The attack campaign, called Stegano, has been spreading from malicious ads in a “number of reputable news websites,” ESET said in a Tuesday blog post. It’s been preying on Internet Explorer users by scanning for vulnerabilities in Adobe Flash and then exploiting them.

The attack is designed to infect victims with malware that can steal email password credentials through its keylogging and screenshot grabbing features, among others.

The attack is also hard to detect. To infect their victims, the hackers were essentially poisoning the pixels used in the tainted banner ads, ESET said in a separate post.

The hackers concealed their malicious coding in the parameters controlling the pixels’ transparency on the banner ad. This allowed their attack to go unnoticed by the legitimate advertising networks.

Victims will typically see a banner ad for a product called “Browser Defense” or “Broxu.” But in reality, the ad is also designed to run Javascript that will secretly open a new browser window to a malicious website designed to exploit vulnerabilities in Flash that will help carry out the rest of the attack.

Hackers have used similar so-called malvertising tactics to secretly serve malicious coding over legitimate online advertising networks. It’s an attack method that has proven to be a successful at quickly spreading malware to potentially millions.

The makers behind the Stegano attack were also careful to create safeguards to prevent detection, ESET said. For instance, the banner ads will alternate between serving a malicious version or a clean version, depending on the settings run on the victim’s computer. It will also check for any security products or virtualization software on the machine before proceeding with the attack.

ESET declined to name the news websites that were found unknowingly displaying the malicious ads, but cautioned that the attack was widespread, and could have been hosted through other popular sites as well.

Source-http://www.thegurureview.net/aroundnet-category/stegano-malvertising-ads-expose-millions-of-online-users-to-hacking.html

While greater bandwidth in the 300GHz and above band has been known for a while it is pointless because the range makes it a chocolate teapot.

Some researchers have managed to hit 100 Gbps but when it only works for a few centimeters it is not commercially viable.

Now boffins at the Tokyo Institute of Technology have got the technology to provide a great 34 Gbps speed with a decent range.

Naoto Oshimo, one of the scientists behind this latest test, said that “device performance is almost sufficient for short-distance wireless communication such as KIOSK downloads, which might be its first application”. By that they mean that they have managed 10 metres, almost OK for home use.

Oshimo believes that this technology will scale hugely in terms of the speed as well, and we could eventually be looking at topping the 1Tbps mark.

Courtesy-Fud

The first report came Sunday from an Indian security researcher named Hemanth Joseph, who started investigating possible bypasses after being confronted with a locked iPad he acquired from eBay.

The activation lock gets enabled automatically when users turn on the Find My iPhone feature via iCloud. It links the device to their Apple IDs and prevents anyone else from accessing the device without entering the associated password.

One of the few things allowed from the activation lock screen is connecting the device to a Wi-Fi network, including manually configuring one. Hemanth had the idea of trying to crash the service that enforces the lock screen by entering very long strings of characters in the WPA2-Enterprise username and password fields.

The researcher claims that, after awhile, the screen froze, and he used the iPad smart cover sold by Apple to put the tablet to sleep and then reopen it. This is supposed to restore the state of the tablet from where it was left off, in this case, loading the WPA2 screen again with the long strings of characters filled in.

“After 20-25 seconds the Add Wifi Connection screen crashed to the iPad home screen, thereby bypassing the so-called Find My iPhone Activation Lock,” he said in a blog post.

Hemanth said he reported the issue to Apple on Nov. 4, and the company is investigating it. He tested the bypass on iOS 10.1, which was released on Oct. 24.

Last week, a researcher named Benjamin Kunz Mejri, from German outfit Vulnerability Lab, posted a video showing the same bypass, but on the newer iOS 10.1.1 version.

Kunz Mejri’s method is similar and also involves overflowing the Add Wi-Fi form fields with long strings of characters but also requires rotating the tablet’s screen in order to trigger the crash after the smart cover trick.

Apple has not yet confirmed that issue and did not immediately respond to a request for comment.

