Connect with us

Tech Features

Lessons of 2023 to arm us for 2024

Published

on

Trellix picture

By: Manoj Reddy M.V, Raghav Kapoor, Shyava Tripathi, Pham Duy Phuc, Max Kersten & Adithya Chandra at the Trellix Advanced Research Center

We often treat the transition to a new year as an opportunity to consign the past to the dustbin of history and usher in some imagined future idyll. But some of us notice that the more things change, the more they stay the same.

The new year is no time for defeatism. Let us learn the lessons of 2023 to arm us for 2024. Come with me as we take a dive into a list compiled by Trellix experts of the most dangerous attack vectors threatening our digital economy right now.

Unmasking The Silent Surge in Insider Threats

In recent years, insider threats have posed a multifaceted risk that affects both public and private organizations globally. An insider threat refers to any person, — whether an employee, contractor, partner, or someone with rogue access, who had or currently has access to critical organizational assets including facilities, information, networks, and systems. Based on recent industry analysis, insider threats have increased by 47% over the last two years, incurring a totals loss of $15.38 million for the containment of these incidents.

This threat undermines the confidentiality and integrity of the organization while aiding adversaries in gathering intelligence, carrying out sabotage operations, and using subterfuge methods to achieve their nefarious objectives. As connected devices continue to proliferate, and hybrid and remote workforces persist, insider threats will only continue to grow.

The Growing Battle of the (QR) Codes

The rise of QR code-based phishing campaigns represents an alarming trend. As our daily lives become increasingly reliant on digital interactions, attackers are adapting their tactics to exploit new vulnerabilities. QR codes, originally designed for their convenience and efficiency, have become an enticing tool for cybercriminals to use as an attack vector.

One of the primary reasons behind the expected increase in QR code-focused phishing campaigns is their inherent trustworthiness. QR codes become essential in various aspects of daily life during the COVID-19 pandemic, from contactless payments to restaurant menus. As a result, people have grown accustomed to scanning QR codes without much thought, assuming they are safe. This sense of trust can be exploited by cybercriminals who embed malicious links or redirect victims to fake websites. We expect that QR codes will also be used to distribute widely recognized malware families.

The Stealthy Assault on Edge Devices

There is a somewhat stealthy shift in the threat landscape underway, centering on the often-overlooked realm of edge devices. These unassuming components, including firewalls, routers, VPNs, switches, multiplexers, and gateways are becoming the new frontier for Advanced Persistent Threat (APT) groups. What sets this apart from normal is the subtlety of the threat; it’s not about the easily foreseen IoT vulnerabilities, but rather the less conspicuous challenges posed by edge devices themselves.

Edge devices have their unique complexities. However, the issue lies in their inherent inability to detect intrusions.

Python in Excel Creates a Potential New Vector for Attacks

With Microsoft implementing default defensive measures to block internet Macros in Excel, Macro usage by threat actors has seen an expected drop. Instead, they are exploring alternative attack vectors for their latest attacks, including lesser known or underutilized ones such as OneNote documents. However, with the recent creation and release of Python in Excel, we expect this to be a potential new vector for cybercriminals.

As both attackers and defenders continue to explore the functionality of Python in Excel, it is guaranteed that bad actors will start to leverage this new technology as part of cyberattacks. As the Python code is executed in containers on Azure, it can access local files with the help of Power Query.

Turn the tables

When you know what your adversary is doing, their mask slips. They become less scary. Threat intelligence is one of the greatest weapons we have right now and will also be so in the coming year. A sense of doom can be crippling and prevent positive action. Hence, it can hasten doom. We have the knowledge and we have the tools to bring about change. Let 2024 be the year that threat actors finally taste their own medicine. And let the 2024-2025 New Year be the one where threat actors finally become the pessimists.

Tech Features

Technology Gives Content Creators Control Over AI Access and a Path to Monetisation

Published

on

content creators

By: Tony van den Berge, VP, EMEA at Cloudflare

The market for AI-generated music and audiovisual (AV) content is set to skyrocket in the next couple of years, growing from around €3 billion today to €64 billion in 2028. While this may be good news for those dancing to Gen AI’s tune, it’s likely to hit a bum note for content creators.

