password

“WWDC 2024: Apple’s Rob, Or Borrowed? A Look at the Apps that Got Sherlocked”

Tim Cook Apple Wwdc 1
But a lot of those features were already available to some extent on Apple devices through third-party apps. So, just like the past few years, we will examine the ideas that Apple “Sherlocked” in this year’s updates. But what do we mean that Apple “sherlocked” something? Feature: Voice transcriptionSherlocked apps: Otter, AudioPen, Voicenotes.comApart from call transcription, Apple will also offer voice transcription in apps like Notes with the upcoming updates. That said, some of these Sherlocked apps might survive by offering customized or enterprise solutions, but some small-scale indie apps will eventually lose users to Apple.

“Introducing the All-New Password Manager App by Apple”

Wwdc24 Macos Passwords 04
Passwords were available from the Settings app on your Mac or iPhone. Now, the company is introducing the Passwords app at WWDC 2024. It will be available with the next major releases of iOS, macOS and visionOS, that is iOS 18, macOS Sequoia and visionOS 2. As a reminder, iCloud Passwords already support shared passwords, verification codes and a note field for every password entry. This new app will make it easier to get started and think about using iCloud Passwords to store your sensitive information.

Russian Hackers Also Targeted Other Organizations, According to Microsoft

Microsoft Midnight Blizzard Hack
On Friday, Microsoft revealed that it had been the victim of a hack carried out by Russian government spies. In a new blog post, Microsoft said that “the same actor has been targeting other organizations and, as part of our usual notification processes, we have begun notifying these targeted organizations.”At this point, it’s unclear how many organizations the Russian-backed hackers targeted. Microsoft, however, said that the hackers specifically targeted the company’s senior executives, as well as people who work in cybersecurity, legal, and other departments. The hackers were able to steal “some emails and attached documents.”Curiously, the hackers were interested in finding out information about themselves, specifically what Microsoft knows about them, the company said. On Thursday, Hewlett Packard Enterprise (HPE) disclosed that its Microsoft-hosted email system was hacked by Midnight Blizzard.

The Unintended Leak of Mercedes-Benz Source Code: A Consequence of a Published Password Error

Gettyimages 103035382
Mercedes-Benz accidentally exposed a trove of internal data after leaving a private key online that gave “unrestricted access” to the company’s source code, according to the security research firm that discovered it. The London-based cybersecurity company said it discovered a Mercedes employee’s authentication token in a public GitHub repository during a routine internet scan in January. According to Mittal, this token — an alternative to using a password for authenticating to GitHub — could grant anyone full access to Mercedes’s GitHub Enterprise Server, thus allowing the download of the company’s private source code repositories. “The GitHub token gave ‘unrestricted’ and ‘unmonitored’ access to the entire source code hosted at the internal GitHub Enterprise Server,” Mittal explained in a report shared by TechCrunch. It’s not known if anyone else besides Mittal discovered the exposed key, which was published in late-September 2023.