Trump’s Georgia trial will be livestreamed on YouTube

0
[ad_1]

On Thursday, regarding Trump’s Georgia Election Interference. Judge Scott McAfee, a Fulton County judge, made an announcement. He declared that, during the trial of former President Donald Trump for election interference, he would allow press coverage, cameras, and laptops in the courtroom. The court will also livestream the entire trial on YouTube.

Donald Trump and 18 co-defendants will face trial on October 23rd. They face multiple racketeering charges related to their actions in Georgia to undermine and overturn the 2020 presidential election results. Fulton County District Attorney Fani Willis labeled these efforts a “criminal enterprise” aimed at unlawfully keeping Trump in power. Trump has pleaded not guilty to all charges.

While some places rarely record court proceedings, Georgia maintains a more open approach.

During an interview with Atlanta First News, Atlanta-based attorney Josh Schiffer explained, “Georgia courts always welcome the media and the public to observe our legal processes.” He emphasized that, unlike many states with strict rules, Georgia courts generally allow judges to decide whether to grant such access.

For context, when Trump faced arraignment in New York for alleged financial crimes, the court allowed only still photography. In a Miami case, the court entirely prohibited photography. As a result, the public had limited access to the in-court proceedings of Trump’s federal election interference case, with only the Georgia state prosecution providing extensive live streaming coverage.

Judge McAfee’s decision symbolizes a commitment to transparency and openness within the judicial process. It grants both the American public and global audiences the opportunity to closely follow and scrutinize the proceedings in this high-profile case. This represents a significant departure from typical courtroom practices, offering insight into how the legal system handles a case that has captured the nation’s attention.

Point of live streaming Trump’s Georgia election trial

By live streaming the trial on YouTube, Judge McAfee ensures that people from all backgrounds can witness the trial in real-time. This aligns with Georgia’s historical approach to courtroom transparency and underscores the evolving role of technology in engaging the public with the justice system.

In an era where access to information and transparency in government processes are crucial, Judge McAfee’s decision sets a remarkable precedent for conducting and sharing high-stakes legal proceedings with the public. It reaffirms the principle that justice should not only be carried out but also witnessed, empowering the public to form their own judgments based on firsthand observations of the trial.

While debates may arise about the potential impact of live streaming on the trial’s conduct or the privacy of the individuals involved, Judge McAfee’s decision ultimately underscores the importance of open and transparent legal proceedings in a democratic society. It allows the public to hold their leaders accountable and actively participate in the democratic process by closely observing and evaluating legal proceedings that have far-reaching implications for the nation.


[ad_2]
Source link

Meta considering paid versions of Instagram and Facebook for users in the EU

0
[ad_1]

Meta is having a hard time in the EU where regulators are scrutinizing the company’s practices when it comes to privacy and advertisement on its social apps. In response to regulatory scrutiny, Meta is considering paid versions of Instagram and Facebook for users in the European Union.

According to people with knowledge of the company’s plans cited by The New York Times, Meta might make it possible for Facebook and Instagram users in the EU to pay subscriptions that will offer them an ad-free experience either (or both) of the social apps.

The subscriptions will not be forced onto users, but this feels like a smart way to comply with EU’s requests and make some money at the same time too. Putting ads on everyone’s feeds would’ve probably make Meta more money, but paid versions of Facebook and Instagram are likely to mitigate some of the losses.

The free version of Facebook and Instagram will continue to exist in the EU alongside the paid versions. There’s no telling how much the ad-free versions of Facebook and Instagram will cost, nor when/if Meta will make them available.


[ad_2]
Source link

IBM Sterling Proxy vulnerabilities allow remote code execution

0
[ad_1]

Multiple vulnerabilities have been found in IBM Sterling Secure Proxy, mostly related to Denial of Service and Information Disclosure.

It also consisted of a code execution vulnerability and an unidentified vulnerability. The severities of these vulnerabilities vary from 4.5 (Medium) to 9.8 (Critical).

IBM Sterling Secure Proxy is a DMZ-based software proxy application that provides secure high-speed data transfer, perimeter security, and protection against unauthorized access to critical business-internal systems. 

IBM has taken necessary measures to address the vulnerabilities by releasing patches that effectively resolve the issues at hand.

Code Execution & Unidentified Vulnerability

CVE-2022-40609 was one of the vulnerabilities that IBM patched in the security patch related to arbitrary code execution. A remote attacker can exploit this vulnerability by sending crafted data. It exists due to an unsafe deserialization flaw and has a severity of 9.8 (Critical).