Despite providing the “creative fuel of the Gen AI content market,” these human creators could be about to see their income drop by around a quarter.

That amounts to a cumulative loss of €22 billion over the next five years – €10 billion in music and €12 billion in audiovisual – according to a new report commissioned by the International Confederation of Societies of Authors and Composers (CISAC), which represents some five million people in the creative industries.

The report – Study on the economic impact of Generative AI in the Music and Audiovisual industries – is touted as the first-ever global study of its kind to tackle the subject. It warns that unless this situation changes, content creators will be squeezed on two fronts: the loss of revenues because of the unauthorised use of their works by Gen AI models, and the loss of income from people buying AI-generated content.

“For creators of all kinds, from songwriters to film directors, screenwriters to film composers, AI has the power to unlock new and exciting opportunities – but we have to accept that, if badly regulated, generative AI also has the power to cause great damage to human creators, to their careers and livelihoods,” said CISAC President and ABBA frontman Björn Ulvaeus.

“Which of these two scenarios will be the outcome? This will be determined in large part by the choices made by policy makers, in legislative reviews that are going on across the world right now. It’s critical that we get these regulations right, protect creators’ rights and help develop an AI environment that safeguards human creativity and culture,” he said.

Content creators face an existential threat
While there is clearly a role for legislation, technology can also help provide a solution not only to protect content from Gen AI creators, but also to provide an avenue to monetise it.

With so much content online – everything from those who make a living from art and animation to filmmakers and wordsmiths – it’s a problem that extends far beyond the music industry.

In most cases, site owners have had little control over how AI services use their content for training or other purposes. Recently, though, new tools have been developed that make it easier for site owners, creators, and publishers to take back control of their content.
Cloudflare empowers creators with tools to safeguard and monetise their content
At Cloudflare, we are uniquely positioned to address these challenges by leveraging our global network to create innovative solutions. Our recently introduced AI Audit tools empower creators and site owners to regain control over their content in the age of generative AI. These tools allow creators to monitor AI bot activity, identifying which AI services are accessing their content, how often, and what specific material is being targeted. With one-click solutions, creators can block unauthorised AI crawlers, ensuring only approved entities can use their work. Beyond protection, Cloudflare helps them monetise their content by giving them analytics and control over who can scan based on the licensing agreements they sign with model providers.

To understand how these new tools fit into the bigger picture, it’s worth stepping back to see how AI models are accessing digital content in the first place. Bots typically “crawl” the internet looking for material. “Good bots” – such as search engine crawlers – are beneficial because they help people discover sites and drive traffic. “Bad bots,” on the other hand, can pose a security threat.

But the rise of Large Language Models (LLMs) and other generative tools has created a murkier third category. Unlike malicious bots, some of the crawlers associated with Gen AI platforms are simply looking to hoover up content to train new LLMs. And that’s precisely the problem for content creators.

New tools are key in battle to monetise content
That’s why there’s so much interest around the development of these solutions. Not only do they allow content providers to identify who – or what – is scraping their content, they also allow them to block access to particular bots.

The result is two-fold. First, content creators are able to stop scrapers from accessing their intellectual property. Second, it allows content creators to negotiate access deals directly with AI companies. In other words, it gives content creators the chance to be paid for their output.

In a sign that the balance of power may already be shifting in terms of control and ownership, many of those contracts include terms about the frequency of scanning and the type of content that can be accessed.

That said, it’s still early days. There is still some uncertainty about the value of content used this way, and standardization discussions on enforceable mechanisms to express AI crawling preferences are still ongoing. Meanwhile,  site owners are at a disadvantage while they play catch-up. But unless – and until – there is a resolution, content creators and site owners will be discouraged from launching or maintaining Internet properties.

The fear is that more and more creators will stash their content behind paywalls, which may solve one problem but could invariably lead to others.

Ultimately, all parties – policymakers, tech companies, and creators – need to come together to enable AI innovation to thrive while safeguarding creativity. For those in the music industry, it’s not just a question of harmony, but of hitting the right notes too.

