Category: What’s New in Technology

Deepfake technology utilizes machine learning and artificial intelligence (AI) to manipulate or create synthetic audio, video and images that appear authentic. Deepfakes are commonly featured in entertainment and politics to spread false information and propaganda. For instance, deepfake has been used to show a celebrity or leader saying something that they didn’t, and this creates fake news.

Unfortunately, in deepfakes, cybercriminals have found a new tool for cyberattacks. Cybercriminals are now using deepfakes to pose a variety of enterprise risks.

How Cybercriminals Are Using Deepfakes

Deepfake technology is now used to create scams, hoaxes and false claims that undermine and destabilize organizations. For instance, a manipulated video might show a senior executive associated with fake news, such as admitting to a financial crime or spreading misinformation about a company’s products. Such corporate sabotage costs a lot of time and money to disprove and can impact a business’s reputation.

Another way businesses can be negatively impacted is through social engineering attacks such as phishing, which relies on impersonation to compromise an email. Similarly, social engineering using deepfakes can feature voice or video impersonations. A good example of such an impersonation was reported in The Wall Street Journal, in which fraudsters used AI to mimic a CEO’s voice. This incident happened in March 2019, when criminals impersonated a chief executive’s voice to direct a payment of $243,000.

Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.

This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.

The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).

How to be Prepared and Protect Against Deepfakes

Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.

Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.

Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:

1. Use anti-fake technologies
   Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
2. Enforce robust security protocols
   Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
3. Develop new security standards
   As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
4. Training and awareness
   Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
5. Keep user data private
   Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
6. Disinformation response policy
   Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.

Conclusion

Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.

Web browsers such as Google Chrome, Firefox, Safari and Edge, among others, play an essential role in enabling access to websites on the internet. Most browsers allow users to install extensions, also referred to as add-ons or plug-ins. These extensions are applications or small software modules that add functionality and other useful features to a browser.

By means of the extensions, users can carry out various tasks such as password management, cookie management, ad blocking, interface modification, productivity tracking, grammar and spell-checking, etc.

However, although the extensions offer different useful functionalities, cybercriminals have taken advantage of them, creating a security risk to users and their data.

The Need to Beware of Browser Extensions

Browsers enable websites to collect information such as viewing history, adding cookies, etc. Also, when installing the extensions, some require to be allowed various permissions, like the ability to read or change data. For instance, according to a recent study by Talon, a digital security company, most Chrome Web Store extensions (62.43 percent of extensions) require dangerous permissions, including permission to read or change user data and activity. This means that an extension can see the sites visited, keystrokes, login credentials and private data, such as payment card details.

Since this information is readily available on a user’s web browser, cybercriminals can use a malicious extension to collect the data for their gain. At the same time, the data collected is sold without user consent or knowledge and used by third-party data brokers to send users tailor-made ads.

Although not all browser extensions are a security risk, some might be built to impersonate legitimate extensions, especially those from third-party resources. In other cases, legitimate extensions have been compromised or bought by a developer who uses them for malicious purposes.

Some browser add-ons are built to download malware onto your device, redirect search traffic to malicious websites or download ad ware and Trojan horse viruses.

The extensions can automatically update without requiring any action from a user. This means that if a legitimate extension is compromised, it can be used to install malware without user knowledge. Even secure extensions are prone to attacks or can be compromised, enabling attackers to gain access to data stored by browsers.

Additionally, malicious extensions can be built to bypass fraud detection by official Web stores. For instance, in 2020, Google removed over 500 extensions from its web store that violated policies, with some already having infected users and stolen their data. This followed the discovery of some malicious extensions that users had already downloaded.

A recent report released by Kaspersky, a cybersecurity firm, shows just how dangerous malicious add-ons are. After the firm analyzed data from January 2020 to June 2022, it discovered that over this time frame, 4.3 million users were attacked by adware hiding in browser extensions. This put adware as the highest representative of browser extension risks, with malware coming second. The report also indicates that Kaspersky products prevented more than 6 million users from downloading adware, malware or riskware disguised as browser extensions.

Such figures from just one cybersecurity firm are worrying, considering the study focused only on users that use their security solutions. This creates a need for users to be more vigilant when using browser extensions.

How to Make Sure Browser Extensions Are Safe

There are various ways to help reduce the risks posed by browser extensions:

1. Ensure the extension is from an official web store. Since these extensions can also be compromised, it is best to find out more information about the developer.
2. Check reviews as they help to know what other users think of the extension and if there have been any complaints. However, users should be cautious of identical comments or too many 5-star reviews, as these could be fake.
3. Check whether the extension is updated regularly. An extension last updated many years ago might not be reliable.
4. Review extension permissions for each extension.
5. Check that you are not installing clones of the original extension. For instance, if you search for an extension, you can find other similar ones that look legit.
6. Uninstall browser extensions that you don’t recognize or those you no longer need.
7. Use browsers that have the features you want.
8. Install reliable antivirus software that will help spot malicious activities or applications.

Conclusion

Browser extensions play an important role in the user browsing experience. Although not all extensions are dangerous, users must conduct due diligence to ensure they install legitimate extensions.

