EU’s Margrethe Vestager meets with Apple’s Tim Cook to discuss sideloading, Apple Tax and more

andreasc
-
0
EU’s Margrethe Vestager meets with Apple’s Tim Cook to discuss sideloading, Apple Tax and more
[ad_1]

With the EU’s Digital Markets Act (DMA) putting pressure on Apple to make changes to the iPhone that it doesn’t want to make, Apple CEO Tim Cook met on Thursday with EU antitrust chief Margrethe Vestager at Apple Park. In a tweet, Vestager said that the meeting focused on some aspects of the DMA such as one requirement that Apple allow the iPhone to sideload apps in the 27 EU member countries. Apple is required by the DMA to offer sideloading in the EU by this coming March.
Sideloading is the act of installing an app from a third-party app store. Since the days of Steve Jobs, Apple has been against sideloading because of fears that it could lead iPhone users to install malware-loaded apps. While Apple can run tests on apps that are installed from the App Store, it doesn’t have that capability with apps being sideloaded from a third-party app storefront. Vestager and Cook also spoke about ongoing  EU competition cases including one that was brought by music streamer Spotify against Apple Music.

The DMA also seeks to force Apple to allow developers to bypass Apple’s in-app payment platform and avoid the 30% of in-app revenue that developers pay Apple. This has been a major battle between some developers and Apple for years. And the EU is also looking to get Apple to open up its NFC-based mobile payments technology to third-party payment services.

On some of these issues, such as sideloading, Apple is expected to limit the feature to iPhone models purchased in the 27 EU countries. On others, such as adding RCS support, Apple plans on allowing this to happen on iPhone units worldwide. Apple did the same when the EU’s common charger law passed which forced Apple to replace the Lightning port with USB-C. 
Apple could have limited the replacement of its proprietary Lightning port to iPhone units sold in the 27 EU member countries but decided that offering two different versions of new iPhone models (with EU variants sporting the USB-C port and the Lightning port found on models elsewhere in the world) would be too complex. So as you probably know, starting with the iPhone 15 series, all new iPhones must use a USB-C charger.

[ad_2]
Source link

The Galaxy S24 could get software updates until 2031

andreasc
-
0
The Galaxy S24 could get software updates until 2031
[ad_1]

Google shocked the tech world when it announced that the Pixel 8 phones will be supported for a whopping seven years. We’re not just talking about software and security updates, this also means major OS upgrades. Well, it appears that Samsung is following in Google’s shoes, as the upcoming Galaxy S24 phones could get software support for seven years.

To put this into perspective, Android will run out of alphabetical letters before the Pixel 8 phones lose compatibility. This was a pretty big step for Google, as it previously supported its devices for three years. This was seen as a response to Samsung revamping its upgrade schedule to offer four major OS upgrades to its phones in five years of security updates back in 2020.

The Galaxy S24 could get seven years of software support

Fresh off of CES 2024, the Galaxy S24 is now at the center of attention for the tech world. These phones are meant to bring all the best hardware present on the market today. However, what’s as important as its performance today is its performance down the road. Most people want their phones to be supported for a long time. This is especially true if they’re spending over $1,000 for them.

Well, Samsung thought about this when it introduced five years of software support. However, according to a new leak, it appears that Samsung will support its devices for a whopping seven years.

Whenever we talk about software support, we always have to differentiate between software updates and OS upgrades. Software updates usually refer to security patches and other minor updates. OS upgrades bring your phone to the next major version of Android. Well, it appears that Samsung is going to offer seven years of major OS upgrades. This means that the Galaxy S24 phones could receive updates up to Android version 21.

This information has yet to be officially confirmed, but it’s still great to hear. The Galaxy S24 phones are set to be unveiled on January 17th. We don’t expect too many hardware upgrades besides the latest and greatest Snapdragon and Exynos processors. However, Samsung is going to be prioritizing AI technology and incorporating that into the Galaxy experience.


[ad_2]
Source link

Samsung Galaxy S24 leaked images and AI details

andreasc
-
0
Samsung Galaxy S24 leaked images and AI details
[ad_1]

The Samsung Galaxy S24 family of devices is just around the corner as Samsung prepares for the official unveiling at Unpacked on January 17, and with just a few days left before the event we’ve got some exclusive leaks of official Galaxy S24 and Galaxy S24 Ultra promo images that showcase some tantalizing camera and AI details. Samsung seems to be going all-in with AI this year and will incorporate fresh AI features to help enhance the user experience. “Galaxy AI is here” one image reads.

