Hackers Leak 10M ‘Unrefreshable’ Ticket Barcodes

andreasc
-
0
Hackers Leak 10M ‘Unrefreshable’ Ticket Barcodes
[ad_1]

The latest Ticketmaster leak impacts top celebrities and events including Taylor Swift, Jennifer Lopez, and Justin Timberlake concerts. Hackers claim barcodes can’t be refreshed, undermining security.

Ticketmaster hackers have released 10 million tickets, including barcodes for high-profile events featuring top celebrities like Taylor Swift, Jennifer Lopez, and Justin Timberlake. This latest attack directly challenges Ticketmaster’s “SafeTix” technology, which is designed to prevent ticket theft by continuously refreshing barcodes.

The hackers posted the data on Breach Forums early this morning, claiming that the barcodes cannot be refreshed, undermining Ticketmaster’s security measures specifically designed for mobile tickets.

According to threat actors behind the latest leak, the data includes mail and e-ticket event barcodes for hundreds of events, inviting users to print their own tickets from home without fear of the barcodes changing.

Top Events Affected:

As seen by the Hackread.com Research Team, the leaked data impacts the following celebrities and events:

  • Taylor Swift: 175,000 tickets
  • Jennifer Lopez: 143,000 tickets
  • Justin Timberlake: 205,000 tickets
  • Morgan Wallen: 350,000 tickets
  • Foo Fighters: 320,000 tickets
  • Kacey Musgraves: 205,000 tickets
  • P!NK: 170,000 tickets
  • Rolling Stones: 100,000 tickets
  • Pearl Jam: 100,000 tickets
  • Hozier: 400,000 tickets
Ticketmaster Data Breach: Hackers Leak 10 Million Ticketmaster Tickets
Threat actor publishing Ticketmaster data (Screenshot: Hackread.com)

Data Analysis

The ticket industry is a complicated one. Although Hackread.com has over a decade of experience in data breach analysis, things can be tricky sometimes. Therefore, we used ChatGPT-4o to analyze a small sample from the leak. Here’s what it found:

