The attack campaign, called Stegano, has been spreading from malicious ads in a “number of reputable news websites,” ESET said in a Tuesday blog post. It’s been preying on Internet Explorer users by scanning for vulnerabilities in Adobe Flash and then exploiting them.

The attack is designed to infect victims with malware that can steal email password credentials through its keylogging and screenshot grabbing features, among others.

The attack is also hard to detect. To infect their victims, the hackers were essentially poisoning the pixels used in the tainted banner ads, ESET said in a separate post.

The hackers concealed their malicious coding in the parameters controlling the pixels’ transparency on the banner ad. This allowed their attack to go unnoticed by the legitimate advertising networks.

Victims will typically see a banner ad for a product called “Browser Defense” or “Broxu.” But in reality, the ad is also designed to run Javascript that will secretly open a new browser window to a malicious website designed to exploit vulnerabilities in Flash that will help carry out the rest of the attack.

Hackers have used similar so-called malvertising tactics to secretly serve malicious coding over legitimate online advertising networks. It’s an attack method that has proven to be a successful at quickly spreading malware to potentially millions.

The makers behind the Stegano attack were also careful to create safeguards to prevent detection, ESET said. For instance, the banner ads will alternate between serving a malicious version or a clean version, depending on the settings run on the victim’s computer. It will also check for any security products or virtualization software on the machine before proceeding with the attack.

ESET declined to name the news websites that were found unknowingly displaying the malicious ads, but cautioned that the attack was widespread, and could have been hosted through other popular sites as well.

Source-http://www.thegurureview.net/aroundnet-category/stegano-malvertising-ads-expose-millions-of-online-users-to-hacking.html

Information leaked suggests that talks are well advanced between the two companies.

Anecdotal evidence from many Facebook users suggests that talks are well advanced and the companies are already sharing experimental data, between themselves, of user data. Other sources suggest that Microsoft (Vole) is also interested in Facebook and, conversely, that Facebook is interested in buying Microsoft.

None of the companies cared enough to comment to Fudzilla at press time.

Courtesy-Fud

A new starter kit for Raspberry Pi, including a keyboard and mouse, has been released to celebrate the success. The kit also includes an SD storage card, official case, power supply, HDMI cable, mouse, keyboard and guidebook – it costs $120.00 plus VAT and will be available in the coming weeks.

Company founder Eben Upton wrote in his bog that he thought they might sell 10,000 units during the product’s lifetime and were a little surprised about the product’s success.

“There was no expectation that adults would use Raspberry Pi, no expectation of commercial success and certainly no expectation that four years later we would be manufacturing tens of thousands of units a day in the UK and exporting Raspberry Pi all over the world.”

The mini-PCs are being used for more than just teaching kids how to assemble PCs. They are useful for setting up smart houses and other settings. One was even used in the hacker drama Mr Robot to bring down eVil corp by triggering the heating systems.

Courtesy-Fud

The Redmond, Wash. company regularly talks up the latest subscription numbers for the consumer-grade Office 365 plans — the $100 a year Home and the $70 Personal — and did so again this week during an earnings call with Wall Street analysts.

“We also see momentum amongst consumers, with now more than 23 million Office 365 subscribers,” CEO Satya Nadella said Tuesday.

But analysis of Microsoft’s consumer Office 365 numbers showed that the rate of growth — or as Nadella put it, “momentum” — has slowed.

For the June quarter, the 23.1 million cited by Microsoft in its filing with the U.S. Securities & Exchange Commission (SEC) represented a 52% increase over the same period the year prior. Although most companies would give their eye teeth — or maybe a few executives — to boast of a rate of increase that size, it was the smallest since Microsoft began providing subscription data in early 2013.

A year before, the June 2015 quarter sported a consumer Office 365 subscription growth rate of 171% over the same three-month span in 2014.

The subscription increase also was small in absolute terms: Microsoft added approximately 900,000 to the rolls during the June quarter, down from 2.8 million the year before and also less than the 1.6 million accumulated in 2016′s March quarter.

The 900,000 additional subscribers added in the June quarter were the smallest number in more than two years.

While Microsoft did not directly address the slowing of growth in the consumer Office 365 market, it did attribute a similar trend among corporate subscriptions to the difficulty of maintaining huge year-over-year percentage gains as the raw numbers of subscriptions increased.

