By Deeba Ahmed
Your Zoom meetings are now more secure than ever!
This is a post from HackRead.com Read the original post: Zoom Announces Advanced Encryption for Increased Meeting Security

Zoom Meetings now offer post-quantum end-to-end encryption, safeguarding your confidential conversations even from the potential threat of quantum computers. This technology ensures your data stays encrypted and inaccessible, keeping your meetings private and secure.

Zoom Video Communications has announced a significant upgrade to its security features, rolling out post-quantum end-to-end encryption (E2EE) for Zoom Meetings globally. This new layer of protection is designed to safeguard user data even from the potential threat of powerful quantum computers.

“As adversarial threats become more sophisticated, so does the need to safeguard user data,” Zoom said in a statement. “With the launch of post-quantum E2EE, we are doubling down on security and providing leading-edge features for users to help protect their data.”

****What is Post-Quantum End-to-End Encryption?****

Traditional encryption methods rely on complex mathematical problems that are difficult to solve with today’s computers. However, the development of quantum computers poses a potential challenge as they may be able to crack these codes much faster. Post-quantum cryptography utilizes algorithms specifically designed to remain secure even in the age of quantum computing.

Zoom’s post-quantum E2EE leverages the Kyber 768 algorithm, chosen by the National Institute of Standards and Technology (NIST) for its quantum-resistant properties. This ensures that the encryption keys used to scramble meeting content are resistant to decryption attempts, both now and in the foreseeable future.

****How Does it Work?****

When E2EE is enabled for a Zoom meeting, the meeting content, including audio, video, and screen sharing, is encrypted using the Kyber 768 algorithm. The encryption keys are generated and distributed solely amongst the meeting participants’ devices. This means that Zoom’s servers, or any third party for that matter, cannot access the decrypted content of the meeting.

****Benefits and Considerations****

Post-quantum E2EE offers enhanced security for highly confidential meetings. However, there are a few things to keep in mind:

*   **Meeting Compatibility:** To utilize post-quantum E2EE, all participants must be using Zoom desktop or mobile app versions 6.0.10 or higher. If some participants are on older versions, the meeting will default to the standard E2EE protocol.
*   **Free Account Verification:** For meeting hosts on free Zoom accounts, enabling E2EE requires phone number verification via SMS.

Nevertheless, Zoom’s implementation of post-quantum E2EE represents a significant step forward in securing online communication. By adopting quantum-resistant cryptography, Zoom is ensuring its users have access to a future-proof level of data protection.

1.  Staying home? Here are 5 best Java learning platforms
2.  Login details of verified Zoom accounts posted on Dark Web
3.  How to use Signal messenger face blur tool on Android & iOS
4.  8 tips to protect company data sent via home internet connections
5.  Signal, AI Generated Art Least, Amazon, Facebook Most Invasive Apps

Zoom Announces Advanced Encryption for Increased Meeting Security

This post explains how to remove additional users and accounts from your Android device

Some of our loyal readers may remember my little mishap when I was able to track my wife by accident after inadvertently adding myself to her phone as a user.

For exactly that reason we want to warn against sharing devices and at least show you how to remove other people’s accounts from your device.

The steps may be slightly different depending on your Android version, device type, and vendor, but most users should be able to follow these steps.

For the primary user:

*   Open **Settings**
*   Tap **System** > **Multiple users**.

_If you can’t find this setting, try searching your Settings app for users._

*   Tap the name of the user you want to remove.
*   Tap **Delete user** > **Delete**. If successful, the user will be removed from the list.
*   If you want to stay the only user, you can turn the **Multiple users** feature off.

If you’re not the primary user (you can’t delete the primary user):

*   Under **Multiple Users** tap **More** (three stacked dots).
*   Tap **Delete _\[username\]_ from this device**. Important: You can’t undo this.
*   The device will switch to the owner’s profile.

Note: Android devices allow two types of additional users:

*   **Secondary user:** This is any user added to the device other than the system user. Secondary users can be removed (either by themselves or by an admin user) and cannot impact other users on a device. These users can run in the background and continue to have network connectivity.
*   **Guest user:** Temporary secondary user. Guest users have an explicit option to quickly delete the guest user when its usefulness is over. There can be only one guest user at a time.

Another privacy issue can be caused by having additional accounts on the device. Accounts are contained within a user but are not linked to a particular user. The tracking issue I discussed was caused by adding one of my Google accounts to my wife’s phone.

To remove unwanted accounts:

*   Under **Settings**_,_ tap on **Accounts and Backups**
*   Then tap on **Manage Accounts**
*   Select the account you want to remove and you will see the option to do that.

If you’re having trouble finding any of these settings on your specific Android device, reach out through the comments and when we can, we’ll add as many specific instructions as possible to the post.

 How to remove a user from a shared Android device 

Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly available data from Apple to track the location of billions of devices globally -- including non-Apple devices like Starlink systems -- and found they could use this data to monitor the destruction of Gaza, as well as the movements and in many cases identities of Russian and Ukrainian troops.

Image: Shutterstock.

**Apple** and the satellite-based broadband service **Starlink** each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the **University of Maryland** say they relied on publicly available data from Apple to track the location of billions of devices globally — including non-Apple devices like Starlink systems — and found they could use this data to monitor the destruction of Gaza, as well as the movements and in many cases identities of Russian and Ukrainian troops.

At issue is the way that Apple collects and publicly shares information about the precise location of all Wi-Fi access points seen by its devices. Apple collects this location data to give Apple devices a crowdsourced, low-power alternative to constantly requesting global positioning system (GPS) coordinates.

Both Apple and **Google** operate their own **Wi-Fi-based Positioning Systems** (WPS) that obtain certain hardware identifiers from all wireless access points that come within range of their mobile devices. Both record the **Media Access Control** (MAC) address that a Wi-FI access point uses, known as a **Basic Service Set Identifier** or **BSSID**.

