TeamViewer Confirms that Russian Actors Behind the Recent Hack

andreasc
-
0
TeamViewer Confirms that Russian Actors Behind the Recent Hack
[ad_1]

TeamViewer, the renowned remote access software company, has officially confirmed that the recent cyberattack on its internal corporate IT environment was orchestrated by the Russian state-sponsored hacking group APT29, known as Midnight Blizzard or Cozy Bear.

The attack, detected on June 26, 2024, has been attributed to the same group implicated in several high-profile cyber incidents, including the 2020 SolarWinds hack and the 2016 Democratic National Committee breach.

In a series of statements released on their Trust Center, TeamViewer detailed the timeline and nature of the breach.

The company’s security team identified suspicious activity tied to the credentials of a standard employee account within their corporate IT environment.

Incident & Response

Immediate incident response measures were enacted, and investigations commenced in collaboration with globally renowned cybersecurity experts and relevant authorities.

TeamViewer has emphasized that the breach was contained within its corporate IT environment and did not extend to its product environment, connectivity platform, or any customer data.

The investigation, supported by continuous security monitoring and external incident response teams, led to the attribution of the attack to APT29.

This group, allegedly linked to Russia’s Foreign Intelligence Service (SVR), is known for its sophisticated cyber-espionage campaigns targeting government, military, and technology sectors worldwide.

TeamViewer has reiterated its commitment to transparency and security. “Security is of utmost importance for us, it is deeply rooted in our DNA,” the company stated.

They assured stakeholders that the product environment remains secure and that there is no evidence of compromised customer data.

The company continues working closely with cybersecurity experts and authorities to investigate further and mitigate potential risks.

The cybersecurity community has responded with heightened vigilance. Experts have advised organizations using TeamViewer to review their security measures and monitor for any unusual activity.

Matt Hull, global head of threat intelligence at NCC Group, recommended removing TeamViewer software as a precaution until more details about the compromise are known.

TeamViewer’s prompt response and transparent communication have been crucial in managing the incident and maintaining stakeholder trust.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files


[ad_2]
Source link

Google, Samsung address over 60 security issues in July update

andreasc
-
0
Google, Samsung address over 60 security issues in July update
[ad_1]

For a change, Google rolled out the July security patch to the Pixel Watch lineup before Pixel phones. While both watches have already received the update, it has yet to arrive on phones, including foldables. In the meantime, the company has published the content of the July 2024 security update for Pixels and other Android products. Samsung has also revealed the Galaxy-specific patches it will bundle with the July patch.

Google’s July 2024 Android security update patches 27 vulnerabilities

Every month, Google releases a new security patch for Android devices. It contains fixes for various bugs and security flaws in Android OS components and other partner components in Android OS. Device makers roll out these patches to their eligible products, often adding fixes for vulnerabilities exclusive to their devices. It’s no different this month. Google’s July 2024 ASB (Android Security Bulletin) fixes 27 security issues in Android products.

Among those are four critical vulnerabilities potentially causing severe damage to affected devices if threat experts exploited the flaws. According to Google, the most severe issues patched this month “could lead to local escalation of privilege with no additional execution privileges needed.” The rest are all high-severity vulnerabilities affecting Android versions from 12 to 14, including Android 12L, a special build for foldables and tablets.

As usual, Google has grouped these patches under two different security patch levels: 2024-07-01 and 2024-07-05. Vendors can roll out either patch level to their Android devices. Samsung, the biggest name in the Android smartphone space, always pushes the former build. Its updates also contain dozens of additional security fixes. Called Samsung Vulnerabilities and Exposures (SVE) items, these issues don’t exist on Android products from other brands.

Samsung’s updated security bulletin says the July SMR (Security Maintenance Release) for Galaxy devices contains 33 SVE patches. These include at least two critical vulnerabilities allowing remote attackers to execute arbitrary code with system privilege with the help of user interaction. This month’s security update for Galaxy devices also patches two high-severity Samsung Semiconductor issues. These issues exist on Exynos-powered devices.

These patches will soon reach millions of Android devices

Google, Samsung, and other brands will soon start pushing the July security update to their respective Android products. The exact number of patches will vary by device—not every Galaxy device is vulnerable to all 62 issues discussed above. Watch out for an update on your Android phone, tablet, or Wear OS smartwatch in the coming days. Most devices allow you to manually check for updates from the Settings app.


