Sunday, October 30, 2022

Formula 1 Mexican Grand Prix Livestream: How to Watch the Race Live - CNET

Max Verstappen has won the 2022 F1 Drivers' Championship, but there's still plenty to race for as F1 heads to Mexico.

from CNET https://ift.tt/mr6cJCt

Saturday, October 29, 2022

Jake Paul vs. Anderson Silva: Main Event Start Time, How to Watch - CNET

Jake Paul vs. Anderson Silva is almost here!

from CNET https://ift.tt/u5JQljN

More People Should Watch This South Korean Time Travel Horror on Netflix - CNET

The Call is an impeccable cat-and-mouse time travel thriller with the same editor as Parasite.

from CNET https://ift.tt/SdqXjH9

Tree Rings Unlock Evidence of Mysterious Cosmic Radiation 'Storms' - CNET

Astronomical data hidden in cedars and pines reflects a handful of potentially devastating events, and suggests we may be overdue for the next one.

from CNET https://ift.tt/skJzZum

Netflix: The 45 Absolute Best Movies to Watch - CNET

This weekend, catch The Good Nurse, starring Eddie Redmayne, or family comedy Wendell & Wild.

from CNET https://ift.tt/HcweuZP

2023 Kia Sorento Debuts With More Standard Features, Small Price Hike - CNET

Everything is more expensive these days, even the 2023 Kia Sorento. Thankfully, this small SUV now comes with more for the money.

from CNET https://ift.tt/05I4K8C

Friday, October 28, 2022

Apple Warns It Could Be Hard to Buy an iPhone 14 Pro This Holiday - CNET

The tech giant says it hasn't met demand for the more expensive version of its latest iPhones.

from CNET https://ift.tt/FHRA3ow

Latest Tech News

Google is rolling out Version 107 of its Chrome browser which adds a variety of under-the-hood additions and makes some important tweaks to better protect you on the internet.

Because of the 14 individual security fixes included in Chrome 107, we strongly recommend that you download the update as soon as it’s available to you. The most important one revolves around a zero-day vulnerability called CVE-2022-3723. It's  a Type Confusion flaw affecting Chrome’s V8 JavaScript engine. As it’s described by cybersecurity company Avertium, the flaw allows bad actors to “trick” the browser into running malware and making users think it’s legitimate data. 

Avertium states that while Chrome V8 engine attacks are uncommon, they are among the most dangerous. And it appears this is the third time Google has patched a Type Confusion bug this year. One occurred back in March and the other in April

As for the rest of the security patch, things aren’t as severe. You see fixes for data validation and for browser extensions. But considering there are billions of Chrome users, there are a lot of avenues for bad actors to use. We repeat: update the browser.

New tools

The rest of the update is more focused on future-proofing Chrome. HEVC (High Efficient Video Coding) is now partially supported on the browser. Also known as H.265, HEVC is a codec that more efficiently compresses files to speed up download times. It's more commonly seen on electronic devices. With this update, Chrome joins Safari and Microsoft Edge as the only major web browsers with HEVC support.

Video conferencing tools are also seeing a few changes to make them more user-friendly. Developers of these tools can now include a button allowing people to switch between tabs whenever they’re screen sharing. It’s essentially a type of hotkey to save you from having to dig through a mass of tabs. Chrome 107 will also alert you if you share the same tab that you’re video conferencing from. Doing so causes a “hall of mirrors” effect, according to the patch notes.

Other reports claim additional features are present in the update, but we couldn’t find them. Android Police states Chrome now has the ability to import passwords from an external password manager or other browsers. And apparently, the media picker for Chrome 107 on Android has been updated. We reached out to Google to see if this is true, as well as if there are other hidden features. This story will be updated if we hear back.

Availability

You can download the update by going to "About Google Chrome" in the browser menu to automatically install it. Despite the slew of security fixes in the update, Google still has its work cut out. Recent reports claim that 300 new security vulnerabilities were discovered in Chrome this year alone. It’s possible there could be another high-severity Type Confusion bug in there waiting to be discovered. 

