The SEC is suing SolarWinds and its chief information security officer for "defrauding investors." The Pentagon prepares to launch an artificial intelligence pilot program.

SEC suing SolarWinds and its CISO over Russian hack

Full extent of attacks unknown but telecoms thought to be especially exposed Vulnerabilities in F5's BIG-IP suite are already being exploited after proof of concept (PoC) code began circulating online.

Critical vulnerability in F5 BIG-IP under active exploitation

Earlier this week, the Securities and Exchange Commission (SEC) filed an enforcement action against SolarWinds (NYSE:SWI) for fraud and failures in regard to

SolarWinds Comments on SEC Enforcement Action: Another Example of Agency Overreach

CISA (Cybersecurity & Infrastructure Security Agency) has added the two vulnerabilities to its KEV (Known Exploited Vulnerabilities) catalog, urging federal government agencies to apply the available updates until November 21, 2023. Impacted and fixed ...

Hackers exploit recent F5 BIG-IP flaws in stealthy attacks

The fact that a modern iPhone exploit sells for millions versus hundreds for an Adobe Acrobat exploit is an extraordinary achievement for Apple, worth celebrating and trying to replicate elsewhere. It reflects that big tech companies have quietly spent enormous resources to raise the cost to exploit software over the past 20 years.

It's Cheap to Exploit Software — and That's a Major Security Problem

The SEC charges against SolarWinds and its CISO will have significant ramifications to cybersecurity — and beyond.

Cybersecurity industry responds to SEC charges against SolarWinds and former CISO

U.S. regulators have sued SolarWinds and its top security executive forfraud for allegedly concealing poor cybersecurity practices ahead of theTexas-based technology company's stunning hack by Russian spies.

US regulators sue SolarWinds and its security chief for alleged cyber neglect ahead of Russian hack

Conduct Regular Security Audits The first step toward enhancing cyber security is to conduct regular security audits. These audits help identify vulnerabilities in your business’s network infrastructure, software applications, and data storage systems.

10 Essential Cyber Security Measures Every Business Should Implement in Birmingham

Chinese law requires companies located there provide security access to source code and other sensitive data if demanded.

Opinion: U.S. tech firms must rethink their relationships with China

Some cybersecurity experts expect that Clorox’s response ... unpatched system can be just as dangerous as having a vulnerability listed on the common vulnerabilities and exposures (CVEs) list hiding inside a network. It’s not enough to inventory ...

Why The SEC Cybersecurity Disclosure Rules Will Improve Cybersecurity

Tenable

tenable

TORRANCE, United States / California, October 7th, 2024, CyberNewsWire/--Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has partnered with Hybrid Analysis, a platform that provides advanced malware analysis and threat intelligence, to enhance threat research. This collaboration integrates Criminal IP’s advanced domain scanning capabilities into the Hybrid Analysis platform, providing security professionals with deeper insights and more effective threat mitigation strategies. Comprehensive Malware and Domain Analysis Hybrid Analysis employs dynamic and static techniques for thorough malware analysis. Real-time execution environments and memory dumps generate annotated disassembly listings and critical Indicators of Compromise (IOCs). Criminal IP specializes in real-time domain scanning, scrutinizing domains for phishing, malware, and illicit activities. Integration enriches threat profiles, improving threat detection accuracy. Key Benefits of the Collaboration: Enhanced Threat Profiling: Security professionals can gain deeper insights into the origins and behaviors of threats identified through Hybrid Analysis, enriched with Criminal IP's data.
Real-Time Domain Analysis: Integration with Criminal IP enables users to conduct real-time scans on domains of interest, which is crucial for accurately identifying emerging threats promptly.
Comprehensive Security Insights: Users gain access to detailed domain attributes such as phishing records, abuse incidents, and detection of embedded malicious code, enhancing their ability to analyze for signs of Domain Generation Algorithms (DGA) and phishing probabilities.
Interactive Score Card: Users can quickly assess domain status, accessing additional details directly from Criminal IP database to make informed decisions based on the latest threat intelligence. Criminal IP’s Advanced Real-Time Threat Detection In addition to this comprehensive maliciousness result, uses seeking information about each component and false positives can visit Criminal IP. The URL scan feature allows users to extract a wealth of data, including network logs, associated IP addresses, malicious links, and website vulnerabilities. Users of Criminal IP Domain Search can access valuable insights such as technology usage specifics, abuse records, and identified CVE vulnerabilities, all conveniently consolidated on a single page. This robust search engine offers three customizable subscription plans—Lite, Medium, and Pro—including a Free membership option. To determine the most suitable plan based on user's volume of IP Lookup and URL Scan/Lookup requirements, users can explore the Free membership, monitor their credit usage through a user-friendly dashboard, and take advantage of key features for gaining valuable insights. About AI SPERA AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, significantly expanded its reach by launching its flagship solution, Criminal IP, in 2023. Since then, the company has formed technical and business collaborations with over 40 renowned global security firms, including Hybrid Analysis, VirusTotal, Cisco, Tenable, Sumo Logic, and Quad9. Besides the CTI search engine, the company offers Criminal IP ASM, a SaaS-based Attack Surface Management Solution on AWS Marketplace and Azure Marketplace, and Criminal IP FDS, an AI-based Anomaly Detection Solution for credential stuffing prevention and fraud detection. Available in five languages (English, French, Arabic, Korean, and Japanese), the search engine provides a powerful service for users worldwide. Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here. TORRANCE, United States / California, October 7th, 2024, CyberNewsWire/--Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has partnered with Hybrid Analysis, a platform that provides advanced malware analysis and threat intelligence, to enhance threat research. TORRANCE, United States / California, October 7th, 2024, CyberNewsWire/--Criminal IP, This collaboration integrates Criminal IP’s advanced domain scanning capabilities into the Hybrid Analysis platform, providing security professionals with deeper insights and more effective threat mitigation strategies. Comprehensive Malware and Domain Analysis Hybrid Analysis employs dynamic and static techniques for thorough malware analysis. Real-time execution environments and memory dumps generate annotated disassembly listings and critical Indicators of Compromise (IOCs). Criminal IP specializes in real-time domain scanning, scrutinizing domains for phishing, malware, and illicit activities. Integration enriches threat profiles, improving threat detection accuracy. Key Benefits of the Collaboration: Enhanced Threat Profiling: Security professionals can gain deeper insights into the origins and behaviors of threats identified through Hybrid Analysis, enriched with Criminal IP's data. Real-Time Domain Analysis: Integration with Criminal IP enables users to conduct real-time scans on domains of interest, which is crucial for accurately identifying emerging threats promptly. Comprehensive Security Insights: Users gain access to detailed domain attributes such as phishing records, abuse incidents, and detection of embedded malicious code, enhancing their ability to analyze for signs of Domain Generation Algorithms (DGA) and phishing probabilities. Interactive Score Card: Users can quickly assess domain status, accessing additional details directly from Criminal IP database to make informed decisions based on the latest threat intelligence. Enhanced Threat Profiling: Security professionals can gain deeper insights into the origins and behaviors of threats identified through Hybrid Analysis, enriched with Criminal IP's data. Real-Time Domain Analysis: Integration with Criminal IP enables users to conduct real-time scans on domains of interest, which is crucial for accurately identifying emerging threats promptly. Comprehensive Security Insights: Users gain access to detailed domain attributes such as phishing records, abuse incidents, and detection of embedded malicious code, enhancing their ability to analyze for signs of Domain Generation Algorithms (DGA) and phishing probabilities. Interactive Score Card: Users can quickly assess domain status, accessing additional details directly from Criminal IP database to make informed decisions based on the latest threat intelligence. Criminal IP’s Advanced Real-Time Threat Detection In addition to this comprehensive maliciousness result, uses seeking information about each component and false positives can visit Criminal IP. The URL scan feature allows users to extract a wealth of data, including network logs, associated IP addresses, malicious links, and website vulnerabilities. Users of Criminal IP Domain Search can access valuable insights such as technology usage specifics, abuse records, and identified CVE vulnerabilities, all conveniently consolidated on a single page. Criminal IP Domain Search Criminal IP Domain Search This robust search engine offers three customizable subscription plans—Lite, Medium, and Pro—including a Free membership option. To determine the most suitable plan based on user's volume of IP Lookup and URL Scan/Lookup requirements, users can explore the Free membership, monitor their credit usage through a user-friendly dashboard, and take advantage of key features for gaining valuable insights. About AI SPERA AI SPERA , a leader in Cyber Threat Intelligence (CTI) solutions, significantly expanded its reach by launching its flagship solution, Criminal IP, in 2023. AI SPERA AI SPERA Since then, the company has formed technical and business collaborations with over 40 renowned global security firms, including Hybrid Analysis, VirusTotal, Cisco, Tenable, Sumo Logic, and Quad9. technical and business collaborations technical and business collaborations Besides the CTI search engine, the company offers Criminal IP ASM, a SaaS-based Attack Surface Management Solution on AWS Marketplace and Azure Marketplace, and Criminal IP FDS, an AI-based Anomaly Detection Solution for credential stuffing prevention and fraud detection. Available in five languages (English, French, Arabic, Korean, and Japanese), the search engine provides a powerful service for users worldwide. search engine search engine Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data For Better Malware Detection

