Google has shared new details about how it is strengthening security across the Android ecosystem, focusing on AI-driven protections, stricter developer policies, and expanded real-time defenses to protect users from malware, fraud, and privacy risks.

In 2025, Google prevented more than 1.75 million apps that violated policies from being published on Google Play. The company also banned over 80,000 developer accounts linked to harmful activity. Google says measures such as developer verification, mandatory pre-review checks, and testing requirements have made it harder for bad actors to enter the platform while helping legitimate developers build compliant apps more easily.

Apps listed on Google Play go through extensive safety reviews. Google runs over 10,000 checks on every app before publication and continues monitoring apps after they are released. During 2025, the company integrated its latest generative AI models into the review process, allowing human reviewers to detect complex malicious patterns faster.

Privacy protection was another major focus. Google prevented more than 255,000 apps from gaining unnecessary access to sensitive user data by enforcing stricter policies. Developer tools such as Play Policy Insights in Android Studio and the Data Safety section helped developers reduce permission requests and meet policy requirements earlier in the development process.

To maintain trust in app ratings, Google blocked 160 million spam reviews and ratings, including attempts to inflate or deflate scores. The company says its protections also prevented an average 0.5-star rating drop for apps targeted by review bombing.

Google Play Protect continues to operate as Android’s main malware defense. It now scans more than 350 billion apps every day, including apps installed from outside Google Play. In 2025, real-time scanning detected over 27 million new malicious apps from external sources. Enhanced fraud protection, now available in 185 markets covering more than 2.8 billion devices, blocked 266 million risky installation attempts linked to 872,000 high-risk apps. Google also introduced in-call scam protection that prevents users from disabling Play Protect during suspicious calls.

For developers, Play Integrity API now supports hardware-backed signals and new tools such as device recall to identify repeat offenders. Android 16 also introduces tapjacking protection that developers can enable with minimal code.

Google says it will continue investing in AI defenses and developer verification programs to strengthen trust across the Android ecosystem.

For more daily updates, please visit our News Section.

Stay ahead in tech! Join our Telegram community and sign up for our daily newsletter of top stories.

(Source)

The post Google Bans 80,000 Developer Accounts, Blocks 1.75M Harmful Apps in 2025 appeared first on Gizmochina.

360 has unveiled its new Xuanshi Dome Camera 6Pro 4K AI, featuring advanced surveillance capabilities and intelligent features. The camera is equipped with an AI chip, enabling functions like human tracking, vehicle identification, and smoke detection.

The camera has 3840×2160 px resolution and 8x zoom

With a 3840×2160 pixel resolution and 8x zoom, the camera provides clear and detailed video footage. The 30-meter night vision ensures visibility in low-light conditions. The device supports both local and cloud AI detection, enabling accurate object tracking and identification.

Designed for versatility, the 6Pro offers 360-degree horizontal and 147-degree vertical field of view, ensuring comprehensive coverage. The camera is IP66 rated for dust and water resistance, making it suitable for various outdoor environments.

Priced at 399 yuan with an initial launch price of 379 yuan, it includes a 64GB memory card, providing ample storage for recorded footage. The Xuanshi Dome Camera 6Pro is scheduled to go on sale on August 8th.

(Via)

The post 360 Launches Xuanshi Dome Camera 6Pro 4K AI, Starting at 379 Yuan as of now (399 Yuan Standard Price) appeared first on Gizmochina.

The privacy of our personal data has never been more at risk Nearly every product and service we use stores our information, often for personalized advertising and other things. What’s even worse is that companies collecting our data sometimes fail to protect it, leading to theft and even selling. It’s certainly a concerning situation, and governments should address it, right? Wrong, because, U.S. Senator Wyden Letter confirms even the NSA is buying peoples data from data brokers. Here are the details…

The NSA’s Secret Connection with Data Brokers Revealed

According to Senator Ron Wyden’s letter, the NSA is purportedly purchasing information about individuals in the United States. The agency collects internet records, including visited websites and used apps, along with data from sources like phone calls, emails, internet browsing, social media activities, and location data.

Actually, this is not a surprise for anyone. The first evidence of NSA purchasing data from data brokers was revealed by Edward Snowden in 2013. Snowden claimed that the NSA used these data to create profiles on individuals worldwide, including American citizens. Now, Senator Ron Wyden’s statements confirm this.

Moreover, it is not known from whom the data was obtained or under what conditions it was collected. For instance, the NSA might have purchased your data from hackers using the money paid from your taxes. Senator Ron Wyden brought this issue to light and demanded the government to stop this practice.

RELATED:

• Best smart luggage of 2023: Modobag, Weego, Incase & More
• Alldocube iWork GT 12: AMD 2-in-1 laptop, $100 off and free keyboard
• Aoostar R1 N100:  Intel N100 NAS / Mini PC with Windows 11 for $219
• Lenovo Legion Y700 2023: Save $100 on this 8-inch gaming Android tablet

The post NSA Buys American Citizens’ Data from Hackers appeared first on Gizmochina.

With the iOS 17.3 update, Apple has added many new features to iPhones. Among them, the most notable is the Stolen Device Protection. I know what you’re thinking – iPhones already had a series of security measures for stolen devices. Yes, security is crucial for Apple, so the Stolen Device Protection is a lifesaver in situations where your device is stolen, and the thief somehow gains access to your password. Now, Apple’s Stolen Device Protection feature is live, and here’s how it can help protect your iPhone.

Protect Your iPhone Like Never Before: A Guide to Stolen Device Protection

Smartphones are one of our most personal belongings. We store all our personal data, from basic communication to passwords and financial information, on these devices. In case of theft and potential access to our passwords, everything is at risk. For instance, with Safari, they can access accounts and passwords, and through SMS verification, they can enter our bank accounts. Stolen Device Protection, when enabled, prevents potential disasters by requiring only biometric authentication in such scenarios.

Stolen Device Protection’ adds an extra layer of security beyond biometric features like Face ID and Touch ID. If your info is compromised and someone manages to bypass biometric security to change your Apple ID password, there’s a one-hour window provided by Apple for this change. In case of a stolen iPhone, this security delay aims to stop a thief from making crucial actions. It gives you time to mark your device as lost and secure your Apple account, according to Apple’s explanation of this improvement.

