Security

We have received exclusive information from our OEM sources about upcoming Intel Tiger Lake-H, Alder Lake-P, and Alder Lake-S processors. While Tiger Lake-H will be based on Willow Cove, Alder Lake-P and S will feature a hybrid Golden Cove and Gracemont architecture. Alder Lake will also be the first to bring DDR5-4400 RAM, AV1 accelerated encode, GNA 3.0, Wi-Fi 6E, and PCIe Gen5 support along with new security extensions.

OnePlus has announced new stable versions of its version of Android, OxygenOS, for its premium mid-ranger the Nord. In addition, the 7T, 7T Pro, 7 and 7 Pro have also been updated. All of these OTAs contain the September 2020 security patch; meanwhile, the Samsung Galaxy A50 has one for October already.

Although the latest statistics show its usage below 1 percent worldwide, the now ancient Windows XP is still being used by almost two times as many people as the more recent Windows Vista. However, the fact that the leaked code became widely available this week through Mega, 4Chan, and other sources, should make anyone think twice before going online with it.

Amazon-owned connected home security brand Ring has raised eyebrows with the launch of the Ring Always Home Cam. The device combines a charging base with an in-door camera drone that will activate on the detection of movement and will send the drone out to fly around a house transmitting a live video feed to the homeowner.

D-Link has announced the DCS-8302LH Full HD Outdoor Wi-Fi Camera. Despite one part of its name, the OEM asserts it is sleek and sophisticated to have inside the house as well. It also packs features such as IR for night vision, AI to help avoid unnecessary user alerts and "next-gen" IPv6/WPA3 support.

The VAVA Portable SSD Touch is a new product launched via Indiegogo recently. It is a stick-like drive with a hardware-based fingerprint scanner on the top of its aluminium, supposedly shock-proof casing. It also apparently packs AES 256-bit encryption on top of that and USB 3.1 Gen 2 speeds into its compact form-factor.

The fourth-generation iPad Air has been linked to a new design that would leave it looking more like its Pro sibling. SvetApple has posted new renders based on its latest leaks. They include support for Touch ID, which is found embedded in the slate's power button. The images also depict a sizeable camera hump despite the presence of just one lens, as well as a USB type C port.

The ability to complete point-of-sale transactions using wearables alone represented a market worth US$285.47 billion in 2019, according to new market research. However, this value is also now thought to grow until it reaches $1.37 trillion by 2027. This trend may be influenced by an increasing demand for novel ways to pay that are contactless as well as cashless.

Google applied for a temporary general license (TGL) in order to keep older Huawei devices compatible with its Android app ecosystem even after this OEM was placed on the US administration's Entity List in May 2019. However, this TGL has now expired, leaving the future function of many phones worldwide in some doubt.

The popular messaging app Telegram marks its seventh year of business today (August 14, 2020). It has ushered this anniversary in along with a new feature: video calling. It now exists in alpha form, boasting picture-in-picture and end-to-end encryption, but only for its Android app thus far.

Days after Canon, Intel is the next major company to face a massive data breach. Over 20GB of confidential design data including SDKs, flash tools, marketing templates, debug tools, and more were stolen and subsequently leaked online.

A large number of Canon domains were recently targeted by the Maze ransomware attack, resulting in the theft of over 10TB of sensitive user data. While Canon claims that photo images weren’t compromised, other sensitive user information is currently at risk.

Apricorn’s Aegis Secure Key 3NXC is reportedly the world’s first USB Type-C pen drive featuring hardware encryption. With a number of laptops and Android smartphones now leveraging USB Type-C, the 3NXC is increasingly relevant. The 4GB based model cost just US$59, but users will have to pay more for higher storage variants.

According to Pangu Team, a Chinese hacker group, an “unpatchable” exploit has been uncovered for Apple’s Secure Enclave, the co-processor that stores keys for Face ID, Touch ID, and passwords. This potentially puts the personal data and biometric information of millions of iPhone and iPad users at risk.

AMD has now officially unveiled the Ryzen 4000 APU series for pre-built OEM desktops across consumer and commercial segments. The Ryzen 4000G APUs sport the exact same configuration as their mobile counterparts but feature additional TDP headroom that allows for higher CPU and GPU clocks. AMD is pitting the Ryzen 7 4700G against the likes of the Core i7-9700 and claims that it has managed to slam dunk the competition.

