Telegram zero-day allowed sending malicious Android APKs as videos
A zero-day vulnerability in Telegram for Android, named 'EvilVideo,' allowed attackers to send malicious APKs disguised as video files. This flaw affected Telegram
Threat actor 'Ancryno' sold the exploit on the Russian-speaking XSS hacking forum. It was patched in version 10.14.5 on July 11, 2024.
A command and control server (C2) was used by the payloads at 'infinityhackscharan.ddns[.]net.' Two malicious APK files were found using that C2 on VirusTotal [1, 2] that pretend to be Avast Antivirus or an 'xHamster Premium Mod.'
The exploit required users to enable the installation of unknown apps and it didn't affect Telegram's web or desktop clients.
🔗 BleepingComputer
🧑💻 @agamtechtricks
A zero-day vulnerability in Telegram for Android, named 'EvilVideo,' allowed attackers to send malicious APKs disguised as video files. This flaw affected Telegram
v10.14.4 and older. Threat actor 'Ancryno' sold the exploit on the Russian-speaking XSS hacking forum. It was patched in version 10.14.5 on July 11, 2024.
A command and control server (C2) was used by the payloads at 'infinityhackscharan.ddns[.]net.' Two malicious APK files were found using that C2 on VirusTotal [1, 2] that pretend to be Avast Antivirus or an 'xHamster Premium Mod.'
The exploit required users to enable the installation of unknown apps and it didn't affect Telegram's web or desktop clients.
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
👍18😱4🤔2
How to use Windows 7 in 2024.... without using Windows 7.
Ever felt like you missed that whole aero vibe of Vista/7 and want to have it again without actually having to deal with software and hardware incompatibility of Windows 7? Well... What if you could just go....
Introducing Windows 10 22H2 to Windows 7 transformation pack by ImSwordQueeen!
This transformation pack is meant to be a very close replica of Windows 7! From full-fledged Aero to Windows Media Center to the good old Purble palace... It's all in here! And the best thing? You just have to run an setup executable and relax while it takes care of everything for you.
And oh, did I forget to mention that the Aero theme even works on WINDOWS SUBSYSTEM FOR ANDROID? YUP, you heard me right!
That said, this is a beta. It has it's own set of minor bugs. Please feel free to help the developer in fixing 'em by reporting them on the GitHub!
Interested? Check it out below!
🌐 DeviantArt page
🧑💻 @agamtechtricks
(PSA: see that 'chrome' (aka Silverfox)? Teehee, stay tuned for that ;D)
Ever felt like you missed that whole aero vibe of Vista/7 and want to have it again without actually having to deal with software and hardware incompatibility of Windows 7? Well... What if you could just go....
Introducing Windows 10 22H2 to Windows 7 transformation pack by ImSwordQueeen!
This transformation pack is meant to be a very close replica of Windows 7! From full-fledged Aero to Windows Media Center to the good old Purble palace... It's all in here! And the best thing? You just have to run an setup executable and relax while it takes care of everything for you.
And oh, did I forget to mention that the Aero theme even works on WINDOWS SUBSYSTEM FOR ANDROID? YUP, you heard me right!
That said, this is a beta. It has it's own set of minor bugs. Please feel free to help the developer in fixing 'em by reporting them on the GitHub!
Interested? Check it out below!
(PSA: see that 'chrome' (aka Silverfox)? Teehee, stay tuned for that ;D)
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🥰15👍5🤯2👎1
Meta is working on AI video generation for Imagine feature
Meta is developing video generation capabilities for its standalone Meta AI, allowing users to create vertical videos for Instagram Reels. Users can select video prompts and generate multiple video shots, which can be manually combined into a single video.
Additionally, hints in the codebase suggest the upcoming release of the LLama 3 405B model, likely for premium users, and the potential launch of AI Studio, a platform for developers to experiment with Meta AI models. Announcements regarding these features are expected soon, possibly on July 23, 2024.
🔗 Testingcatalog
🧑💻 @agamtechtricks
Meta is developing video generation capabilities for its standalone Meta AI, allowing users to create vertical videos for Instagram Reels. Users can select video prompts and generate multiple video shots, which can be manually combined into a single video.
Additionally, hints in the codebase suggest the upcoming release of the LLama 3 405B model, likely for premium users, and the potential launch of AI Studio, a platform for developers to experiment with Meta AI models. Announcements regarding these features are expected soon, possibly on July 23, 2024.
🔗 Testingcatalog
🧑💻 @agamtechtricks
🤣10🤯1
Wiz walks away from Google’s $23B acquisition offer
Wiz, a cybersecurity startup, declined a $23 billion acquisition offer from Alphabet, Google's parent company. Despite the offer being nearly double its last valuation of $12 billion, Wiz's management and investors chose to stay independent.
