Google Play Store to get AI Collections, app previews, and more

0
[ad_1]

Google is adding multiple new features to the Android Play Store. The search giant has claimed it is the beginning of a fundamental transformation for the app store.

Google Play Store getting new AI features

Google has announced that the Android Play Store is transforming into a much bigger and customizable ecosystem. Android device owners will soon experience a new app store that extends way beyond a marketplace for apps, games, and services.

Google had hinted at the Play Store’s new AI features earlier this year. The company had indicated it was infusing its Artificial Intelligence (AI) into the Android app store.

Moving forward, AI will help combine, analyze, and display app reviews along with easy-to-read highlights for apps. Moreover, AI will also help users compare apps in similar categories.

Google’s backend system will now offer “curated spaces” called “Collections” where Android device users will be able to find apps based on their interests. In other words, Google Play Store will attempt to provide a virtual island that helps users find apps around a single subject.

A new “Personalization in Play” is now part of the main menu. There are new controls that Android device users can tweak to tailor their Play Store features and experience. Specifically, the new setting will reportedly allow users to manually select and deselect app data they want to grant or disallow access to the Google Play Store.

Google betting big on gaming

Android smartphone users will be able to multi-select interest filters, allowing them to specify their preferences before searching for a new game. This should help users quickly search apps and games around their favorite genre instead of wasting time scrolling through endless app charts.

Google Play Games users on PC will now be able to play multiple games at the same time, and that too on different devices. Players could be gaming or “actively competing in one while keeping an eye on resources in another,” explained Google.

Additionally, Google is doubling down on the Play Points reward program. The company has added “super weekly prizes,” which are available to gold, platinum, and diamond members. Gamers could win Pixel devices, Razer gaming products, and other hardware. These prizes will alter weekly, and gamers can claim them from the Play Points perks tab.


[ad_2]
Source link

Govee announces limited Evangelion gaming lights

0
[ad_1]

Get these gaming lights Shinji

Govee is one of the premiere RGB smart lighting companies and today it has just announced a limited edition set of Evangelion gaming lights. It’s not uncommon to see companies do collaborations with pop culture franchises, especially popular ones like Evangelion that have captivated fans around the world for decades. The Govee x Evangelion Gaming Lights “combines Evangelion’s epic storytelling with Govee’s advanced lighting technology to provide new hardware for gamers looking to embrace their own unique interest and connection to their gaming atmosphere” Govee says.

There’s really only one thing to consider here with these lights. If you’re a gamer and a fan of Evangelion, then you’ll want to know when you can pick them up. The answer to that is technically this week, as Govee put them up for pre-order this morning. However, it appears that stock for pre-orders has already been depleted on both Amazon and the official Govee store. That being said, the official launch of these lights will be on July 29. So you’ll have a chance to buy them next Monday when the launch goes live.

With how quickly the pre-orders went out of stock though, you probably don’t want to wait once the launch happens. In short, be ready to grab them immediately. Because there’s a very good chance that the launch stock will go just as fast.

There are three Govee x Evangelion Gaming Lights products in the collection

Whether you want to add to your current lighting setup or start building it from the ground up, these new Evangelion Gaming Lights from Govee fit in quite nicely with both scenarios. There are three different products in the collection and each adds a specific element to the ambiance for your gaming setup. First, there’s the Gaming Light bars. These are designed to sit on your desk on the left and right sides of your monitor. They also come with a smart controller to adjust brightness, colors, and enable the music mode. The smart controller can also turn the lights on and off.

The other two products are the Evangelion Glide Y Lights, and the Evangelion Gaming Wall Light. All three of these have an Evangelion-themed design to add to the allure. So you can dress up your gaming setup to have that mecha style that you may have always dreamed of. What’s really cool about the lights, other than the Evangelion theme, is that they can all connect with Govee’s DreamView software. This allows all of the lights to sync up for a more immersive lighting experience during gameplay. This would be similar to how the synced lighting works with the Nanoleaf 4D and Nanoleaf’s Shapes panels.

What’s more, is that each lighting product has 8 special Evangelion-themed lighting effects. These effects are designed to “replicate the complete battle sequence” with effects for things like alert modes and Berserk status. There are also themes for both the EVA-01 and EVA-02 mechas. The Glide Y Lights and the Gaming Wall Lights are modular too. So you can expand on them and add more to the configuration if you want a larger lighting setup that engulfs the entire space.

