Fashion meets functionality in 2024

andreasc
-
0
Fashion meets functionality in 2024
[ad_1]

Have you ever wondered if your accessories could do more than just complement your outfit? Welcome to 2024, where wearable technology isn’t just about smartwatches or fitness trackers; it’s a fashion statement, a health monitor, and a tech gadget, all rolled into one stylish package.

Trendsetting in Tech and Fashion

This year, we’re seeing an exciting trend where technology meets haute couture. Imagine smart rings that not only track your fitness but are designed as statement pieces that complement your everyday style. These pieces are more than gadgets; they’re part of your personal style. But it’s not all about looks. These gadgets are revolutionizing how we interact with technology. They monitor our health, track our fitness goals, and even help us stay connected in the most unobtrusive way. However, as we embrace these cutting-edge gadgets that seamlessly blend into our lifestyle, it’s crucial to use a CyberGhost VPN to safeguard our personal data and enhance the security of our tech accessories, ensuring our digital interactions remain private and protected.

Health at Your Fingertips

One of the most significant aspects of wearable tech in 2024 is its focus on health and wellness. With advanced sensors, these fashionable gadgets keep an eye on your vital signs, encourage you to stay active, and even help manage stress. It’s like having a personal wellness coach always with you.

The Oura Ring: Wellness on Your Finger

Take the Oura Ring, for instance. This elegant piece of jewelry is more than just a ring; it’s a sophisticated health tracker. It monitors your sleep, activity, and even your body temperature, providing insights into your overall well-being, all while looking like a stylish accessory that complements any outfit. One of the standout features of the Oura Ring is its sleep analysis. It doesn’t just track the duration of your sleep; it analyzes the quality, including REM and deep sleep stages. By understanding your sleep patterns, you can make adjustments to improve your sleep quality, which is essential for overall well-being.

Apple’s Vision Pro Headset: A New Frontier

The imminent release of Apple’s Vision Pro headset has everyone talking. This device is not just a step forward in wearable tech; it’s a leap into the future. At the heart of the Vision Pro headset are its advanced Augmented Reality (AR) capabilities. Imagine overlaying digital information onto the physical world — from immersive gaming experiences to real-time navigation overlays and interactive learning environments. Whether it’s for professional use, like virtual meetings and 3D design visualization, or personal use, like interactive fitness sessions and social media browsing, the headset is versatile. Its applications are diverse, catering to both the tech-savvy and those new to AR technology.

Smart Glasses Showdown at CES 2024

The wearable tech spotlight was on smart glasses at CES (the Consumer Electronics Show) 2024. Companies like Xreal and RayNeo stole the show with their cutting-edge designs. Xreal teamed up with Qualcomm to enhance the tech behind their glasses, offering consumers high-quality, immersive augmented reality experiences and seamless connectivity, transforming how users interact with the digital world. RayNeo’s ultralight smart glasses combine comfort with functionality, providing users with a stylish, wearable tech experience that integrates digital information into their daily lives.

Garmin Lily 2: Elegance Meets Tech

The Garmin Lily 2 builds upon its predecessor, the original Garmin Lily, with several key enhancements. While retaining its “petite and fashionable” design, the Lily 2 introduces advanced health and connectivity features, catering to users who seek both style and increased functionality in their wearable tech. This evolution makes the Lily 2 a more versatile and user-friendly smartwatch, blending fashion with new, sophisticated technological capabilities.

Mojawa’s Bone Conduction Headphones: A Personal AI Trainer

Mojawa is taking fitness tech to the next level with their new bone-conduction headphones. These aren’t just for listening to music; they come with an AI sports trainer designed to enhance your training sessions. This personal trainer in your ear provides real-time feedback and motivation, pushing you to achieve your fitness goals.

GyroGlove: A Beacon of Hope

Perhaps one of the most heartwarming advancements in wearable tech is the GyroGlove. Designed for individuals suffering from Parkinson’s, this glove offers a chance to regain some independence. Its innovative technology stabilizes hand tremors, allowing users to perform daily tasks with greater ease and confidence.

