2024 Trends for Securing Your Business Premises: Essential Strategies and Technologies

andreasc
-
0
2024 Trends for Securing Your Business Premises: Essential Strategies and Technologies
[ad_1]

As you look ahead to 2024, the landscape of physical security is evolving rapidly, with new trends emerging that could reshape how you protect your business premises. 

Advances in technology, such as artificial intelligence, are playing a pivotal role in developing security solutions that are not only more efficient but also more sophisticated and adaptable to the changing threats. 

Being aware of these trends is crucial for staying a step ahead of potential risks. Your security concerns must also take into account the ongoing geopolitical issues that influence the global security climate. This means being prepared for not just local threats but understanding that the actions of state actors and other large ill-intentioned groups can impact your business security as well.

From integrating AI to enhance surveillance capabilities to cybersecurity measures that defend your digital interfaces, the coming year will demand a comprehensive approach to securing your assets.

It’s also important to consider how advancements like machine learning can be incorporated into security strategies and what’s their long-term potential. These technologies not only bolster defence mechanisms but also streamline the monitoring process, helping you respond to incidents with greater accuracy and speed. 

Developing a security strategy that leverages the latest trends will be essential in safeguarding your business against the sophisticated threats expected in 2024.

Evolving Cybersecurity Threats and Predictions for 2024

To fortify your security systems in a way that will protect you from evolving threats, you first need a clear, level-headed overview of the current state of cybersecurity. 

In 2023, we’ve seen plenty of changes, and by analyzing them, we can come up with a solid estimation as to what the most prevalent attack vectors in 2024 will be.

Rise of Generative AI and Machine Learning

Generative AI and machine learning have already transformed various industries—but they are also becoming potent tools for cybercriminals, enabling them to craft attacks that are more convincing and harder to detect. 

Your cyber defences must adapt to these new threats, incorporating advanced AI to recognize threats and respond to such attacks proactively. The deployment of these technologies by adversaries necessitates fortifying your AI security measures to ensure that they remain resistant to manipulation or deception.

Prevalence of Ransomware and Phishing Attacks

Ransomware continues to evolve, becoming more targeted and damaging. Expect to see a surge in the prevalence of ransomware that exploits newfound vulnerabilities in software and hardware. 

Additionally, phishing attacks are growing in sophistication, with tactics like Phishing 3.0 leveraging legitimate services to bypass security measures. Your staff must be regularly trained and updated on the latest developments in the field to be able to effectively recognize and respond to these types of social engineering attacks in a timely fashion.

Expanding Threat Landscape with IoT and Web 3.0

Integrating IoT devices into business operations expands the attack surface, offering a multitude of new entry points for cybercriminals. Securing your IoT ecosystem by implementing stringent security policies and regular vulnerability assessments will become a top priority in 2024. 

Concurrently, the ascent of Web 3.0 introduces new cybersecurity dimensions—to brace for the impact of this new paradigm, you have to understand the inherent risks of decentralized networks, not just the potential security benefits of decentralization, as well as the importance of robust cryptographic controls to safeguard digital assets.

Building a Resilient Defense: Strategies and Solutions

The cybersecurity arms race has always been a mad dash where the two parties—the attacks and the defenders, have been trying to one-up each other. The coming year will be no different, but to stay one step ahead, your business needs to implement the newest best practices as soon as possible

Now, let’s take a look at a couple of promising cybersecurity methods and approaches that will allow you to enjoy continued resilience against bad-faith actors in 2024.

Zero Trust Architecture Implementation

Zero Trust Architecture (ZTA) isn’t just a security trend – it’s a necessary shift in how you protect your network. Unlike traditional perimeter security models that trust insiders by default, Zero Trust requires verification from everyone—inside or outside your network—before granting access. 

It operates on the principle “never trust, always verify,” ensuring that only authenticated users with the necessary permissions can access your data and applications. You’ll need to adopt identity and access management paired with least privilege access to effectively apply this model to your security strategy.

Advanced Cloud Security Adoption

The migration to cloud services offers a myriad of benefits for businesses, so much so that refusing to move to the cloud puts a company at an instant disadvantage in terms of operational efficiency. However, this trend has also unveiled new vulnerabilities, making advanced security approaches such as cloud-based captive portal authentication vital for protecting your assets. 

On top of that, you should look to implement solutions that offer end-to-end encryption and real-time threat detection to safeguard your cloud environment. This applies whether or not your business is digitally focused—with the data-rich environment of today, even family-owned brick-and-mortar stores and home improvement contractors should focus on cloud data security by leveraging CRM solutions, thereby outsourcing the security and backing up of important customer data.

By leveraging these technologies, you can maintain visibility and control over your data, regardless of where it resides, thus ensuring cyber resilience. Providers who offer comprehensive security posture assessments should be a part of your adoption strategy to evaluate and fortify your cloud infrastructure—no matter what industry or sector your business may be in.

Integration of AI and ML in Cyber Defense

With cyberattacks growing in complexity, Artificial Intelligence (AI) and Machine Learning (ML) are becoming integral parts of a modern security strategy. These technologies can analyze vast amounts of data to identify potential threats more efficiently than traditional methods. 

Your defence systems can be trained to detect anomalies and automatically respond to incidents, potentially stopping attacks in real-time. By integrating AI and ML, you’re enhancing your defensive technologies with smart solutions that learn and adapt to new security threats as they arise.

By deploying these strategies, you’re not only strengthening your defence but also building resilience into the core of your business.

Advanced Physical Security Systems

Cybersecurity might be the talk of the town—but focusing solely on the digital plane leaves businesses exposed in a much more mundane way. Physical security is and always will be both a necessity and a priority—thankfully, companies can utilize some very interesting and effective new tools in 2024 to mitigate risks.