This suggests that Galaxy AI will be the official name, however, we won’t know for sure until Samsung reveals everything next week. That being said, if “Galaxy AI” is the focal point of one of the promo images, it’s a safe bet that AI will play a big role in what these devices can do. More to the point, AI appears to be at the very core of what makes these devices more special.

If you’re familiar with Google’s latest Pixel devices, the Pixel 8 and Pixel 8 Pro, then you’re aware that AI is a very big part of each device. Moreso than past Pixel phones It’s a huge selling point for Google, and the AI-based camera features are the biggest part of that. It’s unclear if Samsung will be baking AI into its cameras more than other parts of these devices, but based on the promo images, Samsung may be following Google’s lead and beefing up the camera with lots of AI magic.

Galaxy S24 promo leaks suggest AI camera feature to move or delete objects

One of the more exciting AI camera features in the Pixel 8 series was the ability to move, shrink, and completely delete objects from a photo in post-processing. It appears that Samsung will be giving the Galaxy S24 series the same capabilities. In one of the images in the gallery above, you can see a person on a BMX bike riding up a ramp. With the power of an AI-based “generate” button, the person in the image is moved to show them in the air as opposed to just barely touching down on the ramp edge. This makes for a more exciting shot.

You can also see a box around the rider, with anchor points for shrinking and rotating the subject prior to hitting the generate button. So it seems users will have a decent amount of control in adjusting subjects to get a better outcome for photos. To be clear, Samsung teased this feature in one of its promo videos about Unpacked. So there was already a hint this was coming. But the leaked image actually shows what the camera UI will look like if you use the feature.

Camera details confirmed: 200MP wide-angle lens, 2x Optical Quality Zoom, & more

Some of these camera specs have been leaked or rumored before. So this isn’t the first time we’ve heard about them. But this does appear to be the first time that actual details are showing up in a promo image. Two leaked images confirm the specs. One for the Galaxy S24 and one for the Galaxy S24 Ultra.

Starting with the Galaxy S24, it’ll feature a 12MP selfie camera on the front. Which is essentially the same as last year’s Galaxy S23. However, Samsung could be using a new sensor here. There will most certainly be some AI features the selfie camera can use now too. For the main camera setup on the back, the Galaxy S24 will have a 10MP camera with 3x Optical Zoom, a 50MP wide-angle lens camera with 2x Optical Quality Zoom, and a 12MP Ultra Wide lens camera. Last year’s Galaxy S23 had a 10MP camera as well, and it provided the telephoto lens capabilities. So the 10MP camera on the Galaxy S24 may also be a telephoto lens.

The Galaxy S24 Ultra bumps things up with a fourth camera on the back. The 10MP camera looks to be the same as on the regular Galaxy S24. The 12MP Ultra Wide camera looks the same as well. Where things get interesting is with the 50MP camera. This camera on the Galaxy S24 Ultra uses 5x Optical Zoom instead of 3x Optical Zoom. It also adds 10x Optical Quality Zoom. As for the fourth camera, this is the 200MP wide-angle lens and it features 2x Optical Quality Zoom. Then, of course, there’s the 12MP selfie camera on the front.

In terms of camera specs, there’s still some information that isn’t confirmed. Such as whether or not these are the actual same sensor hardware from last year. Still, it’s nice to know what you’re working with if you plan to upgrade to these. And the inclusion of AI features is sure to make for some more exciting images.

Samsung will adopt Google’s update strategy of 7 years of updates

In addition to the promo images, a few more leaked details showcase Samsung’s commitment to its flagship devices. For starters, Samsung will be adopting Google’s update strategy launched with the Pixel 8 and Pixel 8 Pro.

This means that if you buy a Galaxy S24, Galaxy S24+, or Galaxy S24 Ultra, you’ll get updates for 7 years. Presumably, this means not just security updates, but updates with new features and updates for the OS version of Android. This is a big deal. Because with Samsung onboard, other smaller or less popular OEMs may adopt the same strategy for updates going forward.

The leak also mentions that Galaxy AI features will be free of charge until at least 2025 on supported Galaxy devices. This suggests that Samsung may be looking to charge for some features. And that would be a strange move considering Google isn’t charging for any of theirs. But, we’ll have to wait and see if Samsung’s plan is to charge for more advanced features or if it ends up looping all of them in under a subscription or one-time fee of some sort. Lastly, it seems that some AI features will require the user to login with their Samsung account credentials. It’s unclear what features might require this, however.


