Cybersecurity company Dragos has flagged malware that can attack industrial control systems (ICS), tricking them into malicious behavior like turning off the heat and hot water in the middle of winter. TechCrunch reports thats precisely what the malware, dubbed FrostyGoop, did this January in Lviv, Ukraine, when residents in over 600 apartment buildings lost heat for two days amid freezing temperatures.
Dragos says FrostyGoop is only the ninth known malware designed to target industrial controllers. Its also the first to specifically set its sights on Modbus, a widely deployed communications protocol invented in 1979. Modbus is frequently used in industrial environments like the one in Ukraine that FrostyGoop attacked in January.
Ukraines Cyber Security Situation Center (CSSC), the nations government agency tasked with digital safety, shared information about the attack with Dragos after discovering the malware in April of this year, months after the attack. The malicious code, written in Golang (The Go programming language designed by Google), directly interacts with industrial control systems over an open internet port (502).
The attackers likely gained access to Lvivs industrial network in April 2023. Dragos says they did so by exploiting an undetermined vulnerability in an externally facing Mikrotik router. They then installed a remote access tool that voided the need to install the malware locally, which helped it avoid detection.
The attackers downgraded the controller firmware to a version lacking monitoring capabilities, helping to cover their tracks. Instead of trying to take down the systems altogether, the hackers caused the controllers to report inaccurate measurements resulting in the loss of heat in the middle of a deep freeze.
Dragos has a longstanding policy of neutrality in cyberattacks, preferring to focus on education without assigning blame. However, it noted that the adversaries opened secure connections (using layer two tunneling protocol) to Moscow-based IP addresses.
I think its very much a psychological effort here, facilitated through cyber means when kinetic perhaps here wasnt the best choice, Dragos researcher Mark Magpie Graham told TechCrunch. Lviv is in the western part of Ukraine, which would be much more difficult for Russia to hit than eastern cities.
Dragos warns that, given how ubiquitous the Modbus protocol is in industrial environments, FrostyGoop could be used to disrupt similar systems worldwide. The security company recommends continuous monitoring, noting that FrostyGoop evaded virus detection, underscoring the need for network monitoring to flag future threats before they strike. Specifically, Dragos advises ICS operators to use the SANS 5 Critical Controls for World-Class OT Cybersecurity, a security framework for operational environments.This article originally appeared on Engadget at https://www.engadget.com/russia-linked-hackers-cut-heat-to-600-ukrainian-apartment-buildings-in-the-dead-of-winter-researchers-say-171414527.html?src=rss
Regulators in the US and Europe have laid out the "shared principles" they plan to adhere to in order to "protect competition and consumers" when it comes to artificial intelligence. "Guided by our respective laws, we will work to ensure effective competition and the fair and honest treatment of consumers and businesses," the Department of Justice, Federal Trade Commission, European Commission and the UK's Competition and Markets Authority (CMA) said.
"Technological inflection points can introduce new means of competing, catalyzing opportunity, innovation and growth," the agencies said in a joint statement. "Accordingly, we must work to ensure the public reaps the full benefits of these moments."
The regulators pinpointed fair dealing (i.e. making sure major players in the sector avoid exclusionary tactics), interoperability and choice as the three principles for protecting competition in the AI space. They based these factors on their experience working in related markets.
The agencies also laid out some potential risks to competition, such as deals between major players in the market. They said that while arrangements between companies in the sector (which are already widespread) may not impact competition in some cases, in others "these partnerships and investments could be used by major firms to undermine or co opt competitive threats and steer market outcomes in their favor at the expense of the public."
Other risks to competition flagged in the statement include the entrenching or extension of market power in AI-related markets as well as the "concentrated control of key inputs." The agencies define the latter as a small number of companies potentially having an outsized influence over the AI space due to the control and supply of "specialized chips, substantial compute, data at scale and specialist technical expertise."
In addition, the CMA, DOJ and FTC say they'll be on the lookout for threats that AI might pose to consumers. The statement notes that it's important for consumers to be kept in the loop about how AI factors into the products and services they buy or use. "Firms that deceptively or unfairly use consumer data to train their models can undermine peoples privacy, security, and autonomy," the statement reads. "Firms that use business customers data to train their models could also expose competitively sensitive information."
