Application-Layer Loop DoS Attack – 300,000 Online Systems At Risk

0
[ad_1]

Denial-of-service (DoS) attacks are usually exploited by hackers to interrupt regular network and website functioning, with motives of making money or for political reasons or simply to create a mess. 

The websites or networks can be made unavailable through the Denial of Service (DoS) attack method which sends numerous requests for resources and traffic to the system.

Researchers at CISPA Helmholtz-Center for Information Security discovered a new Denial-of-Service attack vector called “Application-layer Loop DoS Attacks.” 

It targets UDP-based application protocols by pairing their servers to communicate indefinitely, affecting both legacy protocols like QOTD, Chargen, and Echo and contemporary ones like DNS, NTP, and TFTP. 

This vulnerability puts an estimated 300,000 Internet hosts and networks at risk of denial-of-service conditions.

Loop DoS Attack

Loop DoS Attack

The newly discovered self-perpetuating DoS loop attack targets application-layer messages by pairing two network services that keep responding indefinitely, creating large traffic volumes resulting in denial of service. 

Once triggered, even attackers cannot stop it. Previously, loop attacks occurred on routing layers with finite iterations. 

This attack by CISPA researchers concerns 300,000 Internet hosts, confirming vulnerabilities in TFTP, DNS, NTP, and six legacy protocols providing basic Internet functionalities like time synchronization, name-to-IP mapping, and unauthenticated file transfer.

Application-layer loop DoS attacks employ IP spoofing, enabling initiation from a single spoofing-capable host. 

For example, attackers could trigger a perpetual loop between two vulnerable TFTP servers by injecting one spoofed error message, causing them to exchange error messages and stress networks between them endlessly. 

These attacks differ from known network-layer loops, bypassing existing packet lifetime checks at that level and representing a novel vector unaddressed by current mitigations.

This novel attack vector is yet to be exploited in the wild, however, Rossow warns that if left unaddressed it could readily be used by malefactors. 

Rossow and Pan reported their discoveries concerning December 2023 to the relevant vendors and a consortium of trusted operators. 

Moreover, CISPA researchers coordinated with The Shadowserver Foundation for an advisory publication and notification campaign on application-layer loop DoS threat.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


[ad_2]
Source link

Why Browser Security Matters More Than You Think

0
[ad_1]
Why Browser Security Matters More Than You Think

In today’s interconnected world, where our lives revolve around the internet, it’s imperative to understand the importance of browser security. Whether it’s for personal use or professional purposes, web browsers function as our primary gateway to the online world.

Consequently, they also serve as a potential entry point for cyber threats and attacks. In this article, we’ll highlight why browser security matters more than you might think and discuss some essential steps to enhance your online safety.

The Growing Cybersecurity Threat:

It’s no secret that cyber threats have become increasingly sophisticated over the years. Cybercriminals are constantly finding new ways to exploit vulnerabilities in browsers, leaving users vulnerable to privacy breaches, data thefts, and financial frauds.

According to cybersecurity experts, one of the most common tactics used by hackers is cross-site scripting (XSS) attacks. These malicious scripts injected into web pages can compromise users’ sensitive information.

Major Web Browsers Remain At Risk:

While modern web browsers work diligently to enhance their security features, they are not completely immune from threats. Some developers argue that certain browsers are more secure than others due to their built-in security mechanisms. However, critics believe that no browser is entirely invincible. Over time, vulnerabilities may emerge for even the most popular browsers for Windows as hackers adapt and discover new methods of attack.

The Need for Vigilance and Proactive Measures:

Considering the persistent threat surrounding web browsers, users like us must remain proactive with our online safety measures:

1. Keep Your Browser Up-to-Date:

Vendors frequently release security patches and updates for their web browsers as vulnerabilities are discovered and fixed. By regularly updating your browser software, you stay protected against known threats.

2. Enable Automatic Updates:

Enabling automatic updates ensures that you receive critical security updates immediately upon release without any manual intervention.

