Apple is one of the few trillion-dollar tech companies, so users can expect unparalleled customer service from them. The company has recently taken swift action to address a critical security vulnerability in its latest iOS and iPadOS releases. The tech giant released Rapid Security Response updates, specifically iOS 16.5.1 and iPadOS 16.5.1, to patch a WebKit vulnerability that is currently being actively exploited. Since WebKit is the browser engine used by Safari, it is crucial for users to install the updates immediately to ensure their devices are protected.

The new version aims to resolve the issues created by the 21 June update release

To install the updates, users simply need to follow the same process as a typical update. They can navigate to Settings > General > Software Update and follow the instructions provided. The entire installation process should only take a few minutes, after which the device will restart.

These updates are listed as iOS 16.5.1 (a) and iPadOS 16.5.1 (a) to signify that they are distinct releases aimed at resolving issues with the previous versions that were launched on June 21st. Apple has acknowledged that the WebKit flaw could potentially allow attackers to execute arbitrary code by processing web content on targeted devices. While the company is aware of a report suggesting that the vulnerability might have been actively exploited, it is currently unclear whether any personal data has been compromised as a result.

In addition to iOS and iPadOS, Mac users running macOS Ventura 13.4.1 are also receiving a Rapid Security Response update to address the same Safari browser vulnerability. To install the update on a Mac, users should navigate to the Apple menu, select System Settings, click on General, and then proceed to Software Update.

This proactive approach by Apple ensures that critical security vulnerabilities are addressed promptly, safeguarding user data and maintaining the overall security of their devices. Users are strongly advised to prioritize installing these updates to mitigate any potential risks associated with the WebKit vulnerability.

RELATED:

• Samsung’s XR headset launch reportedly pushed back six months due to Apple Vision Pro
• Apple rumored to launch foldable screen MacBook in 2026
• Best VR Games 2023: The Ultimate List of Virtual Adventures and Experiences

(Via)

The post Apple is Rolling Out Urgent Security Patches for iOS & iPadOS appeared first on Gizmochina.

In response to a series of Layer 7 Distributed Denial of Service (DDoS) attacks, Microsoft has taken swift action to enhance its security measures and protect its customers. The attacks, initiated by a threat actor known as Storm-1359, targeted Microsoft’s services, causing temporary disruptions in availability. However, there is no evidence to suggest that customer data has been compromised.

Microsoft is recommending Level 7 Azure Web Application Firewall Services for its users

Microsoft’s investigation revealed that Storm-1359 employs a combination of tactics, including accessing multiple virtual private servers (VPS), rented cloud infrastructure, open proxies, and DDoS tools. Unlike traditional DDoS attacks that focus on Layer 3 or 4, these recent attacks specifically targeted Layer 7, posing a greater challenge to mitigation efforts.

To address this new wave of attacks, Microsoft has hardened its Layer 7 protections by fine-tuning the Azure Web Application Firewall (WAF). This proactive measure aims to shield customers from the impact of similar DDoS attacks. While the existing tools and techniques have proven highly effective in mitigating disruptions, Microsoft remains committed to continuous improvement.

To assist customers in fortifying their own environments against similar attacks, Microsoft encourages them to review the technical details and recommended actions provided. By implementing the suggested measures, customers can enhance the resilience of their systems and minimize the potential impact of Layer 7 DDoS attacks.

Microsoft’s analysis of Storm-1359 revealed that the threat actor possesses a collection of botnets and tools capable of launching DDoS attacks from various cloud services and open proxy infrastructures. Storm-1359 appears primarily motivated by disruption and seeking publicity through its activities.

The attacks launched by Storm-1359 encompass several types of Layer 7 DDoS attacks. These include the HTTP(S) flood attack, which overwhelms system resources with an excessive load of SSL/TLS handshakes and HTTP(S) requests. Additionally, Storm-1359 employs cache bypass techniques to overload origin servers by sending queries against generated URLs, effectively bypassing the CDN layer. Another attack method utilized is Slowloris, where the attacker opens a connection to a web server, requests a resource, and then deliberately fails to acknowledge or accept the download. This forces the server to keep the connection and requested resource in memory, causing resource depletion.

