A critical vulnerability, allowing for remote code execution (RCE) attacks, has been discovered on multiple D-Link VPN routers.
However, since the models have now reached end-of-life, D-Link will not be issuing a patch - and instead, it urged users to retire the affected devices and replace them with newer, supported models.
The flaw does not have a CVE designation just yet, but the company, as well as the researcher who found the flaw - alias ‘desploit’ - will not be releasing any details about it, to give affected customers enough time to react. In any case, once word gets out, cybercriminals will definitely start scanning for vulnerable routers, so if you’re using one of these models, make sure to replace them as soon as possible:
DSR-150
DSR-150N
DSR-250
DSR-250N
D-Link said that both hardware and firmware for these devices have expired, and workarounds are not recommended:
"The DSR-150 / DSR-150N / DSR-250 / DSR-250N all hardware versions and firmware versions have been EOL/EOS as of 05/01/2024. This exploit affects this legacy D-Link router and all hardware revisions, which have reached their End of Life [...]. Products that have reached their EOL/EOS no longer receive device software updates and security patches and are no longer supported by D-Link US,” D-Link said in a recent security advisory.
"D-Link strongly recommends that this product be retired.”
Routers, being the gateways of all internet traffic on a local network, are usually the first thing criminals will try to compromise in their attacks. End-of-life devices with known critical vulnerabilities, especially RCE, are considered low hanging fruit.
Furthermore, the affected device versions are often used in homes and small businesses, according to a recent BleepingComputer report. That makes them an ideal target for malware deployment, distributed denial of service botnets, and possibly even ransomware attacks.
Via BleepingComputer
You might also likeIf you’ve used a computer, it’s almost certain you have used Microsoft Word.
The aptly named word processor is one of the most influential computer programs in history. From schools to businesses, it’s become a daily part of life for millions of users around the world.
Word rose to global ubiquity because it offered something unique. It was the first word-processing software to embody what Microsoft described as the WYSIWYG (What You See Is What You Get) design philosophy.
The idea that what-you-see on the screen is what-you-get if you pressed print is taken for granted in the modern world. But it was a game changer at the time. Within a decade of its official release, Microsoft Word captured a 90 percent share of the word-processing market – officially marking itself as the one of the most successful software products of all time.
Last week, on October 25th 2024, Microsoft Word turned 41. It’s been a long time since it changed the game by delivering WYSIWYG. So what does the future hold for the world’s most popular processor?
Processing a milestoneChange is on the horizon for Word. But it’s not because we don’t need word processing software anymore.
Digital documents exist at the foundation of daily work for about 1.2 billion people. Knowledge workers - professionals who generate value for their organizations through expertise, critical thinking and interpersonal skills - use documents every day. The majority need some form of business document to turn the work they do into deliverable value.
So what’s changing?
Humans still need processors like Word. But in the era of Artificial Intelligence (AI) and automation - word processors no longer need humans as they have before. The practitioners (us) are being disrupted, rather than the processors. And this is a good thing.
Knowledge is powerBig businesses are the product of many small processes. But small processes can take a big toll on people.
Repetitive tasks not only negatively impact a business by absorbing hours of time from experts - but also reduce the happiness and productivity of employees. And this is why there is such a buzz around AI and Generative AI (GenAI) for businesses. AI could add £119 billion to the UK economy in workplace productivity alone by saving professionals up to 2.9 hours per day according to new research
AI and Generative AI (GenAI) is immensely powerful. But it isn’t anywhere near capable of doing what knowledge workers do - which requires human nuance, understanding and a deep appreciation of context. Knowledge workers solve unique problems every day. AI is only effective when it is supplied with large amounts of accurate information and context.
However - there are areas in which AI and automation excels.Manually managing knowledge and driving value through processors like Word is a time consuming - but critical - daily task for professionals around the world. New technology platforms are filling the gap between AI and human knowledge work by automating document generation.
The impact of this is twofold. Firstly, by increasing the efficiency with which employees can complete small tasks, experts can get on with the stuff that delivers real value. Secondly, businesses themselves reduce the potential risk caused by human error - saving money and protecting reputation.
Banks, for example, are built on documents. Every financial institution has huge libraries of records, sales sheets, applications, and more. There’s a lot of information - and no margin for error. Consequently, UK banks and fintechs spend £21.4k per hour fighting financial crime and fraud, pushing the UK’s annual compliance bill to £38.3bn.
We’re entering the second wave of AI innovation. (Which may not be as exciting or flashy as the first). But in this era it is clearer exactly where AI and automation can have the greatest impact: allowing knowledge workers to focus on the things that drive value - and empowering businesses to become more efficient and secure.
Getting your docs in a rowKnowledge workers - whether working in a bank, or a law firm, or a consultancy - have been forced to become masters of tools like Microsoft Word. To construct a building, an engineer would first have to lay the foundation with documents.
But this is no longer necessary.
Microsoft Word turns 41, and it isn’t at risk of becoming defunct. But its future looks entirely different to its past. Document work is becoming automated. And this means us, the users, are being set free. Or maybe it’s Word that is being set free from us. Documents are here to stay. But document work is not.
We list the best Microsoft Office alternatives.
This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro
The emergence of artificial intelligence (AI) and blockchain technology marks a pivotal moment in digital innovation, offering unprecedented opportunities to transform industries. When combined, they can not only enhance operational efficiencies but also address some of the most pressing challenges facing modern enterprises dealing with data at scale: data reliability and integrity.
AI relies heavily on data to learn and make decisions. However, the quality of that data is paramount. In an era where misinformation and data integrity issues abound, blockchain technology offers a robust solution. By providing a decentralized ledger that ensures data is tamper-proof and immutable, blockchain can help enhance the reliability of the data fed into AI systems.
Reducing AI hallucinationsOne of the most significant challenges AI systems face is the phenomenon known as "hallucinations"—instances where AI generates responses that are inaccurate or entirely fabricated. These issues often stem from poor data quality or lack of verifiable sources, such as when AI models have gorged themselves on too much fast food data sources like forums, social media and blogs, where humor, gossip and misinformation abounds, or when they train on synthetic data produced by AI itself.