Apart from the information disclosure, Denial of service, and the remote code execution vulnerability, there was another vulnerability that was patched but IBM did not provide any additional information about this vulnerability. This flaw affected Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE.

“An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component could allow an unauthenticated attacker to cause high confidentiality impact and high integrity impact.” reads the post by IBM.

DoS and Information Disclosure

In addition to this, there were 8 DoS (Denial of Service) and 2 information disclosure vulnerabilities. As mentioned by IBM, the vulnerabilities with the highest severity among the DoS vulnerabilities were CVE-2023-24998 and CVE-2022-45685.

CVE-2023-24998 affected Apache Commons FileUpload and Tomcat, which exists due to no rate limiting on the number of requested parts that affects the file upload function. An attacker can send a specially crafted request to this function, which could result in a Denial of Service condition.

CVE-2022-45685 is a stack-based buffer overflow vulnerability that can be exploited by sending an overly long string on the JSON data that could result in a denial of service condition. This vulnerability affects Jettison.

Products affected by these vulnerabilities include IBM Sterling Secure Proxy 6.0.3 and 6.1.0. To fix these vulnerabilities, users of these products are recommended to follow the below table.

ProductVersioniFixRemediation
IBM Sterling Secure Proxy6.1.0GAFix Central
IBM Sterling Secure Proxy6.0.3iFix 08Fix Central

Keep informed about the latest Cyber Security News by following us on Google News, Linkedin, Twitter, and Facebook.


[ad_2]
Source link

The impact of 6G on smartphone technology

0
[ad_1]

In the ever-evolving landscape of mobile technology, one innovation has been making waves like no other: 6G. The fifth generation of wireless technology is not merely an incremental upgrade; it’s a game-changer that promises to reshape the way we interact with our smartphones and the digital world around us.

Welcome to the world of 6G, where connectivity is faster, smarter, and more transformative than ever before.

In this blog post, we embark on a journey to explore the profound impact of 6G on smartphone technology. From the lightning-fast speeds that redefine how we use our devices to the convergence of the Internet of Things (IoT) and smart homes, 6G is changing the game in ways we could only dream of a few years ago.

Understanding 6G Technology

6G stands for the fifth generation of wireless technology, and it represents a significant leap forward in terms of speed, capacity, and connectivity. While it builds upon the foundation of its predecessors, 3G and 4G/LTE, 6G introduces several key characteristics that set it apart:

– Speed: One of the most noticeable features of 6G is its incredible speed. It promises to deliver data rates of up to 10 Gbps (gigabits per second). This means that downloading large files, streaming high-definition videos, and using data-intensive applications will become nearly instantaneous.

– Low Latency: Latency refers to the time it takes for data to travel from a device to its destination and back. 6G reduces latency to a mere 1 millisecond or less. This ultra-low latency is crucial for applications that demand real-time responses, such as online gaming, augmented reality, and autonomous vehicles.

– Increased Capacity: 6G networks are designed to support a vastly increased number of devices simultaneously. This is vital for the expanding Internet of Things (IoT), where everything from smart thermostats to connected cars relies on a robust and scalable network.

– Network Slicing: 6G introduces the concept of network slicing, allowing network operators to allocate specific portions of their network for particular use cases. For example, a slice can be dedicated to supporting autonomous vehicles, ensuring they have the required bandwidth and low latency for safe navigation.

– Millimeter Waves: 6G utilizes higher-frequency radio waves, including millimeter waves (mmWave). These higher frequencies enable faster data transmission but require the deployment of more small cells and antennas due to shorter propagation distances.

Differences Between 6G and Its Predecessors (3G and 4G/LTE)

To appreciate the significance of 6G, it’s essential to understand how it differs from the previous generations of wireless technology:

– Speed: While 3G offered data speeds of up to 2 Mbps (megabits per second) and 4G/LTE improved this to around 100 Mbps, 6G takes it to a whole new level, achieving speeds of up to 10 Gbps. This dramatic increase in speed allows for instant downloads and smoother streaming.

– Latency: 3G and 4G/LTE typically had latency in the range of 30 to 50 milliseconds. 6G’s ultra-low latency of 1 millisecond or less is a significant improvement, making real-time applications like video conferencing and online gaming much more responsive.

