Meta made a lot of concessions in order to be allowed to continue to function across the European continent, such as adding the ability to use Instagram and Facebook for free with ads, or subscribe to stop seeing ads.
Starting this month, Instagram and Facebook users in the EU, EEA and Switzerland will be offered additional choices about how they manage their accounts across Meta’s social apps.
These new choices are offered “to address the requirements of the DMA, which enter into force in March 2024,” Meta states in a press release. In the next few weeks, those who use Meta’s social apps, specifically Facebook, Instagram, and Messenger, will be notified about their ability to choose whether they would like to share information between apps in case they have multiple accounts.
For example, users who linked their Instagram and Facebook accounts will be able to unlink and manage them separately, or they may choose to continue to connect their accounts through Meta’s Accounts Center so that their info will be used across both their accounts.
Also, Messenger users can choose whether they wish to continue using the app with their Facebook accounts, or if they want to create a stand-alone new Messenger account. Those who choose the latter will be able to use the app’s core service, including private messaging and chat, voice and video calling.
Meta revealed that those who play games on Facebook can choose between a gaming experience that uses their Facebook information or one without that. While the former will get the full experience like multiplayer games, in-game purchases, and personalized game suggestions, the latter will only get to play some single-player games.
Conor Brian Fitzpatrick was charged in March 2023 for stealing and selling sensitive personal data of countless US citizens and US and foreign organizations and government agencies via the forum.
Conor Brian Fitzpatrick, a 21-year-old man from Peekskill, New York, has been sentenced to 20 years of supervised release in the Eastern District of Virginia for operating the notorious BreachForums hacking forum.
For your information, Fitzpatrick launched BreachForums in March 2022 after the FBI took down the then-popular cybercrime marketplace, RaidForums. It served as an ideal platform for selling/leaking millions of personal data worldwide. The platform contained nearly 900 stolen databases storing more than 14 billion individual records, which BreachForums members were entitled to use.
BreachForums ceased operations after the FBI apprehended Fitzpatrick and reportedly reemerged under the management of ShinyHunters, causing concern among cybersecurity experts and law enforcement agencies worldwide. Baphomet, one of the original forum administrators, confirmed the resurgence in a PGP-signed message, leaving little doubt about its authenticity.
Fitzpatrick was arrested on 15th March 2023 from his family home. Under custody, he admitted to owning/operating BreachForums under the “pompompurin” moniker. The accused was released on a $300,000 bond and was re-arrested on 2nd January 2024 for violating pretrial release conditions by using a computer without the required monitoring software and using VPN services.
Fitzpatrick was charged in March 2023 for stealing and selling sensitive personal data of countless US citizens and US and foreign organizations and government agencies via the forum. Court documents reveal that he possessed nearly 26 video files containing sexually explicit videos of minors, including prepubescent ones. Prosecutors claimed Fitzpatrick knowingly possessed these files.
The sentencing recommendation memo reveals several incidents involving Fitzpatrick, including a data leak in December 2022 exposing records of 87,760 members of InfraGuard, 200 million users of a US social media company, 20 million user records for a background check service company, and data theft involving thousands of users’ private health insurance information in March 2023.
Fitzpatrick pleaded guilty to several counts, including Conspiracy to Commit Access Device Fraud, Solicitation for the Purpose of Offering Access, and Possession of CSAM on July 13, 2023 (PDF). He served as a middleman for stolen data transactions and admitted to feeding false information to law enforcement.
Prosecutors sought 188 months (15.7 years) of imprisonment. The defendant’s attorneys filed a memo under seal recommending his sentencing, citing confidential and medical information that should not be disclosed to the public. The court showed leniency and sentenced Fitzpatrick to time served and 20 years of supervised release. The sentencing memorandum was submitted (PDF) on 16th January 2024.
Per the sentencing conditions (PDF), for the first two years of his release, Fitzpatrick will stay at home arrest with a GPS locator and also receive mental health treatment. Fitzpatrick cannot access the internet during his first year of supervised release, and a probation officer will install monitoring software on his computer.
Prosecutors claimed that Fitzpatrick’s platform enabled hackers and fraudsters to commit “more sophisticated crimes than any could have done alone,” impacting nearly every sector of U.S. society.
The Samsung Galaxy S24 Ultra is the company’s latest flagship, and it comes with new screen protection. Corning provided Samsung with Gorilla Armor, a new piece of hardware on top of the display. Corning claimed, in its announcement, that Gorilla Armor handles screen reflections like a champ. Well, we have proof now. The Galaxy S24 Ultra absolutely destroys the iPhone 15 Pro Max in terms of screen reflections.
