Oktacron - Cyber Security RSS Feeds History

How and where to opt-out of Google Ad Topics for greater privacy | Kaspersky official blog

kaspersky Oct 06, 2023 Privacy

Within a year, Google plans to stop supporting so-called third-party cookies, a technology that advertisers have used for decades to track users, in its Chrome browser. But this doesnt mean such tracking will simply stop. It would be odd if the tech giant, whose revenue comes mostly from online advertising, show more ...

voluntarily gave up the ability to collect user data. Instead, third-party cookies will be replaced by a new technology — Google Ad Topics. In fact, Google Ad Topics is already here: the company integrated it into the Chrome browser this summer and recently started to roll it out to the Android operating system. In this post, we explore how Ad Topics works, where to disable it in the Chrome and Android settings, and what else you can do to avoid being tracked by online advertisers. A little history: Google Privacy Sandbox and FLoC Lets first go back a bit to Google Privacy Sandbox. This is what Google calls the entire initiative to abandon third-party cookies and replace them with different technologies for targeted advertising. Google first started talking about this initiative back in August 2019. As you can see, its taken them four years to develop specific solutions for phasing out cookies. The purpose of this initiative is, on the one hand, to get rid of technology thats widely perceived as a violation of privacy. On the other hand, Google wants to find a way to continue showing personalized ads to users — maintaining the competitive advantage that made it an internet giant. If you look at the Wikipedia article on Privacy Sandbox, youll find a long list of candidate technologies that Google planned to use to move away from third-party cookies. However, in 2021, a technology called Google FLoC emerged as the primary candidate. Lets discuss it in more detail. What is Google FLoC? FLoC (Federated Learning of Cohorts) was a technology proposed by Google aimed at changing the approach to targeted online advertising — making it more private. Instead of using individual user behavior data to personalize ads, FLoC grouped users with similar interests — meaning similar browsing histories — into cohorts. These cohorts were then assigned a unique identifier, which advertisers can use to target their ads. One of the key advantages in terms of user privacy was that FLoC didnt send user activity information to Google servers, but processed the data locally — directly on the users device. Its worth noting that, despite the name, FLoC didnt actually use federated learning. Its use was initially planned, but it turned out that local computing was good enough. What is federated learning? Its a variant of machine learning — an alternative to the centralized learning approach. In centralized learning, data from all devices is uploaded to a central server where the AI model is trained. In federated learning, data isnt sent to a central server; instead, local models are trained on local data directly on the devices. These devices then exchange the training results, rather than the user data itself, with the server. Based on the results of this local training, a global AI model is built — thus, the local AI models and the global AI model mutually train each other. This is all done to eliminate the need for centralized storage of user data. As is often the case with attempts to have ones cake and eat it too, the technology was criticized from both sides. Despite Googles claims that FLoC is 95% as effective as third-party cookies, advertisers werent satisfied with the technologys performance. Privacy advocates, in turn, were extremely unhappy that FLoC didnt adequately address user privacy concerns — and also that millions of Chrome users were included in the testing of FLoC without their consent. However, the main privacy concern regarding Google FLoC was its highly precise methods for categorizing users — the possible number of cohorts exceeded 30,000 — which allowed too much scope for user tracking. A significant portion of the internet industry quickly took up arms against Google FLoC, including all Chromium-based browser developers — which refused to include FLoC in their products, and Amazon — which disabled FLoC on all its websites. Consequently, just a few months after the testing of FLoC began, Google decided to freeze the project. Already by early 2022, they officially announced the abandonment of FLoC in favor of another technology — Topics API. What is Google Ad Topics (Topics API) Google Ad Topics (also known as Topics API) is a technology that Google is currently planning to use to replace third-party cookies for targeted advertising. Ad Topics functions somewhat similarly to FLoC: it also relies on browser history (in the case of Chrome) or app usage (in the case of Android), through which a locally operating algorithm tries to identify user interests. However, there are significant differences: while FLoC grouped users with similar interests into cohorts with unique identifiers, Topics API only compiles a list of things that interest the user — that is, topics. At the time of writing this article, there were 629 such topics, but this list is constantly being updated, so the number will continue to grow. In