Connect with us

Tech

ShinyHunters linked to breach of French luxury goods house | Computer Weekly

Published

on

ShinyHunters linked to breach of French luxury goods house | Computer Weekly


Kering, the France-based parent of luxury brands such as Alexander McQueen, Balenciaga and Gucci, has admitted the personal data of customers has been compromised following an apparent ransomware attack that is being linked to the ShinyHunters hacking collective through a wide-ranging compromise of various Salesforce instances.

The purloined data is thought to comprise personal information including names and contact details, and information on customer spending history. The firm said that no financial or credit card data was affected.

A spokesperson for the organisation told the BBC that the compromise was uncovered in June. They said: “An unauthorised third party gained temporary access to our systems and accessed limited customer data from some of our Houses. No financial information … or government-issued identification numbers, was involved in the incident.”

The BBC additionally reported that Kering says it has refused to pay a ransom. However, via Telegram chat with an alleged ShinyHunters representative claiming the attack, the broadcaster also learned that negotiations have apparently taken place. ShinyHunters apparently breached Kering’s defences in April.

Kevin Marriott, senior manager of cyber and head of security operations at Immersive, said the apparent delay likely indicated some form of negotiation to suppress the leak had indeed occurred – or possibly that the data has now been sold and is being exploited.

Nevertheless, he said, the latest attacks continue a trend of incidents affecting luxury brands, with Kering rival LVMH also being targeted.

“What makes this particular breach so concerning is that not only were emails, phone numbers and addresses taken, but the data related to customer spend may be used to prioritise the customers impacted as targets in further attacks, through targeted social engineering attacks or identity fraud,” said Marriott.

“The latest breach affecting Gucci, Balenciaga and Alexander McQueen underlines the risks luxury brands face as prominent targets for cyber crime,” added Joseph Rooke, director of risk insight at Recorded Future’s Insikt Group.

“Attackers are drawn to these companies not only because of the global recognition of their brands, but also because their customer bases include high-net-worth individuals whose personal details can be especially valuable.” 

Controlling the story

ShinyHunters’ use of high-profile national broadcasters to spread its message as widely as possible has been a hallmark of the extensive cyber attack campaign the gang – and associated ‘acts’ like Scattered Spider – have conducted during 2025.

Speaking to MPs in July, Marks & Spencer chairman Archie Norman described the “unusual experience” of learning about new developments in the Scattered Spider attack on the retailer from the BBC, where reporters have been in contact with several of the hackers.

Lee Sult, chief investigator at Binalyze, said that in too many cases, victims were losing control of the narrative and allowing their attackers to cause more harm by showboating in public.

“If attackers control the narrative, they can further damage their targets’ reputation and potentially spread misinformation,” said Sult.

“Getting ahead of this and owning the story means organisations can rebut false claims with confidence. But for this to happen, investigation cannot be something that happens after the dust settles.

“Instead it should be completed in hours instead of days, bringing light into the obscure areas so attackers have less space to make up stories,” he said.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Wristband enables wearers to control a robotic hand with their own movements

Published

on

Wristband enables wearers to control a robotic hand with their own movements



The next time you’re scrolling your phone, take a moment to appreciate the feat: The seemingly mundane act is possible thanks to the coordination of 34 muscles, 27 joints, and over 100 tendons and ligaments in your hand. Indeed, our hands are the most nimble parts of our bodies. Mimicking their many nuanced gestures has been a longstanding challenge in robotics and virtual reality.

Now, MIT engineers have designed an ultrasound wristband that precisely tracks a wearer’s hand movements in real-time. The wristband produces ultrasound images of the wrist’s muscles, tendons, and ligaments as the hand moves, and is paired with an artificial intelligence algorithm that continuously translates the images into the corresponding positions of the five fingers and palm.

The researchers can train the wristband to learn a wearer’s hand motions, which the device can communicate in real-time to a robot or a virtual environment.

In demonstrations, the team has shown that a person wearing the wristband can wirelessly control a robotic hand. As the person gestures or points, the robot does the same. In a sort of wireless marionette interaction, the wearer can manipulate the robot to play a simple tune on the piano and shoot a small basketball into a desktop hoop. With the same wristband, a wearer can also manipulate objects on a computer screen, for instance pinching their fingers together to enlarge and minimize a virtual object.

The team is using the wristband to gather hand motion data from many more users with different hand sizes, finger shapes, and gestures. They envision building a large dataset of hand motions that can be plumbed, for instance, to train humanoid robots in dexterity tasks, such as performing certain surgical procedures. The ultrasound band could also be used to grasp, manipulate, and interact with objects in video games, design applications, or other virtual settings.

“We think this work has immediate impact in potentially replacing hand tracking techniques with wearable ultrasound bands in virtual and augmented reality,” says Xuanhe Zhao, the Uncas and Helen Whitaker Professor of Mechanical Engineering at MIT. “It could also provide huge amounts of training data for dexterous humanoid robots.”