يستخدم التحليل الهجين بيانات المجال القوية لعناوين IP الإجرامية للكشف عن البرامج الضارة بشكل أفضل

Hibrid Təhlil Zərərli proqram təminatının daha yaxşı aşkarlanması üçün Cinayət IP-nin Güclü Domen Məlumatlarından istifadə edir

Η υβριδική ανάλυση χρησιμοποιεί τα ισχυρά δεδομένα τομέα της εγκληματικής IP για καλύτερη ανίχνευση κακόβουλου λογισμικού

El análisis híbrido utiliza datos de dominio robustos de IP criminales para una mejor detección de malware

L'analyse hybride utilise les données de domaine robustes de la propriété intellectuelle criminelle pour une meilleure détection des logiciels malveillants

ハイブリッド分析は犯罪者のIPの堅牢なドメインデータを活用してマルウェア検出を改善します

Гибридті талдау зиянды бағдарламаны жақсырақ анықтау үшін қылмыстық IP-нің сенімді домен деректерін пайдаланады

Análise Híbrida Utiliza Dados de Domínio Robustos de IP Criminoso para Melhor Detecção de Malware

Falanqaynta Isku-dhafka ah waxay adeegsataa Dembiyada IP ee xogta Domain adag si loo ogaado Malware ka wanaagsan

Хибридна анализа користи робусне податке домена криминалне ИП адресе за боље откривање злонамерног софтвера

Таҳлили гибридӣ маълумоти домени ҷиноии IP-ро барои беҳтар муайян кардани нармафзори зараровар истифода мебарад

Ukuhlaziywa Kwe-Hybrid Kusebenzisa Idatha Yesizinda Se-Criminal IP's Robust Ukuze Kutholwe I-Malware Engcono

Author:
(1) Andrew Knight, J.D. (aknight@alum.mit.edu). Table of Links I. Introduction II. Pseudoscience III. Unidentified Assumption IV. False Assumption V. Objection VI. Conclusion and References III. UNIDENTIFIED ASSUMPTION In nearly every account of time travel in which some aspect of the past is changed, it is implicitly assumed that a corresponding or commensurate change would occur to the present. Certainly, chaotic amplification – i.e., the so-called “butterfly effect” – would likely yield larger and more unexpected changes to the present than we might hope.[3] Still, it is tempting to believe that changes to the present depend only on changes to the past, and the magnitude of changes to the present would be commensurate with the magnitude of changes to the past. For example, the so-called grandfather (aka matricide) paradox, in which a time traveler kills one of his ancestors, is widely regarded as a physical limitation to the possibility of time travel. Further, because of the sensitivity of nonlinear dynamics to the precision of initial conditions, it is often (though not always) recognized that even seemingly insignificant changes to the past could result in temporal paradoxes. Hawking [9], among others, asserted that such a paradox can be resolved, and the possibility of time travel into the past maintained, as long as “when you did go back [in time], you wouldn’t be able to change recorded history.” Indeed, if Eq. 1 is correct, then a hopeful time traveler might simply plan to travel back in time and make as few changes as possible – ideally zero changes – to prevent the possibility of changes to the present (including any accompanying time paradox). After all, even the tiniest measurable change to the past might chaotically amplify – a la the grandfather paradox – in a way that prevents the time traveler from choosing to time travel, or even from existing. In other words, if the hopeful time traveler could be certain to make exactly no changes to the past, then he would presumably be guaranteed no changes to the present. Is this notion tenable? No. First, being present in any form in the past requires making physical changes that would chaotically amplify over time. Even passive observation requires the absorption of photons by one’s retinas. It is hard to imagine how one might time travel into the past and perceive any aspect of that experience without interacting in some physical form with his surroundings, and these interactions would necessarily influence the future. Second, as I will argue below, Eq. 1 is false. This paper is available on arxiv under CC BY 4.0 Deed license. [3] Indeed, changing the initial conditions of three gargantuan black holes by an amount smaller than the Planck length would still, given enough time, render their evolutions entirely unpredictable [13]. Author: (1) Andrew Knight, J.D. (aknight@alum.mit.edu). Author: Author: (1) Andrew Knight, J.D. (aknight@alum.mit.edu). Table of Links I. Introduction I. Introduction II. Pseudoscience II. Pseudoscience III. Unidentified Assumption III. Unidentified Assumption IV. False Assumption IV. False Assumption V. Objection V. Objection VI. Conclusion and References VI. Conclusion and References III. UNIDENTIFIED ASSUMPTION In nearly every account of time travel in which some aspect of the past is changed, it is implicitly assumed that a corresponding or commensurate change would occur to the present. Certainly, chaotic amplification – i.e., the so-called “butterfly effect” – would likely yield larger and more unexpected changes to the present than we might hope.[3] Still, it is tempting to believe that changes to the present depend only on changes to the past, and the magnitude of changes to the present would be commensurate with the magnitude of changes to the past. For example, the so-called grandfather (aka matricide) paradox, in which a time traveler kills one of his ancestors, is widely regarded as a physical limitation to the possibility of time travel. Further, because of the sensitivity of nonlinear dynamics to the precision of initial conditions, it is often (though not always) recognized that even seemingly insignificant changes to the past could result in temporal paradoxes. Hawking [9], among others, asserted that such a paradox can be resolved, and the possibility of time travel into the past maintained, as long as “when you did go back [in time], you wouldn’t be able to change recorded history.” Indeed, if Eq. 1 is correct, then a hopeful time traveler might simply plan to travel back in time and make as few changes as possible – ideally zero changes – to prevent the possibility of changes to the present (including any accompanying time paradox). After all, even the tiniest measurable change to the past might chaotically amplify – a la the grandfather paradox – in a way that prevents the time traveler from choosing to time travel, or even from existing. In other words, if the hopeful time traveler could be certain to make exactly no changes to the past, then he would presumably be guaranteed no changes to the present. Is this notion tenable? No. First, being present in any form in the past requires making physical changes that would chaotically amplify over time. Even passive observation requires the absorption of photons by one’s retinas. It is hard to imagine how one might time travel into the past and perceive any aspect of that experience without interacting in some physical form with his surroundings, and these interactions would necessarily influence the future. Second, as I will argue below, Eq. 1 is false. This paper is available on arxiv under CC BY 4.0 Deed license. This paper is available on arxiv under CC BY 4.0 Deed license. available on arxiv [3] Indeed, changing the initial conditions of three gargantuan black holes by an amount smaller than the Planck length would still, given enough time, render their evolutions entirely unpredictable [13].