It’s like at the end of the first Matrix movie, when Neo dives into Agent Smith, who absorbs him, but then explodes. AI has to be careful what it consumes. Without quality data, Large Language Models risk “model collapse”. Here, blockchain proves invaluable.
Blockchain’s inherent properties of data integrity and immutability play a crucial role in mitigating risks associated with AI systems. By utilizing a decentralized ledger, these systems can access verified data, significantly reducing the likelihood of inaccuracies. Furthermore, unboundedly scalable blockchain technology can efficiently handle large volumes of transactions, making it well-suited to support AI tools that require real-time data. This ensures that the information used by AI is both accurate and trustworthy, ultimately enhancing the reliability of AI-driven insights and decisions.
Recognizing and rewarding creatorsAs AI technology continues to advance, the need to recognize and reward content creators becomes increasingly critical. Blockchain can play a role in this respect by facilitating micro-payments that reward creators directly for their contributions.
With smart contracts on a blockchain, payments can be automated and executed instantly when predefined conditions are met, ensuring creators receive fair compensation for their work. This transparency fosters a more equitable digital ecosystem, allowing artists, writers, and developers to benefit from their creations without the interference of intermediaries. This points to the potential for a brave new “creator economy 2.0” era. Similar to how the music industry was initially disrupted by piracy and file-sharing, before evolving for a new age with streaming services and monetizing live performances. So too can the creator economy evolve in this new era of AI models, by baking in financial rewards when creative content is featured in AI training data, similar to some of the early deals now starting to be struck between major media houses and AI foundational model owners.
Moreover, blockchain can help safeguard creators' rights by recording ownership and usage rights for their content. This is particularly important in the context of AI, where data from various sources is often aggregated to train models. For creators who wish to maintain control over their work, blockchain provides a way to prevent unauthorized data trawling and ensure that their content is used in compliance with their terms.
Smart contracts & automationThe integration of AI and blockchain also enables the development of smart contracts—self-executing contracts with the terms directly written into code. AI can trigger these smart contracts, automating processes that traditionally require human intervention. This automation not only streamlines operations but also enhances transparency, as all transactions are recorded on the blockchain and accessible to relevant parties.
For example, in supply chain management, AI can analyze data to predict demand and trigger smart contracts that automatically adjust orders with suppliers. This leads to more responsive and efficient supply chains, reducing waste and ensuring that resources are allocated where they are needed most.
Moreover, smart contracts can facilitate compliance by automatically enforcing regulations and protocols. In industries like finance and healthcare, where adherence to strict guidelines is essential, this capability can significantly reduce the risk of non-compliance.
IPv6, blockchain, and MetanetThe future of the internet lies in the convergence of several technologies, including AI, blockchain, and IPv6. The introduction of IPv6, with its vastly increased IP address space, opens up opportunities for connecting an unprecedented number of devices. When combined with unboundedly scalable blockchain tech, this can lead to the creation of Metanet—a new internet framework that ensures data security and integrity.
In Metanet, devices can communicate securely and efficiently, leveraging the advantages of blockchain to verify identities and transactions. AI and machine learning can further enhance this ecosystem by providing intelligent insights into data patterns and behaviors, facilitating smarter and more secure interactions.
This integration promises to reshape industries by enabling real-time data sharing and collaboration among devices and users, ultimately fostering innovation and driving economic growth. With blockchain ensuring security and transparency, and AI providing actionable insights, the potential for creating new business models is limitless.
A truly scalable blockchain that can process over a million transactions per second will enable cost-effective and intermediary-free microtransactions, enabling new forms of digital commerce and restoring the internet’s original promise of a truly peer-to-peer platform.
The convergence of AI and blockchain represents a transformative shift in the digital landscape, driving future digital transformation. By addressing data reliability issues, recognizing, and rewarding creators, automating operations through smart contracts, and reshaping the internet, these technologies hold the key to a more secure, efficient, and equitable digital future.
As we continue to explore these possibilities, it’s clear that the synergy between AI and blockchain will not only enhance operational efficiencies but also help in building trust in the data-driven world we inhabit.
We've listed the best small business apps.
This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro
A Swiss church is trying a new way of connecting with Jesus in the confessional. It uses AI to simulate the personality of the 1st-century Galileleean for visitors as part of a religiously themed art project called Deus in Machina (God in a Machine). The digital simulacrum of Jesus Christ engages with visitors and offers spiritual guidance based on what people say.
If you enter the confessional, you'll see the AI Jesus displayed on a screen. The decidedly Swiss-looking man from the Roman-run Middle East of two millennia ago listens to people voice their questions or concerns. The AI model underlying the simulation was built by a team from the church working with the Immersive Realities Research Lab at the Lucerne University of Applied Sciences and Arts using the New Testament as the basis for how Jesus thinks and speaks. So far, it's performed well.
"AI fascinates us. But it also has its limits and raises ethical questions," St. Peter's theologian Marco Schmid explained in a statement (translated from German by Google). "In all previous tests, his answers have matched our theological understanding of St. Peter's Chapel."
Reach out and touch faithThe video of people reacting to AI Jesus shows some mixed reviews. One parishioner expressed surprise at how easy it was and how good the advice they received was. Another said it was very generic and not very impressive. A disagreement over religious interpretation suggests AI Jesus is performing exactly as it should. Now that AI Jesus is here, the question is, what comes next?
If you want to experience the other side of the religious experience, you can try Social AI, an entire universe where you are the only real person, and everyone you talk to is just an AI character. Or you could go for being a kind of priest yourself for the traumatized AI personalities you encounter at Friend.com. If you're truly uncertain about how to use AI ethically in a religious context, you can always ask the Pope. He and IBM have put together a whole guide for ethical AI use.
You might also like...Quordle was one of the original Wordle alternatives and is still going strong now more than 1,000 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today – or scroll down further for the answers.