Courtesy-http://www.thegurureview.net/aroundnet-category/microsofts-office-365-subscription-slows-signficantly.html

The service, which is currently available in 17 cities around the world including Paris, will compete with rivals such as Deliveroo and Just Eat, which have advertised heavily in the capital in recent months.

Britons will be able to download the app on their iPhone or Android handset from midday on Thursday and order meals from restaurants which will be delivered by Uber drivers.

Deliveries will be made to customers in central London from over 150 eateries between 11 a.m. and 11 p.m. with plans to expand further away from the center in the coming weeks.

Uber has faced months of protests from drivers of the capital’s long-dominant black cabs but earlier this year transport bosses rejected options which could have imposed strict new restrictions on how it operates.

http://www.thegurureview.net/aroundnet-category/ubereats-launches-in-london.html

Google announced this week that it released an Android update to patch shedloads of vulnerabilities, but the advisory mentioned an information disclosure vulnerability in the Qualcomm tethering controller (CVE-2016-2060) that allows a malicious application to access user information.

FireEye said that this vulnerablity is “high severity,” but Google noted that it does not affect Nexus devices. The patch for the issue is not in the Android Open Source Project (AOSP) repository but might make it in the  latest driver updates for affected devices.

The security outfit said that researchers informed Qualcomm about the vulnerability in January and the vendor developed a fix by early March, when it started reaching out to OEMs to let them know about the issue. Now it’s up to the device manufacturers to push out the patch to customers. So probably a long time then.

The flaw exists in an open source software package maintained by Qualcomm and is related to the Android network daemon (netd).

“The vulnerability was introduced when Qualcomm provided new APIs as part of the ‘network_manager’ system service, and subsequently the ‘netd’ daemon, that allow additional tethering capabilities, possibly among other things,” FireEye said.

The flaw has been confirmed to affect devices running Android 5.0 Lollipop and earlier, which currently account for roughly three-quarters of Android devices. Researchers noted that the affected Qualcomm software package is used in a variety of projects, including the popular CyanogenMod, and the vulnerable APIs appear to have been around since at least 2011.

The vulnerability can be exploited to escalate privileges to the built-in “radio” user, which has permissions that are normally not available to a third-party app. The most efficient way to exploit CVE-2016-2060 is via a malicious application that is granted the “ACCESS_NETWORK_STATE” permission.

Courtesy-Fud

IDC siad that for the first quarter of 2016, overall worldwide tablet shipments fell to 39.6 million, a 14.7 percent drop from the same period a year ago,  However the only part of the segment which did ok were tablets with keyboards – or as we used to call them, netbooks.

IDC said that the decline of ordinary tablets was partly due to traditional first-quarter slumps but also a complete lack of interest on the part of customers.

Traditional tablets accounted for 87.6 percent of all tablet shipments. But tablets that come with detachable keyboards increased of more than 4.9 million units last quarter. That was a gain of 120 percent from the same period last year and an all-time high for tablets with detachable keyboards.

Tablets are dying because more people are buying big-screened phones as an alternative. You remember Fablets? They were what Steve Jobs claimed would never work because they prefered smaller smartphones or bigger tablets. In fact he was talking rubbish and was trying to keep his keyboardless netbook idea going.

IDC said that the newer tablets don’t offer enough new features to entice people to upgrade. After all tablets were always looking for an app which made them useful, which never arrived.

To counteract the downturn, more manufacturers are turning to tablets with detachable keyboards that can thus serve as laptops – on otherwords returning to the netbooks that the Tablets were said to replace.

“With the PC industry in decline, the detachable market stands to benefit as consumers and enterprises seek to replace their aging PCs with detachables,” IDC senior research analyst Jitesh Ubrani said in a statement.

Apple saw its shipments and market share drop but remained in first place. Apple’s latest 9.7-inch iPad Pro and the new 256GB storage option for the 12.9-inch iPad Pro are “healthy additions” to the lineup, IDC said. Samsung also saw its shipments and market share decline. Though the Samsung Galaxy Tab lineup is still popular, its detachable TabPro S is dead in the water thanks to its $900 price tag.

Amazon has found success with its starting-at-$49 Fire, showing that consumers will still buy bargain-priced tablets. Missing from the list was Microsoft in spite of the popularity of its Surface Pro products, which start at $900.

IDC said:

“The Surface line is great. But it’s tough to drive volume in the first quarter. Prices of Surface products are fairly high, but Microsoft is in the top five list for tablets with detachable keyboards. The top five for tablets as a whole is a tougher nut to crack given the large slate volumes compared to detachables.”