Pricing starts at $90

Govee’s RGB smart lights tend to be pretty affordable compared to other options, and that doesn’t really change here. However, they are a little more expensive than some of Govee’s other options. The Evangelion Gaming Light Bars will retail for $90. That’s not too bad if you look at similar lighting products from other brands. Meanwhile, the Evangelion Glide Y Lights come in a 5-pack and will retail for $180. The Evangelion Gaming Wall Lights will retail for $200 making them the most expensive product in the collection.

In total, it’ll cost you $470 if you want to pick one of each. It also gets considerably more expensive if you want to add more Glide Y Lights or Gaming Wall Lights to complete a larger setup. Still, it’s a pretty unique set of products and all the standard RGB lighting effects and features you get in addition to the special Evangelion-themed ones make these hard to pass up. You can pick them all up on Amazon starting July 29 and at the Govee online shop on the same day. Assuming there are any left when you go to place an order.


[ad_2]
Source link

The Ultimate PDF Editing Tools for Students and Professionals

0
[ad_1]

PDFs have become essential for studying and work because of how easily we get and share information. They are used everywhere, from schools to offices, for things like books, papers, plans, and resumes. But to really make the most of PDFs, you require a powerful yet easy-to-use PDF editor. Lumin is here to change the way you use PDFs. It doesn’t matter if you’re a student with lots of homework, a researcher looking into detailed documents, or a teacher making lesson plans — Lumin gives you all the tools you need to make your work easier, work better with others, and keep your information safe.

Intuitive interface, seamless experience

Navigating complex software can feel like an insurmountable obstacle when deadlines loom. Lumin understands this and offers a refreshingly simple solution: an intuitive interface designed for users of all levels. This easy-to-use online PDF editor features a clean layout, logically organized tools, and a user experience that prioritizes efficiency.

Lumin’s intuitive design shines in making PDF editing accessible to everyone. Whether you are a digitally adept graduate student or a professor just starting to explore digital tools, navigating the tool is a stress-free experience. Quickly highlighting essential parts of a research paper using the online PDF highlighter is effortless. Are you eager to insert comments on a colleague’s thesis draft? It’s straightforward and hassle-free.

Crafting brilliance: Unparalleled editing capabilities

Lumin is your digital workshop for creating and refining documents. A comprehensive suite of tools empowers you to:

  • Edit PDFs with precision: Easily modify existing text within PDFs, add new paragraphs to expand your ideas, adjust formatting for a polished look, or simply correct those pesky typos.
  • Fill and sign PDFs securely: Complete forms, add your online PDF signature, or request signatures from others, all within a secure and user-friendly environment.
  • Annotate and collaborate: Enhance your documents with insightful notes and feedback. Highlight important passages, add comments, or draw directly onto the PDF using the PDF annotation tool. This is a game-changer for collaborative projects and research.
  • Convert and optimize: Easily convert PDF files to and from Word or Excel for easy editing and sharing. Need to send a file but are worried about its size? Lumin’s compress PDF feature reduces file size without compromising quality.
  • Digitize and transform: Lumin’s advanced OCR PDF (Optical Character Recognition) capabilities transform scanned documents or images into editable, searchable text. This opens up a world of possibilities for researchers and students working with archival materials or textbooks.

Illuminated integration: Bridging your digital world

Educational institutions and businesses rely heavily on cloud storage solutions like Google Drive and Dropbox. Lumin smoothly integrates with these platforms, allowing you to access, edit, and save your PDFs directly from the cloud. This means your documents are always up-to-date and accessible from any device, no matter where you are.

If you’re working on a group project, such as a research paper or a collaborative presentation, you can leverage Lumin’s real-time co-editing feature. This allows multiple users to work on the same document simultaneously, fostering efficient teamwork and eliminating version control issues.

Collaborative constellation: Enhancing team dynamics

Collaboration is at the heart of academic and professional success. Lumin embraces this with a suite of features designed to enhance teamwork and facilitate communication:

  • Circles: Create shared workspaces within Lumin for specific projects or teams. This allows for organized document sharing and efficient communication.
  • Commenting and annotations: Provide feedback, ask questions, or highlight key points directly within the PDF. Use the mention feature to tag colleagues and ensure nothing gets overlooked.
  • Shared folders: Create shared folders within Lumin to keep your collaborative projects organized and accessible to all team members.

