Many people dream of moving abroad, whether it's to experience a different culture, a desire for a slower life, or as am escape from the ever changing political climate. But one road block you'll consistently hit, no matter your nationality, revolves around your visa status. Even if you have a work visa, being able to put down permanent roots in a country where you don't have citizenship is not at all stress-free. There are some loopholes, however, specifically around international real estate that make the moving (and remaining) process so much easier. Depending on the country, you can essentially buy your way to citizenship, or at least a permanent residency, by investing in real estate. One of the main caveats comes down to the price, because unfortunately, you can't simply purchase a $30,000 home in Greece, for example, and expect your dual citizenship to be approved the next day. There are other eligibility requirements you must meet, and they differ by country. These won't be cheap investments by any means, but ask yourself: How much are you willing to pay to change everything? Below, we've broken down 25 countries that offer a Golden Visa to Americans when they purchase a new international home.For more real estate stories:1United Arab Emirates (Dubai)owngarden//Getty ImagesThe UAE is a popular real-estate-to-residency option for a few reasons: There's no income, wealth, or inheritance tax. Residents also report a fairly high quality of life rating, depending on their income status, and purchasing property can lead to gaining full citizenship, though not immediately.After meeting the eligibility requirements listed on the Global Citizen Solutions site and proving that you own property in the country, you'll then receive a golden visa, which grants you residency for at least five years. The renewal process is fairly simple and can be extended to a ten-year visa. As long as you meet certain exceptional qualities around merit and contributing to the nation's development, a golden visa holder can gain citizenship.Citizenship or residency: CitizenshipMinimum investment requirement: $545,000Related Story: 8 Places To Visit In Dubai If You Love Design2TurkeyAlexander Spatari//Getty ImagesThe process of gaining citizenship via real estate investments in Turkey is much more straight forward than in Dubai, and there are plenty of advantages to doing so. You must purchase property and agree that you won't sell the home for three years, according to the Republic of Turkey's Investment Office, and then you can apply for citizenship. Turkey is home to some beautiful historic cities and stunning natural landscapes. The country has a universal healthcare systemand a big medical tourism industrythough you may want to check on other social and political issues before calling your accountant. Citizenship or residency: CitizenshipMinimum investment requirement: $400,000Advertisement - Continue Reading Below3DominicaNANCY PAUWELS//Getty ImagesDual citizenship can be had in this Caribbean island by purchasing a government approved project. you can find this list of projects the Commonwealth of Dominica site. After your purchase has gone through, you then have to pay an additional fee to the government which starts at a cool $75,000 (more if you're bringing any dependents along with you). You also must not sell your investment for three years after citizenship is granted. Even with the extra government fees, this is still one of the smaller investments on the list. Citizenship or residency: CitizenshipMinimum investment requirement: $200,0004St. Kitts and NevisBriBar//Getty ImagesIn October of 2024, the minimum real estate investment requirement for citizens ship in St. Kitts and Nevis was reduced from $400,000 to $325,000, which makes this second passport option an even more appealing pick. St. Kitts and Nevis citizens hold one of the strongest passports in the Caribbean, and you don't have to pay income, investment, or wealth taxes in the country. There's also no stay requirement.However, the minimum investment requirement of $325k is only for approved condos and resort hotel shares. For a single-family home or other private dwelling, the minimum requirement is $600k, and neither real estate option can be sold for seven years, according to St. Kitts & Nevis Citizenship by Investment site. Upon citizenship approval, expect to pay a government fee of at least $25,000.Citizenship or residency: CitizenshipMinimum investment requirement: $325,000Advertisement - Continue Reading Below5Antigua and BarbudaWestend61//Getty ImagesThis safe and welcoming country is a popular one among those who seek a second citizenship in and around the Caribbean. However, you don't have free rein of all the real estate listingsyou must purchase an approved project for this investment if you want that passport. After you purchase one of these projects, you can then submit the sale agreement, along with the other required paperwork, to the Citizenship by Investment Unit (CIU), according to Henley & Partners, and pay a fee of at least $10,000. Choosing Antigua and Barbuda as your second citizenship option will require you to spend at least five days in the country within the first five years of obtaining citizenship, and you won't be able to sell the property for at least five years, either.Citizenship or residency: CitizenshipMinimum investment requirement: $300,0006GrenadaWestend61//Getty ImagesWhen seeking citizenship through Grenada's investment program, the process is a bit convoluted than in some of the other countries' on this list. It's a lengthy, stringent process, according to Henley & Partners, and will require a background check. However, you'll get a healthcare system that is rated as the