[ad_2]
Source link

Revolutionizing settlements in personal injury cases

andreasc
-
0
Revolutionizing settlements in personal injury cases
[ad_1]

The advent of blockchain technology and smart contracts has opened new avenues for handling transactions across various industries. In the realm of personal injury law, these innovations are starting to significantly alter how settlements are managed. Blockchain’s inherent characteristics of transparency, security, and immutability, coupled with smart contracts’ ability to execute agreements automatically, pave the way for a more streamlined and efficient settlement process. The potential for reducing the time and resources currently required for dispute resolution and payment distribution is considerable.

Smart contracts, self-executing contracts with the terms directly written into code, offer a transformative approach to managing and enforcing settlements. They work by automating the release of funds when certain predefined conditions are met, minimizing the need for intermediaries typically involved in the settlement process. This automation can greatly reduce administrative overhead and the risk of human error, leading to faster and more reliable resolution of claims for all parties involved.

Blockchain Technology in Personal Injury Settlements

Blockchain technology introduces a transformative approach to handling settlements in personal injury cases, particularly within the scopes of medical malpractice and products liability. It offers a secure, transparent, and efficient method of managing transactions and contractual obligations.

Understanding Blockchain Basics

Blockchain is a digitally distributed ledger that records transactions across many computers. Its primary features include immutability and decentralization, which assure that once information is recorded, it cannot be altered retroactively. This is particularly relevant for an Aurora personal injury lawyer, who can ensure the integrity of evidence and transaction records in personal injury cases.

The Role of Smart Contracts

Smart contracts are self-executing contracts with the terms of the agreement between buyer and seller directly written into lines of code. They run on blockchain, and their execution is automatic when certain conditions are met. This means, for personal injury claims in Aurora, settlements can be dispensed swiftly and without bias upon meeting predefined criteria, reducing the time and complications often associated with such legal proceedings.

Advantages for Legal Practitioners:

– Automatic enforcement of contract terms
– Reduction in the likelihood of disputes
– Streamlining of case management processes

Implications for Medical Malpractice and Products Liability Cases

In the context of medical malpractice, blockchain can seamlessly integrate with electronic health records to securely and permanently document patient care transactions, ensuring that all information pertaining to a case is unalterable and transparent. For products liability cases, blockchain can track a product’s lifecycle from production to sale, which aids in pinpointing responsibility in the event of a claim.

Benefits for Stakeholders:

– Clients: Empowers them with definitive evidence in cases.
– Lawyers: Facilitates a higher trust level in the case’s documentation.
– Healthcare Providers and Manufacturers: Encourages accountability and improvements in patient care and product quality.

Blockchain technology stands to make substantial improvements over traditional methods of managing personal injury cases, lending assuredness and precision to the intricate legal processes.

Enhancing Legal Practice with Smart Contracts

Smart contracts are transforming the traditional legal practice by automating and enforcing the settlement process in litigation, particularly in personal injury cases. This technology offers a distinct advantage for an injury attorney and their firms, streamlining operations and ensuring transparency.

Smart Contracts in Litigation Processes

Smart contracts can significantly reduce the time and resources required during litigation by automating the settlement agreement terms. They function as self-executing contracts with the terms of the agreement written into code and existing on a blockchain. This means that once the prescribed conditions are met, the smart contract executes the relevant actions automatically.

Injury attorneys can leverage smart contracts to handle escrow arrangements, where settlement amounts are released only after specified conditions are met. For example, payments can be contingent upon the client’s receipt of medical treatment or submission of necessary documentation, with each step verifiably recorded on the blockchain.

Benefits for Injury Attorneys and Law Firms

Law firms that adopt smart contracts in their legal processes can benefit in several ways:

– Automation: Reducing the need for manual oversight in the execution of agreements.

– Efficiency: Streamlining the settlement process can lead to faster resolutions.

– Transparency: Immutable record-keeping on a blockchain provides clear evidence of executed terms.

Injury attorneys, in particular, will find that the technology enables them to focus more on case strategies and client interaction, rather than administrative tasks.

Case Study: Agruss Law Firm’s Innovative Approach

Agruss Law Firm, known for its personal injury advocacy, has implemented smart contracts to better serve its clients. The firm has developed a system where settlements are handled through smart contracts, allowing for prompt and undisputed distribution of funds.

The firm’s use of smart contracts presents:

– Client Satisfaction: Clients enjoy the speedy receipt of funds without the usual bureaucratic delays.