3. Utilize Browser Extensions with Caution:

Browser extensions can add extra functionality and enhance your browsing experience. However, they may also act as potential gateways for hackers. It’s important to research and use trustworthy extensions from reputable sources.

4. Enable Two-Factor Authentication (2FA):

Activating 2FA adds a layer of security to your user account by requiring you to provide a second form of verification, such as a unique code sent to your mobile device or email.

5. Implement Strong and Unique Passwords:

We’ve heard it countless times, but it bears repeating: strong, complex, and unique passwords are essential. Avoid using easily guessable passwords like consecutive numbers or common phrases. Consider utilizing a password manager to store and generate unique passwords securely.

6. Regularly Clear Browser Cache and Cookies:

Clearing your browser cache and cookies can help protect your privacy and prevent unauthorized access to your online activities.

7. Use Privacy-Focused Browsing Modes:

Most popular web browsers offer private browsing modes that do not retain any browsing history or save cookies upon session closure. Utilize these specialized modes when accessing sensitive information or using public networks.

8. Be Cautious with Downloads:

Exercise caution when downloading files from the internet, particularly those sent by unknown sources. Malware can be disguised within seemingly harmless files, leading to potential security breaches.

Common Mistakes to Avoid:

Despite the importance of browser security, many users make common mistakes that can leave them vulnerable to cyber threats. By avoiding these pitfalls, you can significantly enhance your online safety.

1. Ignoring Updates:

One of the most common mistakes people make is neglecting to update their web browsers. Developers continuously release updates to patch security vulnerabilities and improve overall performance. If you ignore these updates, your browser remains susceptible to attacks targeting known vulnerabilities.

Clicking on suspicious links in emails or on unfamiliar websites can lead to malware infection or phishing attempts. Always be cautious and verify the authenticity of links before clicking on them.

3. Using Weak Passwords Across Multiple Websites:

Using weak passwords that are easy to guess or reusing passwords across multiple websites places all your accounts at risk if one becomes compromised. Implement strong and unique passwords for each online service you use, and consider using a password manager to manage them securely.

Conclusion:

Your browser is more than just a tool for internet navigation; it serves as the gateway between you and the digital world around you – a world teeming with cyber threats desperately seeking gaps in security measures to infiltrate unknowing users’ devices.

By prioritizing browser security, remaining vigilant against emerging threats, and implementing the tips mentioned above, we can significantly reduce our vulnerability to cyber-attacks.

Remember: taking proactive steps towards enhancing browser security today means safeguarding yourself against tomorrow’s evolving risks—a small price for maintaining online safety in an ever-connected world.

  1. Apple Safari Safest, Google Chrome Riskiest Browser
  2. Mullvad VPN and Tor Project Release Mullvad Browser
  3. Brave Browser enters dark web with its own Tor Onion service
  4. Google Incognito Mode: New Disclaimer Reveals Data Tracking
  5. DuckDuckGo Allows Microsoft Trackers Despite No Tracking Policy

[ad_2]
Source link

Galaxy Tab Active 5 Enterprise Edition will get 8 Android updates

0
[ad_1]

The enterprise edition of Samsung’s Galaxy Tab Active 5 will get updates for eight years, a company executive revealed on LinkedIn. Not only security patches, but the device will also receive eight major Android OS updates during this time. The standard version of the newly launched rugged tablet is eligible for four major OS updates and five years of security patches.

Samsung promises eight years of updates for the Galaxy Tab Active 5

Samsung‘s enterprise edition Galaxy devices are aimed at business customers. These products come with additional software solutions and dedicated support channels so businesses can get more out of them. The company has always offered better update support to these devices. They get regular OS and security updates, often more frequently and longer than standard versions.

However, until recently, the longest guaranteed support for any Galaxy smartphone or tablet was five years. Most Samsung products launched since 2021 get four major Android OS updates and five years of security patches, including enterprise editions. Starting with the Galaxy S24 series, the company extended support to seven years for flagship models.