Non-fungible tokens (NFTs) are rising in demand, and some brands are already generating great results in their campaigns and providing a unique experience to customers. As the hype around NFTs continues, businesses need to understand how they can benefit.

What is an NFT?

An NFT is a valuable digital asset created using blockchain. Unlike cryptocurrencies, NFTs are not mutually interchangeable as each NFT represents a different asset with a different value. Hence, an NFT verifies the authenticity of a non-fungible asset. This means that the purchaser of the asset/product can only use a product. Unlike other digital products, an NFT can’t be duplicated and sold. This is because the non-fungible asset is made into a token with a digital certificate of ownership, creating authenticity and credibility. NFTs could include videos, music, physical products, services, documents, artwork, and even memes.

A non-fungible asset’s value depends on various factors, such as underlying value, ownership history, perception of the buyer, future value, etc.

How NFTs Have Been Used

So far, some industries are already reaping benefits from NFTs. Various cases of NFTs can be found in gaming, music, fashion, sports, and virtual real estate.

The growth of NFTs has been attributed to the fact that humans like to collect things, and since NFTs are designed to be scarce digital assets, this contributes to the high prices. According to research conducted in March 2021 by Morning Consult, a global decision intelligence company, about half of the people who identified themselves as avid physical collectors were interested in NFTs. In addition, users have more control over the asset bought because it cannot be used in any other way or duplicated, making it more valuable.

It might not be obvious to most when NFTs are worth an investment. However, looking at NFTs that have already been sold, this can present an opportunity that businesses should not ignore. For instance, the first tweet by Twitter CEO Jack Dorsey was sold for over $2.9 million in March 2022. The Nike brand also has been making headlines with its virtual sneakers, with one selling at $134,000.

With such news making the headlines, businesses may wonder how they can benefit from NFTs. 

How Can a Business Benefit from NFTs?

Businesses still hesitant about adopting new technologies should start considering creating NFTs that align with their brand image. Below are some ways in which a business can benefit:

1. Brand Visibility

Aside from digital marketing, NFTs provide another way businesses and corporations can drive attention to their brand. For instance, by creating a digital version of your products, you expose it to NFT enthusiasts, some of who might not be aware of your products. NFTs also can be incorporated as part of your brand storytelling, creating unique experiences for your customers, consequently increasing consumer engagements.

2. Authenticity

Many businesses undergo massive losses of revenue due to counterfeit products. With NFTs, businesses can ascertain the authenticity of their products and services. A digital certificate is issued with every transaction and a record is kept on the blockchain. A customer can check the authenticity since the blockchain can be traced to the original seller.

3. Additional Revenue Stream

Businesses can use NFTs as an additional source of income by selling digital forms of their products or services. One way to do this is by creating an early access opportunity before the official product launches, creating a buzz and ensuring the NFT value will rise.

4. Customer Loyalty Program

The versatile nature of NFTs makes them ideal for use in loyalty programs. The tokens can be used as medals for loyal clients or as membership tokens.

5. Prevent Ticket Scams

Many people fall victim to online ticket scams where they buy fake discounted tickets or duplicate tickets of an original event ticket. The money collected doesn’t go to the business, which also affects the event organizers. Customers also risk their credit card information being stolen by scammers. However, turning a ticket into an NFT makes it easy to verify its authenticity and even prevent ticket black markets.

6. Managing Supply Chain

NFTs are positively disrupting the supply chain. By the use of blockchain technology, it’s now easy to trace the entire process of a product lifecycle, from raw material, transportation, manufacturing, and distribution up to the end consumer. Hence, businesses interested in improving transparency and accountability can embrace NFTs to automate their supply chain.

Conclusion

NFT technology is relatively new, and its practical use is still limited. However, the fact that people are willing to spend on them is reason enough why any business should consider leveraging NFTs in its marketing strategies to help boost brand engagement and drive sales. 

Today, businesses have to grapple with vast amounts of data from different sources, including emails, mailing lists, customer orders, system logs, mobile apps, social media networks, etc. This data is crucial to businesses in various ways. When analyzed, a business can identify operational issues, personalize the customer experience and manage supply chains – all contributing to better decision-making.

However, big data also has challenges, especially regarding its storage due to size and other factors such as collection speed, processing, retrieval and format. This becomes more complicated as the data keeps growing with time and cannot be stored in traditional storage devices, necessitating a need for facilities that store and process the data efficiently.

Depending on the business type, a choice can be made between storing data in a warehouse or in the cloud. A data warehouse is a building facility that stores and processes data for a business. This in-house data storage offers the advantage of speed. However, when more space is needed, it will be necessary to acquire more physical storage.

On the other hand, a business may choose to opt for cloud storage. Cloud storage offers the benefit of convenience, accessibility, cost and maintenance, which the service provider handles.