Decentralized Security Solutions

Your security system’s efficacy increases with decentralized solutions. This approach involves a network of surveillance cameras that operate independently, ensuring continuous monitoring even if one camera faces disruption. Leveraging cloud-based technologies, surveillance data can be accessed remotely, allowing you to respond swiftly to any security breach.

Automatically detecting and alerting security personnel to any suspicious activity in real-time is necessary, and integrating stealth security systems that include motion detectors can cover blind spots, while advanced surveillance cameras can offer real-time monitoring capabilities. 

Access Points and Access Control

Access control systems have evolved, and by 2024, biometric technologies such as fingerprint and facial recognition will become even more commonplace. 

These systems offer more than just restricted entry – they provide a comprehensive view of access monitoring, recording each instance an individual enters or exits, enhancing accountability and security within your premises.

Shaping the Human Factor in Cybersecurity

The human element in cybersecurity plays a crucial role—as it’s often the weakest link in security chains. Strengthening this factor involves enhancing employee training and addressing skill shortages.

Enhancing Security Awareness and Training Initiatives

You can mitigate risks like social engineering by prioritizing cybersecurity awareness. Implementing continuous employee training programs that are engaging and practical is essential. This ensures that your staff can recognize and respond to cyber threats effectively. 

For example, mock phishing exercises can prepare employees to identify suspicious emails, reducing the risk of breaches. Initiatives like these can prove to be a solid defence against the multitude of digital threats targeting human vulnerabilities.

Addressing Talent Shortages through Skill Development

Dealing with talent shortages in cybersecurity means focusing on skill development within your organization. Encouraging employees to develop technical and soft skills can help bridge the gap. 

Structured training programs can equip your team with the latest cybersecurity strategies, fostering a proactive security posture. Also, consider investing in courses and certifications that enhance your employees’ ability to anticipate and counteract cyber threats. By developing in-house talent, you can lessen the impact of the industry-wide skills shortage and create a resilient security culture.

Regulatory Compliance and Data Privacy Considerations

As you secure your business premises, understanding and adhering to evolving regulatory compliance and data privacy standards is vital. These safeguard business operations, sensitive data, and consumer trust.

Global Cybersecurity Regulations and Frameworks

Global cybersecurity regulations and frameworks play a crucial role in the governance of how businesses protect sensitive information. The National Institute of Standards and Technology (NIST) offers guidelines that many international regulations echo. 

Integrating NIST’s robust standards helps you align with global expectations, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), ensuring that your cybersecurity measures are comprehensive and current.

Regulations You Must Follow:

  • GDPR: Affects any business handling EU residents’ data.
  • CCPA: Impacts businesses dealing with the personal information of California residents.
  • Other regional laws may apply depending on your business’s location and reach.

Strengthening Data Privacy and Handling Sensitive Information

Your approach to handling sensitive data must include stringent data privacy practices. The Federal Trade Commission (FTC) mandates that businesses protect consumer information. Thus, developing a solid data privacy plan, including third-party risk management, is crucial to compliance and safeguarding your reputation.

It’s important to stay informed about the top cybersecurity threats for employee data as this knowledge is paramount for reinforcing your defense mechanisms against sophisticated cyber attacks.

Proper governance, guided by international frameworks and regulations, combined with a focused approach to data privacy, positions your business effectively against the backdrop of increasing cybersecurity challenges.

Conclusion

The landscape of security is ever-evolving with technology at its core. It’s paramount to understand how emerging trends can be leveraged to bolster the safety of your business premises.

Understanding security trends that affect your business is the first step in preventing potential breaches. It’s not just about technology — a focus on the human element is also critical. Proper training can turn your employees into the first line of defence against security threats.

  1. How to Identify and Avoid Online Trading Scams
  2. How To Safeguard Your Data With Cloud MRP System
  3. PDF Security – How To Keep Sensitive Data Secure in a PDF File
  4. 5 Fraud Prevention Strategies for Businesses Against Cyber Attacks
  5. Deepfakes Are Being Used to Circumvent Facial Recognition Systems
  6. The Imperative of Automating Fraud Detection in Financial Institutions

[ad_2]
Source link

New MetaStealer malvertising campaigns | Malwarebytes

andreasc
-
0
New MetaStealer malvertising campaigns | Malwarebytes
[ad_1]

MetaStealer is a popular piece of malware that came out in 2022, levering previous code base from RedLine. Stealers have become a very hot commodity in the criminal space, so much so that there is competition between various groups.

Threat actors have primarily used malspam as an infection vector to drop MetaStealer as well as cracked software via stolen YouTube accounts, but it was at least once previously seen in a malvertising campaign.

In the past week, we observed some malicious ads that weren’t dropping FakeBat or PikaBot, but rather a different payload that we recognized as MetaStealer. Interestingly, in early December, the malware authors behind MetaStealer gave an interview and announced that they were about to release a new and improved version of their tool.

Distribution

We captured two different ads for Notepad++ and AnyDesk via Google searches:

According to the Google Ads Transparency Center, one of the campaigns ran in November and December, during specific dates:

Two domains have been setup as both decoy and landing pages. If you were to browse to those sites directly, you would see content that looks like it was generated automatically. Note how the two pages have a similar template.

However, users that clicked on the ads and met the selection criteria will get a malicious landing page and a download link:

Payload

The November payload contained a shortcut launching PowerShell that used a hardcoded path to the Downloads folder (would fail if the file was extracted in another directory):

The December campaign got rid of the PowerShell and the malicious DLL was recompiled:

Based on network traffic activity alone, it appears that both payloads are still the MetaStealer from the 3.x branch:

For an in-depth look at MetaStealer, check out this article by Russian Panda.

