Connect with us

Technology

Kaspersky security software is banned in America: What you need to know

Published

on

Kaspersky security software is banned in America: What you need to know

Kaspersky is a multinational cybersecurity company that makes antivirus software, but it’s now banned in the U.S. The Biden administration recently announced plans to stop the sale of antivirus software from Russia’s Kaspersky Lab in the States, saying the company’s ties with Russia pose a risk to national security. It’s also believed that Kaspersky’s software lets bad actors install malicious software and withhold critical updates.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

Kaspersky conference room (Kaspersky)

Why is the US banning Kaspersky?

Kaspersky is getting banned in the U.S. after the Bureau of Industry and Security (BIS) conducted a review of the company’s cybersecurity and anti-virus transactions. BIS notes that the company poses “unacceptable risks to the United States’ national security and the security and safety of its people.” The main concerns are Kaspersky’s connections to Russia, the potential security weaknesses in Kaspersky’s products, and the chance that Russia could exploit these weaknesses.

Advertisement

In an announcement, BIS specifically listed five risks Kaspersky poses to national security. Kaspersky’s ties to Russia are a major concern. BIS states that Russia is a foreign adversary that poses ongoing threats to the United States. According to the agency, Kaspersky is under the jurisdiction and control of the Russian government, allowing it access to sensitive information from U.S. customers.

Other reasons given for the Kaspersky ban include the software’s ability to install malware. “Kaspersky software allows for the capability and opportunity to install malicious software and withhold critical updates,” says BIS. “The manipulation of Kaspersky software, including in U.S. critical infrastructure, can result in data theft, espionage, and system malfunctions. The products also threaten economic security and public health in the U.S., potentially resulting in injuries or loss of life.”

Kaspersky’s ban in the U.S. shouldn’t come as a surprise since the firm has been on the government’s radar for quite some time. In 2017, the U.S. banned the use of the Moscow-based cybersecurity firm’s products across all government agencies.

Illustration of a bad actor on a computer (Kurt "CyberGuy" Knutsson)

Illustration of a bad actor on a computer (Kurt “CyberGuy” Knutsson)

AT&T DATA LEAK FROM 73 MILLION CUSTOMERS – WHAT YOU NEED TO DO NEXT

Kaspersky’s response to the ban

Kaspersky denied Friday that it is a security threat, saying the government had based its decision on the “geopolitical climate and theoretical concerns” rather than independently verifying if there was a risk. The company says it cannot obtain sensitive data on Americans and that its operations and employees in Russia can only access aggregate or statistical data not attributable to a specific person.

Advertisement

Below is part of the company’s official statement. The full statement can be read on Kaspersky’s website.

“For over 26 years, Kaspersky has succeeded in its mission of building a safer future by protecting over a billion devices. Kaspersky provides industry-leading products and services to customers around the world to protect them from all types of cyber threats, and has repeatedly demonstrated its independence from any government. Additionally, Kaspersky has implemented significant transparency measures that are unmatched by any of its cybersecurity industry peers to demonstrate its enduring commitment to integrity and trustworthiness. The Department of Commerce’s decision unfairly ignores the evidence.”

A child working on a computer (Kurt "CyberGuy" Knutsson)

A child working on a computer (Kurt “CyberGuy” Knutsson)

PHARMA GIANT’S DATA BREACH EXPOSES PATIENTS’ SENSITIVE INFORMATION

What does this ban mean for you?

The Kaspersky ban essentially means you will not be able to purchase its software products, and if you already have one, it will stop working soon. Starting July 20, Kaspersky and any of its partners will not be able to sell or license cybersecurity or antivirus software in the U.S. Resellers who already have the products in stock will be able to sell them, but only until Sept. 29.

It’s worth noting that while BIS has banned most Kaspersky products, some have been exempted. These include Kaspersky Threat Intelligence products and services, Kaspersky Security Training products and services, and Kaspersky consulting and advisory services.

Advertisement

Existing Kaspersky customers have until Sept. 29 to find an alternative, as the company will no longer be able to provide antivirus signature updates after this date.

Which antivirus should you choose now that Kaspersky is banned?