best in the Caribbean and will get to live (with no minimum staying requirements) in a truly beautiful place.The home you purchase to start this process must be from a list of government-approved projects. After you pay the minimum investment, you'll still be expected to pay an additional, non-refundable contribution of at least $50,000. The property must be held for at least five years.Citizenship or residency: CitizenshipMinimum investment requirement: $270,000Advertisement - Continue Reading Below7VanuatuRichard I'Anson//Getty Images The country of Vanuatu first started their citizenship by investment program in 2021, and have since revoked citizenship from almost 30 people due to illegal and unreasonable behavior, according to their Citizenship's Office and Commission website. While this might initially be off-putting, think about it this way: As long as you're not being rowdy, you'll get to live in a safe place. In order to obtain citizenship through a real estate investment, you must purchase property from a rather short list of approved properties and attend an in-person interview, but after that, there's no minimum stay requirement, according to Global Citizen Solutions. Citizenship or residency: CitizenshipMinimum investment requirement: $200,0008St. LuciaPaul Baggaley//Getty ImagesThis is one to keep an eye on. While St. Lucia does allow citizenship through a real estate purchase with a minimum requirement plus a $50,000 administrative fee, according to Henley & Partners, you must select a property from an approved list of projects. And right now, there are no projects available. Their website does say this list will be updated at some point, but there's no obvious timeline currently. Citizenship or residency: CitizenshipMinimum investment requirement: $300,000Advertisement - Continue Reading Below9Greece Allard Schager//Getty ImagesLive out your Mamma Mia fantasies by moving to Greece. Greece is a hot vacation destination, but there are many reasons to want to live there full-time, including amazing food, an affordable cost of living, a good public healthcare system, and, of course, proximity to other European countries. By purchasing real estate, you're given a residence permit of five years that you can renew an unlimited number of times, and you're allowed to apply for citizenship after seven years of residence.There are a few options to choose from when deciding your Greek real estate venture, according to Henley & Partners: You can spend the minimum requirement "towards the conversion of commercial properties into residential use or the restoration of listed buildings," or you can up your investment to at least 400,000 to purchase a single property. However, if you hope to live in Athens, Thessaloniki, or any of the islands with a population of more than 3,100 inhabitants, expect to pay 800,000.Citizenship or residency: Residency Minimum investment requirement: 250,000 Related Story: Beautiful Cities in Greece That Deserve More Love10SpainEloi_Omella//Getty ImagesSpain is one of the world's most popular vacation destinations thanks to its rich culture and history, an excellent quality of life, and a highly developed economy. Through their Golden Visa program, a real estate investment will help you gain a residence permit with an initial duration of three years. However, as long as you maintain your real estate investment, you can renew this permit every five years after that, according to Henley & Partners. Once you've resided in the country for 10 years, then you can apply for citizenship.There's no minimum stay requirement in Spain, but you do have to visit the country before obtaining the first residence permit. Citizenship or residency: Residency Minimum investment requirement: 500,000Advertisement - Continue Reading Below11MaltaSylvain Sonnet//Getty ImagesThis small European island is known for its mesmerizing beaches, quaint villages, and seemingly endless sunshine, and at first glance, it might seem like one of the more affordable real estate investment options on this list. However, with all the fees and a mandatory donation, the cost adds up. There are a few investment options to gain indefinite permanent residency in Malta. According to Henley & Partners, you can either make a property purchase of 300,000 in South Malta or Gozo or spend 350,000 anywhere else. There's also an opportunity to lease a residence for at least five years for 10,000 per year in South Malta or Gozo, or 12,000 per year anywhere else in the country. However, this is where the extra costs come in. There's a minimum investment requirement of at least 28,000, a donation to a non-governmental organization of 2,000, and a non-refundable administrative fee of 40,000.Citizenship or residency: Residency Minimum investment requirement: 300,00012HungaryTanatat pongphibool ,thailand//Getty ImagesStarting January 1, 2025, Hungary is opening up its golden visa program to include real estate purchases that meet a minimum spend requirement, according to Immigrant Invest. There are plenty of reasons to want to live in Hungary, besides the proximity to other beautiful countries: universal healthcare, lower cost of living, great food scene, and low tax rates.In order to purchase property, you must get permission from the Land Registry as well as hire a lawyer to accompany the deal. There are a few extra fees, but they're low compared to other options on this list. A residence permit is granted for ten years and may be extended once for another ten years. However, as long as you meet certain requirements listed on Get Golden Visa, you can apply for citizenship after eight years of residence.Citizenship or residency: Residency Minimum investment requirement: 500,000Advertisement - Continue Reading Below13ColombiaSebastian Saldarriaga Torres//Getty ImagesThis beautiful South American country doesn't have a minimum investment amount; the amount is set as multiples of the country's national minimum monthly salary, according to Global Citizen Solutions. The eligibility requirement states that a real estate purchase from a foreign investor must be worth 350 times the national minimum wage, which is about $335 currently. This will qualify you to obtain a temporary residency visa for one to three years. However, you can continuously renew this visa for the duration of your investment, and once you hit the five year mark, you can apply for permanent residency. Citizenship or residency: ResidencyMinimum investment requirement: $117,00014BrazilDanny Lehman//Getty ImagesA comparatively easy option for obtaining permanent residency somewhere outside the U.S. is Brazil. There are a few investment opportunities, but if you're doing so through a real estate purchase, the minimum cost requirement varies by region: Buying a property in the north or northeast of the country will cost at least BRL 700,000 ($140,000), and buying a property anywhere else will cost at least BRL 1,000,000 (about $200,000), according to Global Citizen Solutions. Once you've made your purchase, you're eligible for a permanent residency. To maintain status, you must keep the property for at least for years and visit the country once every two years. After you've lived there for four years, you can apply for citizenship.Citizenship or residency: Residency Minimum investment requirement: $140,000Advertisement - Continue Reading Below15CambodiaPhoto by Supoj Buranaprapapong//Getty ImagesIf you're looking to live in Southeast Asia, then Cambodia is the only realistic option for gaining permanent residency through a real estate investment. A big perk is the relatively low minimum cost requirement, though the ten-year renewable visa is another benefit.After living in Cambodia for five years, you can apply for a Cambodian passport, according to La Vida Golden Visas. Plus, there's no minimum stay requirement to keep your permanent residency status. Citizenship or residency: ResidencyMinimum investment requirement: $100,00016Anguillacdwheatley//Getty ImagesThis British territory in the Caribbean offers permanent residency through real estate investmen. Anguilla is popular for a few reasons, including its low taxes, idyllic scenery, no minimum stay requirement, and the fact that it serves as an easier pathway to British citizenship. According to Select Anguilla, there are a few fees you must take into account when purchasing real estate on top of the minimum investment requirement. You also must hold the purchase for at least five years in order to maintain residency status, but after that, you're able to apply to become a British Overseas Territories Citizen, according to La Vida Golden Visas.Citizenship or residency: Residency Minimum investment requirement: $750,000Advertisement - Continue Reading Below17Cayman IslandsJodiJacobson//Getty ImagesThe scenic Cayman Islands are mainly known for the absence of corporate, capital gains, inheritance, personal income, and recurring property taxes, but there are plenty of other reasons to seek residency there. According to Sotheby's Realty, permanent residency here opens the door to possible eventual British Citizenship, just like in Anguilla. However, the minimum investment requirement is the highest on this list, which could understandably turn away a lot of people. If this is something doable for you and your family though, then you're set to have permanent residency for life, as long as you visit at least one day per year.Citizenship or residency: Residency Minimum investment requirement: $2.4 million18CuraaoWestend61//Getty ImagesCuraao, located in the Caribbean, is a constituent country of the Kingdom of the Netherlands, and is beloved for its beautiful scenery, political stability, and thriving economy. And because it's under Dutch rule, investors can apply for Dutch citizenship after five years of permanent residency, according to La Vida Golden Visas. To obtain permanent residency, there are a few investment options, a real estate purchase being one of them. However, how much you spend determines how long your residence permit lasts. If you spend $280,000, your renewable permit is valid for three years; spend $425,000, your renewable permit is valid for five years; spend $850,000, you obtain an indefinite residence permit. Citizenship or residency: ResidencyMinimum investment requirement: $280,000Advertisement - Continue Reading Below19CyprusStefan Cristian Cioata//Getty ImagesCyprus is a small Mediterranean island east of Greece with low cost of living, no inheritance tax, high-quality healthcare, and an extremely low crime rate. Not to mention, its landscape is stunning. To obtain permanent residency via real estate, you must purchase a property that hits the minimum investment requirement plus value added tax (VAT), according to Henley & Partners. You also must make a secured annual income of at least 50,000 from abroad to qualify for residence. The minimum stay requirement is small, requiring you to visit the country once every two years. After you've resided in Cyprus for seven years, you can apply for citizenship. Citizenship or residency: ResidencyMinimum investment requirement: 300,00020Namibia Marco Bottigelli//Getty ImagesConsidered one of the safest nations in Africa, Namibia is also known for its high quality of life, economic opportunities, and spectacular natural beauty. While the government is looking for more foreign investors, residency through real estate investments can only be achieved by buying in one approved location, according to Henley & Partners, and that's at the President's Links Estate. You obviously don't have many options when it comes to real estate investments, but if you do buy there, you'll get you a five-year, renewable work permit. After seven years of retaining the investment, you can apply for permanent residency. Citizenship or residency: Residency Minimum investment requirement: $365,000