Courtesy-Fud

T-Mobile has been offering cheaper leasing plans and free music and video streaming to lure customers away from larger rivals Verizon Communications Inc and AT&T Inc.

T-Mobile, controlled by Deutsche Telekom, said it added 2.2 million customers on a net basis in the first quarter ended March 31.

That easily topped the average analyst estimate of 1.72 million, according to research firm FactSet StreetAccount.

The company said it expected to add 3.2 million to 3.6 million postpaid customers on a net basis in 2016, compared with its previous forecast of 2.4 million to 3.4 million.

T-Mobile’s 10.6 percent jump in quarterly revenue to $8.6 billion suggested its strategy to boost revenue was working. Analysts on average had expected revenue of $8.43 billion, according to Thomson Reuters I/B/E/S.

In comparison, market leader Verizon’s operating revenue rose just 0.6 percent to $32.17 billion.

AT&T is scheduled to report results later on Tuesday.

T-Mobile reported net income of $479 million, or 56 cents per share, for the first quarter, compared with a loss of $63 million, or 9 cents per share, a year earlier.

Source-http://www.thegurureview.net/mobile-category/t-mobile-revenue-up-continues-attracting-new-customers.html

The FCC voted 3-2 last week to approve a notice of proposed rule-making, or NPRM, the first step toward passing new regulations, over the objections of the commission’s two Republicans.

The rules, which will now be released for public comment, require ISPs to get opt-in permission from customers if they want to use their personal information for most reasons besides marketing their own products.

Republican Commissioners Ajit Pai and Michael O’Rielly complained that the regulations target Internet service providers but not social networks, video providers and other online services.

“Ironically, selectively burdening ISPs, who are nascent competitors in online advertising, confers a windfall on those who are already winning,” Pai said. “The FCC targets ISPs, and only ISPs, for regulation.”

The proposed rules could prohibit some existing practices, including offering premium services in exchange for targeted advertising, that consumers have already agreed to, O’Rielly added. “The agency knows best and must save consumers from their poor privacy choices,” he said.

But the commission’s three Democrats argued that regulations are important because ISPs have an incredible window into their customers’ lives.

ISPs can collect a “treasure trove” of information about a customer, including location, websites visited, and shopping habits, said Commissioner Mignon Clyburn. “I want the ability to determine when and how my ISP uses my personal information.”

Broadband customers would be able to opt out of data collection for marketing and other communications-related services. For all other purposes, including most sharing of personal data with third parties, broadband providers would be required to get customers’ explicit opt-in permission.

The proposal would also require ISPs to notify customers about data breaches, and to notify those directly affected by a breach within 10 days of its discovery.

Courtesy- http://www.thegurureview.net/aroundnet-category/fcc-votes-to-tighten-broadband-providers-privacy-rules.html

Groupon has built its business model on the use of IBM’s patents, according to the complaint filed Wednesday in the federal court for the District of Delaware. “Despite IBM’s repeated attempts to negotiate, Groupon refuses to take a license, but continues to use IBM’s property,” according to the computing giant, which is asking the court to order Groupon to halt further infringement and pay damages.

IBM alleges that websites under Groupon’s control and its mobile applications use the technology claimed by the patents-in-suit for online local commerce marketplaces to connect merchants to consumers by offering goods and services at a discount.

About a year ago, IBM filed a similar lawsuit around the same patents against online travel company Priceline and three subsidiaries.

To develop the Prodigy online service that IBM launched with partners in the 1980s, the inventors of U.S. patents 5,796,967 and 7,072,849 developed new methods for presenting applications and advertisements in an interactive service that would take advantage of the computing power of each user’s PC and reduce demand on host servers, such as those used by Prodigy, IBM said in its complaint against Groupon.

“The inventors recognized that if applications were structured to be comprised of ‘objects’ of data and program code capable of being processed by a user’s PC, the Prodigy system would be more efficient than conventional systems,” it added.

Groupon is also accused of infringing U.S. Patent No.5,961,601, which was developed to find a better way of preserving state information in Internet communications, such as between an online merchant and a customer, according to IBM. Online merchants can use the state information to keep track of a client’s product and service selections while the client is shopping and then use that information when the client decides to make a purchase, something that stateless Internet communications protocols like HTTP cannot offer, it added.

Source- http://www.thegurureview.net/aroundnet-category/ibm-files-patent-infringement-lawsuit-against-groupon.html