Google Ad Topics, each webpage on the internet is associated with a certain topic. The algorithm constantly updates the list of Google topics assigned to the user based on what theyve visited recently. Heres how it works: Every week, the user is assigned five topics based on the sites they visited the most that week. Three lists of five topics each are created for the last three weeks. A site that wants to show ads to the user requests the topics assigned to that user from Topics API. The algorithm randomly selects one topic from each of the three lists and provides the site with these three topics for displaying targeted ads. The topics assigned to the user are stored for only three weeks. Older topics are deleted, and a list of five new topics is generated every week. Since there is an element of randomness in the selection of topics, it seems that identifying a specific user or even a narrow group of users from such information is not so easy. Nevertheless, even soft and gentle tracking is still tracking, and targeted advertising is not to everyones taste. The good news is that Google allows you to not only manually configure Ad Topics but also to disable them altogether. For the sake of your privacy, we recommend doing this. How to disable Google Ad Topics in the Chrome Browser To disable Google Ad Topics data collection in the Chrome settings, go to Settings -> Privacy and security -> Ad privacy. The main point of interest on this tab is the first option, Ad topics. Click on this option and turn off the switch in the window that opens. Where to disable Google Ad Topics in the Android settings Alternatively, you can go directly to the Google Ad Topics settings by entering the following path in the Chrome address bar: chrome://settings/adPrivacy/interests While youre in this part of the browser settings, it doesnt hurt to disable two other options on the Ad privacy tab: Site-suggested ads and Ad measurement. Thats it! Youve successfully disabled Google Ad Topics in the Chrome browser. Note! Chrome settings are specific to each user profile. So, if you use Chrome with multiple Google accounts on the same computer, youll need to disable Ad Topics for each account separately. Go through all your Chrome profiles and repeat the steps above. How to disable Google Ad Topics in the Android operating system Disabling Google Ad Topics in the Android operating system must be done directly in your smartphones settings. To do this, go to Settings -> Google -> Ads -> Ads privacy -> Ad topics and turn off the switch in the window that appears. Where to disable Google Ad Topics in the Android settings Again, since youre already adjusting the privacy settings, go back to Settings -> Google -> Ads -> Ads privacy and also disable App-suggested ads and Ad measurement. Now, go one step back to Settings -> Google -> Ads and click on Delete advertising ID. Please note that this guide is for the standard version of Android. Depending on the manufacturer, smartphone model, and firmware version, the names of settings and paths might vary slightly. If you cant find them following these instructions, try using the search in the Android settings. Note! If you disable Google Ad Topics on Android and then receive a notification about new ad privacy features, Google Ad Topics might be re-enabled automatically. If that happens, its best to go to your smartphone settings and make sure its turned off. How to opt out of personalized ads in the Google Account settings Still with adjusting your privacy and ad settings, theres one more thing worth doing: disable personalized ads for your Google account. To do this, go to the Googles My Ad Center page. If you havent disabled personalized Google ads yet, this page will be covered with colorful category and brand tiles. You can hang around here for a long time, choosing what kind of advertising you want to see. Google My Ad Center, where you can manage ad personalization But dont let the pretty advertising distract you — rather than choosing anything here, its best to just turn it all off. What youre looking for here is a shy little switch at the top right of the page labeled Personalized ads — switch it to Off. How to disable personalized ads in Google My Ad Center Note! This setting is also specific to each Google account. Therefore, if you use multiple accounts, you need to disable personalized ads separately for each of them. All set? Congratulations! Youve now used all the available settings that help you avoid unnecessary attention from both Google and advertisers. More privacy But why limit yourself to the anti-tracking options Google provides in the settings of its products and services? Its a good idea to use additional methods of combating data collection. In particular, we recommend the Private Browsing feature available in all our paid subscriptions — Kaspersky Standard, Kaspersky Plus, and Kaspersky Premium.

Preparing for the Unexpected: A Proactive Approach to Operational Resilience

darkreading Oct 06, 2023 Feed

Try these steps to create an operational resilience action plan that will satisfy financial regulators and help sustain business without disruption.

Suspected Crime Gang Hacks Israeli President's Telegram Account

darkreading Oct 06, 2023 Feed

The encrypted messaging app was hacked in the wake of an online scam before access was "swiftly restored."