Periodically, Apple and Google mobile devices will forward their locations — by querying GPS and/or by using cellular towers as landmarks — along with any nearby BSSIDs. This combination of data allows Apple and Google devices to figure out where they are within a few feet or meters, and it’s what allows your mobile phone to continue displaying your planned route even when the device can’t get a fix on GPS.

With Google’s WPS, a wireless device submits a list of nearby Wi-Fi access point BSSIDs and their signal strengths — via an application programming interface (API) request to Google — whose WPS responds with the device’s computed position. Google’s WPS requires at least two BSSIDs to calculate a device’s approximate position.

Apple’s WPS also accepts a list of nearby BSSIDs, but instead of computing the device’s location based off the set of observed access points and their received signal strengths and then reporting that result to the user, Apple’s API _will return the geolocations of up to 400 hundred more BSSIDs that are nearby the one requested_. It then uses approximately eight of those BSSIDs to work out the user’s location based on known landmarks.

In essence, Google’s WPS computes the user’s location and shares it with the device. Apple’s WPS gives its devices a large enough amount of data about the location of known access points in the area that the devices can do that estimation on their own.

That’s according to two researchers at the University of Maryland, who theorized they could use the verbosity of Apple’s API to map the movement of individual devices into and out of virtually any defined area of the world. The UMD pair said they spent a month early in their research continuously querying the API, asking it for the location of more than a billion BSSIDs generated at random.

They learned that while only about three million of those randomly generated BSSIDs were known to Apple’s Wi-Fi geolocation API, _Apple also returned an additional 488 million BSSID locations already stored in its WPS from other lookups_.

**UMD Associate Professor David Levin** and Ph.D student **Erik Rye** found they could mostly avoid requesting unallocated BSSIDs by consulting the list of BSSID ranges assigned to specific device manufacturers. That list is maintained by the **Institute of Electrical and Electronics Engineers** (IEEE), which is also sponsoring the privacy and security conference where Rye is slated to present the UMD research later today.

Plotting the locations returned by Apple’s WPS between November 2022 and November 2023, Levin and Rye saw they had a near global view of the locations tied to more than two billion Wi-Fi access points. The map showed geolocated access points in nearly every corner of the globe, apart from almost the entirety of China, vast stretches of desert wilderness in central Australia and Africa, and deep in the rainforests of South America.

A “heatmap” of BSSIDs the UMD team said they discovered by guessing randomly at BSSIDs.

The researchers said that by zeroing in on or “geofencing” other smaller regions indexed by Apple’s location API, they could monitor how Wi-Fi access points moved over time. Why might that be a big deal? They found that by geofencing active conflict zones in Ukraine, they were able to determine the location and movement of Starlink devices used by both Ukrainian and Russian forces.

The reason they were able to do that is that each Starlink terminal — the dish and associated hardware that allows a Starlink customer to receive Internet service from a constellation of orbiting Starlink satellites — includes its own Wi-Fi access point, whose location is going to be automatically indexed by any nearby Apple devices that have location services enabled.

A heatmap of Starlink routers in Ukraine. Image: UMD.

The University of Maryland team geo-fenced various conflict zones in Ukraine, and identified at least 3,722 Starlink terminals geolocated in Ukraine.

“We find what appear to be personal devices being brought by military personnel into war zones, exposing pre-deployment sites and military positions,” the researchers wrote. “Our results also show individuals who have left Ukraine to a wide range of countries, validating public reports of where Ukrainian refugees have resettled.”

In an interview with KrebsOnSecurity, the UMD team said they found that in addition to exposing Russian troop pre-deployment sites, the location data made it easy to see where devices in contested regions originated from.

“This includes residential addresses throughout the world,” Levin said. “We even believe we can identify people who have joined the Ukraine Foreign Legion.”

A simplified map of where BSSIDs that enter the Donbas and Crimea regions of Ukraine originate. Image: UMD.

Levin and Rye said they shared their findings with Starlink in March 2024, and that Starlink told them the company began shipping software updates in 2023 that force Starlink access points to randomize their BSSIDs.

Starlink’s parent SpaceX did not respond to requests for comment. But the researchers shared a graphic they said was created from their Starlink BSSID monitoring data, which shows that just in the past month there was a substantial drop in the number of Starlink devices that were geo-locatable using Apple’s API.

UMD researchers shared this graphic, which shows their ability to monitor the location and movement of Starlink devices by BSSID dropped precipitously in the past month.

They also shared a written statement they received from Starlink, which acknowledged that Starlink User Terminal routers originally used a static BSSID/MAC:

> “In early 2023 a software update was released that randomized the main router BSSID. Subsequent software releases have included randomization of the BSSID of WiFi repeaters associated with the main router. Software updates that include the repeater randomization functionality are currently being deployed fleet-wide on a region-by-region basis. We believe the data outlined in your paper is based on Starlink main routers and or repeaters that were queried prior to receiving these randomization updates.”

The researchers also focused their geofencing on the Israel-Hamas war in Gaza, and were able to track the migration and disappearance of devices throughout the Gaza Strip as Israeli forces cut power to the country and bombing campaigns knocked out key infrastructure.

“As time progressed, the number of Gazan BSSIDs that are geolocatable continued to decline,” they wrote. “By the end of the month, only 28% of the original BSSIDs were still found in the Apple WPS.”

Apple did not respond to requests for comment. But in late March 2024, Apple quietly tweaked its privacy policy, allowing people to opt out of having the location of their wireless access points collected and shared by Apple — by appending “\_nomap” to the end of the Wi-Fi access point’s name (SSID). Adding “\_nomap” to your Wi-Fi network name also blocks Google from indexing its location.

Apple updated its privacy and location services policy in March 2024 to allow people to opt out of having their Wi-Fi access point indexed by its service, by appending “\_nomap” to the network’s name.

Rye said Apple’s response addressed the most depressing aspect of their research: That there was previously no way for anyone to opt out of this data collection.

“You may not have Apple products, but if you have an access point and someone near you owns an Apple device, your BSSID will be in \[Apple’s\] database,” he said. “What’s important to note here is that every access point is being tracked, without opting in, whether they run an Apple device or not. Only after we disclosed this to Apple have they added the ability for people to opt out.”