Fortified security, ensuring peace of mind

Protecting your intellectual property and sensitive data is crucial. Lumin takes security seriously, implementing robust measures to safeguard your documents and information:

  • Encryption: Lumin employs strong encryption to protect your PDFs both in transit and at rest, shielding your data from unauthorized access.
  • Privacy controls: With granular permissions settings, you can control who has access to your documents, allowing you to share files securely with collaborators or clients.
  • Password protection: Add an extra layer of security to sensitive documents by requiring a password for access.

Guiding light: Dedicated support and resources

The Lumin team believes exceptional customer support is as important as a robust product. Their team is readily available to answer your questions and troubleshoot any issues you may encounter with our editing PDF for free software.

But this goes beyond just reactive support. We’ve invested in building a comprehensive knowledge base that serves as a treasure trove of information. Here, you’ll find detailed tutorials, step-by-step guides, and answers to frequently asked questions on a wide range of topics, from basic editing functions to advanced collaborative workflows. We’re constantly updating this resource to ensure you have access to the most relevant and helpful information.

Conclusion

Lumin is an investment in your academic or professional journey, as it provides a springboard for growth. For students, Lumin’s OCR (Optical Character Recognition) technology is a game-changer. It converts scanned documents or images into editable, searchable text, making it easier to work with archival materials or integrate quotes from textbooks into research papers. This capability saves time and enhances the quality of academic work by enabling more thorough analysis and citation of sources.

Professionals, on the other hand, will find Lumin’s collaborative features particularly beneficial. The ability to annotate documents, add comments, and even request digital signatures simplifies the revision process and facilitates more transparent communication among team members. Whether you’re working on a collaborative presentation or sharing feedback on a project plan, Lumin’s tools ensure that everyone is on the same page, thereby enhancing teamwork and improving project outcomes.


[ad_2]
Source link

Google’s Pixel 9 Pro Fold is getting a larger 6.24-inch Outer Display

0
[ad_1]

Next month, we’re expecting Google to finally take the wraps off of the Pixel 9 Pro Fold. Even though they’ve already teased it in a video a few weeks ago. This time around, Google is looking to go with a taller cover display, which is going to change the aspect ratios of both displays.

According to Android Authority, the Pixel 9 Pro Fold is going to sport a 6.24-inch display, at a resolution of 2,424 x 1080. Versus the 5.8-inch 2,092 x 1080 resolution of the original Pixel Fold. It is also getting a much needed brightness boost, now at 1,800 nits of brightness for HDR content – which means peak brightness is likely even higher.

The main display is also changing, and will now be an 8-inch display with a resolution of 2,152 x 2,076 and a brightness boost of up to 1,600 nits for HDR. This is a tiny bit larger, and closer to being a square, much like many other foldables.

aaa2 840w 472h png

Google’s making the OnePlus Open

Based on what we have seen so far, it really sounds and looks like Google is making the Pixel 9 Pro Fold much more like the OnePlus Open (or OPPO Find N3). And I’m perfectly fine with that. The OnePlus Open is an insanely good foldable, even a year later. The screen sizes are a tad different between the OnePlus Open and Pixel 9 Pro Fold, so it’s not quite a carbon copy, but close enough.

Now with these changes, Google is also changing how many of us use your foldable – if we’ve only used a Pixel Fold. Because of the short and wide cover display, when you opened the Pixel Fold, it was more of a landscape tablet, which means you were already in tablet mode for apps that supported it. Versus other foldables that require you to rotate the phone to get into tablet mode.

We should know more about the Google Pixel 9 Pro Fold come August 13, when Google is expected to announce the entire Pixel 9 lineup. Which includes the Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL and Pixel 9 Pro Fold.


[ad_2]
Source link

How AI is Changing the Game

0
[ad_1]

In today’s world, as it globalizes, video content creators are under increasing pressure to make their creations available to an ever more diverse international audience. It is now much easier to translate videos with the advent of technology mayflies and Artificial Intelligence (AI) rising. We no longer speak of it as being a difficult or hard task. Innovative tools powered by AI, like the Rask AI Platform, are leading the way in this changed scene.