To mitigate the impact of Layer 7 DDoS attacks, Microsoft recommends customers utilize layer 7 protection services such as Azure Web Application Firewall (WAF), which is available with Azure Front Door and Azure Application Gateway. Customers should also block IP addresses and ranges identified as malicious and consider implementing rate limiting or redirection of traffic from outside or within specific regions. By creating custom WAF rules to automatically block and rate limit HTTP or HTTPS attacks with known signatures, organizations can further fortify their defenses against Layer 7 DDoS attacks.

RELATED:

• Microsoft Bing Chat Introduces iOS Widgets, Advanced Voice Chat Functionality in New Update
• Microsoft won’t be developing any new games for the Xbox One console
• 2023 Best Gaming Mouse under $100

(Source)

The post Microsoft Strengthens Defenses Against Layer 7 DDoS Attacks appeared first on Gizmochina.

The lock icon in Google Chrome is a security indicator that appears in the address bar of the browser when you visit a website that uses HTTPS encryption to secure your connection. The lock icon signifies that the website you’re visiting has been authenticated and verified by a trusted certificate authority, and any data that you exchange with the website is encrypted and protected from eavesdropping or tampering by third parties. However, it doesn’t always mean that the site is trustworthy, and Google seems to be highlighting the same, stating that the company will replace the icon in their web browser.

Only 11% of Users understand what the Lock Icon means

Google is planning to replace the lock icon in Chrome’s address bar with a new icon that will make it easier for users to understand its meaning. The move comes after research showed that only 11% of users realized that the lock symbol referred to HTTPS encryption. Many others believed that it meant the site was trustworthy, which is problematic as a lot of phishing sites use the technology.

The new icon is a variant of the tune icon, or the settings icon (as some would refer to it) and is meant to signal that security is the default state rather than trustworthiness. It is also more inviting for users to click, making it more likely that they will use site controls. To keep up with evolving security standards, the tech giant has been making a lot of changes. It recently added Passkeys to Google Accounts, and Blue Checkmarks to Gmail. Most users will see the new icon in Chrome 117 on Android and desktop, which is expected to arrive early in September.

RELATED:

• Google Chrome Web App gets Play Store-like installation design
• Google Unveils Chrome 113: Boosting Video Calls and Web Graphics Performance
• Google Introduces Passkeys, the Future of Secure and Convenient Sign-Ins
• Best ChatGPT Prompts for Web Developers

(Via)

The post Google Chrome Swaps confusing Lock Icon with New Icon for HTTPS Websites appeared first on Gizmochina.

It seems that no news that hit the headlines regarding Twitter appears to be positive nowadays. And unfortunately, the latest one might also divide its large user base. So be ready, since you might require your ID for this one.

Apparently, the microblogging giant is looking bring a new feature called ID verification. As the name suggests, Elon’s team is looking to constantly improve the platform and this move would help verify if someone on the platform is a real person and not just an impersonation. With the growing issue of impersonation on Twitter, a verification system would also help many avoid misinformation on the platform. An image shared by a leaker shows an image of this verification process, although it is transcribed in German.

But this shows that the verification system could already be on its way. Users would need to upload their legal ID along with a selfie to confirm their identity. While this move would offer many benefits, it also raises the concerns regarding user privacy and data security again. Furthermore, this also takes away from one of the platform’s popular aspects, which is anonymity. Meaning, this move is a double edged sword.

The leaker also added that Elon is seeking to hire a third part company to handle the entire verification process to ensure the protection of user data. But despite all of this, one must remember that data leaks from tech giants, is not uncommon in today’s day and age. But keep in mind that this is still just a rumor, so take this report with a pinch of salt for now and stick around for more updates.