The researchers said they hope Apple will consider additional safeguards, such as proactive ways to limit abuses of its location API.

“It’s a good first step,” Levin said of Apple’s privacy update in March. “But this data represents a really serious privacy vulnerability. I would hope Apple would put further restrictions on the use of its API, like rate-limiting these queries to keep people from accumulating massive amounts of data like we did.”

The UMD researchers said they omitted certain details from their study to protect the users they were able to track, noting that the methods they used could present risks for those fleeing abusive relationships or stalkers.

“We observe routers move between cities and countries, potentially representing their owner’s relocation or a business transaction between an old and new owner,” they wrote. “While there is not necessarily a 1-to-1 relationship between Wi-Fi routers and users, home routers typically only have several. If these users are vulnerable populations, such as those fleeing intimate partner violence or a stalker, their router simply being online can disclose their new location.”

The researchers said Wi-Fi access points that can be created using a mobile device’s built-in cellular modem do not create a location privacy risk for their users because mobile phone hotspots will choose a random BSSID when activated.

“Modern Android and iOS devices will choose a random BSSID when you go into hotspot mode,” he said. “Hotspots are already implementing the strongest recommendations for privacy protections. It’s other types of devices that don’t do that.”

For example, they discovered that certain commonly used travel routers compound the potential privacy risks.

“Because travel routers are frequently used on campers or boats, we see a significant number of them move between campgrounds, RV parks, and marinas,” the UMD duo wrote. “They are used by vacationers who move between residential dwellings and hotels. We have evidence of their use by military members as they deploy from their homes and bases to war zones.”

A copy of the UMD research is available here (PDF).

Why Your Wi-Fi Router Doubles as an Apple AirTag

By Waqas
New Android Malware "Antidot" disguises itself as Google Update to steal banking info. Don't click suspicious update links! Download apps only from Google Play & keep software updated. 
This is a post from HackRead.com Read the original post: New Antidot Android Malware Poses as Google Update to Steal Funds

Cyber security researchers at Cyble have discovered a new and sophisticated Android malware strain dubbed “Antidot.” This malware disguises itself as a fake Google update, tricking unsuspecting users into downloading it onto their devices. Once installed, Antidot targets sensitive banking information, posing a significant threat to financial security.

****Modus Operandi of Antidot****

The malware operates by distributing itself through phishing campaigns including SMSishing in which users receive SMS messages or notifications that appear to be from Google, urging them to update their software or security measures. These messages often contain malicious links that, when clicked, download the Antidot malware disguised as a legitimate Google update package (APK).

Antidot malware posing as a fake update on an infected device (let) – The AI image translation of the image (right)

Upon installation, Antidot seeks to gain administrative privileges on the device. If successful, it grants the attacker complete control over the device, allowing them to steal various forms of sensitive data, including:

*   Contact lists
*   SMS messages
*   Credit card information
*   Two-factor authentication codes
*   Login credentials for banking apps and online accounts.

According to Cyble’s analysis, Antidot exploits vulnerabilities within the Android operating system to achieve persistence and evade detection. The malware also employs techniques to obfuscate its code and communication channels, making analysis and mitigation more challenging.

The risk posed by Antidot is significant. Targeting banking information makes it a prime tool for cybercriminals to steal funds. Additionally, control over the infected device allows attackers to launch further attacks or install additional malware, compromising the user’s privacy and overall security.

> _“The newly surfaced “Antidot” Banking Trojan stands out for its multifaceted capabilities and stealthy operations. Its utilization of string obfuscation, encryption, and strategic deployment of fake update pages demonstrate a targeted approach aimed at evading detection and maximizing its reach across diverse language-speaking regions.”_
> 
> Cyble

****Recommendations for Users and Organizations****

Android users should remain vigilant against the Antidot malware. Here are some key points to keep in mind: Firstly, exercise caution with unsolicited messages by refraining from clicking on links or downloading attachments from unknown senders, even if they seem to originate from reputable sources like Google.

Secondly, ensure the authenticity of apps by downloading them exclusively from official stores like the Google Play Store. Before installation, scrutinize the developer information, reviews, and permissions requested by the app.

Thirdly, enhance your account security by enabling two-factor authentication, which provides an additional layer of protection against unauthorized access, even in the event of credential theft.

Moreover, regularly update your Android device’s operating system and installed apps to mitigate potential vulnerabilities exploited by attackers. Lastly, maintain your device’s defences by installing a trusted mobile security solution, which can proactively detect and thwart malware threats before they compromise your device.

Organizations, on the other hand, should consider security awareness training for their employees to educate them about phishing tactics and the importance of cybersecurity hygiene. Additionally, implementing mobile device management (MDM) solutions can provide centralized control over devices and enforce security policies.

1.  Big Head Ransomware Found in Fake Windows Updates
2.  New Vishing Attack Spreading FakeCalls Android Malware
3.  FakeUpdates Malware Campaign Targets WordPress Sites
4.  Fake wallet update steals 1400BTC ($16M) from Electrum user
5.  Android Malware Poses as WhatsApp and Instagram to Steal Data

New Antidot Android Malware Poses as Google Update to Steal Funds

Plus: Three arrested in North Korean IT workers fraud ring, Tesla staffers shared videos from owners’ cars, and more.

Laser warfare, among all the long-unfulfilled imaginings of science fiction writers, is right up there with flying cars. Now it's finally becoming a reality. After decades of research, the US military is actively deploying laser defense systems in the Middle East to shoot down drones launched by adversaries like Yemen's Houthi rebels, one of several recent deployments of laser tech in actual combat situations.

In less _pew_\-_pew_\-oriented security news, the debate continues over the extension of Section 702 of the Foreign Intelligence Surveillance Act, signed by President Biden last month, as 20 civil liberties organizations sent a letter to the Justice Department demanding more clarity on when the NSA can demand US tech companies cooperate in its wiretaps. Elsewhere, WIRED obtained emails showing how New York City decided to deploy a gun-detection system called Evolv in subways despite false-positive rates as high as 85 percent.

