The details on roughly five million credit and debit cards were recently leaked online, putting millions of people at risk of wire fraud, identity theft, and various privacy violations, experts have warned.
Cybersecurity researchers from Leakd.com recently found an unsecured Amazon S3 bucket containing 5 terabytes of screenshots.
Among the screenshots were “unsuspecting users entering sensitive details into too-good-to-be-true promotional forms for fake offers.”
Deliberate data harvestingAs the team explained in a blog post, many people were lured into fake promotional forms, offering things like free iPhones, gift cards worth hundreds of dollars, mouth-watering discounts for various apps and retailers, and so on. They didn’t explain who took the screenshots or how, but they did say that the data that was exposed includes people’s full names, billing addresses, email addresses, phone numbers, and credit card details.
Many of the screenshots also included the logo of Braniacshop, and other “generic names”. “While Braniacshop’s exact role remains uncertain, its connection to the data raises concerns about deliberate data harvesting,” they said.
If you’ve recently shared this type of information in a form that promised free, or ultra-cheap iPhones, $500+ gift cards, or similar, the team advises extra care, especially over the holidays. Potential victims should monitor their financial accounts for suspicious activities, enable alerts with the bank or credit card provider, update their credentials, and be wary of potential phishing attempts.
Furthermore, the team hints that the S3 bucket has not yet been locked down.
“Immediate steps should be taken [by law enforcement] to lock down the exposed information and prevent further access,” its report said, adding that the police should also notify affected individuals.
“We have notified the Amazon AWS Abuse Team about this issue to mitigate the risks for consumers and secure the exposed data promptly,” the report concludes.
You might also likeThat’s right folks, it’s that time of the week again: Microsoft Recall has yet again stumbled straight out of the gate, this time accused of storing personal user data such as credit card details and social security numbers - even with a supposed ‘sensitive information’ filter switched on.
A highly controversial feature originally announced for Copilot+ PCs way back in June, Recall uses AI to effectively take constant screenshots of whatever you’re doing on your computer and arrange those screenshots in a timeline, allowing you to ‘recall’ back to an earlier point by prompting Copilot to search back through your system history.
I wasn’t kidding with that “time of the week” remark, by the way. Just last week we reported that a glitch was stopping Recall from working at all for some users, and literally one week before that we reported a bug with the screenshotting portion of the tool. Before that, it was delayed multiple times due to privacy and security concerns. It’s been far from a smooth rollout, to say the least.
But Microsoft has now officially pushed out Recall for public testing (via the Windows Insider Channel) as an opt-in feature, so naturally some enterprising folks are trying to break it – and our friends over at Tom’s Hardware have had some immediate success.
So what’s the problem with Recall?TH’s Avram Piltch did some in-depth testing with Recall, specifically investigating how the supposed new sensitive data filter worked. As it turns out, it doesn’t work very well at all: across multiple apps and websites, only two online stores were barred from letting Recall screenshot personal details, even when inputting financial information on a custom HTML page with an input box that literally said, “enter your credit card number below.”
Piltch obviously didn’t publish screenshots of his own credit card details, but noted that he did test using his real info and Recall still captured it. However the filter functions (it presumably uses AI to identify private information on-screen), it clearly still needs some work.
Microsoft has made a big deal about Recall's security features, but it's been a rough journey for the new AI feature. (Image credit: Microsoft)Microsoft does say on its blog that it plans to “continue to improve this functionality” and that “you can delete any snapshot in Recall that you don’t want and tell Recall to ignore that app or website in that snapshot going forward”, but as it stands right now, Insiders using the tool are effectively putting their data at risk. The screenshots are encrypted and not shared with Microsoft or any third parties, but keeping an exhaustive record of your PC use like that is basically creating a perfect database for bad actors to nab your personal information from.
Of course, the feature is still technically in testing even if members of the public can access it now, so there’s every chance that by the time Recall hits full release (whenever that ends up being) it’ll have had these kinks fully ironed out. But with so many concerns buzzing around it, I personally don’t think I’ll be using – my memory is just fine, Microsoft.
You might also like...Eufy is preparing to launch its first smart lock with palm recognition, according to newly leaked product specs. Don't want to use a wave of your hand? The upcoming Eufy Security Video Smart Lock S3 Pro will also support keyless entry via voice recognition, mobile app, or a passcode, with a physical key as a backup option for emergencies.
The product specs were shared on the subreddit for Eufy's parent company Anker, and were posted by moderator joshuadwx, who has a strong track record of digging out details of unreleased smart home tech.
