{"id":27616,"date":"2024-01-03T08:38:26","date_gmt":"2024-01-03T13:38:26","guid":{"rendered":"https:\/\/www.thundercloud.net\/infoave\/new\/?p=27616"},"modified":"2024-01-03T08:40:40","modified_gmt":"2024-01-03T13:40:40","slug":"wednesday-newsbytes-malware-breaks-googles-oauth-security-microsoft-launches-copilot-for-android-2023-the-year-of-ai-and-more","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/wednesday-newsbytes-malware-breaks-googles-oauth-security-microsoft-launches-copilot-for-android-2023-the-year-of-ai-and-more\/","title":{"rendered":"Wednesday Newsbytes: Malware Breaks Google&#8217;s OAUTH Security; Microsoft Launches Copilot for Android; 2023: The Year of AI&#8230; and more!"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Wednesday Newsbytes: Malware Breaks Google&#8217;s OAUTH Security<\/span><\/strong><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">; Microsoft Launches Copilot for Android<\/span><\/strong><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">; 2023: The Year of AI<\/span><\/strong><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">&#8230; and more!<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Every day we scan the tech world for interesting news in the world of technology and sometimes from outside the world of technology. Every Wednesday, we feature news articles that grabbed our attention over the past week. We hope you find this week&#8217;s\u00a0 &#8216;Wednesday Newsbytes&#8217; informative and interesting!<\/span><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/malware-abuses-google-oauth-endpoint-to-revive-cookies-hijack-accounts\/\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Malware abuses Google OAuth endpoint to \u2018revive\u2019 cookies, hijack accounts<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named &#8220;MultiLogin&#8221; to restore expired authentication cookies and log into users&#8217; accounts, even if an account&#8217;s password was reset.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Session cookies are a special type of browser cookie that contains authentication information, allowing a person to automatically log in to websites and services without entering their credentials.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">These types of cookies are meant to have a limited lifespan, so they cannot be used indefinitely by threat actors to log into accounts if they are stolen.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">In late November 2023, BleepingComputer reported on two information-stealers, namely Lumma and Rhadamanthys, who claimed they could restore expired Google authentication cookies stolen in attacks.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">These cookies would allow the cybercriminals to gain unauthorized access to Google accounts even after the legitimate owners have logged out, reset their passwords&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/malware-abuses-google-oauth-endpoint-to-revive-cookies-hijack-accounts\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"text-decoration: underline;\"><span style=\"font-size: 18pt;\">Read more at Bleeping Computer.<\/span><\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><strong><span style=\"font-family: helvetica, arial, sans-serif; font-size: 24pt;\"><a href=\"https:\/\/www.neowin.net\/news\/microsoft-quietly-launches-dedicated-copilot-app-for-android\/\" target=\"_blank\" rel=\"noopener\">Microsoft quietly launches dedicated Copilot app for Android<\/a><\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The new Copilot app for Android is not entirely a new thing. At first sight, it looks similar to the Bing Chat app, which still lets you access the same chat features. In addition, you can use Copilot within the Microsoft Edge browser for Android, SwiftKey, Skype, and more.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Copilot for Android supports plenty of features (you can also toggle between light and dark themes) that are already available on desktop. You can ask complex questions, generate images using DALL-E 3, draft documents or emails, or just have a casual conversation about anything. In addition, the app lets you turn off or on the recently added GPT-4&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.neowin.net\/news\/microsoft-quietly-launches-dedicated-copilot-app-for-android\/\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline; font-size: 14pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"font-size: 18pt;\">Read more at Neowin.<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/blog.research.google\/2023\/12\/2023-year-of-groundbreaking-advances-in.html\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">2023: A year of groundbreaking advances in AI and computing<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">This has been a year of incredible progress in the field of Artificial Intelligence (AI) research and its practical applications.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">As ongoing research pushes AI even farther, we look back to our perspective published in January of this year, titled \u201cWhy we focus on AI (and to what end),\u201d where we noted:<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">We are committed to leading and setting the standard in developing and shipping useful and beneficial applications, applying ethical principles grounded in human values, and evolving our approaches as we learn from research, experience, users, and the wider community.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">We also believe that getting AI right \u2014 which to us involves innovating and delivering widely accessible benefits to people and society, while mitigating its risks \u2014 must be a collective effort involving us and others, including researchers, developers, users (individuals, businesses, and other organizations), governments, regulators, and citizens.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">We are convinced that the AI-enabled innovations we are focused on developing and delivering boldly and responsibly are useful, compelling, and have the potential to assist and improve lives of people everywhere \u2014 this is what compels us.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">In this Year-in-Review post we\u2019ll go over some of Google Research&#8217;s and Google DeepMind\u2019s efforts putting these paragraphs into practice safely throughout 2023.<\/span><\/p>\n<p><span style=\"font-size: 18pt;\"><strong><span style=\"font-family: helvetica, arial, sans-serif;\">Advances in products &amp; technologies<\/span><\/strong><\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">This was the year generative AI captured the world\u2019s attention, creating imagery, music, stories, and engaging conversation about everything imaginable, at a level of creativity and a speed almost implausible a few years ago&#8230;<\/span><\/p><\/blockquote>\n<p><span style=\"font-family: helvetica, arial, sans-serif;\"><span style=\"font-size: 24px;\"><b><u><a href=\"https:\/\/blog.research.google\/2023\/12\/2023-year-of-groundbreaking-advances-in.html\" target=\"_blank\" rel=\"noopener\">Read more at the Google Blog.