How to turn on Stolen Device Protection mode on iPhone

• Open Settings on your iPhone.
• Do one of the following, depending on your iPhone model:
  • Face ID: Tap Face ID & Passcode.
  • Touch ID: Tap Touch ID & Passcode.
• Enter your device passcode.
• Scroll down to the Stolen Device Protection section.
• Tap the toggle switch next to Turn On Protection.

RELATED:

• Get Redmi K70 Pro for discounted price of $499
• Big Discount: AOOSTAR R1 N100 NAS Mini PC Only For $159
• Lenovo Legion Y700 2023: Save $100 on this 8-inch gaming Android tablet
• OnePlus partners with Pixelworks to Elevate Mobile Gaming Experience on the OnePlus 12

The post Biometrics Not Enough? Here’s How Apple’s New Feature Secures Your Stolen iPhone appeared first on Gizmochina.

Ant Group has launched “AntGuard,” a significant development in addressing the security concerns tied to large AI models. This solution consists of two main parts: “AntScan 2.0” and “TianGuard,” with the aim of enhancing the trustworthiness and dependability of large AI models employed across different industries.

AntGuard: Enhancing Security for Large AI Models

The primary goal of AntGuard is to tackle security issues related to problematic training data, uncontrollable inference processes, and external malicious influences. It focuses on three essential areas: measuring large model security, intelligent risk management, and cleaning up data-related issues.

AntScan 2.0 acts as a security expert for large models. Before these models are put into action, it thoroughly checks them, identifying vulnerabilities across various aspects like data security, content security, and ethical considerations.

TianGuard, on the other hand, acts like a protective shield for large models. It uses smart risk control technology to protect models from harmful external queries and filters out potentially risky responses generated by these models. This approach ensures security throughout the entire process, from user inputs to the model’s outputs after deployment.

Moreover, Ant Group and TianGuard are dedicated to maintaining model security during both the training and application phases. They achieve this by implementing strategies like cleaning up problematic data sources, aligning training processes, and conducting research to improve model transparency.

Both AntScan 2.0 and TianGuard are now accessible to the public, providing a robust security framework for large-scale AI applications.

RELATED:

• OpenAI Unveils Plans for First Developer Convention this November
• Apple Enters the AI Race, Spending Millions of Dollars to Develop New Chatbots
• Baidu’s ChatGPT Rival Ernie Bot Takes Off, Sees 1 Million Users in 24 Hours
• Huawei Mate 60 Pro Plus vs Pixel 7 Pro: Specs Comparison
• Samsung Galaxy Z Fold5 vs Huawei Mate X5: Specs Comparison

(Via)

The post Ant Group launches AntGuard, China’s first large model security solution appeared first on Gizmochina.

Smartphones are now an essential part of our lives. We use them for everything from communication to financial transactions, and we store all of our personal information on them. This makes them a valuable target for hackers. As you know, the security of smartphones has always been a concern, but it is especially true for Android phones. According to a recent research, a new attack technique discovered by researchers at a Chinese university can be used to unlock Android phones in minutes using equipment worth just $15. Here are the details…

Researchers Discover Flaw in Android Fingerprint Recognition Systems

Researchers from a Chinese university have discovered a way to unlock some Android devices using false fingerprints. The researchers found two security flaws in the fingerprint recognition systems of many Android devices. These flaws can be exploited to create a fake fingerprint that can be used to unlock the device.

If you possess the required technical expertise, you could create this key, or else, it can be bought for a mere $15. Two essential things are needed to perform this attack – the key and 45 minutes of uninterrupted access to the target device. The BrutePrint attack uses the fingerprint database, with the circuit boards executing a straightforward database search on the device to unlock it.

The research team tested this method on eight different Android devices including the Xiaomi Mi 11 Ultra, Vivo X60 Pro, OnePlus 7 Pro, Oppo Reno Ace, Samsung Galaxy S10+, OnePlus 5T, Huawei Mate 30 Pro 5G, and Huawei P40. Which devices were compromised, however, was not disclosed due to security reasons.

Interestingly, the research team also tested devices with the iOS operating system – specifically iPhone models with the Touch ID feature. The iPhone SE and iPhone 7 models were tested, and it was found that neither could be hacked using this method, implying that iPhone models are secure from such attacks.

RELATED:

• Best Xbox One Games in May 2023
• Google Contacts rolling out birthday notifications for Android users
• DoorDash Facing Lawsuit for Charging iPhone Users more than Android Users
• Google is Rolling Out Android 13 QPR3 Beta 3.2 to Pixel Devices
• Google rolling out Gboard split keyboard for Android tablets

(via)

The post Android Fingerprint Recognition Systems Vulnerable to Attacks! Hackers Can Unlock Phones Using $15 Equipment appeared first on Gizmochina.

Microsoft is reportedly in the process of developing a modern version of Windows that promises to provide better security and faster updates. Dubbed as CorePC, the initiative aims to enable Windows to scale efficiently for various devices, while still supporting legacy apps. The platform will employ “state separation” by breaking down Windows into multiple partitions, similar to iOS and Android, to ensure faster and more reliable system reset functionality, which is vital for competing devices in the education sector. This move could also make it difficult for malware to infect the system while speeding up updates.

Microsoft plans to offer different editions of Windows that support specific features and apps for different hardware types. For example, an education-focused version could have a light footprint like ChromeOS and only run the Edge browser, web apps, Office, and emulated Android apps. On the other hand, CorePC could also offer fully-fledged versions of Windows that support all the current features and capabilities of the modern Windows 11 desktop. Furthermore, Microsoft is reportedly working on a version of CorePC to rival Apple Silicon, enhancing the operating system’s performance and capabilities when tied to specific hardware.

In addition, Microsoft intends to incorporate AI into CorePC to analyze on-screen content and provide appropriate contextual cues. This system-wide extension of AI capabilities could revolutionize the way people interact with the platform. Microsoft plans to use CorePC for the next major version of Windows, scheduled for 2024. Although the company’s alleged plans could change between now and then, the development of CorePC appears to be a promising initiative that could bring significant advancements to the Windows ecosystem.