Conclusion

The developers of MetaStealer are improving their product and we are likely to see more of their customers distributing it. Stealers can serve multiple purposes but tend to revolve around items that criminals can easily monetize. Crypto wallets are usually quite coveted, but so are credentials for various online services. And finally, stealers can also be used by initial access brokers, paving the path for ransomware actors.

We have reported the malicious ads to Google and have already blocked the infrastructure behind these campaigns.

ThreatDown, powered by Malwarebytes, detects this threat as Trojan.MetaStealer.Generic. The Endpoint Detection and Response (EDR) can also see the process activity tied to this attack:

Additionally, the newly released Incident Timeline feature can alert you of an active intrusion attempt which our Managed Detection and Response team can assist you with.

Indicators of Compromise

Malicious domains

rawnotepad[.]com
startworkremotely[.]com

Payload URLs

rawnotepad[.]com/notepad++.zip
startworkremotely[.]com/Anydesk.zip

Payload hashes

949c5ae4827a3b642132faf73275fb01c26e9dce151d6c5467d3014f208f77ca
99123063690e244f95b89d96759ec7dbc28d4079a56817f3152834047ab047eb
c5597da40dee419696ef2b32cb937a11fcad40f4f79f9a80f6e326a94e81a90f

MetaStealer C2s

wgcuwcgociewewoo[.]xyz
ockimqekmwecocug[.]xyz
kiqewcsyeyaeusag[.]xyz
cewgwsyookogmmki[.]xyz
startworkremotely[.]com
csyeywqwyikqaiim[.]xyz
iqaeaoeueeqouweo[.]xyz
mmswgeewswyyywqk[.]xyz
accounts[.]google[.]com
iqwgwsigmigiqgoa[.]xyz

[ad_2]
Source link

Strategies to Strengthen Your Defense

andreasc
-
0
Strategies to Strengthen Your Defense
[ad_1]

With cybercriminals continuously evolving their strategies to target sensitive data with sophisticated attacks, data security has become a universal priority—no matter the size of your business.

The repercussions of data breaches can be devastating —not only in terms of financial loss but also regarding your reputation and losing customer trust. To create a functional, robust defence system, you first need to understand the extent of the cybercrime threat and its nature.

Different types of attacks pose unique challenges and function via different mechanisms but all of them typically rely on exploiting existing vulnerabilities within your infrastructure. This is an easy front to fight back on.

To safeguard your information, it’s crucial to implement a combination of proactive and reactive security measures – adopting a zero-trust approach and promoting cybersecurity awareness within your organization are pivotal steps you can take today.

With the right strategies, such as regular security assessments, staying updated with the latest security protocols, and ensuring that your team is educated on potential cybersecurity threats in place, you can maintain readiness for any eventuality. 

If you take ownership of your data security, you place yourself in a stronger position—both to prevent the financial and reputational damage that breaches cause and to uphold the trust that customers place in your brand.

Understanding the Cybersecurity Landscape

It’s important to get a lay of the land before deciding exactly how to fortify. Recognizing the types of cyber threats and understanding how human behaviour affects security are the first steps toward data resilience.

The Pervasive Threat of Cyber Attacks

Every business operating online, regardless of size, is at risk of a cyberattack. Cyber threats are evolving, with ransomware attacks becoming more prevalent, where attackers encrypt your sensitive data and demand payment for its release. Some of the most common types of cyber attacks are:

  • Phishing: Fraudulent attempts to obtain sensitive information, such as usernames and passwords, often through deceptive emails.
  • Software Supply Chain Incidents: When software vendors are compromised, the effects can spread to most, if not all of their clients.
  • Data Breaches: Unauthorized access to data, which may include customer information, financial records, and intellectual property.

Phishing attacks are particularly insidious; they have grown in sophistication, making it challenging to discern legitimate communications from attempts to infiltrate your networks.

Social Engineering and Human Error

Cyber threats do not always begin with hacking techniques. Social engineering exploits one of the weakest links in security: human behaviour. Social engineering attacks aim to manipulate individuals into breaking normal security procedures to gain unauthorized access to systems or sensitive information.

  • Phishing: This method falls into this category, and comes In the form of emails, calls, or texts that appear to be from trusted entities, inducing individuals to reveal personal information.
  • Pretexting: Fabrication of scenarios to bait individuals into performing certain actions or providing information.

Simple mistakes like weak passwords or mishandling of sensitive data can have far-reaching consequences. Education and awareness are crucial in mitigating these risks.

Top Data Security Threats to Businesses

In an era where digital data is a cornerstone of business operations, recognizing the paramount threats to data security is critical for sustaining business integrity and customer trust.

Emergence of Sophisticated Malware

Malware attacks encompass a range of malicious software, including viruses, worms, and spyware – all designed to infiltrate and damage systems. 

A striking example is the increasingly advanced malware using complex methods, such as trigonometry, to evade detection and steal sensitive data from businesses. This LummaC2 v4.0 malware typifies sophisticated threats that can bypass conventional security measures.

Rise of Insider Threats

The human element within organizations – referred to as insider threats – remains a potent and unpredictable risk. Whether due to malicious intent or inadvertent error, employees can expose businesses to data breaches, often through mishandling of data, misuse of access privileges, or falling prey to social engineering attacks. Insider-induced incidents are particularly challenging to mitigate, as they originate from within your enterprise.

Prevalence of Phishing and Business Email Compromise

Phishing schemes and business email compromise (BEC) are rampant forms of attack that deceive recipients into divulging confidential information or making unauthorized transfers. These attacks exploit email and phone communications and often simulate legitimate business requests. The prevalence of such scams underscores the ongoing battle against social engineering tactics aiming to compromise your organization’s data integrity.

