Friday, March 10, 2023

Latest Tech News

Acronis has been hit by a significant data breach, however the company has played down its seriousness by saying only some customer credentials were affected, and that its systems hopefully remained unaffected.

Earlier this week, a threat actor going by the name “kernelware” posted a thread on the infamous Breached Forums in which they claimed to have breached Acronis, and as proof, leaked more than 12GB of data.

The leak contains “various certificate files, various command logs, system configurations, system information logs, archives of their filesystem, python scripts for their maria.db database, backup configuration stuff, loads of screenshots of their backup operations.”

Attacking out of boredom

The threat actor said the only motive for the breach was boredom, and the fact that the firm's endpoints had “dogsh*t security”. “So i just decided to humiliate them. Simple as that,” the thread reads. While some users asked for a more detailed breakdown on how the attacked pulled it off, kernelware decided not to share any details. 

However, Acronis reached out to both the media and social media, to claim none of its products were affected. In a response to a tweet, the company said “specific credentials” used by a single customer to upload diagnostic data to an Acronis server were compromised. 

“No Acronis products have been affected. Our customer service team is currently working with this customer.”

Despite this most likely not being a breach of Acronis, the fact still remains that the client did not bother to use multi-factor authentication (MFA) to secure their account. 

MFA is widely considered as an industry standard for cybersecurity, and one of the most advised methods. With MFA, users also need to receive a one-time passcode in order to log in. That passcode can be received either via SMS, through a mobile app such as Google Authenticator, or via a hardware token. 

Last year, Passkeys have also emerged as a viable alternative to passwords. 

Via: The Register



from TechRadar - All the latest technology news https://ift.tt/Ovk4UL7

Thursday, March 9, 2023

Child Tax Credit: Which Divorced Parent Gets to Claim It? - CNET

Only one divorced parent can claim a child as a dependent. Learn the rules and how to manage the child tax credit with your ex.

from CNET https://ift.tt/TdykOBX

Latest Tech News

Google is finally trashing one of its longtime Chrome browser applications, the Chrome Cleanup Tool, alongside another feature that scans Windows PCs and laptops for security threats.

According to The Verge, the Cleanup Tool will be removed upon the release of Chrome 111. After that, users will no longer be able to scan their PC with the tool through either the Safety Check feature or the browser’s ‘Reset settings and cleanup’ option in Windows.

Though it’s a useful tool, the Cleanup Tool was never meant to be a comprehensive one. There are plenty of other tools and applications that serve its function better like Google Safe Browsing and the built-in Chrome virus protection. And, according to Google, user reports of unwanted and malicious software have declined over the years. Apparently, only 0.06% of Cleanup Tool scans in February actually yielded software concerns.

Back in 2020, Google and cybersecurity firm ESET confirmed they would continue their partnership, which included working with Chrome Cleanup Tool. The technology was specifically employed by Google to inform users of potentially harmful software attempting to access their devices, with the Cleanup Tool then being used to rid the machine at risk of said software. Now that Google is ridding its browser of the tool, it's unclear if and where the partnership with ESET will go from here.

We reached out to Google for comment concerning the full reasons why the Cleanup Tool was retired and will let you know if and when we hear back.

Why retiring Cleanup Tool is not a bad thing

Google claims that the Chrome Cleanup Tool has performed over 80 million cleanups since its release in 2015, recovering systems affected by unexpected settings changes and removing extensions violating Google’s Unwanted Software Policy.

However, one of Google’s main reasons for finally retiring the program — other than due to overlap with other applications that perform the same function — is that new phishing and malware trends continue to emerge and evolve. Malicious software, judging by the less than one percent statistic the tech giant provided, is simply not the same threat as it was before and it makes sense to focus budget and time on enhancing and maintaining security measures that focus on current trends.

Automatic Safe Browsing, anti-malware tools, and enhanced system protections, as well as Adblock and other browser extensions, are clearly more than capable of protecting your Windows machine from threats. It’s vital that security measures evolve with the times, and that we lay to rest programs that are effectively obsolete.



from TechRadar - All the latest technology news https://ift.tt/LkxdVZp

Android 14 Developer Preview 2 Available for Google Pixel Phones - CNET

As long as you have a supported Google Pixel, you can download Android 14 right now.

from CNET https://ift.tt/tUWaiXf

Latest Tech News

While classical computing has come a long way over the past century, it still has its limitations, and our requirements are fast outpacing what’s possible of classical computers.

While quantum computing, especially fault-tolerant machines, is a long way off yet, the industry is still gearing up for the revolution, and Microsoft wants to be leading the charge.

In the meantime, it is understood and recognized that quantum computing will in actual fact be a hybrid of quantum and classical computing, likely enabled at scale in the public cloud. 