RELATED:

• Microsoft Set to Disappoint Users with Windows 12 Hardware Requirements
• Microsoft Releases Security Update to Fix Screenshot Vulnerability
• Best UltraWide Gaming Monitors 2023

(Via)

The post Microsoft to Focus on AI & Security for a New, ‘Modern’ Version of Windows appeared first on Gizmochina.

A recent discovery involving Google’s Pixel phones has raised concerns about the security of sharing edited screenshots. This issue, known as “aCropalypse,” occurs when sensitive information is unintentionally revealed through screenshots even after the user has edited or blurred it out. As it turns out, Google isn’t the only one facing this problem – Microsoft’s Windows 11 Snipping Tool has been found to have a similar vulnerability, putting users’ private information at risk when they take screenshots. Here are the details…

Windows 11 Snipping Tool vulnerability can reveal sensitive information in screenshots

The aCropalypse vulnerability allows threat actors to undo edits made on a screenshot, revealing sensitive information that the user intended to crop out or blur. When editing a screenshot, users often save the edited image with the same name as the original file, inadvertently overwriting it. However, the Windows 11 Snipping Tool does not delete the original information from the file but merely appends it at the end, making it invisible to the average user. With some technical know-how, an attacker can retrieve the hidden information from the file and gain access to the edited-out content.

Twitter user Chris Blume reported the vulnerability in the Windows 11 Snipping Tool, sparking further investigation. David Buchanan, who initially uncovered the aCropalypse vulnerability in Pixel phones, has since confirmed that the Windows 11 Snipping Tool works in a similar way, although it uses a different color model. The file size of edited screenshots can also provide clues about the vulnerability, as these images are often larger due to the inclusion of information from the original image.

This vulnerability poses a serious threat, as users frequently crop out or blur sensitive information in images before sharing them. For instance, a user might share a screenshot of an order confirmation page from Amazon, removing their address before posting. However, this vulnerability could allow an attacker to retrieve the cropped-out information, including addresses, credit card numbers, and other sensitive data.

With the vulnerability now public knowledge, it is expected that a fix will be issued soon. However, existing edited screenshots will still be affected, so users should reevaluate any images that might contain sensitive information. Attackers are likely searching for potential victims, so it’s crucial to stay vigilant and protect personal data.

The Windows 11 Snipping Tool’s vulnerability highlights the importance of being cautious when sharing edited images. As technology continues to advance, so too do the methods employed by cybercriminals. Users must remain vigilant and ensure that sensitive information is not inadvertently exposed through edited screenshots or other digital means. It is vital to stay informed about potential vulnerabilities in commonly used tools and adopt best practices for safeguarding personal information.

RELATED:

• Honor Magic5 Pro vs Samsung Galaxy S23 Ultra: Specs Comparison
• Huawei 600kW EV charger leaks, outpacing Tesla’s Superchargers
• OPPO FIND X6 PRO Review Part 1: Triple Main Cameras, All In One
• Oppo Find N2 Flip Review – Here Comes the New King of Flip Phones
• Get OPPO Pad 2 for $549 on Giztop: 11″display, 9150mAh battery,…

(via)

The post Windows 11 Snipping Tool Has a Vulnerability That Can Expose Sensitive Data appeared first on Gizmochina.

The United States, the UK, and New Zealand have joined a growing list of Western countries to ban the Chinese-owned video-sharing platform, TikTok, on government devices due to security concerns, according to The New York Times. The UK announced the immediate ban of TikTok on Thursday, citing the app’s ownership by a Chinese company as a security risk. Chancellor of the Duchy of Lancaster Oliver Dowden referred to the ban as a “precautionary” measure, following similar steps taken by the US, Canada, India, and the European Union‘s executive arm.

The New York Times reported that social media apps collect and store vast amounts of user data, including contacts, user content, and geolocation data, which can be sensitive and vulnerable to compromise. Post-Covid, TikTok has aroused more suspicion than most because of its owner, ByteDance, a Chinese company.

British concerns reflect those expressed by other Western governments that TikTok may share sensitive data from devices used by politicians and senior officials with the Beijing government. On Monday, Prime Minister Rishi Sunak described China as an “epoch-defining challenge” to the international order.

The ban applies only to the official work phones of government officials, and Dowden emphasized that it was a proportionate approach to protect the sensitivity of government data. TikTok expressed disappointment with the British government’s decision, describing the ban as based on fundamental misconceptions and driven by wider geopolitics. The company added that it was taking steps to protect British users’ data.

Despite the ban, several British government departments have TikTok accounts as part of their public outreach, including the defense ministry. The app was recently described as safe for British people to use by Michelle Donelan, the secretary of state for science, innovation, and technology.

Previously, the US threatened to ban TikTok from the country unless the app’s Chinese owners agree to spin off their share of the social media platform. TikTok’s Chief Executive, Shou Zi Chew, responded by stating that divesting the company from its Chinese owners doesn’t offer any more protection than a multibillion-dollar plan the company has already proposed, according to the Wall Street Journal.

RELATED:

• TikTok is Being Forced Out of ByteDance’s Hands by the US Government
• Cerebral, a Mental Health Startup Exposed Personal Patient Data to Meta, Google & TikTok
• Best Monitors for Xbox Series X 2023

(Via)

The post UK, New Zealand Join US in Growing List of Countries to Ban TikTok From Government Devices appeared first on Gizmochina.

India is reportedly planning to introduce new security rules that would force smartphone manufacturers to allow the removal of pre-installed apps and mandate screening of major operating system updates. The rules are being considered amid concerns about spying and abuse of user data. The move could extend launch timelines in the world’s second-largest smartphone market and lead to losses in business from pre-installed apps for players including Samsung, Xiaomi, Vivo, and Apple.

The Indian government is considering the new rules to ensure that pre-installed apps are not weak security points that could be exploited by foreign nations, including China, said a senior government official. The government has ramped up scrutiny of Chinese businesses since a 2020 border clash between the two nations, banning more than 300 Chinese apps, including TikTok.