– Capacity: 6G networks can support far more devices per square kilometer than 4G/LTE. This means that in densely populated areas or at large events, your smartphone should maintain fast and reliable connectivity.

– Frequency Bands: 6G uses a broader spectrum of frequency bands, including the aforementioned millimeter waves. While 3G and 4G primarily operate in lower-frequency bands, 6G takes advantage of higher frequencies to deliver faster speeds and lower latency.

– Use Cases: The capabilities of 6G open up new possibilities for applications like augmented reality, virtual reality, remote surgery, and the widespread adoption of IoT devices, which were challenging to support efficiently with 4G.

Faster Download and Upload Speeds

One of the most compelling features of 6G technology is its ability to deliver blistering download and upload speeds that were previously unimaginable with earlier generations of wireless technology like 3G and 4G/LTE.

– Download Speeds: 6G is designed to provide download speeds of up to 10 gigabits per second (Gbps). To put this into perspective, that’s more than 100 times faster than what you might typically experience with 4G/LTE. With 6G, you can download an entire HD movie in seconds, stream 4K videos without buffering, and download large files in the blink of an eye.

– Upload Speeds: While upload speeds on 4G networks typically range from 5 to 50 megabits per second (Mbps), 6G offers upload speeds of up to 3 Gbps. This significant increase in upload speeds is particularly important for tasks like uploading high-definition videos to social media, sharing large files in the cloud, or engaging in high-quality video conferencing.

Benefits of Low Latency in Real-Time Applications

Low latency is another critical aspect of 6G that has a profound impact on the way we use our smartphones and other connected devices. Latency refers to the delay between sending a request and receiving a response. In the context of mobile technology, low latency means reduced delays in data transmission, leading to nearly instantaneous responses.

Here are some key benefits of low latency in real-time applications:

– Gaming: Gamers can rejoice as 6G’s low latency allows for near-instantaneous response times. This is particularly vital in competitive online gaming, where split-second decisions can make the difference between victory and defeat. With 6G, online gaming experiences are smoother, more responsive, and more immersive than ever before.

– Augmented Reality (AR) and Virtual Reality (VR): AR and VR applications rely on real-time interaction with the environment. 6G’s low latency ensures that AR and VR experiences are highly responsive, making them more comfortable and engaging. From interactive educational tools to virtual tours and immersive gaming, 6G unlocks the full potential of AR and VR.

– Telemedicine: In telemedicine, low latency is critical for real-time communication between doctors and patients. With 6G, remote medical consultations become more seamless and effective. Surgeons can even perform remote surgery with the precision and real-time feedback necessary for success.

– Autonomous Vehicles: Self-driving cars depend on instantaneous data communication to make split-second decisions. 6G’s low latency is essential for ensuring the safety and reliability of autonomous vehicles, as it enables rapid communication between vehicles and their surroundings, such as traffic signals and other vehicles.

– IoT and Smart Homes: In smart homes, low latency enhances the responsiveness of connected devices. For example, when you command your smart lighting system to turn on, it responds instantly, creating a smoother and more user-friendly experience.

6G’s ability to deliver faster download and upload speeds, combined with its low latency, unlocks a world of possibilities for real-time applications and services. From immersive gaming to transformative medical advancements and the seamless operation of smart devices, 6G is reshaping the way we connect and interact with the digital world.

Improving App Performance and Streaming Services with 6G

The advent of 6G technology is ushering in a new era of mobile app performance and content consumption, elevating our digital experiences to unprecedented levels. With faster download speeds, reduced latency, and increased network capacity, 6G is revolutionizing how we use mobile apps and consume content.

1. Enhanced App Performance:

– Swift Loading Times: Mobile apps, once plagued by sluggish loading times, now launch almost instantly. Whether it’s social media, productivity tools, or gaming apps, users can dive into their favorite apps without delay.

– Seamless Updates: App updates and downloads are no longer a time-consuming chore. With 6G, users can effortlessly download large app updates or new applications without the frustration of waiting.

– Real-time Collaboration: Professionals using collaborative apps, like video conferencing and cloud-based productivity tools, experience smoother and more productive interactions. Low latency ensures seamless video and audio communication, even for large virtual meetings.

2. Streaming Services Take Center Stage:

– High-Quality Video Streaming: 6G’s high bandwidth and low latency enable streaming services to offer ultra-high-definition (UHD) and 4K video streaming. Users can enjoy crystal-clear video content on their mobile devices without buffering interruptions.

