Galaxy A25 marketing materials leak; specs & design confirmed

andreasc
-
0
Galaxy A25 marketing materials leak; specs & design confirmed
[ad_1]

A month ago, we exclusively leaked the official renders of Samsung’s Galaxy A25 5G. We followed up with its key specs a few days later. The phone has since been subject to many other leaks and certification listings. Now, the official marketing materials for the device have surfaced online, hinting at an imminent launch.

A major leak bares it all about the Galaxy A25 5G

X user @MysteryLupin recently shared what appear to be slides from Samsung’s official marketing materials for the Galaxy A25 5G. The slides feature the phone’s renders in multiple colors. They detail its specs and dimensions, with one photo providing us with a tentative launch timeline as well.

For starters, the new mid-range phone has a flat back with three cameras aligned vertically in the top left corner. There is no camera bump, a design choice by Samsung seen on every Galaxy phone launched this year. The frame is flat too, save for a small raised and curved portion on the right side to accommodate the power and volume buttons. Samsung’s other 2024 A-series handsets are rumored to feature a similar design.

The power button is recessed, confirming a side-mounted capacitive fingerprint scanner on the Galaxy A25 5G. The handset measures 161.0×76.5×8.3mm in dimension (excluding the width of the raised portion). The screen has a U-shaped notch and a thick bottom bezel. The overall design looks fairly mid-range-ish from the front but there’s hardly any differentiation from premium phones on the back.

As far as specs are concerned, we are getting Samsung’s Exynos 1280 5nm SoC with up to 8GB of RAM and 256GB of storage. The device lets you expand storage space with Micro SD cards of up to 1TB capacity. The 6.5-inch Super AMOLED display has 120Hz refresh rate, FHD+ resolution, 1,000 nits of peak brightness, and Vision Booster support. The 5,000mAh battery charges at up to 25W speed.

Coming to the cameras, the Galaxy A25 5G has a 50MP primary shooter with OIS (optical image stabilization). It is paired with an 8MP ultrawide lens, 2MP macro camera, and 13MP selfie camera. Other rumored specs include IP67 dust and water resistance, NFC, a 3.5mm headphone jack, and Android 14-based One UI 6.0 software experience. The device should get updates up to Android 18. It may cost around $300 at launch.

Samsung might soon launch the new A-series mid-range phone

Samsung has yet to announce a launch date for the Galaxy A25 5G. An earlier leak hinted at a mid-December unveiling of the device but there’s no confirmation yet. Meanwhile, one of the slides we have today says it is arriving in January 2024. The slide in question features an erroneous rendering of the device and also mentions Android 13-based One UI 5.1 software, so it may not be accurate. We will let you know when we have more information.

Samsung Galaxy A25 5G leaked marketing materials 1


[ad_2]
Source link

Disney-Comcast Deal Yields $8.6 Billion for Hulu Acquisition

andreasc
-
0
Disney-Comcast Deal Yields $8.6 Billion for Hulu Acquisition
[ad_1]

The process of buying Hulu has started for Disney. As the company’s first check to Comcast to buy out, their 33% stake in the streaming service has cleared. Disney wrote a $8.6 billion check to Comcast. However, Comcast is hoping for more.

Disney had already said it would acquire the rest of the Hulu stake that it doesn’t own from NBCUniversal (which Comcast owns). And a deal between the two companies established a floor of $8.61 billion. So, any additional payout will depend on the evaluation that is currently underway with both companies and their respective investment dates.

This process was initially set to take place in January 2024, but both companies agreed to move up the timeline, and the said check was due on December 1.

Comcast President Mike Cavanagh was talking about the Hulu deal at a UBS Media conference in NYC this week. Cavanagh also talked about Peacock and its 30 million paying subscribers now. It’s still unclear if that includes those who get it for free from Comcast, Spectrum, and other methods. That’s two million more than Peacock had in October.

Why does Disney want full control of Hulu?

In November, Disney said that “the acquisition of Comcast’s stake in Hulu at fair market value will further Disney’s streaming objectives.” The company plans to launch a “one-app experience” combining Disney+ and Hulu by the end of 2023. That new app is set to launch this month, with the official launch scheduled for 2024.

Disney has stated that the “one-app experience” would be available for those who subscribe to the Disney+ and Hulu bundle. That bundle costs $9.99 per month or $19.99 per month without ads. Disney has decided to still offer the platforms separately after the launch.

With the acquisition of Hulu, Disney will also be able to have complete control of the service and push all of its content into a single platform. It’s part of the consolidation we’ve seen recently, which started with WarnerMedia and Discovery merging to form Warner Bros Discovery earlier this year.


