Best Of CES 2024: Tineco Pure One Station

0
[ad_1]

Tineco’s Pure One Station will make vacuuming less of a chore

Let’s be honest with ourselves here, vacuuming is not usually a fun task, it’s a chore that you don’t want to do but, it needs to be done so you grit your teeth and you do it. Tineco wants to make the act of vacuuming less of a chore and more of a simple task that you don’t have to hate, and the Pure One Station it announced at CES this week is the tool that you will be able to use to get to this point. The Pure One Station is a powerful push vacuum with baked-in smart technology. It also comes with an OmniHub that is essentially a 4-in-1 machine. The OmniStation is where you’ll hang the vacuum up when you’re done cleaning.

But the OmniStation also charges the vacuum in between uses. Additionally, it can self-clean the vacuum and its bin, brushes, tubes, and filters. This is probably the best part about the vacuum setup. The fact that the OmniStation cleans all of those parts for you on top of emptying the bin is nothing short of amazing. To make this self-cleaning process even better, the OmniStation can detect how full its own bin is. It does this so it can adjust when to actually do the self-cleaning.

Now you might be thinking, “it empties the vacuum bin for me but I still have to empty the OmniStation bin.” That is true. However, the OmniStation bin is large enough to store up to 60 days’ worth of dust and debris. So you will only have to realistically empty it once every couple of months. And that’s not that bad at all. This is about as simple and hands-off as vacuuming can get with a manual push vacuum. And that’s a wonderful thing if you hate this particular cleaning task.

It’s tough on dust and debris, but gentle enough to use on pets

Vacuums are a crucial part of keeping a clean home. So you want them to be powerful enough to ensure they get as much dust and debris off the floors as possible. The Tineco Pure One Station will have no problem with that as it provides powerful suction. That being said, it is also perfectly fine to use on pets for grooming. It even comes with a ‘FurFree’ kit that you can slap on to groom your furry friends and get all that loose hair before it falls off and gets all over the floors and carpets.

And if you’re worried about the hair getting stuck in the brushes, don’t be. The vacuum comes with a ‘ZeroTangle’ brush that traps hair and prevents it from wrapping around the brush. Vacuuming might never be fun, but it can be less of a chore with this vacuum. That plus all smart features and its reasonable price (it’s $799 by the way) are why the Tineco Pure One Station has earned the Best of CES 2024 award.


[ad_2]
Source link

Mirai-based NoaBot Botnet Targeting Linux Systems with Cryptominer

0
[ad_1]

A noticeable difference between NoaBot and Mirai is that rather than DDoS attacks, the botnet targets weak passwords connecting SSH connections to install cryptocurrency mining software.

Cybersecurity researchers at Akamai have discovered cryptomining malware called NoaBot based on the notorious Mirai botnet. The crytojacking malware NoaBot is currently targeting Linux servers and has been active since January 2023.

According to Akamai, a noticeable difference between NoaBot and Mirai is that rather than DDoS attacks (Distributed Denial of Service attacks), the malware targets weak passwords connecting SSH connections and installs cryptocurrency mining software, allowing attackers to generate digital coins using victims’ computing resources, electricity, and bandwidth.

Here, it is important to mention that NoaBot malware has also been used to deliver P2PInfect, a separate worm discovered by Palo Alto Networks in July 2023.

NoaBot is compiled using the UClibc code library, unlike the standard Mirai library. This changes how the antivirus protections detect NoaBot, categorizing it as an SSH scanner or generic trojan. The malware is statically compiled and stripped of symbols, while strings are obfuscated instead of saved as plaintext, making it harder for reverse engineers to extract details.

The NoaBot binary runs from a randomly generated folder, making searching devices harder. The standard Mirai dictionary is replaced with a large one, and a custom-made SSH scanner is used. Post-breach capabilities include installing a new SSH-authorized key.

This botnet has grown significantly, with over 800 unique IP addresses worldwide showing signs of NoaBot infections. The worm is a customized version of Mirai, a malware that infects Linux-based servers, routers, web cameras, and other Internet of Things devices.