The Myth of Commensurate Change: Why Altering the Past Doesn’t Guarantee Controlled Outcomes

**TORRANCE, United States / California, June 10th, 2024, CyberNewsWire/--**AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, announced that it has started selling its paid threat detection data from its CTI search engine ‘Criminal IP” on the Snowflake Marketplace. Criminal IP is committed to offering advanced cybersecurity solutions through Snowflake, the leading cloud-based data warehousing platform. Criminal IP’s Intelligence for Fraud Detection and Privacy Protection is meticulously crafted to address the growing concerns surrounding fraudulent activities and privacy breaches. By aggregating data on known malicious and masked IP addresses, including those with historical abuse records such as IDS, malware, phishing, ransomware, and blocked IPs, this dataset equips organizations with actionable insights to identify and mitigate fraudulent activities in real time. Additionally, the product boasts advanced capabilities to detect servers infected by botnet and C2 software, as well as IP addresses leveraging masking services like VPNs, proxies, and hosting. This product is tailored to support fraud detection (FDS) and malicious IP plans, enabling organizations to bolster their security posture and streamline incident response protocols. Criminal IP's Intelligence for Threat Detection & Incident Response is designed to empower organizations to combat cyber threats effectively. This comprehensive cyber threat intelligence dataset provides invaluable insights into malicious IP addresses, leveraging data sourced from Criminal IP's Cyber Threat Intelligence Database (CTIDB). These new datasets on the Snowflake Marketplace offer granular, real-time threat intelligence, enabling organizations to safeguard digital assets, mitigate risks, and respond swiftly to security incidents. Snowflake's global customers can access a complimentary trial of up to 1,000 data items, with subscription options for daily updates. About AI Spera AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, significantly expanded its reach by launching its flagship solution, Criminal IP, in 2023. Since then, the company has formed technical and business collaborations with over 40 renowned global security firms, including VirusTotal, Cisco, Tenable, Sumo Logic, and Quad9. Besides the CTI search engine, the company offers Criminal IP ASM, a SaaS-based Attack Surface Management Solution on AWS and Azure Marketplace, and Criminal IP FDS, an AI-based Anomaly Detection Solution used for credential stuffing prevention and fraud detection. Available in five languages (English, French, Arabic, Korean, and Japanese), the search engine provides a powerful service for users worldwide. Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. **TORRANCE, United States / California, June 10th, 2024, CyberNewsWire/--**AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, announced that it has started selling its paid threat detection data from its CTI search engine ‘Criminal IP” on the Snowflake Marketplace. Criminal IP is committed to offering advanced cybersecurity solutions through Snowflake, the leading cloud-based data warehousing platform. Criminal IP’s Intelligence for Fraud Detection and Privacy Protection is meticulously crafted to address the growing concerns surrounding fraudulent activities and privacy breaches. By aggregating data on known malicious and masked IP addresses, including those with historical abuse records such as IDS, malware, phishing, ransomware, and blocked IPs, this dataset equips organizations with actionable insights to identify and mitigate fraudulent activities in real time. Criminal IP’s Intelligence for Fraud Detection and Privacy Protection Criminal IP’s Intelligence for Fraud Detection and Privacy Protection Additionally, the product boasts advanced capabilities to detect servers infected by botnet and C2 software, as well as IP addresses leveraging masking services like VPNs, proxies, and hosting. This product is tailored to support fraud detection (FDS) and malicious IP plans, enabling organizations to bolster their security posture and streamline incident response protocols. Criminal IP's Intelligence for Threat Detection & Incident Response is designed to empower organizations to combat cyber threats effectively. This comprehensive cyber threat intelligence dataset provides invaluable insights into malicious IP addresses, leveraging data sourced from Criminal IP's Cyber Threat Intelligence Database (CTIDB). Criminal IP's Intelligence for Threat Detection & Incident Response Criminal IP's Intelligence for Threat Detection & Incident Response These new datasets on the Snowflake Marketplace offer granular, real-time threat intelligence, enabling organizations to safeguard digital assets, mitigate risks, and respond swiftly to security incidents. Snowflake's global customers can access a complimentary trial of up to 1,000 data items, with subscription options for daily updates. About AI Spera AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, significantly expanded its reach by launching its flagship solution, Criminal IP, in 2023. Since then, the company has formed technical and business collaborations with over 40 renowned global security firms, including VirusTotal, Cisco, Tenable, Sumo Logic, and Quad9. technical and business collaborations technical and business collaborations Besides the CTI search engine, the company offers Criminal IP ASM, a SaaS-based Attack Surface Management Solution on AWS and Azure Marketplace, and Criminal IP FDS, an AI-based Anomaly Detection Solution used for credential stuffing prevention and fraud detection. Available in five languages (English, French, Arabic, Korean, and Japanese), the search engine provides a powerful service for users worldwide. search engine search engine Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

Criminal IP Unveils Innovative Fraud Detection Data Products On Snowflake Marketplace