– Live Streaming: Live streaming of events, concerts, and sports has never been as immersive and seamless as it is with 6G. Viewers can feel like they’re part of the action with minimal lag.

– Cloud Gaming: 6G opens the door to cloud gaming services like Google Stadia and NVIDIA GeForce NOW. Gamers can stream graphically demanding games directly to their smartphones, eliminating the need for high-end gaming hardware.

Examples of 6G-Enabled Experiences:

1. Augmented Reality (AR):

– AR Navigation: 6G-powered AR navigation apps can overlay directions and points of interest onto real-world gaming like non-BetStop betting sites, providing a more intuitive and immersive way to navigate cities.

– AR Shopping: Shoppers can use AR apps to try on virtual clothing or visualize how furniture would look in their homes, enhancing the online shopping experience.

2. High-Quality Video Streaming:

– 4K Video on Mobile Devices: Users can stream 4K movies and TV shows on their smartphones or tablets without sacrificing quality.

– 360-Degree Video: 6G enables the smooth playback of 360-degree videos, creating immersive experiences for virtual tours, travel, and storytelling.

3. Virtual Reality (VR):

– VR Concerts and Events: 6G-powered VR experiences transport users to live concerts and events, allowing them to feel like they’re in the front row from the comfort of their homes.

– Educational VR: Educational institutions use 6G to deliver interactive and immersive VR lessons, allowing students to explore historical sites or complex scientific concepts.

6G is not merely an upgrade to mobile networks; it’s a catalyst for innovation across the app and content landscape. Mobile apps perform faster and more efficiently while streaming services provide high-quality content with minimal lag. Furthermore, 6G enables immersive experiences like augmented reality, high-quality video streaming, and virtual reality, fundamentally changing the way we interact with and consume digital content. The possibilities are endless, and as 6G networks continue to expand, our digital experiences will only become more remarkable.

How 6G Facilitates the Growth of the Internet of Things (IoT)

The Internet of Things (IoT), a network of interconnected devices and objects that communicate and exchange data, is rapidly expanding in scope and scale. Thanks to the advent of 6G technology, this growth is not just sustained but accelerated, transforming the way we live and interact with our surroundings.

Here’s how 6G facilitates the flourishing of IoT:

– High Connectivity: 6G networks provide significantly higher bandwidth and lower latency, allowing for a massive number of devices to be connected simultaneously. This means your smart home devices, wearables, and even your vehicle can communicate seamlessly without network congestion or delays.

– Low Power Consumption: 6G is designed to be energy-efficient, making it ideal for IoT devices that need to operate for extended periods without frequent battery changes. This is crucial for sensors, cameras, and other devices that are part of smart homes and cities.

– Reliability: 6G networks offer greater reliability, reducing the chances of IoT devices losing connection or experiencing interruptions. This reliability is essential for applications like remote healthcare monitoring or autonomous vehicles.

– Massive Machine Type Communication (mMTC): 6G introduces mMTC, a feature that enables the simultaneous connection of an enormous number of devices within a small area. This paves the way for smart cities where streetlights, traffic signals, and waste management systems communicate for improved efficiency.

How Smartphones Are Becoming Central to Controlling Smart Homes

Smartphones have evolved from communication devices to central hubs for controlling and managing smart homes. Here’s how:

– Remote Control: Smartphone apps allow homeowners to remotely control lights, thermostats, security cameras, and other smart devices. Whether you’re at home or miles away, you have complete control at your fingertips.

– Voice Assistants: With the integration of voice assistants like Siri, Google Assistant, and Amazon Alexa into smartphones, users can issue voice commands to control smart home devices effortlessly. You can ask your phone to adjust the temperature, lock the doors, or turn off the lights.

– Notifications and Alerts: Smartphones keep homeowners informed about the status of their smart devices. If a security camera detects motion, a door is left unlocked, or there’s a water leak, the smartphone sends immediate notifications.

– Integration and Automation: Smartphone apps often offer the ability to create automation routines, where smart devices work together seamlessly. For instance, you can set your thermostat to lower the temperature when your phone’s GPS detects that you’ve left the house.

– Energy Efficiency: Smart home apps on smartphones provide insights into energy consumption, helping homeowners make informed decisions about energy usage and savings.