– Operational Efficiency: The firm saves on administrative costs, passing savings to clients and investing more in case preparation.

By adopting smart contracts, Agruss Law Firm has set a precedent for how personal injury settlements can be managed effectively in the digital age.

Featured image source


[ad_2]
Source link

Cisco NX-OS Zero-Day Vulnerability Let Hackers Gain Root Access

andreasc
-
0
Cisco NX-OS Zero-Day Vulnerability Let Hackers Gain Root Access
[ad_1]

Cisco has disclosed a critical vulnerability in its widely-used NX-OS network operating system that could allow attackers to execute arbitrary commands with root privileges on affected devices.

The company urges customers to upgrade to patched versions as soon as possible.

The vulnerability tracked as CVE-2024-20399 exists in the command-line interface (CLI) of NX-OS due to insufficient validation of arguments passed to specific configuration commands.

An authenticated local attacker with administrator credentials could exploit this flaw by entering crafted input as an argument.

Successful exploitation would allow the attacker to run commands on the underlying operating system as the root user, enabling full device compromise.

Cisco notes that the vulnerability is being actively exploited in the wild as of April 2024.

A wide range of Cisco data center and networking products are impacted if running vulnerable NX-OS versions, including:

  • MDS 9000 Series Multilayer Switches
  • Nexus 3000, 5500, 5600, 6000, 7000, and 9000 Series Switches

However, with some exceptions, Nexus 9000 Series switches are unaffected on releases 9.3 and later.

Devices with the bash-shell feature available, such as Nexus 3000 and 9000 switches and Nexus 7000 on release 8.1+, do not grant extra privileges but still allow an admin to hide the execution of shell commands.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Attacks & Mitigation

In April 2024, the Cisco Product Security Incident Response Team (PSIRT) identified active exploitation of this vulnerability.

Cybersecurity firm Sygnia attributed these attacks to Velvet Ant, a Chinese state-sponsored threat actor, which used the flaw to deploy custom malware on compromised devices.

The malware enables remote connection, file upload, and malicious code execution without triggering system syslog messages, effectively concealing the attack.

Cisco offers the Cisco Software Checker tool to determine exposure and find the appropriate software updates.

This tool identifies impacted software releases and the earliest fixed versions, accessible on the Cisco Software Checker page.

Organizations using affected Cisco products should prioritize applying the necessary patches and continuously monitor their network for any signs of compromise.

Cisco has released patched NX-OS versions addressing the vulnerability and advises customers to upgrade as soon as possible.

No workarounds are available—the company credits cybersecurity firm Sygnia for reporting the flaw.

Network administrators should review the detailed advisory, determine their exposure via the Cisco Software Checker tool, and plan their upgrades as there is no workaround for this vulnerability.

Regularly changing admin credentials is also recommended as a best practice. Cisco TAC and support partners are available to assist customers as needed.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files


[ad_2]
Source link

Here’s Google’s true vision of AI-powered mobile software

andreasc
-
0
Here’s Google’s true vision of AI-powered mobile software
[ad_1]

If you think Google’s AI implementation in Android was cool, well the company has yet to take off its weighted training clothes. The company has a lot to fear with Apple Intelligence looming over the horizon. Thanks to an exclusive report from Android Authority, we have information on what the company calls Google AI, and it’s coming to the Pixel 9.

This is Google AI, and it’s going to make the Pixel 9 awesome!

While this news came from a reputable source, you’ll still want to take it with a grain of salt. We’re still dealing with early information. So there’s the chance that some of the potential features could be taken away.

Google AI (1)
From Android Authority

Add Me

First on the list, there’s a feature called Add Me. Right now, we don’t really know what the feature will do. However, the description reads “Make sure everyone’s included in a group photo”. That’s pretty vague. There’s a chance that it’s a tool to warn you if someone in a group photo could be cut off before taking a picture.

As for what it could do to a picture after the fact, we have no idea. Maybe the company will use Generative AI to reconstruct a person who was cut off in a picture. Say, if you take a picture, and your friend’s head is cut off. Well, Google could use Generative AI to zoom out of the image and reconstruct the rest of your friend. That’s only speculation.

Studio

Next up, there’s a feature called Studio. Again, information about this feature is still pretty scarce. The description reads “You imagine it. Pixel creates it.” This is also vague, but there’s information we can glean from it. It seems like a one-stop shop for you to generate content right on your phone.