Zhao, Gengxi Lu, and their colleagues present the wristband’s new design in a paper appearing today in Nature Electronics. Their MIT co-authors are former postdocs Xiaoyu Chen, Shucong Li, and Bolei Deng; graduate students SeongHyeon Kim and Dian Li; postdocs Shu Wang and Runze Li; and Anantha Chandrakasan, MIT provost and the Vannevar Bush Professor of Electrical Engineering and Computer Science. Other co-authors are graduate students Yushun Zheng and Junhang Zhang, Baoqiang Liu, Chen Gong, and Professor Qifa Zhou from the University of Southern California.

Seeing strings

There are currently a number of approaches to capturing and mimicking human hand dexterity in robots. Some approaches use cameras to record a person’s hand movements as they manipulate objects or perform tasks. Others involve having a person wear a glove with sensors, which records the person’s hand movements and transmits the data to a receiving robot. But erecting a complex camera system for different applications is impractical and prone to visual obstacles. And sensor-laden gloves could limit a person’s natural hand motions and sensations.

A third approach uses the electrical signals from muscles in the wrist or forearm that scientists then correlate with specific hand movements. Researchers have made significant advances in this approach, however these signals are easily affected by noise in the environment. They are also not sensitive enough to distinguish subtle changes in movements. For instance, they may discern whether a thumb and index finger are pinched together or pulled apart, but not much of the in-between path.

Zhao’s team wondered whether ultrasound imaging might capture more dexterous and continuous hand movements. His group has been developing various forms of ultrasound stickers — miniaturized versions of the transducers used in doctor’s offices that are paired with hydrogel material that can safely stick to skin.

In their new study, the team incorporated the ultrasound sticker design into a wearable wristband to continuously image the muscles and tendons in the wrist.

“The tendons and muscles in your wrist are like strings pulling on puppets, which are your fingers,” Lu says. “So the idea is: Each time you take a picture of the state of the strings, you’ll know the state of the hand.”

Mapping manipulation

The team designed a wristband with an ultrasound sticker that is the size of a smartwatch, and added onboard electronics that are about as small as a cellphone. They attached the wristband to a volunteer’s wrist and confirmed that the device produced clear and continuous images of the wrist as the volunteer moved their fingers in various gestures.

The challenge then was to relate the black and white ultrasound images of the wrist to specific positions of the hand. As it turns out, the fingers and thumb are capable of 22 degrees of freedom, or different ways of extending or angling. The researchers found that they could identify specific regions in their ultrasound images of the wrist that correlate to each of these 22 degrees of freedom. For instance, changes in one region relate to thumb extension, while changes in another region correlate with movements of the index finger.

To establish these connections, a volunteer wearing the wristband would move their hand in various positions while the researchers recorded the gestures with multiple cameras surrounding the volunteer. By matching changes in certain regions of the ultrasound images with hand positions recorded by the cameras, the team could label wrist image regions with the corresponding degree of freedom in the hand. But to do this translation continuously, and in real-time, would be an impossible task for humans.

So, the team turned to artificial intelligence. They used an AI algorithm that can be trained to recognize image patterns and correlate them with specific labels and, in this case, the hand’s various degrees of freedom. The researchers trained the algorithm with ultrasound images that they meticulously labeled, annotating the image regions associated with a specific degree of freedom. They tested the algorithm on a new set of ultrasound images and found it correctly predicted the corresponding hand gestures.

Once the researchers successfully paired the AI algorithm with the wristband, they tested the device on more volunteers. For the new study, eight volunteers with different hand and wrist sizes wore the wristband while they formed various hand gestures and grasps, including making the signs for all 26 letters in American Sign Language. They also held objects such as a tennis ball, a plastic bottle, a pair of scissors, and a pencil. In each case, the wristband precisely tracked and predicted the position of the hand.

To demonstrate potential applications, the team developed a simple computer program that they wirelessly paired with the wristband. As a wearer went through the motions of pinching and grasping, the gestures corresponded to zooming in and out on an object on the computer screen, and virtually moving and manipulating it in a smooth and continuous fashion.

The researchers also tested the wristband as a wireless controller of a simple commercial robotic hand. While wearing the wristband, a volunteer went through the motions of playing a keyboard. The robot in turn mimicked the motions in real-time to play a simple tune on a piano. The same robot was also able to mimic a person’s finger taps to play a desktop basketball game.

Zhao is planning to further miniaturize the wristband’s hardware, as well as train the AI software on many more gestures and movements from volunteers with wider ranging hand sizes and shapes. Ultimately, the team is building toward a wearable hand tracker that can be worn by anyone, to wirelessly manipulate humanoid robots or virtual objects with high dexterity.

“We believe this is the most advanced way to track dexterous hand motion, through wearable imaging of the wrist,” Zhao says. “We think these wearable ultrasound bands can provide intuitive and versatile controls for virtual reality and robotic hands.”

This research was supported, in part, by MIT, the U.S. National Institutes of Health, the U.S. National Science Foundation, the U.S. Department of Defense, and Singapore National Research Foundation through the Singapore-MIT Alliance for Research and Technology.