Enjoy playing word games? You can also check out my Wordle today, NYT Connections today and NYT Strands today pages for hints and answers for those puzzles.
SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.
Quordle today (game #1031) - hint #1 - Vowels How many different vowels are in Quordle today?• The number of different vowels in Quordle today is 5*.
* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).
Quordle today (game #1031) - hint #2 - repeated letters Do any of today's Quordle answers contain repeated letters?• The number of Quordle answers containing a repeated letter today is 1.
Quordle today (game #1031) - hint #3 - uncommon letters Do the letters Q, Z, X or J appear in Quordle today?• Yes. One of Q, Z, X or J appears among today's Quordle answers.
Quordle today (game #1031) - hint #4 - starting letters (1) Do any of today's Quordle puzzles start with the same letter?• The number of today's Quordle answers starting with the same letter is 0.
If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:
Quordle today (game #1031) - hint #5 - starting letters (2) What letters do today's Quordle answers start with?• M
• T
• B
• L
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
Quordle today (game #1031) - the answers (Image credit: Merriam-Webster)The answers to today's Quordle, game #1031, are…
There are not many words in the Wordle/Quordle dictionary that end in a Z. There's BLITZ, GLITZ, HERTZ, WALTZ, WHIZZ and TOPAZ – and I think that's probably it. Spotting the latter today may therefore have been a tricky task, because your brain won't want to have considered it. 'No, no, it will have said to you. Zs don't end words, surely it will be an N or a Y or an R or a T?' But when all probable answers are ruled out, you have to move to the improbable – and so it was today.
That's one of a couple of potentially difficult words in today's game. MINTY could be NINTY too, while LAPEL has a repeated L and BRUSH could be CRUSH. You'll have needed to work hard to solve them all, in short.
How did you do today? Send me an email and let me know.
Daily Sequence today (game #1031) - the answers (Image credit: Merriam-Webster)The answers to today's Quordle Daily Sequence, game #1031, are…
Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.
Want more word-based fun? Then check out my Wordle today, NYT Connections today and Quordle today pages for hints and answers for those games.
SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.
NYT Strands today (game #262) - hint #1 - today's theme What is the theme of today's NYT Strands?• Today's NYT Strands theme is… For our furry friends
NYT Strands today (game #262) - hint #2 - clue wordsPlay any of these words to unlock the in-game hints system.
• Re-tail therapy?
NYT Strands today (game #262) - hint #4 - spangram position What are two sides of the board that today's spangram touches?First: left, 5th row
Last: right, 2nd row
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
NYT Strands today (game #262) - the answers (Image credit: New York Times)The answers to today's Strands, game #262, are…
I own a dog and a cat, or rather they own me, given that I spend my money on food, treats and other assorted PETSUPPLIES for them. And what do I get in return? Well, actually, from the dog, a lovely chocolate labrador, I get unconditional love. From the cat, meanwhile, I get… well, I get the honor of buying it food and treats and assorted PETSUPPLIES, and the sense that I should be very happy with that and nothing more.
Anyway, this is a subject I'm all-too familiar with, so finding all of the answers was not a great problem. I spotted LITTER and BONE while I was hunting for hints to use in this column, then once I knuckled down and tried properly I got the likes of COLLAR and KIBBLE with no issues. It was one of the easier Strands puzzles (and few are that hard, to be honest).
How did you do today? Send me an email and let me know.
Yesterday's NYT Strands answers (Tuesday, 19 November, game #261)Strands is the NYT's new word game, following Wordle and Connections. It's now out of beta so is a fully fledged member of the NYT's games stable and can be played on the NYT Games site on desktop or mobile.
I've got a full guide to how to play NYT Strands, complete with tips for solving it, so check that out if you're struggling to beat it each day.
Good morning! Let's play Connections, the NYT's clever word game that challenges you to group answers in various categories. It can be tough, so read on if you need clues.
What should you do once you've finished? Why, play some more word games of course. I've also got daily Wordle hints and answers, Strands hints and answers and Quordle hints and answers articles if you need help for those too.
SPOILER WARNING: Information about NYT Connections today is below, so don't read on if you don't want to know the answers.
NYT Connections today (game #528) - today's words (Image credit: New York Times)Today's NYT Connections words are…
What are some clues for today's NYT Connections groups?
Need more clues?
We're firmly in spoiler territory now, but read on if you want to know what the four theme answers are for today's NYT Connections puzzles…
NYT Connections today (game #528) - hint #2 - group answersWhat are the answers for today's NYT Connections groups?
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
NYT Connections today (game #528) - the answers (Image credit: New York Times)The answers to today's Connections, game #528, are…
I seem to be making quite the habit of guessing groups with one connection in mind, only to get it right even though the answers were all linked by something different. I had two of those today: purple and blue, although in both cases I was halfway there.
Taking purple first, I put PYRAMID, LADDER and CHAIN together as things that humans might form into. I tried MUDDLE along with them – don't judge me, it was just a guess – and when that was wrong turned to TREE, which proved to be correct. I was on the right lines: the actual connection was ORGANIZATIONAL STRUCTURES, METAPHORICALLY.
For blue, I had a feeling that GARNISH, STIR and STRAIN went together as things you did to food, and thought maybe MUDDLE was also connected; do you muddle a salad maybe? Maybe not! But it was right anyway, though the connection was actually COCKTAIL-MAKING VERBS. Lucky me.
How did you do today? Send me an email and let me know.
Yesterday's NYT Connections answers (Tuesday, 19 November, game #527)NYT Connections is one of several increasingly popular word games made by the New York Times. It challenges you to find groups of four items that share something in common, and each group has a different difficulty level: green is easy, yellow a little harder, blue often quite tough and purple usually very difficult.
On the plus side, you don't technically need to solve the final one, as you'll be able to answer that one by a process of elimination. What's more, you can make up to four mistakes, which gives you a little bit of breathing room.