Wiz has significant backing from investors like Index Ventures and Sequoia Capital. Wiz’s management team with the support of investors has opted to remain independent.
Here's the email that CEO Assaf sent to Wiz's 1,200 employees regarding the decision:
🔗 TechCrunch
🧑💻 @agamtechtricks
Wiz, a cybersecurity startup, declined a $23 billion acquisition offer from Alphabet, Google's parent company. Despite the offer being nearly double its last valuation of $12 billion, Wiz's management and investors chose to stay independent.
Wiz has significant backing from investors like Index Ventures and Sequoia Capital. Wiz’s management team with the support of investors has opted to remain independent.
Here's the email that CEO Assaf sent to Wiz's 1,200 employees regarding the decision:
Wizards,
I know the last week has been intense, with the buzz about a potential acquisition. While we are flattered by offers we have received, we have chosen to continue on our path to building Wiz.
Let me cut to the chase: our next milestones are $1 billion in ARR and an IPO.
Saying no to such humbling offers is tough, but with our exceptional team, I feel confident in making that choice.
The market validation we have experienced following this news only reinforces our goal – creating a platform that both security and development teams love. We are grateful for the faith our employees, investors, and customers have in us as we build the best cybersecurity company in the world.
Thank you for your hard work and focus during these days, which helped us stay on track and finish the quarter stronger than ever. As we always say: LFG.
Assaf
Please open Telegram to view this post
VIEW IN TELEGRAM
🫡24👍5
This media is not supported in your browser
VIEW IN TELEGRAM
ElevenLabs released its Reader App on Google Play and App Store
The ElevenLabs Reader App is now on Android. Choose from hundreds of high quality AI voices to narrate any article, PDF, or ePub on the go.
It's only available in the US, UK, and Canada today. The app will launch worldwide in the next few weeks once they add support for narration in 32 languages.
🔗 Play Store | App Store
🧑💻 @agamtechtricks
The ElevenLabs Reader App is now on Android. Choose from hundreds of high quality AI voices to narrate any article, PDF, or ePub on the go.
It's only available in the US, UK, and Canada today. The app will launch worldwide in the next few weeks once they add support for narration in 32 languages.
🔗 Play Store | App Store
🧑💻 @agamtechtricks
👏12👍3🥰3💔2
Google Chrome Revises Stance on Third-Party Cookies
Google has announced a significant change in its approach to third-party cookies in Chrome. Instead of phasing them out entirely as previously planned, Google will now introduce new privacy controls that allow users to make informed choices about their browsing experience.
This decision comes after recognizing the potential impact on publishers and advertisers.
New features like IP Protection in Incognito mode are being developed to enhance user privacy. Google continues to work on Privacy Sandbox APIs and is consulting with regulators globally on this revised approach.
🔗 9to5Google
🧑💻 @agamtechtricks
Google has announced a significant change in its approach to third-party cookies in Chrome. Instead of phasing them out entirely as previously planned, Google will now introduce new privacy controls that allow users to make informed choices about their browsing experience.
This decision comes after recognizing the potential impact on publishers and advertisers.
New features like IP Protection in Incognito mode are being developed to enhance user privacy. Google continues to work on Privacy Sandbox APIs and is consulting with regulators globally on this revised approach.
🔗 9to5Google
🧑💻 @agamtechtricks
💩17🤡4👍1
You can no longer purchase movies and shows from Google TV
Google TV is removing the ability to purchase movies and TV shows directly from the platform, directing users to make these purchases through YouTube instead. This change affects Google TV, Android TV, and the Google TV mobile app. All previously purchased content will still be accessible across these platforms and YouTube. The transition is currently rolling out and will continue over the next few weeks.
🔗 Android Police
🧑💻 @agamtechtricks
Google TV is removing the ability to purchase movies and TV shows directly from the platform, directing users to make these purchases through YouTube instead. This change affects Google TV, Android TV, and the Google TV mobile app. All previously purchased content will still be accessible across these platforms and YouTube. The transition is currently rolling out and will continue over the next few weeks.
🔗 Android Police
🧑💻 @agamtechtricks
🥱17🤣8😐3👍1🦄1
Hey y'all! How would you all describe the content we're currently posting on this channel? If you have any suggestions, consider leaving them down in the comments!
Thank you! ~ATT
Thank you! ~ATT
Anonymous Poll
10%
I don't like it and it severely needs improvement.
32%
It's fine-ish, but can be improved.
37%
It's good and I find it okay.
21%
It's great and I enjoy reading it.
👍4
ATT • Tech News pinned «Hey y'all! How would you all describe the content we're currently posting on this channel? If you have any suggestions, consider leaving them down in the comments!