Under the new rules, smartphone makers will have to provide an uninstall option for pre-installed apps, and new models will be checked for compliance by a lab authorized by the Bureau of Indian Standards agency. The government is also considering mandating screening of every major operating system update before it is rolled out to consumers.

India’s fast-growing smartphone market is dominated by Chinese players, with Xiaomi, Vivo, and Oppo accounting for almost half of all sales, while Samsung has a 20% share and Apple has 3%. The companies and India’s IT ministry have not responded to a Reuters request for comment.

However, the new rules could pose challenges for smartphone manufacturers, particularly for those that sell their devices with proprietary apps or pre-install others with which they have monetization agreements. Some industry executives have expressed concerns that more testing could prolong approval timelines for smartphones and hinder a company’s go-to-market strategy. Nonetheless, the Indian government has decided to give smartphone makers a year to comply with the new rules once they come into effect, the date for which has not been fixed yet.

RELATED:

• Apple Puts Spotlight on India with New Sales Management Approach
• Bharti Airtel to Raise Prices of Mobile Service Across All Plans in India
• Android Smartphones in India Differ From the Rest of the World
• Android Smartphones in India Differ From the Rest of the World

(Source)

The post Indian Government Considers New Security Rules for Smartphone Makers appeared first on Gizmochina.

Google has taken measures to address the issue of malware infections on Android smartphones by implementing stricter guidelines for app development and distribution. The company has ensured that apps available on the Google Play Store are free from malware, but the ability to sideload apps has created a loophole for malware to spread. In response, Google plans to block the installation of outdated apps on Android 14, as seen in recent code changes. This move aims to eliminate the potential for malware to spread through sideloading and older apps.

Google also urges Android users to update their applications regularly. Since the latest version of Android, Android 13, is only available to 5.2% of all devices, Google might increase the minimum API limit to Android 6.0 to further protect users from malware spread. This is because malware attacks usually target older versions of Android with outdated security patches and loopholes. Once Google starts blocking the sideloading feature, the number of malware attacks will go down considerably. It is worth noting that this won’t affect newer smartphones with later versions of the OS, since they receive timely updates for their applications. 

Google is considering offering options for brands to turn on or off the feature that blocks the installation of outdated apps on Android 14. The company recognizes that the spread of malware among Android smartphones is a concern and is taking steps to address it. To ensure that users have complete control over their devices, Google may also provide a way for users to bypass the feature through the command shell. This can be done by introducing a specific flag in the command shell. However, it’s important to note that this process would be more complex than simply installing an APK on an Android smartphone. The goal is to make it more difficult for most users to bypass the feature, but still provide a way for those who need it. 

Users might see the feature in the developer preview of Android 14, which is set to be available in March 2023. 

RELATED:

• Google May Face Anti-competitive Lawsuit Over Its Digital Ad Market Dominance
• New Google Update Restores Pixel Live Wallpapers Compatibility To Older Devices
• Google Finally Fixes Pixel 5G bug with the Android 13 QPR2 Beta 2.1 Update

The post Android 14 May Prevent Installation of Outdated Applications for Security Reasons appeared first on Gizmochina.

A new report has been coming from the house of SamMobile, which mentions that Samsung is currently working on improving the security of its fingerprint scanners. One of the major improvements that the brand is looking for is, to replace the minor fingerprint scanner with small scanning areas with the single but larger fingerprint scanner which could scan multiple fingerprint scanners at the same time and will reportedly have a larger scanning area.

According to Deiter May, CEO of France’s ISORG, Samsung may soon incorporate their technology in upcoming OLED panels. Just to be clear, ISORG is a corporation that manufactures fingerprint readers for handsets. Furthermore, Samsung has already disclosed that its OLED 2.0 next-generation panels will use this All-in-One sensing technology. A smartphone user’s identification can be verified with three fingerprints at once, which is 2.5 x 10-9 (or 2,500,000,000) more secure than using only one. The idea is to use the entire screen to simultaneously scan the three fingers.

By 2025, according to May of ISORG, Samsung will likely release OLED 2.0 panels. Since the new iPhone models rely on Face ID, the CEO stated in an interview with OLED-inc that he doesn’t anticipate Apple getting involved in multiple fingerprint scanning. As a result, Samsung is anticipated to dominate the smartphone industry in All-in-One sensing in addition to becoming the first phone manufacturer to enable multiple-fingerprint scanning.

Many significant OEMs have already given the present fingerprint technology the safety seal of approval, and we haven’t actually encountered any significant security issues brought on by the fingerprint technology. Samsung’s forthcoming technology is said to be around 2.5 billion times more secure than its current model. Now that you know how much safer future fingerprint technology will be, imagine that! We are keen to test the technology as soon as possible.

Related

• Samsung ViewFinity S8UT monitor with 4K resolution, Thunderbolt 4 port unveiled
• Samsung and LG Phones are at Risk of a Malware, Because of Leaked Android Certificate
• Xiaomi 12S Ultra beats iPhone 13 Pro Max in DxOMark camera test, secures 5th position

The post Samsung’s Fingerprint Scanner Will Be Reportedly 2.5 Billion Times More Secure by The Year 2025 appeared first on Gizmochina.

With more and more websites setting restrictions on the passwords you can use (ie it must have a capital letter, a unique symbol or your password must be 12 characters long), password managers such as Dashlane, KeePass, and 1Password have been gaining attraction among online users over the past 5 years.

One among the popular password managers, LastPass, reported in their official community blog post, that unfortunately their service was hacked this August 2022.

The report states that the team has determined that two weeks ago, an unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some proprietary LastPass technical information.

In response to the security incident, the company states that it has deployed containment and mitigation measures, and engaged with a leading cybersecurity and forensics firm. The investigation regarding LastPass’ security incident is still ongoing, and the company has notified its users that currently there is no evidence that this incident involved any access to customer data or encrypted password vaults. 

LastPass’ products and services are operating normally, and with regard to the incident, the company has also implemented additional enhanced security measures and is evaluating further mitigation techniques to strengthen the cybersecurity environment.