Effective Strategies for Data Protection

Protecting your business’s data from increasing security threats demands implementing formidable measures and strategies. These strategies focus on fortifying your network defences and adopting a proactive stance toward cybersecurity challenges.

Implementing Robust Network Security

Firewalls form the first line of defence in network security. They manage and monitor network traffic based on an applied rule set and help prevent unauthorized access to your network. Enabling firewalls on your network, including both hardware and software solutions, is crucial for creating a barrier against external threats to your business.

Encryption of data, whether it’s at rest or in transit, adds a significant layer of protection. By encrypting sensitive information, you ensure that even if data is intercepted or accessed by unauthorized parties, it remains unreadable and secure. Tools like VPNs can help you maintain an encrypted connection over the internet, while solutions like PDF SDKs provide increased document security in your system. 

Multi-factor authentication (MFA) adds another security layer by requiring more than one method of authentication (PDF) from independent categories of credentials to verify the user’s identity for a login or other transaction. This significantly reduces the risk of a security breach due to compromised passwords.

Adopting Proactive Cybersecurity Measures

Develop and regularly update a comprehensive cybersecurity policy. This includes defining and assigning specific access rights to different users based on their roles within the organization. By limiting access to sensitive data only to those who need it to perform their jobs, you reduce the risk of internal threats and accidental breaches.

Establish and maintain a detailed incident response plan (PDF). This plan will guide your team in the event of a security breach, detailing steps to contain the breach, assess and repair damages, and communicate with affected parties. Quick and effective incident response is critical to minimizing the impact of security incidents.

Building a Culture of Cybersecurity Awareness

Creating a cybersecurity-aware culture in your business is essential to protect against the evolving threat landscape. Your awareness and actions can significantly reduce the risk of cybercrime.

Educating Employees on Security Best Practices

Awareness is a crucial first line of defence in cybersecurity. By educating employees on best practices, you are equipping them with the knowledge to identify potential threats. A critical focus should be on strong passwords – a foundational aspect of personal and organizational digital security. Encourage the use of a password manager for generating and storing complex passwords, reducing the likelihood of security breaches.

  • Tips to educate employees:
    • Conduct regular training sessions. Provide them with key data in bite-sized chunks, but also make sure you lay it out in an interesting manner. 
    • Share updates about current cyber threats, such as the notable increase in QR code phishing and email phishing. With anyone able to make a QR code and use AI-generate text for convincing emails, being up-to-date is paramount. 

Developing Strong Organizational Cybersecurity Policies

Policies act as a roadmap for acceptable and secure behaviour online within your company. Establish comprehensive policies that champion cybersecurity and outline consequences for non-adherence. These policies serve as a resource for employees, clarifying expectations, and promoting a consistent, secure approach to handling data.

  • Key policy elements:
    • Define requirements for strong password creation.
    • Articulate procedures for reporting suspicious activity.

Good cybersecurity policies backed by thorough education foster a culture where every employee contributes to the security of your business.

Technological Solutions to Enhance Data Security

Adopting advanced technological solutions is a critical step in fortifying your business against data breaches and cyber threats. A robust approach to data security can protect valuable information from falling into the wrong hands.

Leveraging Encryption and Endpoint Security

Encryption is your data’s first line of defence, transforming sensitive information into unintelligible code for unauthorized users. This method is crucial in preventing encryption-based malware, as it reduces the extent of the damage such attacks can cause.

On the frontlines of your network’s defence are the endpoints: the computers, mobile devices, and other hardware that connect to your central systems. The purpose of implementing endpoint security measures, such as antivirus software and advanced threat protection, is both to reduce instances of attacks and make sure that your business is compliant with industry regulations. Antivirus programs must be regularly updated to guard against the latest malware threats.

In addition to software, physical security measures for hardware play a crucial role. Secure your infrastructure with locked server rooms and restricted access to sensitive areas.

Investing in comprehensive security software that combines encryption with other protective features can significantly enhance your data security posture. Such software not only encrypts data but also provides an array of defences against various cyber threats, actively scanning and responding to potential risks.

Be vigilant about protecting against encryption-based malware which poses a unique threat through its ability to lock down your data. Apply regular updates and patches to your systems to shield against vulnerabilities.

As cyber threats continue to evolve, vigilance and proactive measures are key to ensuring the security of your business’s data. Here are five strategic actions you can implement:

  1. Prioritize employee education: Your staff can be the first line of defence. Regular training on recognizing potential threats can drastically reduce vulnerability to attacks.
  2. Implement robust security measures: Protect your network using antivirus software, firewalls, and encrypted connections. Enhanced security measures can serve as a strong barrier against malicious attacks.
  3. Regularly update systems: Keep all software and systems updated to patch security vulnerabilities. This relatively simple step is crucial for maintaining a secure environment.
  4. Back-up data consistently: Ensure you have a comprehensive backup strategy in place. In a breach, backups are essential for recovery, minimizing potential damage.

By taking these steps, you fortify your data against common threats and position your business to respond quickly and effectively to potential cybersecurity challenges. The investment in these practices is not just towards securing data but in sustaining the trust of your stakeholders and maintaining the integrity of your business operations.

  1. 5 Fraud Prevention Strategies for Businesses Against Cyber Attacks
  2. Deepfakes Are Being Used to Circumvent Facial Recognition Systems
  3. The Imperative of Automating Fraud Detection in Financial Institutions

[ad_2]
Source link

FBI issues advisory over Play ransomware

andreasc
-
0
FBI issues advisory over Play ransomware
[ad_1]

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) have released a joint Cybersecurity Advisory (CSA) about Play ransomware.

According to the FBI, Play made around 300 victims between June 2022 and October 2023 among a wide range of businesses and critical infrastructure in North America, South America, and Europe.

