Sirius XM’s recent all-stock $3.5-billion purchase of the music-streaming service Pandoraraised a lot of eyebrows. A big question was why Sirius paid so much. Is Pandora’s music library and customer base worth that amount? The answer is that this was a strategic move by Sirius in a battle that is far bigger than radio. The real fight, which will become much more visible in the coming years, is over the driving experience.

People spend a lot of time commuting in their cars. That time is fixed and won’t likely change. However, what is changing is the way we drive. We’re already seeing many new vehicles with driver-assist features, and automakers (and tech companies) are working hard to bring fully autonomous cars to the market as quickly as possible. New vehicles today already contain an average of 100 million lines of code that can be updated to increase driver-assist options, and some automakers like Tesla already offer an “autonomous” mode on highways.

Even conservative estimates predict that we are likely to see significant changes in autonomous driving in the next ten years.

These changes will impact the driving experience. As cars become more autonomous, we can do more than just listen to music or podcasts. We may be able to watch videos, surf the web and more. The value of car real estate is already valuable, but it’s going to skyrocket as we change the way people consume media while driving. 

The Pandora acquisition was a strategic move by Sirius to gain the necessary assets so that it won’t fall behind in this space – and to get into the fast-growing music-streaming business, where users consume music at home, work and play. While Pandora’s music library is arguably second-tier, it’s also good enough that it can provide pretty much every artist most people want. This is often how high-priced mergers happen – one party is concerned about falling behind and pays a premium to purchase the other company’s assets. It’s also a bet by Sirius about the driving experience of the future.

For now, Sirius probably doesn’t need to worry about competition from startups. They won’t be able to grow big enough, fast enough to get a sizable share of the market. A more likely scenario is that startups will work on software that offers unique functionality, making it an attractive acquisition target by a larger company.
​
This is going to be an interesting battle to watch in the coming years, as cars essentially become software with four wheels attached. Companies like Sirius know this is a valuable space and that the battle over the driving experience will be won in software. The acquisition of Pandora is only the beginning.

Artificial intelligence has the potential to bring a select set of advanced techniques to the table when it comes to cyber offense, researchers say.

Last week, researchers from Darktracesaid that the current threat landscape is full of everything from opportunistic attacks from teen hackers to advanced, state-sponsored assaults, and in the latter sense, attacks continue to evolve.

However, for each sophisticated attack currently in use, there is the potential for further development through the future use of AI.

Within the report, the cybersecurity firm documented three active threats in the wild which have been detected within the past 12 months. Analysis of these attacks – and a little imagination – has led the team to create scenarios using AI which could one day become reality.

"We expect AI-driven malware to start mimicking behavior that is usually attributed to human operators by leveraging contextualization," said Max Heinemeyer, Director of Threat Hunting at Darktrace. "But we also anticipate the opposite; advanced human attacker groups utilizing AI-driven implants to improve their attacks and enable them to scale better."

Trickbot. The first attack relates to an employee at a law firm who fell victim to a phishing campaign leading to a Trickbot infection.

Trickbot is a financial Trojan which uses the Windows vulnerability EternalBluein order to target banks and other institutions. The malware continues to evolve and is currently equipped with injectors, obfuscation, data-stealing modules, and locking mechanisms.

In this example, Trickbot was able to infect a further 20 devices on the network, leading to a costly clean-up process. Empire Powershell modules were also uncovered which are typically used in remote, keyboard-based infiltration post-infection.

AI's Future Role.Darktrace believes that in the future, malware bolstered through artificial intelligence will be able to self-propagate and use every vulnerability on offer to compromise a network.

"Imagine a worm-style attack, like WannaCry, which, instead of relying on one form of lateral movement (e.g., the EternalBlue exploit), could understand the target environment and choose lateral movement techniques accordingly," the company says.

If chosen vulnerabilities are patched, for example, the malware could then switch to brute-force attacks, keylogging, and other techniques which have proven to be successful in the past in similar target environments.

As the AI could sit, learn, and 'decide' on an attack technique, no traditional command-and-control (C2) servers would be necessary.

AI's Future Role.It is possible that AI could be used to further adapt to its environment. In the same manner, as before, contextualization can be used to blend in, but AI could also be used to mimic trusted system elements, improving stealth.

"Instead of guessing during which times normal business operations are conducted, it will learn it," the report suggests. "Rather than guessing if an environment is using mostly Windows machines or Linux machines, or if Twitter or Instagram would be a better channel, it will be able to gain an understanding of what communication is dominant in the target's network and blend in with it."