RELATED:

• Twitter Security Breach: Former Employee Claims Engineers Can Tweet from Any Account
• Twitter Ad Sales Fell By 70% in December: Report
• Say Goodbye to Ads on Twitter with New ‘Twitter Blue’ Tier
• Redmi Note 12 Discovery Edition vs Redmi Note 12 Pro Speed Edition: Specs Comparison
• OPPO Reno9 vs Redmi Note 12 Pro Speed: Specs Comparison

(Source)

The post Twitter May Soon Require ID To Prove That You’re a Real Person appeared first on Gizmochina.

Xiaomi had just announced the results of an independent review that was conducted for its data protection standards. The company passed the annual audit for data privacy, which was in compliance with the European Union.

The Chinese tech giant had brought in TRUSTe LLC, a subsidiary of TrustArc, for the independent audit of its data protection and security management system. Furthermore, this review had tested in details if the processing of personal information conducted by Xiaomi is in compliance with the General Data Protection Regulation (GDPR) of the European Union (EU). TRUSTe said in the review that “The measures described in the GDPR Validation Assessment were suitably designed to provide reasonable assurance,” with the review meeting all 40 GDPR validation requirements.

In a statement, the smartphone maker stated that its annual assessment has passed the standard with the European Union’s General Data Protection Regulation requirements. Xiaomi has been going through these annual audits by TrustArc since the regulation was first introduced back in 2018. The company also added that it will continue to maintain its high standards when it comes to user privacy and private data protection.

Cui Baoqiu, Vice President and Chairman of Xiaomi Security and Privacy Committee, said that “We regularly engage with TRUSTe, as well as other credible institutions globally to warrant that Xiaomi’s user privacy protection, including GDPR compliance, keeps improving and perfecting its practices to offer our users reliable and trustworthy products and services. I’m very pleased to see that Xiaomi has completed TRUSTe’s annual audit of GDPR privacy compliance, which demonstrates our commitment to privacy protection.”

RELATED:

• Xiaomi 12 New Year Gift Box Edition now up for sale in China for 3999 yuan ($629)
• India sees 11% growth in smartphone shipments in 2021; Xiaomi leads with 24% share
• Alleged Xiaomi 12 Mini render showcases the possible design

The post Xiaomi passes annual Data Privacy audit in compliance with the EU appeared first on Gizmochina.

Apple had recently announced a new set of changes in its privacy rules. These would essentially block third party applications from tracking users’ data. But now, it seems that Chinese companies already working on a new tool to bypass these new rules to continue tracking iPhone users.

According to a FinancialTimes report, the new tool is being developed to enable these Chinese tech giants like ByteDance and Tencent, to serve iPhone users targeted mobile advertisements. The Cupertino based giant is expected to roll out the new privacy updates in the coming weeks. This would offer its userbase a higher degree of privacy. For those unaware, apps were generally able to use Apple’s IDFA system to track the users that click on ads and the apps they use.

But now, these firms would need to ask for permission to gather this tracking data. This might not seem like a major change, but in practice, it implies of a multi billion dollar worth shift in the advertising industry. The change has met opposition from major firms like Facebook, as most users would most likely decline on being tracked. Thus, the China Advertising Association, with over 2,000 members, has decided to launch a new method of tracking and identifying iPhone users. This new tool is dubbed as CAID.

This new tool is being widely tested by tech companies and advertisers at the moment in China. TikTok’s parent company, ByteDance, stated that advertisers “can use the CAID as a substitute if the user’s IDFA is unavailable.” Furthermore, sources close to both Tencent and ByteDance have confirmed the news, although, both companies have yet to comment on the matter. Similarly, even Apple has yet to offer a statement regarding CAID. But, it has stated that the rule will be universally applicable and will not have any exceptions.

RELATED:

• Apple Maps now directs users to the nearest COVID-19 vaccination center across the US
• Apple foldable iPhone Concept design based on leaks adopts a flip design
• Apple Mac based malware risks surged in 2020, but Windows still worse affected

The post Chinese firms test tools to bypass new Privacy rules from Apple: Report appeared first on Gizmochina.

TikTok, the popular video sharing platform, has come under fire again. This time in South Korea as regulators are fining social media giant for the mishandling of child data.