Lastly, LastPass informs users that none of its users’ Master passwords have been compromised. LastPass says that it never stores or has knowledge of its users’ Master Passwords. The password manager utilizes an industry-standard Zero Knowledge architecture that ensures LastPass can never know or gain access to their customers’ Master Password.

RELATED:

• Netflix could launch ad-supported plan and password sharing fees this year
• iQOO 10, iQOO 10 Pro with Snapdragon 8+ Gen 1 goes on sale in China, starts at 3,699 Yuan (~$548)
• Huawei Launches the Freebuds Pro 2, its Latest Premium Wireless ANC Earphones, in Malaysia
• Oppo Enco Buds 2 Launched with 28-Hour Battery Life & 10mm Titanum Driver
• Giztop is giving $100 OFF on Xiaomi 12S Pro Smartphone

(Source)

The post Password Manager LastPass Confirms They Were Hacked This Month appeared first on Gizmochina.

Apple went big on security and privacy today. The company announced that it will be adding a new security tool called “Lockdown Mode” to the iPhone, the iPad, and the Mac. This feature will protect High-profile users such as journalists, activists, and politicians from targeted cyberattacks. The new tool will prevent attackers from exploiting the vulnerability discovered in Apple’s software.

Cybersecurity has become one of the major issues. There have been cases of agencies and governments targeting the smartphones of high-profile individuals using certain software. For example, Pegasus, a software developed by NSO group, is often used to hack into the phones of people using GIFs, links, and other forms.

The new feature, called Lockdown Mode, will provide protection for a “very small number of users who face grave, targeted attacks,” Apple said Wednesday in a statement. Apparently, the tool will reduce the number of physical and digital ways for an attacker to target a user’s device.

The Cupertino company said the feature is aimed primarily at trying to combat attacks from “spyware” sold by NSO Group and other companies, particularly to government-sponsored groups.

When enabled, the “Lockdown Mode” will block link previews, invitations, and FaceTime calls from unknown users. In addition, it will turn off certain web browsing technology by default, shut down wired connections to computers, and more.

Ivan Krstić, Apple’s head of Security Engineering and Architecture, said, “Apple makes the most secure mobile devices on the market. Lockdown Mode is a groundbreaking capability that reflects our unwavering commitment to protecting users from even the rarest, most sophisticated attacks. While the vast majority of users will never be the victims of highly targeted cyberattacks, we will work tirelessly to protect the small number of users who are.”

Krstić further added, “That includes continuing to design defenses specifically for these users, as well as supporting researchers and organizations around the world doing critically important work in exposing mercenary companies that create these digital attacks.”

The new tool will be optional for users of iOS 16, iPadOS 16, and macOS Ventura. Apple will enhance the capabilities of “Lockdown Mode” and introduce more protections for users.

Related:

• Future mid-range iPhones will reportedly not come with Apple’s latest processor: Ming-Chi Kuo
• Apple iPhone 14 might see a major price hike, warns supply chain
• Apple Japan hikes prices of devices by upto 20% due to global inflation and supply

The post Apple Introduces ‘Lockdown Mode’ to prevent targeted cyberattacks on high-profile users appeared first on Gizmochina.

Unisoc, a China-based chip manufacturer, has been able to take advantage of the opportunity presented by the global chip shortage and is now aiming to replace MediaTek in the budget smartphones segment as the Taiwan-based company is focusing on capturing the premium market.

With such a rise, the company also goes through stricter scrutiny. While some of the company’s older chips were marked as a threat vector, now another vulnerability has been found that explicitly affects a Unisoc chip found in three Motorola devices.

According to the report from Checkpoint Research, the Unisoc Tiger T700 chip, which powers the Motorola Moto G20, E30, and E40 smartphones, has been found to have a vulnerability when the cellular modem attempts to connect to an LTE network.

It basically omits the check to make sure that the modem’s connection handler is reading a valid IMSI or similar subscriber ID. When the handler reads a zero-digit field, a stack overflow occurs which can be exploited for a denial of service attack or for remote code execution, blocking the user from the LTE network.

Checkpoint Research notified Unisoc about this last month and the company evaluated it to be of critical risk with a 9.4 out of 10 ratings and promptly patched the issue. Google may pass the patch onto users soon, likely with the new Android security bulletin.

There haven’t been any reports of this flaw getting exploited but this is still a large problem, especially because most Unisoc processors are used in budget smartphones that rarely get new software updates.

RELATED: 

• Motorola teases a phone with 200MP camera launching in July
• Motorola Razr 3 might be the first Snapdragon 8 Plus Gen 1-powered foldable phone
• Motorola Moto G42 with Snapdragon 680 SoC appears on Geekbench
• Motorola rollable display phone codenamed Felix in works
• Motorola Edge 30 launched in India with Snapdragon 778G Plus SoC, 144Hz pOLED display, 6.79mm thickness, and more

The post Motorola smartphones reportedly at risk of hacking with chip-level vulnerability appeared first on Gizmochina.

Zoom Video Communications, the company behind the popular Zoom platform, has agreed to pay $85 million and improve its security practices to settle a lawsuit that claimed that the company violated users’ privacy rights.

The lawsuit alleged that the platform shared users’ personal data with Facebook, Google, and LinkedIn. It also talked about letting hackers disrupt Zoom meetings in a practice called “Zoombombing”, reports Reuters.

In the settlement agreement, the company denied wrongdoing. A preliminary settlement still requires approval by U.S. District Judge Lucy Koh in San Jose, California.

As for the compensation, the subscribers of the platform in the proposed class action would be eligible for 15% refunds on their core subscriptions or $25, whichever is larger while others could receive up to $15.

Apart from monetary compensation, Zoom has also agreed to security measures including alerting users when meeting hosts or other participants use third-party apps in meetings and providing specialized training to employees on privacy and data handling.

Though Zoom collected about $1.3 billion in Zoom Meetings subscriptions from class members, the plaintiffs’ lawyers called the $85 million settlement reasonable given the litigation risks. They intend to seek up to $21.25 million for legal fees.