Take It Slow. In the final example, Darktrace uncovered malware from a medical technology company. What made the findings special was that data was being stolen at such a slow pace and in tiny packages that it avoided triggering data volume thresholds in security tools.

Multiple connections were made to an external IP address, but each connection contained less than 1MB. Despite the small packets, it did not take long before over 15GB of information was stolen.

By fading into the background of daily network activity, the attackers behind the data breach were able to steal patient names, addresses, and medical histories.

AI's Future Role. AI could not only provide a conduit for incredibly fast attacks but also "low and slow" assaults. It can also be used as a tool to learn what data transfer rates would flag suspicion to security solutions.

Instead of relying on a hard-coded threshold, for example, AI-driven malware would be able to dynamically adapt data theft rates and times to exfiltrate information without detection.
​
"Defensive cyber AI is the only chance to prepare for the next paradigm shift in the threat landscape when AI-driven malware becomes a reality," the company added. "Once the genie is out of the bottle, it cannot be put back in again."

It's not a secret that Microsoft hasn't been winning the hearts and minds of consumers lately.
Killing off products like the Groove Music service, Microsoft Band fitness tracker, and Windows Phone have left many questioning whether Microsoft's grand plan is to focus on business users and leave consumers to its competitors.

But at the company's recent Inspire conference, Microsoft execs told their partners that Redmond isn't giving up on consumers.

Yusuf Mehdi – whose new title as of June 2018 became corporate vice president of Modern Life and Devices – led a session at the partner show in Las Vegas, Nev., where he outlined the company's vision for what officials plan to christen "Modern Life Services."

"Modern Life” and "Gaming" are the two new additions to Microsoft's core digital solution areas that its sales force and its partners are meant to target in fiscal 2019 and beyond. The others, which Microsoft announced a year ago at Inspire, are “Modern Workplace,” “Business Applications,” “Applications and Infrastructure,” and “Data and AI.”

In teeing up his presentation, Mehdi acknowledged that "in the last couple of years, we've lost a little of that magic with consumers," according to attendees who asked not to be named.

Most consumer companies are laser-focused on one thing, Mehdi said. Amazon is focused on shopping; Spotify, on music; Netflix, on movies. Microsoft's core value proposition is productivity, he said. The company's job is to try to make productivity sexier.

Microsoft is targeting so-called "professional consumers" with these services, Mehdi said. These are people who already know how to use technology but need to figure out how to use it better to make them more productive. The goal of these services will be to give users back time and help them focus on what matters to them.

Microsoft officials believe because the company already "owns the work calendar with Outlook," that it has a foothold in working to blur the line between consumer and commercial activities.

What, exactly, will qualify as a Modern Life Service? Mostly they will be apps, services, and features that Microsoft already makes available or soon will in Windows, Outlook, and PowerPoint, but which officials will attempt to position as well suited to the needs of professional consumers on Windows PCs, iPhones, and Android phones.
​
One example is the Microsoft "Your Phone" app, which Microsoft execs first showed off at the Build 2018 developer conference earlier this year. Your Phone on Windows 10 will allow users to respond to text messages on their Windows desktops, as well as drag and drop photos from their desktops and send them via their phones without actually having to access the phones. Microsoft believes that by not having to interrupt their workflow, users will save time and be more productive.

Forget stumbling through a customer-support page – the future of commerce won't be found by surfing the World Wide Web. 

Soon many of the tasks we now do via websites and brand-specific apps will be handled through messaging and voice platforms like iMessage, WhatsApp, and Amazon's Alexa, according to Alex Spinelli, the chief technology officer at LivePerson.

Today, companies like Home Depot, T-Mobile, and Discover manage customer-service chats with LivePerson. Though chat technology is seeing a resurgence thanks to the proliferation of smartphones, LivePerson was founded in 1995 as a web-chat alternative to 1-800 numbers and call centers. 

LivePerson's new vision means no more awkward drop-down menus, no more shopping carts, and definitely no more URLs. 

"Our thesis is that conversation is a more natural way of interacting with brand services," Spinelli said. "It will become the dominant way that people interact in their digital lives."

It may seem like a big leap from the present day, but Spinelli envisions a world five years from now in which there are no websites and very few apps. 

"The whole app catastrophe that lives on your phone is overwhelming," Spinelli said. "On my iPhone, I have 127 apps that need updating. You can't keep up." 