Continue Reading

Tech Features

AI-Powered Greenhouses for Sustainable Luxury Floriculture

Published

on

AI Luxury Floriculture

By Hamlet Sandoyan, CEO, Rose Art LLC

Advanced technology dramatically transforms sustainable floriculture significantly when growing roses in solar greenhouses. We envision a future where floral art serves as a bridge between sustainability and innovation. At Rose Art Flowers, we aim to redefine traditional floristry by incorporating eco-friendly practices into every aspect of our creative process—from carefully selecting premium imported roses to using sustainable materials and techniques in our installations. We believe that floral art will increasingly be celebrated for its visual and sensory impact and as a responsible, eco-conscious choice that enriches cultural events and everyday life in Dubai and beyond.

As the owner of Rose Art LLC, I have much experience and am always willing to share my expertise. Further, here’s how key innovations contribute to efficiency, cost reduction, and improved product quality.

Artificial intelligence – controlled climate control

Artificial intelligence analyzes data from sensors (temperature, humidity, CO2 level) and automatically adjusts the microclimate parameters.

– Energy optimization: reduces the load on heating, ventilation, and lighting systems, using energy as efficiently as possible.

– Rose enhancement: maintains stable growing conditions, prevents plant strain, and improves color, size, and fragrance of flowers.

Automated irrigation and water resources management

Modern systems use soil moisture sensors, weather stations, and machine learning algorithms to dispense water accurately.

– Reducing water consumption: supply only the right amount of water, preventing evaporation and leaks.

– Optimum plant nutrition: integration with drip irrigation and fertigation (fertilization) systems increases nutrient uptake.

Precision Agriculture

Using drones, satellite imagery, and AI data analysis can monitor plant health and prevent disease.

– Reduced use of pesticides and fertilizers: treating only problem areas reduces chemical exposure.

– Increased yield and quality: timely identification of stress factors helps to grow more resilient and healthier roses.

Solar energy as a source of sustainable greenhouse economy

Modern greenhouses are equipped with solar panels that provide an autonomous power supply.

– Energy efficiency: reducing dependence on fossil fuels and operating costs.

– Environmental sustainability: reducing the carbon footprint of flower production.

From my experience, the combination of AI, automation, and renewable energy makes rose production more cost-effective and environmentally friendly. These technologies reduce costs, save resources, and improve flower quality, which is especially important in a changing climate and the growing demand for sustainable products.

At the same time, it’s essential to understand how integrating hospitality trends such as luxury floral arrangements, personalized arrangements, and smart ordering systems are changing the floral industry in Dubai’s high-end market. In Dubai’s high-end market, the floral industry is transforming due to current hospitality trends. Luxury hotels, restaurants, and VIP spaces demand exclusive solutions, and integrating new technologies and personalized services is changing the game’s rules.

Luxury floral arrangements as a branding element

Luxury hotels (Burj Al Arab, Atlantis The Royal, Bulgari Resort) make floral installations part of their identity.

– Emphasizing luxury: large-scale floral compositions create a wow effect, raising the institution’s status.

– The trend for “Instagram-able” areas: unique floral decorations encourage guests to take photos and share content on social media, which boosts marketing.

Personalized arrangements and VIP treatment

The high demands of customers in Dubai require customized solutions.

– Individual selection of flowers: rare varieties (for example, black or blue roses), non-standard forms of bouquets, and exclusive packages.

– Floristry for private events: luxury florists develop unique weddings, parties, and royal reception compositions.

Intelligent ordering and delivery systems

Florist boutiques and online platforms utilize AI solutions and digital technologies.

– Concierge subscription service: regular deliveries of fresh bouquets to hotels, residences, and business spaces.

– AI assistants for flower selection: online platforms analyze customer preferences and offer personalized arrangements.

– Drones and premium delivery: express delivery within 30 minutes thanks to advanced logistics solutions.

And from my point of view, the conclusion to the above is this: The Dubai floral market is shifting towards ultra-premium and technological solutions. Exclusive floral installations are becoming part of the luxury style, while personalization and digitalization are increasing the level of service, making the floral industry an important part of luxury hospitality.

Continue Reading

Tech Features

Exploring the Metaverse: Financial Wellness, Regulation and the Future of Gaming 

Published

on

Metaverse Gaming

By Sandra Mottoh, Chief Compliance Officer, Responsible Gaming MENA.