Video creators can, therefore, extend social media by giving their material actual global reach. Through such platforms, a lot of different features are supported: real-time translation, many video platforms, and localizing videos into multiple languages. This happens most strikingly through these functions, which enable creators to overcome language barriers and reach out to a variety of linguistic and cultural communities around the world.

Best Video Translation Apps

Here is the original list of top AI-driven video translation tools, which are aimed at helping content creators bring their video content to the world. These online video software options are based on the latest new techniques in neural networks and designed right from the metal up to do a full translation that is authentic and fast.

Accurate video translation software like these translation apps can make sure that your audio and video content are both identifiable and understandable for listeners anywhere in the world all in any lingual context it’s being received. On this list, all video translator apps offer some unique form of special service (or at least a unique peeking feature) that enables creators to handle their video content soundly with ease.

The Rask AI Platform: A Pioneer in AI Video Translation

AI

As for the Rask AI Platform, it is the pioneer in video translation technology. Relying on the most skilled AI, this tool will help preserve video translation that looks perfectly fine. Its annealing innovation bridge makes a new connection for the video-translating content creator and his global clientele. This is the best video translator platform. The program does not only automatically translate subtitles expertly into a variety of languages. It also composes in those same languages and presents what are possibly accurate renditions.

By installing Rask AI, the best video translator software, for those who test to see where their videos are instantly translated into another language and given back quickly. It has a friendly interface and works very fast. You can upload videos from any source, let the app know what language you want them translated into and in just a few clicks will have translated subtitles ready for you. It is easy to use and is available now. For further information, please click here!

Auto AI Translator

The market-leading Auto AI video translator is focusing on bringing real-time translation to live content. In an environment like this, where the noise level is so high that you cannot hear what people are actually saying at all, along with the world’s most advanced text-to-speech recognition technology, the machine is able to accurately identify voices or map sound into characters.

Naturally, when it comes to live events it need hardly be said that this is indispensable. It’s machine translation technology, based on the most advanced neural networks that are able to comprehend different dialects and intonations. The new level of technology changes the game entirely for broadcasters and content providers worldwide who need fresh, translated solutions immediately at any time.

In addition, Auto AI Translator includes functions of automatic speaker recognition and contextual understanding to try to ensure the flow and clarity of subtitles in a fast-paced live interaction.

VideoTranslate

As well as doing transcriptions and translations, VideoTranslate provides a full range of service packs, which are all matters needed by global content creators. It is also an added convenience for businesses that produce a lot of content, in particular, because this function allows for single-button batch translating, effectively saving labor and waiting time.

When VideoTranslate works with speech recognition and machine translation to match the dubbing tracks with the original voiced source record video, viewers listening to translated video and audio can enjoy a seamless experience. The interface is user-friendly, making all those people who’ve never done video translation feel they get to grips at once.

Translate Your World

Translate Your World is an online video editor that is specifically tailored for real-time interpretation of live speech and webinars. It translates into more than 100 different languages altogether. With real-time speech translation that can be streamed to audiences all over the globe, as a speaker and audience member, the whole world translates with you! The real-time interpretation device employing advanced AI technology and a minimal delay works great for international conferences or educational lectures.
As Internet speeds continue to increase all around the world, everyone now has good broadband. Whether you have a slow or high-speed modem, as long as you can directly access the internet, TYW will offer a perfect translation globally. Furthermore, Translate Your World has interactive features that help the live users feel more “live”: real-time speaking, switching to another language, and feedback instruments for people who are not sitting in the audience but rather at home or in a classroom. This video translator also lets you adjust subtitles. Namely, organizers can set font size and color groups.

The Impact of AI on Video Translation

Labor-intensive manual input for video translation is now a thing of the past because artificial intelligence makes such work much more efficient than any human ever could. AI, which translates video by using the soundtrack itself as audio content can, working at utmost efficiency if not accuracy only, extract words spoken (but in text form). Through this function, broadcasts around the world can be instantaneously translated and make updates widely available to a global audience.

Using artificial intelligence technology leads not only to faster but better quality translations. Through continual learning and incremental improvement by AI models, they now possess a deep understanding of nuance in language and idiomatic expressions, as well as cultural background. The result is translations much closer to what the author originally meant than you would otherwise expect.

Further, AI provides a means of maintaining consistency in terminology and style across a large database of materials, such as native language resources and glossaries for media use or teaching and learning purposes. With AI-based video translation tools gaining popularity, even smaller creators and companies are now able to afford multilingual content creation.