First, the moral reason. Despite India being among the fastest growing economies of the world, and the world singing hosannas to the emerging Indian middle class, it scores extremely poorly on most human development indices. The fact that India now has a booming automobile industry with all manner of cars and SUVs choking the sidewalks of our urban centers cannot mask the co-existing abysmal poverty, that too is all too evident. Poverty is not an invisible underbelly in India. It is upfront and stark, but we all pretend that we don't see it. Much as the British colonialists went to their clubs, gymkhanas, and golf courses in pre-independence India, not caring to notice the plight of the common Indian who lived an emaciated existence, much of middle-class India, which is the backbone of the new corporate sector, is blind to the misery of their fellow Indians. This does not reflect well upon us as a people. Where is our moral conscience? How can we be so insensitive to our fellow human beings? The second and perhaps decisive reason is self-interest. The present economic development model is not tenable. It will lead to tremendous unrest. You have to make everybody join in the good times. Look at the sheer numbers of the deprived. How long will they silently watch as the privileged amongst us live better and bigger than ever before? Now more than ever before, we need everybody in the fold. The benefits that will accrue will be tremendous. As we help marginalized people join the mainstream, they will eventually become economic force multipliers. They will lead to economic activity of a scale that will be global in its ramifications. The government is doing what it can to help. The private sector has to pitch in big time- in our cities, towns, villages, and tribal areas. It has to build schools, plant trees, help with rainwater harvesting, clothe and feed the poor, and distribute books. There really is so much that can be done in India. It is heartening to see that companies in the corporate sector are now joining hands with the government and NGOs and helping with community development and environmental issues, besides pure philanthropy. This needs to continue and be taken to the next level. We need our Andrew Carnegies, Warren Buffets, Bill Gates, and Rockefellers. The smaller companies have to get their act together so that CSR is given the prime importance that is due to it. The media professionals have to pitch in by providing adequate coverage to all manner of CSR activity. PR and advertising plans should always have a CSR component, as the easiest thing to do in India is some form of social activity.  There is so much that is wrong and needs to be righted. From uncovered drains to dirty toilets, from streets without lighting to classrooms without books- there are so many causes that can be taken up. Let CSR be the number one priority for the next decade, and see how India moves up the human development indices. Only then will we be able to hold our own on the world stage. All the pretty people in the world driving around in their Ferraris won't do it for us. It is our masses who will do it for us. But they have to be clothed and fed first. First, the moral reason. Despite India being among the fastest growing economies of the world, and the world singing hosannas to the emerging Indian middle class, it scores extremely poorly on most human development indices. The fact that India now has a booming automobile industry with all manner of cars and SUVs choking the sidewalks of our urban centers cannot mask the co-existing abysmal poverty, that too is all too evident. Poverty is not an invisible underbelly in India. It is upfront and stark, but we all pretend that we don't see it. Much as the British colonialists went to their clubs, gymkhanas, and golf courses in pre-independence India, not caring to notice the plight of the common Indian who lived an emaciated existence, much of middle-class India, which is the backbone of the new corporate sector, is blind to the misery of their fellow Indians. This does not reflect well upon us as a people. gymkhanas, Where is our moral conscience? How can we be so insensitive to our fellow human beings? The second and perhaps decisive reason is self-interest. The present economic development model is not tenable. It will lead to tremendous unrest. You have to make everybody join in the good times. Look at the sheer numbers of the deprived. How long will they silently watch as the privileged amongst us live better and bigger than ever before? Now more than ever before, we need everybody in the fold. The benefits that will accrue will be tremendous. As we help marginalized people join the mainstream, they will eventually become economic force multipliers. They will lead to economic activity of a scale that will be global in its ramifications. The government is doing what it can to help. The private sector has to pitch in big time- in our cities, towns, villages, and tribal areas. It has to build schools, plant trees, help with rainwater harvesting, clothe and feed the poor, and distribute books. There really is so much that can be done in India. It is heartening to see that companies in the corporate sector are now joining hands with the government and NGOs and helping with community development and environmental issues, besides pure philanthropy. This needs to continue and be taken to the next level. We need our Andrew Carnegies, Warren Buffets, Bill Gates, and Rockefellers. The smaller companies have to get their act together so that CSR is given the prime importance that is due to it. The media professionals have to pitch in by providing adequate coverage to all manner of CSR activity. PR and advertising plans should always have a CSR component, as the easiest thing to do in India is some form of social activity.  There is so much that is wrong and needs to be righted. From uncovered drains to dirty toilets, from streets without lighting to classrooms without books- there are so many causes that can be taken up. Let CSR be the number one priority for the next decade, and see how India moves up the human development indices. Only then will we be able to hold our own on the world stage. All the pretty people in the world driving around in their Ferraris won't do it for us. It is our masses who will do it for us. But they have to be clothed and fed first.

CSR Is a Must for Indian Companies Irrespective of Size

**TORRANCE, United States / California, May 22nd, 2024/CyberNewsWire/--**AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, announced today that its proprietary search engine, Criminal IP, is now available on the AWS Marketplace. This integration ensures efficient software procurement and deployment, aligning seamlessly with customers' existing cloud architectures. After meeting specific technical and security standards set by AWS, the SaaS-based Criminal IP search engine ensures reliability and seamless integration with AWS services. The AWS Marketplace, a significant platform primarily used in the US, provides Criminal IP with access to a vast global customer base, enhancing its visibility and credibility. This listing demonstrates the critical role of AWS Marketplace in the software's adoption and success. <Criminal IP, a comprehensive threat intelligence tool, is now available on the AWS Marketplace> Criminal IP excels in threat detection, empowering cybersecurity with unparalleled intelligence. Criminal IP is the industry's leading IP address intelligence tool, leveraging AI and machine learning to provide unparalleled visibility into the risks associated with internet-connected devices. It offers comprehensive solutions for fraud detection, attack surface management, and threat hunting. Additionally, Criminal IP offers seamless API integration, allowing effortless incorporation of threat intelligence data into existing services and security systems such as SOAR and SIEM. With a rich repository of cyber threat intelligence data, including risk classification, geographical insights, vulnerable asset graphs, and more, Criminal IP empowers organizations to stay ahead in the ever-evolving landscape of cybersecurity. Seamless Integration and Payment Flexibility Between AWS Marketplace and Criminal IP Criminal IP's presence on the AWS Marketplace brings several conveniences for users. The interconnected tokens of AWS and Criminal IP seamlessly exchange information, allowing users to leverage both platforms' strengths without encountering data silos or compatibility issues. Additionally, customers enjoy consistent plans and subscription options on Criminal IP, regardless of whether transactions are initiated through Criminal IP or the AWS Marketplace. This uniformity extends to credit usage monitoring for specific features and APIs, accessible directly from the dashboard, promoting transparency and ease of management. <Payments on AWS Marketplace seamlessly reflect on Criminal IP> “The most important aspect of entering the AWS Marketplace was to ensure easier compatibility between AWS Cloud and 'Criminal IP' threat intelligence. We paid a lot of attention to interoperability with AWS products and credit management systems,” stated Byungtak Kang, CEO of AI SPERA. “We will continue to pursue Marketplace registration to secure global customers and increase interoperability with various clouds in the future.” Explore the detailed features of the newly listed Criminal IP on the AWS Marketplace, as well as Criminal IP ASM, an Automated Attack Surface Management SaaS solution that monitors all internet-connected assets and vulnerabilities. About AI Spera AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, significantly expanded its reach with the launch of its flagship solution, Criminal IP, in 2023. Since then, the company has established technical and business collaborations with over 40 renowned global security firms, including VirusTotal, Cisco, Tenable, Sumo Logic, and Quad9. Available in five languages (English, French, Arabic, Korean, and Japanese), the search engine ensures a powerful service for users worldwide. In addition to the CTI search engine, the company also offers Criminal IP ASM, a SaaS-based Attack Surface Management Solution available on Azure Marketplace, and Criminal IP FDS, an AI-based Anomaly Detection Solution used for credential stuffing prevention and fraud detection. Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. **TORRANCE, United States / California, May 22nd, 2024/CyberNewsWire/--**AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, announced today that its proprietary search engine, Criminal IP, is now available on the AWS Marketplace. This integration ensures efficient software procurement and deployment, aligning seamlessly with customers' existing cloud architectures. After meeting specific technical and security standards set by AWS, the SaaS-based Criminal IP search engine ensures reliability and seamless integration with AWS services. The AWS Marketplace, a significant platform primarily used in the US, provides Criminal IP with access to a vast global customer base, enhancing its visibility and credibility. This listing demonstrates the critical role of AWS Marketplace in the software's adoption and success. <Criminal IP, a comprehensive threat intelligence tool, is now available on the AWS Marketplace> Criminal IP excels in threat detection, empowering cybersecurity with unparalleled intelligence. Criminal IP is the industry's leading IP address intelligence tool, leveraging AI and machine learning to provide unparalleled visibility into the risks associated with internet-connected devices. It offers comprehensive solutions for fraud detection, attack surface management, and threat hunting. Additionally, Criminal IP offers seamless API integration, allowing effortless incorporation of threat intelligence data into existing services and security systems such as SOAR and SIEM. With a rich repository of cyber threat intelligence data, including risk classification, geographical insights, vulnerable asset graphs, and more, Criminal IP empowers organizations to stay ahead in the ever-evolving landscape of cybersecurity. Seamless Integration and Payment Flexibility Between AWS Marketplace and Criminal IP Criminal IP's presence on the AWS Marketplace brings several conveniences for users. The interconnected tokens of AWS and Criminal IP seamlessly exchange information, allowing users to leverage both platforms' strengths without encountering data silos or compatibility issues. Additionally, customers enjoy consistent plans and subscription options on Criminal IP, regardless of whether transactions are initiated through Criminal IP or the AWS Marketplace. This uniformity extends to credit usage monitoring for specific features and APIs, accessible directly from the dashboard, promoting transparency and ease of management. subscription options subscription options <Payments on AWS Marketplace seamlessly reflect on Criminal IP> “The most important aspect of entering the AWS Marketplace was to ensure easier compatibility between AWS Cloud and 'Criminal IP' threat intelligence. We paid a lot of attention to interoperability with AWS products and credit management systems,” stated Byungtak Kang, CEO of AI SPERA. “We will continue to pursue Marketplace registration to secure global customers and increase interoperability with various clouds in the future.” Explore the detailed features of the newly listed Criminal IP on the AWS Marketplace, as well as Criminal IP ASM, an Automated Attack Surface Management SaaS solution that monitors all internet-connected assets and vulnerabilities. About AI Spera AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, significantly expanded its reach with the launch of its flagship solution, Criminal IP, in 2023. Since then, the company has established technical and business collaborations with over 40 renowned global security firms, including VirusTotal, Cisco, Tenable, Sumo Logic, and Quad9. technical and business collaborations technical and business collaborations Available in five languages (English, French, Arabic, Korean, and Japanese), the search engine ensures a powerful service for users worldwide. In addition to the CTI search engine, the company also offers Criminal IP ASM, a SaaS-based Attack Surface Management Solution available on Azure Marketplace, and Criminal IP FDS, an AI-based Anomaly Detection Solution used for credential stuffing prevention and fraud detection. Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

