encryption Archives - Gizmochina

Microsoft Enhances Cloud Security Measures to Combat Malware Distribution

Anubhav — Tue, 16 May 2023 06:43:53 +0000

In a recent announcement, Microsoft has taken a significant step in bolstering the security of its cloud services, including OneDrive and SharePoint. The tech giant revealed that it will now scan password-protected Zip files uploaded or shared by users. This proactive measure aims to tackle the long-standing issue of cybercriminals exploiting archived documents for malware distribution. Previously, Microsoft’s scanning capabilities were limited to uncompressed files, allowing malicious actors to bypass detection by setting passwords. Security researcher Andrew Brandt shed light on this development, highlighting the potential of this enhanced security feature.

Encrypted ZIP files can now be scanned by Microsoft

Archived documents have long served as a conduit for malware distribution. Cybercriminals have frequently employed password-protected Zip files to obfuscate their malicious payloads. However, Microsoft’s recent move to scan encrypted Zip archives on SharePoint marks a significant stride in combating this nefarious practice. By deliberately compressing various malware samples into encrypted Zip files and uploading them to Microsoft cloud services, Brandt demonstrated that these files were promptly flagged as containing malware.

While Microsoft’s proactive scanning approach adds an extra layer of security, the company recognizes that some users may have concerns regarding privacy and data integrity. To address these concerns, users who prefer Microsoft not to scan encrypted files have alternatives at their disposal. They can opt for different compression formats, such as 7-Zip, or utilize encryption algorithms like AES-256. These options ensure that users have the flexibility to maintain control over their data while simultaneously safeguarding it from potential threats.

With its decision to scan password-protected Zip files, Microsoft has taken a commendable step forward in securing its cloud services against malware distribution. By proactively identifying and flagging encrypted files that may contain malicious payloads, the company aims to provide users with enhanced protection and peace of mind. While users can choose alternative compression formats or encryption algorithms to prevent scanning, Microsoft’s commitment to bolstering security demonstrates its dedication to the well-being of its customers. By actively staying ahead of cyber threats, Microsoft continues to pave the way for a safer and more secure cloud computing environment.

RELATED:

(Via)

The post Microsoft Enhances Cloud Security Measures to Combat Malware Distribution appeared first on Gizmochina.

Anker Finally Admits That Its Eufy Security Camera Are Not Natively Encrypted

Sean — Wed, 01 Feb 2023 09:18:37 +0000

Anker has finally admitted to a major accusation regarding its Eufy security camera. So now, the company has come clean regarding some of its “always encrypted” Eufy cameras not producing encrypted streams all of the times. So here are all of the details.

The Verge has been attempting to get a statement from the company, although, it deflected any form of communication while also ignoring its emails. However, when cornered against the wall, the brand finally admitted that its Eufy security cameras are not natively end to end encrypted. In other words, they are able and sometime did produce unencrypted video streams for Eufy’s web portal. This is similar to the ones that were accessed by The Verge from across the US using an ordinary media player.

However, Anker claims that it has now largely fixed this issue. The company stated that every video stream request originating from Eufy’s web portal will now be end to end encrypted same as they are on the Eufy’s app. Furthermore, the company is now working on updating its every single Eufy camera to use WebRTC, which is encrypted by default. Although, these cameras can still produce unencrypted footage upon request.

Lastly, Anker also issued an apology for the lack of communication and has promised to do better in the future. It has also confirmed that it is bringing in a third part security testing company, which is a “leading and well known security expert”. This is all the information we have at the moment, so stick around for more updates regarding this matter.

RELATED:

(Source)

The post Anker Finally Admits That Its Eufy Security Camera Are Not Natively Encrypted appeared first on Gizmochina.

Google Fi calls will now be end-to-end encrypted for Android users

Jeet — Fri, 29 Oct 2021 06:04:35 +0000

Google has a mobile network service in the United States named Google Fi and the company has been actively promoting it with new offers and bundles. Recently, Google introduced a new bundle subscription plan named Pixel Pass.

Now, the search engine giant has announced that Google Fi will be enabling enhanced protection for calls with end-to-end encryption on Android smartphones. However, it’s noteworthy that the feature will only work for calls between Google Fi customers.

This means that the calls made through Google Fi to other carriers won’t be getting the same level of protection. The company has also said that the end-to-end encryption for a call will include audio and visual cues so that users know immediately that their calls are end-to-end encrypted.

There will be a unique ring sound when the customer is making calls using Google’s Phone app, to indicate encryption. It will also show a lock symbol on the call screen to visually indicate that the call is protected.

For those who are unaware, end-to-end encryption means that no one should be able to listen in on your calls and that your private conversations can stay that way. Only the user making the call and the one receiving will can hear the conversation.

Google is already providing end-to-end encryption for its Messages app. The company recently added support for WhatsApp backups to Google Drive with an extra level of protection by offering end-to-end encryption for chats.