It looks like the lock will support the Matter smart home standard, meaning it should be compatible with smart home devices from other brands, and play equally nicely with Amazon Alexa, Apple Homekit, and Google Home. It will also have built-in Wi-Fi, meaning it doesn't need a separate hub to connect to your home network, and can be powered by either four AA batteries or a rechargeable power pack.
First Look: Eufy Security Video Smart Lock S3 Pro from r/anker Seriously handyMost of the best smart locks rely on passcodes and apps, but palm recognition is starting to become more widespread too. At CES 2024, Philips introduced the Wi-Fi Palm Recognition Smart Deadbolt, which can be released using the unique pattern of veins in your hand. This is almost certainly the same technology that will be used by Eufy's new lock
Philips' smart lock can store up to 50 different palm patterns, and includes a proximity sensor that can unlock the door from the inside as you reach towards the handle.
We don't yet know how many hands Eufy's lock will be able to recognize, but according to the leak, it will also function as a video doorbell with two-way audio and a built-in camera. I'll be interested to see how it compares to the best video doorbells in terms of video quality, battery life, and ease of use. So far it appears that the lock only has one camera, meaning it will be able to show you who's calling, but won't offer a secondary view of packages left on your doorstep.
If these details are correct, the Eufy Security Video Smart Lock S3 Pro will probably be among the new smart home devices debuted at CES 2025 in January. TechRadar will be there on the show floor to bring you all the latest news and product reveals, so stick with us to make sure you don't miss a moment.
You might also likeObsidian Entertainment has officially announced The Outer Worlds 2, a sequel to its 2019 hit.
During The Game Awards 2024, the studio unveiled the first look with an action-packed gameplay trailer, confirming a 2025 release for PS5, Xbox Series X, Xbox Series S, and PC. It will also be a day-one release for Xbox Game Pass.
"The call to go beyond the stars is here once again, and it’s bigger, bolder, and more unpredictable than ever," Obsidian said.
The studio was also able to share some extra details about the game's story and direction, calling it a "fresh adventure" set in a brand-new colony.
"In true Obsidian Entertainment fashion, you carve your path through Arcadia, a colony teeming with factions, intrigue, and chaos. It’s also home of skip drive technology and where the fate of the entire colony - and the galaxy - rests.
"As a daring, undeniably good-looking, and questionably competent Earth Directorate agent, you’re tasked with uncovering the source of devastating rifts threatening the entire galaxy... The choice of how to deal with the rifts is up to you."
"Are the rifts the only thing threatening Arcadia? Of course not! That would be too easy," the game description continues. "A factional war between the 'benevolent rulers' known as the Protectorate, a rebellious scientific religious order, and a corporate mega power has the colony torn apart. Each is trying to close or control the rifts for their own good/monetarily profitable needs..."
Obsidian adds that this first-person action-adventure game will lean heavily on role-playing game (RPG) mechanics, confirming it will feature ability points, skill checks in conversations, and crew companions that you can enlist.
You can now wishlist The Outer Worlds 2 on Xbox Series X|S, the Xbox app, Steam, and PlayStation 5.
You might also like...We've been hearing for some time that Apple could finally consign 60Hz phone displays to history with next year’s iPhone 17 lineup, and a new rumor has lent further weight to this claim.
According to a report by Korean news outlet Digital Times (via notable tipster Jukanlosreve on Twitter), LG Display is considering upgrading its LTPO OLED production capability in anticipation of increased orders from Apple in 2025.
For reference, LTPO refers to low temperature polycrystalline oxide, a type of display technology that allows higher and variable refresh rates than a typical OLED or LCD. In smartphones, these displays almost always top out at 120Hz, though some phones (see the Asus ROG Phone 9 Pro) have pushed this figure up to 144Hz and beyond.
Apple brands its LTPO panels as ProMotion displays, which offer a variable refresh rate from 1 to 120Hz. This technology has been used in every Pro-level iPhone since the iPhone 13 Pro, as well as the iPad Pro and MacBook Pro lines.
Whether the base iPhone 17 and rumored iPhone 17 Air will receive ProMotion or instead utilize a fixed 120Hz refresh rate isn’t yet clear. The latter option would almost certainly be cheaper, though the new iPhone Air is expected to be marketed as something of a premium product.
The report adds that the share of iPhones using LG panels could rise from the present 30% to 40% next year, possibly due to rival display manufacturer BOE’s inability to keep up with LTPO demand. In the comments of their Twitter post sharing the story, Jukanlosreve suggests that the majority of iPhone 17 displays will continue to be made by Samsung.