These are all fairly generalized statements about the agencies' common approach to fostering competition in the AI space, but given that they all operate under different laws, it would be difficult for the statement to go into the specifics of how they'll regulate. At the very least, the statement should serve as a reminder to companies working in the generative AI space that regulators are keeping a close eye on things, even amid rapidly accelerating advancements in the sector.This article originally appeared on Engadget at https://www.engadget.com/us-and-european-antitrust-regulators-agree-to-do-their-jobs-when-it-comes-to-ai-163820780.html?src=rss
Lego just announced its first sets inspired by the gaming phenomenon Fortnite. These kits draw from iconic characters and vehicles from both the original game and the brick-based spinoff Lego Fortnite, like an ouroboros of corporate synergy.
The baddest of the bunch looks to be the 954-piece Battle Bus kit, which costs $100. This is a brick-based replica of the iconic hot-air balloon on wheels, complete with a removable roof and characters like Meowscles, Raven and Cuddle Team Leader, among others.
Lego
The 1,414-piece Peely Bone set looks to appeal to collectors more than kids. It builds into a giant version of the rare Fortnite character, who is one-half banana and one-half skeleton. The kit comes with accessories like a pickaxe and paint launcher. This set also costs $100.
The games beloved Supply Llama is also getting a kit. This 691-piece set allows fans to build the iconic character and it comes with a whole bunch of themed accessories, including a grappler, Slurp Juice, Slap Juice and more. This set costs $40, which isnt too bad given the number of pieces involved.
Lego
Finally, theres a teensy Durrr Burger kit, which is aimed squarely at kids. This 193-piece set builds into the aforementioned Fortnite landmark (its a restaurant in the game.) It even comes with an olive on a toothpick. The kit costs just $15.
All of these sets are available for preorder right now straight from Lego, but we have to wait a little bit before they ship. The kits dont officially release until October 1. In the meantime, theres a nifty Jaws-inspired set coming out in August and a massive 2,500-piece set based on The Legend of Zelda that ships on September 1.
This article originally appeared on Engadget at https://www.engadget.com/legos-first-fortnite-sets-are-here-153451343.html?src=rss
So much relies on Wi-Fi your TV, music, games, smart home devices, possibly even your alarm clock which makes dead zones productivity killers. One of our favorite ways to remedy weak or spotty coverage is with Google's Nest Wi-Fi Pro 6E and right now, a three pack is down to $285. That's a 29 percent discount and matches the sale price it hit last week for Prime Day. This isn't an all-time low, but it's just $5 more than the record.
We named the Nest Wi-Fi Pro the best for novice users in our guide to mesh Wi-Fi systems and it earned an 87 in our full review. Our reviewer, Daniel Cooper, called Google's 6E system "more approachable than the rest," though he notes that it's can't beat the competition on speed.
The smooth rounded shape is a little more decor-friendly than some more industrial-looking routers and was the first Nest router to harness WiFi 6/6E. That's great if you're looking to upgrade to the newer Wi-Fi standard, but keep in mind that these aren't backwards compatible with any pre-6E Nest routers.
As for speed, it's plenty fast enough for streaming movies and browsing the web and the coverage is impressive. To help with performance, it dynamically shunts traffic around the available space, including using the 6GHz band as backhaul. That frees up a lot of space in 2.4 and 5GHz bands, which is what most devices use. So unless you have a ton of devices that are Wi-Fi 6E-enabled, that feature should help. Still, if speed is your main concern, you might be better off with our pick for power users.
Overall, Dan appreicated that this was one of the cheapest WiFi 6E systems on the market, with a particularly easy-to-use app that made set up fairly foolproof. And if you're already using other Nest or Google-compatible smart home equipment, you'll appreciate the integration with the Google Home app.
Follow @EngadgetDeals on Twitter and subscribe to the Engadget Deals newsletter for the latest tech deals and buying advice.This article originally appeared on Engadget at https://www.engadget.com/a-google-nest-wi-fi-6e-three-pack-is-back-on-sale-for-285-153232698.html?src=rss
Meta AI launched in September 2023 using the Llama 2 learning language model. Nearly a year later, Meta has announced a new round of features for its AI assistant and a fresh LLM to support it: Llama 3.1.