Conclusion

In conclusion, the rise of edge computing, combined with the capabilities of 6G, is reshaping smartphones into powerful, real-time computing devices. These devices can deliver lightning-fast responses, enhance privacy, facilitate seamless integration with the Internet of Things, and operate efficiently in various scenarios. Edge computing is at the forefront of the technological revolution that’s enhancing the utility and performance of our smartphones, and it’s poised to play a pivotal role in the future of mobile technology.


[ad_2]
Source link

A week in security (August 28

0
[ad_1]

A list of topics we covered in the week of August 28 to September 3, 2023.

Last week on Malwarebytes Labs:

Stay safe!


Malwarebytes EDR and MDR remove all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW


[ad_2]
Source link

Disappointing Huawei Mate 60 Pro availability info confirmed

0
[ad_1]

We have some disappointing Huawei Mate 60 Pro availability info to share. This comes directly from Huawei, as the company shared it with Android Authority. The Huawei Mate 60 Pro will not be available outside of its homeland.

Disappointing Huawei Mate 60 Pro availability information gets officially confirmed

Those of you who have been hoping that the Huawei Mate 60 Pro will launch in more markets, such as Europe, well, you’re set to be disappointed. Huawei has no plans to expand the availability of the product, despite the fact the Huawei Mate 50 Pro launched in quite a few more markets.

You may wonder why is this the case? Well, it could be down to the SoC Huawei used. The Mate 60 Pro comes with Huawei’s very own Kirin 9000s processor, which does support 5G connectivity!

Huawei made this SoC in collaboration with SMIC. It’s not exactly as powerful as the latest offerings from Qualcomm, it does bring Kirin chips back into the spotlight, though. It’s close to the Snapdragon 888 in terms of sheer power, a 3-year-old chip.

Kirin processors used to be true powerhouses back in the day

Before the US sanctions, Kirin processors were a force to be reckoned with. Huawei was on the right path in many ways, and that included processors. That all changed once the sanctions took place.

We don’t have many details regarding the Kirin 9000s, but it allegedly can’t be touched by US sanctions, as it’s fully indigenous. If that is, in fact, the case, Huawei should be able to launch it in more markets. Still, there could be an obstacle we’re unaware of, or perhaps Huawei decided not to do it for some other reason. We can only guess.

The Huawei Mate 60 Pro does bring an interesting triple display camera hole design. A truly powerful camera setup with a 10-step variable aperture is also included. If the Mate 50 Pro and P50 Pro are any indication, this phone is a camera powerhouse.


[ad_2]
Source link

Schweitzer Labs Windows Software Flaws Allow Code Execution

0
[ad_1]

QuickSet and Grid Configurator of Schweitzer Labs were found to be vulnerable to multiple vulnerabilities that threat actors can exploit. Nearly, 9 new vulnerabilities were found which include 4 High severity and 5 Medium severity vulnerabilities. 

The High severity vulnerabilities belong to SEL-5037 GridConfigurator, and the Medium severity vulnerabilities belong to SEL-5030 acSELerator QuickSet Software.

SEL-5037 GridConfigurator is used for creating, managing, and deploying settings for SEL power system devices, and SEL-5030 acSELerator QuickSet Software is used by engineering for configuring, commissioning and managing devices for power system protection, monitoring, meter, and control.

Both GridConfigurator and QuickSet offer a wide range of functionalities, allowing a threat actor to perform a remote code execution. Additionally, either of these applications can control all the logic of Schweitzer Labs devices.

Technical Analysis

As per reports shared with Cyber Security News, the vulnerability CVE-2023-31171, which exists in the QuickSet due to improper neutralization of special elements used in SQL commands, can be exploited by a threat actor to perform remote code execution. 

This can be done using a crafted package since QuickSet can import device configuration from an external DMX file. It can also be chained with CVE-2023-31175 (Elevation of Privilege vulnerability) for achieving administrative privileges on the target workstation.

Discovered attackers can exploit vulnerabilities for performing various attack vectors like Social engineering (Phishing) emails to a victim with a DMX file and convincing them to restore it.

Once the systems are compromised, the threat actors can conduct many malicious activities, including extracting sensitive data, surveillance, lateral movements, and others.

Another severe vulnerability was CVE-2023-34392 (Missing authentication of critical function) can be exploited by a threat actor to execute a specially crafted client-side script code when the Grid Configurator is open. 

Products that are affected by this vulnerability include AcSELerator QuickSet prior to version 7.1.3.0 (included) and Schweitzer Labs Grid Configurator before version 4.5.0.20 (included). 