Source- http://www.thegurureview.net/mobile-category/researcher-prove-ios-activation-lock-can-be-bypassed.html

The chip maker has raised its revenue guidance for the third quarter to $15.6 billion, plus or minus $300 million, an improvement from $14.9 million, plus or minus $500 million.

That’s due to PC makers replenishing laptop and desktop inventory, which means Intel is shipping out more chips. It’s likely in anticipation of the holiday season, when PC shipments rocket.

“The company is also seeing some signs of improving PC demand,” Intel said in a statement.

In the second quarter of the year, PC makers slowed down chip orders and were clearing out existing stock of laptops and desktops. PC shipments declined by 4.5 percent during that period, according to IDC.

Shipments of gaming PCs, 2-in-1s and Chromebooks are driving PC shipments. Microsoft’s free upgrade offer to Windows 10 has also ended, which means users are more likely to buy new PCs to get Windows 10.

Meanwhile, new laptops with Intel’s Kaby Lake chips are now available. All the top PC makers have announced new 2-in-1s and laptops with Intel’s new chips. New Kaby Lake chips for gaming PCs will be announced in January.

Intel also has started shipping Pentium and Celeron chips, both aimed at low-cost laptops, based on the same architecture and code-named Apollo Lake. Many Chromebooks are based on Apollo Lake chips.

Courtesy- http://www.thegurureview.net/computing-category/pc-market-showing-signs-of-life.html

A new starter kit for Raspberry Pi, including a keyboard and mouse, has been released to celebrate the success. The kit also includes an SD storage card, official case, power supply, HDMI cable, mouse, keyboard and guidebook – it costs $120.00 plus VAT and will be available in the coming weeks.

Company founder Eben Upton wrote in his bog that he thought they might sell 10,000 units during the product’s lifetime and were a little surprised about the product’s success.

“There was no expectation that adults would use Raspberry Pi, no expectation of commercial success and certainly no expectation that four years later we would be manufacturing tens of thousands of units a day in the UK and exporting Raspberry Pi all over the world.”

The mini-PCs are being used for more than just teaching kids how to assemble PCs. They are useful for setting up smart houses and other settings. One was even used in the hacker drama Mr Robot to bring down eVil corp by triggering the heating systems.

Courtesy-Fud

Intel Security, previously and better known as McAfee, has been sold to private equity firm TPG for $4.2bn, despite Intel paying $7.7bn for it in 2010.

The chip firm will receive $3.1bn in cash as part of the transaction and retain a 49 per cent minority stake. TPG will take control with a 51 per cent stake, and will invest $1.1bn in the company.

Intel Security is based on the McAfee business and was renamed two years ago. The company will revert to the better known McAfee brand, despite John McAfee reportedly suing Intel over the use of his name.

The transaction is expected to close in the second quarter of 2017, and Chris Young, general manager of Intel Security Group, will become CEO of McAfee.

Young described TPG in an open letter to stakeholders as a “seasoned technology investor” that was “attracted to our current momentum and long-term potential”.

He claimed that McAfee currently protects “more than a quarter of a billion endpoints” and more than 200 million consumers, and is present in two thirds of the world’s 2,000 largest companies.

Intel CEO Brian Krzanich claimed that, despite the sale, security “remains important in everything we do at Intel”.

“We will continue to integrate industry-leading security and privacy capabilities in our products from the cloud to billions of smart, connected computing devices,” he added.

Bryan Taylor, a partner at TPG, said that the company had “long identified the cyber security sector, which has experienced strong growth due to the increasing volume and severity of cyber attacks, as one of the most important areas in technology”.

Intel’s acquisition of McAfee Security in 2010 was intended to enable the company to beef up security around PCs and sell McAfee antivirus and other security software around its core business.

However, the combination never worked as the money to be made in the security business became increasingly focused on the data center and cloud computing.

Courtesy-TheInq

It is a fairly logical development, the company has operated a reality distortion field to create an alternative universe where its products are new and revolutionary and light years ahead of everyone else’s. It will be curious to see how Apple integrates its reality with the real world, given that it is having a problem with that.