The usage of Zoom surged during the COVID-19 pandemic as companies and companies, schools, and colleges opted for online meetings instead of in-person conduct. It had 497,000 customers with more than 10 employees in April 2021, a substantial increase from 81,900 in January 2020. But the company says that the user growth could slow or decline as more people get vaccines and return to work or school in person.

RELATED: 

• Zoom acquires cloud call center firm Five9 in an all-cash deal worth $14.7 billion
• Tesla to pay $1.5 million in settlement of a lawsuit related to battery voltage reduction
• Huawei and Verizon agrees to settle patent infringement lawsuits

The post Zoom agrees to settle user privacy and ‘Zoombombing’ lawsuit by paying $85 million appeared first on Gizmochina.

In a recent social media post in China, Tesla addressed the security concerns in China by stating that the cameras on its electric cars are not activated in any region outside of North America.

The Chinese market is the world’s largest car market in the world, and the American car maker has seen great success in the country with its electric vehicles. Although, it faced security concerns in the region, with the local military banning Tesla cars from entering its complexes over security risks. In the social media post, the company said that “Even in the United States, car owners can freely choose whether to turn on its (the camera system’s) use. Tesla is equipped with a network security system with world-leading security levels to ensure user privacy protection.”

The post was shared on its official Weibo account, a Chinese microblogging website. It also arrives after a virtual forum in Beijing in March, in which the company’s founder and CEO, Elon Musk, emphasized the company’s efforts on protecting users’ privacy. The senior official stated that “There’s a very strong incentive for us to be very confidential with any information.”

The executive further added that “If Tesla used cars to spy in China or anywhere, we will get shut down.” At the moment, China is a key region for electric vehicles and various car makers as well. Back in 2020, the region accounted for 30 percent of the company’s global sales of cars. In other words, it is a very important nation for the automobile manufacturer, so it would likely ensure that it meets local security standards.

RELATED:

• Tesla sees a bump in shares after record electric car sales in Q1 2021
• Tesla and hundreds more face security breach, hackers gain access of Verkada security cameras
• India pursues Tesla with incentives like cheaper production costs than China

The post Tesla addresses security concerns in China, says car cameras not activated outside North America appeared first on Gizmochina.

Huawei is working on addressing the various security risks and national security concerns that surrounds it across the globe, as stated by the company’s official in a recent interview.

In a recent interview with Bloomberg, Andy Purdy, chief technology officer of Huawei Technologies Co.’s U.S. operations, stated that it is  currently discussing the ‘prospects’ for the company amid frictions between the world’s two largest economies, the US and China. Last week, the US Federal Communications Commission stated that telecommunications and video surveillance made by five Chinese companies including Huawei “pose an unacceptable risk to the national security.”

Earlier this week, the FCC moved towards banning China Unicom and ComNet from the US entirely. Purdy added that the it also too early to tell if the new Biden administration would be better than the previous one. Furthermore, the executive also added that the company is focusing on its “ability to do business in the United States,” while recognizing the COVID-19 having a major impact on the nation’s economy.

Previously, we had reported on the US government had imposed a new restriction on Huawei suppliers over 5G technology licensing. Furthermore, when asked about its efforts in addressing the allegations regarding the company being a security threat, Andy stated that the firm has made “tremendous developments.” The official said that the company is focusing globally, especially with the European Union, pushing for “objective standards” for telecom operators and equipment suppliers, which the brand hopes would inform the US government and help alleviate the national security concerns the company faces.

RELATED:

• Huawei launches the IdeaHub Board smart screen aimed at smart education and offices
• Huawei Assistant now supports esports, offers news from major gaming events and tournaments
• Huawei Watch Fit Elegant with a metal frame, better straps launched in the UK

The post Huawei working on addressing the security concerns across the globe: Official appeared first on Gizmochina.

Earlier today (1st December 2020), an Apple patent was published by the US Patent & Trademark Office. This new trademark was related to next gen AirPods and future Apple over the ear headphones, which will support a new sensor for bioauthetication.

Looking at the patent, we can observe that the new hearables arrive with various sensors that use self-mixing interferometry signals of a self-mixing interferometry sensor to recognize user inputs. In simpler terms, the devices can map the users’ input through voice commands or silent gesture commands. These sensors might be “used for bioauthentication and/or audio conditioning of received sound or voice inputs to a microphone.”

Editor’s Pick: Apple slapped with €10 million fine in Italy for misleading commercial practices

For those unaware, the silent gesture aspect implies that the device would be able to detect inaudible words forming with the jaw and tongue of the user. In other words, the sensor on the headphones might be able to detect skin deformations and detect any possible commands through it. One of the image also showcased an AR/VR headset from Apple. This headset might feature similar sensors that can detect both voice commands and silent gestures from the user, as per a PatentlyApple report.

The patented bioauthetication circuit and its related processor may be used to store vocie patterns from the user. Meaning, the users voice patterns could be stored locally in the headphones or next gen AirPods and could use learning algorithms to train the security system to better recognize the users’ voice. Unfortunately, this is still just a patent and we have no way of confirming if the company is actually working on such a product at the moment. The feature does seem interesting, although, its real world applications are still at uncertain.

UP NEXT: A 60 foot “Gundam” robot is unveiled in Japan to help invigorate tourism hit by COVID-19

The post Apple patents new biosecurity system for headphones, supports voice commands and silent gestures appeared first on Gizmochina.

Technology giant Microsoft has today announced a new security chip that the company has created in order to protect future Windows-powered computers. The chip, called Microsoft Pluton, will be directly built into future CPUs.

Thus, the Microsoft Pluton chip will be replacing the existing Trusted Platform Module (TPM) chip which is currently used to secure hardware and cryptocurrency keys.

It integrates the chip inside the future Intel, AMD, and Qualcomm processor units. The company says that this will make it far more difficult for hackers with physical access to the system to launch hardware attacks and extract sensitive data.

Microsoft Pluton was first introduced in the Xbox One in 2013, making it more difficult for gamers to hack the console or run pirated games. It was later available to the company’s cloud service Azure Sphere for low-cost IoT devices.