Kaspersky’s antivirus was widely used, but now that it has been banned, it’s important to look for alternatives. An antivirus is the best way to protect yourself from clicking malicious links that install malware, which may gain access to your private information. It can also alert you to phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

FRONTIER FALLOUT AS 750K CUSTOMERS’ DATA EXPOSED IN RANSOMHUB CYBERATTACK 

Kurt’s key takeaway

The U.S. government raised serious national security concerns regarding Kaspersky’s ties to the Russian government. If true, a ban is absolutely necessary. However, Kaspersky maintains it’s a private company with no ties to Moscow. It remains unclear whether these claims are credible. One thing’s for sure: Kaspersky’s absence would leave a significant gap in the cybersecurity market, creating a prime opportunity for competitors to step up.

Do you believe the concerns about Kaspersky’s ties to Russia and potential threats to national security are justified? Let us know by writing us at Cyberguy.com/Contact

Advertisement

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Follow Kurt on his social channels

 Answers to the most asked CyberGuy questions:

Copyright 2024 CyberGuy.com. All rights reserved.

Advertisement

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Welcome to Meta’s future, where everyone wears cameras

Published

on

Welcome to Meta’s future, where everyone wears cameras

All around Meta’s Menlo Park campus, cameras stared at me. I’m not talking about security cameras or my fellow reporters’ DSLRs. I’m not even talking about smartphones. I mean Ray-Ban and Meta’s smart glasses, which Meta hopes we’ll all — one day, in some form — wear.

I visited Meta for this year’s Connect conference, where just about every hardware product involved cameras. They’re on the Ray-Ban Meta smart glasses that got a software update, the new Quest 3S virtual reality headset, and Meta’s prototype Orion AR glasses. Orion is what Meta calls a “time machine”: a functioning example of what full-fledged AR could look like, years before it will be consumer-ready.

But on Meta’s campus, at least, the Ray-Bans were already everywhere. It was a different kind of time machine: a glimpse into CEO Mark Zuckerberg’s future world where glasses are the new phones.

I’m conflicted about it.

The Ray-Ban Meta smart glasses.
Photo by Vjeran Pavic / The Verge
Advertisement

Meta really wants to put cameras on your face. The glasses, which follow 2021’s Ray-Ban Stories, are apparently making inroads on that front, as Zuckerberg told The Verge sales are going “very well.” They aren’t full-fledged AR glasses since they have no screen to display information, though they’re becoming more powerful with AI features. But they’re perfect for what the whole Meta empire is built on: encouraging people to share their lives online. 

The glasses come in a variety of classic Ray-Ban styles, but for now, it’s obvious users aren’t just wearing glasses. As I wandered the campus, I spotted the telltale signs on person after person: two prominent circle cutouts at the edges of their glasses, one for a 12MP ultrawide camera and the other for an indicator light.

This light flashes when a user is taking photos and videos, and it’s generally visible even in sunlight. In theory, that should have put my mind at ease: if the light wasn’t on, I could trust nobody was capturing footage of me tucking into some lunch before my meetings. 

But as I talked with people around campus, I was always slightly on edge. I found myself keenly aware of those circles, checking to see if somebody was filming me when I wasn’t paying attention. The mere potential of a recording would distract me from conversations, inserting a low hum of background anxiety.   

When I put a pair on for myself, the situation changed

Advertisement

Then, when I put a pair on for myself, the situation suddenly changed. As a potential target of recording, I’d been hesitant, worried I might be photographed or filmed as a byproduct of making polite eye contact. With the glasses on my own face, though, I felt that I should be recording more. There’s something really compelling about the experience of a camera right at the level of your eyes. By just pressing a button on the glasses, I could take a photo or video of anything I was seeing at exactly the angle I was seeing it. No awkward fumble of pulling out my phone and hoping the moment lasted. There might be no better way to share my reality with other people.

Meta’s smart glasses have been around for a few years now, and I’m hardly the first person — or even the first person at The Verge — to be impressed by them. But this was the first time I’d seen these glasses not as early adopter tech, but as a ubiquitous product like a phone or smartwatch. I got a hint of how this seamless recording would work at scale, and the prospect is both exciting and terrifying.