The Future is Wearable

As we look ahead, the possibilities are endless. We’re on the brink of seeing tech and fashion merge in ways we’ve never imagined. From smart fabrics that change color based on your mood to holographic accessories, the future of wearable tech is not just functional; it’s fabulous.

So, whether you’re a tech enthusiast, a fashionista, or just someone who loves the idea of smart living, wearable tech in 2024 offers something for everyone. Stay tuned because the fusion of fashion and functionality is just getting started.


[ad_2]
Source link

New Silver SAML Attack Let Attackers Forge Any SAML Response To Entra ID

andreasc
-
0
New Silver SAML Attack Let Attackers Forge Any SAML Response To Entra ID
[ad_1]

SolarWinds cyberattack was one of the largest attacks of the century in which attackers used the Golden SAML attack in post-breach exploitation to affect thousands of organizations all over the world including the United States government for deploying malicious code into Orion IT management and monitoring software. 

After the massive cyberattack, CISA recommended hybrid environment organizations to move to a cloud identity system such as Entra ID.

However, a new technique dubbed Silver SAML has been discovered which could bypass security recommendations and exploit Entra ID using applications.

Though this vulnerability has been rated as MODERATE risk to organizations, depending upon the compromised system, this Silver SAML authentication can be used to gain unauthorized access to business-critical applications that pose a SEVERE risk.

Silver SAML Attack

According to the reports shared with Cyber Security News, Entra ID is used by several organizations that use SAML for authenticating into applications.

However, this Entra ID uses a self-signed certificate for SAML response signing. Additionally, organizations can also use externally generated certificates to sign the SAML.

Silver SAML attack workflow (Source: Semperis)

Golden SAML authentication is well-known for its extraction of signing certificates from Active Directory Federation Services and using them to forge SAML authentication responses.

The Silver SAML attack does not use the ADFS in Microsoft Entra ID.

Suppose an attacker obtains the private key of an externally generated certificate. In that case, the attacker can forge any SAML response as they please and sign the response with the same private key that Entra ID holds.

If this attack is successful, the attacker can gain access to the application as any user.

Issue Behind SAML And Signing Certificates

The main issue with the SAML and signing certificates is that most of the organizations do not correctly manage signing certificates.

Additionally, the SAML security is weakened as they use externally signed certificates.

In addition to this, these externally signed certificates are also used to send certificate PFX files and passwords using insecure channels like Teams or Slack.

Even for organizations that use Azure Key Vault, a secure place to store self-signed certificates can also be infiltrated and extracted the keys.

Apart from this, organizations also manage SAML signing certificates externally instead of using the Entra ID.

Performing A Silver SAML Attack

To launch the attack in a Service Provided initiated flow, a threat actor needs to intercept the SAML request and replace the contents of the SAML response with a forged SAML response which could be done using an intercepting proxy such as Burp Suite.

An example of this attack was demonstrated with the test flow by researchers. The SAML response for a user [email protected] was intercepted.

For exploitation, some of the SAML claims information such as UPN (User Principal Name), surname, firstname, displayName, and objectID need to be collected, which can be done using the Entra admin center or Microsoft Graph API.

Intercepting the SAML response (Source: Semperis)

With the researchers created tool “SilverSAMLForger”, the required parameters are generated as a base64 and URL encoded output string.

This forged SAML response can then be used to replace the SAML response in the intercepted response, making the application log in as a targeted user.