The new flagships debuted with Android 14 and will get OS updates up to Android 21 and security patches till 2031. No other Galaxy device was covered under the updated policy. That’s changing on the enterprise side of things. While the enterprise edition of the Galaxy S24 is still limited to seven years of updates, the Galaxy Tab Active 5 will get updates for eight years.

This means the new tablet will remain secure till 2032 and receive new features until Android 22. The enterprise edition of the Galaxy Xcover 7, a rugged smartphone launched alongside the Galaxy Tab Active 5 in January, will get seven years of OS and security updates. Like the tablet, its standard version is eligible for only four OS updates and five years of security patches.

The tablet can run without a battery

Samsung’s Active series tablets feature a ruggedized build, S Pen support, and a removable battery. With the Galaxy Tab Active 5, the company introduced a No Battery Mode that allows it to run without a battery. It directly sends the power to the device, bypassing the battery. This enables businesses to use the tablet in kiosks with an uninterrupted power supply.

With fewer charge and discharge cycles, the battery’s health will be preserved in the long run. After all, Samsung has promised eight years of updates for the Galaxy Tab Active 5 Enterprise Edition. The company may introduce enterprise editions of more Galaxy devices in the coming months. If history is any indication, the Galaxy A55 should get one. All previous models in the lineup have enterprise versions.


[ad_2]
Source link

Discount: Meta could lower the monthly subscription fee by almost 50% to €5.99

0
[ad_1]

Facebook and Instagram parent company – Meta – has proposed to reduce its subscription fee for ad-free versions of the social media apps in Europe by almost 50%, (going to €5.99/month from €9.99/month).

The decision comes amid criticisms of forcing Meta users to pay for privacy through its no-ads service, introduced to comply with the Digital Markets Act (DMA) and EU privacy laws last Fall.

In 2023, Meta unveiled a subscription service for Facebook and Instagram in the EU, EEA, and Switzerland, offering users an ad-free experience to align with EU regulations. This service prevents user data from being utilized for advertising purposes.

Reuters reports what Meta lawyer Tim Lamb told a European Commission hearing:

Austrian privacy activist Max Schrems said the issue is not about the fee: “We know from all research that even a fee of just 1.99 euros or less leads to a shift in consent from 3-10% that genuinely want advertisements to 99.9% that still click yes. The GDPR requires that consent must be ‘freely’ given,” he said.

“In reality, it is not about the amount of money – it is about the ‘pay or okay’ approach as a whole. The entire purpose of ‘pay or okay’ is to get users to click on okay, even if this is not their free and genuine choice. We do not think the mere change of the amount makes this approach legal.”

Companies risk fines of as much as 10% of their annual global turnover for DMA breaches.


[ad_2]
Source link

Microsoft Warns of New Tax Returns Phishing Scams Targeting You

0
[ad_1]
Beware Tax Phishing This Season: Microsoft Reveals New Scams Targeting You

New and sophisticated tax phishing scams are targeting taxpayers, warns Microsoft. These scams impersonate trusted sources and use urgency tactics to steal personal and financial data.

Taxpayers beware! Phishing scams are on the rise again as tax season heats up. Microsoft Threat Intelligence has issued warnings about new and innovative tactics cybercriminals are using to steal your personal information and financial data.

These scams don’t discriminate, but they do target specific groups more heavily. New taxpayers, recent immigrants with green cards, small business owners who file themselves, and older adults are all prime targets because they might be less familiar with tax procedures.

It is also worth noting that these threat actors are getting more sophisticated too. They’re impersonating trusted sources like employers, tax agencies, and even payment processors. They might send emails with blurry or incomplete tax documents to create a sense of urgency and trick you into clicking on a malicious attachment.

These attachments, as per Microsoft Threat Intelligence’s blog post, contain malware that steals your login credentials, or they might redirect you to a fake website that looks like a legitimate tax platform designed to capture your information.