Interestingly, the malware includes embedded song lyrics from the “Who’s Ready for Tomorrow” song by Rat Boy and IBDY, but later samples do not have these. The botnet also adds command line arguments, such as the “noa” flag, which installs a persistence method after a reboot.

Mirai-based NoaBot Botnet Targeting Linux Systems with Cryptominer
Screenshot: Akamai
Mirai-based NoaBot Botnet Targeting Linux Systems with Cryptominer
Screenshot: Akamai

Threat actors modified the XMRig miner to extract the mining configuration before execution. The miner’s functions involve function calls and signals. The configuration contains the mining pool and wallet address details. However, IDA misses the binary name and pool IP placeholder, allowing attackers to estimate the profitability of the cryptomining gig.

Researchers noted that the attackers were running their private pool instead of a public one, eliminating the need for a wallet. However, domains are no longer resolvable with Google’s DNS, and no recent incidents involving the dropping of the miner are noticed, suggesting the threat actors may have halted the campaign for better opportunities.

Hackread has been following incidents involving Mirai since it was discovered in 2016. Mirai is a self-replicating malware targeting Linux-based IoT devices, used to infect other vulnerable devices.

In 2016, it was used in a massive DDoS attack against Dyn DNS, paralyzing the internet. The creators released the source code, allowing crime groups to incorporate it into their attacks. Mirai scans the internet for Telnet connections via infected devices to crack Telnet passwords, then targets additional devices using the same technique.

Akamai urges Linux server administrators to protect their systems from NoaBot by keeping software updated, using strong passwords, enabling two-factor authentication, and monitoring unauthorized activity. This is crucial as NoaBot can launch DDoS, data breaches, and cryptojacking attacks.

  1. Hackers behind Mirai botnet & DYN DDoS attacks plead guilty
  2. Hackers behind Mirai botnet to avoid jail for working with the FBI
  3. Tiny Mantis Botnet Can Launch Powerful DDoS Attacks Than Mirai
  4. Reaper malware outshines Mirai; hits millions of IoT devices worldwide
  5. Mirai Variant ‘OMG’ Turns IoT Devices into Proxy Servers for Cryptomining

[ad_2]
Source link

Microsoft to integrate AI text generation into Windows 11 Notepad

0
[ad_1]

After extending its AI-powered Copilot from Windows 11 to Windows 10 and later to Android, Microsoft is now reportedly bringing some of that AI magic to Notepad with text generation capabilities in Windows 11. While the company has been actively incorporating AI into various aspects of its ecosystem, Windows enthusiasts have stumbled upon references to a potential AI bot, possibly named Cowriter, within the app package of Notepad. This move aligns with Microsoft’s efforts to enhance user experience by integrating AI functionalities into its applications.

Windows Copilot, Microsoft’s all-purpose digital AI assistant, has been evolving, and now it seems Notepad is getting its own AI companion. References in the app package folder suggest a ChatGPT-powered bot may be on the horizon. Tentatively called Cowriter, this AI assistant could provide users with text generation capabilities directly within the Notepad app. The files include references like “CoWriterCreditLimitDialog” and “CoWriterDropDownButton,” indicating potential UI elements for managing the AI’s features.

The addition of an AI-powered text generation feature in Notepad signals a potential revamp of the iconic text editor.

The discovery hints at the possibility of a credit system, where users may have usage quotas for the AI feature. Similar to other Microsoft AI-powered features like Bing Image Generator or Cocreator in Paint, users may receive credits to generate unique content within Notepad, with the potential for boosts and a subsequent slower generation process once the initial credits are used up.

While Microsoft hasn’t officially announced this AI-powered text generation feature, Windows Insiders have uncovered UI references like “CoWriterDropDownButton” and “CoWriterInfoButton,” suggesting buttons for accessing the Notepad AI feature and seeking help or additional information.

Notepad’s AI tool will likely provide users with context-specific suggestions for their text, similar to the Editor feature introduced in Microsoft Edge. The promotional image found in the updated app package indicates that users may receive multiple suggestions for a text selection, offering modifications related to “Length,” “Tone,” “Format,” and “Instructions.” This aligns with Microsoft’s broader strategy of integrating AI to enhance productivity and user engagement across its suite of applications.