Furthermore, the report quotes market research from UBI Research, which also corroborates the rumored transition to LTPO for all iPhones.
Late to the party The iPhone 16 uses a 60Hz display (Image credit: Apple)Apple is the last major phone manufacturer to produce a flagship device with a 60Hz display, having shipped every base-model and Plus iPhone with a 60Hz panel since the very first iPhone in 2007 – an era this latest rumor suggests may be coming to a close.
I, for one, welcome the rumored change with open arms, having repeatedly chastised Apple for saddling the supposedly premium iPhone 16 with a 60Hz refresh rate (an example of the company's worst habit).
In fact, the upcoming iPhone generation seems to be bringing with it a slew of design changes, both external and internal.
For instance, we recently heard rumors of a new camera module design for the iPhone 17 Pro and even the base iPhone 17, with three cameras mounted in a horizontal bar configuration not dissimilar to that on the Google Pixel lineup.
And a new rumor has surfaced that suggests the iPhone’s internal WiFi and Bluetooth chip, currently produced by Broadcom, will be replaced by a proprietary Apple design with the iPhone 17 lineup.
This may prove to be a double-edged sword, however: as Android Authority notes, the new connectivity chip could offer better efficiency over time at the cost of connection strength and capabilities.
It’s very unlikely that we’ll hear anything official about the iPhone 17 lineup until late next year, when we expect Apple to reveal its next crop of iPhones. Until then, be sure to keep up with our iPhone coverage for the latest updates – and why not check out our list of the best iPhones for a refresher on the top Apple handsets currently available?
You might also likeBoth Intel and AMD have dominated the desktop PC scene when it comes to providing powerful processors for productivity and gaming - and now, Qualcomm could be joining the party, with 2nd-gen Snapdragon X Elite processors potentially making their way to desktop PCs.
As highlighted by Notebookcheck, reliable leaker Roland Quandt has hinted at Qualcomm's new processor coming to desktop PCs as the brand is reportedly testing the SC8480XP (Project Glymur chip codename) with a 120 mm liquid cooling AIO. This assumption comes from the fact that AIOs as such being used for gaming desktop configurations, unlike the cooling mechanisms that would be required in lightweight laptops.
With CES 2025 now only weeks away, we could soon see what Qualcomm has to offer and whether Quandt's prediction is accurate. The 2nd-gen Snapdragon X Elite processors may take advantage of Oryon V3 cores according to Quandt (based on Qualcomm CEO Cristiano Amon's 'next-gen' CPU statements), so there could be a lot to get excited about here.
(Image credit: Qualcomm) Could 2025's CES event be one of the best in years?Considering AMD and Nvidia's presence at CES 2025 and their inevitable reveals of the Radeon RX 8000 series and RTX 5000 series GPUs, Qualcomm's inclusion could easily make this one of the more interesting CES events in years.
While a potential new Snapdragon X Elite processor for desktop PCs could be beneficial for gamers with tight budgets (especially as a second-gen version of the existing X Elite), it's still a little too early to suggest this. On laptops such as the Lenovo Yoga 7x Slim, gaming is possible but certainly not comparable to gaming laptops or handheld gaming PCs, and Qualcomm itself has stated that the X Elite chips are not targeted at serious gamers.
Nonetheless, the Yoga 7x Slim and fellow X Elite laptops come without discrete GPUs - for a desktop gaming PC that has a discrete GPU, a new Snapdragon chip could be promising depending on the improvements made with the new processors; potentially adding to the list of surprises I hope to see at CES 2025. Mind you, I don't want to have to buy a new motherboard...
You might also like...Windows 11’s “suggested actions” menu will soon be a thing of the past, as it’s apparently due to be axed in a future update.
The “suggested actions” menu was introduced to Windows 11 back 2022 and it was designed to provide helpful quick shortcuts and suggested actions when copying information like a phone number or a date. For instance, copying a phone number might suggest apps to make a call, while copying a date could show options to set a reminder or create a calendar event.
This feature now tops the list in Microsoft’s deprecated features documentation, reading:
“Suggested actions that appear when you copy a phone number or future date in Windows 11 are deprecated and will be removed in a future Windows 11 update.”
When Microsoft deprecates a feature, that means it won’t continue to develop it and is (probably) headed towards removing the feature altogether.