One example scam identified in January involved emails that appeared to be from employers sending tax documents. Clicking on the attached HTML file led to a fake landing page designed to steal the user’s login credentials.

Beware Tax Phishing This Season: Microsoft Reveals New Scams Targeting You
Screenshot via Microsoft Threat Intelligence

Tycoon and NakedPages – PhaaS

In addition to their blog post, Microsoft Threat Intelligence has also sent out a series of tweets addressing the increasing prevalence of phishing campaigns during the tax season in the United States.

These campaigns, including those associated with notorious phishing-as-a-service (PhaaS) platforms like Tycoon and NakedPages, are leveraging tax-related themes for social engineering tactics, putting individuals and organizations at risk of financial fraud and data theft.

One notable campaign tied to the Tycoon PhaaS platform involved deceptive emails posing as official tax forms such as W-2 and W-9 notifications, alongside other payroll tax documents.

These emails featured HTML attachments that initiated a Cloudflare captcha check, ultimately leading victims to a phishing page designed to harvest sensitive information. When recipients opened these attachments, JavaScript scripts were executed, facilitating the installation of info-stealing malware.

Additionally, Microsoft observed phishing efforts linked to the AiTM phishing kit NakedPages, where fraudulent emails disguised as DocuSign-shared documents about tax adjustments were circulated. Clicking on embedded images within these emails triggered redirections culminating in phishing pages, demonstrating the sophisticated nature of these attacks.

This malicious software is designed to harvest sensitive data, including cryptocurrency wallet information, login credentials for PuTTY and WinSCP, as well as credentials stored in web browsers and email clients. Such comprehensive data theft poses significant risks to individuals and organizations, potentially resulting in financial losses and compromised digital identities.

Screenshot via Microsoft Threat Intelligence

Both Tycoon and NakedPages are recognized for their automation capabilities in executing phishing activities, as well as their ability to bypass multi-factor authentication (MFA) through adversary-in-the-middle (AiTM) techniques, strengthening the threat posed by these campaigns.

Microsoft recommends staying alert throughout tax season. Don’t click on suspicious links or attachments in emails, even if they seem to come from a familiar source. If you’re unsure about the legitimacy of an email, contact the sender directly through a verified phone number or website.

You can find more resources and tips for staying safe from tax season scams by searching for the “Microsoft Threat Intelligence tax season report.”

  1. IRS tax forms W-9 email scam drops Emotet malware
  2. New Ransomware Email Scam Using FBI and IRS as Bait
  3. Security Breach Rattles IRS, 334,000 Tax Payers Data Stolen
  4. US Citizens Hit by Ransomware via Fake IRS Tax Return Emails
  5. Thanks IRS for poor security: Data On 100,000 Taxpayers Stolen

[ad_2]
Source link

North Korea’s Kimsuky Group Equipped to Exploit Windows

0
[ad_1]

Cybersecurity experts have uncovered a sophisticated cyber espionage campaign orchestrated by the North Korean threat actor group Kimsuky, Black Banshee, or Thallium.

This group, notorious for its intelligence-gathering missions, has been active since at least 2012.

It has primarily targeted South Korean government entities, individuals involved in the Korean peninsula’s unification process, and global experts in fields of interest to the North Korean regime.

Their latest tactics involve exploiting Windows help files, indicating an alarming evolution in their methods to bypass modern security measures.

Evolving Tactics of Cyber Espionage

Rapid7 Labs’ continuous monitoring of threat groups has led to the discovery of Kimsuky’s updated playbook, which showcases their relentless efforts to refine their tactics, techniques, and procedures (TTPs).

Document

Free Webinar : Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.:

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

AcuRisQ, that helps you to quantify risk accurately:

This cat-and-mouse game between cybercriminals and defenders is a testament to the dynamic nature of cyber threats.

The group’s recent shift from weaponized Office documents and ISO files to the abuse of shortcut files (LNK files) has further evolved to the exploitation of Compiled HTML Help (CHM) files.