These updates include an expansion of who can access Meta AI. Thanks to the addition of Argentina, Chile, Colombia, Ecuador, Mexico, Peru and Cameroon, the assistant is now available in 22 countries. It's also accessible in new languages: French, German, Hindi, Hindi-Romanized Script, Italian, Portuguese, and Spanish. However, some of the new features are location or language-specific for the time being.
Meta is rolling out a beta tool called "Imagine me" throughout the US. It allows for prompts such as "Imagine me surfing" or "Imagine me as a surrealist painting," and the AI assistant will create it using a photo of the individual. Meta is also adding new ways to tinker with an image, such as removing, changing or editing its content. This feature allows for creating an image, such as a duck, with the "Imagine me" tool and then instructing Meta AI to "Change the duck to a cat." Next month there will also be an "Edit with AI" button for further fine-tuning of images. The company is also rolling out the ability to create an image with Meta AI in a feed, comment, story or message across Facebook, Instagram, WhatsApp and Messenger. It should roll out this week, though just in English for now.
Then there's the launch of Llama 3.1 405B Meta's new open-source AI model. You can use it on WhatsApp or meta.ai for tasks such as answering math problems and coding. Meta claims it will update its AI technology every two weeks and that new features and languages are on the way. This article originally appeared on Engadget at https://www.engadget.com/meta-ai-is-now-available-in-spanish-portugese-french-and-more-150051715.html?src=rss
Meta on Tuesday announced the release of Llama 3.1, the latest version of its large language model that the company claims now rivals competitors from OpenAI and Anthropic. The new model comes just three months after Meta launched Llama 3 by integrating it into Meta AI, a chatbot that now lives in Facebook, Messenger, Instagram and WhatsApp and also powers the company's smart glasses. In the interim, OpenAI and Anthropic already released new versions of their own AI models, a sign that Silicon Valleys AI arms race isnt slowing down any time soon.
Meta said that the new model, called Llama 3.1 405B, is the first openly available model that can compete available rivals in general knowledge, math skills and translating across multiple languages. The model was trained on more than 16,000 NVIDIA H100 GPUs, currently the fastest available chips that cost roughly $25,000 each, and can beat rivals on over 150 benchmarks, Meta claimed.
The 405B stands for 405 billion parameters, which are internal variables that an AI model uses to reason and make decisions. The higher the number of parameters an AI model has, the smarter we perceive it to be. OpenAIs GPT-4 model, by comparison, is reportedly has roughly 1.5 trillion parameters, although the company has not disclosed the number so far. In addition, Meta also released upgraded versions of existing Llama models that contain 70 billion and 8 billion parameters each, claiming that the newer versions had stronger reasoning abilities among other things.
Developers can download Llama 3.1 from its official website, while regular users can play with it through Meta AI in WhatsApp or on meta.ai, the companys website for its chatbot. Llama 405Bs improved reasoning capabilities make it possible for Meta AI to understand and answer your more complex questions, especially on the topics of math and coding, Metas blog post states. You can get help on your math homework with step-by-step explanations and feedback, write code faster with debugging support and optimization. (Editors note: Engadget will pit Llama 3.1 against the New York Times Spelling Bee and report back to you). For now, Meta AI on Facebook, Messenger and Instagram are still restricted to the smaller version of Llama 3.1 that uses 70 billion parameters.
Unlike OpenAI, Google, Microsoft and Anthropic that keep their AI models proprietary, Metas AI models are open source, which means that anyone can modify and use them for free and without sharing personal data with Meta. In a letter published on Tuesday, Meta CEO Mark Zuckerberg argued that an open source approach to AI development will ensure wider access to the technologys benefits, prevent the concentration of power among a few big companies, and enable safer AI deployment across society. By open sourcing the companys largest language model to date, Meta aims to make Llama the industry standard for anyone to develop AI-powered apps and services with, Zuckerberg wrote.
Open sourcing AI models and adding them to its existing products already used by billions of people could allow Meta to compete more effectively with OpenAI whose ChatGPT and DALL-E chatbots ignited an AI explosion when they launched in 2022. And it could also boost engagement Meta announced today that users would soon be able to add AI-generated images directly into feeds, stories, comments and messages across Facebook, Messenger, WhatsApp and Instagram.