You can block malware, including Trojans, ransomware, spyware, rootkits, worms, and zero-day exploits, with Perimeter81 malware protection. All are incredibly harmful, can wreak havoc, and damage your network.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter


[ad_2]
Source link

Apple reportedly tells support staff not to speculate on iPhone sideloading in other markets

andreasc
-
0
Apple reportedly tells support staff not to speculate on iPhone sideloading in other markets
[ad_1]
The impending release of iOS 17.4 is bringing new features to the iPhone that are unique to the 27 member EU states. That’s thanks to the EU’s Digital Market Act (DMA) which has pressured Apple to make several changes. One big change will allow iPhone users in the EU to sideload apps which is just a fancy way of saying that they can install apps from third-party app stores. The changes must take place on or before March 7th.
Everywhere else, Apple maintains its walled garden approach which allows it to keep control over the apps listed in the App Store so that iPhone users don’t download malware-laden apps on their handsets. This is a valid point although malicious apps sometimes do make it through Apple’s security system. It might not be a good look to be an Apple apologist, but the truth is that iPhone users would not want to install any app that could access their financial apps and steal their money, slow down their phone, and reduce the battery life.
According to Bloomberg’s Mark Gurman, writing in his weekly Power On newsletter, Apple is telling its AppleCare support staff not to speculate to customers about whether Apple will offer sideloading and third-party app store support in other countries. Gurman points out that Apple is expecting its customers to flood support staff with such questions considering that many iPhone owners want the freedom to install apps from outside of Apple’s App Store.
Big changes are coming to the iPhone in the EU next week with the release of iOS 17.4 - Apple reportedly tells support staff not to speculate on iPhone sideloading in other markets

Big changes are coming to the iPhone in the EU next week with the release of iOS 17.4

The argument over sideloading can be boiled down to two different ways of thinking about it. Apple, as we noted above, has long felt that it was doing iPhone owners a favor by preventing them from installing apps that they haven’t checked out first. But there are iPhone owners who argue that they spent the money to purchase an iPhone and what they do with it should be entirely up to them.

As for the question that Apple doesn’t want support staff to speculate about, considering that it took a set of regulations backed with the threat of big money penalties to get Apple to allow sideloading in the EU, it probably will take regulations or legislation similar to the DMA to get Apple to offer sideloading in other markets.

[ad_2]
Source link

Google Password manager on Android could soon allow you to safely share passwords with your family

andreasc
-
0
Google Password manager on Android could soon allow you to safely share passwords with your family
[ad_1]
If you use Google Chrome’s password manager and manage some online accounts that you share with a family member, there may be a new feature in the works that will make your life much easier. The potential new feature would allow members of Google Family Groups to easily and securely share passwords within the group.Sharing passwords with family members can be a headache — especially when you’re in a rush and don’t know the login details for a shared account. Thankfully, TheSPAndroid has noticed that Android may soon add the ability to share passwords within a family group. This was found first in Google Chrome’s desktop version and then subsequently within the latest version of Google Play Services (version 24.09.12 190400–610662703). This suggests that Google won’t be leaving Android devices behind when it comes to this functionality.In the screenshots shared below, you can see that a new “Share” button will appear underneath a saved account and beside the “Edit” and “Delete” options. Once tapped, you then see an additional message to confirm that you want to share the password and to advise you that this is only for members of your family group, which you can manage in your Google account settings.

Image Credit: @AssembleDebut (TheSPAndroid)

While the feature is still under development, the screenshots suggest that the process could be quite simple for the receiving end as well. After sharing a password, the recipient may see a tooltip when visiting the website on their own device, letting them know credentials are available. The feature, in its current form, seems designed for passwords only and not passkeys.It’s important to note that Google is likely still refining the system, and the procedure may change before the official release. However, should this feature be rolled out officially, it will likely eliminate the need to share passwords via unsafe methods, such as unencrypted text messages or via email.

[ad_2]
Source link

New Bifrost RAT Variant Targets Linux Devices, Mimics VMware Domain

andreasc
-
0
New Bifrost RAT Variant Targets Linux Devices, Mimics VMware Domain
[ad_1]

The latest version of Bifrost RAT employs sophisticated techniques including typosquatting, to avoid detection and complicate efforts to trace its origins.

Cybersecurity experts at Palo Alto Networks’ Unit 42 have uncovered a new cybersecurity threat: a new variant of the Bifrost RAT (also known as Bifrose) targeting Linux systems. This variant, utilizing a tricky domain named download.vmfare(.)com, is designed to evade detection and compromise targeted systems.