Thank you! ~ATT»
Thank you! ~ATT»
Samsung Galaxy phones now stop you from sideloading Android apps by default
Samsung's new "Auto Blocker" feature, starting with the Galaxy Z Fold 6 and Flip 6 on One UI 6.1.1, blocks sideloading of apps by default. It aims to prevent malware and USB hijacking.
During initial setup, users are informed about the restriction and can disable it. If missed, users can manually turn off Auto Blocker in Settings > Security and privacy.
This change affects newer Samsung foldables and Galaxy S devices with One UI 6.1.1, but not older versions.
🔗 9to5Google
🧑💻 @agamtechtricks
Samsung's new "Auto Blocker" feature, starting with the Galaxy Z Fold 6 and Flip 6 on One UI 6.1.1, blocks sideloading of apps by default. It aims to prevent malware and USB hijacking.
During initial setup, users are informed about the restriction and can disable it. If missed, users can manually turn off Auto Blocker in Settings > Security and privacy.
This change affects newer Samsung foldables and Galaxy S devices with One UI 6.1.1, but not older versions.
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
👍28🗿10🤡4😁2🖕2
Switzerland now requires all government software to be open source
Switzerland's new "Federal Law on the Use of Electronic Means for the Fulfillment of Government Tasks" (EMBAG) mandates the use of open-source software (OSS) for all public sector software unless third-party rights or security issues prevent it.
This law aims to enhance transparency, security, and efficiency by promoting a "public money, public code" approach. It also requires releasing non-sensitive government data as Open Government Data (OGD).
The legislation, led by Professor Dr. Matthias Stürmer, intends to reduce vendor lock-in, lower IT costs, and improve public services, serving as a model for other countries.
🔗 ZDNet
🧑💻 @agamtechtricks
Switzerland's new "Federal Law on the Use of Electronic Means for the Fulfillment of Government Tasks" (EMBAG) mandates the use of open-source software (OSS) for all public sector software unless third-party rights or security issues prevent it.
This law aims to enhance transparency, security, and efficiency by promoting a "public money, public code" approach. It also requires releasing non-sensitive government data as Open Government Data (OGD).
The legislation, led by Professor Dr. Matthias Stürmer, intends to reduce vendor lock-in, lower IT costs, and improve public services, serving as a model for other countries.
Please open Telegram to view this post
VIEW IN TELEGRAM
👏75❤10🔥8👍5🖕1
Proton releases a self-custody bitcoin wallet
Proton, known for its secure email, VPN, and storage services, is launching Proton Wallet, a self-custody cryptocurrency wallet supporting bitcoin initially, with plans to add more currencies based on user feedback. Users maintain control of their private keys, and Proton cannot access their digital assets.
The wallet, available to Visionary Plan subscribers, integrates with Proton's ecosystem, allowing users to send crypto via email addresses and buy bitcoins using fiat currency. Proton Wallet aims to simplify bitcoin transactions while preserving security and decentralization.
🔗 TechCrunch | Proton
🧑💻 @agamtechtricks
Proton, known for its secure email, VPN, and storage services, is launching Proton Wallet, a self-custody cryptocurrency wallet supporting bitcoin initially, with plans to add more currencies based on user feedback. Users maintain control of their private keys, and Proton cannot access their digital assets.
The wallet, available to Visionary Plan subscribers, integrates with Proton's ecosystem, allowing users to send crypto via email addresses and buy bitcoins using fiat currency. Proton Wallet aims to simplify bitcoin transactions while preserving security and decentralization.
🔗 TechCrunch | Proton
🧑💻 @agamtechtricks
👍17🥴6👎4🤔2❤1🖕1
Massive Data Breach : Fake Z-Library Site Exposes 10 Million Users' Personal and Financial Information
A fake Z-Library site scammed 10 million users, collecting and leaking personal data, passwords, and crypto addresses. The leak, discovered on June 27, 2024, exposed users to cybercriminals and authorities. The site, Z-lib[.]is, resembled Z-Library but phished for credentials and payments. Researchers verified the data’s authenticity, noting many users provided real names and sensitive information.
They recommend changing passwords, blocking malicious emails, avoiding illegal services, and securing crypto assets. The leak could aid law enforcement in tracking transactions and prosecuting users.
🔗 Cybernews
🧑💻 @agamtechtricks
A fake Z-Library site scammed 10 million users, collecting and leaking personal data, passwords, and crypto addresses. The leak, discovered on June 27, 2024, exposed users to cybercriminals and authorities. The site, Z-lib[.]is, resembled Z-Library but phished for credentials and payments. Researchers verified the data’s authenticity, noting many users provided real names and sensitive information.
They recommend changing passwords, blocking malicious emails, avoiding illegal services, and securing crypto assets. The leak could aid law enforcement in tracking transactions and prosecuting users.
🔗 Cybernews
🧑💻 @agamtechtricks
🕊20🤯5🖕1😭1