Criminal IP: Enhancing Security Solutions Through AWS Marketplace Integration

TORRANCE, California, May 13th, 2024/CyberNewsWire/--Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has recently signed a technology partnership to exchange threat intelligence data based on domains and potentially on the IP address to protect users by blocking threats to end users. Criminal IP underwent rigorous data evaluation to integrate with Quad9's threat-blocking service, demonstrating high data uniqueness and accuracy. Particularly, test results revealed a remarkable outcome: 99.1% of malicious domains identified by Criminal IP's threat intelligence were found to be non-duplicative with other TI data. Through this integration, Quad9 leverages the most up-to-date threat intelligence lists, incorporating data from Criminal IP's database of malicious domains to block harmful hostnames. This process not only safeguards computers, mobile devices, and IoT systems from a diverse array of threats like malware, phishing, spyware, and botnets, ensuring privacy, but also optimizes performance. Quad9’s Threat Blocking Enhanced by Criminal IP’s Threat Intelligence Quad9 is a free anycast DNS platform delivering robust security protections and privacy guarantees that comply with rigorous Swiss Data Protection and GDPR rules. Quad9 is operated as a non-profit by the Quad9 Foundation in Switzerland for the purpose of improving the privacy and cybersecurity of Internet users. Operating on a high-performance global network, Quad9 partners with Criminal IP, which offers extensive cyber threat information, including malicious IPs, domains, and CVEs, derived from sophisticated IP and domain scoring algorithms and big data analysis on a worldwide scale, enhances this mission. The specially designed Criminal IP Malicious Domains Retrieval API is used to send the Domain Data Feed identified as malicious to Quad9 for integration. This feed is then utilized alongside other threat intelligence (TI) data sources integrated into the Quad9 platform, such as IBM, OpenPhish, F-Secure, RiskIQ, and Domain Tools, to create a comprehensive blocklist for user protection. Criminal IP’s specialized Domain Threat Intelligence In addition to these comprehensive threat-blocking results on Quad9, for those seeking more information about each component of domains, users can use Domain Search of Criminal IP. The vulnerability scanner tool meticulously analyzes a wide array of domain details including screenshots, WHOIS data, utilized technologies, page redirections, and certificates. It also identifies potentially malicious content and replicated phishing domains, providing an overall domain score and a Domain Generation Algorithm (DGA) score. This global threat intelligence is updated daily and can be accessed through flexible API integration enabling seamless incorporation of the data into existing security systems, such as SOAR and SIEM. "Our partnership with Quad9 is a recognition of the accuracy of Criminal IP's data," stated Byungtak Kang, CEO of AI SPERA. "It is expected that our collaboration will contribute to the protection of Quad9's end-users, who have a global reach, while simultaneously enhancing the quality of Criminal IP's data." End users interested in utilizing the integrated threat-blocking security service of Quad9, which is linked with Criminal IP threat intelligence, can automatically activate the service simply by using the Quad9 DNS server (9.9.9.9). About AI SPERA AI SPERA launched its global cybersecurity service, Criminal IP, on April 17, 2023, following a successful year-long beta phase. The company has established technical and business partnerships with acclaimed global security firms and educational institutions, including VirusTotal, Cisco, Tenable, and Sumo Logic. Criminal IP offers personalized plan options, also suitable for company use. Users can check their own credit usage for specific features (Web, Vulnerability Scanner, Tags, etc.) and API on the dashboard, and upgrade the plan anytime according to their needs. Criminal IP is available in five languages (English, French, Arabic, Korean, and Japanese), providing a powerful and accurate CTI search engine for users worldwide. AI SPERA has been delivering cybersecurity solutions worldwide through a range of products, including Criminal IP CTI Search Engine, Criminal IP ASM, and Criminal IP FDS. Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. TORRANCE, California, May 13th, 2024/CyberNewsWire/--Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has recently signed a technology partnership to exchange threat intelligence data based on domains and potentially on the IP address to protect users by blocking threats to end users. Criminal IP underwent rigorous data evaluation to integrate with Quad9's threat-blocking service, demonstrating high data uniqueness and accuracy. Particularly, test results revealed a remarkable outcome: 99.1% of malicious domains identified by Criminal IP's threat intelligence were found to be non-duplicative with other TI data. Criminal IP Criminal IP Through this integration, Quad9 leverages the most up-to-date threat intelligence lists, incorporating data from Criminal IP's database of malicious domains to block harmful hostnames. This process not only safeguards computers, mobile devices, and IoT systems from a diverse array of threats like malware, phishing, spyware, and botnets, ensuring privacy, but also optimizes performance. Quad9’s Threat Blocking Enhanced by Criminal IP’s Threat Intelligence Quad9 is a free anycast DNS platform delivering robust security protections and privacy guarantees that comply with rigorous Swiss Data Protection and GDPR rules. Quad9 is operated as a non-profit by the Quad9 Foundation in Switzerland for the purpose of improving the privacy and cybersecurity of Internet users. Quad9 Quad9 Operating on a high-performance global network, Quad9 partners with Criminal IP, which offers extensive cyber threat information, including malicious IPs, domains, and CVEs, derived from sophisticated IP and domain scoring algorithms and big data analysis on a worldwide scale, enhances this mission. The specially designed Criminal IP Malicious Domains Retrieval API is used to send the Domain Data Feed identified as malicious to Quad9 for integration. This feed is then utilized alongside other threat intelligence (TI) data sources integrated into the Quad9 platform, such as IBM, OpenPhish, F-Secure, RiskIQ, and Domain Tools, to create a comprehensive blocklist for user protection. Criminal IP’s specialized Domain Threat Intelligence In addition to these comprehensive threat-blocking results on Quad9, for those seeking more information about each component of domains, users can use Domain Search of Criminal IP . The vulnerability scanner tool meticulously analyzes a wide array of domain details including screenshots, WHOIS data, utilized technologies, page redirections, and certificates. Domain Search of Criminal IP Domain Search of Criminal IP It also identifies potentially malicious content and replicated phishing domains, providing an overall domain score and a Domain Generation Algorithm (DGA) score. This global threat intelligence is updated daily and can be accessed through flexible API integration enabling seamless incorporation of the data into existing security systems, such as SOAR and SIEM. "Our partnership with Quad9 is a recognition of the accuracy of Criminal IP's data," stated Byungtak Kang, CEO of AI SPERA. "It is expected that our collaboration will contribute to the protection of Quad9's end-users, who have a global reach, while simultaneously enhancing the quality of Criminal IP's data." End users interested in utilizing the integrated threat-blocking security service of Quad9, which is linked with Criminal IP threat intelligence, can automatically activate the service simply by using the Quad9 DNS server (9.9.9.9). About AI SPERA AI SPERA launched its global cybersecurity service, Criminal IP, on April 17, 2023, following a successful year-long beta phase. The company has established technical and business partnerships with acclaimed global security firms and educational institutions, including VirusTotal, Cisco, Tenable, and Sumo Logic. technical and business partnerships technical and business partnerships Criminal IP offers personalized plan options, also suitable for company use. Users can check their own credit usage for specific features (Web, Vulnerability Scanner, Tags, etc.) and API on the dashboard, and upgrade the plan anytime according to their needs. Criminal IP is available in five languages (English, French, Arabic, Korean, and Japanese), providing a powerful and accurate CTI search engine for users worldwide. AI SPERA has been delivering cybersecurity solutions worldwide through a range of products, including Criminal IP CTI Search Engine, Criminal IP ASM, and Criminal IP FDS. Contact Michael Sena AI SPERA support@aispera.com This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