EDITOR’S PICK: Oppo X 2021 unveiled as the world’s first smartphone concept with an extending display

Now, the tech giant is bringing the same technology, with some improvements, to Windows 10-powered computing devices. Unlike existing TPMs which are separate from the CPU, this new Pluton seems like an evolution, backed into a CPU.

David Weston, Director of Enterprise and OS security at Microsoft, said that the new chip is better, stronger, faster, and more consistent TPM. So, features like BitLocker encryption or Windows Hello authentication will transition to using Pluton in the future.

Currently, it’s not known when computers with this new MS Pluton chips will start shipping but as said, brands like Intel, AMD, and Qualcomm have agreed to integrate this chip into their future CPUs. Also, Pluton should be available for building custom PCs and it’s said that support for Linux is coming in the future.

UP NEXT: OnePlus lists adopted ideas from IDEAS 2.0; includes FPS counter, true black dark mode, and more

The post Microsoft introduces Pluton security chip for upcoming Windows computers appeared first on Gizmochina.

Biometric authentication has been in practical and commercial use for years now, with it most commonly appearing in the form of fingerprint or facial features based scanning. Although now, a new method has been discovered that involves mapping the veins in one’s fingers using light and sound, which might even make its way to smartphones.

According to the research team leader Jun Xia, from University at Buffalo, “The 3D finger vein biometric authentication method we developed enables levels of specificity and anti-spoofing that were not possible before. Since no two people have exactly the same 3D vein pattern, faking a vein biometric authentication would require creating an exact 3D replica of a person’s finger veins, which is basically not possible.” In other words, it seems to be practically impossible for any hacker to fake a person’s veins and to pass through this new biometric authentication method.

This development also implies a myriad of possible applications in various consumer grade products as well, like smartphones that have been pushing boundaries with new biometric authentication techniques in recent generations. While the system is currently in development, with a few passing years a miniaturized version might be a possibility, bringing a new form of security to handsets that are practically foolproof. It may even be housed similarly to where current gen in display fingerprint scanners is mounted.

Editor’s Pick: Vivo X50e 5G with Snapdragon 765G, 32MP selfie camera, 48MP quad cameras and 33W charging launched

The technique essentially detects invisible features in 3D and can be used to offer better security to offer protection over personal data and other sensitive documents as well. Biometric authentication techniques based on finger veins aren’t exactly new, but these are generally based on 2D images. The new techniques add another layer of depth with 3D images that significantly increases security, making it a lot harder to fake and makes the possibility of a false positive less likely. So, if a smartphone with this feature launches, its security authentication would be one of the greatest amongst the current generation of smartphones.

The system uses a photoacoustic tomography, an imaging technique that combines light and sound, which was first reported by ScienceDaily. Light from a laser is first used to illuminate the finger, and when hitting this hits the veins, a sound is created which is then detected by an ultrasound detector that uses the information to reconstruct a 3D image of the veins. This solution may change the way OEMs approach security in smartphones in the future and might even be the next generation of the standards that are currently in place.

UP NEXT: Vivo V20 is the first phone to come with Android 11 preinstalled; Pricing for India teased

The post Future smartphones may use new 3D biometric authentication that maps finger veins with light and sound appeared first on Gizmochina.

For the past few years, Apple started included the Secure Enclave chip on its devices as a way to encrypt and secure user data stored on the device. Now, a new exploit has allegedly been found for the chip, putting data of millions of users at risk.

As per the reports, Chinese hackers from the Pangu Team have found an “unpatchable” exploit on the Apple Secure Enclave chip that could break the encryption of the private keys stored on the device.

This is claimed to be unpatchable because the vulnerability is related to the hardware and not software, so there’s nothing Apple can do to fix this issue for the devices that have already been shipped. This also means that hackers need to have physical access to the device in order to do obtain data.

While there are no exact details available about the exploit, but the devices at risk include all the devices running Apple A7 chipset to A11 Bionic chip.

The Team Pangu has found an “unpatchable” vulnerability on the Secure Enclave Processor (SEP) chip in iPhones. https://t.co/9oJYu3k8M4

— Jin Wook Kim (@wugeej) July 29, 2020

EDITOR’S PICK: Apple vendor is reportedly planning to shift iPhone production from China to India

Following devices come packed with Secure Enclave chip:

• iPhone 5s and later
• iPad (5th gen) and later
• iPad Air (1st gen) and later
• iPad mini 2 and later
• iPad Pro
• Mac computers with the T1 or T2 chip
• Apple TV HD (4th gen) and later
• Apple Watch Series 1 and later
• HomePod

For those who are unaware, Secure Enclave is a security-related co-processor that Apple includes in almost all of its devices now as a way of providing an extra layer of security for the user data stored locally on the device.

The data on the device is encrypted with random private keys, which can only be accessed by the Secure Enclave. These keys are unique to the device and are never synchronized with iCloud. The chip also stores keys for passwords, the credit card for Apple Pay, and even biometric data for Touch ID and Face ID.

UP NEXT: Mobile gaming revenue surges 27 percent in Q2 2020; generates $19.3 billion

The post Apple Secure Enclave chip found to have ‘unpatchable’ exploit appeared first on Gizmochina.

Cybersecurity research firm Check Point Research says it found “multiple vulnerabilities” within video sharing app TikTok that demonstrated its insecurity as scrutiny for the Chinese-owned company continues to grow. Check Point found that it was possible to spoof text messages to make them appear to come from TikTok, among other issues.

The post Major TikTok vulnerability could have allowed hackers access users’ private information appeared first on Gizmochina.

OnePlus was recently in hot waters when it was found collecting personally identifiable information for analytics. Now, a new report has surfaced online which could create trouble for the company ahead of its new smartphone launch.

A Twitter user, who goes by the name “Elliot Anderson” (named after the lead character of Mr Robot TV show) has discovered that OnePlus accidentally left in place a diagnostic testing application. He further added that the application can be exploited in order to grant root access which could effectively act as a backdoor.