[ad_2]
Source link

Google Play adopts a new approach to real-money gaming apps

andreasc
-
0
Google Play adopts a new approach to real-money gaming apps
[ad_1]

After settling for $700 Million in a Play Store antitrust case back in December, Google moves on to accommodate the growing demand for real-money gaming (RMG) apps. In this regard, Google Play has announced a significant policy shift, signaling a broader acceptance of this genre on its platform. This shift, initiated in 2021, saw the onboarding of a wider range of RMG apps in markets with existing licensing frameworks. Now, based on successful pilot programs and positive feedback, Google Play will support an even wider array of RMG operators and game types, extending opportunities to developers globally.

The initial pilots in India, focusing on Rummy and Daily Fantasy Sports (DFS), yielded insights that have influenced Google Play’s decision to broaden its support for RMG apps. Beginning in June, developers in India, Mexico, and Brazil will have the opportunity to offer a more extensive variety of RMG experiences to users, with plans for further expansion into additional countries in the future.

Google Play to support more RMG apps this year, including game types and operators not covered by an existing licensing framework

Developers participating in the Google Play Pilot Program for RMG apps in India will benefit from an extended grace period until June 30, 2024. Following this period, developers can continue to distribute RMG apps, beyond DFS and Rummy, in compliance with local laws and the updated Google Play policy. Similarly, the pilot program for DFS in Mexico will conclude on June 30, 2024, allowing developers to broaden their offerings to Mexican users within the bounds of legal and policy requirements.

While opening up opportunities for developers, Google Play emphasizes that user safety remains a top priority. Existing developer policies supporting user safety, including age-gating and geo-gating to limit RMG experiences to adults and legal jurisdictions, will remain unchanged. Google Play will also continue its efforts toward user safety and transparency through expanded developer verification mechanisms.

As part of the policy update, Google Play will evolve its service fee model for RMG to reflect the value it provides and sustain the Android and Play ecosystems. Collaborating closely with developers, Google Play aims to ensure that the new approach aligns with the unique economics and various earning models within the RMG industry.

Further details on the updated policy and expansion plans are expected to be shared in the coming months, offering developers a clear roadmap for their involvement in the evolving world of real-money gaming on Google Play.


[ad_2]
Source link

WhatsApp’s text formatting tools finally show up on the Android beta

andreasc
-
0
WhatsApp’s text formatting tools finally show up on the Android beta
[ad_1]

We all know how it goes with new mobile apps; they land on iOS first, then they hit Android. That’s the case with the text formatting tools in WhatsApp. The feature has been in testing for the iOS beta for a while. However, the WhatsApp text formatting tools have finally made it to the Android beta.

At this point, we pretty much know what these tools look like. Looking at the screenshot below, we see that these tools consist of a quote block, a code block, and two types of bullet points. These will add a different visual flare to your WhatsApp messages. They can come in handy if you are typing out a long and extended message with a list of items.

Whatsapp formatting tools

At this point, we’re not certain when this new update will make it to the public, as it’s still in beta testing. It seems likely that this will make it to the stable release, but since it is still in beta testing, there’s always the chance that there will be some changes before the final release. You’ll have to just stay tuned to see when the company launches the feature.

The WhatsApp formatting tools were finally spotted on Android

WhatsApp beta users on Android have been waiting to get their hands on this feature for a while. We first saw these text formatting tools months ago, but it was only for those using the iOS beta. Now, Android users can try this feature out.

It’s important to note that this feature is not available to all Android beta users. WhatsApp is testing this out on a limited selection of users, so there’s a chance that you won’t see it even if you have the latest version installed.

The version in question is 2.24.2.9. So, if you’re a beta tester, check to see if you have that build number. If you don’t have it installed, see if you have an update available.


[ad_2]
Source link

Apple Vision Pro is anticipated to sell out quickly after February 2 launch

andreasc
-
0
Apple Vision Pro is anticipated to sell out quickly after February 2 launch
[ad_1]

Pre-orders for the Apple Vision Pro will open from January 19. This cutting-edge augmented reality (AR) headset will officially hit the market on February 2. According to TF International Securities analyst Ming-Chi Kuo, the initial shipments of the Apple Vision Pro will be limited, ranging between 60,000 and 80,000 units. Despite this relatively small quantity, industry experts predict a rapid sell-out due to groundbreaking technology innovations and an unparalleled user experience.