The malicious domain bears a not-so-easy-to-distinguish resemblance to a legitimate VMware domain, with the only difference being the substitution of the letter “F” for the “W” in the domain: VMware becomes VMfare. For your information, VMware is a leading provider of virtualization and cloud computing software and services.

This type of attack is called a typosquatting attack in which malicious actors register domain names similar to popular ones, relying on users making typing errors to visit their sites, often for phishing or malware distribution purposes. For example, “It’s Google.com, not ɢoogle.com.”

New Bifrost RAT Variant Targets Linux Devices, Mimics VMware Domain
VirusTotal score for the malicious domain (screenshot: Palo Alto Networks’ Unit 42)

Bifrost, a remote access Trojan (RAT) dating back to 2004, is notorious for its ability to hide within systems, inject malicious code into legitimate processes, and establish covert communication channels with external servers. This allows attackers to steal sensitive data with ease.

The latest version of Bifrost, as detailed by researchers in their technical blog post, employs sophisticated techniques to avoid detection and complicate efforts to trace its origins. By encrypting collected data using RC4 encryption, and the aforementioned domain with a deceptive name, the malware makes it challenging for security experts to thwart its activities.

Additionally, the malware’s recent deployment on a server hosting an ARM version hints at an expansion of its targets.

Analysis of the malware’s code reveals intricate manoeuvres to establish connections and gather data, showcasing its advanced capabilities in evading detection. Palo Alto Networks detected over 100 instances of Bifrost activity in recent months, signalling a critical need for enhanced security measures.

To safeguard against Bifrost attacks, Unit 42 researchers recommend a multi-faceted approach including regular system updates, strong access controls, deployment of endpoint security solutions, and vigilant monitoring of network activity.

  1. New Linux Malware “Migo” Exploits Redis for Cryptojacking
  2. Free Download Manager Site Pushed Linux Password Stealer
  3. Malicious Ads Infiltrate Bing AI Chatbot in Malvertising Attack
  4. Hamas Hackers Hit Israelis with New BiBi-Linux Wiper Malware
  5. Mirai-based NoaBot Botnet Hits Linux Systems with Cryptominer

[ad_2]
Source link

Google Drive updated with important playback and search improvements

andreasc
-
0
Google Drive updated with important playback and search improvements
[ad_1]

Google Drive has just gained a couple of new features and improvements in just one week. Playback and search enhancements are part of Google Drive’s latest two updates, so expect some of them to pop up in your app very soon.

Among the most important changes added to the app, the improvements to Google Drive’s search experience consists of three key aspects:

  • Simplifying how you access query filters by introducing filter categories that are accessible directly below the search bar and include filters for File Type, Owners and Last modified.
  • Showing you relevant query filters as you type your query, enabling you to easily select a filter and saving you the time and effort of typing out the full search.
  • Adding the option to further refine your search after reaching the search results page.

The bad news is these improvements are only rolling out to iOS devices, although Google did say that Android users will be getting these very soon too. More importantly, these changes are already available to Google Workspace customers, Google Workspace Individual subscribers, as well as users with personal Google accounts.In addition to search improvements, Google Drive is also getting some new playback features. Basically, Google is adding the ability to generate and playback Dynamic Adaptive Streaming over HTTP (DASH) video transcodes for all videos uploaded to Drive.

What this means is users will get higher or lower resolution playback based on the quality of their local network. Following this update, Google Drive users should notice improvements to the time it takes from clicking play to actually starting playback, and a reduction in re-buffering in normal playback and during playback at higher speeds.

This specific update is rolling out now to all Google Workspace customers, Google Workspace Individual subscribers, and users with personal Google accounts. It’s worth mentioning that these playback improvements only apply to new videos uploaded to Drive for the moment, but existing videos will be updated by the end of the year, Google says.