The camera phone was a revolution in its own right, and we’re still grappling with its social effects. Nearly anyone can now document police brutality or capture a fleeting funny moment, but also take creepshots and post them online or (a far lesser offense, to be clear) annoy people at concerts. What will happen when even the minimal friction of pulling a phone out drops away, and billions of people can immediately snap a picture of anything they see?

Personally, I can see how incredibly useful this would be to capture candid photos of my new baby, who is already starting to recognize when a phone is taking a picture of her. But it’s not hard to imagine far more malicious uses. Sure, you might think that we all got used to everyone pointing their phone cameras at everything, but I’m not exactly sure that’s a good thing; I don’t like that there’s a possibility I end up in somebody’s TikTok just because I stepped outside the house. (The rise of sophisticated facial recognition makes the risks even greater.) With ubiquitous glasses-equipped cameras, I feel like there’s an even greater possibility that my face shows up somewhere on the internet without my permission. 

There are also clear risks to integrating cameras into what is, for many people, a nonnegotiable vision aid. If you already wear glasses and switch to prescription smart glasses, you’ll either have to carry a low-tech backup or accept that they’ll stay on in some potentially very awkward places, like a public bathroom. The current Ray-Ban Meta glasses are largely sunglasses, so they’re probably not most people’s primary set. But you can get them with clear and transition lenses, and I bet Meta would like to market them more as everyday specs.

Advertisement

Of course, there’s no guarantee most people will buy them. The Ray-Ban Meta glasses are pretty good gadgets now, but I was at Meta’s campus meeting Meta employees to preview Meta hardware for a Meta event. It’s not surprising Meta’s latest hardware was commonplace, and it doesn’t necessarily tell us much about what people outside that world want. 

Camera glasses have been just over the horizon for years now. Remember how magical I said taking pictures of what’s right in front of your eyes is? My former colleague Sean O’Kane relayed almost the exact same experience with Snap Spectacles back in 2016.

But Meta is the first company to make a credible play for mainstream acceptance. They’re a lot of fun — and that’s what scares me a little.

Continue Reading

Technology

Fox News AI Newsletter: AI bad actors 'not very Christian'

Published

on

Fox News AI Newsletter: AI bad actors 'not very Christian'

Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.

IN TODAY’S NEWSLETTER:

– ‘CHiPs’ star Erik Estrada says certain people using AI are not ‘very Christian’
– Las Vegas Sphere’s robot is seen ‘learning about humans’ from her interactions with guests
– OpenAI reportedly looking to strip control from nonprofit board, go for-profit in restructuring

Erik Estrada attends Hollywood celebrity sporting clays invitational luncheon and presentation at Spago on Feb. 5, 2011, in Beverly Hills, California.  (Brian To/FilmMagic)

‘CAN DESTROY LIVES’: During an interview with Fox News Digital, the 75-year-old actor and “Divine Renovation” host acknowledged the benefits of AI but cautioned that the new technology is also frequently being used for nefarious purposes.

WHAT HAPPENS IN VEGAS: Meet Aura, a humanoid robot that serves as a “spokesbot” at the Sphere located at Las Vegas’ Venetian Resort. 

Advertisement
Aura the robot

Aura the robot, located at the Sphere in Las Vegas, can have conversations with guests and answer any questions he or she has about the venue or about any other topic. (Christine Gregorian)

CHANGE IN STATUS: OpenAI is working on a corporate restructuring plan that would pull control from the ChatGPT creator’s nonprofit board and transform the organization into primarily a for-profit entity, according to a report from Reuters.

Sam-Altman

Sam Altman, CEO of OpenAI, walks from lunch during the Allen & Company Sun Valley Conference on July 6, 2022 in Sun Valley, Idaho. (Kevin Dietsch/Getty Images | Nicolas Economou/NurPhoto via Getty Images)

DEEPFAKE IMPERSONATOR: Authorities are investigating a mysterious “deepfake” video call that successfully impersonated a Ukrainian high official.