"The dataset appears to be a detailed extract of Ticketmaster ticket sales for an upcoming event featuring Jennifer Lopez. The data includes various details about the tickets, such as sales order ID, delivery type, event details, ticket barcode values, seat information, pricing, and venue information. Here’s a breakdown of the key columns and their meanings:
SALES_ORD_ID: Unique identifier for the sales order.
DELIVERY_TYPE_CD: Type of ticket delivery, e.g., "eTicket" or "Mail".
EVENT_ID: Unique identifier for the event.
EVENT_NAME: Name of the event (e.g., Jennifer Lopez: This Is Me...Live).
EVENT_LOCALDATE: Local date of the event.
EVENT_LOCALTIME: Local time of the event.
TKT_BARCODE_VAL: Barcode value for the ticket.
SECT_NAME: Name of the section where the seat is located.
ROW_NUM: Row number for the seat.
SEAT_NUM: Seat number.
SRC_EVENT_ID: Source event ID (not provided in this data).
TKT_FACE_VAL_AMT: Face value amount of the ticket.
EVENT_VENUE_NAME: Name of the venue (e.g., Scotiabank Arena).
EVENT_VENUE_CITY: City where the event is taking place (e.g., Toronto).
EVENT_VENUE_STATE: State or province where the event is taking place (e.g., Ontario).
EVENT_VENUE_COUNTRY: Country where the event is taking place (e.g., CA for Canada).
SERVICE_CHARGE_AMT: Service charge amount for the ticket.
HOST_SYS_CD: Host system code.
HOST_VAX_ACCT_NUM: Host VAX account number.
EXTENDED_TKT_TYPE_CD: Extended ticket type code.
BASE_TKT_TYPE_CD: Base ticket type code.
XNUM_CD: Extended number code.
VEN_ID: Venue ID.
QUALIFIER_NAME1: Qualifier name 1.
QUALIFIER_NAME2: Qualifier name 2.
QUALIFIER_NAME3: Qualifier name 3.
QUALIFIER_COMBO_ID: Qualifier combo ID.
CPN_CAT_ID: Coupon category ID.
CPN_PWD_PRIM_VAL: Coupon password primary value.
MEMBERDB_SALES_ORD_ID: Member database sales order ID.
ORD_CREATE_OPR_CD: Order create operator code.
SALES_PLATFORM_CD: Sales platform code.
EVENT_KEY: Event key.
EVENT_HEX: Event hexadecimal code.
EVENT_TIMEZONE: Timezone of the event.
EVENT_URL: URL of the event page on Ticketmaster.
EVENT_VENUE_KEY: Venue key.
EVENT_VENUE_POSTCODE: Venue postcode.
EVENT_VENUE_ADDR1: Venue address line 1.
EVENT_VENUE_ADDR2: Venue address line 2.
EVENT_VENUE_LONG: Longitude of the venue.
EVENT_VENUE_LAT: Latitude of the venue.
Key Points:
Event Information: All entries are for the event "Jennifer Lopez: This Is Me...Live" on August 2, 2024, at 8:00 PM, held at Scotiabank Arena in Toronto, Ontario, Canada.
Ticket Delivery Type: Tickets are either "eTicket" or "Mail".
Ticket Details: Includes section, row, and seat number, along with the barcode value.
Pricing: Face value and service charge amounts are included.
Venue Details: Information about the venue's name, city, state, country, postal code, and geographical coordinates.
Sales Platform: Tickets were sold through different platforms such as mobile, desktop, and webview.
MOST CRUCIAL:
The dataset includes critical details that could be used to create counterfeit tickets if it falls into the wrong hands. Here’s why:
Ticket Barcode Values: Each entry contains a unique TKT_BARCODE_VAL which is the barcode value for the ticket. This barcode is what gets scanned at the event venue to verify the ticket’s authenticity and entry validity.
Event Details: The dataset includes the exact date, time, and location of the event. This information is essential for generating a legitimate-looking ticket.
Seating Information: Detailed seating information (section, row, and seat number) is provided, which would allow for the creation of tickets that look real and are specific to certain seats.
Face Value and Service Charges: Knowing the exact face value and service charges helps to make the counterfeit ticket pricing appear genuine.
Venue Information: The venue’s name, address, and even geographical coordinates are available, which are typically included on a printed ticket.
URLs: The dataset includes URLs that could potentially be used to fetch additional event-specific information or resources to further validate the counterfeit ticket.
If someone has access to this dataset, they can potentially print their own tickets using the barcodes provided. The challenge for Ticketmaster would be to differentiate between legitimate and counterfeit tickets, especially if the barcodes are static and not refreshed regularly."
Ticketmaster Breach: Hackers Leak 10M 'Unrefreshable' Ticket Barcodes
Screenshot from the leaked data (Screenshot: Hackread.com)

Previous Leaks:

The latest leak is part of the hacking spree the threat actors unleashed against Ticketmaster back in May 2024 when the ShinyHunters hacking group claimed responsibility for stealing data from 560 million Ticketmaster users.

On July 8, 2024, hackers leaked 30,000 ticket barcodes for major events, including a DIY guide on how to create physical tickets from the leaked data. Earlier leaks on July 4 and 5, 2024 involved 44,000 and 170,000 ticket barcodes related to Taylor Swift’s The Eras Tour, respectively. In total, the hackers announced stealing a treasure trove of data including the following:

  • 980 million sales orders
  • 680 million order details
  • 1.2 billion party lookup records
  • 440 million unique email addresses
  • 4 million uncased and deduped records
  • 560 million AVS (Address Verification System) detail records
  • 400 million encrypted credit card details with partial information.

It is worth mentioning that ShinyHunters and Sp1d3rHunters are two different individuals but are affiliated with the group behind the Ticketmaster data breach.

Nevertheless, Ticketmaster faces increasing pressure to reinforce its security protocols and regain public trust. The company has yet to comment on the latest leak and its implications for the “SafeTix” technology. Stay tuned for further updates on this developing story.

  1. Alleged ShinyHunters Hacker Group Member Arrested
  2. Live Nation Confirms Massive Ticketmaster Data Breach
  3. TEG Ticket Vendor Breach: 30M User Records for Sale
  4. ShinyHunters Leak 33 Million Twilio Authy Phone Numbers
  5. AT&T breach ShinyHunters selling AT&T database with 70M SSN

[ad_2]
Source link

OnePlus COO talks about OnePlus Nord 4’s metal build, updates & more

andreasc
-
0
OnePlus COO talks about OnePlus Nord 4’s metal build, updates & more
[ad_1]

The OnePlus Nord 4 will launch on July 16, and the company’s COO, Kinder Liu, talked about the phone ahead of that date, its metal build, updates, and more. He did not reveal much, but he was interviewed by Digital Trends and did reveal some tidbits.