Ming-Chi Kuo emphasizes that the hardware specifications and software of the Apple Vision Pro surpass industry standards. The analyst believes that the hefty $3,499 price tag will not deter consumers from acquiring this AR headset. Instead, Kuo suggests that it’s the revolutionary technology and user experience that will drive the rapid depletion of the initial batch. Apple, a company known for its diversified revenue streams, sees the first release of the Apple Vision Pro as a pilot launch, gauging market response to this novel product.

Kuo predicts that Apple will ship around 500,000 units of the Vision Pro in 2024

Although the initial shipment is relatively small, generating an estimated $279.92 million, Apple will likely capitalize on accessory sales. In addition to the AR headset, the company plans to offer prescription lenses priced between $99 and $149. This additional revenue stream underscores Apple’s strategic approach to expanding its market presence in the AR domain.

Looking ahead, Kuo predicts that the company will ship around 500,000 units of the Apple Vision Pro in 2024. Furthermore, he anticipates a prolonged lifespan for this model, with its successor not entering mass production until 2027.

Amidst these projections, rumors circulate about Apple developing a more affordable alternative set for a potential launch in 2025. This lower-cost option may differentiate itself by incorporating an iPhone chipset rather than a Mac one, accompanied by a display that, while inferior, could make AR technology more accessible to a broader consumer base.

In conclusion, the imminent release of the Apple Vision Pro has generated significant excitement in the tech community. With limited initial stock and a high price tag, the success of this AR headset hinges on Apple’s commitment to groundbreaking technology and the overall user experience, as enthusiasts eagerly await the opportunity to explore the possibilities of augmented reality.


[ad_2]
Source link

OpenAI opens its GPT Store, a place to buy customized versions of ChatGPT

andreasc
-
0
OpenAI opens its GPT Store, a place to buy customized versions of ChatGPT
[ad_1]

Right now, when you use chat CPT, you’re pretty much confined to one version of the chatbot. If you want something specialized, you have to go to other sources. However, OpenAI is looking to change that by introducing the GPT Store. This is a place where you can buy different customized versions of ChatGPT to suit your specific needs.

You’re able to customize ChatGPT to an extent by using Custom Instructions. This lets you tell ChatGPT a bit about yourself and why you’re using the platform. This way, it will have the context needed to generate content based on what you need. So, this is one way you can customize ChatGPT for your preferences.

OpenAI unveils the GPT Store

ChatGPT is smart; it’s a virtual Jack of all trades. However, what if you need a jack of one trade? Well, this is where the OpenAI GPT Store comes in. The company announced this Wednesday. Basically, it’s a digital storefront where you can buy customized versions of ChatGPT.

There are different GPTs like ones customized for generating stories, teaching you how to code, analyzing text, scanning PDF files, Etc. Think of it like an app store for different AI chatbots.

Right now, there are dozens of GPTs that you can access, and they’re all separated into different categories. There are bots that center around image generation, writing, productivity, research analysis, programming, education, and lifestyle. There are also a fair amount of GPTs crafted by the ChatGPT team at OpenAI.

These are user-created

This seems to be a pretty open market, as you’re able to post your own GPTs to the store. So, if you’ve built your own GPT, you can easily post it to the store. Eventually, creators will be able to earn from the GPS that they built.  OpenAI is going to open a GPT Builder Revenue program. Initially, it’ll be available for users in the U.S. So, it seems like OpenAI will take a cut of the revenue that you get from purchases, and give the rest to you.

Who can buy GPTs?

It seems weird that you have to spend money in order to spend more money, but that seems to be the way things are at the moment. In order to access the GPT store, you need to have a ChatGPT Plus, Enterprise, or Team subscription. These are all paid accounts, so you won’t be able to access the GPTs if you’re on the free plan.

If you have the proper subscription, you can go to the official GPT Store and explore the GPTs that you want to purchase. Once you purchase it, you’ll be able to access it right from the ChatGPT screen.


[ad_2]
Source link

FCC wants cars to make life harder for stalkers

andreasc
-
0
FCC wants cars to make life harder for stalkers
[ad_1]

Most new model cars are not just cars anymore. With multiple digital systems, vehicles are increasingly plugged into web applications and digital processes. Some of them are basically smartphones on wheels.

Even if we assume these new features were all created with your convenience in mind, some of them can have some adverse effects on your privacy, and sometimes even your safety.