[ad_2]
Source link

Google makes Photomath acquisition official on Play Store

andreasc
-
0
Google makes Photomath acquisition official on Play Store
[ad_1]

Google has officially brought the AI-based math-solving app Photomath under its banner on the Play Store. This comes more than a year after the company announced its acquisition of the popular app. Photomath allows users to take pictures of math problems and get step-by-step solutions. It launched in 2014 and has been downloaded more than 100 million times on iOS and Android.

The deal last year signaled Google’s intent to bolster its AI capabilities for math. Photomath’s AI is adept at recognizing handwritten text, diagrams, and symbols commonly found in math questions. It can interpret problems, provide step-by-step instructions, and offer visual explanations through animated videos.

Photomath will likely continue to offer its Photomath Plus subscription service within the app. For $9.99 per month or $69.99 annually, users can unlock additional features such as full textbook solutions, step-by-step animated tutorials, and more in-depth problem explanations. This could also provide an ongoing revenue stream as Google looks to monetize the app.

Photomath is now under the wing of Google

It seems that Google will look to integrate Photomath’s specialized math-solving capabilities into its products. Some Google services already offer math support, such as Google Lens and Gemini. For example, the Homework filter in Lens allows you to photograph problems, but the solutions are sometimes limited. Integrating Photomath could greatly improve Lens and Search’s ability to understand complex math concepts and provide more comprehensive answers.

Google will maintain Photomath as a separate app, giving it its own place in the educational technology market. Meanwhile, it will also reach a much broader audience by embedding the technology behind it into core Google experiences.

Google had previously acquired another educational app, Socratic. It also helps users solve math and other subject questions using their mobile cameras. However, Socratic hasn’t seen any updates since 2020, suggesting that Google may now be shifting its focus to Photomath.


[ad_2]
Source link

Galaxy Z Fold 6 FE tipped instead of Galaxy Z Fold 6 Ultra

andreasc
-
0
Galaxy Z Fold 6 FE tipped instead of Galaxy Z Fold 6 Ultra
[ad_1]

The situation surrounding the Galaxy Z Fold 6 launch is getting more and more complicated. A recent report suggested that the vanilla model could launch alongside the ‘Ultra’ variant. A new report says the exact opposite. A report from Korea claims that the Galaxy Z Fold 6 FE will launch instead of the Galaxy Z Fold 6 Ultra, in addition to the vanilla model.

The Galaxy Z Fold 6 FE is tipped to launch instead of the rumored Galaxy Z Fold 6 Ultra

This information comes from The Bell, a South Korean publication, and it has been reshared by Revegnus, a tipster. Do note that the Galaxy Z Fold 6 FE may not be the final name, and there’s also a chance it may not launch during the second Unpacked event in July.

That device could launch later in the year, Revegnus notes. He says that a fouth quarter of 2024 is also a possibility if the launch doesn’t occur in July. That could create some breathing room for the Galaxy Z Fold 6 and Galaxy Z Flip 6, and give Samsung a new foldable device to offer for the holidays.

One thing worth noting is that Samsung Mobile head, TM Roh, allegedly “holds a negative perception of budget foldables”. That is not a good sign, of course, but despite that, it seems like Samsung will go ahead with a more budget ‘Fold’ device.

The ‘FE’ model will not offer support for the S Pen stylus

It is also said that the Galaxy Z Fold 6 FE will be inferior to the Galaxy Z Fold 6 from the specifications standpoint, while it also won’t support an S Pen stylus, unlike its sibling.

We assume that the ‘FE’ model will also have an inferior SoC, compared to the Galaxy Z Fold 6. We can only guess what that SoC will be at this point, though. Samsung could include one of its own chips, or go for a more affordable Snapdragon chip. There’s even a chance one of MediaTek’s processors will be used.

The Galaxy Z Fold 6 and Galaxy Z Flip 6 are said to arrive in the first half of July. July 10 is tipped as the launch date and the launch event could take place in Paris, France. The Galaxy Ring is also said to be launching alongside these foldables.