The OnePlus Nord 4 will deliver metal unibody build & offer 4 years of major OS updates

First and foremost, he said that the OnePlus Nord 4 will end up offering 4 years of major Android updates, and six years of security patches. That basically brings the phone on the same level as the OnePlus 11 and OnePlus 12 in terms of major OS updates. Both of those phones were promised to get four.

If we compare it to Samsung’s mid-rangers, the Galaxy A35 and A55, the OnePlus Nord 4 will get supported for one extra year. The Galaxy A55 could be one of its main competitors, which is why this comparison makes sense.

We also know what the OnePlus Nord 4 will look like, and that it will bring a metal unibody construction. Kinder Liu talked about that too a bit, as he was asked about it.

Liu explained why OnePlus went with a metal unibody build here

That construction has disappeared from the scene for a while. Kinder Liu went on to explain that it’s because of 5G, and the number of antennas required for it. The OnePlus Nord 4 has 50% smaller antennas, with strategic placement. That allowed OnePlus to proceed with the metal unibody build.

OnePlus’ COO said that a metal unibody build was chosen for “durability, beauty, permanence, and strength”. The last piece of information that he shared is that the OnePlus Nord 4 was tested by TÜV SÜD simulating 72 months of use. It was certified to stay fluent long after you start using it.

Everything will be revealed on July 16, so stay tuned for more information about OnePlus’ new mid-ranger.


[ad_2]
Source link

The best VPN apps for Android users in 2024

andreasc
-
0
[ad_1]

In 2024, securing these personal vaults—especially for Android users—becomes paramount when smartphones often know more about us than we do ourselves. Given the platform’s openness and app diversity, Virtual Private Networks (VPNs) are crucial in shielding your online deeds from the overly curious and malicious. Innovations surge as the VPN arena evolves, making a knowledgeable choice more important than ever. This guide dives deep into the premier VPN apps for Android, evaluating their features, performance, and value to enhance your digital armor in this interconnected age.

Understanding VPN Necessity for Android Users

In today’s digital mesh, Android users are especially vulnerable to threats that lurk on public Wi-Fi and through geo-restrictions that limit access to global content. VPNs stand out by creating an encrypted tunnel that cloaks your online moves from various snoops, ensuring that personal details, financial information, and private communications remain confidential—even on unsecured networks. They also mask your IP address, opening up a world of content beyond digital borders.

Android’s inherent openness makes it more susceptible to risks than closed systems, amplifying the importance of employing a robust VPN. Throughout 2024, leading VPN providers have emphasized more robust encryption protocols and privacy features tailored to integrate seamlessly with Android, ensuring they don’t just add security but also gel well with your device’s performance.

Key Features in Top Android VPN Apps

When shopping for the best VPN app for your Android device, several features are non-negotiable: AES-256 encryption secures your data under a virtually impenetrable digital lock, while a strict no-logs policy ensures that your online history stays private, not just from outsiders but also from the VPNs themselves. Look for services that undergo independent audits to confirm these claims.

Other essential features include a kill switch to protect data if the VPN drops and split tunneling to manage what apps or websites you shield. A broad network of servers enhances the ability to skirt geo-restrictions and offers more options for speedy connections. The presence of the WireGuard protocol is another plus, offering cutting-edge speed and security.

Top VPN Picks for Android in 2024

Among the plethora of options, specific VPNs stand out for Android users this year:

– NordVPN shines with its vast server network and double encryption, making it a powerhouse for security and speed. Its Android app is intuitive and features threat protection to block malicious sites.

– ExpressVPN remains a favorite for its high speeds and strong privacy track record, which are supported by its TrustedServer technology. The Android app offers impressive split tunneling options for detailed control over VPN use.

– Surfshark offers unlimited connections and exceptional value, with innovative features like CleanWeb to fend off ads and trackers. Its all-in-one solution now includes antivirus features, making it a versatile pick for Android users.

– ProtonVPN emphasizes privacy and security with advanced features in an easy-to-use interface. Its free tier offers a robust introduction to VPN services without data caps, a rare find.