The joint advisory provides a list of legitimate tools that the Play ransomware group uses for their operations, but more importantly, it includes a list of frequently used attack vectors and vulnerabilities. These include the abuse of valid accounts and exploitation of public-facing applications, specifically through known vulnerabilities like ProxyNotShell.

Once inside a network, Play uses specialized tools to try and disable anti-virus software and remove log files. Then the hunt for valuable data and the preparation for the encryption process begins. Typically, that behavior that requires a dedicated security team or an external managed detection and response (MDR) service to discover.

In our most recent monthly ransomware review you’ll see Play climbing from 6th place to 3rd in the list of groups with the highest number of known attacks.

Known ransomware attacks by gang, November 2023
Known ransomware attacks by gang, November 2023

The Play ransomware group has been making a name for itself since August 2022 and is a typical double extortion group. This means they steal data as well as encrypting systems and then threaten to publish the stolen data on their Dark Web leak site.

screenshot of the Play leak site showing victims in various stages of Publication

Screenshot of the PLAY leak site

The joint CSA emphasizes the importance of having an actionable recovery plan, using multi-factor authentication (MFA), and keeping all operating systems, software, and firmware up to date.

The FBI lets readers know it is seeking any information that can be shared, to include boundary logs showing communication to and from foreign IP addresses, a sample ransom note, communications with Play ransomware actors, Bitcoin wallet information, decryptor files, and/or a benign sample of an encrypted file.

How to avoid ransomware

  • Block common forms of entry. Create a plan for patching vulnerabilities in internet-facing systems quickly; and disable or harden remote access like RDP and VPNs.
  • Prevent intrusions. Stop threats early before they can even infiltrate or infect your endpoints. Use endpoint security software that can prevent exploits and malware used to deliver ransomware.
  • Detect intrusions. Make it harder for intruders to operate inside your organization by segmenting networks and assigning access rights prudently. Use EDR or MDR to detect unusual activity before an attack occurs.
  • Stop malicious encryption. Deploy Endpoint Detection and Response software like ThreatDown EDR that uses multiple different detection techniques to identify ransomware, and ransomware rollback to restore damaged system files.
  • Create offsite, offline backups. Keep backups offsite and offline, beyond the reach of attackers. Test them regularly to make sure you can restore essential business functions swiftly.
  • Don’t get attacked twice. Once you’ve isolated the outbreak and stopped the first attack, you must remove every trace of the attackers, their malware, their tools, and their methods of entry, to avoid being attacked again.

Our business solutions remove all remnants of ransomware and prevent you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.


[ad_2]
Source link

Gboard stylus handwriting support is rolling out to users

andreasc
-
0
Gboard stylus handwriting support is rolling out to users
[ad_1]

In August, Google was spotted preparing to add stylus handwriting support to Gboard. The new feature is now rolling out to users. It lets you write with the stylus in any text field as long as your device supports stylus input. Google’s best keyboard app for Android will automatically convert your handwriting to text.

Gboard gains stylus handwriting support

Gboard has long offered a handwriting keyboard. When selected, it opens a blank panel in place of the regular on-screen keyboard. Anything you write within this space—using a stylus or directly with your fingers—is converted to text. However, you cannot write directly in the text field. You also cannot use hand gestures for text editing tools such as delete and select.

The new feature is essentially a full-blown handwriting keyboard. Not only can you write in any text field without opening a separate blank panel but you get gesture-enabled editing tools as well. You can scratch out a letter, word, or phrase with the stylus to delete it. Likewise, drawing a circle around it will select it. Drawing a caret or arrow between two words lets you insert a new word there.

If you want to insert a space between two letters or erase the space to merge two words, simply draw a vertical line. Lastly, to start a new line, you can draw down and then left (create an “Enter” icon) with your stylus within the text field. The latest version of the Gboard app has a “Write in text fields” menu in the settings where you can control the speed and stroke width of your handwriting.

When using the stylus handwriting feature, Gboard will display a floating toolbar on the screen with Delete, Enter, and Emoji buttons as well as a hamburger key. The latter notes your current language (if more than one is selected) and offers shortcuts to settings, handwriting demo, on-screen keyboard (mini floating keyboard), clipboard, translate, and language picker.

The new feature is rolling out to users

Stylus handwriting support on Gboard started rolling out to users recently. 9to5Google confirms the availability of the feature in beta version 13.7 of the app. It works on the Pixel Tablet and recent Samsung tablets running Android 14, including the Galaxy Tab S8. The feature also works on the Galaxy Z Fold 5, which supports stylus input. Google’s Pixel Fold doesn’t support stylus input, so it misses out on the new Gboard feature.


[ad_2]
Source link

What You Need to Know

andreasc
-
0
What You Need to Know
[ad_1]

This year was quite good when it comes to compact phone offerings. We’ve seen rather compelling high-end compact devices out there. In this article, we’ll compare two of them, the Google Pixel 8 vs Sony Xperia 5 V. Both of these are flagship-grade phones, and yet they’re quite compact. They may not be small, but if you hate navigating huge devices, these two will be a great change, that’s for sure.

The two of them arrived in October and September this year, respectively. They do look entirely different, and feel different in the hand as well. Their specs are also not that similar, so this should be a fairly interesting comparison. We’ll kick things off with the specs, and move to a number of other categories after that. Let’s get this party on the road, shall we?