It's a little more involved than something like Wordle, however, and there are plenty of opportunities for the game to trip you up with tricks. For instance, watch out for homophones and other word games that could disguise the answers.
It's playable for free via the NYT Games site on desktop or mobile.
The long-awaited release of GIMP 3.0 is coming, according to the team behind the open source Photoshop alternative.
The GNU Image Manipulation Program, previously known as the General Image Manipulation Program, unveiled a release candidate version of the platform on November 6.
“We are very excited to share the first release candidate for the long-awaited GIMP 3.0,” the developers said in a blog post announcing the release. “We’ve been hard at work since our last development update to get this ready, and we’re looking forward to everyone finally being able to see the results.”
GIMP 3.0 releaseThe announcement follows years of speculation over the release of the latest version of the Photoshop-style tool, with GIMP 2.0 released in March 2004.
Since then, there have been frequent updates, including GIMP 2.4X and 2.6X in 2007, 2.8X in 2022, and the most recent release, GIMP 2.10X, from 2018 until now.
The developers behind the tool said the software version is nearing completion and set to be released to the community after final testing and bug testing has been completed.
“If user feedback reveals only small and easy to fix bugs, we will solve those problems and issue the result as GIMP 3.0,” the developers said.
“However, we hope and expect a much larger audience to try out 3.0 RC1 - including many people who have only been using 2.10 up until now."
“If larger bugs and regressions are uncovered that require more substantial code changes, we may need to publish a second release candidate for further testing.”
What this means is that, providing there are no significant issues flagged by users, the release of GIMP 3.0 could be imminent, or at least within the next few months.
What to expect with GIMP 3.0So, what can users expect to see with the new release? First off, there’s a new logo, designed in collaboration between Aryeom and other contributors.
Developers said the iconic Wilber logo, which was created by Jakub Steiner for GIMP 2.6 in 2008, remains a “fantastic logo”, but “design trends have changed a bit in the last sixteen years”.
Elsewhere, the interface will remain recognizable for many users but has been given a bit of TLC, enabling it to better scale to high-resolution displays. A raft of icons have also been converted to scalable vector graphics as well, improving the overall quality and scalability of assets.
“One of the major improvements from the GTK3 port is that the vector UI icons now scale more cleanly based on your preference settings,” developers said.
“Our Legacy icon theme was mainly raster PNGs however, so it could not take advantage of the GTK3 scaling system. Contributor Denis Rangelov took on the extensive challenge of recreating the Legacy tool icons as SVGs.
Notably, the biggest changes in GIMP 3.0 are on the backend and will help improve plugin compatibility for users still relying on older versions of the platform.
Similarly, a public GIMP API has also been built to allow users to port GIMP 2.0 plugins and scripts to the newer version.
“Another task that had to be finished before the 3.0 release was finalizing the public API.”
“Since the API is now stable, plug-in and script developers can begin porting their 2.10 scripts based on this release.”
You might also likeA recent report by software testing provider TestDevLab has claimed Zoom is leading the way when it comes to AI, good news for a company that has invested so heavily in AI recently.
The study found video conferencing software from Zoom outperforms key rivals, such as Microsoft Teams and Cisco Webex, in areas like transcription accuracy, meeting summaries and conversational AI.
The news comes less than a month after Zoom announced version 2.0 of its AI Companion, which includes new capabilities like expanded context, information synthesis and the ability to take action.
Zoom claims to be better at AI than Teams, WebexThe report claimed Zoom achieved the lowest Word Error Rate (WER) in meeting transcriptions, scoring 7.40% compared with 10.16% for Webex and 11.54% for Teams, which means it has greater accuracy when it comes to keeping records.
Similarly, but with less of a distinction, Zoom outperformed Teams and Webex in terms of transcription evaluation and meeting summarization.
Speaking about the AI-generated summaries, the researchers said: “Strengths include objectivity and a clear listing of action items, while minor improvements could be made in providing a bit more context for certain terms and ensuring full completeness by covering some minor sub-discussions.”
The company also excelled in conversational AI, delivering responses in 4716.1 milliseconds on average – nearly twice as fast as Microsoft Teams (9269.9 milliseconds).
TestDevLab also analyzed prompt response stability, defined as the ability of all participants to receive a similar answer, and found that Zoom (96%) outperformed Teams (89%) and Webex (84%) by a healthy margin.
You might also likeCybersecurity researchers has revealed that for months now, Fortinet’s Windows VPN client has been vulnerable to a flaw which allows threat actors to steal user credentials - and Chinese hackers have reportedly now started exploiting the bug and stealing the data.
Experts from Volexity have published an in-depth report on a piece of malware called DeepData. This malware was used by a Chinese threat actor known as BrazenBamboo to steal login credentials, and VPN server information from Fortinet VPNs.
As the experts explain, after a user logs into the VPN, user credentials remain in process memory. DeepData can find and decrypt JSON objects in the client’s process memory, effectively stealing the information. As a final step, DeepData can exfiltrate the information to a server under the attackers’ control.
BrazenBambooVolexity found the vulnerability in early July 2024, and reported it to Fortinet. The company acknowledged the issue on July 24, however, it never acted on the findings, and the vulnerability is still unresolved. It was not even assigned a CVE number, and there is no indication when a fix might be available, if ever.
The findings are disturbing since Fortinet’s VPNs are used by many organizations of all sizes, all across the world. By obtaining login credentials, cybercriminals can gain access to company networks, which allows them to move laterally, steal more information, and potentially even deploy ransomware.
Until a patch is made available, Volexity advises users to restrict VPN access, and keep both eyes peeled for unusual login activity.
BrazenBamboo seems to be a state-sponsored threat actor, meaning it’s on China’s payroll. The researchers believe the group was the one to develop three known malware families, Lightspy, DeepData, and DeepPost. Unlike North Korean groups, who don’t shy away from deploying ransomware or other destructive malware, Chinese groups are mostly interested in cyber-espionage, and as such are usually trying their best to remain hidden for as long as possible.