The Korea Communications Commission (KCC) has fined the company for 186 million won or roughly 155,000 US Dollars. For those unaware, the KCC acts as the regulator and overwatches the country’s telecommunications and data related sectors. The fine it has imposed on TikTok is due to the company failing to protect users’ private data, especially regarding its younger user demographic.

Notably, the fine is equivalent to 3 percent of the company’s annual sales within the country, which is the amount designated for such violations under local privacy laws. KCC began the investigation into this matter back in October 2019 and found that TikTok collected that data of children under the age of 14 without consent from their legal guardians.

Editor’s Pick: Huawei 5G unmanned vehicles are helping in the fight against COVID-19 in Thailand

According to KCC, a minimum of 6,0007 pieces of child data were collected between 31st May 2017 and 6th December 2019. Furthermore, TikTok had also failed in notifying its users of the transfer of personal data overseas. The investigation also revealed that the company uses four cloud service providing companies, namely Alibaba Cloud, Fastly, Edgecast, and Firebase.

The news arrives just a few weeks after recent negative events for the company. India, where one of its highest userbases resides, has banned the app over security concern, similar to the US Army back in January. The company also recently announced that it would be exiting the Hong Kong market, due to China’s new security laws.

UP NEXT: 5G smartphone shipments witnesses growth in China in June with 61.2% market share

(Via)

The post TikTok faces $155,000 fine for mishandling child data in South Korea appeared first on Gizmochina.

Google is now facing another issue regarding privacy as it received a data protection complaint. The complaint was filed by Max Shrems, an Austrian privacy activist, and accused the search giant of unlawfully monitoring users and passing on the “tracking ID’ to various advertisers.

Schrems filed the complaint through his activist group called, Noyb. It was filed with the Austrian data protection authority and mainly concerned Android users. According to their complaint, Google tracked its Android users’ phones through a unique ID, which “allows Google and countless third-parties to” track and monitor EU users. In the complaint, the group mentioned that people have to be asked for consent before being tracked.

Editor’s Pick: MediaTek is launching a new 5G chip on May 18; could be Dimensity 800 Plus

This is in line with the strict data protection rules the European Union has enforced since May 2018. Through these regulations, the data protection advisories have the power to impose fines that can amount up to 4 percent of a company’s global annual sales when concerning major breaches in conduct. Furthermore, the complaint accused Google of not collecting “valid ‘opt-in’ consent before generating the tracking ID, but seems to generate these IDs without user consent.”

According to Nyob, “Android does not allow deleting the tracking ID. It only allows users to generate a new tracking ID to replace the existing tracking ID. This neither deletes the data that was collected before, nor stops tracking going forward.” As of right now, Google has yet to make a public statement. Unfortunately, this also arrives during a period of crisis where various governments and private companies are working on tracing technology, which is another hassle regulatory bodies are dealing with.

UP NEXT: Sony smartphone shipments were all-time low with only 400,000 units in Q1 2020

(Via)

The post Google faces Privacy Complaint, accused of tracking EU users appeared first on Gizmochina.

Oppo’s ColorOS 7 has been officially launched in India. It is the latest build of the company’s custom Android OS skin. The new update brings many features to Oppo smartphones like Riding Mode, DocVault and, localized feature for the Indian subcontinent.

ColorOS 7 Compatible Devices & Rollout

ColorOS 7 had initially debuted in China a week prior and is based on the company’s Infinite Design concept that aims to simplify the user interface. Currently, Oppo is planning on bringing the latest build to about 20 smartphone models which include Oppo Reno, Oppo Reno 10x Zoom, Oppo Reno 2, Oppo Find, Oppo F, Oppo K and Oppo A series. The update is being rolled out in a staggered manner, meaning that certain users will receive the update as a trial version starting today. Furthermore, the new update is also set to reach all the compatible models in Chinese, South Asian, Southeast Asian, Europe, Asia-Pacific, and the Middle Eastern regions.