While Microsoft has not yet officially confirmed any details about the official release, speculation suggests that Notepad’s AI feature might undergo testing soon, with a potential waitlist for interested users, possibly within the Windows Insider community. Microsoft continues to explore innovative ways to leverage AI to offer more intelligent and context-aware tools to its users.


[ad_2]
Source link

Best Of CES 2024: Acer Swift X 14

0
[ad_1]

The Swift X 14 is an impressive creator laptop that moonlights as a gaming laptop

Usually when you have a creator laptop that’s great for editing it’s not always the best choice for gaming, but Acer is giving you both with the recently announced Swift X 14 laptop. Now, to be clear, this isn’t the first laptop designed for creators and editing that would also be good for gaming. But a lot of the time those laptops can cost quite a lot. And that isn’t really the case with the Swift X 14 that Acer announced this week at CES. It starts at $1,399.99 and can get up to an RTX 4070 GPU inside, so you could end up with a configuration that is powerful enough for both your editing/creator tasks as well as gaming.

Making this a great editing laptop that can moonlight as a gaming PC during off hours. Now the model with an RTX 4070 GPU is going to cost more than the listed $1,399.99 starting price. But chances are it’ll be less than other comparable laptops with the same GPU and specs. The Swift X 14 also comes with a really nice display that’s 2.8K resolution and Calman-Verified for color accuracy. So if you do a lot of work with Photoshop or similar editing tools, you’ll like how things look on the Swift X 14. If you’re already in love with it, Acer says these will go on sale in February. But there’s more to love about it.

A clean, stylish, and minimalistic design that is easy to carry around thanks to its lightweight build

We’re suckers for powerful yet portable laptops, and the Swift X 14 is definitely both of those things. Acer has done a great job at keeping its Swift lineup as minimal as possible while refining bits and pieces of the exterior and interior. The result of this latest model is a laptop that can handle all the tasks you throw at it while being a very portable laptop. It weighs about 1.549 kg or just over 3.4 lbs. which is very lightweight. It’ll be easy to slide into a bag and carry with you wherever you go. So you won’t always be locked to working or studying in one place.

Moving back to the RTX 40-series GPUs, you’ll get DLSS 3 in games that support it. And that’s going to bump up the frame rate while allowing you to tune the graphics fidelity up a little bit. The end goal is to allow for some adjustment to bring graphics up without tanking the frame rate so gaming still feels smooth. And DLSS 3 really works wonders there.

Not only that but the Swift X 14 is now coming with Intel’s new Core Ultra processors that have baked-in AI features. This AI-powered CPU will help with battery efficiency and overall performance efficiency for a smooth user experience all around. All of these things plus the reasonable starting price are reasons why the Acer Swift X 14 earned the Best of CES 2024 award.


[ad_2]
Source link

Act now! Ivanti vulnerabilities are being actively exploited

0
[ad_1]

Software vendor Ivanti has warned customers about two actively exploited vulnerabilities in all supported versions of Ivanti Connect Secure and Ivanti Policy Secure Gateways. Successful exploitation would give an attacker the ability to run arbitrary code on Ivanti’s Virtual Private Network (VPN) system.

The warning is echoed by several international security agencies like CISA and the German BSI. Both are flagging active exploitation of these two chained vulnerabilities. Ivanti Connect Secure is a widely used VPN solution that allows users to connect to their organization’s network.

The Common Vulnerabilities and Exposures (CVE) database lists publicly disclosed computer security flaws. The CVEs mentioned in these reports are:

CVE-2023-46805 (CVSS score 8.2 out of 10): an authentication bypass vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure, which allows a remote attacker to access restricted resources by bypassing control checks.

CVE-2024-21887 (CVSS score 9.1 out of 10): A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

Ivanti Neurons for Secure Access is not vulnerable to these CVEs. However, the gateways being managed are independently vulnerable to them.

After attackers have used the authentication bypass to authenticate as an administrator they are able to install webshells on the VPN system to gain persistence, allowing them to execute commands on the compromised devices.