Hybrid quantum computing

Microsoft Azure Quantum Program Manager Fabrice Frachon explained in a blog post how, “the key to unlocking impactful, commercial applications at scale will be deep integration between classical computing capabilities including HPC and AI with scaled quantum computing in the cloud.”

And to boost this development, Microsoft has made its new Integrated Hybrid feature in Azure Quantum available to the public. 

The company says its platform will allow developers to begin work on creating hybrid quantum applications that use a combination of classical and quantum code, and will work with machines like the Quantinuum H-Series.

Svore poses an example situation in which the hybrid environment would be beneficial to users:

“Imagine the impactful applications in the future that will enable researchers with the scale of AI to sort through massive data sets, the insights from HPC to narrow down options, and the power of quantum at scale to improve model accuracy.”

Additionally, cloud is hoped to scale quantum computing to new levels, and classical compute capabilities in the cloud will be able to help scientists solve quantum mechanical problems.

Right now, users are eligible for $500 in Azure Quantum credits to explore and experiment today, and further research may be possible by applying for $10,000 in credits. Regardless, hybrid quantum computing will remain exclusive to those willing to fork out big sums of money for a long time yet. 

Via The Register



from TechRadar - All the latest technology news https://ift.tt/5McEplf

What to Know About Long COVID - CNET

Across the world, millions are left with lingering symptoms of COVID-19 infection. Here's what researchers know about the disease, and what they don't

from CNET https://ift.tt/2h4PmxZ

Latest Tech News

Someone has been impersonating networking equipment giant TP-Link, pretending to have built a Wi-Fi router capable of mining cryptocurrencies with super high efficiency levels. 

Among those that fell for the obvious scam was news wire service providers Accesswire, who published a press release from the alleged company, announcing the product.

In the press release, published in early March this year, the company says interested parties would now be able to order its “revolutionary” Mining Router, the NX31. The device, being advertised for $1,440, comes “loaded with features and perks that make it superior to competing miners”, and is “undoubtedly the greatest of its kind and will change the mining industry.”

If these words weren’t enough of a red flag to the readers, then there’s one even better - in two parts of the press release, the company has a different name. In the first sentence, it’s called “TP-Link ASIC”, while further below, it refers to itself as just “TP-Link”. 

At the bottom of the press release is a website inviting interested parties to learn more about the product which, yet again, shows the company as “tplinkasic”.

Finally, representatives of the actual TP-Link responded to queries from Tom’s Hardware and confirmed that it’s not, in any way, affiliated with this product or has anything to do with it. The company is currently investigating the matter and looking to remove the fraudulent press release from newswire websites. 

At the same time, looking at the frauders’ websites, besides the NX31 there is another “miner” they’re selling - the D11 Doge miner (Doge is a joke cryptocurrency and a fork of Bitcoin, often being promoted by Elon Musk), which is being advertised for $570. 

The website does have a shopping cart, but at this time it’s impossible to know how many (if any) victims decided to try and purchase the devices. 

Via: Tom's Hardware



from TechRadar - All the latest technology news https://ift.tt/Az7VNvE

Wednesday, March 8, 2023

Best Deals on Robot Vacuums: Save Big on Roomba, Roborock, Eufy and More - CNET

Remove vacuuming from your to-do list permanently without paying an arm and a leg.

from CNET https://ift.tt/KZ3FprY

Latest Tech News

It seems that Spotify, the music streaming service giant, is planning on changing up its user interface in a bold and exciting new way.

Ahead of Spotify’s ‘Stream On’ event in Los Angeles (the last one in 2021), Bloomberg reported on a leak that the event would launch a brand new homepage feed redesign. “Instead of selecting from a long list of carousels featuring static cover art, the interface allows listeners to swipe vertically through content recommendations that play automatically.” This can include video content or looping GIFs.

And with the announcement finally elaborated on during the ‘Steam On’ event, we have a more complete understanding of how this change will work. According to Musically, Spotify’s mobile app will replace “its existing carousels of music, podcast, and playlist suggestions with a TikTok-style vertical feed of recommendations.” 

Below is a video clip from Stuart Dredge showcasing said new homepage feed design.

See more

But unlike TikTok, Spotify doesn’t need to use an algorithm to keep your eyes on the feed, as its ultimate goal is to get you away from the feed and listening to an artist’s song in full. So it seems that Spotify is mixing some of TikTok’s laser targeted algorithm techniques with Netflix’s usage of video clips in order to entice users to click on songs. This could be interesting to see in practice.

Spotify revealed a host of other features it would be adding to the service including an AI DJ that helps create a personalized playlist for listeners, Smart Shuffle, Marquee which is a full-screen and sponsored recommendation of a new release, the tool Discovery Mode that lets artists flag songs that are then added to the algorithm, and Showcase which will introduce an artist’s music to likely listeners.