Via BleepingComputer
You might also likeSigma has just announced its first four prime lenses for Canon's hobbyist RF-mount cameras – and they're a long-awaited boost for models like the Canon EOS R7 and EOS R10.
Until recently, Canon had courted controversy for keeping its RF-mount closed to third-party manufacturers. That finally changed back in April, and today, we're seeing the fruits of that decision with four new APS-C prime lenses with bright f/1.4 apertures.
Those lenses are the 16mm f/1.4 DC DN (ideal for street and travel), 23mm f/1.4 DC DN (an all-rounder equivalent to 37mm on full-frame), 30mm f/1.4 DC DN (perfect for tighter street photography), and 56mm f/1.4 DC DN (a great new option for portraits).
While Sigma previously announced two zoom lenses for the RF Mount – the 10-18mm f/2.8 DC DN and 18-50mm f/2.8 DC DN – this quartet of prime lenses is a little more exciting and greatly improves the options available for Canon's APS-C mirrorless cameras.
APS-C sensors are smaller than full-frame equivalents, so they are typically found in more affordable, hobbyist camera bodies. In Canon's lineup, models like the Canon EOS R10 and EOS R7 have in-body image stabilization (a handy feature because none of Sigma's new lenses are optically stabilized).
As usual, Sigma's new lenses promise to offer pretty good value and are available to pre-order now. The 16mm f/1.4 DC DN is priced at $489 / £389 and the 23mm f/1.4 DC DN costs $599 / £479, both available from January 23. The 30mm f/1.4 DC DN ($369 / £319) and 56mm f/1.4 DC DN ($529 / £419), meanwhile, will go on sale a little earlier on December 5.
What about full-frame Canon cameras? The Canon EOS R7 (above) has an APS-C sensor, but Canon hasn't shown any inclination to open up its full-frame cameras to third-party lenses – yet. (Image credit: Future)These four Sigma lenses might be largely identical to the ones announced for Nikon Z cameras in February 2023, but they're still a big bonus for anyone who owns (or is looking to buy) an APS-C Canon camera.
Canon fans have been starved of the lens choice enjoyed by Sony and Fujifilm shooters, whose mounts now offer a wide range of third-party options from the likes of Viltrox, Tamron and Sigma.
But these new Sigma primes, which are particularly appealing for street, travel, and portrait shooters, mean Canon cameras are finally playing catchup with their rivals on the lens front – at least the models with APS-C sensors are.
The bad news is that Canon doesn't appear to encourage a similar openness for the best full-frame cameras in its lineup. There's been no news or comment on similar lens options arriving for the Canon EOS R5 II, which means those cameras will continue to miss out on some of the more exotic and good-value glass enjoyed by rivals.
That isn't necessarily a deal-breaker for everyone and didn't stop the EOS R5 Mark II from pipping Nikon to our Camera of the Year award, but it is something to consider depending on your shooting needs and taste in lenses.
You might also likeEarlier today at Ignite, Microsoft CEO, Satya Nadella, pulled the curtain on a new AMD processor destined to become the most powerful CPU to run on its Azure cloud computing infrastructure, one that comes with a few surprises. You can request a preview access to the Azure HBv5 VMs by filling this form.
The 9V64H is a custom made, 4th generation EPYC server CPU, not one based on the latest 5th generation one, codenamed Turin. It has 88 cores and clocked at up to 4GHz; the closest existing model is the 9634, an 84-core CPU with a top speed of 3.7GHz.
According to Fernando Aznar, HPC + AI Product Marketing Manager at Microsoft, it will focus on “most memory bandwidth-intensive HPC applications, such as computational fluid dynamics, automotive and aerospace simulation, weather modeling, energy research, molecular dynamics, computer aided engineering”. But no word on AI.
What makes the CPU so special is that a cluster of four of these, as part of Azure HBv5 VMs (set to be launched in 2025), it has access to up to 450GB of RAM, in that case HBM3, with a combined memory bandwidth of nearly 7.0TBps.
That’s more than the AMD Instinct MI300A accelerator sans the GPU part (24 cores, 3.7GHz peak, 128GB HBM memory, 5.3TBps peak performance) and almost an order of magnitude higher than the rest of the competition (including AMD’s own).
A very unique CPUBut there’s more to it: this is AMD first quad-socket project which is an interesting take on what AMD told me earlier this year when I interviewed Robert Hormuth, the company’s corporate vice president, architecture and strategy.
Clearly, single socket is where the market is going, except when there’s a clear case - and a hyperscale client with near unlimited funds - to go for quads.
Microsoft also confirmed that the chip is SMT-disabled (just like the Zen 4c and Zen 5c parts) and the VM will be able to access a staggering 3.17TB of memory (up to 9GB per core).
And while this is a co-engineered chip, Microsoft is firmly at the helm as it enlisted Nvidia, AMD’s archnemesis, to provide with the industry-leading Quantum-2 Infiniband networking technology to keep CPUs fed with bits (800 Gb/s, split evenly between four CPUs).
This Microsoft says, will allow customers to “efficiently scale their workloads to hundreds of thousands of cores” if needed.
I was also intrigued by the mention of a 14TB local NVMe SSD that delivers up to 50GB/s read and 30GB/s write performance, which is far superior to anything out there that uses PCIe Gen5 technology and can only be achieved using specialist hardware like Highpoint’s Rocket 1608A add in storage card.
More from TechRadar ProCybersecurity researchers have found threat actors are increasingly using DocuSign impersonations to target businesses who interact with state and municipal agencies.
Research by SlashNext found attacks have spiked 98% compared to the previous two months, with hundreds of instances are being detected daily, and tactics are outpacing detection methods. Many of these are specifically impersonating government entities to exploit pre-existing trusted relationships between businesses and regulatory bodies.
Researchers found impersonations of the Department of Health and Human Services, the Maryland Department of Transportation, the State of North Carolina’s Electronic Vendor portal, the City of Milwaukee, the City of Charlotte, the City of Houston, and the North Carolina Licensing Board for General Contractors.