Initially designed for structured help documentation, these files can execute JavaScript when opened, making them a potential vehicle for malware distribution.

Anatomy of the Attack

The attack begins with identifying a target, followed by a reconnaissance phase to gain undetected access.

Kimsuky’s latest findings involve CHM files delivered through various containers, such as ISO, VHD, ZIP, or RAR files, which can bypass initial defenses and execute the CHM file.

Rapid7 Labs first identified a suspicious CHM file containing several HTML documents with Korean filenames, which, when translated, revealed topics related to North Korea’s nuclear strategy.

The first scenario in our analysis can be visualized
The first scenario in our analysis can be visualized

The CHM file, created on a Korean language Windows operating system, contained a ‘home.html’ file with a code snippet capable of executing arbitrary commands on a Windows machine using HTML and ActiveX.

CHM file contains the above files and structure
CHM file contains the above files and structure

Base64 Encoded VBScript Execution

The attack involves a multi-step process that includes echoing a Base64-encoded VBScript into a .dat file, decoding it back into a .vbs file using the certutil utility, and modifying the Windows Registry to ensure persistence.

The decoded Base64 value
The decoded Base64 value

The VBScript collects system information, running processes, recent Word files, and contents of specific folders, which are then encoded and exfiltrated to a remote server.

New Campaign Discovered

This C2 server is still active and while we have seen activity since September 2023, we also observed activity in 2024.
This C2 server is still active and while we have seen activity since September 2023, we also observed activity in 2024.

Further investigation led to more CHM files and VBS scripts with similar information-gathering code but with different Command and Control (C2) servers.

This indicates that Kimsuky is actively refining its techniques to gather intelligence from victims.

Another Approach Discovered

HashValue
MD571db2ae9c36403cec1fd38864d64f239
SHA15c7b2705155023e6e438399d895d30bf924e0547
SHA256e8000ddfddbe120b5f2fb3677abbad901615d1abd01a0de204fade5d2dd5ad0d
————-——————-

Using Yara rules based on the characteristics of previously discovered CHM files, Rapid7 Labs identified additional CHM files containing .bat files and VBS scripts with hidden code.

These files, once executed, create persistence scheduled tasks, gather system information, and send it to a C2 server after encoding and zipping the data.

In this particular case, multiple .bat files and VBS scripts are present
In this particular case, multiple .bat files and VBS scripts are present

Attack Prevalence

Rapid7 Labs has confirmed targeted attacks against entities based in South Korea and attributes this campaign with moderate confidence to the Kimsuky group.

The overall flow of this attack can be simplified in this visualization
The overall flow of this attack can be simplified in this visualization

The term “moderate confidence” indicates significant evidence of similarity to past observed activities of the group, with the caveat that there is always a possibility of mimicry.

The Kimsuky group’s ability to adapt and exploit Windows help files is a stark reminder of the evolving landscape of cyber threats.

Organizations must remain vigilant and proactive in cybersecurity to protect against such sophisticated attacks. 

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.


[ad_2]
Source link

19 million plaintext passwords exposed by incorrectly configured Firebase instances

0
[ad_1]

Three researchers scanned the internet for vulnerable Firebase instances, looking for personally identifiable information (PII).

Firebase is a platform for hosting databases, cloud computing, and app development. It’s owned by Google and was set up to help developers build and ship apps.

What the researchers discovered was scary. They found 916 websites from organizations that set their Firebase instances up incorrectly, some with no security rules enabled at all.

One of the researchers told BleepingComputer that most of the sites also had write enabled (meaning anyone can change it) which is bad, and one of them was a bank.

During a sweep of the internet that took two weeks, the researchers scanned over five million domains connected to Google’s Firebase platform.

The total amount of exposed data is huge:

  • Names: 84,221,169
  • Emails: 106,266,766
  • Phone Numbers: 33,559,863
  • Passwords: 20,185,831
  • Billing Info (Bank details, invoices, etc): 27,487,924

And as if that isn’t bad enough, 19,867,627 of those passwords were stored in plaintext. Which is a shame given that Firebase has a built-in end-to-end identity solution called Firebase Authentication that is specifically designed for secure sign-in processes and does not expose user passwords in the records.