At the Google I/O developer conference, meanwhile, the search giant debuted a new AI-based feature in Android that's designed to detect if a phone has been stolen and automatically lock it down. And we dug into the stakes for financial privacy and surveillance posed by the $2.3 billion Tornado Cash money laundering case, whose cofounder was found guilty and sentenced to more than five years in prison on Tuesday.

That’s not all. Each week, we round up the security and privacy news we didn’t cover in depth ourselves. Click the headlines to read the full stories. And stay safe out there.

The system known as SS7—which connects cellular networks run by different providers—and its more recent upgrade called Diameter have long been considered a serious security and privacy problem. Researchers have warned that hackers who can gain access to a mobile provider's system or even create their own have the ability to reroute cellular data, allowing them to track individuals or eavesdrop on their communications. Now one US official is raising the alarm that this technique has been used numerous times against real victims in the US.

As first reported by 404 Media, CISA's senior adviser for telecommunications, Kevin Briggs, responded to questions from the Federal Communications Commission in a public filing, confirming that he has seen multiple cases of Americans tracked via SS7 or Diameter, including one person whose location was tracked with the technique in March 2022 and three more the next month. He also warned that there were signs that many more people had been targeted, but that spies had used techniques to mask their exploitation of the system.

The revelation sounds a clear warning that telecoms—and their regulators—need to do more to lock down a known, critical vulnerability that leaves any of hundreds of millions of Americans open to espionage. “Much more could be said,” Briggs cryptically concluded his statement, “but this ends my public comments.”

**US Feds Bust a North Korean Remote Tech Worker Scheme**

The post-pandemic era of the virtual workplace has led to a strange new problem: North Korean tech workers secretly infiltrating US companies as remote workers to earn money for the world's most authoritarian regime. This week the Justice Department announced three arrests, including one American woman in Arizona and a Ukrainian man in Poland, who allegedly helped to enable thousands of North Korean workers based in China and Russia to obtain jobs in Western companies, often with fraudulent job applications and stolen identities. A third man, a Vietnamese national, was arrested in Maryland for allegedly offering his own identity to the North Koreans as cover. In total, the North Korean workers got jobs at more than 300 companies—including a high-end retail chain and a major Silicon Valley tech firm—and cumulatively earned at least $6.8 million, the Justice Department said. Much of that money was funneled to the regime of Kim Jong-Un, including to its weapons programs.

**Tesla Staff Collected and Shared Sensitive Videos From Cars**

Given that Teslas are massive collections of cameras on wheels, they've always held the potential to serve as powerful surveillance devices. But Tesla drivers probably weren't expecting all that video surveillance to be turned on them. Reuters this week revealed that Tesla staff have collected and circulated videos recorded by cars' cameras, which have included everything from mundane shots turned into memes, to a violent video of a child on a bicycle being struck by the car, to a fully naked man approaching his vehicle. (They also included a video that showed a submarine used in a James Bond movie in Elon Musk's garage, filmed from cameras on the Tesla CEO's own car.) Tesla assures customers in its privacy fine print that videos collected by Tesla's staff remain anonymous and aren't linked to any particular vehicle. But seven former staffers told Reuters that the videos are linked with location data that could likely be used to identify vehicle owners.

**FBI Busts Cybercriminal Site BreachForums—Again**

BreachForums has long been one of cybercriminals' most well-known gathering places for selling hacking tools and stolen data. Now it's been taken down—for the second time in two years—in an FBI operation that also seized the Telegram channel for the forum and that of its alleged operator, who goes by the name Baphomet. That bust follows the arrest of the site's previous administrator, Conor Brian Fitzpatrick, last year, when the FBI seized a previous incarnation of the site. That earlier version of BreachForums itself replaced an older cybercriminal marketplace called RaidForums. Given that history, the latest BreachForums takedown is perhaps “the least surprising infosec news of the year,” writes security entrepreneur and HaveIBeenPwned creator Troy Hunt.

US Official Warns a Cell Network Flaw Is Being Exploited for Spying

By Uzair Amir
Discover time-saving document merging strategies for professionals. Learn how to streamline workflows, enhance collaboration, and protect document integrity for increased productivity and peace of mind.
This is a post from HackRead.com Read the original post: Efficient Document Merging Strategies for Professionals

Professionals often struggle with managing huge amounts of data spread across various files. A study from COVEO found that employees spend 3.6 hours a day — nearly half their workday — just looking for documents. This means 45% of the workday is spent just on finding documents, a time that could be used more effectively.

One of the solutions to this challenge is to merge PDF files. By combining files that go together, you simplify workflows and save time in your daily processes.

In this article, we’ll offer practical strategies and tips for efficient document merging, helping professionals focus on producing quality work for their clients. 

****Manual Merging Techniques****

Manual merging allows you to pick and choose the pages you want to join together to determine how your final PDF document will appear.

****Using built-in software features for document merging****

For Mac users, utilizing the built-in preview tool makes document merging a breeze. Windows users will need a third-party application or an online tool for this task.

To merge PDFs on Mac using Preview:

*   Open the PDFs you want to combine in the Preview app on your Mac.
*   In each open PDF, go to View > Thumbnails to see page thumbnails in the sidebar.
*   Simply drag and drop the thumbnails you wish to include into the thumbnail sidebar of another PDF.
*   Rearrange pages by dragging thumbnails as needed. You can choose which pages should be excluded from the final document.
*   To save your final file, navigate to File > Export as PDF.

****Step-by-step guide for manual merging in various applications****

Wondering how merging works with other systems? The process is surprisingly straightforward and doesn’t demand any technical know-how. Moreover, it tends to follow a similar pattern across various applications.

This is a typical step-by-step guide.

*   Select and install your preferred tool or access an online platform. Be sure to go for the best PDF editor online when choosing.
*   Choose the PDF files you want to combine from either your device or cloud services such as Google Drive or Dropbox.
*   Customize the settings like page sequence, compression levels, security features, etc. You can also remove unwanted pages from the list or rearrange them as necessary.
*   Initiate the merge operation by clicking on “Merge.” The duration may vary from seconds to minutes, depending on file sizes.
*   Once done, save your final PDF in a location of your choice for future reference.