[ad_2]
Source link

Xiaomi 14 Ultra could utilize an ultrasonic fingerprint scanner

andreasc
-
0
Xiaomi 14 Ultra could utilize an ultrasonic fingerprint scanner
[ad_1]

The Xiaomi 14 Ultra could end up using an ultrasonic fingerprint scanner (under the display, of course). Many other flagships already use this tech. Samsung is, as well as OPPO, and a number of other companies. Xiaomi hasn’t done it for a long time, since the Xiaomi 5s.

The Xiaomi 14 Ultra is expected to utilize an ultrasonic fingerprint scanner

The information that Xiaomi will start using an ultrasonic fingerprint scanner comes from Digital Chat Station. That is one of China’s most prominent tipsters, and he’s rarely wrong. So… we don’t really have a reason to doubt him. The information has been relayed by GizmoChina, and has also been reshared by Digit.in.

The vast majority of smartphone OEMs still rely on optical under-display fingerprint scanners. Those fingerprint scanners are technically less secure, and inferior. Still, the level of security is very high.

Some optical fingerprint scanners out there have been outstanding. Xiaomi has been using them for a while, and they worked like a charm. The same goes for a number of other companies.

Ultrasonic fingerprint scanners are technologically more advanced, and more secure too

Ultrasonic ones are more secure and technologically more advanced. They don’t really require the amount of light the optical ones do in order to function. They also don’t take pictures of your fingerprint in order to verify it. The technology is different, more advanced.

Xiaomi stayed away from this technology for quite some time. Optical fingerprint scanners worked fine for them, but it’s nice to see the company will upgrade. That is especially true considering that ultrasonic scanners have improved a lot since Xiaomi first used them.

As a side note, the Xiaomi 14 and Xiaomi 14 Pro devices were announced not long ago. Those are the company’s current flagships. They do not include ultrasonic fingerprint scanners, but rather optical ones. They do work really well, though.

In any case, the Xiaomi 14 Ultra is tipped to arrive next year, likely in Q2 2024. The Xiaomi 13 Ultra launched in April this year, so we’re presuming Xiaomi will stick to that release cycle. Things could change, though, of course.


[ad_2]
Source link

Vulnerabilities still exist in Nothing’s CMF Watch app, (come on, Carl Pei)

andreasc
-
0
Vulnerabilities still exist in Nothing’s CMF Watch app, (come on, Carl Pei)
[ad_1]

Nothing’s CMF Watch app really contradicts the success that Nothing has achieved with the Nothing Phone (1) and Nothing Phone (2). The iMessage-for-Android app, built in collaboration with Sunbird, housed a vulnerability related to the company’s internal data. This vulnerability hit the headlines back in August, but it remains unresolved. Android developer and reverse engineer Dylan Roussel discovered two security issues related to Nothing. The first vulnerability was identified in September within the CMF Watch app, a product of Nothing’s collaboration with Jingxun.

The vulnerabilities still remain in the CMF Watch app

Although the app encrypts email usernames and passwords, Roussel found that the encryption method had a flaw, allowing potential decryption using the same keys. This essentially nullified the intended security provided by encryption. Nothing and Jingxun addressed the vulnerability concerning passwords. However, the ability to decrypt the email used as a username remained.

The second vulnerability, not publicly disclosed in detail, pertains to Nothing’s internal data. Although Nothing has been aware of this issue since August, the flaw has not been rectified to date.

Nothing’s recent security challenges also include the short-lived Nothing Chats app, an attempt to cater to iPhone users by offering an iMessage-like platform for Android. The app faced immediate removal from circulation due to serious security oversights.

Nothing promises to roll out a fix to the app via a future OTA update

In response to these concerns, Nothing has issued a statement to Android Authority. The company informed AA about the ongoing investigation into the security issues related to the CMF Watch app.

The company promises a fix for the identified security issues and plans to roll out an OTA update for CMF Watch Pro users once they implement a solution. Additionally, Nothing has taken a step towards streamlining the reporting process for security issues by providing a portal for vulnerability reports.


[ad_2]
Source link

USPS Delivery Phishing Scam Exploits SaaS Providers to Steal Data

andreasc
-
0
USPS Delivery Phishing Scam Exploits SaaS Providers to Steal Data
[ad_1]

A new USPS Delivery Phishing Scam has surfaced, in which scammers are exploiting Freemium Dynamic DNS and SaaS Providers to steal victims’ login credentials and other data.

Cybersecurity researchers at Bloster AI have uncovered a new USPS Delivery Phishing campaign that employs sophisticated techniques to target victims in the United States.