Active exploitation has been seen as far back as December 3, 2023. These attackers erased log files and turned logging off on the compromised system. Besides that, they had stolen configuration files, altered existing files, dropped remote files, and established a reverse tunnel allowing them unrestricted access.

One of the dropped files contained a JavaScript that stole the credentials of users that logged in, which could also be used for lateral movement.

Mitigation

Patches will be released on a schedule based on versions, with the first coming out in the week of January 22. The last version will come out the week of February 19.

“We are releasing patches based upon telemetry information available to us from current installed solutions that notify us of the version number they are running. We are releasing patches for the highest number of installs first and then continuing in declining order.”

Until then, customers are under advice to apply a workaround and monitor their network traffic for suspicious activity and analyze the logs on their Connect Secure device.

The workaround requires importing a mitigation.release.20240107.1.xml file which can be obtained via the download portal (login required). The XML file is in the zipped format, so you’ll need to unzip and then import the XML file.

  • Navigate to Maintenance > Import/Export > Import XML
  • Use the Browse button to point to the unzipped XML file
  • Click the Import Button

Import of this XML into any one node of a Cluster is enough. A FAQ and more detailed instructions can be found in the Ivanti advisory article.

It is important to note that applying the workaround or a patch, when they are made available, is not enough to undo the effects of an attack. If you see signs that your instances have been compromised you should investigate or hire a specialized investigator to find out what the attackers may have obtained and what needs to be done to regain the required safety level.

CISA has added CVE-2023-46805 and CVE-2024-21887 to its Known Exploited Vulnerabilities Catalog, which requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by January 21, 2024 to protect FCEB networks against active threats.


We don’t just report on vulnerabilities—we identify them, and prioritize action.

Cybersecurity risks should never spread beyond a headline. Keep vulnerabilities in tow by using ThreatDown Vulnerability and Patch Management.


[ad_2]
Source link

US unlocked Galaxy A52 gets Android 14, January patch for locked units

0
[ad_1]

A few days back, Samsung rolled out the Android 14-based One UI 6.0 update to the Galaxy A52 5G in the US. The initial release only covered carrier-locked units. The big Android update has now reached unlocked units too. Those with a locked Galaxy A52 5G, meanwhile, are getting a newer security patch, i.e. the January 2024 release.

Android 14 is widely available for the Galaxy A52 5G in the US

Samsung launched the Galaxy A52 in March 2021 with Android 11 onboard. The device received updates to Android 12 and Android 13. It is now picking up its final major update in the form of Android 14. International versions of the mid-range phone jumped to the latest Android iteration at the end of 2023. The US units followed shortly but the company initially only updated carrier-locked variants.

We can now confirm that Android 14 is available for unlocked Galaxy A52 5G units in the US. The update is rolling out with the firmware build number A526U1UEUCFWL3. Since it is a major update, there are plenty of new features and improvements to talk about. Samsung has made some changes to the UI, particularly the Quick Settings panel, to make for a more intuitive user experience.

Android 14-based One UI 6.0 also brings new camera features and editing tools, improved homescreen widgets, smoother system animations, improved stock apps, and more. Overall, this update will inject new life into your aging Galaxy smartphone. You will get to experience new features and improved visuals. This is the last major update for the Galaxy A52 5G, though. It may get One UI 6.1 but won’t add many new features.

Along with these goodies, the latest update for unlocked Galaxy A52 5G units in the US also brings the December 2023 Android security patch. Last month’s SMR (Security Maintenance Release) patches more than 60 vulnerabilities across the Galaxy family. These include seven critical Android OS vulnerabilities and dozens of high-severity issues. A few flaws are exclusive to Samsung devices and don’t affect Android products from other brands.

Carrier-locked variants are getting the January 2024 security patch

As unlocked units move to Android 14, users with a carrier-locked Galaxy A52 5G are getting the latest security patch. They are receiving the January 2024 SMR with the firmware build number A526USQSCFWL4. These units also picked up the December patch with Android 14, so unlocked variants should get the new security release in the coming weeks. This month’s patch contains 80 vulnerability patches, including one critical Android OS flaw.