Chinese security researchers discovered that the firmware of fast chargers can be corrupted to deliver higher charging parameters, thus damaging the devices connected to them. A charger affected by a BadPower attack can melt or even set on fire the handset/external battery it is supposed to charge.

Xiaomi confirmed a short while ago that it would finally remove the Clean Master app and service from its phones in India, following the ban of the app by the government. The promised update has arrived for the Mi Cleaner app but things may not always be as they seem.

Mobvoi may be best known as a wearables brand; however, it is also breaking into the market for smart-home gadgets. The latest of these is the LifeSmart outdoor camera. It supports footage at HD or FHD resolutions, has an IR night-vision mode and a 110-degree field of view.

Belkin's latest screen protector for Apple ultrabooks also confers a property that HP devices with SureView have by default. It occludes the content on these screens for viewing angles not those of the user, thus reducing the risk of intrusion or some immediate forms of data-theft. It is available for 13-, 15- and 16-inch MacBooks Air and Pro.

A California resident filed a lawsuit against LinkedIn for allegedly snooping on user clipboard data on the social media app’s iOS version. The issue was brought to light thanks to a new privacy-oriented feature in iOS 14 that tells users when apps access clipboard data.

The eufyCam 2 Pro improves on its previous generation in that its image sensor's resolution steps up to 2048x1080 (or 2K). It also incorporates night vision (color and IR), 2-way audio and a battery life of up to 12 months. This new indoor/outdoor home-surveillance kit is available through Best Buy in the US.

Be glad, PlayStation 4 owners; a new jailbreak is on the way. Developer @theflow0 has now announced the existence of a kernel exploit on PS4 running firmware 7.02 or older. The kernel exploit currently has to be chained with a firmware 6.72 WebKit exploit.

Despite its 20-year reliance on Huawei-made telecom hardware, the United Kingdom has now decided to remove Huawei from its 5G infrastructure by the end of 2020. The shift in policy is based on a new report from British cybersecurity experts that fear Huawei may be forced to use untrusted technology as a result of recent sanctions put on the company by the United States.

Android has been a 64-bit OS for some time now. However, this transition has not resulted in a wholesale switch to the same in all apps. Nevertheless, Chrome has finally shown signs of migrating to this platform, starting with its newest Dev and Canary versions.

Purism is back with its latest privacy focused Linux-based laptop. The latest device in its range is the Librem 14 which effectively crams in a larger display into a similar footprint to its Librem 13 model.

It seems likely that the MIUI 12 update for Redmi Note 9 smartphone users in Europe has been temporarily halted. A new MIUI 11 stable update has started rolling out for the Redmi Note 9 instead, which will bring the device up to date in terms of security patches. Owners of the phone in China have already started receiving MIUI 12.

Some phones from 2019 and 2020 that bear the Samsung Galaxy name now have OTA updates that contain the latest Android security patch. They include the S20 series, as well as the Note 10s. Some higher-end Ax0 devices are also included in this list, which has appeared markedly early in the month.

POCO has confirmed the existence of the M2 Pro, and is currently teasing it on Twitter and Flipkart ahead of its July 7, 2020 launch. These official leaks show some inextricable links between it and the pre-existing Redmi Note 9 Pro. For example, both phones are now known to have quad rear cameras and 33 watt (W) charging.

The hopeful PlayStation 4 homebrew scene has waited a long while for a new kernel exploit, after the release of the firmware 5.05 jailbreak back in 2018. That wait is unlikely to end anytime soon, in light of recent developments.

Nintendo had been promoting the security of its 3DS and Switch devices by soliciting bug reports through HackerOne's bounty initiative. Here, users are incentivized to find such discrepancies with financial rewards. However, the hand-held gaming system is no longer signed up for the service.

On Monday and Tuesday, Amazon employees will strike at a total of six locations in Germany for better working conditions and, in particular, better protection against a possible corona infection in the workplace. In Germany, too, there have already been several cases of infection in the logistics centers.

New research of broadband internet provision and its adoption in the US found that consumers spend about US$60 on them per month at the end of 2019, compared to about $44 in 2012. This new study also concluded that these customers prioritize speed over any other aspect of the service in question. However, following the impact of the Covid-19 pandemics, this may change somewhat.

Sony has now opened up its Bug Bounty program to the public, offering a whopping US$50,000 to anyone able to find a critical PlayStation 4 vulnerability. This deals a heavy blow to the hopeful PS4 homebrew scene, and further places the chances of a future jailbreak release in doubt.