Performance and Usability: What to Expect

The top VPNs in 2024 have focused on optimizing their Android apps to deliver robust performance without draining your device’s battery. Features like quick connections to the fastest servers and stable connections are crucial, especially when switching between Wi-Fi and mobile data. User-friendly interfaces with precise settings and server info make these VPNs stand out, enhancing the overall experience without compromising security.

Privacy and Security Advances in Modern VPNs

As threats evolve, so do VPN features. In 2024, more Android VPNs will offer multi-hop connections for added anonymity and advanced obfuscation techniques to hide VPN traffic during everyday internet use, which is crucial for users in restrictive regions. Integrated features like malware blocking enhance browsing security, and DNS protection prevents exposure to your online queries.

Conclusion

They are navigating the digital world in 2024, which demands robust mobile security. For Android users, the right VPN is more than a tool; it’s an essential layer of protection, ensuring privacy and freedom online. From NordVPN’s speed and security features to ExpressVPN’s renowned reliability, there’s a VPN that meets every need and preference. As digital landscapes evolve, these tools will only become more vital, making now the ideal time to invest in one, securing your mobile life with the best VPN for Android.

Featured image source


[ad_2]
Source link

Millions of Customers’ Data Exposed

andreasc
-
0
Millions of Customers’ Data Exposed
[ad_1]

mSpy, a widely used phone spyware application, has suffered a significant data breach, exposing the sensitive information of millions of its customers.

The breach, which Brainstack, mSpy’s parent company, has not publicly acknowledged, has raised serious concerns about spyware applications’ security and ethical implications.

The Extent of the Breach

mSpy Customers’ Locations

The breach, first disclosed by Switzerland-based hacker Maia Arson Crimew, involved over 100 gigabytes of Zendesk records. These records contained millions of individual customer service tickets, email addresses, and the contents of those emails.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

Techcrunch data revealed that mSpy’s customers are spread globally, with significant clusters in Europe, India, Japan, South America, the United Kingdom, and the United States.

Troy Hunt, who runs the data breach notification site Have I Been Pwned, obtained a copy of the leaked dataset. He added about 2.4 million unique email addresses of mSpy customers to his site’s catalog of past data breaches.

Hunt confirmed the accuracy of the leaked data by contacting several subscribers who verified the information.

Implications for Privacy and Security

The mSpy data breach is the latest in several incidents involving phone spyware operations. This breach underscores the inherent risks associated with spyware applications, which are often marketed for parental control but can be misused for unauthorized surveillance.

The leaked data included customer information and details of unwitting victims targeted by mSpy users.

Dataset analysis revealed that some journalists had contacted mSpy following a previous breach in 2018. Additionally, U.S. law enforcement agents had filed or sought to file subpoenas and legal demands with mSpy.

In one instance, a mSpy representative provided billing and address information about a customer to an FBI agent investigating a kidnapping and homicide case. The emails in the leaked data show that mSpy’s operators were aware of the spyware’s misuse.

After being discovered, some customers inquired about removing mSpy from their partner’s phone. The dataset also raised questions about U.S. government officials and agencies, police departments, and the judiciary using mSpy, with some instances lacking transparent legal processes.

Brainstack’s Role and Response

Brainstack, the Ukrainian tech company behind mSpy, has remained largely hidden. Despite its significant customer base, Brainstack has not publicly acknowledged the breach.

The leaked Zendesk data exposed Brainstack’s involvement in mSpy’s operations, revealing records of employees using false names to respond to customer tickets.

When contacted by TechCrunch, Brainstack employees confirmed their names as found in the leaked records but declined to discuss their work.

Brainstack’s chief executive, Volodymyr Sitnikov, and senior executive, Kateryna Yurchuk, did not respond to multiple emails requesting comment. A Brainstack representative, who did not provide their name, declined to answer questions but did not dispute the reporting.

Zendesk, the platform used by mSpy for customer support, stated that they had no evidence of a compromise of their platform. However, they did not clarify whether mSpy’s use of Zendesk violated their terms of service.

The mSpy data breach has exposed the vulnerabilities and ethical concerns surrounding spyware applications. With millions of customers’ data compromised, the incident highlights the need for stricter regulations and oversight of spyware operations.