Specs

Google Pixel 8 vs Sony Xperia 5 V, respectively

– Screen size:
6.2-inch Actua AMOLED display (120Hz LTPS, HDR10+, 2,000 nits max)
6.1-inch OLED display (120Hz, 1B colors, HDR10)
– Display resolution:
2400 x 1080
2520 x 1080
– SoC:
Google Tensor G3
Qualcomm Snapdragon 8 Gen 2
– RAM:
8GB (LPDDR5X)
8GB
– Storage:
128GB/256GB (UFS 3.1)
128GB/256GB (UFS 3.1)
– Rear cameras:
50MP (f/1.68 aperture, 82-degree FoV, 1.2um pixel size), 12MP (ultrawide, f/2.2 aperture, 1.25um pixel size, 125.8-degree FoV)
48MP (wide, f/1.9 aperture, Dual Pixel PDAF, OIS), 12MP (ultrawide, f/2.2 aperture, Dual Pixel PDAF)
– Front cameras:
10.5MP (f/2.2 aperture, 1.22um pixel size)
12MP (f/2.0 aperture, 1.25um pixel size)
– Battery:
4,575mAh
5,000mAh
– Charging:
27W wired, 18W wireless, 5W reverse wireless (charger not included)
30W wired, 15W wireless, 5W reverse wireless (charger not included)
– Dimensions:
150.5 x 70.8 x 8.9mm
154 x 68 x 8.6mm
– Weight:
187 grams
182 grams
– Connectivity:
5G, LTE, NFC, Wi-Fi, USB Type-C, Bluetooth 5.3
– Security:
In-display fingerprint scanner (optical) & facial scanning
Side-facing fingerprint scanner
– OS:
Android 14
Android 13
– Price:
$699+
$849.99+
– Buy:
Best Buy
Amazon

Google Pixel 8 vs Sony Xperia 5 V: Design

The moment you look at these two devices, you’ll realize how different they are. The Xperia 5 V is taller and narrower, due to a different display aspect ratio. Its bezels are also slightly thicker at the top and bottom, for a good reason though. The Sony Xperia 5 V doesn’t include a display camera hole or notch, unlike the Google Pixel 8. Google’s handset has a centered display camera hole up top.

Both smartphones have two cameras on the back, but those setups look entirely different. The Pixel 8 has an entire camera visor on the back, a horizontal one, of course. That visor is covered by metal. The Xperia 5 V has a more regular-looking camera island in the top-left corner, and its cameras are vertically aligned. The sides of the Xperia 5 V are also flat, which is not the case on the Pixel 8, not at all.

The Google Pixel 8 is slightly heavier in comparison, at 187 grams, compared to 182 grams. Both smartphones are IP68 certified for water and dust resistance, which is always nice to see. They are also quite slippery, which is not surprising considering the metal and glass built. In comparison, though, the Pixel 8 is definitely more slippery. The Xperia 5 V also has a dedicated camera shutter button on the right-hand side. Both smartphones do feel premium in the hand, but very different too.

Google Pixel 8 vs Sony Xperia 5 V: Display

The Google Pixel 8 includes a 6.2-inch fullHD+ (2400 x 1080) OLED panel. That display is flat, and it supports a 120Hz refresh rate. HDR10+ content is also supported, and the peak brightness of this panel is 2,000 nits. The display aspect ratio here is 20:9, and the Gorilla Glass Victus protects the display. We’re looking at an 85.5-percent screen-to-body ratio on the Pixel 8.

AH Google Pixel 8 Review (3)

The Sony Xperia 5 V, on the flip side, has a 6.1-inch fullHD+ (2520 x 1080) OLED panel. That display can project up to 1 billion colors, and it’s a 120Hz panel. HDR10 content is supported here, and the display aspect ratio is 21:9. The screen-to-body ratio on the Xperia 5 V is 83 percent. This display is also flat, and it’s protected by the Corning Gorilla Glass Victus 2.

Both of these displays are more than sharp enough, and offer great viewing angles. They also have vivid colors, and deep blacks. The Pixel 8 does have one advantage, though, its brightness. It does get a bit brighter than the Xperia 5 V’s panel, which is something you can notice if you hold them side-by-side in direct sunlight. The Xperia 5 V’s display is not dim at all, though, so… chances are you’ll be happy with either panel.

Google Pixel 8 vs Sony Xperia 5 V: Performance

There is the Google Tensor G3 processor included inside the Pixel 8. In addition to that, Google also included 8GB of LPDDR5X RAM and UFS 3.1 flash storage. The Snapdragon 8 Gen 2 fuels the Xperia 5 V, while Sony included 8GB of RAM and UFS 3.1 flash storage. We’re not sure what RAM was used inside the Xperia 5 V, but it was hopefully LPDDR5X as well, just like in the Pixel 8.

Both phones are well-equipped from the performance hardware standpoint, but neither offers the most powerful hardware at this point in time. The Tensor G3 SoC has proven to be great for AI, but it’s nowhere near as powerful as some offerings from Qualcomm. The Snapdragon 8 Gen 2 is still a great chip, but it has been succeeded by the Snapdragon 8 Gen 3. The thing is, none of that matters, as both of these phones perform admirably.

Google arguably has some of the best-designed UIs, and Sony didn’t stray far from it. Sony sticks close to stock Android while adding some of its own features. Both phones are buttery smooth when it comes to performance. That goes for basically anything you throw at them. There are faster phones out there, for sure, but the difference is not that big. Even when it comes to gaming, they both perform well, though the Xperia 5 V is the better choice for graphically-demanding games, that’s for sure. And yes, they both do get quite warm during longer gaming sessions, though not too hot to handle.

Google Pixel 8 vs Sony Xperia 5 V: Battery

A 4,575mAh battery sits inside the Google Pixel 8, while a 5,000mAh battery is used inside the Sony Xperia 5 V. A bigger battery pack doesn’t necessarily mean better battery life, but in this case, it does. The Snapdragon 8 Gen 2 is also a more power efficient SoC, not to mention that the Xperia 5 V has a slightly smaller display. All that plays a part in the actual battery life, along with software optimization, of course.