Criminal IP And Quad9 Collaborate To Exchange Domain And IP Threat Intelligence

United States v. Apple INC Court Filing, retrieved on March 21, 2024 is part of . You can jump to any part in this filing . This part is 7 of 25. HackerNoon’s Legal PDF Series here A. Apple harms competition by imposing contractual restrictions, fees, and taxes on app creation and distribution 52. Apple’s internal documents show that, soon after the iPhone’s introduction and notwithstanding its success, the company began to fear that disintermediation of its platform and the commoditization of the iPhone would threaten Apple’s substantial profits from iPhone sales and related revenue streams. 53. Accordingly, Apple exercised its control of app creation and app distribution in key cases to cement the iPhone and App Store as the primary gateway to apps, products, and services. Apple often claims these rules and restrictions are necessary to protect user privacy or security, but Apple’s documents tell a different story. In reality, Apple imposes certain restrictions to benefit its bottom line by thwarting direct and disruptive competition for its iPhone platform fees and/or for the importance of the iPhone platform itself. 54. Three aspects of Apple’s efforts to protect and exploit its smartphone monopoly are worth noting. First, Apple exercises its control over app distribution and app creation to dictate how developers innovate for the iPhone, enforcing rules and contractual restrictions that stop or delay developers from innovating in ways that threaten Apple’s power. In so doing, Apple influences the direction of innovation both on and off the iPhone. 55. Second, Apple drives iPhone users away from products and services that compete with or threaten Apple. In doing so, Apple increases the cost and friction of switching from the iPhone to another smartphone and generates extraordinary profits through subscription services (like Apple’s proprietary music, gaming, cloud storage, and news services), advertisements within the App Store, and accessories like headphones and smartwatches. 56. Third, Apple uses these restrictions to extract monopoly rents from third parties in a variety of ways, including app fees and revenue-share requirements. For most of the last 15 years, Apple collected a tax in the form of a 30 percent commission on the price of any app downloaded from the App Store, a 30 percent tax on in-app purchases, and fees to access the tools needed to develop iPhone native apps in the first place. While Apple has reduced the tax it collects from a subset of developers, Apple still extracts 30 percent from many app makers. Apple also generates substantial and increasing revenue by charging developers to help users find their apps in the App Store—something that, for years, Apple told developers was part of the reason they paid a 30 percent tax in the first place. For example, Apple will sell keyword searches for an app to someone other than the owner of the app. Apple is able to command these rents from companies of all sizes, including some of the largest and most sophisticated companies in the world. 57. As Apple exercised its control of app distribution and app creation, Apple slowed its own iPhone innovation and extracted more revenue and profit from its existing customers through subscriptions, advertising, and cloud services. These services increase the cost of switching from the iPhone to another smartphone because many of these services—including its proprietary gaming, cloud storage, and news service—are exclusive to the Apple ecosystem, causing significant frictions for iPhone users who try to use alternative services on another smartphone. Moreover, Apple’s conduct demonstrates that Apple recognized the importance of digital products and services for the success of the iPhone while at the same time it restricted the development and growth of non-iPhone products and services—especially those that might make it easier for users to switch from the iPhone to another smartphone. 58. Each step in Apple’s course of conduct built and reinforced the moat around its smartphone monopoly. The cumulative effect of this course of conduct has been to maintain and entrench Apple’s smartphone monopoly at the expense of the users, developers, and other third parties who helped make the iPhone what it is today. Despite major technological changes over the years, Apple’s power to control app creation and distribution and extract fees from developers has remained largely the same, unconstrained by competitive pressures or market forces. That this conduct is impervious to competition reflects the success of Apple’s efforts to create and maintain its smartphone monopoly, the strength of that monopoly, and the durability of Apple’s power. 59. Apple’s monopoly maintenance has taken many forms and continues to evolve today; however, Apple’s anticompetitive and exclusionary course of conduct is exemplified by its contractual rules and restrictions targeting several products and services: super apps, cloud streaming apps, messaging apps, smartwatches, and digital wallets. By stifling these technologies, and many others, Apple reinforces the moat around its smartphone monopoly not by making its products more attractive to users, but by discouraging innovation that threatens Apple’s smartphone monopoly or the disintermediation of the iPhone. Apple continues to expand and shift the scope and categories of anticompetitive conduct such that the cumulative anticompetitive effect of Apple’s conduct is even more powerful than that of each exclusionary act standing alone. i. Super Apps: Apple prevented apps from threatening its smartphone monopoly by undermining mini programs that reduce user dependence on the iPhone 60. For years, Apple denied its users access to super apps because it viewed them as “fundamentally disruptive” to “existing app distribution and development paradigms” and ultimately Apple’s monopoly power. Apple feared super apps because it recognized that as they become popular, “demand for iPhone is reduced.” So, Apple used its control over app distribution and app creation to effectively prohibit developers from offering super apps instead of competing on the merits. 61. A super app is an app that can serve as a platform for smaller “mini” programs developed using programming languages such as HTML5 and JavaScript. By using programming languages standard in most web pages, mini programs are cross platform, meaning they work the same on any web browser and on any device. Developers can therefore write a single mini program that works whether users have an iPhone or another smartphone. 62. Super apps can provide significant benefits to users. For example, a super app that incorporates a multitude of mini programs might allow users to easily discover and access a wide variety of content and services without setting up and logging into multiple apps, not unlike how Netflix and Hulu allow users to find and watch thousands of movies and television shows in a single app. As one Apple executive put it, “who doesn’t want faster, easier to discover apps that do everything a full app does?” Restricting super apps makes users worse off and sacrifices the short-term profitability of iPhones for Apple. 63. Super apps also reduce user dependence on the iPhone, including the iOS operating system and Apple’s App Store. This is because a super app is a kind of middleware that can host apps, services, and experiences without requiring developers to use the iPhone’s APIs or code. 64. As users interact with a super app, they rely less on the smartphone’s proprietary software and more on the app itself. Eventually, users become more willing to choose a different smartphone because they can access the same interface, apps, and content they desire on any smartphone where the super app is also present. Moreover, developers can write mini programs that run on the super app without having to write separate apps for iPhones and other smartphones. This lowers barriers to entry for smartphone rivals, decreases Apple’s control over third-party developers, and reduces switching costs. 65. Apple recognizes that super apps with mini programs would threaten its monopoly. As one Apple manager put it, allowing super apps to become “the main gateway where people play games, book a car, make payments, etc.” would “let the barbarians in at the gate.” Why? Because when a super app offers popular mini programs, “iOS stickiness goes down.” 66. Apple’s fear of super apps is based on first-hand experience with enormously popular super apps in Asia. Apple does not want U.S. companies and U.S. users to benefit from similar innovations. For example, in a Board of Directors presentation, Apple highlighted the “[u]ndifferentiated user experience on [a] super platform” as a “major headwind” to growing iPhone sales in countries with popular super apps due to the “[l]ow stickiness” and “[l]ow switching cost.” For the same reasons, a super app created by a U.S. company would pose a similar threat to Apple’s smartphone dominance in the United States. Apple noted as a risk in 2017 that a potential super app created by a specific U.S. company would “replace[ ] usage of native OS and apps resulting in commoditization of smartphone hardware.” 