(Image credit: Microsoft) Why is "suggested actions" getting cut?The reason for the removal of “suggested actions” that’s speculated by Windows Central is that it probably doesn’t see a lot of use. Not only that, but it appears as if Microsoft already has a replacement feature lined up - a newer tool called ‘Click to Do,’ which will offer suggestions for actions based on context and be powered by AI. ‘Click to Do’ will, however, only be available for newer Copilot+ PCs that have modern hardware for AI capabilities.
If you’re on an older computer, you won’t get a replacement feature in place of “suggested actions” and I imagine the feature will just be removed.
Windows 11 has been on a journey of its own, having had a grand total of 16 features retired from the OS in 2023 alone, often targeting tools that were outdated or saw little use. The year is not quite over yet, but 2024 has had fewer features removed by comparison.
If you feel like you’re going to be impacted by the removal of “suggested actions,” you can get in touch with Microsoft using the Feedback Hub app. My bet is most people won’t notice this change, and, if anything, it’s encouraging to see Microsoft continue to try and streamline Windows 11’s user experience.
You can check out the Microsoft Graveyard, an online project that documents and explains deprecated Microsoft features throughout its history, to see which other features have seen a similar fate.
YOU MIGHT ALSO LIKE...The third-generation Apple TV 4K landed over two years ago, but a successor is finally in the works according to new rumors – and it's likely to benefit from a new Apple-made Wi-Fi and Bluetooth chip.
The new report from Bloomberg journalist Mark Gurman suggests that Apple is on the brink of launching its own combined Wi-Fi and Bluetooth chip, replacing those made by Broadcom that can be found in many Apple devices today. This chip will first find its way into the Apple TV 4K set-top box and the HomePod mini, Gurman claims, which will apparently both launch at some point in 2025.
This type of component is vital to the Apple TV. Wi-Fi allows you to connect the set-top box to the internet in order to download shows, play games, and more. The Bluetooth connection, meanwhile, lets you pair accessories such as remotes and controllers. If successful, the new chip will enable Apple’s smart home devices to “work more closely together and potentially synchronize data more quickly,” Gurman believes.
What other new features could a next-gen Apple TV get? Previous rumors have pointed to an upgraded processor like the A17 Pro (which it'd need for Apple Intelligence features). Respected analysts like Ming-Chi Kuo have also previously suggested that a new Apple TV could also hit a lower price point than the current 64GB model's $129 / £149 / AU$219 tag.
More outlandish rumors in April suggested that Apple could be planning to give a future Apple TV a built-in camera for gesture controls. That would certainly make losing its remote less annoying, but those rumors (also from Bloomberg's Mark Gurman) didn't specify whether or not the tech might be for the next Apple TV or a future version.
Full steam ahead (Image credit: Future)The Apple TV and the HomePod mini are not the only devices set for this new chip. Gurman says it will also come to the iPhone in 2025 and the iPad and the Mac in 2026.
Apple is making a major push into the smart home arena and will launch new products next year, Gurman says, including a home hub with a built-in display and a home security camera, so it makes sense for it to debut a new chip for these products in the coming months.
Apple has long sought more control over the components that go into its devices. This mindset contributed to its drive to develop the chips that became known as Apple silicon, and it’s behind the company’s long-rumored switch away from Qualcomm modems in its iPhones.
But the chip will bring another benefit, Gurman believes: it will be able to power “thinner iPhones and wearable technology” made by Apple. That suggests that the slimline iPhone 17 Air rumored for 2025 could be a direct beneficiary of Apple’s own chip.
It’s not without its risks, though. As with the move away from Qualcomm modems, Apple will have to rely on its own largely untested technology for a critical component in its devices. The iPhone 4’s Antennagate provides ample warnings of what can happen when the wireless technology in people’s devices is disrupted.
But that’s unlikely to slow Apple down. With new devices powered by Apple’s wireless chips just around the corner, we won’t have long to wait to see if they can pass muster.
You might also likeExperts have revealed a discovery of 12 new security vulnerabilities affecting the Skoda Superb III sedan, including flaws which could allow a threat actor to access the vehicle's GPS and speed information, as well as remotely record conversations and access the infotainment screen.
Cybersecurity researchers from PCAutomotive revealed they were able to exploit the vulnerabilities to inject malware into the vehicle without authentication. The security flaws allowed them to to achieve unrestricted code execution and to run malicious code when the unit starts.
In turn, a malicious actor could have taken screenshots of the in-car infotainment screen, or recorded conversations through the microphone - and access live GPS coordinates. This was achieved through a Bluetooth connection with the system, so researchers could not access safety-critical controls like brakes, steering, or accelerators.