****Best practices for ensuring accuracy and consistency in manual merging****

When manually merging PDF documents, it’s important to follow best practices to ensure accuracy and consistency in the merged document. 

Here are some tips:

*   Review each document thoroughly before combining them to ensure content accuracy and proper order. While there are tools that allow you to do text editing online, it’s always best to be sure from the beginning.
*   Maintain consistent formatting and layout throughout the merged document.
*   Double-check for any errors or inconsistencies after process completion.
*   Always keep a backup of the original PDFs to prevent data loss.

****Automated Merging Solutions****

Technology has transformed document management with the creation of automated merging solutions. These tools make it easy to edit PDF file types and combine multiple documents or data sources into one, saving significant time and effort. Traditionally manual tasks, like compiling reports from various departments or joining different types of correspondence, are now more efficient.

Automated merging tools use algorithms and artificial intelligence (AI) to find, match, and combine content. This ensures the final document is coherent and consistently formatted. They’re compatible with many file types, including Word documents, PDFs, and spreadsheets (for when you want to make a fillable PDF), making them a versatile addition to any professional’s toolkit.

****Comparison of popular software solutions for automated merging****

Let’s compare some of the popular tools that professionals can use to merge PDF files.

**Tool**

**Adobe Acrobat**

**PDFsam (PDF Split and Merge)**

**Smallpdf**

**Lumin**

Features

Comprehensive PDF solution with advanced tools to edit PDF text, convert, review, merge, etc.

Open-source with basic and advanced merging capabilities

Web-based solution with various PDF tools

Web-based PDF solution with editing capabilities and Google Drive integration

Ease of Use

Feature-rich but with a steeper learning curve

Relatively straightforward for basic tasks. Advanced features may require familiarity

Simple drag-and-drop interface for quick merging

User-friendly interface, integrates with Google

Platforms

Windows, macOS

Windows, macOS, Linux

Windows, Mac, iOS, or Android device

Web-based, integrates with Google Drive

Pricing

Subscription-based plans

Free (PDFsam Basic), paid (PDFsam Enhanced)

Free and paid subscription plans with additional features

Free and paid subscription plans with additional features

****Benefits and limitations of automation in document merging******Benefits:**

*   **Efficiency:** Automation boosts efficiency, saving time for strategic tasks.
*   **Accuracy:** Automated tools enhance accuracy, reducing errors in merged documents.
*   **Scalability:** These solutions are scalable and can handle large document volumes.
*   **Flexibility:** Supports a wide range of document formats and merging scenarios, accommodating diverse professional needs.

****Limitations****

*   **Setup complexity:** Advanced tools may have a steep learning curve.
*   **Cost:** Premium tools’ fees may be high for small businesses.
*   **Privacy and security:** Online tools risk data confidentiality.
*   **Software dependence:** Reliance may cause compatibility or obsolescence issues.

****Advanced Merging Strategies********Customizing merging processes for specific needs****

Customization is key in document management because documents vary widely in format, purpose, and complexity. Tailoring tools to specific needs ensures accuracy. For example, you can program software to handle different sections of documents, like headers or footers. You can also merge documents based on criteria like date, author, or relevance.

This approach helps preserve important details such as the document’s author, creation date, and history. Using advanced tools for scripting and automation simplifies the process. It saves time and reduces the chance of errors.

****Implementing batch merging and bulk processing techniques****

Batch merging and bulk processing help manage large document volumes effectively. This method merges many documents at once, using specific criteria to speed up work on big projects or regular tasks. Understanding the software well is necessary, and sometimes specialized software is needed for handling lots of documents.

Organizations like law firms, banks, and research groups find these techniques very useful. They automate joining large document batches, cutting down manual work significantly. This saves time and improves workflow, letting teams focus on other important tasks.

****Integrating merging tools into existing workflows for maximum efficiency****

Integrating merging tools directly into existing workflows transforms document management, automating the process for increased efficiency. By syncing with project management, CRM, and ERP systems, documents automatically update with key events, like project completions or new clients. 

This integration also enables users to edit PDF form types seamlessly, boosting collaboration. While setup demands planning and development, the result is a significant boost in productivity and streamlined operations.

****Collaboration and Sharing Considerations****

**Compatibility and consistency**: For effective collaboration, it’s essential to ensure document compatibility and maintain consistency by standardizing formats and tools. This prevents formatting issues and data loss, making cross-platform tools key for merging documents smoothly across diverse sources.

**Sharing and distribution of merged documents:** Securing merged documents, especially those with sensitive information, requires encrypted transfers and strict access controls to ensure only authorized access. Use platforms with robust security protocols and customizable permissions for safe distribution.

**Version control and tracking changes:** Effective version control and change tracking ensure document integrity and transparency among collaborators. Using systems that log version history and changes help everyone stay aligned and informed, especially when there is a need to edit scanned PDF documents, enhancing collaboration and keeping the document current.

**Conclusion**

As we close, remember document merging does more than organize files. It saves time for crucial work, boosts team collaboration, and protects your documents’ integrity. The strategies shared equip you to confidently manage large volumes of documents, turning chaos into order. 

Another important key is to choose a reliable tool that can help with your document management processes. The good news is that there are lots of them to choose from – PC, Mac, Mobile, and Cloud-based. Even if you want to create a fillable PDF free from your files, rest assured that there is a suitable tool for your needs.

By adopting these practices, you can increase productivity and achieve peace of mind, knowing that your document management tasks are efficiently handled.

1.  Best Paid and Free OSINT Tools for 2024
2.  Top 3 Cybersecurity Tools to Protect Business Data
3.  PDF Security – How To Keep Data Secure in a PDF File
4.  The new Wondershare PDFelement with added features
5.  The Essential Tools and Plugins for WordPress Development

Efficient Document Merging Strategies for Professionals

Here’s a rundown of some things you may have missed if you weren’t able to stay on top of the things coming out of the conference.