Challenges and Future Prospects for AI Video Translation

The incorporation of AI in audio and video translation also carries with it more drawbacks. A prime example of this is that in each language, folks tend to imply a wealth of detail: differences in dialect, in accent, in a large context such as the culture where an expression was made.
In order for translation to be both accurate and sensitive to culture, the desire for such detail must depend on efforts. Furthermore, the strengths of AI translation are inevitably diminished by technical limitations such as background noise and whether there are two speakers speaking at the same time.

How do we meet the challenge in such situations? The future looks promising for video translation with AI. These advances are aimed at reducing as far as possible the need for human participation and giving more autonomy to machine translation systems.

Best Video Translation Tools: Conclusion

As digital connections between cultures grow, the demand for video translation services can only increase. Video translator apps like Rask AI Platform have been at the front of this sea change. They can help social media video creators and even consumers knock down language barriers to make communication more effective. As AI technology continues to advance, the future of video translation online tools is boundless. We might expect a day when video content is available to everyone worldwide on equal terms and speaks the same language as its audience.


[ad_2]
Source link

BlueStacks Emulator For Windows Vulnerability Exposes Millions Of Gamers

0
[ad_1]

A significant vulnerability was discovered in BlueStacks, the world’s fastest Android emulator and cloud gaming platform. When used against a victim, this gives attackers complete access to the machine.

The American technology business BlueStacks, also known as BlueStacks by now.gg, Inc., is well-known for developing the BlueStacks App Player and other cloud-based cross-platform applications.

The BlueStacks App Player allows Android applications to run on devices running Microsoft Windows or macOS. 

BlueStacks exchanges virtual machine configuration files amongst several OS users and keeps them in a world-writable directory, which makes it feasible for an unauthorized user to backdoor an image and obtain privileged user code execution capabilities.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

Understanding The Vulnerability

The critical flaw is identified as BlueStacks privilege escalation via virtual machine backdooring tracked as CVE-2024-33352.

An attacker can automatically add executable code to the virtual machine by changing the BlueStacks configuration.

This allows the attacker to create a backdoor that will launch whenever an authorized user launches the emulator. 

Later, the code may be made to escape Virtual Box and enter the host operating system by reconfiguring the shared directory settings to include the entire C drive.

The attacker would edit the file on the C drive and alter it to enable a virtual machine escape, giving them complete access to the Windows filesystem.

Hence, the attacker installs malicious software on the Android virtual machine (VM), which has the ability to deliver a payload into the host system’s startup directory. 

This payload is run with the victim’s privileges when the victim restarts their computer, granting the attacker complete control.

The vulnerability was brought to light by researcher Maciej Miszczyk. BlueStacks for Windows (versions prior to 10.40.1000.502) are affected.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo


[ad_2]
Source link

Check out all 3 Google Pixel 9 smartphones in this Latest Leak

0
[ad_1]

We are now less than three weeks away from Google’s upcoming Pixel launch, which is currently set for August 13 in Mountain View, California. This means the leaking faucet that is Google is in overtime now. This morning, Evleaks posted a render showing off the Pixel 9, Pixel 9 Pro, and Pixel 9 Pro XL side-by-side, which can really show us how thin the bezels are on these new phones. And the answer is, very thin.

It’s a low-resolution render, so we can’t see a whole lot on this one, but it does match up the very many other leaks we’ve seen. As well as real life video and pictures that we’ve seen lately. From here we can see that the Pixel 9 is the same size as the Pixel 8, with the Pixel 9 Pro also being that same size. And then there’s the Pixel 9 Pro XL which is the same size as the 6.7-inch Pixel 8 Pro.

This is a new strategy for Google this year, offering two “Pro” slab phones this year in different sizes, which is similar to what Apple does. They offer two different iPhones and then two different sizes of each. This is also likely going to be a way for Google to up the price once again, at least on the Pixel 9 Pro XL. Although, the Pixel 9 Pro could also sit nicely in between the two models, price-wise.

GTQ2m9xXgAAdEAK

Google is finally giving everyone a flagship, small phone

While not as small as some would like, the Pixel 9 Pro is going to be a hot seller for being a flagship small phone. The only other competition there is, is the Galaxy S24. With this phone, we’re going to see a triple camera setup on the rear, and with Google’s computational photography, that should be incredible. It will also sport the Tensor G4 chipset, which we are hoping for some big performance and efficiency gains this year.