Notably, ColorOS 7 will also include certain Realme smartphones. The beta program for the new ColorOS update will begin on Wednesday (27th November 2019) for Realme X2 Pro. Oppo has already started the rollout of ColorOS 7 in China for many of the aforementioned models alongside Oppo Reno Barcelona Custom Edition, Oppo Reno Ace, and Oppo Reno Ace Gundam Edition. These devices are a few of the first handsets to be updated.

ColorOS 7 Features

As mentioned previously, ColorOS 7 is based on Oppo’s Infinite Design concept that has its core philosophy in lightweight visuals for a clean and user-friendly interface. The new update also brings about additional privacy-related features such as the Personal Information Protection option that allows users to protect their personal data from third-party apps and software. Other security options include Payment Protection and File Protection as a major addition alongside a Private Safe to transfer photos, videos, audio and other documents to a “secure zone” in the storage folder.

Editor’s Pick: Honor MagicBook 14 and MagicBook 15 goes official in China

ColorOS 7 arrives with a new Smart Sidebar that holds favorite apps and tools at the side of the screen. The new software build is also preloaded with a new Soloop video editing app. In terms of Localized functions, Indian users also get Smart Riding and Riding Mode features. These new features have been developed in Oppo’s R&D (Research and Development) centre in Hyderabad, India. The team of 280 members focuses on localizing features and assisting the global team in creating more globalized features.

The new software update also arrives with performance boosts as well. The CachPreload function is claimed to make apps open faster than the previous iterations of ColorOS. oMem is a feature that adapts to user habits to shift and allocate system resources appropriately while the oSense adds a new scheduling mechanism that prioritizes front end and user-related threads. The proprietary feature is touted to boost RAM utilization by up to a sizeable 40 percent and increase overall system response by 30 percent.

According to Oppo shared data, the company has over 300 million global users spanning 140 countries with at least 80 different languages. A total of 6 research centres conceptualize and design ColorOS updates. The company also stated that India is one of its key markets.

UP NEXT: Honor Unveils Flypods 3 True Wireless Noise Cancelling Earphones for 799 Yuan ($113)

(Via)

The post Oppo ColorOS 7 Launched in India with Riding Mode, Localised Features and More appeared first on Gizmochina.

At a time when most countries are concerned about security aspect related to Huawei’s products, the company’s founder Ren Zhengfei has sent a letter to all its employees talking about security and credibility and focusing on cyber-security and privacy protection.

The letter is titled “To Improve Software Engineering Capabilities and Practices, and Create Credible High-Quality Products.” In the letter, he says that the company is at a new starting point when it comes to cloud computing, AI, Software definition and other development trends.

He says that the company’s credibility will be an important factor for customers when they decide to buy and accept Huawei products and trust the brand. He added that credibility is not only a high-quality result of the external performance of the product but also a high-quality process inherent in the product.

Apart from that, he also talks about improving software engineering capabilities and practices in order to create credible and high-quality products. For this, Ren Zhengfei says that the company’s board has decided carried out the improvements in a revolutionary manner.

Huawei’s chairman Xu Zhijun has promised an initial investment of around $2 billion, which the company will be using over the course of five years in the field of ICT Infrastructure. As it is clear, the company is aiming to build credible and high-quality products. It says that Huawei’s mission is to bring the digital world to everyone, every family and every organization. To read the full letter, go to the source link.

In the year 2018, Huawei has seen both — growth as well as resistance. While the company surpassed $100 billion in revenue for the first time and crossed its goal of 200 million smartphone shipments, it is also facing strong criticism and legal hurdles in the west.

Read More: Huawei, Xiaomi, OPPO, and Vivo are expected to maintain a lead in the Chinese market in 2019

Last week, it was reported that the USA is considering to ban American wireless carriers from procuring equipment from the Chinese companies, a big blow to both Huawei and ZTE, which are the two largest producers of Telecom equipment. Huawei is also among the leading players when it comes to 5G technology.

(Source)

The post Huawei will focus on Cyber Security and Privacy Protection in 2019: Founder appeared first on Gizmochina.