It comes as no surprise that cybercriminals are employing sophisticated techniques to exploit reputable services for scams, making it challenging for innocent consumers to enjoy the holiday shopping season. This pattern is evident in the ongoing scam attack against Booking.com customers.

According to Bloster AI, an automated digital risk protection service, Walmart is a prime target this season due to the higher volume of shipping needs during November and December in the USPS phishing attack. Bolster’s CheckPhish has already discovered over 3,000 phishing domains mimicking Walmart.

The extensive phishing campaign mimics USPS, tricking consumers into thinking they have failed deliveries and late payments. Threat actors have substantially improved their attack tactics, transitioning from deceptive/misleading messages to luring victims into downloading financial/banking data-stealing apps.

In their blog post, researchers noted that the domain walmartsco was active while they were writing the blog post. This domain mainly mimicked Walmart’s domain name and served USPS delivery tracking-related content and redirects to the authentic USPS portal to evade detection mechanisms. 

Scammers distribute phishing links via email or SMS and use stolen data to lure victims into giving away sensitive banking data via social engineering techniques. Once a victim’s bank details are acquired, attackers can purchase, transfer money, or gain monetary benefits.

Phishing sites contain a site title such as USPS.com® – USPS Tracking® Results, and are designed to steal sensitive information like email addresses, names, phone numbers, residential addresses, and credit/debit card information. These sites cleverly redirect hyperlinks to legitimate USPS websites and use IP location to evade detection.

In some instances, hackers utilized personal information stolen in this scam, such as email address, phone number, or name, and sent emails/phishing scams pretending to be the victim. Such attacks involving social engineering are more successful if the email/SMS comes from a believable source.

USPS Delivery Phishing Scam Exploits SaaS Providers to Steal Data
The screenshot shows the phishing email and malicious text messages (Image credit: BlosterAI)

Some phishing sites may also display tracking details as per the victim’s IP locations to appear authentic. Moreover, Bolster researchers noted that threat actors rely on these sites on pushed domains and exploit free hosting services.

These include DNS service hosting provider alviy.com and clear-cloud.com, an app hosting/deploying/maintaining tools provider. Attackers also host phishing sites using available domain names on now-dns.com and forumz.info, etc.

This campaign highlights the dangers of exploiting free hosting services and vulnerabilities in e-commerce platforms. Threat actors are focusing more on SaaS services and using AI technology, social media phishing, and brand impersonation scams to steal/lure customers from profitable sectors, such as finance, healthcare, and government agencies. 

This phishing campaign primarily targets USPS customers in the US, but you may never know when attackers decide to expand the scope of this scam. It has impacted legitimate businesses’ reputations during the busy holiday shopping season. Proactive measures to identify and remove pre-malicious domains either manually or through automated takedown services are crucial to retaining consumer trust. 

  1. Scammers Leveraging Microsoft Team GIFs in Phishing Attacks
  2. Global CDN Service ‘jsdelivr’ Exposed Users to Phishing Attacks
  3. Phishing Scam Spoofs German Media, Broadband Conference Anga
  4. FBI: Silent Ransom Group Utilizes Callback Phishing for Network Hacks
  5. Hackers Aim at Crypto Wallets with Hacked Namecheap Phishing Emails

[ad_2]
Source link

Roblox and Twitch provider Tipalti breached by ransomware

andreasc
-
0
Roblox and Twitch provider Tipalti breached by ransomware
[ad_1]

Accounting software provider Tipalti says it is investigating a claim by ransomware group ALPHV that they have gained access to Tipalti’s systems.

Over the past weekedn, a ransomware group claimed that they allegedly gained access to confidential information belonging to Tipalti and its customers. Tipalti takes the security of our systems and dat very seriously and has strong security protocols and tools in place, We are thoroughly investigating this claim.

Tipalti makes software for accounting and payment automation and has some big names among its customers. In what seems to be a typical supply chain attack, ALPHV aka BlackCat are now threatening some Tipalti customers, including Roblox and Twitch:

“We are systematically reaching out to affected clients of Tipalti, the first batch (consisting of organizations with the most data exfiltrated), have been sent communications requesting initial contact.”

Organizations who share these file lists, samples or notes with Tipalti run the risk of having their data leaked immediately.

The ransomware group claim to have had access since September 8, 2023. Since then, they say they have stolen 265 GB of data, including data for Twitch and Roblox, who they say they will extort separately.

Re: statement by Roblox to BleepingComputer. Just because you haven't been contacted yet, does not mean you are not affected.