Apple CEO Tim Cook has been doing his best to convince the world that Apple really is working on something. He needs to do this as the iPhone cash cow starts to dry up and Jobs Mob appears to have no products to replace it.

In an interview with The Washington Post published Sunday, Cook said Apple is “doing a lot of things” with augmented reality (AR), the technology that puts digital images on top of the real world.
He said:

“I think AR is extremely interesting and sort of a core technology. So, yes, it’s something we’re doing a lot of things on behind that curtain we talked about.”

However Apple is light years behind working being done by Microsoft with its Microsoft’s HoloLens headset and the startup Magic Leap’s so-called cinematic reality that’s being developed now.

Cook appears to retreat to AR whenever he is under pressure. But so far he has never actually said that the company is developing any.

Appple has also snapped up several companies and experts in the AR space. And in January, the Financial Times claimed that the company has a division of hundreds of people researching the technology.
But AR would be a hard fit to get a product out which fits Apple’s ethos and certainly not one for years. Meanwhile it is unlikely we will see anything new before Microsoft and Google get their products out.

Courtesy-Fud

Payments will be backed by a customer’s credit or debit card, the company said.

CVS Pay is currently available in New York, New Jersey, Pennsylvania and Delaware; a nationwide rollout at all 9,600 stores is expected to kick off later this year.

CVS doesn’t support Apple Pay or other NFC-based payment technologies, and its use of barcodes for payments is reminiscent of the way Starbucks customers pay for coffee. Working with the barcode technology was a faster way for CVS to bring forward technology for more convenient in-store payments, analysts said.

Other retailers have created in-store payments through their own apps. Walmart created Walmart Pay in December to allow payments through mobile device QR codes that can be read at checkout registers.

“There’s nothing really innovative here with CVS Pay,” said Gartner analyst Avivah Litan on Friday. “They are pretty much following the trend. It’s just mobile commerce with a credit card attached. It’s no big deal to put a credit card in a wallet.”

At one point, CVS was working with Walmart and dozens of other major retailers in the Merchant Customer Exchange, which was designed to process mobile payments electronically through bank accounts and not credit cards to cut out the card processing cost that merchants paid to banks. But MCX ended its pilot of its mobile app, CurrentC, in June. Analysts have predicted the concept will not continue.

Source-http://www.thegurureview.net/mobile-category/cvs-debuts-cvs-pay.html

The company started to take in more cash from its car business recently. The company earned $113 million from its automotive segment in fiscal Q1 2017. While that is not much it represents a 47 percent increase over the year before. Automotive revenue up to about 8.6 percent of total revenue and it is set to get higher.

BMW, Tesla, Honda and Volkswagen are all using Nvidia gear in one way or another.

BMW’s been using Nvidia infotainment systems for years and seems to have been Nvidia’s way into the industry. Tesla has a 17 inch touchscreen display of which is powered by Nvidia. You can see Tesla’s all-digital 12.3-inch instrument cluster display uses Nvidia GPUs. Honda has Tegra processors for its Honda Connect infotainment system.

But rumors are that Nvidia is hoping to make a killing from the move to driverless cars. The company is already on the second version of its Drive PX self-driving platform. Nvidia claims that Drive PX recently learned how to navigate 3,000 miles of road in just 72 hours.

BMW, Ford, and Daimler are testing Drive PX and Audi used Nvidia’s GPUs to help pilot some of its self-driving vehicles in the past. In fact Audi has claimed that it can be used to help normal car driving.

It said that the deep learning capabilities of Drive PX allowed its vehicles to learn certain self-driving capabilities in four hours instead of the two years that it took on competing systems.

According to Automotive News Europe Nvidia is working closely with Audi as its primary brand for Drive PX but then it will move to Volkswagen, Seat, Skoda, Lamborghini, and Bentley.
Tesla also appears to think that Nvida is a key element for driverless car technology. At the 2015 GPU Technology Conference last year, the company said that Tegra GPU’s will prove “really important for self-driving in the future.” Tesla does not use the Drive PX system yet, but it could go that way.

Courtesy-Fud