We’re sure that you’ll be able to generate images and edit them all in one place. You might be able to catalog your generations and share them. Android Authority also mentioned that you might be able to generate stickers. That all remains to be seen.

Screenshots

This next feature will let Gemini glean information from an unexpected source, your screenshots. When you take a screenshot, the system will automatically apply metadata tags to it. This will have information like the links, app names, etc. Then, the information will be stored and processed locally. So, if you need to recall information about what you screenshotted, ask questions about them, or recall specific screenshots, you’ll be able to.

This calls to mind Microsoft’s Windows Recall feature. It also let you recall information from screenshots taken on your device. However, Google AI’s take won’t automatically take screenshots on your phone. Rather, it will only use screenshots that you willingly take. That’s good because Google doesn’t need any more controversy surrounding its AI.

Still outmatched

Guys, let’s be realistic, Apple blew away the tech community with Apple Intelligence. The features that the company announced will make using future iPhones much better. The AI in these phones will be super integrated with the software.

Hearing the news about Google AI, we all thought that we were going to see some comparable and powerful AI chops from Google. Queue the articles with thumbnails depicting an iPhone 16 Pro and Pixel 9 on a boxing ring background and PNG images of boxing gloves pasted over them. We were hoping to see a smackdown.

However, it seems that Google AI won’t be the competitor that Apple Intelligence needs and deserves. Google AI just looks like a couple of features tossed on top of Android rather than a marriage of software and AI. Let’s hope that Google will bring more features and integration in the near future.


[ad_2]
Source link

Grasshopper Hackers Mimic as Penetration Testing Service to Deploy Malware

andreasc
-
0
Grasshopper Hackers Mimic as Penetration Testing Service to Deploy Malware
[ad_1]

Hackers often mimic penetration testing services to disguise their malicious activities as legitimate security assessments. 

By imitating authorized security testing, attackers can exploit the trust and access typically granted to legitimate penetration testers, allowing them to move more freely within networks and systems while avoiding immediate suspicion.

While the Israeli government investigated possible threats, it discovered an infection chain using a suspicious domain as a command and control server. 

Public malware and custom components are mixed in this attack. 

Grasshopper as Pen Test Services

Late 2023 saw targeted attacks launched against private companies that used common techniques, target-specific infrastructure, and custom WordPress sites for payload delivery.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo 

These campaigns affect diverse entities across unrelated sectors. 

However, since it may not be a genuine security firm, this information should have been shared with the cybersecurity community without linking to recognized security firms or legitimate penetration testing operations.

The infection chain, probably targeting an Israeli government entity, begins with a VHD file, a pretty custom WordPress website.

Specifically crafted delivery WordPress website (Source – Harfanglab)

It’s a VHD that comes with all the hidden files, like the HTA file, which has an image as the decoy and transfers malware components to the %TEMP% folder, followed by launching a first-stage Nim downloader.

Decoy image displayed when the HTA is executed (Source – Harfanglab)

This downloader retrieves a second-stage payload from a controlled server. The final payload combines Donut, a shellcode generation framework, with Sliver, an open-source Golang trojan.

Donut disables security measures such as AMSI and WLDP before running Sliver, which gives the attacker full control of the victim’s machine through a specified command and control server.

More investigations revealed another infrastructure the operators probably used for such attack campaigns.

Infection chain (Source – Harfanglab)

These domains are fakes corresponding to popular brands such as Carlsberg and SintecMedia, although some may not have been related to intelligence gathering in general.

One of these campaigns posed as the Israeli government intending to aim at individuals or local businesses.

A famous WordPress site connected a VHD file and URL that was once redirected to a “rickroll” video, perhaps part of geofencing techniques.

The targets do not seem to have any common pattern, as the fake brand identities could mean different things.

⁤This campaign’s intriguing aspects include its narrow scope, targeted approach, and use of mostly open-source tools. ⁤

⁤However, the commonly available tools could be employed for conducting sophisticated operations, making it difficult for threat researchers to analyze these attacks.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files


[ad_2]
Source link

Meta changes its AI label after complaints

andreasc
-
0
Meta changes its AI label after complaints
[ad_1]

The next big step for AI companies is a proper labeling system to let people know when content has been artificially generated. Companies like Meta have been ahead of the game in that regard, but it still has a few bugs to work out. According to a new report, Meta had to change its AI label to “AI Info” after complaints from photographers.