Meanwhile, people will continue to interact with screens. In Spinelli's vision, the e-commerce shopping experience of the future starts when a carousel of items pops up at the bottom of the screen. The shopper browses the carousel, clicks the item they want, and instantly pays through a system like Apple Pay. All of that happens within a chat window. 

And that vision isn't too far off from what's already on the market today. 

Apple and Google are prepared for this future.  Earlier this month, LivePerson announced a new offering called LiveEngage for Voice Assistants, which lets customers start interacting with a brand through a voice assistant like Alexa while hanging out at home and then move that conversation over to chat on a mobile device when they leave the house. 

The big idea behind LiveEngage is that customers can have one continuous conversation across multiple modes of communication – something that dovetails with the bigger vision of LivePerson. 

Spinelli joined LivePerson in March after five years at Amazon — first as director of Amazon Search, and later as global head of Alexa OS, the operating system behind Amazon's famed voice assistant. 

When he learned that both Apple and Google added conversational commerce products directly into their smartphone operating systems, he decided to make the move to LivePerson, where he could embrace the trend head-on. 

Apple Business Chatlaunched in beta mode with select brands last year. It's designed to let customers find brands on iMessage and interact with them using dynamic features that manage everything from scheduling an appointment to making a purchase. 
​
Google's Android has a similar option with its business-focused Rich Communication Services, currently in beta.

Visa and Mastercard have chips embedded in hundreds of millions of credit and debit cards around the world. They're used in more than 200 countries and process billions of payments each year. And they both intend to create bank cards that use your fingerprint instead of a PIN. 

Early trials of cards with fingerprint scanners built-in are underway, and success could eventually result in the death of the humble PIN. "A four-digit PIN is pretty good security – obviously, six, seven or eight digits are better, but it is very hard for people to remember," says Bob Reany, an executive vice president at Mastercard, who is working on the firm's biometric cards. "[This] security is going to be better than a PIN."

In April 2017, Mastercard started testing a biometric card in South Africa. The new card looks the same as any other bank card but has a small biometric scanner in the top right-hand corner. When a finger is placed on the sensor, it can recognize if it is a match with stored data and then authorize the payment.

Mastercard now has more trials running in Bulgaria, and Reany says thousands of fingerprint-detecting cards will be tested elsewhere in the world later this year. "We've gotten the algorithms in great shape, now we're doing matching on the native device where the template is captured, and we're ready to go to market at some scale," he says. Crucially, in the coming months, banks will be issuing them to regular customers for the first time. Reany won't reveal exactly where the cards will be given to people, but he says more announcements are coming. "I think you're going to see pockets of Europe go pretty quickly," Reany says of potential adoption. 

Rival Visa is also testing biometric cards in Cyprus with the country's national bank and security company Gemalto, which has been creating the cards for both of the major payment companies, says it has produced "tens of thousands" of biometric cards for tests. 
​
Ultimately, payment companies are continuing to develop biometric bank cards, and trials are getting bigger. At their very least, biometric cards will offer a slightly more convenient way to pay, but they may also evolve with increasing use of fingerprint technology in other areas of people's lives. As Berg says: "People forget their PINs but very rarely do you go out without your fingers."

Since Microsoft and Amazon announced plans to integrate their respective personal digital assistantslast summer, there's been almost no official update on the status of the partnership.

It seems, however, like there's finally movement happening.

An April 27 update to the Cortana support page actually mentions Alexa. "Cortana and Alexa are still getting to know each other. Soon you'll be able to ask Alexa to buy things, add items to your shopping list, access your Alexa skills, and more," says the brief update on the page. Yes, "soon" is vague. But it's something.

Typing "Alexa" into the search box in Windows 10 (on the Fall Creators Update version, at least) yields a message saying "I'll be able to connect you to Alexa soon. Stay tuned!"

Last summer, Amazon and Microsoft announced that their respective personal assistants would be able to talk to one another, so customers could opt to use the assistant most suited to a particular task. Amazon and Microsoft officials said last year that they'd make Cortana-Alexa integration available before the end of calendar 2017. Since then, there's been no update on when this might arrive.

In early March 2018, Cortana team members told Windows Insiders that the Cortana-Alexa integration was in "internal self-hosting" at Microsoftat the moment. Microsoft is working to "make sure it's (the integration) a great experience," the team said, noting that bringing together the two different speech stacks is "non-trivial."