CVE IDCVSS ScoreDescriptionAffected Products
‍CVE-2023-311758.8Execution with Unnecessary PrivilegesGrid Configurator
CVE-2023-343928.2Missing Authentication for Critical FunctionGrid Configurator
CVE-2023-311737.7Use of Hard-coded CredentialsGrid Configurator
CVE-2023-311747.4Cross-Site Request ForgeryGrid Configurator
‍CVE-2023-311705.9Inclusion of Functionality from Untrusted Control SphereSEL-5030 acSELerator QuickSet Software
‍CVE-2023-311715.9Improper Neutralization of Special Elements used in an SQL CommandSEL-5030 acSELerator QuickSet Software
‍CVE-2023-311725.9Incomplete Filtering of Special ElementsSEL-5030 acSELerator QuickSet Software
‍CVE-2023-311685.5Inclusion of Functionality from Untrusted Control SphereSEL-5030 acSELerator QuickSet Software
‍CVE-2023-311694.8Improper Handling of Unicode EncodingSEL-5030 acSELerator QuickSet Software

Users of these products are recommended to upgrade to their latest version to fix these vulnerabilities and prevent them from getting exploited.

Keep informed about the latest Cyber Security News by following us on Google News, Linkedin, Twitter, and Facebook.


[ad_2]
Source link

Supply chain related security risks, and how to protect against them

0
[ad_1]

We take a look at the importance of supply chain cybersecurity and share some tips to enhance it.

By definition, a supply chain is the network of all the individuals, organizations, resources, activities and technology involved in the creation and sale of a product. In only a few rare cases does one organization have full control over every step in the entire process. The links in such a supply chain often work closely together, sometimes so much so that they have access to parts of each other’s systems.

Although it is important to guard every aspect of your supply chain to avoid disruptions, for the scope of this article we will focus on the cybersecurity element of it.

From a security perspective, it’s imperative to choose your partners wisely. An organization’s security posture is its readiness and ability to identify, respond to and recover from security threats and risks. If you are the one paying, you can often make demands about the security posture of the partner, but the other way around is usually much harder. 

We probably all know the compliance audits that are the result of these demands. And it makes sense we do not wish to fall victim to the mistakes made in another organization that we have no control over. It’s usually more than enough to worry about the processes we need to control inside our own organization.

Compliance with security protocols and legal regulations like FedRAMP and SOC2 (System and Organization Controls) may not just be mandatory for your own organization. More often than not it also needs to be enforced outside your organization with all the vendors in your software supply chain. In these cases, demonstrating vendor compliance will keep your internal organization from facing fines and penalties.

But it’s not just the partners that you work with to create the end product. There are also vendors that we use to get the work done, like software, infrastructure, and services. The more organizations are using a particular software package, the more appealing an attack vector that software becomes. As a few reminders, remember Log4Shell,  the MOVEit vulnerability that was exploited by ransomware operator Cl0p, or the SolarWinds attack.

Similar attacks will continue to surface time and again and if there is a lesson to be learned it’s not to rely on the security provided by the supplier, but always keep security in mind when we decide whether and how to use something provided by a third-party.

Having a complete understanding of your vendors’ security practices is an important component of cybersecurity and supply chain risk management. So, in a supply chain your security posture is definitely a selling point and can be used as such. A partner that has their security in order has every right to emphasize that.

Some tips

Regardless of the varying needs based on your organization and your place in the supply chain, here are some tips that are worth considering to avoid being the weakest link:

  1. Make an inventory of the data you need to keep safe, along with who has access to what, in order to give you a complete understanding of your needs.
  2. Then make an inventory of your software and hardware products and their weaknesses. Based on that inventory, you can decide whether to use network segmentation in order to keep the sensitive data separated from the parts that need internet access.
  3. Use the cloud carefully. Organizations of all kinds are increasingly reliant on cloud computing. This is for good reasons, but it does complicate security, given the recent malicious targeting of cloud computing environments. So, it might be a good idea to use the cloud only for variably sized elements and have the fixed parts under your own control.
  4. Connect your internal team with your organization’s third-party partners and vendors. Work together to identify major risks and potential damage to your organization, as well as plans for mitigation. Make sure there is an actionable incident response plan with a clear division of roles.
  5. Trust is good, regular checks or constant monitoring are better. Strictly limit access to those that really need it, and deploy the rules of least privilege. Monitoring will also turn out to be helpful in case of an attack to help you backtrace the origin.
  6. Secure valuable assets with advanced encryption, both in storage as well as during transfer.
  7. Consider penetration testing and/or a bug bounty program to check your security measures. A bug bounty allows organizations to continuously test the security of their systems, whereas a penetration test is an assessment of the security level of an asset at a given point in time.
  8. Look at best practices. In 2021, NIST (National Institute of Standards and Technology) shared a report on best practices that can help keep you and your business safe by using its framework for cyber supply chain risk management or C-SCRM.