Screenshot of the ALPHV leak site

A Roblox spokesperson told BleepingComputer that the company is working with Tipalti to investigate the claims, but is currently unaware of any impact on its systems. The spokesperson stated they haven’t been contacted by anyone about the security incident, to which ALPHV responded on their leak site:

“Re: statement by Roblox to BleepingComputer. Just because you haven’t been contacted yet, does not mean you are not affected.”

ALPHV is one of the most active ransomware-as-a-service (RaaS) operators and regularly appears in our monthly ransomware reviews as one of the top 5 most active groups. Recently they made headlines when one of their affiliates, known as Scattered Spider attacked MGM. They also last week filed a SEC complaint about one of their victims for failing to disclose a breach.

How to avoid ransomware

  • Block common forms of entry. Create a plan for patching vulnerabilities in internet-facing systems quickly; and disable or harden remote access like RDP and VPNs.
  • Prevent intrusions. Stop threats early before they can even infiltrate or infect your endpoints. Use endpoint security software that can prevent exploits and malware used to deliver ransomware.
  • Detect intrusions. Make it harder for intruders to operate inside your organization by segmenting networks and assigning access rights prudently. Use EDR or MDR to detect unusual activity before an attack occurs.
  • Stop malicious encryption. Deploy Endpoint Detection and Response software like ThreatDown EDR that uses multiple different detection techniques to identify ransomware, and ransomware rollback to restore damaged system files.
  • Create offsite, offline backups. Keep backups offsite and offline, beyond the reach of attackers. Test them regularly to make sure you can restore essential business functions swiftly.
  • Don’t get attacked twice. Once you’ve isolated the outbreak and stopped the first attack, you must remove every trace of the attackers, their malware, their tools, and their methods of entry, to avoid being attacked again.

Our business solutions remove all remnants of ransomware and prevent you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.


[ad_2]
Source link

Android 14 update lands on Galaxy S21 FE in the US

andreasc
-
0
Android 14 update lands on Galaxy S21 FE in the US
[ad_1]

A few days back, Samsung released the Android 14-based One UI 6.0 update for the Galaxy S21 flagships in the US. The big update is now available for the Galaxy S21 FE too. Carrier-locked units on Verizon’s network are the first to pick up the new Android version. It will soon roll out widely across the nation.

Galaxy S21 FE joins Samsung’s Android 14 party

The Galaxy S21 series started picking up Android 14 about two weeks back. However, the initial rollout only covered the three flagship models in international markets. Samsung recently brought the update to the US, but the FE model wasn’t in the group. It has finally released the big update for the Fan Edition phone, starting with the US versions.

Verizon users with a carrier-locked Galaxy S21 FE receive Android 14 and One UI 6.0 with the firmware build number G990USQU9FWK5. Other carrier variants and factory-unlocked units will soon join the party with a similar build number. As SamMobile notes, the firmware version may read G990U2SQU7FWK5 for some users.

The changelog will remain the same for everyone, though. Verizon’s official website lists all the key changes and additions with relevant screenshots. You are getting new camera features, an updated Quick Settings layout, an improved notification panel, improved system animations, new widgets, improved Bixby Call Text, more powerful photo and video editing tools, Battery and Device Care settings, and more.

On top of this, the Galaxy S21 FE is receiving the November 2023 security patch. Last month’s SMR (Security Maintenance Release) contains fixes for more than 60 vulnerabilities, including five critical issues. If you are using the phone in the US, watch out for a notification promoting you to download the big update. The new features and security enhancements should soon reach the device in global markets.

All eligible S-series Samsung phones have now received Android 14

With Android 14 now rolling out to the Galaxy S21 FE, Samsung has updated all eligible S-series models to the new Android version. The Galaxy S23 FE is still awaiting the big update in the US but it is just a matter of time. The Korean firm has also updated the latest foldables, tablets, and A-series models to One UI 6.0. Other eligible models, including the Galaxy Z Fold 4 and Galaxy Z Flip 4, should follow soon. We will let you know when the rollout begins for those. You can also manually check for updates by going to Settings > Software update > Download and install.


[ad_2]
Source link

This is how Google enhances Pixel 8 Pro video quality with ‘Video Boost’

andreasc
-
0
This is how Google enhances Pixel 8 Pro video quality with ‘Video Boost’
[ad_1]

The video quality of Google Pixel 8 Pro is outstanding, but it could get even better with an upcoming update. According to 9to5Google, Google is working to bring a new feature to Pixel 8 Pro devices called “Video Boost.” The feature could enhance the device’s video quality through post-processing on the company’s servers.