So, an administrator of a Firebase database would have to go out of their way and create an extra database field in order to store the passwords in plaintext.

The researchers have warned all the affected companies, sending 842 emails in total. Only 1% of the site owners replied, but about a quarter of them did fix the misconfiguration.

In this case we can consider it a blessing that these researchers managed to get a lot of those instances correctly configured. On the other hand it’s frightening that the rest lives on in a state of insecurity.

If you want to find out how much of your data has been exposed online, you can try our free Digital Footprint scan. Fill in the email address you’re curious about (it’s best to submit the one you most frequently use) and we’ll send you a free report.


We don’t just report on threats – we help safeguard your entire digital identity

Cybersecurity risks should never spread beyond a headline. Protect your—and your family’s—personal information by using identity protection.


[ad_2]
Source link

First smartphone with Snapdragon 8s Gen 3 is now official

0
[ad_1]

The very first smartphone with the Snapdragon 8s Gen 3 processor is now official. The device in question is called the Xiaomi Civi 4 Pro, and it was announced in China.

As you can see in the provided images, the device has flat sides and a flat display. There is a circular camera island on the back, in the top-left corner. Three cameras sit in there, and that module does protrude on the back.

The Xiaomi Civi 4 Pro is the very first smartphone fueled by the Snapdragon 8s Gen 3

You will notice a pill-shaped camera cutout on the front. That cutout is centered, and the bezels around the display are very thin. The phone’s backplate is flat, though it curves towards the frame on the edges.

The Xiaomi Civi 4 Pro features a 6.55-inch 2750 x 1236 OLED display with a 120Hz refresh rate. Its peak brightness is at 3,000 nits, and it supports HDR10+ content and Dolby Vision. 2,160Hz PWM dimming is also a part of the package.

The Snapdragon 8s Gen 3 fuels it, of course. Xiaomi included 12GB/16GB of LPDDR5X RAM here, and 256GB/512GB of UFS 4.0 flash storage. HyperOS comes pre-installed, while there are two nano SIM card slots included here too.

It supports 67W charging, and features an IR blaster at the top

A 4,700mAh battery sits inside the phone, and 67W wired charging is supported. The phone has an in-display fingerprint scanner, an optical one. An IR blaster sits at the very top of the phone.

A 50-megapixel main camera (Light Fusion 800 sensor, f/1.63 aperture, Hyper OIS, Leica Summilux lens) is backed by a 12-megapixel ultrawide unit (120-degree FoV, f/2.2 aperture, OmniVision OV13B10 sensor), and a 50-megapixel telephoto camera (2x optical zoom, f/1.98 aperture, OIS, Samsung JN1 sensor).

On the front, you’ll find a 32-megapixel main camera and a 32-megapixel secondary unit. One of them uses an OmniVision sensor, and the other a sensor from Samsung’s ISOCELL. The viewing angles are 78 degrees and 100 degrees, respectively.

It supports Bluetooth 5.4 and comes in four colors

The company did include a set of stereo speakers here, and Dolby Atmos support as well. Bluetooth 5.4 is supported, as is 5G connectivity.

The Xiaomi Civi 4 Pro comes in Sprpint Wild Green, Soft Mist Pink, Breeze Blue, and Starry Black colors. You can check them all out below. The pricing starts at CNY2,999 ($416) in China. Chances are that this phone will stay exclusive to China.


[ad_2]
Source link

Qualcomm intros Snapdragon 7+ Gen 3 with generative AI

0
[ad_1]

Qualcomm has officially announced the latest mobile platform in its Snapdragon 7 series, the Snapdragon 7+ Gen 3, which is poised to power the next generation of mid-range smartphones and drive the possibilities of on-device AI functions.