[ad_2]
Source link

Google changes the function of the microphone icon on Pixel Launcher’s search bar

0
[ad_1]
The Pixel 2 XL is fondly remembered as being one of the best Pixel models ever. One way to summon Google Assistant on the phone was to squeeze the sides of the phone’s bottom half, a feature called Active Edge. Removing that feature really wasn’t a hardship for most Pixel users since they could press on the microphone icon found in the search bar at the bottom of the Pixel Launcher. But that access to Google Assistant is being removed by Google.
According to 9to5Google, now when you tap on the microphone icon in the Pixel Launcher’s search bar, you will see search results based on your queries. Search results are designed to answer your questions quickly, with links to websites included. Google Assistant uses conversations instead of links to websites in order to get your queries answered and tasks completed. Google originally made this change to the microphone icon on the Pixel Launcher’s search bar earlier this year but switched back as though it never happened until now.
There are other ways to open Google Assistant on your Pixel such as tapping the Assistant icon on the home screen. If you don’t have the Google Assistant app pre-installed on your Pixel or Android phone, you can install it from the Play Store by tapping on this link and following the directions. You can also open Google Assistant by saying “Hey Google” which can be set up on your Pixel by going to Settings > Apps > Assistant > Hey Google & Voice Match. Make sure that Hey Google & Voice Match is toggled on.

On your Pixel, you can also activate Google Assistant by long-pressing on the power button found on the upper right side of the phone. And if you want to use Google Search on a Pixel, you can now tap the microphone icon on the search bar, or open the Google app and use the microphone on the app’s search bar).

Even iOS users can choose between Google Search and Google Assistant. The Google Assistant app can be installed on iOS via this App Store listing. The Google app can be installed from the App Store by tapping on this link. Google Assistant is superior to Siri when it comes to answering questions and as a result, when I do get a new iPhone, one of the first things I do is install the Google Assistant app on the phone. 

[ad_2]
Source link

Another massive leak is here to ruin the Galaxy S24 launch

0
[ad_1]

At this point, there is hardly anything we don’t know about Samsung‘s Galaxy S24 lineup. The new flagships are still a week away—coming on January 17—but leaks have already revealed almost everything about them. Another massive leak is here to ruin the launch event, revealing more tidbits of information about the devices.

Massive Galaxy S24 leak bares it all ahead of the official launch

An X user recently shared four slides from what appears to be an official Galaxy S24 document Samsung used for training its employees before launch. The slides are marked “confidential,” so they weren’t meant to be seen by the public. But here we are. The first slide details the color options for the new flagships. The Galaxy S24 and Galaxy S24+ will come in Amber Yellow, Cobalt Violet, Marble Gray, and Onyx Black colors.

The Ultra will also be available in the same four hues. However, since it features a Titanium frame, Samsung is using the terms Titanium Yellow, Titanium Violet, Titanium Gray, and Titanium Black for its colorways. The Gray version is the signature color for the device (primarily used in marketing materials) and appears to be a slightly different shade of Gray than the other two models. Yellow is the signature color for the base model and Violet for the Plus.

Samsung Galaxy S24 major leak official slide 1

The second slide confirms Samsung’s dual-chip strategy for the Galaxy S24 trio, with the Snapdragon 8 Gen 3 and Exynos 2400 being the two chips. It doesn’t specify which model will get which processor. However, earlier leaks have revealed that the Ultra will ship with Snapdragon globally, while the other two models will get Exynos in most markets. Both chips bring massive CPU, GPU, and NPU improvements over the Galaxy S23’s Snapdragon 8 Gen 2.

The slide suggests that the Galaxy S24 series will offer a more enjoyable gaming experience thanks to improved ray tracing and faster touch response. The new flagships bring a 12% improvement in the touch response speed. They also feature a larger vapor chamber for enhanced cooling performance. It is 1.9 times larger in the Ultra, 1.6 times larger in the Plus, and 1.5 times larger in the base model.