Pixel 8 Pro uses a 50MP primary sensor, a 48MP Ultra-wide sensor, and a 48MP telephoto lens to capture your moments. The device currently ranks 5th in DXOMARK’s global ranking, after the Huawei Mate 60 Pro+, Huawei P60 Pro, Apple iPhone 15 Pro Max, and Apple iPhone 15 Pro. On paper, the specifications seem unmatched. But Google’s desire for perfection will soon make the Pixel 8 Pro more exceptional.

Google Pixel 8 Pro will soon get a Video Boost feature to enhance video quality

As the report reads, the strings found on the Google Photos app for Android (versions 6.61 and 6.63) indicate that the firm is working to add Video Boost to Pixel 8 Pro devices. The string also reveals details on how the feature works.

The first thing we get from these strings is that the video-enhancing process takes time, depending on video length, internet speed, and battery status. Google adds that a notification will be sent to the user’s device once the video is ready. Additionally, users need to back up the video before using Video Boost, which requires logging into their Google Account. Google finally notes that the process won’t affect your phone’s battery life or performance.

More info surfaced

The Google Photos v6.63 strings also reveal more about Video Boost on Pixel 8 Pro. For example, it says the Photos app lets users export a “boosted” video as an AVC or HEVC file for local playback on the device. This could result in the “best quality.” Moreover, Google Photos supposedly allows users to choose which video should be kept as their library’s “main” option. There’s also an option for keeping the “best videos only.” Video Boost feature seemingly creates two versions of a video.

It remains to be seen when the Video Boost feature lands on Pixel 8 Pro devices. Google already said it will be released by the end of the year. So, if you’re a Pixel 8 Pro owner, keep your eyes on upcoming updates.


[ad_2]
Source link

YouTube is reportedly working on real-time views & likes counters

andreasc
-
0
YouTube is reportedly working on real-time views & likes counters
[ad_1]

As the most popular online video-sharing platform, YouTube is constantly evolving to offer a richer experience to its users. The Google-owned platform has recently rolled out some cool features, including stable volume, screen lock, and the “You” tab. But the latest addition to YouTube could be a real-time view and likes counter.

The count of views and likes are the main parameters to determine the popularity of content on YouTube. The platform also monetizes videos based on their views and interactions. The current likes and views counter on YouTube doesn’t change in real-time and requires a refresh. However, this could soon change thanks to the new feature in the works.

A real-time views and likes counter will soon come on YouTube

As you can see below, the views and likes of a video update in real-time through a nifty animation, regardless of whether the video is playing or paused. The real-time counter supposedly updates itself even when you open another app or reopen YouTube.

YouTube real-time views and likes counters

YouTube has yet to stay tight-lipped about the details of the feature and when it lands on the app. A limited number of YouTube users could now access the feature, but it might take a few months before it becomes available to users globally. You can update your YouTube app to the latest version to check if the feature is activated for you.

As YouTube test features and experiments read, “If you ever notice that YouTube looks a bit different for you than it does for your friend or family member, you’re likely seeing one of these experiments.” You can send your feedback to YouTube via the app’s menu.

Real-time views and likes counters are reasonable indications of how a video performs on YouTube. It also lets you know how many other users watch the same content simultaneously. YouTube still needs to release more details about the feature and its global availability.

YouTube currently has a few new features in works that we could hear more about in the future. Meanwhile, the platform has recently rolled out AI-generated soundtracks for Shorts to a limited group of users. Additionally, it’s widely rolling out a smaller button to skip ads.


[ad_2]
Source link

Meta to remove cross-app chatting between Messenger and Instagram

andreasc
-
0
Meta to remove cross-app chatting between Messenger and Instagram
[ad_1]

Meta has just made a surprising announcement concerning the cross-app communication between Messenger and Instagram. It looks like starting mid-December, we’ll no longer be able to chat with Facebook accounts on Instagram.

Also, Facebook accounts will no longer be able to view the Activity Status of an Instagram user or whether a message has been seen them. It goes even further, as Meta announced that any existing chats with Facebook accounts will not move to the inbox on Facebook or Messenger.

According to Meta, all existing chats on Instagram that someone had with Facebook accounts will become read-only, even if these accounts are removed from the chat. As a result, those with Instagram accounts will no longer be able to send new messages in these chats.

Initially revealed back in 2019, the ability to chat between Messenger and Instagram users was made available to everyone a year later. Meta hasn’t said anything about the reason behind its decision to remove this feature, but it might have something to do with the regulatory guidelines in the EU.

No exact date was provided for the removal of the cross-app chatting feature, but it’s sad to see this go. It’s unlikely that Meta will replace the feature with an improved iteration, but one can only hope.

[ad_2]
Source link
1...641642643...1,483Page 642 of 1,483