In his letter, Zuckerberg also criticized Apple and its closed ecosystem, arguing that the iPhone makers restrictive and arbitrary policies had constrained what Meta could build on its platforms. [Its] clear that Meta and many other companies would be freed up to build much better services for people if we could build the best versions of our producers and competitors were not able to constrain what we could build, he wrote.This article originally appeared on Engadget at https://www.engadget.com/llama-31-is-metas-latest-salvo-in-the-battle-for-ai-dominance-150042924.html?src=rss
Meta's AI-powered assistant have been accessible on the Ray-Ban smart glasses for quite some time, but the company will only start rolling it out to its Quest headsets next month. The assistant will still be in experimental mode, however, and it's availability will be limited to users in the US and Canada. Meta has revealed the update alongside its announcements for the Llama 3.1 and the new Meta AI capabilities.
Users who get access to the assistant in August will be able to put its hands-free controls to the test. The company said Meta AI is replacing the current technology used for Voice Commands on Quest, so it will be the one controlling the headset whenever people use voice for navigation and the one answering their questions if they ask for information. They can ask the assistant for restaurant recommendations for an upcoming trip, as an example, or ask it for the weather those days, as well as suggestions on how to dress for it.
They will also be able to use the "Meta AI with Vision" feature, which will let them ask the assistant for information on what they're seeing, while using Passthrough on the Quest. Passthrough lets users see their environment through a video feed while watching or doing something else on their headsets. A user can, for instance, ask the assistant to look at what's inside the fridge and suggest what they can cook, or ask for tips on what kind of top would go with a skirt they're holding up, all while watching a YouTube video.This article originally appeared on Engadget at https://www.engadget.com/metas-ai-assistant-is-coming-to-quest-headsets-in-the-us-and-canada-150033530.html?src=rss
General Motors is putting the autonomous Cruise Origin shuttle van on ice. The company said that the embattled Cruise, of which GM is the majority owner, will now focus on making the next-gen Chevy Bolt. The automaker discontinued the previous Bolt last year due to a shift away from an older battery system but did not reveal plans for a new model at the time.
According to a letter that GM CEO Mary Barra sent to shareholders, the indefinite delay of the shuttle van "addresses the regulatory uncertainty we faced with the Origin because of its unique design." Barra added that the per-unit costs of the next-gen Bolt will be much lower, "which will help Cruise optimize its resources."
GM and Cruise were working on the Origin with Honda. The Origin which does not have a driver's seat, steering wheel or pedals was supposed to debut in Japan in 2026.
In October, the California Department of Motor Vehicles suspended Cruise's driverless vehicle permits over safety issues. Earlier that month, a pedestrian in San Francisco was dragged 20 feet by a Cruise vehicle and pinned under it after a hit-and-run by another car pushed her into the robotaxi's path. Cruise later paused all driverless operations before temporarily halting production in November.
According to CNBC, former Cruise CEO Kyle Vogt at one point told staff that hundreds of pre-commercial Origin vehicles had been built. The company has resumed robotaxi operations in Phoenix, Houston and Dallas with human operators on board and is carrying out tests in Dubai. However, it hasn't recommenced operations in San Francisco. It's still under investigation for the October incident there.
Shelving the Origin is not a decision that GM and Cruise would have come to lightly. In GM's second quarter earnings report, the automaker noted that it incurred around $583 million of Cruise restructuring costs. It said these resulted "from Cruise voluntarily pausing its driverless, supervised and manual [autonomous vehicle] operations in the US and the indefinite delay of the Cruise Origin."
On the plus side, resuming work on the Bolt (which will presumably use GM's Ultium battery tech the next time around) could be a boon for GM's bottom line. As of 2023, the Bolt EV and EUV accounted for most of GM's electric vehicle sales. It planned to make around 70,000 of them last year before ceasing production.This article originally appeared on Engadget at https://www.engadget.com/gm-shelves-the-autonomous-cruise-origin-shuttle-van-144256801.html?src=rss
You can's say Fujifilm is boring. It stuck to APS-C sensors instead of going full-frame like everyone else, while releasing cool and weird models like the X100 VI. That strategy has been refreshing in a conservative industry and undeniably successful.
It also went big by introducing its first medium-format camera seven years ago, the GFX50S. After eight models, theyve proven to be popular among pro portrait and scenic photographers, a market Fujifilm never really had before. Each has become increasingly more sophisticated, with better image quality, faster shooting speeds and improved video.