Google, Yahoo Push DMARC, Forcing Companies to Catch Up

darkreading Oct 06, 2023 Feed

The move means that DMARC, already in use by half of enterprises, will become table stakes for anyone using email for marketing.

Too Rich To Ransomware? MGM Brushes Off $100M in Losses

darkreading Oct 06, 2023 Feed

MGM wins big bet that days of operations outages is better business than paying a ransom, following last month's data breach.

23andMe Cyberbreach Exposes DNA Data, Potential Family Ties

darkreading Oct 06, 2023 Feed

The information leaked in the breach involves personally identifiable information as well as genetic ancestry data, potential relatives, and geolocations.

Update: Clorox Warns of Quarterly Loss Related to August Cyberattack, Production Delays

cyware Oct 06, 2023 Incident Response, Learnings

Clorox anticipates continued operational strain in the second quarter but hopes to benefit from restocking retailer inventory, while assessing the long-term impact on earnings.

Malware-Infected Devices Sold Through Major Retailers

cyware Oct 06, 2023 Malware and Vulnerabilities

The scheme, known as BADBOX, deploys the Triada malware as a "backdoor" on various devices such as CTV boxes, smartphones, and tablets during the supply chain process in China.

Update: Cyberattack Against Johnson Controls Sparks Downstream Concerns

cyware Oct 06, 2023 Incident Response, Learnings

The Department of Homeland Security is investigating the attack to determine if sensitive physical security information was compromised, but it was not a breach of any DHS network or system.

Researchers Warn of 100,000 Industrial Control Systems Exposed Online

cyware Oct 06, 2023 Trends, Reports, Analysis

The United States, Canada, and Italy are the countries with the highest number of organizations with exposed ICSs, while sectors such as Education, Technology, and Government show the least secure ICS security.

Commerical Construction Insurer Builders Mutual Discloses Data Breach

cyware Oct 06, 2023 Breaches and Incidents

Builders Mutual Insurance Co. experienced a data breach that compromised the personal information of over 64,000 customers and employees, including sensitive data like Social Security numbers and medical information.

CISA Pivots Focus to China-Linked Threats Against Critical Infrastructure

cyware Oct 06, 2023 Govt., Critical Infrastructure

The CISA is focusing on the growing threat activity from China, which has become the top nation-state cyber adversary to the U.S., particularly targeting critical infrastructure like rail transportation and energy sectors.

Privacy Nonprofit Calls on FTC To Investigate Grindr’s Data Practices

cyware Oct 06, 2023 Trends, Reports, Analysis

The Electronic Privacy Information Center (EPIC) has filed a complaint urging the FTC to investigate Grindr for potentially illegally storing and disclosing users' sensitive data, including HIV and vaccination status.

Lorenz Ransomware Embroiled in its Own Two-Year Data Leak

cyware Oct 06, 2023 Malware and Vulnerabilities

The leaked data from a misconfigured web server includes names, email addresses, and subject lines of individuals who sought information from Lorenz, spanning from June 2021 to September 2023.

Factors Leading to Organizations Losing Control Over IT and Security Environments

cyware Oct 06, 2023 Trends, Reports, Analysis

IT and security teams are facing new responsibilities, such as ensuring security for remote and hybrid workers, managing applications in public cloud environments, and securing data in SaaS environments.

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

cyware Oct 06, 2023 Threat Intel & Info Sharing

The authentication bypass vulnerability in JetBrains TeamCity has already seen exploitation attempts from 74 unique IP addresses, while the privilege escalation flaw in Microsoft Windows CNG Key Isolation Service has no documented exploitation.

Cybersecurity Preparedness Pays Big Dividends for Businesses

cyware Oct 06, 2023 Trends, Reports, Analysis

Businesses are investing more in cybersecurity resources and training, resulting in a decrease in phishing links clicked by workers and ransomware attacks, according to GetApp.

Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities

cyware Oct 06, 2023 Malware and Vulnerabilities

The Node.js malware Lu0Bot uses unconventional programming languages and multi-layer obfuscation. Lu0Bot utilizes a unique approach to domain connection and assembles various parts into a single entity within the JavaScript code.