[ad_2]
Source link

Samsung Galaxy M15 leaked render reveals a familiar design

andreasc
-
0
Samsung Galaxy M15 leaked render reveals a familiar design
[ad_1]

Samsung is reportedly working on its next-generation M-series devices. The Galaxy M15 5G has now surfaced in leaked renders courtesy of tipster Evan Blass (aka evleaks). It reveals the device’s design and color options. Previously, the battery capacity of the upcoming offering was tipped. It has already been spotted on various certification websites hinting at its imminent launch.

Samsung Galaxy M15 surfaces in leaked renders

The leaked renders show the Samsung Galaxy M15 in Blue, Grey, and Green colors. Upon a closer look, the back panel seems to have a striped pattern. It features three vertically stacked camera sensors and an LED flash unit.

Up front, the Samsung Galaxy M15 features a waterdrop notch display. The screen is surrounded by thick bezels and a sizeable bottom chin. The volume rocker button is on the right side but the power key is not found in the leaked renders. It could mean that there will be a side-mounted fingerprint scanner.

The Galaxy M15 has bagged various certifications

The Samsung Galaxy M15 has passed multiple certification sites including FCC, BIS, SafetyKorea, and Dekra certifications. It carries a model number SM-M156B. The FCC listing revealed support for 5G band n66, dual-band WiFi, and Bluetooth. It also mentions a battery with model number EB-BM156ABY suggesting support for 25W charging and a 5,880mAh cell which could be advertised as 6,000mAh. This is in line with the previous leak.

Samsung offers budget and mid-range phones under its Galaxy A, M, and F-series. Some models in the lineup are mostly rebadged versions while others share few similarities. The Samsung Galaxy M15 is expected to arrive as the successor to the Galaxy M14 that debuted last year.

Last year’s M14 and A14 packed only a few differences. That seems to be the case on this year’s M15 too as the Galaxy A15 launched last December. This is because, compared to the leaked renders, the latter has a flat frame design with a key island and a 5,000mAh battery unit.


[ad_2]
Source link

Lenovo is refreshing the Tab P12 with a Matte Display

andreasc
-
0
Lenovo is refreshing the Tab P12 with a Matte Display
[ad_1]

Tablets are multi-purpose devices that have become increasingly popular in recent times, with some of the best tablets available in the market right now. Hence, the demand is growing, and subsequently, after attracting all eyes to its transparent laptop at MWC 2024, Lenovo wants to conquer the tablet arena, especially the e-reader segment. Frankly, the leaked specs especially the display part look promising for now.

Lenovo’s upcoming Tab P12 (Matte Display) looks promising

First reported by Windows Report, Lenovo could be working on a new Tab P12 (Matte display) model. If true, the upcoming Lenovo tablet could feature a matte or paper-like display instead of a glossy panel. You should know that it’s similar to the regular P12 model in every way except for the screen. Similarly, it has a 12.7-inch screen that reduces glare and has a resolution of 2944 x 1840. The downside is its refresh rate, 60Hz but certainly not an issue for general users.

It’s certainly not made for games, suggest specs

Delving into more details, we see that Lenovo Tab P12 (Matte Display) will come with Android 13 and receive updates till Android 15. Under the hood, it will house a MediaTek 7050 chip, 8GB memory, and 128GB storage. Additionally, you can expand the storage up to 1TB using a microSD card.

On the front, there’s a 13 MP front shooter. The report also adds that similar to its sibling P12, the upcoming device will also support the same accessories like the P12 Keyboard Pack, the P12 Folio Case, and the Lenovo Tab Pen Plus. Considering its speculated role in battling against e-readers, these specs suit the purpose.

This tablet won’t revolutionize the market, but it might compete with e-readers. If the rumors are true, the P12 (Matte Display) will be great for drawing and watching stuff. For the time being, we’ll wait until more details arrive.


[ad_2]
Source link
1...365366367...1,481Page 366 of 1,481