Now that the companys flagship $7,500 100-megapixel GFX 100 II, has been out for awhile and had several firmware updates, I was keen to test the new AF speeds and more. So I went to London to try it out alongside two pro photographer friends who are thinking of buying one.
Body
The original GFX 100 is a gigantic camera, weighing over three pounds with the viewfinder. The GFX 100 II is more manageable at 2.27 pounds, the same as Panasonics full-frame S1. Photographers are still likely to be carrying a heavy bag, though, as medium-format GFX lenses are generally bigger and heavier than full-frame glass.
The GFX 100 II also feels more like a full-frame camera than an old-school top-down viewfinder medium format model. It has an updated, modern control layout, with a pair of control dials, a mode dial, a joystick, 14 buttons and a movie/photo switch.
The rear display tilts up, down and to the side, but doesnt flip out not a huge deal, as this will never be a vlogging camera. It shines where it counts, though, with a high 2.36 million dot resolution and enough brightness to use in sunlight. The viewfinder, meanwhile, is one of the best on any camera, with an extremely sharp 9.36-million dot resolution and 100 percent magnification.
Its easy to handle, thanks to the well-placed controls and large grip. The top display, which stays on even when the camera is switched off, shows all the main settings at a glance. Im not a huge fan of Fujifilms overly complicated menu system, but its fine once you get used to it.
As with other recent high-end cameras, you get both an SD UHS II card slot and a much faster CFexpress B option. The latter is required for fast burst shooting, as Ill discuss soon. Battery life is solid, with up to 540 shots on a charge, or about an hour of 8K or 4K 60p recording.
Performance
Steve Dent for Engadget
The GFX 100 II is the fastest medium-format camera to date. You can fire bursts at up to 8 fps with the mechanical shutter enabled and capture about 300 lossless RAW frames before the buffer fills. Thats about 36GB of data, so it requires a fast CFexpress card.
Autofocus wasnt a strong point on the GFX, but its a big step up on this model. The majority of shots in our burst testing were in focus, though it becomes less accurate when the subject is close to the camera. This isnt a sports camera, obviously, but it still has the best AF Ive seen on any medium format camera.
Face and eye detection have also improved, usually locking onto the eye and not, say the eyebrow as the older model did. Fujifilm also introduced AI subject detection from recent models, so it now has settings for animals, birds, automobiles, motorcycles, bikes, airplanes and trains.
Nathanael Charpentier for Engadget
The GFX 100 II has a new 5-axis stabilization system with up to eight stops of shake reduction, compared to 5.5 stops before. This is useful for portraits and scenics, letting you shoot down to a quarter second or slower and blur water or people, while keeping the background sharp.
Rolling shutter was pretty abysmal on the original model, and isnt a lot better here. If youre taking street photos and want to remain silent, its fine if the subject doesnt move much. For anything else, use the mechanical shutter to avoid some bad skewing.
Image quality
Image quality is this cameras forte. Naturally, photos are pin sharp thanks to the 102-megapixel sensor. And with 16 bits of color depth in RAW mode, dynamic range is outstanding, right up there with Sony and Nikon. All of that makes it ideal for portraits and landscapes, on top of tasks that benefit from high-resolution, like art preservation.
The GFX 100 II now goes down to ISO 80 instead of 100 to further boost dynamic range. All of that allows photographers to get creative with RAW photos, or tease detail out of highlights and shadows.
Its not bad at high ISOs either, thanks to the sensors backside illumination and dual-gain design. Theres very little noise visible at ISO 6400, and photos are usable up to ISO 12800 if exposure is correct.
The medium format sensor offers incredibly shallow depth of field if you need that for portrait shooting. Combined with a fast lens like the 80 mm f/1.7, it allows for incredible bokeh and subject separation.
For those who prefer to use JPEGs straight out of the camera, it delivers color-accurate images with the perfect amount of in-camera sharpening. Thats ideal for previews or for folks who want to use Fujifilms impressive film simulation modes. For the GFX 100 II, Fujifilm introduced a new one called Reala Ace thats based directly on one of its old negative films. With a punchy, saturated and slightly nostalgic feel, it has become one of my new favorites.
There is one quality issue the GFX 100 II drops from 16- to effectively less than 14-bits when shooting 8fps bursts in order to reduce throughput. That in itself isnt a hug problem, but Fujifilm has been cagey about how it markets this, which has rubbed a lot of pro photographers the wrong way.