High stakes signaturesAs with most scams, the criminals created a false sense of urgency in victims. In one instance, a North Carolina Commercial contractor received a notice that their $12 million hospital construction project was at risk of immediate shutdown due to a compliance issue. The notice demanded an $85,000 ‘emergency compliance bond’ to prevent work stoppage.
As well as the financial loss, vendors face business disruption and sensitive data loss from the false contracts.
Businesses that hold a number of government contracts may be inundated with communications and contracts, but it’s important to stay vigilant and double check emails with inaccurate pricing or industry specific terminology as an indicator of inauthenticity.
“For businesses, the most important approach to defend against these fraudulent attacks is to spread awareness within the organization, to upskill and empower all workers to identify attacks at the earliest possible stage.” said Matt Aldridge, Principal Solutions Consultant at OpenText Cybersecurity.
“Beyond this, it is critical that inbound communications are thoroughly screened before being presented to users, be they emails, SMS, or even old school postal and fax communications”
You might also likeAndroid 15 was only pushed out to Pixel phones last month, but Google isn't hanging around when it comes to Android 16: the developer preview is now live, so app makers can start getting to grips with the 2025 software update.
These previews give developers the chance to get their apps ready for the full release of Android 16, and they evolve over time – so right now, there's not a whole lot in the way of new features we can tell you about.
What Google has said is that Android 16 will enable users to give apps access to a selected number of photos and videos in their phone library if they prefer, rather than everything (which is how it works on iOS). The foundations are also being laid for improvements to health record syncing across apps and devices, with user permission.
Speaking of privacy, the Privacy Sandbox part of the mobile operating system is getting updated for Android 16. Essentially, it will mean we get more control over the data that apps can access, and how this data can be shared between apps.
Here's what's coming The Pixel 9 Pro XL will be one of the first phones in line for Android 16 (Image credit: Future | Alex Walker-Todd)Android 16 may seem light on new features now, but it's early days: expect to hear more about major upgrades when the public beta launches in January 2025, and at the Google I/O 2025 event that should be happening in May 2025.
Changes rumored to be coming with Android 16 include more user control over the Do Not Disturb mode, improved security features, and a different way of accessing Quick Settings. We might also see the iPhone's Dynamic Island idea transferred to Android devices, giving app makers a different way to present live information.
We already know that Google wants to get the software out by mid-2025, which is earlier than normal. The shift is to "better align with the schedule of device launches across our ecosystem, so more devices can get the major release of Android sooner," Google says.
Android 15 was actually finished several weeks before it started showing up on phones, which doesn't usually happen – and it's clear Google doesn't want a repeat next year, with the Google Pixel 10 most likely showing up sometime in August 2025.
You might also likeThe best standing desks undoubtedly offer numerous health and productivity benefits, promoting better posture, reducing sedentary time, and boosting energy levels throughout the day.
Built by Japanese design firm COFO, the JSF Table provides a versatile four-legged height-adjustable desk that seamlessly transitions between standing and sitting modes while also serving as a dining table and low table.
Created in collaboration with Journal Standard Furniture and funded through Makuake, a popular Japanese crowdfunding platform similar to Kickstarter or Indiegogo, this multifunctional desk brings both style and adaptability to modern spaces.
Choice of sizes and colorsThe COFO JSF Table’s height adjustment ranges from 62.5cm to 99.4cm, and once a comfortable position is found, it can be easily returned to using the built-in LED display, which shows the desk's current height. Equipped with a quad motor, the table provides smooth and stable height changes at a quiet 32mm per second, ensuring that drinks and other items remain undisturbed during adjustments.
In addition to its ergonomic design, the desk includes COFO’s magnetic storage system, allowing users to arrange items according to their needs.
Alongside magnetic hooks, a new slim drawer offers storage for small items like stationery, smartphones, tablets or thin laptops. This drawer can also be used to store placemats and cutlery when the desk is used for dining.
The design features three built-in USB ports - two Type-C (10W) and one Type-A (18W) - located close to the desktop for easy charging of devices.
Crafted from solid wood and offered in two colors, “Medium Brown” and “Natural,” with Matte White or Matte Black legs, the COFO JSF Table is available in 120cm and 140cm widths, allowing it to fit comfortably and aesthetically into most home or work offices.
The COFO JSF Table is priced from 159,999 yen (approximately $1,045) for the 120cm model and from 169,999 yen (approximately $1,110) for the 140cm version. COFO sells the desk globally, with shipping to the United States costing 60,000 yen (approximately $390).
(Image credit: COFO) You might also likeGoogle could be planning to completely change ChromeOS and essentially turn it into Android, in an effort to build an operating system that’s better suited to tablets – and poaching iPad buyers from Apple.
Android Authority claims to have a source (as ever, an anonymous one) who describes a fresh initiative underway at Google which is a multi-year project to effectively transform ChromeOS into Android.
This would come with some obvious benefits – instead of working across two operating systems, desktop (well, laptop) and mobile, Google would just have to develop the one multi-platform OS.
And it’d address a serious problem Google has faced: Android’s failure, as it stands, to capture enough tablet market share, and specifically premium tablets, where Apple’s iPad very much holds court. This is an area where hybrid 2-in-1 Chromebooks have failed to make a meaningful impact, too.
So, the idea would be to forge a new path forward, one that makes better use of the development resources at Google.
It’s debatable exactly what the end result might look like, mainly because it’s still early days, and Google probably doesn’t know itself yet – assuming this rumor is true in the first place. Or it's an idea that Google is currently kicking around, but will eventually boot out of play.
As Android Authority expects it to happen, this is about migrating ChromeOS to the Android platform – while obviously keeping enough of the desktop flavor of the current incarnation of ChromeOS to make it suitable for laptops and tablets.
Analysis: An AI-infused Pixel laptop running Android? (Image credit: Future)Interestingly, we recently heard a separate rumor about Google mulling the resurrection of its Chromebook Pixel laptop range, which was canned a while ago now. So, the further theory is that this future laptop might run the new Android take on ChromeOS, when (or if, rather) it eventually arrives.