67. Apple did not respond to the risk that super apps might disrupt its monopoly by innovating. Instead, Apple exerted its control over app distribution to stifle others’ innovation. Apple created, strategically broadened, and aggressively enforced its App Store Guidelines to effectively block apps from hosting mini programs. Apple’s conduct disincentivized investments in mini program development and caused U.S. companies to abandon or limit support for the technology in the United States. 68. In particular, part of what makes super apps valuable to consumers is that finding and using mini programs is easier than using an app store and navigating many separate apps, passwords, and set-up processes. Instead of making mini program discovery easy for users, however, Apple made it nearly impossible. 69. Since at least 2017, Apple has arbitrarily imposed exclusionary requirements that unnecessarily and unjustifiably restrict mini programs and super apps. For example, Apple required apps in the United States to display mini programs using a flat, text-only list of mini programs. Apple also banned displaying mini programs with icons or tiles, such as descriptive pictures of the content or service offered by the mini program. Apple also banned apps from categorizing mini programs, such as by displaying recently played games or more games by the same developer. These restrictions throttle the popularity of mini programs and ultimately make the iPhone worse because it discourages developers from creating apps and other content that would be attractive to iPhone users. 70. Apple also selectively enforced its contractual rules with developers to prevent developers from monetizing mini programs, hurting both users and developers. For example, Apple blocked mini programs from accessing the APIs needed to implement Apple’s in-app payment (IAP) system—even if developers were willing to pay Apple’s monopoly tax. Similarly, Apple blocked developers’ ability to use in-app payment methods other than directly using IAP. For instance, super apps could create a virtual currency for consumers to use in mini programs, but Apple blocked this too. Apple, however, allows other, less-threatening apps to do so. ii. Cloud Streaming Apps: Apple prevented developers from offering cloud gaming apps that reduce dependence on the iPhone’s expensive hardware 71. For years, Apple blocked cloud gaming apps that would have given users access to desirable apps and content without needing to pay for expensive Apple hardware because this would threaten its monopoly power. In Apple’s own words, it feared a world where “all that matters is who has the cheapest hardware” and consumers could “buy[] a [expletive] Android for 25 bux at a garage sale and . . . have a solid cloud computing device” that “works fine.” Apple’s conduct made its own product worse because consumers missed out on apps and content. This conduct also cost Apple substantial revenues from third-party developers. At the same time, Apple also made other smartphones worse by stifling the growth of these cross-platform apps on other smartphones. Importantly, Apple prevented the emergence of technologies that could lower the price that consumers pay for iPhones. 72. Cloud streaming apps let users run a computationally intensive program without having to process or store the program on the smartphone itself. Instead, a user’s smartphone leverages the computing power of a remote server, which runs the program and streams the result back to the phone. Cloud streaming allows developers to bring cutting-edge technologies and services to smartphone consumers—including gaming and interactive artificial intelligence services—even if their smartphone includes hardware that is less powerful than an iPhone. 73. Cloud streaming has significant benefits for users. For example, Apple has promoted the iPhone 15 by promising that its hardware is powerful enough to enable “next-level performance and mobile gaming.” But powerful hardware is unnecessary if games are played via cloud streaming apps. For a cloud game, the user experiences and plays the game on the smartphone, but the game is run by hardware and software in remote computing centers (“the cloud”). Thus, cloud gaming apps deliver rich gaming experiences on smartphones without the need for users to purchase powerful, expensive hardware. As a result, users with access to cloud streamed games may be more willing to switch from an iPhone to a smartphone with less expensive hardware because both smartphones can run desirable games equally well. 74. Cloud streaming also has significant advantages for developers. For example, instead of re-writing the same game for multiple operating systems, cloud platforms can act as middleware that allow developers to create a single app that works across iOS, Android, and other operating systems. Cloud streaming provides more and simpler options for offering subscriptions, collecting payments, and distributing software updates as well. All of this helps game developers reach economies of scale and profitability they might not achieve without offering cloud gaming apps and reduces their dependence on iOS and Apple’s App Store. 75. Apple wielded its power over app distribution to effectively prevent third-party developers from offering cloud gaming subscription services as a native app on the iPhone. Even today, none are currently available on the iPhone. 76. For years, Apple imposed the onerous requirement that any cloud streaming game—or any update to a cloud streaming game—be submitted as a stand-alone app for approval by Apple. Having to submit individual cloud streaming games for review by Apple increased the cost of releasing games on the iPhone and limited the number of games a developer could make available to iPhone users. For example, the highest quality games, referred to as AAA games, typically require daily or even hourly updates across different platforms. If these updates need to be individually approved by Apple, developers must either delay their software updates across all platforms or only update their games on non-iOS platforms, potentially making the iOS version of the game incompatible with other versions on other platforms until Apple approves the update. Neither option is tenable for players or developers. 77. Until recently, Apple would have required users to download cloud streaming software separately for each individual game, install identical app updates for each game individually, and make repeated trips to Apple’s App Store to find and download games. Apple’s conduct made cloud streaming apps so unattractive to users that no developer designed one for the iPhone. 78. Apple undermines cloud gaming apps in other ways too, such as by requiring cloud games to use Apple’s proprietary payment system and necessitating game overhauls and payment redesigns specifically for the iPhone. Apple’s rules and restrictions effectively force developers to create a separate iOS-specific version of their app instead of creating a single cloud-based version that is compatible with several operating systems, including iOS. As a result, developers expend considerable time and resources re-engineering apps to bring crossplatform apps like multiplayer games to the iPhone. 79. Cloud streaming apps broadly speaking—not just gaming—could force Apple to compete more vigorously against rivals. As one Apple manager recognized, cloud streaming eliminates “a big reason for high-performance local compute” and thus eliminates one of the iPhone’s advantages over other smartphones because then “all that matters is who has the cheapest hardware.” Accordingly, it reduces the need for users to buy expensive phones with advanced hardware. This problem does not “stop at high-end gaming,” but applies to “a number of high-compute requirement applications.” Continue Reading . Here About HackerNoon Legal PDF Series: We bring you the most important technical and insightful public domain court case filings. This court case retrieved on March 21, 2024, from is part of the public domain. The court-created documents are works of the federal government, and under copyright law, are automatically placed in the public domain and may be shared without legal restriction. justice.gov