There are also Spotify Clips and Countdown Pages that allow for artists to customize their pages with video. Finally, Spotify will also offer concerts and merchandise for the first time, creating a new way for artists (and the service) to earn revenue.

This complete overhaul of its entire feed, as well as the addition of so many new features, could be the result of lost revenue and consequential layoff. As well as a way to justify the service’s impending price hike despite said layoffs.



from TechRadar - All the latest technology news https://ift.tt/VT6nOuS

Stop Believing These 7 Home Security Myths - CNET

You can forget what you've heard, or always thought, about home security systems. Here's why.

from CNET https://ift.tt/OlFsb3m

Latest Tech News

Microsoft has made an important change to its Excel spreadsheet software which should make it more secure for users worldwide.

In the summer of 2022, Microsoft decided to finally put a stop to the abuse of macros in Office files, which were widely used to deploy malware to target endpoints, prompting Microsoft to block all macros in Office files downloaded from the internet.

Since then, hackers started experimenting with alternative methods to deliver various malware payloads, and one methodology grew popular - XLL add-ins. 

Rolling out the feature

XLL files are essentially DLLs Excel users can add to expand the program’s functionalities with things like dialog boxes, custom functions, or toolbars. As such, they presented the next best way to deploy malware, after macros. 

Now, in a new announcement, Microsoft said Excel is blocking all untrusted XLL add-ins by default in Microsoft 365 tenants worldwide.

The change was first announced in early January this year, when the company added it to the Microsoft 365 roadmap and rolled it out to Insiders for testing.

Today, two months later, it’s rolling the feature out to all other users. By late March, all desktop users in the Current, Monthly Enterprise, and Semi-Annual Enterprise channels, should get this extra layer of protection.

"We are introducing a default change for Excel Windows desktop apps that run XLL add-ins: XLL add-ins from untrusted locations will now be blocked by default," Microsoft said. "We have already completed rolling out to Insiders preview. We will begin rolling out early March and expect to complete by late March."

Once the change is complete, users will be notified when trying to run XLL-powered content coming in from an untrusted location. The notification will explain what the potential risks are, and share more information on how to make sure users stay safe.

Once the update rolls out, it’s safe to assume that delivering malware with shortcut files (.LNK) will become even more popular. 

Via: BleepingComputer



from TechRadar - All the latest technology news https://ift.tt/QqA0NxX

Ring Introduces First Battery Doorbell With Head-to-Toe View - CNET

The $180 Battery Doorbell Plus is available for preorder now.

from CNET https://ift.tt/zv63Hx5

Tuesday, March 7, 2023

Best IRA CD Rates - CNET

An IRA CD can be a safe investment choice for any retirement portfolio.

from CNET https://ift.tt/CWboUMA

Latest Tech News

YouTube is finally getting rid of a “legacy” feature that has most likely been annoying users for quite some time now.

According to the official YouTube forum post and reported on by Ars Technica, YouTube will finally be retiring the overlay ad starting on April 6, 2023. The overlay ads, or ‘legacy ad format’ as the post refers to the feature as, “will no longer appear on YouTube videos or as an available ad format when you turn on ads in YouTube Studio.”

The post details that the banner ads were only available on desktop mode and that they were “disruptive for viewers.” YouTube believes that this removal will have a limited impact on most Creators as “engagement shifts to other ad formats.” This makes sense since Creators only make money off overlay ads if the viewer clicks on them, and most likely a very small percentage actually did so.

Why this is a great thing

This is a great move from YouTube, not only because these ads are in fact disruptive since they blocked a portion of the screen but also because this marks the first time YouTube actually removed a type of ad.

It shows that the media giant is willing to pay attention to what viewers want and preemptively act on that. And this leaves it open for YouTube to reevaluate other ad types or even ad length and decide whether to pull back on those as well. For example, it could analyze what kinds of ads viewers tend to hit the Skip button on – which is an important metric since Creators don’t get paid for ads on their videos if the viewer skips it – and then do away with that ad type.

Regardless, aggressively anti-consumer features should always be retired. It would be nice if they weren’t introduced in the first place, but might be too much to ask of a corporation.



from TechRadar - All the latest technology news https://ift.tt/kXO9mzE

HBO Max: The 23 Absolute Best Movies to Watch - CNET

Check out 2023 Oscar best picture nominees Elvis and The Banshees of Inisherin.

from CNET https://ift.tt/50F7TN6

Don't 'Phub' Your Family and Friends Over the Holidays. Make One Small Change to Your Phone Etiquette

Keeping your phone face down on the table can keep you more present and less distracted. from CNET https://ift.tt/7QniOow