync to your other devices. This functionality does require you to be logged into the app in order to work, though.

This new feature will make it even more convenient for users to quickly identify songs on the go without having to rely on their phone. It also adds a seamless experience for those who use multiple devices within the Shazam ecosystem.

This new version of Shazam for Wear OS is widely available now via the Google Play Store. Apple acquired Shazam back in 2017, so it is good to see the app continue to be supported on Android and Wear OS devices. This update shows that Shazam is committed to providing a user-friendly experience across various platforms, as users can now easily access the app’s features on their smartwatches, regardless of the operating system they use.

[ad_2]
Source link

Android 15 could revamp the Android volume panel

0
[ad_1]

Android 15 is fast approaching, and we are gearing up for the official beta release. While we are waiting, we are seeing bits and pieces of what Android 15 could offer. Well, according to a new report, Android 15 could revamp the Android volume panel.

In order to access the volume panel on your Pixel phone, tap on the three-dot button at the bottom of the volume slider. This will show you a panel consisting of volume sliders for different parts of the operating system. You’ll see volume sliders for your media, calls, ringtones, notification tones, and alarms.

This is the exact same thing you would see if you go to the Sound & Vibrations menu in Settings. It’s a great way to get an idea of where all of your system volumes are. However, it’s pretty out of date.

Android  15 could revamp the volume panel

Since we are talking about Android 15, you will want to take this news cautiously. Android 15 is currently in the developer preview stage. So, there’s a chance that the news we’re covering today could be different tomorrow.

As discovered by Mishaal Rahmen, the new volume panel in Android 15 will show much thicker sliders for each volume control. Previously, the sliders for each volume control were paper-thin. However, the sliders for the volume controls will be much thicker and pill-shaped. This will give it a more material You look.

Android 15 volume panel

You will see a little dot at the right end of each slider depicting where each slider maxes out at. The name of each control will live inside the slider. As you slide the volume past the name, you will see the text of the name move forward or backward. You will be able to see this in action in the video below.

Other features

Another feature of this new panel is the fact that it will be collapsible. There will be a button in the top right corner of the panel that will allow you to collapse and expand it. Once collapsed, you will only be able to see the media volume and the title of any actively playing media on the phone. However, if you summon the panel while media is actively playing, then it will open in that collapsed state.

If you open it while there’s no active media playing, you will still see a section showing you what device the audio is playing through. However, if you tap on that section, it will not take you to the audio output menu.

Also, the new volume panel will be able to show you options like noise control and special audio. However, Rahman was not able to surface those options during testing. So, they may come at a later date.


[ad_2]
Source link

YouTube Music moved to quarterly feature recaps

0
[ad_1]

It seems that YouTube Music is always coming out with some new features. Well, that’s true, as the company pushed out new features on a bi-monthly basis. However, that has just changed. According to the company, YouTube Music has moved to quarterly feature recaps.

Over the years, YouTube Music adopted a bi-monthly feature recap schedule. Every two months, we would get a recap of the new features added to YouTube Music. However, the company announced that this will be put on a quarterly basis. So, we will see these recaps every three months. This means fewer recaps for the year. However, it does not mean that YouTube music is slowing down with its new features.

YouTube Music is on a quarterly feature recap schedule

Along with this announcement, YouTube gave us the recap for the past couple of months. For starters, while you are playing music, you will see a little moving equalizer animation playing. These will be the little lines expanding and contracting when a song is playing. Well, the little equalizer animation will move to the beat of your music. So, it will look like an actual equalizer.

Another notable feature that hit YouTube Music not too long ago was the new Samples shelf. If you are unfamiliar with what Samples are, these are the TikTok-style portrait slices of music videos. Much like TikToks, Shorts, and Reels, you can flip through a vertically scrolling feed of these videos. They are a way of exposing you to more content based on your listening habits. You’ll be able to discover music videos of songs from artists you listen to often.

Well, the company put a horizontally scrolling shelf of Samples on the home screen. This gives them a spot where they are easily discoverable in the app.

Aside from these features, YouTube Music has also been revamping the Now Playing screen. It has been moving the buttons around and revamping the overall look and feel. So, the screen now should look much different than it did months ago.

While YouTube Music has moved to a quarterly update recap schedule, there will still be no shortage of new features coming to the platform.


[ad_2]
Source link