<\/a> <\/u><\/b><\/span><\/span><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.windowslatest.com\/2023\/12\/28\/dell-hints-at-windows-11s-new-ai-that-automatically-changes-your-settings-fixes-bugs\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-family: helvetica, arial, sans-serif;\"><strong><span style=\"font-size: 24pt;\">Dell hints at Windows 11\u2019s new AI that automatically changes your settings, fixes bugs<\/span><\/strong><\/span><\/a><\/p>\n<p><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Windows Copilot is limited in its current form, but Microsoft could be working on a new version of AI that could change how you use Windows 11.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">In a future release of Windows 11, Microsoft Copilot will be able to detect when your system or an app is having issues and attempt to fix it automatically behind the scenes.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Imagine you\u2019re away from your PC, and some apps are crashing. Instead of asking you to diagnose the problem or send a feedback report, Windows Copilot will try to fix issues independently. For example, if an app is failing to connect to Wi-Fi, AI may try changing network settings or running a troubleshooter to see if it can find a fix on its own.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Similarly, Dell believes the next generation of Windows 11 AI could also attempt to change Settings depending on your location and environment.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">For example, if it detects that you are using a public network at the airport, it may turn on the battery saver and improve your Wi-FI security.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">A closer look at Dell\u2019s vision of Copilot on Windows<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"https:\/\/www.windowslatest.com\/wp-content\/uploads\/2023\/12\/Copilot-changes-Wi-Fi.gif\" alt=\"From Windows Latest - Dell Hints at New AI\" width=\"800\" height=\"531\" \/><\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">In the above GIF shared by Dell, Copilot can be seen understanding user\u2019s behaviour and environment and automatically applying changes to the system.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">In this case, when you, as a user, connect to a public network, possibly at a location like an airport, AI recognizes your location and turns on its contextual awareness.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Due to the public Wi-Fi connection, Windows 11 AI may suggest enhancing security settings for data protection. It may also begin lowering thermal settings and turning on the battery saver. This will likely optimize device performance and battery longevity in a mobile setting&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.windowslatest.com\/2023\/12\/28\/dell-hints-at-windows-11s-new-ai-that-automatically-changes-your-settings-fixes-bugs\/\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Read more at <\/span><\/strong><\/span><span style=\"text-decoration: underline;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Windows Latest<\/span><\/strong><\/span><span style=\"text-decoration: underline;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">.<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.pcmag.com\/explainers\/passwordless-authentication-what-it-is-and-why-you-need-it-asap\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Passkeys: What They Are and Why You Need Them ASAP<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">We tell you what passkeys are, how you can get them, and where you can use them to log in securely without exposing your email address or creating a password.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">I\u2019m sick of passwords. They\u2019re somehow both easily guessable and hard to remember, and keeping them out of the hands of criminals is tough. To solve that problem, the Fast Identity Online (FIDO) Alliance developed passkeys, a form of passwordless authentication technology. Passkeys eliminate the need to enter your email address or password into login fields all around the web, making it harder for criminals to steal your credentials and get into your accounts.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Passkeys have plenty of benefits; for example, they cannot be guessed or shared. Passkeys are resistant to phishing attempts because they&#8217;re unique to the sites they&#8217;re created for, so they won&#8217;t work on fraudulent lookalike sites. Most importantly, in the age of near-constant data breaches, your passkeys cannot be stolen by hacking into a company&#8217;s server or database, making the data extracted in such breaches less valuable to criminals. Best of all, this new technology isn&#8217;t just theoretical. We are encouraged to see big tech companies like Amazon adopting passkeys. But what exactly are they? We&#8217;re here to explain.<\/span><\/p>\n<p><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">What Is a Passkey?<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">A passkey is a way to log in to apps and websites without using a username and password combination&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.pcmag.com\/explainers\/passwordless-authentication-what-it-is-and-why-you-need-it-asap\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"text-decoration: underline;\">Read more at PC MAG<\/span><\/strong><\/span><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"text-decoration: underline;\">.<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<hr \/>\n<p><span style=\"font-family: helvetica, arial, sans-serif; font-size: 18pt; color: #ff0000;\"><strong><em>Thanks for reading this week&#8217;s Wednesday Newbytes. We hope these articles were informative, interesting, fun, and helpful. Merry Christmas! Darcy &amp; TC<\/em><\/strong><\/span><\/p>\n<p><a href=\"https:\/\/thundercloud.net\/donation.htm\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone\" src=\"https:\/\/thundercloud.net\/infoave\/images\/2017\/goodfight2017.png\" alt=\"Help us help you!\" width=\"573\" height=\"136\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Wednesday Newsbytes: Malware Breaks Google&#8217;s OAUTH Security; Microsoft Launches Copilot for Android; 2023: The Year of AI&#8230; and more! Every day we scan the tech world for interesting news in the world of technology and sometimes from outside the world of technology. Every Wednesday, we feature news articles that grabbed our attention over the past week.\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.thundercloud.net\/infoave\/new\/wednesday-newsbytes-malware-breaks-googles-oauth-security-microsoft-launches-copilot-for-android-2023-the-year-of-ai-and-more\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":23363,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4421,4432,4448,4431,1678,2509,1,1426,2942,1674,4372,4477],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/27616"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=27616"}],"version-history":[{"count":2,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/27616\/revisions"}],"predecessor-version":[{"id":27618,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/27616\/revisions\/27618"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media\/23363"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=27616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=27616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=27616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}