Thursday, May 16, 2024 14:00

While I one day wish to make it to the RSA Conference in person, I’ve never had the pleasure of making the trek to San Francisco for one of the largest security conferences in the U.S. 

Instead, I had to watch from afar and catch up on the internet every day like the common folk. This at least gives me the advantage of not having my day totally slip away from me on the conference floor, so at least I felt like I didn’t miss much in the way of talks, announcements and buzz. So, I wanted to use this space to recap what I felt like the top stories and trends were coming out of RSA last week.  

Here’s a rundown of some things you may have missed if you weren’t able to stay on top of the things coming out of the conference. 

**AI is the talk of the town** 

This is unsurprising given how every other tech-focused conference and talk has gone since the start of the year, but everyone had something to say about AI at RSA.  

AI and its associated tools were part of all sorts of product announcements (either to be used as a marketing buzzword or something that is truly adding to the security landscape).  

Cisco’s own Jeetu Patel gave a keynote on how Cisco Secure is using AI in its newly announced Hypershield product. In the talk, he argued that AI needs to be used natively on networking infrastructure and not as a “bolt-on” to compete with attackers.  

U.S. Secretary of State Anthony Blinken was the headliner of the week, delivering a talk outlining the U.S.’ global cybersecurity policies. He spent a decent chunk of his half hour in the spotlight also talking about AI, in which he warned that the U.S. needed to maintain its edge when it comes to AI and quantum computing — and that losing that race to a geopolitical rival (like China) would have devastating consequences to our national security and economy.  

Individual talks ran the gamut from “AI is the best thing ever for security!” to “Oh boy AI is going to ruin everything.” The reality of how this trend shakes out, like most things, is likely going to be somewhere in between those two schools of thought.  

An IBM study released at RSA highlighted how headstrong many executives can be when embracing AI. They found that security is generally an afterthought when creating generative AI models and tools, with only 24 percent of responding C-suite executives saying they have a security component built into their most recent GenAI project.  

**Vendors vow to build security into product designs** 

Sixty-eight new tech companies signed onto a pledge from the U.S. Cybersecurity and Infrastructure Security Agency, vowing to build security into their products from earliest stages of the design process.  

The list of signees now includes Cisco, Microsoft, Google, Amazon Web Services and IBM, among other large tech companies. The pledge states that the signees will work over the next 12 months to build new security safeguards for their products, including increasing the use of multi-factor authentication (MFA) and reducing the presence of default passwords.  

However, there’s looming speculation about how enforceable the Secure By Design pledge is and what the potential downside here is for any company that doesn’t live up to these promises.  

**New technologies countering deepfakes** 

Deepfake images and videos are rapidly spreading online and pose a grave threat to the already fading faith many of us had in the internet. 

It can be difficult to detect when users are looking at a digitally manipulated image or video unless they’re educated on common red flags to look for, or if they’re particularly knowledgeable on the subject in question. They’re getting so good now that even targets’ parents are falling for fake videos of their loved ones.  

Some potential solutions discussed at RSA include digital “watermarks” in things like virtual meetings and video recordings with immutable metadata.  

A deep fake-detecting startup was also named RSA’s “Most Innovative Startup 2024” for its multi-modal software that can detect and alert users of AI-generated and manipulated content. McAfee also has its own Deepfake Detector that it says, “utilizes advanced AI detection models to identify AI-generated audio within videos, helping people understand their digital world and assess the authenticity of content.” 

Whether these technologies can keep up with the pace that attackers are developing this technology and deploying it on such a wide scale, remains to be seen.  

**The one big thing **

Microsoft disclosed a zero-day vulnerability that could lead to an adversary gaining SYSTEM-level privileges as part of its monthly security update. After a hefty Microsoft Patch Tuesday in April, this month’s security update from the company only included one critical vulnerability across its massive suite of products and services. In all, May’s slate of vulnerabilities disclosed by Microsoft included 59 total CVEs, most of which are of “important” severity. There is only one moderate-severity vulnerability. 

**Why do I care? **

The lone critical security issue is CVE-2024-30044, a remote code execution vulnerability in SharePoint Server. An authenticated attacker who obtains Site Owner permissions or higher could exploit this vulnerability by uploading a specially crafted file to the targeted SharePoint Server. Then, they must craft specialized API requests to trigger the deserialization of that file’s parameters, potentially leading to remote code execution in the context of the SharePoint Server. The aforementioned zero-day vulnerability, CVE-2024-30051, could allow an attacker to gain SYSTEM-level privileges, which could have devastating impacts if they were to carry out other attacks or exploit additional vulnerabilities. 

**So now what? **

A complete list of all the other vulnerabilities Microsoft disclosed this month is available on its update page. In response to these vulnerability disclosures, Talos is releasing a new Snort rule set that detects attempts to exploit some of them. Please note that additional rules may be released at a future date and current rules are subject to change pending additional information. Cisco Security Firewall customers should use the latest update to their ruleset by updating their SRU. Open-source Snort Subscriber Rule Set customers can stay up to date by downloading the latest rule pack available for purchase on Snort.org. The rules included in this release that protect against the exploitation of many of these vulnerabilities are 63419, 63420, 63422 - 63432, 63444 and 63445. There are also Snort 3 rules 300906 - 300912. 