Benjamin Cardin

Sen. Ben Cardin, a Democrat from Maryland, during an event in Upper Marlboro, Maryland, on Thursday, Aug. 15, 2024.  (Aaron Schwartz/Bloomberg via Getty Images)

Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook
Instagram
YouTube
Twitter
LinkedIn

SIGN UP FOR OUR OTHER NEWSLETTERS

Advertisement

Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health

DOWNLOAD OUR APPS

Fox News
Fox Business
Fox Weather
Fox Sports
Tubi

WATCH FOX NEWS ONLINE

Fox News Go

Advertisement

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

Continue Reading

Technology

The messy WordPress drama, explained

Published

on

The messy WordPress drama, explained

WordPress is essentially internet infrastructure. It’s widely used, generally stable, and doesn’t tend to generate many splashy headlines as a result.

But over the last week, the WordPress community has swept up into a battle over the ethos of the platform. Last week, WordPress cofounder Matt Mullenweg came out with a harsh attack on WP Engine, a major WordPress hosting provider, calling the company a “cancer” to the community. The statement has cracked open a public debate surrounding how profit-driven companies can and can’t use open-source software — and if they’re obligated to contribute something to the projects they use in return.

The conflict has escalated in the days since with a barrage of legal threats and has left swaths of website operators caught in the crossfire of a conflict beyond their control. WP Engine customers were cut off from accessing WordPress.org’s servers, preventing them from easily updating or installing plugins and themes. And while they’ve been granted a temporary reprieve, WP Engine is now facing a deadline to resolve the conflict or again have their customers’ access fall apart once again.

WP Engine is a third-party hosting company that uses the free, open-source WordPress software to create and sell its own prepackaged WordPress hosting service. Founded in 2010, WP Engine has grown to become a rival to WordPress.com, with more than 200,000 websites using the service to power their online presence.

“Silver Lake doesn’t give a dang about your open source ideals, it just wants return on capital.”

Advertisement

Mullenweg leads two different WordPresses. There’s WordPress.org, the open source project that develops the backbone of the WordPress publishing platform, and then there’s WordPress.com, a company that sells a hosted version of the open-source WordPress software — just like WP Engine. Mullenweg runs Automattic, which owns WordPress.com. Data suggests that around 43 percent of all websites use WordPress, but it’s not clear how many are hosted by WordPress.com or another party.

Along with selling plans on WordPress.com, Automattic contributes a lot of development effort to the open source project, which itself relies on donations and community contributions to run. According to Mullenweg, the team contributes 3,988 hours per week. The company may not have to pay to use WordPress, but it certainly pays to develop and improve it.

WP Engine operates a bit differently. It says it focuses on investing in the community through sponsorships and encouraging the adoption of the platform. The hosting platform was acquired by the private equity firm Silver Lake in 2018, and Mullenweg views it as a business that profits off of open-source code without giving anything back.

That frustration came to a head last week when Mullenweg took the stage at WordCamp — a WP Engine-sponsored WordPress conference — and took direct aim at WP Engine. “The company is controlled by Silver Lake, a private equity firm with $102 million in assets under management,” Mullenweg said. “Silver Lake doesn’t give a dang about your open source ideals — it just wants return on capital. So, it’s at this point I ask everyone in the WordPress community to go vote with your wallet. Who are you going to give your money to: someone who is going to nourish the ecosystem or someone who is going to frack every bit of value out of it until it withers?”

Mullenweg followed up this statement with a September 21st blog post, where he lambasted WP Engine for contributing just 40 hours per week to the WordPress.org open source project. “WP Engine is setting a poor standard that others may look at and think is ok to replicate. We must set a higher standard to ensure WordPress is here for the next 100 years,” Mullenweg wrote in the blog. He ripped into WP Engine even more, saying it’s “strip-mining the WordPress ecosystem” and giving users a “crappier experience so they can make more money.”

Advertisement

Mullenweg isn’t just defending the ethos of open source — he’s also defending his competing WordPress provider

Mullenweg doesn’t appear to be wrong about WP Engine’s contributions. But WP Engine is ultimately abiding by the rules of WordPress’ open-source license: it’s generally free to use, and WP Engine doesn’t have to give back to the WordPress community just because it’s banking off the open-source code. Of course, it’d be nice if WP Engine did, but nothing requires that it do so.