The year 2025 is set to be a big one for the Metaverse. What started as a futuristic idea is now growing at an incredible pace, with global expansion expected at 37% annually until 2030. But it’s not about the numbers. It is about how the Metaverse changes how we game, shop, interact, and do business online. 

In the UAE, I see an excellent opportunity for banks, payment providers, and other key players to step in and participate in this transformation. Those who get involved early while staying on the right side of regulation will have the best chance of success. In this article, we will explore how the UAE can embrace this digital shift while keeping innovation and compliance in perfect balance. 

The Metaverse: A New Era of Digital Commerce and Culture

At first, many viewed the Metaverse as a new way to play games, but it’s become a virtual economy today. Experts predict it will contribute around $200 billion to the global economy by 2026, largely thanks to NFTs and virtual goods. 

This is an incredible opportunity for the UAE, as the country has always been at the forefront of digital change. I am excited to see what is coming next with the Metaverse. Dubai’s Metaverse Strategy is already setting things in motion, with a target to create over 42,000 virtual jobs and add $4 billion to the economy by 2030. 

What makes the Metaverse so powerful is that, in many ways, it is similar to the real world regarding commerce. You can buy, sell, and trade assets, even virtual real estate. This opens the door for banks and payment providers to come in with specialised products that allow for seamless transactions. 

I am particularly curious about how the rich culture of the UAE could come to life in the Metaverse. Imagine regional arts, heritage, and other local creations that people can own and trade. With the right financial support in place, this could be a game-changer for both culture and commerce in the Metaverse. 

Financial Wellness in the Metaverse: Balancing Culture and Commerce 

Indeed, the Metaverse offers exciting economic opportunities but comes with financial risks. Younger players who aren’t very familiar with virtual assets are the most vulnerable. I came across a study by the National Gaming Foundation that revealed nearly 50% of young gamers carry out virtual transactions without fully understanding the risks. As a result, they end up overspending and, sometimes, fall victim to fraud. This is where I see a real chance for banks and payment service providers to make a meaningful impact. 

The banks and payment service providers have the resources to promote financial wellness within the Metaverse. One great approach is introducing educational tools directly into gaming platforms, giving younger players the knowledge they need to make smart financial choices. 

I commend the UAE for its efforts to improve financial wellness. For example, the UAE Financial Literacy Strategy, which aims to improve citizens’ financial knowledge, is already in motion. Programs like MoneySense, introduced in 2017, have also been helping residents become more financially savvy. 

Banks can build on these efforts by offering tools for managing digital currency, setting up spending alerts, and providing virtual budgeting features. These solutions would help users track their virtual assets and encourage responsible spending habits — both in the Metaverse and in real life. 

Regulation: Vital to a Safe Metaverse Ecosystem

Like anything else, the Metaverse needs clear rules and regulations to ensure a safe and secure digital environment. This is particularly important in the UAE, where commercial gaming is still developing. While the country already has a solid framework for fintech and digital payments, more needs to be done to address the Metaverse’s uniqueness.

The UAE will need to adapt its digital regulations to align with the virtual economy. One core focus is for the virtual assets to follow the same level of scrutiny as traditional financial systems. In other words, banks and payment service providers must enforce strict anti-money laundering (AML) and know-your-customer (KYC) practices. That will help keep things transparent and prevent fraud.

Looking into data from the Financial Action Task Force (FATF), I found that global money laundering risks linked to cryptocurrencies and virtual assets are on the rise. This highlights how crucial regulatory compliance is in the Metaverse. If the UAE wants to lead in this space while protecting businesses and consumers, it must take a proactive approach to building a well-regulated virtual economy.

The Future of Metaverse Gaming: Collaborating for Financial Innovation

As we look ahead, the UAE must stay open-minded about the Metaverse. I say so because the virtual economy will only expand, and when it does, service providers will find themselves engaging local and international players. It presents a massive opportunity that banks and financial institutions cannot afford to overlook.

The big question is: How can UAE-based banks keep up with global demand? My answer is collaboration. They will need to work closely with regulators, developers, and operators as the Metaverse grows. Everyone must do their part to keep the virtual economy secure and compliant to build a solid metaverse that benefits everyone.

Continue Reading

Trending

Please enable JavaScript in your browser to complete this form.

Copyright © 2023 | The Integrator