Considerations in Storing Big Data

Regardless of the means a business chooses to store its data, there are various issues to consider:

• Understand your data – before choosing a data storage method, it is essential to first understand the company’s data in terms of the type of data collected, quantity, storage period, retrieval speeds, use cases, etc. This helps choose a data management system that can handle the data efficiently.
• Data governance – with so much data collected and with data growing exponentially, it is likely that users can be lost in a sea of data. Therefore, a business should define a strategy that aligns with business goals to avoid collecting unnecessary data that takes up storage space.
• Data integration tools – data is collected from multiple sources, and it is necessary to have adequate integration tools that allow for different file formats.
• Cost – it is difficult to determine the actual cost of storing data. Hence, a business should not base the cost decision on the upfront cost alone. This is because other factors are involved, including operating costs, the need for scalability, training or hiring users, new technologies, and the cost of backup. Businesses must evaluate whether the initial investment in the best data storage technologies is worthwhile by looking at the potential long-term results.
• The data storage provider – before settling on a service provider, thorough research should be conducted. Some considerations when choosing from a variety of providers should include the availability of technical support to solve problems quickly, scalability, fault tolerance, pricing models, and reviews from existing customers.
• Disaster recovery plan – ensure it is possible to recover data quickly. This is crucial with attacks that deny access to data without paying a ransom. A business should consider keeping secure offsite backups.
• Enhanced security is required – the expanding IoT network adds to the number of endpoints and devices storing or retrieving data. Therefore, big data comes with a huge responsibility to preserve data in an environment where hackers are pervasive and never stop coming up with new ways to break into systems. It is recommended to choose the safest option even when it costs more, as data security is vital for the survival of any business.
• Employee training – big data may require a business to hire new staff to help in analytics, such as data scientists. Regardless, a business should consider training existing employees on handling big data and using new tools that will be introduced. Big data also requires collaboration among different departments in an organization. Data-literate employees can better interpret data, ask the right questions, and generally make data-driven decisions.

Compliance with data security regulations – this especially applies to highly regulated industries such as finance or health. It is essential to ensure that even when outsourcing data storage and management, the service provider adheres to compliance regulations to avoid heavy fines that come with a violation. 

Cash flow awareness is vital in running the day-to-day activities of a business. Keeping track of the inflows and outflows helps a company make better plans and decisions, such as the right time to expand. Cash flow knowledge reveals where a business is spending money and can protect business relations, among other benefits. However, tracking cash flow is a challenge for many businesses.

To avoid business failure due to poor cash flow management, business owners are investing in software applications to help manage cash flow challenges. Modern technology enables access to these applications over the cloud, giving small- and medium-sized businesses the opportunity to benefit from them. These cash flow management tools help companies improve cash flow in various ways.

1. Remove Manual Paper Systems that Cost Time and Money
   Using a cash flow automated system, it’s possible to create and send invoices directly to clients through email. This saves on time that would otherwise be used for printing invoices, mailing, bank trips, and going through paperwork comparing details. It is also possible to automate recurring invoices, saving the time used to create and send invoices.
2. Makes it Easy for Clients to Pay
   Paying invoices takes time if a client has to keep confirming the payment details. However, an automated invoice can contain a pay now link, which facilitates quick payments for applications that include access to online payment options.
3. Helps Avoid Data Entry Errors and Reduces Risks
   There is no need to move from one platform to another to check details, manually enter details, verify figures, etc. This ensures fewer errors, such as those generated when copying details like bank information to a check, or paying the wrong amount. Sorting out these errors takes time, hence delaying payments.
4. Cash Flow Forecast
   The applications offer access to account insights in real time using cloud-based software and mobile apps, making it possible to forecast when clients are likely to pay and when bills are due. Access to live data also means there is no more dealing with complicated spreadsheets and paper ledgers. This way, a business can plan its actions to ensure positive cash flow. For instance, a business can delay paying vendors and plan when best to pay bills without running out of standby cash.
5. Avoid Late Payments
   Late payments can result in fines that will cost the business unnecessary losses. However, with software that automatically sends invoice reminders, it is possible to make timely payments.
6. Centralized Cash Flow System
   All activities involving cash transactions are located in one system, offering the ability to see cash inflows and outflows at a glance. As a result, a business can streamline its accounts and monitor cash flow; and since it includes real-time reporting, it’s easy to spot any red flags and solve problems that could adversely affect a business.
7. Leverage on Data Analytics
   A centralized system will collect data and store it in one place. By deploying artificial intelligence technology that performs data analysis, a business can better forecast its cash flow. This also provides insight into how changes such as a new products or price adjustments affect cash flow.

Choosing a Cash Flow Tool

Cash flow automation enables a business to maintain a positive cash flow and have cash in its reserves to afford reinvesting in its operations, settling debts, and handling other operating costs. However, before investing in an automation tool, it’s recommended to analyze different tools to find the best fit for your business. Each tool is different and built to address various business problems.

Some features to look out for include integration with the existing accounting system, payments and invoicing, accepting a variety of payment methods, and security.

Besides getting the most suitable application, there are other considerations to establishing a healthy cash flow. Technology has its benefits, but it does not act as a cure for a poorly implemented system. For instance, if employees don’t know how to use new technology, its impact will be limited. Therefore, a business should establish a workflow process before implementing any new technology.