The Galaxy S24 Ultra handles screen reflections a lot better than the iPhone 15 Pro Max
If you take a look at the two images below, you’ll see the two phones side by side. These images have been shared by Ice Universe, a well-known tipster. You’ll easily see that the Galaxy S24 Ultra is not affected by the reflection all that much, it’s easy to notice.
The display on the iPhone 15 Pro Max actually seems kind of washed out next to the Galaxy S24 Ultra’s. This is actually not the only example we have. Other sources shared different comparisons.
For example, Ahmed Qwaider shared the Galaxy S24 Ultra next to the Galaxy S23 Ultra. The difference here is also immediately noticeable. You can check out three images in the gallery below to see the difference.
The Gorilla Armor is making a huge difference, it seems
Based on what we see here, the Gorilla Armor makes a huge difference on the Galaxy S24 Ultra. We do hope that more smartphones will end up using this protection in order to battle screen reflections.
Just to be clear, the other two phones in the series do not include Gorilla Armor. The Galaxy S24 and Galaxy S24+ ship with Gorilla Glass Victus 2. That’s great protection, but it doesn’t handle reflections nearly as well.
As a reminder, Corning said that Gorilla Armor reduces reflection by up to 75%. On top of that, it’s supposed to be a lot more resistant to micro scratches, which is always good to hear. It’s nice to see Corning focusing more on something other than impact resistance.
Are you under 17 and living in Iowa? Do you like TikTok? That’s an odd question to ask a 17-year-old. Soon, you might not be able to use it, so… carpe diem.
The state of Iowa is suing TikTok over claims that the app is not suited for kids of age 12+, but instead, it should be rated as 17+ (via The Verge).
The problem is the alleged presence of sexual content, drugs, alcohol, profanity, and other inappropriate material in the app that’s available for kids. The Iowa Attorney General Brenna Bird filed the lawsuit and claimed TikTok is making this kind of content “easily accessible” to young users and the “12+” age rating on the Apple App Store is “inaccurate”.
The state of Iowa claims that if “correctly” rated, the content on the wildly popular app would (and should) receive a 17-plus label. The lawsuit is not OK with TikTok’s “T” for “Teen” ratings in the Google Play Store and Microsoft Store.
“TikTok has kept parents in the dark,” Attorney General Bird said in a statement. “It’s time we shine a light on TikTok for exposing young children to graphic materials such as sexual content, self-harm, illegal drug use, and worse. TikTok has sneaked past parental blocks by misrepresenting the severity of its content.”
An investigation done by the state found that users as young as 13 years old can “readily find” recipes for alcoholic drinks, “advice and encouragement” about using marijuana, music with profane lyrics, and “videos promoting eating disorders, suicide, and self-harm.” Additionally, the lawsuit claims TikTok’s Restricted Mode, which is supposed to limit content “that may not be appropriate for all audiences,” doesn’t work when enabled.
DarkGate is a type of malware that employs Auto-It compiled loaders that cause a considerable threat because of its advanced evasion strategies and persistence within compromised systems.
By using obfuscated AutoIt scripting and multi-stage payloads, the malware makes it more difficult to identify using conventional signature-based techniques.
Meticulous detection and analysis are necessary due to their capacity to obtain command and control communications and exfiltrate sensitive data.
The scripting language AutoIt was created specifically for automating Windows GUI and general scripting tasks. It has been used for malicious purposes throughout history, including AutoIt-compiled malware dating back to 2008.
“Malware creators have exploited the versatility of AutoIT in a variety of ways, such as using obfuscated scripts for payload decryption, utilizing legitimate tools like BaSupportVNC, and even creating worms capable of spreading through removable media and Windows shares”, said Splunk researchers.
DocumentFree Webinar
Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month. Delays in fixing these vulnerabilities lead to compliance issues, these delay can be minimized with a unique feature on AppTrana that helps you to get “Zero vulnerability report” within 72 hours.
Insights of DarkGate Malware and Its Use of AutoIt
Researchers discovered several campaigns using a loader intended for launching DarkGate on hacked systems. An instance of this would be the discovery of malicious PDF files that serve as carriers and cause a malicious CAB file to be downloaded.
This CAB file, in turn, downloads a.MSI file containing and loading the DarkGate malware. This file appears to load a series of files, including two.BIN files, a DLL module, and the legitimate wndbg.exe, all of which are necessary for DarkGate to execute.