**Top security headlines of the week **

**A massive network intrusion is disrupting dozens of hospitals across the U.S., even forcing some of them to reroute ambulances late last week.** Ascension Healthcare Network said it first detected the activity on May 8 and then had to revert to manual systems. The disruption caused some appointments to have to be canceled or rescheduled and kept patients from visiting MyChart, an online portal for medical records. Doctors also had to start taking pen-and-paper records for patients. Ascension operates more than 140 hospitals in 19 states across the U.S. and works with more than 8,500 medical providers. The company has yet to say if the disruption was the result of a ransomware attack or some sort of other targeted cyber attack, though there was no timeline for restoring services as of earlier this week. Earlier this year, a ransomware attack on Change Healthcare disrupted health care systems nationwide, pausing many payments providers were expected to receive. UnitedHealth Group Inc., the parent company of Change, told a Congressional panel recently that it paid a requested ransom of $22 million in Bitcoin to the attackers. (CPO Magazine, The Associated Press) 

**Google and Apple are rolling out new alerts to their mobile operating systems that warn users of potentially unwanted devices tracking their locations.** The new features specifically target Bluetooth Low Energy (LE)-enabled accessories that are small enough to often be unknowingly tracking their specific location, such as an Apple AirTag. Android and iOS users will now receive the alert when such a device, when it's been separated from the owner’s smartphone, is moving with them still. This alert is meant to prevent adversaries or anyone with malicious intentions from unknowingly tracking targets’ locations. The two companies proposed these new rules for tracking devices a year ago, and other manufacturers of these devices have agreed to add this alert feature to their products going forward. “This cross-platform collaboration — also an industry first, involving community and industry input — offers instructions and best practices for manufacturers, should they choose to build unwanted tracking alert capabilities into their products,” Apple said in its announcement of the rollout. (Security Week, Apple) 

**The popular Christie’s online art marketplace was still down as of Wednesday afternoon after a suspected cyber attack.** The site, known for having many high-profile and wealthy clients, was planning on selling artwork worth at least $578 million this week. Christie’s said it first detected the technology security incident on Thursday but has yet to comment on if it was any sort of targeted cyber attack or data breach. There was also no information on whether client or user data was potentially at risk. Current items for sale included a Vincent van Gogh painting and a collection of rare watches, some owned by Formula 1 star Michael Schumacher. Potential buyers could instead place bids in person or over the phone. (Wall Street Journal, BBC) 

**Can’t get enough Talos? **

*   Talos joins CISA to counter cyber threats against non-profits, activists and other at-risk communities 
*   Click Here Ep. #130: A wrinkle in time: GPS jamming in Ukraine and its ripple effects 
*   Talos Takes Ep. #184: Why CoralRaider is looking to steal your login credentials 
*   Generative AI’s disinformation threat is ‘overblown,’ top cyber expert says 

**Upcoming events where you can find Talos **

**ISC2 SECURE Europe** **(May 29)** 

_Amsterdam, Netherlands_ 

> _Gergana Karadzhova-Dangela from Cisco Talos Incident Response will participate in a panel on “Using ECSF to Reduce the Cybersecurity Workforce and Skills Gap in the EU.” Karadzhova-Dangela participated in the creation of the EU cybersecurity framework, and will discuss how Cisco has used it for several of its internal initiatives as a way to recruit and hire new talent._  

**Cisco Live** **(June 2 - 6)** 

_Las Vegas, Nevada_  

**_AREA41_** **_(June 6 – 7)_** 

_Zurich, Switzerland_ 

> _Gergana Karadzhova-Dangela from Cisco Talos Incident Response will highlight the primordial importance of actionable incident response documentation for the overall response readiness of an organization. During this talk, she will share commonly observed mistakes when writing IR documentation and ways to avoid them. She will draw on her experiences as a responder who works with customers during proactive activities and actual cybersecurity breaches._ 

**Most prevalent malware files from Talos telemetry over the past week **

**SHA 256:** 9be2103d3418d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202   
**MD5:** e4acf0e303e9f1371f029e013f902262   
**Typical Filename:** FileZilla\_3.67.0\_win64\_sponsored2-setup.exe   
**Claimed Product:** FileZilla   
**Detection Name:** W32.Application.27hg.1201 

**SHA 256:** a024a18e27707738adcd7b5a740c5a93534b4b8c9d3b947f6d85740af19d17d0   
**MD5:** b4440eea7367c3fb04a89225df4022a6   
**Typical Filename:** Pdfixers.exe   
**Claimed Product:** Pdfixers   
**Detection Name:** W32.Superfluss:PUPgenPUP.27gq.1201 

**SHA 256:** 1fa0222e5ae2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9ab   
**MD5:** 4c648967aeac81b18b53a3cb357120f4   
**Typical Filename:** yypnexwqivdpvdeakbmmd.exe   
**Claimed Product:** N/A    
**Detection Name:** Win.Dropper.Scar::1201 

**SHA 256:** d529b406724e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1   
**MD5:** fb9e0617489f517dc47452e204572b4e   
**Typical Filename:** KMSAuto++.exe   
**Claimed Product:** KMSAuto++   
**Detection Name:** W32.File.MalParent 

**SHA 256:** abaa1b89dca9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6   
**MD5:** 22ae85259273bc4ea419584293eda886   
**Typical Filename:** KMSAuto++ x64.exe   
**Claimed Product:** KMSAuto++   
**Detection Name:** W32.File.MalParent

Rounding up some of the major headlines from RSA

iOS users are reporting that photos they had deleted long ago suddenly showed up again after this week's 17.5 update.

iPhone owners are reporting that photos they’d deleted are now back on their phones, after updating to iOS 17.5.

With so many users reporting similar oddities, it would seem something went wrong, or at least different than to be expected. Here are some examples from Reddit:

> “When in conversation with my partner, I went to send a picture and saw that the latest pictures were nsfw material we’d made years ago”

> “I have four pics from 2010 that keep reappearing as the latest pics uploaded to iCloud. I have deleted them repeatedly.”

> “Same thing happened to me. Six photos from different times, all I have deleted. Some I had deleted in 2023.”

When you delete a photo from an iPhone or iPad, it goes into a “Recently deleted” album for up to 30 days to make it easy to recover if the photo is accidentally deleted. However, the above examples vastly exceed this timeframe, and it’s unclear exactly what’s happened here.

When you delete a file, actually all that happens is you remove the pointer that tells you where exactly the file is located. This makes it hard to find, but not impossible. Until the system uses the location of the deleted file and replaces it with other data, the file can be retrieved.

Apple’s last update for iOS 17.5 and iPadOS 17.5 came out on Monday with a warning to update your iPhone as soon as possible. That’s because iOS 17.5 fixes 15 security vulnerabilities, some of which are serious. Please don’t let this article stop you from installing the update, but it’s good to be prepared for some unexpected behavior.