Acer announced several new ruggedized mobile devices today. The Enduro line boasts two rugged Windows laptops, two rugged Windows tablets, and a rugged Android tablet.

Xiaomi has launched its fourth security camera, the Mi Smart Camera PTZ SE. The smart camera has a 110° field of view and can record in 1080p. The camera supports up to 32 GB microSD cards, H.265 encoding and can rotate 360° horizontally. The Xiaomi Mi Smart Camera PTZ SE retails for CNY 149 (~US$21).

Intel has undoubtedly had more than its fair share of chipset security issues over the past couple of years. However, the end to the company’s security woes doesn’t yet seem to be in sight after yet another vulnerability has been discovered, this time deep in its silicon’s built-in security measures.

The security group Lookout has released the results of its latest study of fraud that targets phones or tablets owned by enterprises. It found that the number of such incidents grew by 37.1% between the last quarter of 2019 and the first of 2020. Even just one of these attacks can cost businesses millions of dollars.

It has been found that a certain wallpaper can soft-brick several Android phones particularly newer Samsung phones and Google Pixels. Apparently, this is due to Android's SystemUI not being able to handle the higher Google Skia color gamut of the image leading to a crash and boot loop. While not all phones are affected, it is advised that users do not attempt to use this image as a wallpaper in daily-driver phones.

Apple has paid a US$100,000 bounty to Bhavuk Jain for a security vulnerability he found within the "Sign in with Apple" ability found on some websites and third-party applications. The bug could allow hackers to take full control of a user's account.

Samsung Money is a new partnership between this OEM and SoFi that offers a new type of Mastercard-issued debit card. It also extends benefits such as a fee-free account and potentially increased interest on savings. This new arm of Samsung Pay will be available to US customers in the summer of 2020.

Fujitsu has announced new additions to its business-class Lifebook line of notebooks. They are led by the U9310 and its 2-in-1 variant, the U9310X. This 13.3-inch convertible has up to 10th-gen core i7 Intel processors and weighs only about 1 kilogram (kg).

The International Chamber of Commerce recently presented its AOKpass declaration to safeguard health data in the context of privacy and data security issues with the current crop of COVID-19 tracking apps.

Since these are "vintage" source codes, there should be no concern regarding possible hacks. Emulators for the original Xbox already exist and are said to already be using the leaked codes, but still cannot provide complete compatibility with today's PC systems. As for the impact of the Windows NT 3.5 source code leak, Microsoft chose not to comment knowing full well that snippets from the old OS can still be found lurking within the latest version of Windows NT 10.

Lenovo introduced the latest ThinkPad X1 Carbons with up to 10th-gen Intel Core i7s at CES 2020; however, they have not been available in some regions thus far, Germany included. This has now been addressed on the OEM's webstore.

Microsoft has been copping it for bypassing Intel’s Thunderbolt ultra-high-speed I/O once again on the new Surface Book 3. However, it appears that its recently revealed security concerns about the technology and how it interfaces with Windows may appear to vindicate its decision.

Google has released its latest security patches for Android, and as usual, the Pixel series of phones had first pick of them. However, Samsung has reportedly gotten ahead of all other OEMs by rolling these May 2020 upgrades to 3 of its phones. One is its latest foldable, whereas another is a 2019 mid-ranger.

Security researchers have discovered that Xiaomi's default web browser records and transmits user data to remote servers. It includes potentially sensitive information such as search engine queries and browsing history, and the behavior persists even in the supposedly anonymous incognito mode. A Xiaomi spokesperson has denied allegations of wrongdoing and states that this is standard practice.

In a recent poll from the Washington Post and the University of Maryland, more than half of smartphone users in America expressed distrust in how big tech companies would handle tracking and reporting coronavirus cases. Additionally, exactly half said they would not use an app to track the spread of coronavirus.

QNAP Systems has debuted its new 1.7GHz TS-x31K series for network-attached storage (NAS) of a residential or private magnitude. It comes in 1- to 4-bay SKUs, each of which supports Gigabit Ethernet and SATA 6Gb/s. They also all have AES-256 bit encryption and lockable bays.

A security group has reported the detection of 267 million Facebook profiles on a server being offered in exchange for £300 (~US$340). The users in question are apparently mostly located in the United States. This allegedly hacked info includes their names and phone numbers.