Having said that, getting over the 8-hour screen-on-time mark doesn’t seem to be a problem with the Xperia 5 V. Well, if you don’t push the phone too much with games, and you actually have a decent signal quality, that is. Under those same circumstances, the Google Pixel 8 provides around 6.5-7 hours of screen-on-time. Your mileage may vary, of course, as is always the case with battery life. This should give you a general idea of what to expect, though.

When it comes to charging, they’re quite similar… in terms of charging speed, that is. The Pixel 8 supports 27W wired charging, 18W wireless charging, and 5W reverse charging. Both wireless charging and reverse wireless charging are the same on the Xperia 5 V, while 30W wired charging is supported. One thing to note is that neither of these two phones comes with a charger.

Google Pixel 8 vs Sony Xperia 5 V: Cameras

There is a 50-megapixel main camera on the Pixel 8, in addition to a 12-megapixel ultrawide camera (126-degree FoV). The Sony Xperia 5 V also has two cameras on the back. A 48-megapixel main camera is backed by a 12-megapixel ultrawide unit. The main camera setups are quite different in comparison. Google is using one of Samsung’s best camera sensors, while Sony went with its own stacked design.

AH Google Pixel 8 Review (1)

The good news is, despite the differences in the camera hardware, and considerable differences in processing, both smartphones capture outstanding photos. Those photos tend to be different due to different styles, but they’re great nonetheless, in basically all scenarios. Both smartphones capture sharp and detailed images during the day, and handle HDR conditions with grace. The Pixel 8 images do tend to look a bit more contrasty and processed, but in a good way. It’s all a matter of preference. Pictures from both smartphones pop, though, which is good. Even their ultrawide cameras do a great job in daytime conditions.

In low light, not many things change, as neither phone fails this test. They both tend to brighten up scenes in low light, of course, though Pixel 8 pushes things a bit further in that regard. They do manage to keep plenty of detail, and expose the scenes properly. Even their ultrawide cameras do a good job, even though they’re a step below the main shooters. We don’t really have complaints here, both smartphones do the job well in the camera department. The same goes for video, actually.

Audio

What about the audio? Well, both of them do have stereo speakers included. When it comes to loudness, they’re basically on par. We did prefer the output from the Xperia 5 V, as the speakers seem to be a bit better balanced. Both phones do offer good sound output, though.

If you need an audio jack on your phone, the Xperia 5 V is the phone for you, as the Pixel 8 doesn’t have it. You can always utilize its Type-C port, though. As far as wireless audio goes, both smartphones are equipped with Bluetooth 5.3.


[ad_2]
Source link

OPPO Find X7 Ultra existence confirmed, display specs detailed

andreasc
-
0
OPPO Find X7 Ultra existence confirmed, display specs detailed
[ad_1]

The OPPO Find X7 Ultra smartphone’s existence has just been confirmed, while the display specs have been detailed as well. Let’s focus on the OPPO Find X7 Ultra first, as these are two separate leaks we’re talking about.

The OPPO Find X7 Ultra has basically been confirmed

The OPPO Find X7 Ultra boxes seem to have surfaced. Abhishek Yadav shared an image of them (shown below). You’ll notice boxes with the ‘Find X7 Ultra’ branding on them sitting inside a generic box.

OPPO Find X7 Ultra boxes

Now, these could be retail boxes, but they don’t seem to be. This seems to be a thin sheet of cardboard, and all boxes seem to be slightly damaged as well. A retail box would have thicker cardboard included. Either way, this more or less confirms that the ‘Ultra’ is coming, a phone that has been mentioned several times thus far.

Display specs for the entire OPPO Find X7 series have been detailed

In addition to this leak, Digital Chat Station also had something to say. Digital Chat Station is, for those of you who are out of the loop, one of the best-known Chinese tipsters. He’s rarely wrong, and he just shared some OPPO Find X7 series display info.

He claims that the OPPO Find X7 will feature a 6.78-inch 1.5K (2780 x 1264) AMOLED display. That will be the BOE 8T display, and it’s an LTPO panel. The OPPO Find X7 Pro and Ultra will include a 6.82-inch 2K (3168 x 1440) panel, which also comes from BOE, the same panel but with a higher resolution it seems. Yes, this will also be an LTPO display.

The OPPO Find X7 Ultra will have only one advantage over the ‘Pro’ model

Based on the information that we have thus far, the only difference between the ‘Pro’ and ‘Ultra’ models will be the satellite connectivity. We’re not sure if the Find X7 series will launch globally, but if it does, the ‘Ultra’ model will likely stay exclusive to China.

All three of these models are expected to arrive in the first quarter of next year. The Snapdragon 8 Gen 3 will fuel ‘Pro’ and ‘Ultra’ models, while the OPPO Find X7 is tipped to include the MediaTek Dimensity 9300 SoC.

The OPPO Find X7 Pro and Ultra will be the first to include the Sony LYT-900 camera sensor for its main camera. Two periscope telephoto cameras will also be in use, and a powerful ultrawide unit. Four 50-megapixel cameras will sit on the back, actually.


[ad_2]
Source link

The E.U. is unfairly targeting U.S. companies, 21 lawmakers say

andreasc
-
0
The E.U. is unfairly targeting U.S. companies, 21 lawmakers say
[ad_1]

As the European Union’s Digital Markets Act looms, U.S. lawmakers believe the legislation unfairly targets U.S. companies. In a letter sent to U.S. President Joe Biden, 21 members of the House of Representatives asked the president to look into whether the law will be enforced fairly. The lawmakers pointed out that not a single company based in the EU was identified as a “gatekeeper” under the DMA.

By comparison, five U.S. companies were given gatekeeper status by the EU. These were Apple, Google, Meta, Amazon, and Microsoft. Similarly, only one company based in China was deemed a gatekeeper under the new law.