As authorities and watchdogs continue to investigate, the breach is a stark reminder of the potential dangers of surveillance technology.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo


[ad_2]
Source link

Google Pixel 9 Pro Fold & Pixel 9 Pro XL names confirmed

andreasc
-
0
Google Pixel 9 Pro Fold & Pixel 9 Pro XL names confirmed
[ad_1]

A while back, a rumor appeared claiming that the Google Pixel Fold 2 will launch under a different name. The Pixel 9 Pro Fold name was mentioned, and it seems like that rumor was spot on. Certification listings just confirmed the Google Pixel 9 Pro Fold and Pixel 9 Pro XL names.

The Google Pixel 9 Pro Fold & Pixel 9 Pro XL names have been confirmed

The certification in question is the REL (Radio Equipment List) certification from Canada. MySmartPrice spotted both listings, and both of them flat-out mention the names of the two models, along with the belonging model numbers.

Do note that the Pixel 9 and Pixel 9 Pro are also coming, though. Google is planning to launch either three or four devices during its August 13 press event. Yes, the Pixel event is now taking place in August, not in October. Google decided to move it.

Google will either announce the Pixel 9, Pixel 9 Pro, and Pixel 9 Pro XL during that event, all it could opt to push out all four devices. We’re still not sure whether the Pixel 9 Pro Fold will get a separate launch event or not.

The Pixel 9 Pro Fold could launch on August 13, but we’re not sure

Judging by the fact that it carries a very similar name to the other Pixel devices now, it could end up launching at the same time. We’ll see, as we didn’t hear that much about that device, unlike the other three Pixels.

Google will switch up the design of its non-folding Pixel smartphones, as they will have a camera island on the back more reminiscent of the Pixel Fold than the Pixel 8 series. Flat sides will be in use too, and so on.

All three smartphones already surfaced, both in CAD renders and in real-life images. The Pixel 9 Pro Fold is still a bit of a mystery, though. Google is expected to make it more similar to other book-style foldables, so it will be less wide, and taller.


[ad_2]
Source link

iPhone users in 98 countries warned about spyware by Apple

andreasc
-
0
iPhone users in 98 countries warned about spyware by Apple
[ad_1]

In April 2024, we reported how Apple was warning people of mercenary attacks via its threat notification system. At the time it warned users in 92 countries. In a new round, Apple is now warning users in 98 countries of potential mercenary spyware attacks.

The message sent to the affected users says:

“Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple ID.”

In the same message, Apple says that it is very likely that the person in question is being specifically targeted because of what they do or who they are. And, although there is a certain margin of error, the user should take this warning seriously.

Mercenary spyware is used by governments to target people like journalists, political activists, and similar targets, and involves the use of sophisticated tools like Pegasus. Pegasus is one of the world’s most advanced and invasive spyware tools, known to utilize zero-day vulnerabilities against mobile devices.

On the website that explains Apple threat notifications and protection against mercenary spyware, it specifically mentions Pegasus:

“According to public reporting and research by civil society organizations, technology firms, and journalists, individually targeted attacks of such exceptional cost and complexity have historically been associated with state actors, including private companies developing mercenary spyware on their behalf, such as Pegasus from the NSO Group.”

Apple has sent out similar notifications multiple times a year since 2021 but doesn’t disclose how it determines who to send them to, since that might aid attackers in evading future detection.

Amnesty International urges those that have received such a notification to take it seriously. Amnesty’s Security Lab offers digital forensic support to potential victims like human rights defenders, activists, journalists and members of civil society.

If you are a member of civil society, and you have received an Apple notification, you can contact Amnesty International and request forensic support using the Get Help form.

Whether you’ve received that notification or not, every iPhone user should make sure they have the latest updates, protect the device with a passcode, use multi-factor authentication and a strong password for Apple ID, only install apps from the Apple Play store, use a mobile security product, and be careful what they open or tap on.

People that have reason to believe they might be individually targeted by mercenary spyware attacks, can enable Lockdown Mode on their Apple devices for additional protection.