Video
Steve Dent for Engadget
Im starting to sound like a broken record, but the X100 II is also Fujis best medium format camera for video. It has a host of new modes, most notably 8K. It also offers 6K, 4K/60p and 1080p at 240fps. All those formats can be captured in 12-bit ProRes, along with 10-bit H.265 formats. You also get access to Fujifilms excellent F-Log2 capture that boosts dynamic range.
There are some considerable compromises, though. 8K is captured with a 1.53 times crop, reducing the effective sensor size to less than full frame which negates one of the main medium-format advantages: shallow depth of field. Other resolutions use the full sensor width, but pixel binning reduces sharpness.
Rolling shutter is also an issue at 8K, so be sure not to move the camera much at that resolution. Its less bothersome at 4K resolutions, likely due to the pixel binning.
All that aside, video from the GFX100 II has a different quality than Ive seen from most mirrorless cameras. The larger sensor makes it cinematic, especially with some of Fujifilms prime lenses. And the 8K video is extremely sharp when downsampled to 4K in DaVinci Resolve.
Realistically though, video is more of a nice-to-have feature for occasional use, as the majority of buyers will certainly be using it for photography.
Wrap-up
Nathanael Charpentier for Engadget
The $7,500 GFX100 II is an impressive medium format camera with improvements in every area compared to the previous model. More importantly, what did my pro photographer friends think and will they buy one? Whats most noticeable is the evolution of the autofocus compared to the GFX100, said Nathanael Charpentier. In our studio we usually work with Sony, and the GFX100 II autofocus is still far from Sonys level, but its a big improvement.
Its not a sports camera, it doesnt have super-fast burst speeds. Its more for studio portrait work. For certain types of reportage like candid wedding shoots, if we really need the extra dynamic range offered by a medium-format camera, I could see using it. At this point, theyre not planning on buying one due to the high price (and the fact that they just laid down 6,000 euros for an A9 III), but its high on their list of future equipment purchases.
Its main competitor is the $8,200 Hasselblad X2D 100C, which has perhaps slightly better color science and image quality while also bringing a certain prestige with the Hasselblad name. However, the GFX100 II is superior in most other ways, including speeds, autofocus and video. If you really need to nail autofocus in busy or difficult situations, though, full-frame is still best: Sonys 45-megapixel $6,500 A1 or Nikons $3,800 Z8 or $5,500 Z9 (both 45MP as well) are better choices.This article originally appeared on Engadget at https://www.engadget.com/fujifilm-gfx-100-ii-the-king-of-medium-format-mirrorless-cameras-143009929.html?src=rss
The new Samsung Galaxy devices drop tomorrow which means today is your last chance to take advantage of pre-order promotions. One of the best deals we've seen comes from Amazon, which is offering a $300 gift card to anyone who pre-orders the Samsung Galaxy Z Fold 6. The bundle is available for $1,900 thanks to a six percent discount on the 512GB model (originally $2,020). You can pick it up in Silver, Navy or Pink.
Samsung announced the Galaxy Z Fold 6 earlier this month, and we've had the chance to test it out. We gave it an 86 in our review due to welcome features like native stylus support and an even lighter chassis. It also uses the Snapdragon 8 Gen 3 chip and has a larger vapor chamber, so there's basically no lag, and it's less likely to overheat. The screen is brighter, with a colorful display, and the device lasted over 20 hours during our video rundown test on the main screen and 25 hours and 19 minutes on the exterior screen.
If you're in the market for something cheaper, check out the Samsung Galaxy Z Flip 6 a smaller device with some of the same perks. The smartphone is also available for pre-order, with the 512GB model and a $200 Amazon gift card on sale for $1,100. The 512GB Samsung Galaxy Z Flip 6 starts at $1,220 on its own (though both Amazon and Samsung are running pre-order sales on just the phone). Like the Galaxy Z Fold 6, it comes out tomorrow so today is the last day to snag a pre-order deal.
Follow @EngadgetDeals on Twitter and subscribe to the Engadget Deals newsletter for the latest tech deals and buying advice.This article originally appeared on Engadget at https://www.engadget.com/its-your-last-chance-for-a-300-amazon-gift-card-when-you-pre-order-the-samsung-galaxy-z-fold-6-141053944.html?src=rss