Recently, Cortana's new boss, Javier Soltero, admitted that "skills for the sake of skills won't fly." He told PC World that skills usage isn't "quite as deep as most people think it is." He also acknowledged Microsoft's in total catch-up mode on this front. (That's for sure, with Alexa at 40,000-plus third-party skillsat last count.)
Given Cortana is set to access Alexa skills via this integration partnership, maybe Cortana's skills shortage is less horrible than meets the eye.
​
Soltero also declined to say whether there are any other Cortana-powered speakers in the works. Currently, there's one from Harman-Kardon. I think speakers might not be where Microsoft is focusing; perhaps it's more about conferencing systems, microphones or other more business-centric peripherals.

The process of creating, tracking, verifying, and reporting on the cryptocurrency transactions using Bitcoin is called “mining.” The network of computers mining Bitcoins uses more electricity in a year than the whole of Ireland, according to statistics released as the price of a Bitcoin broke $17,400 for the first time last Monday.
According to Digiconomist the estimated power use of the bitcoin network, which is responsible for verifying transactions made with the cryptocurrency, is 30.14 Terawatt-hours (TWh) a year, which exceeds that of 19 European countries. At an ongoing power drain of 3.4GigaWatts, it means the network consumes five times more electricity than is produced by the largest wind farm in Europe, the London Array in the outer Thames Estuary, at 630MegaWatts.

At those levels of electricity consumption, each bitcoin transaction uses almost 300KWh of electricity – enough to boil around 36,000 kettles full of water. Although power consumption of other payment networks is harder to isolate, one of Visa’s two US data centers reportedly runs on about 2% of the power required by the Bitcoin network. Between them, those two data centers conduct around 200 million transactions a day; the bitcoin network handles fewer than 350,000.

The astronomical power draw is a facet of how the bitcoin network protects itself against fraud. With no centralized authority confirming transactions, Bitcoin is instead backed by “miners,” who put specialized computers to work churning through extremely power-intensive computing problems. Solving those issues both rewards the miner, handing them almost a quarter of a million dollars in Bitcoin, and verifies all transactions made in the last 10 minutes.

As the price of Bitcoin goes up, so does the value of the reward, meaning that more miners put more computers to the task of running the network. But since the price of bitcoin doesn’t necessarily rise in step with the number of transactions, that disconnect can mean the currency uses a significant amount of power per transaction in periods of high prices.
​
In the last three months, the cryptocurrency continued to grow in its third significant boom in its history. Previous periods of sustained growth, in 2013 and 2014, each ended with substantial busts, leading commentators to label them, in hindsight, as speculative bubbles.

Your password can ruin your life. It does sound dramatic, but it’s true. If someone figures out the password to your email, you’re in trouble. Social media? Even worse. Once hackers access your online bank account, they can wreck your finances, and you may feel the repercussions of that break-in for years.

Most of us have the wrong idea about passwords. We think they have to be convoluted messes, like F$%Th5l2K!&. This theory reigned for years – that passwords should be nonsensical and hard to remember.
It started in 2003 with guidelines from the National Institute of Standards and Technology (NIST), which insisted on random combinations of numbers, letters, and symbols. The organization’s manager, Bill Burr, spread this gospel for years. But in a recent interview with the Wall Street Journal, he admitted that this wasn’t nearly as effective as he’d thought.

Thanks to a new round of research, cyber-security experts have changed their tune. Yes, you should still avoid guessable passwords like “p@ssword1” or “letmein.” But a secure password also can be logical, fluid and easy to remember.

1. Passwords should withstand 100 guesses. No matter what your password is, it should withstand 100 guesses, which means it shouldn’t be tied to any public information about you or your family.
Hackers often turn to your social media profiles to find information about you, and a little data goes a long way, such as your birthday and the name of your pet. Experts believe that criminals can guess the average person's password nearly 73% of the time, and they can often access other accounts by using slight variations of the same password.

2. Use a phrase. Instead of thinking of your password as a secret code, think of it as a “passphrase.” These are strings of words that are both easy to memorize but hard for anyone else to crack.
Suppose you wanted to be an astronaut when you were a kid, and your favorite color is fuschia. You have never mentioned these facts online, and only your Mom knows such trivia about you. You could compose a passphrase like “ilikefuschiaastronauts.” You’ll never forget it, and the passphrase will confound hackers for (literally) centuries.