Lockdown Mode does the following:

  • Blocks most message attachments
  • Blocks incoming FaceTime calls from people you have not called previously
  • Blocks some web technologies and browsing features
  • Excludes location from shared phots and removes Shared Albums
  • Blocks wired connections when the device is locked
  • Blocks auto-joining non-secure WiFi networks
  • Blocks incoming invitations from people you have not previously invited
  • Blocks installation of configuration profiles you may require for work or school

How to turn on Lockdown Mode on iPhone or iPad

  1. Open the Settings app.
  2. Tap Privacy & Security.
  3. Scroll down, tap Lockdown Mode.
  4. Tap Turn On Lockdown Mode.
  5. Read what it does and tap Turn On Lockdown Mode if that is what you want.
  6. Tap Turn On & Restart, then enter your device passcode.

We don’t just report on phone security—we provide it

Cybersecurity risks should never spread beyond a headline. Keep threats off your mobile devices by downloading Malwarebytes for iOS, and Malwarebytes for Android today.

Summer mega sale

Go into your vacation knowing you’re much more secure: This summer you can get a huge 50% off a Malwarebytes Standard subscription or Malwarebytes Identity bundle. Run, don’t walk!


[ad_2]
Source link

HONOR Magic Vs3 is here as a cheaper alternative to Magic V2

andreasc
-
0
HONOR Magic Vs3 is here as a cheaper alternative to Magic V2
[ad_1]

HONOR announced two book-style foldable smartphones today, the Magic V3 and Magic Vs3. We’ve already talked about the Magic V3, the company’s brand new flagship foldable smartphone.

The HONOR Magic Vs3 is inferior to the Magic V3, but also a bit cheaper

Well, the Magic Vs3 also arrived, and it’s basically a cheaper alternative to the Magic V3. It also looks a bit different thanks to a completely different-looking camera island on the back. It’s also very thin and light, though, even though not to the extent of the Magic V3.

When unfolded, this phone measures 156.8 x 145.2 x 4.65-4.8mm. When folded, it measures 156.8 x 74 x 9.8-10.1mm. Depending on the model, the Magic Vs3 weighs 229 or 231 grams.

The ‘Velvet Black’ model is thinner and lighter here, while the ‘Tundra Green’ and ‘Qilian Snow’ are slightly thicker and heavier. That black model has vegan leather on the back, which thins down the phone further, while it also making it lighter. The other two variants have glass backs.

It includes two powerful displays and the Snapdragon 8 Gen 2 SoC

The HONOR Magic Vs3 features a 7.92-inch main display. That panel has a resolution of 2344 x 2156, and it’s an LTPO AMOLED display with a refresh rate of up to 120Hz. The cover display measures 6.43 inches and has a resolution of 2376 x 1060 pixels. That display also has an adaptive refresh rate of up to 120Hz. Both displays offer a 3,840Hz PWM dimming.

The Snapdragon 8 Gen 2 fuels the Magic Vs3, unlike the Snapdragon 8 Gen 3 which is included inside the Magic V3. This phone comes in 12GB and 16GB RAM models with 256GB, 512GB, and 1TB of storage. Android 14 comes pre-installed with MagicOS 8.0.1.

Three cameras, a 5,000mAh battery, and fast wired & wireless charging are all here

A 50-megapixel main camera (f/1.9 aperture) is included here. A 40-megapixel ultrawide unit (f/2.2 aperture) also sits on the back, as does an 8-megapixel periscope telephoto camera (f/3.4 aperture, 5x optical zoom). A 16-megapixel selfie camera (f/2.2 aperture) sits on each of the phone’s displays.

A 5,000mAh battery is also a part of the package here. It supports 66W wired and 50W wireless charging. The company also included two nano SIM card slots inside of this phone and a side-facing fingerprint scanner.

The HONOR Magic Vs3 pricing starts at CNY7,699 ($1,061), and we’re not sure if the phone will launch outside of China. The Magic V3 almost certainly will, but we’re not sure about the Magic Vs3.


[ad_2]
Source link

Over 2 Million Users Data Exposed

andreasc
-
0
Over 2 Million Users Data Exposed
[ad_1]

RALEIGH, NC—Advance Stores Company, Incorporated, a prominent commercial entity in the automotive industry, has recently been the victim of a cyber attack.

The breach, which occurred on April 14, 2024, was discovered on June 10, 2024, and has compromised the personal information of over 2.3 million users, including 13,858 residents of Maine.

Ethan Steiger, the Senior Vice President and Chief Information Security Officer at Advance Auto Parts, confirmed the breach in a formal notification submitted to the authorities.

The compromised data includes names and other personal identifiers, raising serious concerns about potential identity theft and misuse of personal information.