“Securing our leadership in this sector is imperative for our economy and American workers,” the letter, which was seen by Reuters, said. “The designation of leading U.S. companies as ‘gatekeepers’ threatens to upend the U.S. economy, diminish our global leadership in the digital sphere, and jeopardize the security of consumers.”

Are U.S. companies being singled out?

One might argue that there aren’t any tech companies based in the E.U. as giant as the five U.S. companies listed above. However, that doesn’t account for why more Chinese tech companies weren’t included under the DMA. For example, the owner of TikTok, ByteDance, was the only China-based company called a gatekeeper under the DMA. The U.S. lawmakers pointed out Alibaba, Huawei, and Tencent as Chinese corporations that may have warranted a gatekeeper status.

“The EU inexplicably failed to designate any European retailers, content-sharing platforms, payment firms, and telcos,” according to the letter.

The U.S. and the E.U. generally have a working relationship, but this dispute could upend that. As Reuters notes, the U.S. warned that using the DMA to target U.S. companies could have a negative effect on its relationship with the E.U.

“Our strong relationship with our European allies remains essential,” the letter states. “However, the recent decisions by EU authorities pose serious potential damage to America’s competitiveness and security interests.”

What does the “gatekeeper” designation mean?

Under the DMA, the E.U. has the authority to designate companies as “gatekeepers.” Essentially, these companies control access to an essential service. However, the more important term to know is “core platform service.” Core platform services are those that serve as an important conduit between E.U. businesses and consumers. Companies are required to make that service cross-platform in the E.U., if their service is determined to be a core platform service.

It’s easy to see why big tech companies would be against that concept. Exclusive products and services are essential to building competitive platforms. Plus, it could take extra time and effort to develop cross-platform versions of big services.

However, it’s unclear what, if any, changes could come as a result of this letter.


[ad_2]
Source link

Google settles for $700 Million in Play Store antitrust case

andreasc
-
0
Google settles for $700 Million in Play Store antitrust case
[ad_1]

Google‘s parent company, Alphabet Inc., is will pay $700 million to settle antitrust claims related to the dominance of its Google Play store in the Android mobile applications market. This settlement resolves legal complaints brought by attorneys general from about three dozen states and consumers. A federal court in California consolidated the lawsuits and posed a significant threat to Google’s revenue generated through the sale and distribution of apps on the Google Play platform.

The settlement, disclosed in a court filing, outlines that Alphabet will modify its Google Play policies to address concerns of unlawfully dominating the Android mobile applications market. The changes are designed to allow choices and bring openness to Google Play regarding app distribution and payment processing.

The legal battles centered on allegations that Google used anticompetitive tactics to block competition, ensuring that developers had no alternative but to use the Google Play store to reach users.

State attorneys general accused Google of inflating Android app prices by taking up to 30% cut, from Google Play transactions.

Earlier this month, a federal jury in San Francisco ruled in favor of Epic Games Inc. in a case that challenged Google Play’s app distribution, payment, and fee policies. The jury sided with Epic Games, affirming that Google’s practices were unlawful.

As part of the settlement, Google will contribute $630 million to a fund that benefits consumers and an additional $70 million to resolve state claims for penalties, restitution, disgorgement, and fees. The lawsuit aims to address the funds to the grievances of consumers and the states involved in the legal action.

Apart from the financial settlement, Google has agreed to make changes to its Android platform, introducing a simplified sideloading process and updated language to inform users about potential risks when downloading apps directly from the web. Additionally, the company will clarify that original equipment manufacturers (OEMs) can provide users with options to use either the Google Play store or another app store out of the box.

These changes will take effect after formal court approval of the settlement. It’s important to note that this settlement is separate from the ongoing jury trial involving Epic Games, where the court found Google to have an “illegal monopoly.”


[ad_2]
Source link

Almost 36 Million Comcast Xfinity Customers Data Might Have Been Stolen

andreasc
-
0
Almost 36 Million Comcast Xfinity Customers Data Might Have Been Stolen
[ad_1]

Another day, another security breach. This time, it’s Comcast who is making public that around 36 million customers might be affected. Comcast is the latest in a long line of companies that have fallen victim to Citrix Bleed.

Comcast announced on its website this week that “during a routine cybersecurity exercise on October 25, Xfinity discovered suspicious activity and subsequently determined that between October 16 and October 19, 2023, there was unauthorized access to its internal systems that was concluded to be a result of this vulnerability.”

So why did it take Comcast so long to disclose this cybersecurity issue? Well, as is the case with many other companies, Comcast wants to make sure that the vulnerability is patched instead of telling the whole world to come and hack their customer’s data by disclosing this right away. On top of that, Xfinity was finishing up its review of the affected systems and data, to really find out what information might have been stolen. Comcast says, “included usernames and hashed passwords; for some customers, other information may also have been included, such as names, contact information, last four digits of social security numbers, dates of birth and/or secret questions and answers.”

Comcast is now forcing everyone to reset their passwords. The company is also strongly recommending that everyone enable multi-factor authentication on their accounts.

What is Citrix Bleed?

Citrix Bleed is a pretty well-known vulnerability, in anything that uses Citrix, which is a cloud giant that a lot of enterprises use for their databases.

Citrix has released a patch for the flaw and has urged users to apply it immediately to ensure that their data is safe from hackers. The vulnerability that is being used here is tracked as CVE-2023-4966, and it carries a severity score of 9.4 This affects NetScaler, ADC, and NetScaler Gateway.

It’s basically a software vulnerability that enables attackers to bypass the password requirements and multifactor authentication. This would allow them to hijack legitimate user sessions and access sensitive device information.


[ad_2]
Source link
1...595596597...1,482Page 596 of 1,482