Complicating this further: Mullenweg isn’t just defending the ethos of open source — he’s also defending his competing WordPress provider. In his blog post, he claims WP Engine is “profiting off of the confusion” caused by the company’s branding. Mullenweg alleges that WP Engine is promising to give customers WordPress but that the company is actually offering a distilled version of the service. He goes on to say WP Engine will need a commercial license for the “unauthorized” use of the WordPress trademark, which is controlled by the WordPress Foundation and later sent a cease and desist letter in an attempt to make the company pay up.

WP Engine isn’t staying silent. It sent a cease and desist letter that tells a very different story of what has been going on behind the scenes. In its letter, WP Engine claims Automattic demanded a “very large sum of money” days before Mullenweg’s keynote at the September 20th WordCamp convention — and if the company didn’t receive it, Mullenweg allegedly threatened to carry out a “scorched earth nuclear approach” toward WP Engine.

WP Engine alleges Mullenweg harassed the company through text messages and calls, with one screenshotted text saying: “If I’m going to make the case to the WP community about why we’re banning WPE I need to do it in my talk tomorrow.” The texts, which Mullenweg confirmed he sent in an interview with Twitch streamer ThePrimeagen, say he prepared several presentation slides for his WordCamp talk, with the working title “How Private Equity can Hollow out and Destroy Open Source Communities, a Story in 4 Parts.”

Advertisement

After WP Engine refused to pay WordPress, the company alleges Mullenweg followed through on his threats. “Mr. Mullenweg’s covert demand that WP Engine hand over tens of millions to his for-profit company Automattic, while publicly masquerading as an altruistic protector of the WordPress community, is disgraceful,” WP Engine’s letter states. “WP Engine will not accede to these unconscionable demands which not only harm WP Engine and its employees, but also threaten the entire WordPress community.”

WordPress.org has now made it clear that it’s going after WP Engine for not only failing to give back to the WordPress project but also for its alleged misuse of the WordPress trademark. Mullenweg now says Automattic has given WP Engine two ways to “pay their fair share”: either by paying a licensing fee or making contributions to the open source WordPress project. “This isn’t a money grab: it’s an expectation that any business making hundreds of millions of dollars off of an open source project ought to give back, and if they don’t, then they can’t use its trademarks,” Mullenweg said. 

The WordPress Foundation — the charitable organization that backs the open source WordPress project — is led by Mullenweg and other lesser-known board members who aren’t displayed on its website. It seems the WordPress Foundation has made some tweaks to its trademark guidelines in recent days. As of September 19th, the policy said you are “free” to use the WP abbreviation in “any way you see fit.” But now WordPress has deleted that language, replacing it with a line that says not to use WP “in a way that confuses people. For example, many people think WP Engine is ‘WordPress Engine.’” The updated policy also explicitly states: “If you would like to use the WordPress trademark commercially, please contact Automattic, they have the exclusive license.”

WordPress.org banned WP Engine from accessing its servers free over their “legal claims and litigation” — a move that has made it more difficult for customers to use WP Engine. However, Mullenweg decided to temporarily remove the block just two days later. He’s given WP Engine until October 1st to create their own mirror or resolve the conflict. “Why should WordPress.org provide these services to WP Engine for free, given their attacks on us?” Mullenweg wrote. WP Engine says it only sent a cease and desist order to WordPress and has not yet filed a lawsuit.

When asked about the ban on WP Engine, Automattic spokesperson Megan Fox said in a statement to The Verge that “trademark violations have resulted in the company being blocked from some WordPress resources.” WP Engine pointed The Verge to its statements on X when reached for comment.

Advertisement

The fight has garnered a mix of reactions. On one side, people think WP Engine is in the wrong, with some saying the company should contribute more to the open source project and that its use of “WP” is misleading. On the other, some WordPress community members are calling on Mullenweg to step down and accuse of him abusing his power over WordPress.org and WordPress.com. Others believe the situation could result in a fork of WordPress and brought up concerns about whether WordPress will take action against other companies using the “WP” abbreviation or trademark.

But in a dispute that’s meant to clarify what is and isn’t WordPress, Mullenweg risks blurring the lines even more. WordPress.org and WordPress.com both have a point — but it looks an awful lot like they’re working together to make it.

Continue Reading

Trending