Addressing the use of connected cars to stalk, intimidate, and harass survivors of domestic violence, the Federal communications Commission (FCC) has issued a press release calling on carmakers and wireless companies to help ensure the independence and safety of domestic violence survivors.

Chairwoman Jessica Rosenworcel of the FCC said:

“No survivor of domestic violence and abuse should have to choose between giving up their car and allowing themselves to be stalked and harmed by those who can access its data and connectivity.”

We have previously talked about cars spying on you, and the poor privacy policies that allow manufacturers to sell the data they gather for targeted advertising. We have also written about a federal judge that ruled it’s fine for car makers to intercept your text messages. But those are privacy concerns. Valid and serious, but on a different level from running the risk of being harassed by a jealous ex.

For readers focused on the privacy issues of connected cars, we can recommend the Mozilla report It’s Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy. And when you are parting with a car in the US, you may want to look at the Privacy4Cars app that can provide a Vehicle Privacy Report and claims to be able to delete your data. You will need your Vehicle Identification Number (VIN).

The FCC also asked wireless service providers (AT&T, T-Mobile and Verizon) to describe their partnerships with car manufacturers, seeking information on how the wireless providers work with them and what their policies are for handling geolocation data provided by car manufacturers.

The FCC press release includes statistics showing that more than 12 million people each year are the victims of rape, physical violence, and stalking.

Tips to keep a stalker from tracking your car

Not all cars offer these options, and the tips may not apply to your situation, but here are some general tips for people that are afraid they are the target of a stalker:

  • Use the navigation app on your phone, rather than the one built into your car.
  • Do not store places you visit regularly in the car’s navigation.
  • Consider using a VPN when you connect to your car’s hotspot.
  • Find out which devices can access the car or its location data by using any “remote access” apps for the car and remove the devices that are not under your control.
  • Familiarize yourself with the car manufacturer’s privacy policy so you know where your data might be sent. To give you an idea, data might end up with advertisers, law enforcement, service providers, the car manufacturer and its dealers, tech giants like Apple, Google, and Amazon, connected service providers, and government agencies.
  • Keep the software updated to make sure your car is equipped with the latest protection against potential intrusions.
  • If the suspected stalker has been near your vehicle, inspect it thoroughly for trackers and other unfamiliar hardware.
  • Try not to travel alone and always park in a well-lit, busy area if you are concerned about your physical safety.
  • If you have a dashcam that uses cloud storage, check who has access to the images. They can be used to track your movements.

We don’t just report on privacy—we offer you the option to use it.

Privacy risks should never spread beyond a headline. Keep your online privacy yours by using Malwarebytes Privacy VPN.


[ad_2]
Source link

Texas School Safety Software Data Leak Endangers Student Safety

andreasc
-
0
Texas School Safety Software Data Leak Endangers Student Safety
[ad_1]

The data leak occurred due to a misconfigured database at Raptor Technologies, a Texas-based school safety software provider.

A data leak involving Raptor Technologies, a Texas-based school safety software provider, exposed millions of sensitive records about students, parents, and staff.

The leak, discovered by cybersecurity researcher Jeremiah Fowler, exposed personal information, incident response plans, infrastructure challenges, and documents about at-risk students, raising concerns about student privacy and school safety. The leak exposed around 4,024,001 records, exposing students to numerous security risks.

“I reviewed a limited sample of documents and log records that contained what appeared to be sensitive information related to students, teachers, parents, and school safety plans or procedures,” said Fowler.

I immediately sent a responsible disclosure notice and received confirmation that indeed the data belonged to Raptor Technologies,” Fowler wrote in the blog post published by VPNMentor on January 11th, 2024.

Part of the exposed records were school incident response plans, classroom layouts, infrastructure challenges, background check system details, and at-risk student documents, including their “personal and medical conditions, any mental health or legal problems they might be having, and the threats they pose to the school.”

In addition, it contained court-ordered protection orders, divorce decrees, and monthly drills. It also included scanned PDF files and images of legal documents. In summary, Fawler managed to analyse a treasure trove of records including the following:

  1. Testing documents: 1,326 files
  2. Testing logs: 332,409 / 23 GB
  3. Staging documents: 7,900 files
  4. Staging logs: 1,002,394 / 25 GB
  5. Production documents: 81,511 files
  6. Production logs: 2,598,461 blobs / 779 GB

Raptor Technologies secured the database and restricted public access. The duration of the exposure and potentially malicious access remains unknown, as only an internal forensic audit could identify potential threats.