Source link

Continue Reading

Tech

Iranians Don’t Have a Missile Alert System, So Volunteers Built Their Own Warning Map

Published

on

Iranians Don’t Have a Missile Alert System, So Volunteers Built Their Own Warning Map


Since Donald Trump’s war on Iran started more than three weeks ago, United States military forces have allegedly attacked more than 9,000 sites, creating a climate of fear and constant uncertainty for Iranians in Tehran and across the country. Without an advanced warning system from the government, and amid the longest internet shutdown in Iran’s history, Iranians are left in an information void.

Even before Israel and the United States began dropping bombs, Iran’s lack of a public emergency alert tool and severe state-controlled digital oppression has impacted tens of millions of citizens. Since the 12-day Israel-Iran war last year, though, a group of Iranian digital rights activists and volunteers has been working to fill the gap with a dynamic, regularly updated mapping platform called Mahsa Alert. The project can’t replace real-time early alerts that could come from a coordinated government service, but the tool sends push notifications when Israeli forces warn about attacks, details some confirmed strike locations, and offers offline mapping capabilities.

“There is no emergency alert in Iran,” says Ahmad Ahmadian, the president and CEO of US-based digital rights group Holistic Resilience, which is behind Mahsa Alert and has been developing the platform since last summer. “This was where we saw the traction, we saw the need, and we continued working on it with the volunteers, with some [open source intelligence] experts, and used this to map the repression machinery ecosystem of Iran and surveillance.”

Mahsa Alert is a website but also has Android and iOS apps, which were intentionally designed to be lightweight and easy to use on any device. Given the heavy government connectivity control inside Iran and erratic access to the internet, volunteers also prioritized engineering the platform for offline use. And it can be easily updated if a user does get connectivity for a brief period by downloading APK files that contain new data. The team works to keep these updates extremely small; a recent release was 60 kilobytes, and Ahmadian says they are typically no more than 100 kilobytes.

One overlay on Mahsa Alerts plots the locations of “confirmed attacks” that Ahmadian says his team or other OSINT investigators have verified, using video footage or images that are submitted to a Telegram bot or shared on social media. There are also warnings about areas where Israeli forces have issued evacuation alerts, along with the crucial component of people submitting reports on what is happening around them.

“We have to go through a due diligence and verification process and tag them before putting them on the map,” Ahmadian says of the reported attacks and incidents, adding that the team has a backlog of more than 3,000 reports that it is working through or is unable to verify. Along with attempting to map strikes, the team behind Mahsa Alert have also plotted “danger zones” that could be at risk of attack—such as sites linked to Iran’s nuclear program or military—so ordinary citizens can stay away from them. Ahmadian claims 90 percent of attacks it has confirmed were at sites that were already present on the map. “Some of them that we can confirm, we do it because [a user] has shared a photo or they have shared some details that makes them verifiable,” he says.

The map also includes locations of thousands of CCTV cameras, suspected government checkpoints, and other domestic infrastructure. Medical facilities, such as hospitals and pharmacies, are included on the map along with other resources like the locations of religious sites and past protests.

Mahsa Alert has become more visible on global social media feeds as Iranians around the world share details from the map, encouraging people to look into the service and flagging it for friends and family who could use it as a resource. “The app went from near zero to over 100,000 daily active users in a matter of days,” Ahmadian says, adding that in total there have been around 335,000 users this year, with people first turning to the app during the Iranian regime’s brutal crackdown on anti-government protesters in January. Through the limited user information the app collects, Ahmadian claims there are signs that 28 percent of users are accessing the platform from inside Iran.





Source link

Continue Reading

Tech

Deals From the Amazon Spring Sale That Passed Our BS Test

Published

on

Deals From the Amazon Spring Sale That Passed Our BS Test


After a relatively quiet few months, Amazon is bringing back another of its famously invented shopping holidays. The Amazon Spring Sale is on its third year, and it’s on now through March 31. Like during last year’s event, Amazon is promising customers thousands of deals across various daily, themed categories.

Of course, as we’ve seen in the past with Prime Day, Black Friday, and Cyber Monday, the true discounts on good products will likely be buried among junk deals on shoddy wares. The WIRED Reviews team tests gear all year long, and we fact-checked discounts on the products we actively recommend to our friends, family, and readers. We’ve highlighted the best deals below.

Updated March 25: We’ve added new deals and checked for accuracy throughout.

WIRED Featured Deals:

Our audiophile reviewers test more headphones than anyone would deem sane or necessary. The Sony WH-1000XM6 are the pair they’ve declared the best wireless headphones of all, with “the best noise reduction on Earth.” You’ll also get 30 hours of battery life, multipoint Bluetooth pairing, folding ear cups and a travel case, sparkling and clear sound, and fabulous controls. They’re nearly perfect. When they’re not on sale for this price, they’re selling for the full MSRP. If you’re in the market, now is the time—or, if you’re not ready right now, wait until the next time they’re on sale for this price.



Source link

Continue Reading

Trending