Malicious MSI Infection Flow
In a different variation, it adds another .CAB installer to the targeted host’s installation process, expanding its infection strategy. This enhanced strategy highlights threat actors’ ongoing attempts to avoid detection by highlighting the intricacy and sophistication of the infection mechanism they have chosen.
Four.png files are utilized solely as dummies or decoys to hide or mislead the observer from the important parts of the DarkGate operation.
.CAB Extracted Files
“Within the .CAB file, a collection of files has been identified. Among these files, the pivotal components driving the initiation of DarkGate malware include windbg.exe, dbgeng.dll, data.bin, and data2.bin”, researchers said.
The subsequent stage of this malicious installation of the .CAB file entails the use of windbg.exe to execute a specifically designed dbgeng.dll via DLL side-loading techniques.
Data2.bin contains two encoded files, separated by the ‘splitres’ string. The first file to be decoded from the base64 process is a legitimate Autoit3.exe, which is used to run the second file, which is a script.au3 AutoIt script that has been constructed.
The final loader encompasses both a shellcode and a .exe file designed to decrypt the DarkGate malware.
Hence, maintaining a strong defense against DarkGate’s shifting techniques requires constant monitoring in addition to updated defense systems.
Try Kelltron’s cost-effective penetration testing services to evaluate digital systems security. Free demo available.
OnePlus is gearing up for the global launch of its latest flagship smartphone, the OnePlus 12, but it seems that the anticipated OnePlus Watch 2 won’t share the spotlight at the upcoming event.
OnePlus to reveal the OnePlus Watch 2 towards the end of February at MWC 2024
Tipster Max Jambor expects that the OnePlus Watch 2 will skip the January launch and make its debut at Mobile World Congress (MWC) 2024, scheduled for February 26 to February 29 in Barcelona, Spain.
Leaks suggest the OnePlus Watch 2 will come equipped with a 1.43-inch AMOLED display boasting a resolution of 466 x 466 and hardware buttons on the right side, powered by the Qualcomm Snapdragon W5 Gen 1 chip, the same processor found in the Google Pixel Watch 2, with a BES 2700 co-processor for more energy-efficient operations.
OnePlus has evolved significantly from its initial smartphone offerings, with recent successes like the OnePlus 11 and OnePlus Open. However, its first-generation smartwatch launched in 2021, the original OnePlus Watch, didn’t make a significant impact.
The successor will be OnePlus’s first watch with Google’s Wear OS
The successor will be OnePlus’s first watch with Google’s Wear OS 4, expected to mark a significant improvement, running on Wear OS instead of a custom operating system named RTOS. Wear OS is likely to address the limitations of the first OnePlus Watch, and a notable upgrade with the new OS will be the access to the Play Store.
While the exact pricing remains unknown, the original OnePlus Watch launched at $159, and it’s expected that the second-gen model with some significant improvements might carry a higher price tag. The January 23 event for the OnePlus 12 not featuring the OnePlus Watch 2 likely indicates that the product is still undergoing final preparations before hitting the market.
OnePlus’ foray into wearables reportedly includes not only the upcoming OnePlus Watch 2 but also the India-exclusive Nord Watch and a fitness tracker released in 2021.
WhatsApp is developing its own Bluetooth sharing feature for users nearby. It will be available in a future version of the app, which now more than 2.7 billion people use.
As per WABetaInfo, the trusted source for WhatsApp scoops, the Meta-owned app is in the works on a Bluetooth file-sharing tool for nearby users. To use it, both parties need to open the “Share Files” section and stay there until the transfer finishes. What is more, the end-to-end encryption remains intact for secure sharing, just like WhatsApp’s usual file-sharing method.
WhatsApp has recently introduced a feature enabling users to share files of up to 2GB in size, and now, in the latest WhatsApp beta for Android (version 2.24.2.20) update, available on the Google Play Store, it has been uncovered that WhatsApp is actively developing this new file-sharing feature for users nearby.
Image Credit–WABetaInfo
The screenshot makes it clear: users not only have to open the “Share Files” section for file exchanges but also need to shake their device to generate a share request. This controlled approach adds an interesting, although not very convenient, twist to the sharing process.
This feature could be handy for WhatsApp users, although with Google and Samsung’s recent Quick Share updates, its necessity might not align with Meta’s expectations. Google’s Nearby Share and Samsung’s Quick Share are set to merge into a unified app named Quick Share. This streamlined approach will simplify the process of sending photos, files, and text between Android phones.