Samsung Galaxy S24 major leak official slide 2

A massive brightness boost and 8K videos at 5x zoom are on the cards

The latest leak also confirms a massive display brightness boost for the Galaxy S24 lineup. All three models will have a peak HBM (high brightness mode) brightness of 2,600 nits and a maximum local rightness of 1,500 nits. The figures for the Galaxy S23 series are 1,200 nits and 1,750 nits, respectively. The phones will feature Vision Booster for enhanced color accuracy and contrast. You can manually adjust the color tone and temperature, though.

Last but not least, the leaked slides settle the confusion around the Galaxy S24 Ultra’s zoom cameras. The phone does feature a 50MP 5x telephoto zoom camera instead of the 10MP 10x lens found in the 2023 model. However, Samsung claims that you will still get optical zoom quality at 10x magnification. The device also features a 3x zoom lens and can capture lossless pictures at 2x magnification. You get up to 100x hybrid Space Zoom as well.

Samsung Galaxy S24 major leak official slide 3

Additionally, the Galaxy S24 Ultra can capture 8K videos with its 5x zoom camera. This is a massive upgrade over the previous-gen model, which can record 8K videos with its primary camera only. The Galaxy S24 and Galaxy S24+ lack a 5x zoom camera, though. Their optical zoom capability is limited to 2x and 3x magnification, while Space Zoom is limited to 30x magnification. The two models cannot capture 8K videos with their zoom camera.

As expected, Samsung will leverage AI to improve the camera performance of the Galaxy S24 series. At high zoom levels, the phones will use AI-powered multi-frame processing and Super Resolution based on deep learning to give you better pictures. The new flagships will also feature AI-powered photo and video editing tools, as well as AI translation of audio calls in real-time. Stay tuned for the official launch next week.

Samsung Galaxy S24 major leak official slide 4


[ad_2]
Source link

Get hands-on with Galaxy AI at Samsung Galaxy Experience Spaces

0
[ad_1]

A few days back, Samsung put up giant billboards across several big cities worldwide to promote Galaxy AI, a suite of on-device AI features debuting with the Galaxy S24 series next week. The company has now announced Galaxy Experience Spaces to let fans get hands-on with Galaxy AI and the new flagships. These spaces will open following the Galaxy Unpacked launch event on January 17.

Samsung to open several Galaxy Experience Spaces globally

As of this writing, Samsung has confirmed plans to open Galaxy Experience Spaces in Bangkok, Thailand; Barcelona, Spain; Berlin, Germany; Dubai, the UAE; London, the UK; New York, the US; Paris, France; and Seoul; South Korea. These immersive spaces will showcase “how Galaxy AI enables new ways to connect, create, and play” on mobile devices. The exact locations of the venues are available here.

The venues will feature interactive zones where visitors can experience how Galaxy AI amplifies everyday activities. From discovering new places and capturing and sharing precious moments to communicating across language barriers, Galaxy AI assists you in everything. It enables you to do things in a whole new way. “Immediately upon entering these spaces, visitors will know they’ve stepped into a world of possibilities,” Samsung says.

Everything visitors experience at these venues will be available on the next Galaxy device, i.e. the Galaxy S24 series. The Korean firm hints at improved camera and gaming performance thanks to AI. “Fan favorites like Nightography and next-level gaming will captivate visitors,” it says. Visitors can also participate in exclusive giveaways, including an unspecified “special prize” for a lucky winner.

The spaces will open on the Galaxy S24 launch day

Except for Barcelona, these Galaxy Experience Spaces will go live in all aforementioned cities shortly after the Galaxy S24 launch on January 17. Since the launch event will take place in San Jose, USA, it falls late on January 18 in some regions due to the time difference. In Barcelona, Samsung will open the immersive space on February 15. It will welcome visitors to the venue till February 29. The venues in other cities close between February 11-16.

“Samsung Galaxy empowers people with new experiences and new ways to do what they love. With Galaxy AI, we’re redefining what’s possible on mobile devices,” said Stephanie Choi, EVP & Head of Marketing of the Mobile Experience Business at Samsung. “These spaces will give Galaxy fans the first opportunity to see a new era of innovation firsthand, and we can’t wait to see how Galaxy AI will empower people to unleash their potential.”


[ad_2]
Source link