At the time of writing, Apple hasn’t commented on the issue.

**We don’t just report on phone security—we provide it**

Cybersecurity risks should never spread beyond a headline. Keep threats off your mobile devices by downloading Malwarebytes for iOS, and Malwarebytes for Android today.

 Deleted iPhone photos show up again after iOS update 

Google is introducing new AI-powered safety tools in Android 15 that can lock down your phone if thieves nab it.

Billions of Android phones are getting new tools to stop phone thieves from accessing your information and to slow down their criminal behavior, Google announced today at its I/O developer conference. Android phones will soon use artificial intelligence to automatically detect when they have been snatched from your hand and lock themselves, as part of the new changes that include adding extra protections to secure your phone if it has been stolen.

The upgrades—some of which will come with the Android 15 operating system, while others will be compatible with older phones—come as phone companies are increasingly building extra measures into their software to thwart rampant levels of phone thefts and further protect people’s data. As well as the stolen phone tools, Google is introducing new changes to Android 15 that will scan how apps are using “sensitive permissions” in real time to detect potentially suspicious app activities.

Around the world, phone thefts are a huge problem—in London, for example, a phone is stolen every six minutes. Thieves riding electric bikes or scooters can snatch phones out of people’s hands, pickpockets can easily nab devices from bags, and others are known to peer over shoulders to learn a phone’s PIN before they steal the device.

Stolen phones can be resold if they are unlocked or passed on to others who can break them down for parts and sell those components. However, some criminals will also try to access banking or crypto apps and transfer money. “The thieves profit from the physical device themselves, but they also increasingly are trying to get into the content of the device, where the most valuable data is stored,” Jianing Sandra Guo, an Android security and privacy product manager at Google, tells WIRED. Some thieves, if they have a locked phone, spam people with phishing emails and messages to friends to try and get login details.

Google’s anti-theft tools have been designed to add more protection before a phone is stolen, during the theft, and after a phone has been taken, Guo explains. In keeping with Google’s and the wider tech industry’s push, some of these have been built using artificial intelligence as a key component.

Courtesy of Google

Android’s new Theft Detection Lock uses Google’s AI to determine when your phone has been snatched from your hand. If it detects this, the phone’s screen will automatically be locked. Using smartphone sensors, such as the accelerometer and gyroscope, Google trained its algorithms to detect sudden changes in the phone’s positioning and the motions that might indicate it has been snatched.

“There’s a grabbing of the phone, changing hands, and then an attacker running, biking, or even driving away with a device,” Guo says. To train the algorithm, Google’s research staff studied how phones are commonly stolen, then its teams re-created snatching events against each other to collect data about what a simulated theft looks like.

Thieves stealing phones, Guo says, will often open the camera app when they don’t know the phone’s PIN, to stop them from losing access to the device. They also often try to disconnect it from cell networks for a long period of time so they can’t be locked out of the device remotely. The company’s new Offline Device Lock will lock your screen when the phone is offline for an extended period of time, if the setting is turned on.

To increase protections before a phone is stolen, Google says in a blog post, the company is adding four data protection features that can help keep your information locked down. The first stops your phone from being set up after a factory reset, unless the person knows your login details. “This renders a stolen device unsellable, reducing incentives for phone theft,” Google vice president Suzanne Frey writes.

There’s also a new “private spaces” option where you can store sensitive apps, such as banking apps, that require a second PIN or use of your biometrics, such as a fingerprint, to access. There are also extra authentication controls being put in place: If a thief tries to disable Google's Find My Device location-tracking service they will need to also use your PIN, password, or biometric information to unlock it. If a thief does know your PIN, it will also be possible to turn on the need for biometric authentication to make changes to important Google account and device settings, such as a PIN change or turning off anti-theft settings.

The extra authentication features are similar to those introduced by Apple in its Stolen Device Protection system that debuted in iOS 17.3 earlier this year, although Google’s theft motion detection goes further than these tools. The aim of all anti-theft options is to lock down the information stored on phones but also to make it harder for criminals to abuse devices when they have them. Making it more difficult for criminals to resell phones or transfer money may help to deter thefts.

If your phone does get stolen, Android already allows phones to be locked and wiped. However, Guo says, the experience of having a phone swiped from your hands is a “traumatic” experience, and in the aftermath, people may not remember all their Google account login details to close off access to the phone. To address this, Google’s new Remote Lock feature will allow people to lock their phone using just a phone number. “The content of the device is protected, and it buys the user a lot of time … to be able to organize themselves and do further remediation,” Guo says.

Google’s new protections around factory resets will launch with Android 15, while some of the other features will be available later this year. Guo says that, where possible, Google has tried to make the features work on versions of the software as old as Android 10.

Aside from the anti-phone-theft tools, Android is coming with other security and privacy updates. Google’s app safety system, Google Play Protect, scans billions of apps every day to detect malware, but now this is being expanded to do live scanning on people’s phones to better detect suspicious behavior. “With live threat detection, Google Play Protect’s on-device AI will analyze additional behavioral signals related to the use of sensitive permissions and interactions with other apps and services,” Dave Kleidermacher, a Google vice president, writes in a blog post.

Other security-related updates to Android 15 include hiding notifications and one-time passwords from appearing if you are sharing your phone’s screen with others, hiding login details if you are logging in to an app or website while sharing your screen, and identifying when cell connections are unencrypted and alerting people if there is a “potential false cellular base station” or IMSI catcher nearby that is logging a user’s phone.

_Updated 2:45 pm ET, May 15, 2024, to clarify that several new features will be included in updates that are separate from Android 15 itself, according to Google._

Android Update: Theft Detection Lock Knows When Your Phone Is Stolen

Google has announced a slew of privacy and security features in Android, including a suite of advanced protection features to help secure users' devices and data in the event of a theft.
These features aim to help protect data before, during and after a theft attempt, the tech giant said, adding they are expected to be available via an update to Google Play services for devices running

Tag

#android