With deep integrations of generative AI capabilities, the Snapdragon 7+ Gen 3 is set up to deliver some exciting AI innovations for upcoming devices. Notably with support for multiple AI models including Large Language Models like Baichuan-7B, Llama 2, Gemini Nano, and Zhipu ChatGLM.

The Snapdragon 7+ Gen 3 will also be the first in the lineup to support Wi-Fi 7 technology. Further enhancing devices that use this mobile platform when it comes to ultra-fast wireless connectivity capabilities. “Snapdragon 7+ Gen 3 is packed with support for incredible on-device generative AI features and provides incredible performance and power efficiency while bringing Wi-Fi 7 to the Snapdragon 7 Series for the first time,” said Chris Patrick, senior vice president and general manager of mobile handsets at Qualcomm Technologies.

Wi-Fi 7 is still very new and there won’t be a lot of support for it just yet. But it promises tons of benefits over Wi-Fi 6 and Wi-Fi 6E. Including big boosts to speed. For mobile devices, the benefits of Wi-Fi 7 support are potentially just as vast. But one notable benefit of it is the improvements it can make to cloud gaming. Cloud gaming is something you would likely do a lot from your phone. Since it’s sort of the best use case for it right now. So, the inclusion of Wi-Fi 7 support is going to be great for phones running on this mobile platform. Though that’s hardly where it’ll end.

OnePlus will be one of the first smartphone brands to adopt the Snapdragon 7+ Gen 3

The Snapdragon 7+ Gen 3 will be a boon for mid-range devices. But it’s not yet clear which devices will be using this mobile platform. Qualcomm does, however, confirm some of the brands you’ll see picking it up. OnePlus will be one of the first brands to use the Snapdragon 7+ Gen 3, alongside other manufacturers like Realme and SHARP. Qualcomm says the first device to use this mobile platform will be announced in the next few months, but it’s staying tight-lipped about who the device comes from.

The chipset delivers a notable boost to photography and performance

View of pink flowering trees in park during autumn,Nami Island,South Korea

Qualcomm doesn’t delve too much into the specifics here but the Snapdragon 7+ Gen 3 does deliver some performance boosts. It’s tough to say if end users will notice these improvements. But they are there and chances are some consumers will pick up on it. Qualcomm says the Snapdragon 7+ Gen 3 has a 15% boost to CPU performance so usage on devices that have this chipset should feel snappier to the user.

Where performance boosts might be more noticeable is with any sort of tasks that are dependent on the GPU. Such as gaming. Because Qualcomm states there’s a 45% boost to GPU performance. The platform also delivers “top-notch photography features” with a little help from the generative AI capabilities, as well as support for spatial audio and LE audio. Overall any devices running on this platform are likely to be pretty decent. At least where the computing power is concerned.


[ad_2]
Source link

Epic is bringing its Games Store to iOS and Android platforms

0
[ad_1]

One of the biggest digital distribution online stores, Epic Games Store, is coming soon to iOS and Android platforms. The announcement was posted earlier today on Twitter in the form of a teaser, but no additional details were provided by Epic Games Store’s official account.

And since we’re talking about a distribution store, Epic couldn’t miss the chance to take a jab at Apple. The teaser claims that the upcoming Epic Games Store for mobile devices will offer “same fair terms, available to all developers, on a true multi-platform store – with amazing games for everyone.”

Epic and Apple have been trading blows over App Store fees for many years. The culmination of the conflict between the two giants peaked when Apple decided to remove Fortnite from the App Store.

Even after EU’s Digital Markets Act entered into force early this month, Apple defied the new regulations and removed Epic’s account from its store. Although the account was reinstated after a few days (and an expensive bill in the form of a €2 billion fine), it seems that Apple continues to play by its own rules.

Currently, Apple’s App Store and Google’s Play Store are the biggest, most popular app stores for Android and iOS devices, but a third alternative is definitely a good thing for developers, especially if the Epic Games Store will have lower fees than the other two.

[ad_2]
Source link