The company has had a system in place that flags content it feels could have been generated with AI. Most of the AI-generated images on the platform are obvious, but the technology has progressed to the point where some media can fool the eye. This is why a proper labeling system is important.

We’re currently in an election year, and, let’s be honest, Facebook isn’t exactly known for being a platform full of accurate information. So, there’s always the threat of misinformation through AI-generated images.

Meta had to change its AI label after complaints from photographers

One issue we have to deal with, aside from no AI labels, is companies falsely labeling content as AI-generated. This is something that photographers have dealt with for some time, as Meta seems to be labeling real-life images as AI-generated. One example was from a 40-year-old photo of a baseball game. As you could guess, AI image generation wasn’t all that great back in 1984.

So, as a result, Meta has changed its “Made with AI” label to “AI Info”. This seems like a small change, but it’s something that the company hopes will keep it out of hot water. Rather than saying that the image was constructed with AI technology, it will basically say that there could have been some AI manipulation involved.

Many images posted nowadays were edited with some sort of AI tool like Photoshop’s Generative Fill tool. The thing is that, when certain tools like them are used, Photoshop adds metadata to the image letting the platform know that AI was used. Platforms like Facebook, Instagram, and Threads use this data to tell whether there was some AI manipulation.

Right now, we’re still waiting for a proper labeling system, but we’re not sure that it’s ever going to come. The companies working on the labeling systems are also pouring billions of dollars into making AI images look more realistic.


[ad_2]
Source link

Hackers Using Polyglot Files In Wild, Here Comes PolyConv For Detection

andreasc
-
0
Hackers Using Polyglot Files In Wild, Here Comes PolyConv For Detection
[ad_1]

Polyglot files have to fit in several file format specifications and respond differently depending on the calling program.

This poses a significant risk to endpoint detection and response (EDR) systems and file uploaders, which mainly rely on format identification for analysis.

By evading correct classification, polyglots can leap over feature extraction routines or signature comparisons found in malware detection systems.

Research by the following researchers from Oak Ridge National Laboratory and Assured Information Security indicates that polyglots are threats to commercial EDR tools, with 0% detection of malicious polyglots recorded during tests by some vendors:-

  • Luke Koch
  • Sean Oesch
  • Amul Chaulagain
  • Jared Dixon
  • Matthew Dixon
  • Mike Huettal
  • Amir Sadovnik
  • Cory Watson
  • Brian Weber
  • Jacob Hartman
  • Richard Patulski

The dependence on standard formats for efficient malware detection makes it vulnerable to this kind of attack whereby files can be created that are valid in multiple formats.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Polyglot Files Used In Wild

There is a critical gap in computer security research because no one has done an extensive study on how threat actors use these artifacts and how they are detected.

Polyglot files in malware campaigns were found to play a significant role in the tactics of APT groups.

To carry out an analysis, they developed Fazah, a tool imitating real-life polyglot creation methods.

Researchers trained PolyConv, a deep learning model that attained over 99% F1 score for both binary and multi-label classifications of polyglots.

These were not very effective compared to already existing tools used to identify files.

Functionality of a polyglot (Source – Arxiv)

For image-based polyglots, the most popular means was via custom CDR tool (ImSan) which is more efficient than YARA rules in sanitizing it with 100% efficacy.

This research fills essential gaps within cybersecurity defenses against this advanced threat by providing useful information on techniques of detecting and mitigating them as well as awareness of polyglot format detection strategies.

Malware detector (Source – Arxiv)

Threat actors often use polyglots to avoid detection and bypass commercial security tools.

Out of the 30 different polyglot samples found in these cyber-attack chains 15 instances were detected.

Common combinations are JAR+JPG and HTA+CHM, which are used by groups such as Lazarus and IcedID.

MalConv Architecture (Source – Arxiv)

PolyConv based on MalConv and PolyCat using CatBoost machine learning models demonstrate encouraging results in the detection of polyglots through byte-level features and format-agnostic approaches.

PolyConv Architecture (Source – Arxiv)

With mime-type and n-gram features added, the performance of PolyCat improved.

For this reason, detecting polyglots becomes an important way of increasing our cybersecurity defenses against advancing dangers.

Recommendations

Here below we have mentioned all the recommendations:-

  • Polyglot Detection
  • Existing Signature-based Tools
  • File-format Specifications

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files


[ad_2]
Source link

Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought

andreasc
-
0
Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought
[ad_1]

In February 2024, Prudential Financial reported it had fallen victim to a ransomware attack. The attack was discovered one day after it started, but not before some 2.5 million people had been impacted by the resulting data breach.