Malwarebytes EDR and MDR removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW


[ad_2]
Source link

Check out official Sony Xperia 5 V promo videos

0
[ad_1]

The Sony Xperia 5 V was announced a couple of days ago, and since then, Sony released some promo videos to show off the device. Three such videos were published on YouTube, and all of them are included below.

Sony has released several promo videos for its new Xperia 5 V handset

The first video is called ‘Official Product Video – A smartphone that’s right for you​’, and it’s your standard smartphone launch video. It shows the device in use, in various living scenarios, while highlighting its design and features.

This video puts a huge focus on the phone’s cameras, but that’s not all. The phone’s speakers, battery life, raw performance power, and various other aspects are highlighted.

The second video is called ‘Product Design Video – Design in your style​’, and it’s all about the design and features. It has an entirely different style than the first video here, and it’s also considerably shorter.

The third, and last, video that Sony shared is called ‘Official Campaign Video – New phone. New me’. This one is the shortest of them all.

This is the only video that has narration throughout it, and it also focuses on the phone’s features, above anything. To be more accurate, it focuses mostly on the cameras and the sound the phone produces.

The Xperia 5 V is Sony’s high-end, and yet compact smartphone

Sony introduced the Xperia 5 V as its high-end, compact device. This phone is fueled by the Snapdragon 8 Gen 2 SoC, but it has a 6.1-inch fullHD+ 120Hz display, and the same main camera sensor as the Xperia 1 V flagship.

It includes a 5,000mAh battery, which should be plenty for that 6.1-inch display, especially considering the SoC that is in use here. The phone is equipped with stereo speakers, and ships with Android 13 out of the box. Click here if you’d like to know more about it.


[ad_2]
Source link

NCSC Warns of Specific Vulnerabilities in AI Models Like ChatGPT

0
[ad_1]

A large language model (LLM) is a deep learning AI model or system that understands, generates, and predicts text-based content, often associated with generative AI.

In the current technological landscape, we have robust and known models like:-

  • ChatGPT
  • Google Bard 
  • Meta’s LLaMA

Cybersecurity analysts at the National Cyber Security Centre (NCSC) have recently unveiled and warned of specific vulnerabilities in AI systems or models like ChatGPT or Google Bard, Meta’s LLaMA.

Vulnerabilities

While LLMs have a role, don’t forget cybersecurity basics for ML projects. Here below, we have mentioned the specific vulnerabilities in AI models about which the researchers at NCSC warned:-

  • Prompt injection attacks: A major issue with current LLMs is ‘prompt injection,’ where users manipulate inputs to make the model misbehave, risking harm or leaks. Multiple prompt injection cases exist, from playful pranks like Bing’s existential crisis to potentially harmful exploits like accessing an API key through MathGPT. The prompt injection risks have risen since the LLMs feed data to third-party apps. 
  • Data poisoning attacks: LLMs, like all ML models, rely on their training data, which often contains offensive or inaccurate content from the vast open internet. The NCSC’s security principles highlight ‘data poisoning,’ and research by Nicholas Carlini shows poisoning large models with minimal data access is possible.

Prevention mechanisms

Detecting and countering prompt injection and data poisoning is tough. System-wide security design, like layering rules over the ML model, can mitigate risks and prevent destructive failures.

Extend cybersecurity basics to address ML-specific risks, including:-

Cyber secure principles

Beyond LLMs, recent months revealed ML system vulnerabilities due to insufficient cybersecurity principles, such as:-

  • Think before you arbitrarily execute code you’ve downloaded from the internet (models)
  • Keep up to date with published vulnerabilities and upgrade software regularly.
  • Understand software package dependencies.
  • Think before you arbitrarily execute code you’ve downloaded from the internet (packages)

However, in a rapidly evolving AI landscape, maintaining strong cybersecurity practices is essentially important, regardless of ML presence.

Keep informed about the latest Cyber cybersecurity news by following us on Google News, Linkedin, Twitter, and Facebook.


[ad_2]
Source link