We’re likely to see many more leaks of the Pixel 9 series in the coming days and weeks, as Google’s event is still a little less than three weeks away. And we all know how good Google is at keeping a lid on leaks.


[ad_2]
Source link

iPhone 18 series may use a new Samsung’s camera sensor

0
[ad_1]

Apple could change its strategy regarding the camera supplier for its iPhone devices. The Cupertino giant has been working exclusively with Sony in this section for years. However, a new report suggests that Samsung will become a new iPhone camera sensor supplier for Apple in the coming years.

Ming-Chi Kuo, a renowned industry analyst, posted on X/Twitter that Apple and Samsung already have an agreement for an advanced camera sensor. Samsung would even have already established a team exclusively dedicated to development.

Samsung to ship the new iPhone camera sensor in 2026

According to the report, it will be a “1/2.6-inch 48MP ultra-wide CMOS” sensor. The post specifically mentions that it will be an “ultra-wide” sensor, something that also reflects its size. For reference, the iPhone 15 Pro Max ultra-wide sensor has a size of 1/2.55″, slightly larger than the leaked one.

So, it’s possible that Apple will turn to Samsung for a new advanced ultra-wide lens, but continue to collaborate with Sony for the main sensor of its iPhone devices. Be that as it may, the news would be a hard blow for Sony, which would lose some presence in tens of millions of iPhone devices annually. Currently, the Japanese company monopolizes the entire camera system of iPhone devices. However, now Samsung could join the equation by bringing the ultra-wide sensor.

Samsung would start shipping the new camera sensor in 2026, so Apple could implement it in the iPhone 18 series. Kuo’s report does not offer additional details about Apple’s reasons for the change in strategy. However, Sony has been losing some ground in some flagship mobile devices in recent years. For example, brands like Xiaomi or Huawei have used Omnivision sensors in their high-end devices. In any case, the Xiaomi “Ultra” lineup still trusts Sony for its main camera.

Perhaps the change in strategy is due to the fact that Apple plans to incorporate new image technologies and only Samsung was capable of doing so. It is also possible that the company is optimizing costs. Be that as it may, more details may emerge in the future.


[ad_2]
Source link

Chinese Hackers Using Shared Framework To Create Multi-Platform Malware

0
[ad_1]

Shared frameworks are often prone to hackers’ abuses as they have been built into various applications, which offer a range of systems that can be exploited at the same time.

By attacking shared framework vulnerabilities, hackers can get into many apps and information stores, which escalates their malicious acts in terms of efficiency and scale.

Cybersecurity researchers at Symantec recently discovered that Chinese hackers have been actively abusing the Shared Framework to create Windows, Linux, macOS, and Android malware.

Chinese Hackers Using Multi-Platform Malware

The malware toolkit of the Daggerfly espionage group has been refreshed by adding new versions of already known threats and a previously unattributed macOS backdoor.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

The latest attacks against the targets in Taiwan and a US NGO in China are examples of how the group’s tactics have evolved, including the exploitation of an Apache HTTP Server vulnerability.

This development shows that Daggerfly continues to evolve and remains involved in international and domestic spying operations, extending its decade-long history in the cyber field.

Macma is a macOS backdoor that was first documented in 2021. It has been active since 2019 and is continuously developing.

Watering hole attacks in Hong Kong were the initial distribution channels through which it exploited loopholes to install itself into macOS devices.

According to a recent Symantec analysis of different Macma variations, its functions change meaningfully with time, consequently comprising newly updated modules, improved file paths, heightened logging, and other features such as better screen-capture capabilities.

These ongoing developments depict a relentless threat by the Macma backdoor, which has a proven ability of targeting macOS systems.

New evidence links the Macma macOS backdoor to the Daggerfly threat group. Symantec discovered shared command-and-control infrastructure between Macma variants and a MgBot dropper. 

While Macma and other known Daggerfly malware share code from a common library, which provides functionality across multiple platforms. 

This shared codebase and infrastructure strongly suggest that Macma is part of the Daggerfly toolkit, marking a significant development in attributing this previously unaffiliated backdoor to a specific advanced persistent threat group.

Daggerfly’s toolkit now includes a sophisticated Windows backdoor called Suzafk (aka Nightdoor or NetMM). 