As one of the largest insurance companies in the US, Prudential employs 40,000 people worldwide and reported revenues of over $50 billion in 2023.

At first, Prudential said it believed only 36,000 people had had their data stolen, but that number has now been revised to 2.5 million in a new breach notification. The company has also adjusted what information has stolen. In the original notification the company stated:

“On the basis of the investigation to date, we do not have any evidence that the threat actor has taken customer or client data.”

However, Prudential is now saying the stolen data also impacted many customers and included:

  • Full names
  • Driving license numbers
  • Non-driving license identification cards

The data breach notification states that the company will be giving affected customers 24 months of identity theft and credit monitoring services through Kroll.

Below are some general tips on what to do after you’ve fallen victim to a data breach.

Protecting yourself after a data breach

There are some actions you can take if you are, or suspect you may have been, the victim of a data breach.

  • Check the vendor’s advice. Every breach is different, so check with the vendor to find out what’s happened, and follow any specific advice they offer.
  • Change your password. You can make a stolen password useless to thieves by changing it. Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you.
  • Enable two-factor authentication (2FA). If you can, use a FIDO2-compliant hardware key, laptop or phone as your second factor. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished.
  • Watch out for fake vendors. The thieves may contact you posing as the vendor. Check the vendor website to see if they are contacting victims, and verify the identity of anyone who contacts you using a different communication channel.
  • Take your time. Phishing attacks often impersonate people or brands you know, and use themes that require urgent attention, such as missed deliveries, account suspensions, and security alerts.
  • Consider not storing your card details. It’s definitely more convenient to get sites to remember your card details for you, but we highly recommend not storing that information on websites.
  • Set up identity monitoring. Identity monitoring alerts you if your personal information is found being traded illegally online, and helps you recover after.

Malwarebytes has a free tool for you to check how much of your personal data has been exposed online. Submit your email address (it’s best to give the one you most frequently use) to our free Digital Footprint scan and we’ll give you a report and recommendations.

We don’t just report on threats – we help safeguard your entire digital identity

Cybersecurity risks should never spread beyond a headline. Protect your—and your family’s—personal information by using identity protection.


[ad_2]
Source link

Next Google Pixel foldable to offer improved multitasking

andreasc
-
0
Next Google Pixel foldable to offer improved multitasking
[ad_1]

The next Google Pixel foldable smartphone is coming this year, and it’s expected to offer improved multitasking and more. This information comes from Mishaal Rahman who shared it via Android Authority.

The next Pixel foldable phone will offer improved multitasking & new display aspect ratio

Mishaal spotted some changes in the Android 14 QPR2 code, which suggests we’re in for a treat. Users will seemingly be able to put apps side-by-side even when the device is in portrait mode.

Next Google Pixel Fold device to offer improved multitasking

Many Pixel Fold users were missing this feature, us included. It’s nice to see that Google is planning to finally put it on the table. That foldable is also coming with a new display resolution, at least for its main screen.

The device, which is rumored to be called the Pixel 9 Pro Fold for whatever reason, is expected to offer a 2076 x 2152 resolution. As a reminder, the Pixel Fold has a 2208 x 1840 resolution on the main screen. Google is definitely looking to change the aspect ratio.

The upcoming foldable from the company will have a more squarish main display than the first-gen model. Well, at least based on this information. Now, in regards to the name.

This foldable phone could be called the Pixel 9 Pro Fold, for better or worse

This information surfaced back in April. Google is allegedly planning to name the device the Pixel 9 Pro Fold, to keep things uniform. The Pixel 9, Pixel 9 Pro, and Pixel 9 Pro XL are coming. So, the Pixel 9 Pro Fold name kind of falls in line here.

It is a mouthful, and quite frankly it’s not our favorite, but it does fit here. The Pixel Fold 2 would still make a lot more sense, but we can see why Google could make this change.

Now, the Pixel 9 series is coming on August 13. Google decided to host that event two months early this time around, for whatever reason. The event was expected to take place in early October, as per usual.

Google already confirmed that Pixel phones are coming. We’re sure that the Pixel 9, Pixel 9 Pro, and Pixel 9 Pro XL are coming… but we’re still not sure about the foldable device. It probably is, but it remains to be seen.


[ad_2]
Source link
1...676869...1,456Page 68 of 1,456