3. Choose something memorable. Remember, each password should be unique, but they don’t have to be cumbersome. The NIST calls passwords “memorized secrets.” You want to avoid the temptation to write down passwords, so pick a password that has enough meaning to you to stay in your mind.
Many people are not fans of password managers. I couldn’t exist without my 1Password. Other people I admire love LastPass. It doesn’t matter what software you do decide to use, but you’ll still have to develop one master password that does need to be memorable.
​
4. Get creative with characters. It may take websites some time to catch up to the latest NIST guidelines, but you can still create a memorable password that meets current restrictions. You might choose something like “ArizonaCardinalsfootballisnumber1!” or “Igivemyjob1000%everyday.” Those meet the requirements of having at least eight characters, a special character, and upper and lowercase letters.

Japanese researchers recently demonstrated artificial intelligence software capable of identifying and analyzing polyps found during a colonoscopy in less than a second.

The endoscopic system uses a magnified view of a colorectal polyp to study its features and compare it with 30,000 endocytoscopic images used for machine learning.

Researchers said they were able to predict the pathology of the polyp in less than a second, with 86% accuracy, based on a study assessing more than 300 polyps.

"The most remarkable breakthrough with this system is that artificial intelligence enables real-time optical biopsy of colorectal polyps during colonoscopy, regardless of the endoscopists’ skill," said Dr. Yuichi Mori, a researcher from Showa University in Yokohama, Japan and study lead, in a statement.

Mori said researchers now want to work on a broader study aimed at creating a system that can automatically detect polyps.

Its value to the medical world is a key reason why supporters such as Facebook CEO Mark Zuckerberg are excited about the future of artificial intelligence. During a Facebook Live chat in July, Zuckerberg discussed how AI can create safer cars and diagnose diseases earlier.

"I’m just much more optimistic in general on this," he said.
​
Critics of AI, most notably Tesla CEO Elon Musk, said governments should regulate how artificial intelligence is built and used to prevent potential global disasters.

Attackers are combining credential phishing, credit card data theft, and malware into a single campaign targeting banking details.

While it's common to see attacks involving phishing or malware, the combination of these tactics in a single campaign targeting Android devices of financial services and banking customers indicates the extent to which attackers are willing to play a more extended game to get to their goal.

The attacks combine phishing with the distribution of the Marcher Android trojan, a form of banking malware which has been active since at least late 2013. Lures previously used to distribute Marcher include a fake software update, a fake security update, and a fake mobile game.

Marcher first originated on Russian underground forums but has since become a global threat, with the trojan targeting bank customers around the world.

Uncovered by researchers at Proofpoint, the latest Marcher campaign has been ongoing since January and uses a multistep scheme to target customers of Austrian banks.

The attacks begin with phishing emails containing a shortened bit.ly link to a fake version of the Bank Austria login page, which has been registered to some different domains containing 'bankaustria' in the title, to trick the user into believing they're visiting the official site.

Those who visit the fake Bank Austria page are asked for their customer details, following which they are asked for their email address and phone number. These details provide the attackers with everything they need to move onto using social engineering to conduct the next stage of the campaign.

Using the stolen information, the attackers send the users a warning in a message featuring Bank Austria branding which claims the target doesn't have the "Bank Austria Security App" installed on their smartphone. 
The message claims EU money laundering guidelines mean that the new Bank Austria app is mandatory for customers and that failure to install it will lead to the account being blocked. The user is directed to a shortened URL and with the claim that following the link will lead to the installation of the app.

Those who click through to this are provided with additional instructions on how to download the app. The directions say that the user needs to alter their security settings to allow the download of applications from unknown sources. This is a part of the Android ecosystem which attackers regularly exploit to install malware, which in this case enables the installation of Marcher.

The fake app requires extensive permissions including writing and reading external storage, access to precise location, complete control over SMS messages, the ability to read contact data, the ability to read and write system settings, the ability to lock the device and more. 

Once fully installed, the malware places a legitimate looking icon on the phone's home screen, again using branding stolen from Bank Austria.

But this version of Marcher isn't just a banking trojan; it also enables the direct theft of credit card details. Those who've installed Marcher are asked for their credit card information when they open applications such as the Google Play store.

The attackers also ask for information including date of birth, address, and password to ensure they have all the data they require to exploit the stolen credentials fraudulently. Each of the overlays is designed to look official via the use of stolen branding.

Data suggests almost 20,000 people clicked through to the campaign, potentially handing their banking details and personal information into the hands of hackers. Similar attacks have also started targeting Raiffeisen and Sparkasse banks.
​
To avoid falling victim to this type of campaign, users should be wary of unusual domains in general and should be skeptical of any email communication from a bank asking for any sort of credentials. Users should also be wary of downloading apps from unofficial sources which ask for extensive permissions.