This multi-staged malware uses TCP or OneDrive for command and control, employs anti-analysis techniques, and shares code with other Daggerfly tools. 

Suzafk’s capabilities include remote command execution, persistence via scheduled tasks, and encrypted configuration storage. 

This addition, along with evidence of malware targeting various operating systems, including Android and Solaris, demonstrates Daggerfly’s advanced capabilities and adaptability in conducting espionage activities across multiple platforms.

IoCs

IoCs (Source – Symantec)

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo


[ad_2]
Source link

TracFone will pay $16 million to settle FCC data breach investigation

0
[ad_1]

Following three separate data breaches between 2021 and 2023 which exposed the proprietary information (PI) of TracFone Wireless customers, the Federal Communications Commission (FCC) announced that the Verizon-owned company has agreed to pay a $16 million civil penalty to settle the government investigation, and it has made an agreement to improve its application programming interface  (API) security.

TracFone Wireless Inc. is an American prepay wireless service provider wholly owned by Verizon. TracFone services are used by the brands Straight Talk, Total by Verizon Wireless, and Walmart Family Mobile.

The settlement ends an investigation into TracFone’s security practices to uncover whether the breaches were the result of ineffective cybersecurity protocols. The Enforcement Bureau (EB) of the FCC found that cybercriminals gained access to certain TracFone customer information, including PI and customer proprietary network information (CPNI), by exploiting vulnerabilities related to customer-facing APIs.

APIs allow different computer programs or components to communicate with one another. When the security behind the APIs is not secure enough, cybercriminals can abuse them to gather information without authorization.

The FCC media release explains in detail that it is possible to leverage numerous APIs to access customer information from websites. And according to the FCC’s own Enforcement Bureau, that is exactly what happened at TracFone.

In addition to the civil penalty, the FCC secured extra assignments for TracFone in the Consent Decree:

  • TracFone has to deploy a mandated information security program, with novel provisions to reduce API vulnerabilities in ways consistent with widely accepted standards, like those identified by the National Institute of Standards and Technology (NIST) and the Open Worldwide Application Security Project (OWASP).
  • TracFone must improve protection measures against SIM-swapping. SIM swapping (and the very similar port-out fraud) is the unlawful use of someone’s personal information to steal their phone number and swap or transfer it to another device. With this, criminals can intercept calls, messages, and certain multi-factor authentication (MFA) codes.
  • TracFone has to undergo annual assessments—including by independent third parties—of its information security program.
  • Employees and certain third parties are to receive privacy and security awareness training.

The Enforcement Bureau reported to the FCC that:

“After gaining access to customer information during one of the three breaches, the threat actors completed an undisclosed number of unauthorized port-outs.”

 All this occurs as the FCC has continued a mission against SIM-swapping.

Protecting yourself after a data breach

There are some actions you can take if you are, or suspect you may have been, the victim of a data breach.

  • Check the vendor’s advice. Every breach is different, so check with the vendor to find out what’s happened and follow any specific advice they offer.
  • Change your password. You can make a stolen password useless to thieves by changing it. Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you.
  • Enable two-factor authentication (2FA). If you can, use a FIDO2-compliant hardware key, laptop or phone as your second factor. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished.
  • Watch out for fake vendors. The thieves may contact you posing as the vendor. Check the vendor website to see if they are contacting victims and verify the identity of anyone who contacts you using a different communication channel.
  • Take your time. Phishing attacks often impersonate people or brands you know, and use themes that require urgent attention, such as missed deliveries, account suspensions, and security alerts.
  • Consider not storing your card details. It’s definitely more convenient to get sites to remember your card details for you, but we highly recommend not storing that information on websites.
  • Set up identity monitoring. Identity monitoring alerts you if your personal information is found being traded illegally online, and helps you recover after.

Check your exposure

You can verify whether your information is available online due to data breaches by using the Malwarebytes Digital Footprint portal. Just enter your email address (it’s best to submit the one you most frequently use) to our free Digital Footprint scan, and we’ll give you a report. For those whose information was not included, you’ll still likely find other exposures in previous data breaches.


We don’t just report on threats – we help safeguard your entire digital identity

Cybersecurity risks should never spread beyond a headline. Protect your—and your family’s—personal information by using identity protection.


[ad_2]
Source link