It is worth noting that Raptor Technologies provides a visitor management system for schools to track and screen visitors, volunteers, and contractors, ensuring they are not on sex offender registries or watchlists. The software is used by over 60,000 schools worldwide, including 5,300 U.S. districts. The exposure could potentially impact nearly 40% of American schools.

The unprotected database exposed sensitive data such as school maps, camera locations, security vulnerabilities, meeting points, and emergency response plans. These could have real-world consequences if accessed by cybercriminals. Court records contained restraining orders, criminal offences, divorce agreements, and personal information, increasing the risk of identity theft or financial crimes. 

Moreover, health records revealed student health forms, compromising privacy and confidentiality. Incident reports and safety drill summary reports contained students’ names and detailed at-risk behaviour, which can threaten their well-being later in life. School maps identified classroom locations, room numbers, evacuation routes, and camera locations, posing additional privacy risks.

Fowler recommends proactive cybersecurity measures for schools and data management companies, including restricting access, conducting regular assessments, and encrypting sensitive information.

  1. 900 U.S. Schools Hit by MOVEit Hack, Exposing Student Data
  2. Schools Are the Most Targeted Industry by Ransomware Gangs
  3. Conti ransomware gang demanded $40m from US school district
  4. Data Leak Exposes 1.5B Real Estate Records, Including Kylie Jenner
  5. 38 million records exposed in Microsoft Power apps misconfiguration

[ad_2]
Source link

Joomla! vulnerability is being actively exploited

andreasc
-
0
Joomla! vulnerability is being actively exploited
[ad_1]

The Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability for the Joomla! Content Management System (CMS) to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

This means that Federal Civilian Executive Branch (FCEB) agencies need to remediate this vulnerability by January 29, 2024 in order to protect their devices against active threats.

Joomla! is an open-source CMS that’s been around since 2005, and has been one of the most popular CMS platforms by market share for much of that time. Many companies, from small outfits to large enterprises, use a CMS in some form to manage their websites. There are lots of advantages to using a popular CMS, but if you do you need to keep an eye out for updates.

Take for example the vulnerability that has been added to the CISA catalog: CVE-2023-23752 was reported, and a fix was created in February 2023. But here we are, active exploitation is upon us.

The vulnerability allows a successful attacker to access an application programming interface (API) through which they can obtain Joomla-related configuration information. The attacker has to construct specially crafted requests, which can eventually lead to the disclosure of sensitive information.

The vulnerability is the result of an improper access check that allows unauthorized access to webservice endpoints that exist in Joomla! versions 4.0.0-4.2.7.

If the database is exposed publicly, the attacker can change the Joomla! Super User’s password. After which the attacker can log in to the administrative web interface and modify a Joomla! template to include a web shell, or install a malicious plugin, giving themselves the ability execute code remotely.

But even if the database is not exposed publicly, exploitation can be used to get the Joomla! user database (usernames, emails, assigned group). This could open up options for credential stuffing. Credential stuffing is a special type of password attack that exploits password reuse by using username and password combinations found on one service to log in to other, unrelated services.

Users are advised to upgrade their CMS to version 4.2.8 or later. The latest version (5.0.1 at the moment of writing) and upgrade packages can be downloaded here.

Secure your CMS

There are a few obvious and easy-to-remember rules to keep in mind if you want to use a CMS without compromising your security. They are as follows:

  • Choose a CMS that actively looks for and fixes security vulnerabilities.
  • If it has a mailing list for informing users about patches, join it.
  • Enable automatic updates if the CMS supports them.
  • Use the fewest number of plugins you can, and do your due diligence on the ones you use.
  • Keep track of the changes made to your site and its source code.
  • Secure accounts with two-factor authentication (2FA).
  • Give users the minimum access rights they need to do their job.
  • Limit file uploads to exclude code and executable files, and monitor them closely.
  • Use a Web Application Firewall (WAF).

If your CMS is hosted on your own servers, be aware of the dangers that this setup brings and keep it separated from other parts of your network.

We don’t just report on vulnerabilities—we identify them, and prioritize action.

Cybersecurity risks should never spread beyond a headline. Keep vulnerabilities in tow by using ThreatDown Vulnerability and Patch Management.


[ad_2]
Source link
1...529530531...1,479Page 530 of 1,479