Nevertheless, introducing a feature in WhatsApp for file-sharing with nearby users brings its own set of advantages. This feature allows users to swiftly share files with nearby individuals, perfect for situations demanding a quick and direct transfer. For instance, you can quickly share a presentation with colleagues at a meeting without an internet connection.
Plus, the privacy and security of users are maintained as the phone number stays hidden to non-contacts during every file exchange.
The upcoming file-sharing feature with nearby users is currently in the works and is expected to be included in a future app update. Meanwhile, WhatsApp is also cooking up another feature, enabling users to share polls in channels, and is introducing additional text formatting tools.
Samsung has introduced the Galaxy S24 series flagships in the Galaxy Unpacked 2024 event and the new devices have already made their way to the hands of reviewers for initial testing.
However, a notable flaw has already surfaced for the most expensive model, the Galaxy S24 Ultra. The S Pen of the device suffers from interference with the magnets of the MagSafe/Qi2 compatible cases and its accessories… well, some of them. We’ve tested the issue on a number of them, and there’s really no problem with some of them. Examples below do prove that the problem exists, though.
M. Brandon Lee shared a video on X/Twitter showcasing the fact that when a MagSafe/ Qi2 accessory is attached to the case of the Galaxy S24 Ultra, for example, your wallet, the phone fails to register the movement of the S Pen on its display properly. Case manufacturers are reportedly trying to figure out how to fix this interference issue.
9to5Google notes that the predecessor or the Galaxy S23 Ultra didn’t have this interference issue with the magnets in the MagSafe-enabled cases and its accessories.
Samsung is yet to comment on the S Pen interference situation as of writing this article
The Galaxy S24 Ultra, however, does not support the Qi2 standard. Currently, you won’t have an issue at all as long as you don’t use the S Pen with the phone attached to a MagSafe accessory.
However, for people who use the S Pen with the phone attached to a MagSafe accessory, it presents a dissatisfaction factor with the latest ultra flagship, which is not ideal. Notably, the company has yet to share some words on the matter as of writing.
Although the Galaxy S24 Ultra isn’t leaving a perfect impression considering the MagSafe accessories, it houses the ‘for Galaxy’ branded slightly overclocked Snapdragon 8 Gen 3 chip all over the world. And if you feel concerned about the currently present imperfection of the ultra model, the Galaxy S24 might also be a good option to consider, especially if you prefer compact phones.
Nonetheless, the Galaxy S24 series devices come with a suite of AI features targeted at making the series more appealing and possibly re-gaining the first position in global smartphone shipments from Apple in 2024.
According to TheSpAndroid (via Android Authority), an upcoming option on the “Help me write” feature will let you use your voice to draft an email or actually tell the AI what to write. You will simply have to speak out the prompt, and the Gmail AI will write that email for you.
Now, you might be thinking, “Hey, I can already draft with my voice,” but this new functionality is different. Instead of you dictating the text, the AI takes your prompt and crafts the email for you.
When you start typing a new email or replying to one, the voice typing setup pops up with a big mic button. Tap it, start talking, and your prompt shows up above the recording button. Hit “Create” when you are done, and voila – Gmail crafts you an email using its AI. If you decide to bail on the recording, no worries – there is a “Draft email with voice” button waiting at the bottom left of the email.
As for when this new option will be added to the Gmail app, it is still unclear. Chances are it might hit the Workspace Labs users first before hitting the mainstream. Currently, the “Help me write” feature is available in the Workspace Labs. Workspace Labs is a program that allows Google to test new features with a small group of users before they are rolled out to everyone.
If you want to try the “Help me write” feature, you can sign up for the Workspace Labs program, available only in US English. However, there is no guarantee that you will be selected to participate. Here are the steps on how to sign up for the Workspace Labs program:
Go to the Gmail Workspace Labs page.
Click the “Get early access” button.
Sign in to your Google account.
Select the features that you are interested in trying out.
Click the “Submit” button.
You will receive an email notification if you are selected to participate in the Workspace Labs program.
January 20, 2024 – A nonprofit study claims that Google is failing to delete location history that reveals users’ physical trips to abortion clinics.
January 19, 2024 – Google wants you to know you can still be tracked when you’re incognito.
January 19, 2024 – CISA has added two Citrix NetScaler vulnerabilities to its vulnerability catalog, with a very short deadline to patch.
January 18, 2024 – Google has issued a security update for the Chrome browser that includes a patch for one zero-day vulnerability.
January 17, 2024 – Two vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure Gateways are subject to massive exploitation despite an available workaround.