The mobile application in question is a system app that was made by Qualcomm and customized by OnePlus. Named as EngineerMode, the application is provided by Qualcomm to OEMs for easily testing all hardware components of the device.

Named as “EngineerMode”, the application comes pre-installed on OnePlus devices, including the OnePlus 5, 3T and 3. It is used to run system tests for GPS, vibration, screen brightness, as well as for checking root access and performing a series of automated tests.

When the twitter user decompiled the application, he found that by launching the ‘DiagEnabled’ activity found in the APK with a specified password, the device could actually be rooted. One of the system property allows the user to run ADB as root which enables the user to acquire full root access on the phone without unlocking the bootloader.

The ‘DiagEnabled’ is a Qualcomm made activity so there is a possibility that other Qualcomm devices could possibly be affected by this. To check if your device has EngineerMode installed, go to Settings -> Apps -> Menu -> Show system apps and search for “EngineerMode” in the list.

This appears to be a massive security issue as hackers may find ways to use it to gain access to OnePlus handsets. The developer has said that he plans to release an app for rooting OnePlus devices soon.

Read More: OnePlus CEO Releases Camera Sample Teasing The OP5T’s Amazing Low-Light Performance

Meanwhile, in response to this, Carl Pei, CEO of the company, said that they are looking into the matter. This security issues comes into light just days before the company is set to launch its upcoming smartphone — OnePlus 5T in New York.

(Source)

The post OnePlus Smartphones Comes With A Hidden Backdoor To Root Access appeared first on Gizmochina.

It looks like Googles next Android OS M will check your operating system and give you warnings on start-up to advise if your operating system is deemed unsafe or if it has code running from an untrusted source.

Whilst this will probably appear on Nexus based Roms first, it is worth noting that with Android M google are really looking to up security levels.

The OS will probably display one of the following warning messages to let you know that there could be a problem with your operating system.

This warning lets you know that your device has a different operating system than the one that originally came on your device, depending on whether you changed the OS (If you aren’t sure, you probably didn’t), if you choose to instal a different Rom you can continue to use your device with that operating system.

If however you did not install the different OS you can still continue to use it but google advise that you may have a better experience with the original OS, they also advise that you can contact the device manufacturers support centre for help restoring to the original OS.

This warning lets you know that your device is in an “unlocked” state, meaning that your operating system can’t be checked to make sure that it’s safe to use.

Depending on whether you changed the OS (If you aren’t sure, you probably didn’t), if you choose to instal a different Rom you can continue to use your device with that operating system.

If you unlocked your boot loader you can continue to use your device, however, you acknowledge that your device may be exposed to security risks.

Google recommend that if you aren’t making changes to the OS regularly,  to improve security you should lock the device by running fastboot lock.

This warning lets you know that the operating system on your device has been changed or corrupted and is not safe to use, the device may not work properly and could expose your data to corruption and security risks.

Depending on whether you changed the OS (If you aren’t sure, you probably didn’t), if you choose to instal a different Rom you can continue to use your device, however, you acknowledge that your device may be exposed to security risks.

If you did not change the OS you should not use the device in its current state, Google advise that you should contact the device manufacturers support centre for help restoring to the original OS.

If you choose to ignore the warning messages should go away on their own after about 10 seconds and your device will continue starting up, however if you still see the warning message, you can choose to continue starting up your device by pressing the power button once.

If you’re not comfortable continuing to use the device, you can turn it off by pressing and holding the power button until your device turns off. You can contact the device’s manufacturer for help restoring the original operating system.

What do you think, are you a constant Rom swapper? or do you prefer to stick with original manufacturer roms? is the added security that this may bring worth the annoyance at boot up? or will you be looking for a rom and boot loader for your phone that has been coded to work around this?

Personally I like to try out new roms fairly often and have been impressed with the way rom devs over at XDA have managed to work around Samsungs Knox to enable custom Roms with out flagging up on boot, lets see how they get on with this should it become mainstream with Android M.

Please leave comments below

Regards Shanos

Originally posted on gadgetz.tv

Source google nexus suport

The post Will Android M offer additional protection on boot-up? appeared first on Gizmochina.

Green Bot phone’s may not be as secured as Blackberry, but ensures security of your phone/tablet upto some extent.

If your handset gets stolen .It’s not just the lost phone that can make you worried,but the data stored inside which can prove wrong if it lands into wrong hands.

Thus ,if you are an owner of green bot there are some steps which you should take to ensure data protection for your device and also to track and manage the phone once it’s lost . Here are few security tips if you own an Android phone that can help in securing the data on your phone if not device.

Tip 1:Set up a Phone lock in your device. Devices are inbuilt with several kind of locks to ensure the data like pattern lock, password, pin-code and now  the security is tightening up biometric sensors are equipped in some Flagships, this prove great for the security of your device.

Let the password, pin-lock and pattern lock be tangled one not the basic, from this effectiveness  security in the system enables user to protect their data.

Tip 2:Don’t root your device. It not only avoid warranty but opens the level of access of the system to core point, unless you are a developer and can manage with rooting you should not root. Avoiding rooting increases security as large part of applications can’t gain direct access with-out rooting.

Tip 3:Install a proper antivirus-software, The biggest threat to security in devices is the virus, this is due to open source stuff of Android as any third-party applications can be side-loaded. This helps you to detect vulnerable apps which causes high risk and alerts you.

Many top anti-virus apps are available in play store including AVG,AVASTA,LOOKOUT etc..

Tip 4:Set up sim-lock, from the above tips you can just secure phone data, but what about the data present in the sim-card??Sim-Lock has the answer. Yes when you lock your sim-card your sim-data will be safe. This is because it requires you to input a PIN after changing it to another phone or rebooting the phone, so it provides the required security to your sim contacts and messages.

On top of securing your phone, make sure that you’ve locked your SIM if this is important to you.

Tip 5:Use official app store. We suggest you to download in native app store as Android being an open-source OS we are not aware of the potential danger it may cause as the app doesn’t require checking. Though play store is not free of malicious apps but it ensures some sort of security. These third-party applications may read your personal data available in your phone.

The post Ensure security to your Android phone/tablet appeared first on Gizmochina.