Deja VuIf this sounds a little familiar, that's because the group who discovered the vulnerabilities, PCAutomative, were also responsible for the discovery of nine other security flaws which affected the same model of car in November 2023 - also affecting the car’s infotainment unit.
The most recent Skoda vulnerabilities could affect over 1.4 million vehicles, and could affect an even higher number of people if their data was not properly erased before they sold their car on to a second-hand buyer.
Although it’s not difficult to imagine how this could be used to exploit victims in a normal setting, it's even more worrying when you find out that Skoda is a huge supplier for law enforcement vehicles across the globe.
Another manufacturer which supplies police vehicles, Kia, was found earlier this year to have a software flaw that meant hackers could unlock and start any Kia vehicle built after 2013, and could have had similarly wide-reaching consequences.
Via TechCrunch
You might also likeIn a surprise turn of events, CD Projekt Red has unveiled the first official look at The Witcher 4 at The Game Awards 2024, and yes, Ciri is the playable protagonist.
As the first big game announcement of the night, the studio debuted a stunning, six-minute cinematic trailer depicting a short story from the eyes of a now older Ciri as she takes on a witcher contract in a remote village, terrorized for generations by a monster demanding ritual sacrifice.
Previously codenamed Project Polaris, The Witcher 4 is being developed using customized Unreal Engine 5 technology and will mark the beginning of a new Witcher saga starring Ciri.
"We're kicking off a brand-new Witcher saga, this time with Ciri as the heart of the story!” said game director Sebastian Kalemba. "It feels so good to finally be able to say those words - for the longest time we knew that we wanted Ciri to be the protagonist of The Witcher 4; it just felt natural to us and we believe that Ciri deserves it.
"In this game we want to explore what it means to truly become a witcher by following Ciri on her Path. This trailer is a taste of both that, and just how dark and grounded the world of The Witcher can be."
If you're unfamiliar, Ciri is the adopted daughter of Geralt of Rivia, the protagonist of the first three Witcher games. Interestingly, it seems CDPR has canonized The Witcher 3: Wild Hunt's ending, which would see Ciri become a witcher or the Empress of Nilfgaard depending on the player's choices.
Speaking in a recent interview with IGN about the decision to make her the star of the new saga, executive producer Małgorzata Mitręga said that this is a "continuation", and that Ciri was "the very organic, logical choice" as the story has always been about her.
Kalemba expanded on this, saying that choosing Ciri as the main character "was far from roulette. It wasn't random" and that the idea came about in discussions nine years ago.
In terms of what we can expect from the story, Kalemba explained that since Ciri is younger than Geralt, players will be allowed more freedom to shape her character in The Witcher 4.
"She's actually about to become the Witcher,” the director said. “She's about to actually form her own codex, but on her own terms. The way she actually deals with the monsters, the way she deals with quests, the adventures, it's her own unique way. And also I think that she gives more room to be able to tell different stories here and there.
"Of course, we want to give the opportunity for the player to explore more nuance because this is what we do. But she deserves that.”
You might also like...A growing number of companies are now facing AI-accentuated security threats as the technology becomes more widespread, new research has claimed.
A report from Kong found one-quarter of firms claiming they have encountered AI-enhanced security threats, but as many as three-quarters say they’re seriously concerned about them in the future.
Furthermore, more than half (55%) have experienced an API security incident in the past year despite the majority (85%) stating that they’re confident in their organization’s security capabilities.
AI is adding to security threatsWith the prominence of AI security threats rising, so is the devastation caused by them. One-fifth said their organization has experienced an API security incident in the past year than cost them more than half a million dollars.
Around nine in 10 (88%) say that API security is now a top priority, with a similar number (92%) saying they’re taking measures to counter AI-enhanced attacks, however 84% believe that AI and LLMs will make securing APIs more difficult.
Kong CTO Marco Palladino offered some optimism: “The report showcases that API security is being taken seriously as part of overall cybersecurity strategy, but there are still some blind spots that can open an organisation up to threats.”
Speaking about future advancements in artificial intelligence, Palladino said that companies are likely to continue creating vulnerabilities for themselves, therefore understanding the full threat landscape has become paramount for a well-rounded approach.
Many companies are already starting to see success from added investment – nearly half (45%) dedicate at least 20% of their cybersecurity budgets to API security, with API monitoring and anomaly detection tools (63%), API gateway solutions (61%) and API encryption and tokenization (58%) leading the way.
As businesses face increasing AI threats exposing their APIs, it’s clear that prioritizing API security before we lose grip of the issue is a must, with modern principles like zero-trust security set to play an important role in the years to come.
You might also like