Apple Harms Competition by Imposing Restrictions, Fees, and Taxes on App Creation and Distribution

Exercises are intended to be used

What Is CloudMapper? CloudMapper serves as an indispensable tool for anyone navigating the complexities of Amazon Web Services (AWS). This open-source utility provides a detailed analysis of an AWS account's architecture and security posture, making it ideal for security analysts, developers, and system architects seeking to gain insights into their cloud resources. Originally developed to graphically represent network architecture within AWS, CloudMapper has grown in functionality, now offering resources inventory, security assessment of IAM policies, visualization of public and private resources, and much more. The genesis of CloudMapper was rooted in the need to simplify security audits and risk assessments within expanding cloud infrastructures. As a comprehensive response to these challenges, it evolved to assess security configurations and identify potential vulnerabilities across AWS regions. Its ability to map out AWS landscapes with precision has made it a favorite among organizations for maintaining robust security measures and ensuring the integrity of its cloud infrastructure. In an ecosystem where comprehensive cloud-native application protection platforms (CNAPP), cloud security posture management (CSPM), and cloud workload protection platforms (CWPP) are increasingly common, CloudMapper offers a no-cost alternative that might be just enough to bridge the gap for many users. While these full-featured platforms provide extensive capabilities, they often come with a hefty price tag and complexity that not all organizations require. For teams that need a straightforward, focused approach to cloud environment analysis and security, CloudMapper stands as a capable and cost-effective tool, delivering essential features that are more than sufficient for maintaining a strong security posture and optimized resource use in AWS. Why CloudMapper (You Get What You Pay For, Or Do You?) CloudMapper enters the cloud management arena as a compelling alternative to paid tools with its robust set of features that offer detailed visibility into AWS environments. For organizations wary of the substantial investment required for premium cloud analysis services, CloudMapper presents an opportunity to perform in-depth reviews of account status, resource inventories, and security configurations without the associated costs. This open-source tool is particularly valuable for small to medium-sized enterprises or startups that require comprehensive cloud oversight but must adhere to strict budgetary constraints. It might be possible to augment, or in some limited situations, replace paid solutions like those from Ermetic (now ), , , , and others. Tenable Aqua Lacework Palo Alto Networks The utility of CloudMapper extends beyond cost-saving; it's an essential instrument for a variety of use cases. It can be instrumental for security engineers conducting audits or companies looking to optimize their cloud resource utilization. For instance, during migration phases, CloudMapper can identify over-provisioned resources, helping to trim excess and avoid unnecessary expenses. Security teams can utilize CloudMapper's detailed IAM and security group analysis to enhance their security posture, ensuring that only necessary permissions are granted and that potential vulnerabilities are addressed. Whether it’s for strategic planning, compliance adherence, or security hardening, CloudMapper provides the insights needed to navigate AWS's cloud complexities with precision and confidence. Key Features of CloudMapper CloudMapper is equipped with a suite of functionalities tailored to the diverse needs of cloud infrastructure management. Its primary use cases include generating detailed resource inventories across multiple AWS regions, enabling a granular view of service usage and deployments. This feature is particularly helpful for cost management and identifying redundant resources. CloudMapper also specializes in visualizing complex network topologies, giving users the ability to see interconnections between services and assess their security exposure. For security audits, the tool meticulously examines IAM configurations, highlighting both active and inactive resources, and it scrutinizes public assets like EC2 instances and RDS databases to pinpoint potential security gaps. A lesser-known but highly valuable feature of CloudMapper is its ability to simulate network traffic to test the impact of route table and security group changes before they are implemented. This predictive capability allows engineers to proactively assess the potential consequences of network updates, thereby preventing disruptions and security breaches. This preemptive analysis tool can serve as a safeguard against inadvertent misconfigurations that could lead to costly downtime or security incidents, proving CloudMapper’s utility not just in analysis and visualization, but also in proactive infrastructure management. Wrap It Up CloudMapper stands out as an essential toolkit for any team working with AWS, offering a powerful yet cost-effective solution for cloud environment analysis. Its ability to provide deep insights and visualizations empowers users to manage and secure their AWS resources with unprecedented clarity. As we've explored its various use cases and the unique features it brings to the table, it's clear that CloudMapper is more than just a tool—it's a strategic asset for cloud management. But is it to provide all the insight and depth required to confidently secure a cloud environment? enough Stay tuned for Part 2 of our exploration into CloudMapper, where we'll dive into a hands-on, step-by-step setup guide. Whether you're new to AWS or looking to enhance your current infrastructure, our upcoming guide will equip you with the knowledge to deploy CloudMapper efficiently, unlocking its full potential to streamline your cloud operations. Don't miss this practical walkthrough to elevate your AWS experience with CloudMapper's dynamic capabilities.

Stories, News & Mentions about TENABLE

Tenable’s Stories on HackerNoon

Tenable's News & Mentions