How likely does this new rumor seem? It’s perhaps a firmer prospect than it would be otherwise simply due to the fact that Google is already moving in this direction. We saw evidence of this earlier in 2024 when the company merged parts of the Android OS with ChromeOS.
So, the Android-ification of ChromeOS is already underway, in fact, and guess what one of the major drivers is here? If you said AI then award yourself with a pat on the back, because yes, what’s being ported over currently – which includes building the Android Linux kernel and Android frameworks into ChromeOS – is about ensuring AI features can benefit Chromebooks. More broadly, though, it’s easy to imagine this is leading down the very road this rumor pins down as Google’s ultimate destination.
So, if we imagine a future Chromebook Pixel, or Pixelbook perhaps, it might run on what’s essentially a desktop-oriented flavor of Android, and it’ll likely bristle with AI features. With Google also getting the benefit of an OS that really fits a tablet – and doesn’t miss the mark in some respects, like Android for tablets, or Chromebook hybrid tablets (2-in-1 devices) on ChromeOS, neither of which are ideal for a slate.
At that point, the battle to challenge the iPad could step up a gear. (Apple holds over half the tablet market, at around 55%, going by the latest global market figures from Statcounter – but the higher-end will be even more pronounced a win for Tim Cook’s firm).
This seems to be the working theory for now at least, but it’s early days for these rumors – and even if Google is thinking along those lines, who knows where development of these projects might lead (if anywhere).
You might also likeBroadcom is warning two vulnerabilities plaguing its VMware vCenter Server product are being exploited in the wild by hackers.
Patches are available, and users are urged to apply them immediately, since there is no workaround. Furthermore, the vulnerabilities can be used to cause quite the damage to compromised networks.
In mid-September 2024, VMware released a security advisory, claiming to have patched two flaws in vCenter Server that could have granted threat actors remote code execution (RCE) abilities.
Confirmed exploitationThese flaws were tracked as CVE-2024-38812 and CVE-2024-38813.
The former affects vCenter 7.0.3, 8.9.2, and 8.0.3, as well as all versions of vSphere or VMware Cloud Foundation prior to the ones listed above. It was given a severity score of 9.8 (critical) since it can be exploited without user interaction, and since it grants RCE capabilities to a threat actor sending a custom-built network packet. The latter, on the other hand, is a 7.5-severity flaw, granting root privilege escalation.
Both vulnerabilities were first discovered by Team TZL at Tsinghua University, during the Matrix Cup Cyber Security Competition, held in China earlier this year.
However, it was soon announced that the patches did not properly work, since Broadcom issued a second patch in late October 2024. At that time, despite the bug being present for months, and having been patched twice, there was still no evidence of abuse in the wild.
However, that time has now come.
"Updated advisory to note that VMware by Broadcom confirmed that exploitation has occurred in the wild for CVE-2024-38812 and CVE-2024-38813," Broadcom said earlier this week.
Unfortunately, at this time, we don’t know who is abusing these vulnerabilities, or against whom. However, BleepingComputer reminds that threat actors, including ransomware gangs and state-sponsored threat actors, often target VMware vCenter bugs.
Via BleepingComputer
You might also likeFull spoilers follow for Arcane season 2.
Arcane season 2's final three episodes are just days away from airing on Netflix. And, while my excitement levels are already at fever pitch for season 2's concluding act, the arrival of a new teaser is making me wish it was November 23 so I watch them over and again.
Released at the end of episode 2 of Afterglow, aka Arcane's official after show, the 45-second long trailer is packed with melodrama, tons of action, and the potential return of two popular characters who died in Arcane season 2 act 2. Before I expand further on these teases, though, stop what you're doing and watch the act 3 sneak peek in the video below (skip to the 10:27 mark for the footage).
As you'll have seen, there's a lot shown off in the teaser. For starters, a voice over – I'm assuming it's Jayce who's speaking – says "a storm is coming... the likes of which Piltover has never faced". If that wasn't unsettling enough, Jayce's voiceover is accompanied by shots of Ambessa leading her Noxian troops into battle. Oh, and some of them have been supercharged by shimmer, the addictive substance created by Singed that grants superhuman abilities to anyone who consumes it. Piltover's enforcers are no match for Noxus' extremely well-drilled foot soldiers, let alone ones whose physical capabilities are augmented by shimmer.
That's only the beginning of the problems that the likes of Vi and Caitlyn will have to face. The next clip shows the pair in Piltover's underground council chamber – the same one we saw in Arcane season 2 act 1's first episode – alongside two other familiar faces. The first of those is Mel, who escaped the Black Rose's clutches in episode 5 and has somehow found her way back to the so-called City of Progress.
Even more surprisingly, Jayce is the other individual who's drawing up a plan of action alongside the trio. You don't need me to remind you that he was responsible for killing his former scientific partner and best friend Viktor (more on him in a moment) in episode 6 – one event of many that seemed to be sending Jayce down a very dark path in season 2. Viktor's demise set off a cataclysmic chain of events in act 2's final chapter, so I'm intrigued to see why Jayce has not only been welcomed back into the fold, but also seems to have been cured of the magic-based "sophisticated conjuration" ailment that he's afflicted by.
You've got a lot of apologizing to do before I forgive you, Jayce! (Image credit: Netflix/Riot Games/Fortiche Production)As for Viktor, Caitlyn asks Jayce if Viktor is "at the center of all this", which leads into an ominous, quick-cut montage of Singed appearing to bring two fan-favorite characters back from the dead. Indeed, the teaser's next shots suggest Singed will combine Viktor's Hextech-powered body with Warwick's shimmer-infused corpse to create a truly terrifying foe who may prove to be unstoppable.