DNA Testing Service 23andMe Investigating Theft of User Data

cyware Oct 06, 2023 Breaches and Incidents

The data obtained by the attacker may include personal information, genetic ancestry results, and potential relatives' details of 23andMe customers who opted-in to the "DNA Relatives" service.

Human-Operated Ransomware Attacks Tripled Over Past Year: Report

cyware Oct 06, 2023 Trends, Reports, Analysis

According to Microsoft, ransomware gangs are evolving their tactics, with an increase in data exfiltration attacks and the targeting of smaller organizations and less well-known software.

TA505 Hacker Group Deploys Sneaky RMS Tool in Phishing Campaign

cyware Oct 06, 2023 Threat Actors

The attackers are using a Remote Management System (RMS) executable to trick victims into downloading malware disguised as banned applications like ExpressVPN, WeChat, and Skype.

Data Breach at Melbourne’s Royal Women’s Hospital Puts Patient Information at Risk

cyware Oct 06, 2023 Breaches and Incidents

The Royal Women's Hospital in Melbourne has experienced a data breach, potentially compromising the personal information of 192 patients. The breach occurred when cybercriminals gained unauthorized access to a staff member's private email account.

Qakbot-Affiliated Actors Distribute Ransom Knight Malware Despite Infrastructure Takedown

cyware Oct 06, 2023 Malware and Vulnerabilities

Qakbot malware operators have continued their malicious activities, distributing Ransom Knight ransomware and the Remcos backdoor via phishing emails, despite the recent infrastructure takedown.

GoldDigger: New Android Trojan Targeting Dozens of Vietnamese Banks

cyware Oct 06, 2023 Breaches and Incidents

Researchers have discovered a new Android Trojan called GoldDigger that can primarily target users of over 50 Vietnamese banking apps, as well as e-wallets and crypto-wallets. GoldDigger's reach may extend beyond Vietnam. Countering them demands client-side fraud protection solutions that emphasize real-time protection, adaptability, and a focus on behavioral indicators.

Nonprofit Service Provider Blackbaud Settles Data Breach Case for $49.5M With States

cyware Oct 06, 2023 Incident Response, Learnings

The breach involved health information, Social Security numbers, and financial data of donors and clients, prompting Blackbaud to pay a ransom to the intruder in exchange for deleting the stolen data.

Update: Exploits Released for Linux Flaw Giving Root Access on Major Distros

cyware Oct 06, 2023 Malware and Vulnerabilities

Proof-of-concept exploits for this vulnerability have already been published, posing a significant threat to systems running the latest releases of popular Linux platforms.

Data of 900 Hongkongers Exposed in Hacking Attack Against WhatsApp Accounts

cyware Oct 06, 2023 Breaches and Incidents

The data breach involved impersonation tactics and phishing traps on instant messaging platforms, highlighting the importance of verifying URLs and avoiding unknown sources.

Florida Court Pauses Many Proceedings Following Cyberattack

cyware Oct 06, 2023 Breaches and Incidents

The attack highlights the ongoing vulnerability of courts in the US to various types of cyber threats, including ransomware campaigns, data leaks, and distributed denial-of-service attacks.

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

cyware Oct 06, 2023 Breaches and Incidents

Semiconductor companies in East Asia are being targeted by a China-linked threat actor using a backdoor called HyperBro to deploy Cobalt Strike beacons. The attack chain includes the use of social engineering techniques, such as decoy PDF documents.

Android Devices With Backdoored Firmware Found In US Schools

packetstormsecurity Oct 06, 2023 headline,malware,phone,google,backdoor

Cisco Warns Of Critical Flaw In Emergency Responder Code

packetstormsecurity Oct 06, 2023 headline,flaw,cisco

Ransomware Gang Qakbot Resurfaces After Botnet Takedown

packetstormsecurity Oct 06, 2023 headline,hacker,malware,cybercrime,botne

Apple Patches 17th Zero-Day Of 2023

packetstormsecurity Oct 06, 2023 headline,flaw,patch,apple

CDW Data To Be Leaked Next Week After Negotiations With LockBit Break Down

packetstormsecurity Oct 06, 2023 headline,hacker,malware,cybercrime,data