Connect with us

E-Business

Google Discloses Three Severe Vulnerabilities in Apple OS X

Published

on

Kindly share this post

Researchers with Google’s Project Zero security team say they’ve found three flaws with high severity that have yet to be patched.

Google’s Project Zero security team revealed the existence this week of three vulnerabilities with high severity that have yet to be fixed in Apple’s OS X operating system.

Although each of the flaws requires an attacker to have access to a targeted Mac, they could all contribute to a successful attempt to elevate privilege levels and take over a machine.

The first flaw, “OS X networkd “effective_audit_token” XPC type confusion sandbox escape,” involves circumvention of commands in the network system and may be mitigated in OS X Yosemite, but there is no clear explanation of whether this is the case. The second vulnerability documents “OS X IOKit kernel code execution due to NULL pointer dereference in IntelAccelerator.”

The third one, “OS X IOKit kernel memory corruption due to bad bzero in IOBluetoothDevice.” includes an exploit related to OS X’s kernel structure.

Each vulnerability, as with any disclosed by the Project Zero team, includes a proof-of-concept exploit.

The vulnerabilities were reported to Apple back in October but the flaws have not been fixed. After 90 days, details of vulnerabilities found by Project Zero are automatically released to the public — which is what happened this week.

Project Zero, which Google officially launched in mid-2014, tasks researchers with uncovering any software flaws that have the potential of leading to targeted attacks on people’s computers.

On Apple’s product security page, the company states: “For the protection of our customers, Apple does not disclose, discuss or confirm security issues until a full investigation has occurred and any necessary patches or releases are available.”

This isn’t the first time Google’s Project Zero has published vulnerabilities that are yet to be fixed. In the past several weeks, the tech giant’s security team has published information about three separate, unpatched security flaws in Microsoft’s Windows operating system.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Expert Urges FG to Harmonise NIN, BVN to Tackle Crimes

Published

on

Kindly share this post

Noble Ajuonu, head, Sydani Technologies Ltd., has urged the Federal Government to harmonise National Identification Number (NIN) and Bank Verification Number (BVN) to tackle crimes and insecurity in the country.

Expert Urges FG to Harmonise NIN, BVN to Tackle Crimes

Ajuonu made the call at a media roundtable, organised by Sydani Group in Abuja.

The News Agency of Nigeria (NAN) reports that the roundtable focuses on driving sustainability through a comprehensive analysis of Nigeria’s key development areas.

Ajuonu said that Nigeria could overcome its security challenges and pave the way for a safer, more secure future for all Nigerians by embracing technology and implementing practical solutions,

“We need to harmonise data, prioritise seamless integration of databases like NIN, BVN, and security agency records, establish clear protocols for data sharing and access, with robust safeguards against misuse,’’ expert said.

According to him, the unified data pool will empower intelligence gathering and targeted operations.

He also called for investments in smart surveillance, intelligent video analytics software, training of personnel in data analysis, interpretation of data in real-time to combat crimes.

“There is need to implement a legal framework for call interception in criminal investigations, with strict oversight to prevent abuse, encourage community cohesion, training of tech savvy security personnel with tech-enabled tools.’’

Ajuonu also urged the government to address infrastructure deficit in technology, saying that technology was all encompassing to address insecurity.

“According to the National Identity Management Commission (NIMC), as of December 2023, only 104.2 million Nigerians had been enrolled for the National Identity Number (NIN).’’

Ajuonu added that over 122.2 million citizens left uncaptured for NIN were people in rural areas where enrolment centres, digital services were limited.

“Most crimes are being perpetuated from rural communities and this lack of comprehensive identification creates a gap where elements not captured in the national database can constitute public nuisance, crimes.

“There is the inadequacy in the integration of NIN, BVN and Voters Identification Number (VIN).

“Advanced call interception and analysis tools, used successfully in other countries, could provide invaluable insights into criminal networks and operations but infrastructure is lacking,’’ he said.

Also, Mr Godfrey Petgrave, the Agricultural Expert, Sydani Group, called for empowerment of smallholder farmers with access to finance and training to enhance productivity.

According to Petgrave, Nigeria requires policy reform and institutional strengthening to improve agricultural practices and embrace digital agriculture solutions to address food insecurity.

Mr Akolade Jimoh, another expert of the group on health, advocated for expanded community-based health insurance programmes for rural and underserved areas.

Jimoh added that the country needed to encourage Public Private Partnership to revolutionise products design and quality improvement on health services.


Kindly share this post
Continue Reading

E-Business

Konga launches Infinix Brand Week with Incredible Deals

Published

on

Kindly share this post

Konga, Nigeria’s leading composite e-commerce group, is thrilled to announce the launch of amazing deals at its Infinix Brand Week. Infinix, a leading global smartphone brand known for its innovative products and cutting-edge technology promises exclusive discounts and special offers on select smartphones, marking an exciting milestone in the realm of online shopping.

Shoppers can expect nothing short of extraordinary deals on a wide range of Infinix products, all available exclusively on the Konga online platform. With discounts of up to 30% off, this partnership between Konga and Infinix aims to redefine the shopping experience for tech enthusiasts across Nigeria.

Konga Brand Week has become synonymous with excitement and unbeatable deals, and this year’s edition is no exception. In addition to exclusive discounts on Infinix smartphones, shoppers can explore a diverse array of products across various categories, including electronics, fashion, home essentials, and more.

“At Konga, we are dedicated to providing our customers with the best shopping experience possible,” said Rita Ohaedoghasi, VP Marketing at Konga. “The Infinix Week during Konga Brand Week allows us to continue delivering on that promise by offering incredible discounts and special offers on some of the most sought-after smartphones in the market.”

To stay updated on the latest developments and exclusive deals during Konga Brand Week, shoppers are encouraged to connect with Konga across all platforms, including social media and the Konga website. Don’t miss out on this opportunity to score big savings and elevate your tech game with Infinix and Konga.


Kindly share this post
Continue Reading

E-Business

Study Reveals Software Programmers to make Full Use of AI Code Assistants

Published

on

Kindly share this post

Gartner predicts that by 2028, 75 percent of enterprise software engineers will use Artificial Intelligence (AI) code assistants, up from less than 10 percent, currently.

According to a Gartner poll of 598 global respondents conducted in the third quarter of 2023, 63 percent of organisations are now testing, deploying, or have previously implemented AI code assistants.

AI code assistants provide for more capabilities than only code development and completion, notes the research firm.

According to Gartner, the use of AI code assistants can lead to higher work satisfaction and retention, resulting in lower turnover costs.

Philip Walsh, senior principal analyst at Gartner, comments: “Software engineering leaders must determine ROI and build a business case as they scale their rollouts of AI code assistants.

“However, traditional ROI frameworks steer engineering leaders toward metrics centred on cost reduction. This narrow perspective fails to capture the full value of AI code assistants.”

Gartner notes that software engineering leaders must “reframe the ROI conversation from cost reduction to value generations”.

Walsh adds: “Calculating time savings on code generation is a good place to begin building a more robust value story. To convey the full enterprise value story for AI code assistants, software engineering leaders should connect value enablers to impacts, and then analyse the overall return to the organisation.”

 


Kindly share this post
Continue Reading

Trending