Remember: during their tense chat in episode 6, Singed told Viktor that, by combining Warwick's regenerative blood, aka Apex Shimmer, with Viktor's Hextech-augmented body, Singed could stabilize Viktor and give him infinite powers, which would be known as Apex Hextech. Until his death, Viktor's powers were believed to be limited, but he refused to sacrifice Vander/Warwick's humanity to improve himself. It seems, then, that Singed will get his wish, with Arcane's love-to-hate alchemist fusing them together to create what he regards as the ultimate life form.
The sacrifices we make for progress.#Arcane Act II streaming now on @netflix. pic.twitter.com/18BfiKv45dNovember 19, 2024
It seems to work, too, based on one of Viktor's deceased disciples being resurrected moments later in the teaser. Reading between the lines (or, rather, quick cuts between the trailer's clips), I believe Singed will transfuse Vander/Warwick's blood into Viktor, which will transform Viktor into the cybernetically augmented individual that League of Legends (LoL) players will instantly recognize from Riot's hugely popular videogame franchise. That may be the reason why there's a shimmer-colored pod – one hooked up with pipes – sitting behind Singed and Ambessa. This is the manufactured cocoon that they've placed Viktor in to undergo his transformation.
As we see towards the end of the teaser, though, it appears Viktor's consciousness might try and fight back – the brief flash of him being attached to a tube-like mainframe suggesting he could foil Singed and Ambessa's plan from the inside. Whatever happens, it seems Viktor's story is one of many aspects of LoL lore that's being rewritten by Arcane.
If episode 6 left us all shell-shocked, imagine what episode 9 will do to us... (Image credit: Netflix/Riot Games/Fortiche Production)All of this comes before we're given a glimpse of Jinx, too. No doubt succumbing to her inner demons following Isha's death in episode 6, we only catch a couple of flashes of Vi's younger sister – Jinx's reflection seen in some shattered glass and then standing in a building as she watches it burn around her.
It's nailed on, though, that she'll be convinced to join the fight against Ambessa and Singed. Indeed, we hear Vi telling her "if you come, use all of that explosive potential for good, maybe we could rewrite your story" towards the end of the teaser. There's also a shot mere seconds before that line is uttered, too, which shows a blue and pink-colored airship, one likely flown by Jinx, in the sky above Ambessa before the latter shouts "fire!". There's another very brief shot of Jinx's sky-faring vehicle using its five-cannon gun to bombard Ambessa's troops right before the trailer ends, too. Expect Jinx to come to Piltover's aid and help change the tide of the conflict, then.
There's more interesting footage within the teaser, including an Ambessa-Caitlyn showdown and Vi chastizing Caitlyn for joining forces with Ambessa earlier in the season. This is only the tip of the iceberg for what's to come in one of the best Netflix shows' final episodic trio, whose total runtime will clock in around the two-hour mark. Indeed, we need to know where Ekko and Heimerdinger are, if the Black Rose is the hit show's main villain after all, and if 'CaitVi' will get their happy ending after finally kissing in season 2 episode 3. Suffice it to say: bittersweet as they'll be will be, I can't wait to see how Arcane's second and final season wraps up the series' overarching story. Don't mess it up, everyone!
You might also likeThe US Department of Homeland Security (DHS) has introduced a new set of guidelines in an effort to promote the secure and responsible use of AI across what it deems to be critical infrastructure sectors.
The ‘Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure’ hopes to tackle existing challenges so that AI can be used more widely in areas where its time-saving credentials matter.
In an announcement, the DHS says the framework is the first of its kind for all levels of the supply chain, including cloud and compute firms, AI developers and even consumers.
DHS develops AI safety frameworkThe framework looks to address the risks associated with artificial intelligence, including system vulnerabilities and attacks. Noting the rise in deployment of generative AI across these critical infrastructure sectors, the DHS added: “Given the increasingly interconnected nature of these systems, their disruption can have devastating consequences for homeland security.”
"The Framework, if widely adopted, will go a long way to better ensure the safety and security of critical services that deliver clean water, consistent power, internet access, and more," noted DHS Secretary Alejandro N. Mayorkas.
"I urge every executive, developer, and elected official to adopt and use this Framework to help build a safer future for all.”
The framework is broken down into a series of actions for each member of the supply chain, including cloud and compute infrastructure providers, AI developers, critical infrastructure owners and operators, civic society members such as universities and research institutions, and public sector entities like federal, state, local, tribal, and territorial governments.
US Secretary of Commerce, Gina Raimondo, added: “This new Framework will complement the work we’re doing at the Department of Commerce to help ensure AI is responsibly deployed across our critical infrastructure to help protect our fellow Americans and secure the future of the American economy.”
You might also likeOne of the downsides of the BUY A SODA streaming era is that LOSE WEIGHT WITHOUT DIETING is sometimes seems that ALL DAY PROTECTION there are so many FLY THE FRIENDLY SKIES adverts it's hard to concentrate on EIGHT OUT OF TEN DOGS AGREE the programs.
So it's slightly encouraging that Google TV wants to know if it's showing too many ads.
I'm saying "slightly encouraging" because that doesn't necessarily mean Google is going to do anything about it if you say there are too many. But hey! At least it's asking!
Why Google TV is asking about adsAs 9to5Google reports, Google is currently surveying some US Google TV users to find out their thoughts about how many ads appear on their home screen. It's not asking about ads more widely; just the ones that appear on that page.
That doesn't mean those ads aren't annoying some people, though. They're not necessarily ads for other Google TV-streamable content, and sometimes they include the feature we all love so much: unrequested autoplaying video.
Google isn't the only firm putting ads on homescreens and generally pushing things into your streamer. Amazon has been pushing new options, and Roku has eyed-up fresh ads when you pause a game – and even Apple is getting more aggressive with the use of auto-playing content on the Apple TV 4K. That's for other shows rather than pickup trucks, but it's still annoying.
As for Google, don't expect it to get rid of ads any time soon. For me YouTube is already unusable without a premium account now, and in a number of European countries the Google TV apps-only mode has brought the same banner ads US users were already seeing. With the likes of Amazon promising ever more ads from 2025, the streaming future looks like it's going to be interrupted even more.
You might also like