Details of the Breach

The breach was identified as an external system breach, commonly known as hacking. The attackers managed to infiltrate the company’s systems and gain unauthorized access to sensitive user information.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

The breach was not detected until nearly two months later, highlighting the sophisticated nature of the attack and the challenges in identifying such threats promptly.

According to the Office of Maine Attorney General reports, Advance Auto Parts immediately mitigated the damage and secured its systems.

The company has since notified the affected individuals through written communication, with notifications sent out on July 10, 2024.

Affected users are offered identity theft protection services to safeguard their personal information. Advance Auto Parts has implemented several measures to enhance their cybersecurity infrastructure in response to the breach.

This includes a thorough review of their security protocols, increased system monitoring, and collaboration with cybersecurity experts to prevent future incidents.

Ethan Steiger emphasized the company’s commitment to protecting their customers’ data and ensuring such breaches do not occur again.

“We deeply regret the inconvenience and concern this incident may have caused our valued customers. Our team is working tirelessly to address the situation and strengthen our defenses against future threats,” Steiger stated.

The company has also notified consumer reporting agencies, as the law requires, to ensure that affected individuals can take necessary precautions. Users are advised to monitor their accounts for suspicious activity and report anomalies to the relevant authorities.

The Advance Auto Parts data breach is a stark reminder of the growing threat of cyber attacks and the importance of robust cybersecurity measures. As businesses continue to digitize their operations, the need for advanced security protocols and vigilant monitoring becomes increasingly critical.

Customers affected by the breach are encouraged to take advantage of the identity theft protection services offered by Advance Auto Parts and remain vigilant in safeguarding their personal information.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo


[ad_2]
Source link

HONOR Magic V3 is official and it’s even thinner than expected

andreasc
-
0
HONOR Magic V3 is official and it’s even thinner than expected
[ad_1]

HONOR has announced its new foldable flagship, the HONOR Magic V3. This handset comes as a successor to the Magic V2, and it launched in China. Its global launch is also expected, and it will probably be announced for global markets at IFA 2024 in September. We’re still not sure, though.

The HONOR Magic V3 is even thinner than its predecessor

With that in mind, this smartphone is even thinner than the Magic V2, and even thinner than expected. It was rumored to be 9.7mm thick, but it’s only 9.2mm thick (not counting the camera bump, of course). The HONOR Magic V2 was 9.9mm or 10.1mm thick, depending on the model. Do note that the 9.2mm thickness applies to the vegan leather model, the glass models are 9.3mm thick.

Now, the HONOR Magic V2’s predecessor felt like a normal phone in the hand when folded. The Magic V3 will feel even better judging by these numbers. The HONOR Magic V3 also weighs only 226 grams (vegan leather model, glass models weigh 230 grams), while its predecessor weighted 231/237 grams. So that’s an improvement too.

It’s lighter than the Galaxy S24 Ultra, despite the fact it’s a foldable phone

This weight puts some regular smartphones to shame, which is a true accomplishment by HONOR. That’s the weight of some regular, non-folding smartphones, a number of them are even heavier than 226 grams. For comparison’s sake, the iPhone 15 Pro Max weighs 221 grams, while the Galaxy S24 Ultra weighs 232 grams.

HONOR poked some fun at Samsung a couple of days ago, related to the thickness of the Galaxy Z Fold 6. The company used the Magic V2 to do that, and this phone pushes things to a whole new level.

The Magic V2 was not IP-rated, well, this phone is. It comes with an IPX8 rating, which is very welcomed. Its hinge has also been thinned down, it measures 2.84mm. That hinge can be folded up to 500,000 times, the company says.

HONOR Magic V3 official image 22

The battery capacity is much higher than what the Galaxy Z Fold 6 offers

The Snapdragon 8 Gen 3 fuels the HONOR Magic V3, so HONOR didn’t skimp out on power. A larger vapor chamber cooling system is also included. To top it all off, a 5,150mAh battery sits inside of this smartphone, and even larger battery than in the HONOR Magic V2.

The device offers 12GB or 16GB of RAM, and it comes in 256GB, 512GB, and 1TB storage options. Only the 256GB storage model includes 12GB of RAM, the other two offer 16GB of RAM. HONOR used LPDDR5X RAM and UFS 4.0 storage inside the HONOR Magic V3, by the way. Android 14 comes pre-installed with MagicOS 8.0.1.

