Technology - Google News

Update your iPhone: Spyware company using ‘terrifying’ hack, researchers say - Today.com

Posted: 14 Sep 2021 05:36 AM PDT

Apple on Monday advised all users to update their devices after researchers warned that the Israeli spyware company NSO Group had developed a way to take control over nearly any Apple computer, watch or iPhone.

"It's absolutely terrifying," said John Scott-Railton, a senior researcher at The Citizen Lab, which recently discovered the software exploit and notified Apple about it. The group published a report about it Monday.

The malicious software takes control of an Apple device by first sending a message through iMessage, the company's default messaging app, and then hacking through a flaw in how Apple processes images. It is what's known in the cybersecurity industry as a "zero-click" exploit — a particularly dangerous and pernicious flaw that doesn't require a victim clicking a link or downloading a file to take over.

People whose devices have been exploited are extremely unlikely to realize they've been hacked, Scott-Railton said.

"The user sees crickets while their iPhone is silently exploited," he said. "Someone sends you a GIF that isn't, and then you're in trouble. That's it. You don't see a thing."

July 26, 202101:03

As is often the case with NSO Group hacking, the newly discovered exploit is both technologically remarkable but likely only used on people specifically targeted by governments who use the company's software.

NSO Group creates surveillance and hacking software that it leases to governments to spy on individuals' computers and smartphones. For years, it has insisted that its primary product, Pegasus, is a vital tool to stop terrorists and other criminals, and that it merely leases its technology to legitimate governments in accordance with their own laws. It has also insisted it can't be used to target Americans' phones, and that it revokes usage from countries that misuse its products.

But Citizen Lab, a cybersecurity research center at the University of Toronto, has repeatedly found instances of Pegasus software used against journalists in Mexico who investigated cartels and Saudi Arabian dissidents, including associates of the slain Washington Post columnist Jamal Khashoggi.

In an emailed statement, an NSO spokesperson said that "NSO Group will continue to provide intelligence and law enforcement agencies around the world with life saving technologies to fight terror and crime."

An NSO Group spokesperson didn't immediately return a request for comment.

While Pegasus isn't known for surveilling large numbers of people, governments often use it to target individuals who don't appear to be violent criminals, said Bill Marczak, a Citizen Lab senior research fellow. Citizen Lab was only able to identify this exploit because it was examining the phone of a Saudi dissident who so far has not given permission to share his name with the public, he said.

Jan. 6, 201801:44

"In this case, it's pretty clear that this person was targeted for being an activist and not for any other reason," Marczak said.

Apple didn't published technical notes with a new software update available Monday that addressed flaws identified by Citizen Lab. The company noted that "this issue may have been actively exploited."

In an emailed statement, Apple's head of Security Engineering and Architecture, Ivan Krstić, thanked Citizen Lab for alerting the company to the exploit.

"Attacks like the ones described are highly sophisticated, cost millions of dollars to develop, often have a short shelf life, and are used to target specific individuals," Krstić said.

Updating to the latest version of iOS or Mac OS will keep users from being newly infected with this particular exploit, Scott-Railton said.

"This will prevent you from being infected with this exploit going forward," he said. "But what we know is NSO is always trying to find other ways to infect people's phones, and they may turn to something else."

This story first appeared on NBCNews.com.

Kevin Collier

Kevin Collier is a cybersecurity reporter based in New York City.

Adblock test (Why?)

Xiaomi’s upcoming smart glasses are all about 'an engineering mindset' - The Next Web

Posted: 13 Sep 2021 10:43 PM PDT

Xiaomi today announced its entry into the smart glasses (not AR glasses) world with the most marketing post ever. Before we dive into the technical detail of the wearable, I want everyone to know the company describes this as an "engineering mindset to create a future viewpoint." Yep.

The Xiaomi Smart Glasses have a 0.13-inch MircoLED display on one of the lenses. The company says it uses "optical waveguide technology" — which refracts light at 180 degrees — to display content, such as notifications and navigation assistance, on the screen. The glasses have an in-built 2.4mm x 2.02mm display chip in the frame. That's pretty tiny.

[embedded content]

The Chinese tech giant said that the display uses a monochrome mode in sunlight with 2 million nits of brightness for better visibility. It said that the optical waveguide tech allowed it to reduce the size and weight (51 grams) of the frame, and make it look like a regular pair.

The glasses can pair with your phone to show you details about incoming calls and notifications. However, it can also independently show you information related to navigation and real-time text translation.

Xiaomi's vision of navigation through its smart glasses

The Xiaomi smart glasses sport a single 5-megapixel camera to take photos, videos, and help you with translating text on signboards. In contrast, Facebook and Ray-Ban's glasses have dual 5-megapixel cameras.

The company said you'll have to use its XiaoAi AI Assistant as a primary method of interaction. You'll also find touch controls on the frame, but Xiaomi hasn't specified exactly what these are for yet.

All of this sounds like Xiaomi is trying to emulate the vision of Google Glass, instead of going the Snap Spectacles/Facebook x Ray-Ban way. It sounds great, but there's no launch date or price yet — just an "engineering mindset."

While the product sounds technically cool, there's no way anyone could experience it. For now, it feels like Xiaomi is ticking off the "we launched this before Apple" box. It would've been nice to have explorer or developer edition out, so we could at least have some people use the wearable in real-life conditions.

You can read more about the Xiaomi Smart Glasses here.

Did you know we have a newsletter all about consumer tech? It's called Plugged In – and you can subscribe to it right here.

Adblock test (Why?)