We recommend being proactive in this case. To better protect yourself, check out TechRadar’s best internet security suites for 2022.



from TechRadar - All the latest technology news https://ift.tt/SgOxRDW

Here's How Much Bigger Your Social Security Check Will Be in 2023 - CNET

The cost-of-living increase to Social Security benefits is the largest in more than four decades.

from CNET https://ift.tt/hZvorBe

Latest Gadgets News

Binance, the world's largest crypto exchange that has invested $500 million into Elon Musk's buyout of Twitter, is creating a team to work on how blockchain and crypto could be helpful to Twitter, the company's spokesperson said on Friday. As one of Elon Musk's equity co-investors to fund his $44 billion (nearly Rs. 3,62,300 crore) deal, Binance said it will brainstor...

from Gadgets 360 https://ift.tt/Y6wTKvH

NASA Picks Perfect Spot for Historic Mars Rock Sample Drop - CNET

The Perseverance rover will unload some of its rock-filled tubes at "the first sample depot on Mars."

from CNET https://ift.tt/sJ3pQOY

Latest Tech News

The metaverse could be used not just to facilitate crime in the physical realm, but could also be used for various other dangerous forms of cybercrime, as well, a new  warning from Interpol has warned.

Interpol’s executive director for technology and innovation, Madan Oberoi, explained that member countries are growing increasingly concerned about possible metaverse crime and are already coming up with possible remedies.

There are multiple ways the metaverse could be abused for crime, he said: "Some of the crimes may be new to this medium, some of the existing crimes will be enabled by the medium and taken to a new level." 

Phishing evolved

One of the most popular fraud methods - phishing - could take on a whole new meaning when virtual reality and augmented reality are thrown into the mix, Oberoi stated. What’s more, the question of child safety cannot be understated. 

There are also ways for threat actors to use virtual realities to plan and practice future physical attacks: "If terror group wants to attack a physical space they may use this space to plan and simulate and launch their exercises before attacking."

Many games come with map-making ability, and with virtual reality, criminals could be able to explore specific locations with frightening detail. 

Europe’s Interpol counterpart - Europol - says it is also on track to tackle future crime, and recently warned that if the metaverse uses blockchain technology to record user interaction, it might be possible to “follow everything someone does based on one interaction with them - providing valuable information for stalkers or extortionists." 

Blockchain, the technology that underlines bitcoin and other cryptocurrencies, stores data in a decentralized ledger which makes it immutable and incorruptable.

Via: Reuters



from TechRadar - All the latest technology news https://ift.tt/VgqNjAC

Thursday, October 27, 2022

Best Headphone Deals: Save on Sony, Bose, AirPods and More - CNET

Looking for the best headphones and earbuds deals you can get right now? These our top picks for the best offers available.

from CNET https://ift.tt/Smgpdcx

Credit Card Churning Explained - CNET

Should you avoid this risky strategy?

from CNET https://ift.tt/A36qHKf

Latest Tech News

Microsoft keeps a list of old and vulnerable drivers, which threat actors can use to sneak viruses, ransomware, and other malware into endpoints of their choosing. 

However, the last update was in 2019 - until now. After two years of sitting idly, the list has finally been updated - but not for all Windows users at once, though.

In an announcement published on the company blog, Microsoft said that the blocklist used by the hypervisor-protected code integrity (HVCI) tool will, from now on, be updated once or twice a year. 

More ways to update

“The blocklist is updated with each new major release of Windows, typically 1-2 times per year, including most recently with the Windows 11 2022 update released in September 2022,” Microsoft said. “The most current blocklist is now also available for Windows 10 20H2 and Windows 11 21H2 users as an optional update from Windows Update. Microsoft will occasionally publish future updates through regular Windows servicing.”

Users who always want the latest update to the driver blocklist can use Windows Defender Application Control (WDAC) to apply the latest blocklist, the company further stated. For the sake of convenience, the company provided a download of the most up-to-date vulnerable driver blocklist, as well as instructions on how to apply it, found here.

Microsoft has been getting a lot of criticism lately for the lack of updates to the vulnerable driver blocklist - mainly because the number of attacks using this method skyrocketed. 

The method is called Bring Your Own Vulnerable Driver (BYOVD), and it’s quite a simple thing: a threat actor would trick a victim, usually through social engineering or phishing, into downloading a Windows driver that’s known for being faulty. 

Being a signed driver, it doesn’t trigger any antivirus or endpoint protection services alarms. It just installs like any other non-malicious thing. The driver, being flawed, gives the hackers access to the device, which they can later use for any other attack they see fit - ransomware, botnets, data exfiltration, etc. 

Via: The Register



from TechRadar - All the latest technology news https://ift.tt/1pS3NPl

Latest Tech News

They say fortune favors the bold, so why not rebel from cookie-cutter colorways and mix things up with some eye-catching tech instead? As a...