HONOR even managed to squeeze in 50W wireless charging support

This is a silicon-carbon battery, and it’s a lot bigger than what the Galaxy Z Fold 6 has to offer. That phone comes with a 4,400mAh unit. This phone supports 66W wired charging, and 50W wireless charging too. Wireless charging was not included in the Magic V2, so it’s a true accomplishment that HONOR managed to do that here and make the phone even thinner.

The phone includes a 7.92-inch main display with an adaptive refresh rate of up to 120Hz. Its cover display also has an adaptive refresh rate of up to 120Hz, though it measures 6.43 inches. HONOR also mentioned a 5,000-nit peak brightness for HDR content, and a 1,800-nit global peak brightness, which is impressive. That goes for both displays. Both panels also offer a 4,320Hz PWM dimming to protect your eyes.

The cameras have been improved too, there’s a periscope telephoto camera on the back now

The HONOR Magic V3 has three cameras on the back. The main one is a 50-megapixel unit with an f/1.6 aperture. A 40-megapixel ultrawide camera (f/2.2 aperture, 112-degree FoV) is also included, as is a 50-megapixel periscope telephoto camera (f/3.0 aperture, 3.5x optical zoom, 100x digital zoom).

The phone comes in Black, Green, Red, and White color options. The black variant combines metal with vegan leather, while all the other variants have glass on the back. A side-facing fingerprint scanner is also included, as are two SIM card slots.

When unfolded, the phone measures 156.6 x 145.3 x 4.35-4.4mm. When folded, it measures 156.6 x 74 x 9.2-9.3mm. The 226-gram weight applies to the black model, while the other variants weigh 230 grams. The price tags are still unknown. They’ll be different outside of China either way, presuming this phone will launch globally, and it almost certainly will.


[ad_2]
Source link

EU forces Apple Pay to share the stage: More tap-to-pay options coming to your iPhone

andreasc
-
0
EU forces Apple Pay to share the stage: More tap-to-pay options coming to your iPhone
[ad_1]
The European Commission (EC) is relentless in its push for open access, making big tech companies rethink their rules. For example, the EU’s Digital Markets Act (DMA) has already forced Apple to allow different app stores on iPhones. Now, the company is opening up its contactless payment system as well.

Apple opens iPhone payments to competition in the EU


The EC has given the nod to Apple’s updated commitments, which means users won’t be restricted to using just the Apple Pay mobile wallet anymore.Apple Pay is Apple’s mobile wallet that lets iPhone users make payments both in stores and online. Since iPhones exclusively use iOS, Apple maintains control over every aspect of its ecosystem, including the conditions for mobile wallet developers to access it.

However, the tech giant is now allowing European developers to enable tap-and-go payments within their iOS apps for things like car keys, transit passes, corporate badges, home keys, hotel keys, merchant loyalty rewards, and event tickets.

From now on, Apple can no longer use its control over the iPhone ecosystem to keep other mobile wallets out of the market. Competing wallet developers, as well as consumers, will benefit from these changes, opening up innovation and choice while keeping payments secure.

– Margrethe Vestager, EU antitrust chief, July 2024


Apple has until July 25 to roll out these changes, which will be in effect for 10 years across all 30 countries in the European Economic Area.
Apple opens iPhone payments to competition - EU forces Apple Pay to share the stage: More tap-to-pay options coming to your iPhone

Apple opens iPhone payments to competition

The European Commission first took issue with Apple’s tap-to-pay practices in 2022 after starting a formal antitrust investigation into Apple Pay two years earlier. Regulators determined that Apple had abused its dominant market position by limiting access to the NFC technology required for mobile payments. This restriction meant that rivals couldn’t create apps or wallets with tap-to-pay features on iPhones, forcing users to rely solely on Apple Pay for mobile payments.

Had Apple failed to comply with the DMA rules, it would have been subject to even steeper fines than before. In March, Apple was hit with its first EU antitrust penalty – a 1.84-billion euro fine – for stifling competition from Spotify and other music streaming rivals through App Store restrictions.

Ahead of Apple and the EU finalizing the deal, developers have been gearing up, and the first alternative to Apple Wallet is already ready to launch in Europe.


[ad_2]
Source link
1...666768...1,480Page 67 of 1,480