Apple users across the globe have been reporting that theyre receiving refunds for AppleCare+ on iPhones they purchased and traded in years ago. Seemingly, there isnt anything specific triggering the refund, but there are a number of varying cases.AppleCare+ refund emailApple is refunding AppleCare+ on a wide variety of recently traded-in iPhone models, ranging from the iPhone 11 Pro to the iPhone 14 Pro. The email to affected customers states the following:Dear Customer,Our records indicate that you are eligible for a refund associated with your AppleCare+ agreement (number) for the iPhone 12 Pro Max you returned or traded in.We have issued a refund for $201.47 to the payment method associated with your Apple Account. Please allow 30 days for the refund to process.If you have questions or need help, contact Apple Support.Sincerely,Apple SupportVarying refund amountsInterestingly, some people are seemingly getting refunds in excess of what their unused portion of AppleCare+ wouldve been worth. AppleCare+ costs $199 for two years of coverage on iPhone Pro models, and $269 for theft and loss coverage. A refund of $201.47 seems a bit high, presuming that this customer used their iPhone for a reasonable amount of time.On top of that, Dylan McDonald on X reported that he received a refund of $181.36 for AppleCare+ on his iPhone 12 Pro Max, despite only subscribing to the monthly plan. He does note that he forgot to cancel his subscription for a few months after trading in, but even then the refund shouldve been closer to $40, not $200.It hasnt been so positive for everyone though, and multiple customers are receiving refunds as small as a couple dollars.Wrap upIf Apple isnt able to automatically refund you, youre advised to contact Apple Support, who can provide a form for issuing your Repair Extension Program Refund.It still isnt quite clear whats going on, but customers in both the US and UK are receiving such refunds. Users are also showing that theyve already received refunds in their bank accounts, so the emails dont seem to be an error.It is worth noting that customers were always able to call in and ask for partial refunds on 2 year AppleCare+ plans, though Apple is seemingly creating an automated process for it now.Well update this story if we learn any clarifying details. Have you personally received such an email? Let us know in the comments.Follow Michael:X/Twitter,Threads,InstagramAdd 9to5Mac to your Google News feed. FTC: We use income earning auto affiliate links. More.Youre reading 9to5Mac experts who break news about Apple and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop. Dont know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost.Request your EXTENDED TRIALtoday and understand why Mosyle is everything you need to work with Apple.As Apple has shifted to a rolling thunder of new features for iOS 18 where it brings out new features and functionality over time, so has it done the same for its enterprise tools. iOS 18.1 brings some important features to Apple IT admins with their device management solution.About Apple @ Work:Bradley Chambers managed an enterprise IT network from 2009 to 2021. Through his experience deploying and managing firewalls, switches, a mobile device management system, enterprise grade Wi-Fi, 1000s of Macs, and 1000s of iPads, Bradley will highlight ways in which Apple IT managers deploy Apple devices, build networks to support them, train users, stories from the trenches of IT management, and ways Apple could improve its products for IT departments.MDM can disable RCS messagesWith iOS 18.1, Apple IT admins can now prevent users from sending or receiving Rich Communication Services (RCS) messages. This adds another layer of communication control for enterprise environments that rely on tighter messaging restrictions.MDM can manage writing tools and mail summarizationAdministrators can now manage access to Writing Tools and Mail summarization features introduced in iOS 18.1. This ensures that users have consistent access to these productivity tools, or it can restrict them as necessary, depending on company policy.Messages app restriction can no longer be bypassed using ShareSheetIn response to previous workarounds, iOS 18.1 has closed a loophole where the Messages app restriction could be bypassed using the ShareSheet. Now, when Messages is restricted, users cannot share content via this app, ensuring more robust compliance with company policies.Users can no longer deactivate per-app VPNThe update restricts users from deactivating per-app VPN connections, ensuring that all app-specific traffic is routed through the VPN as mandated by the organizations device management configuration. This enhances security by maintaining consistent VPN use.MDM can disable the ability to record phone callsiOS 18.1 allows Apple IT admins to prevent users from recording phone calls, whether for privacy, legal, or compliance reasons. This feature helps enforce stricter call recording policies across managed devices.MDM can disable the ability to hide appsAdministrators can now prevent users from hiding apps, which is useful in scenarios where visibility of all installed apps is required for compliance. In addition, this update allows blocking of apps from being locked by users, reinforcing app visibility and access.Wrap upWith iOS 18.1, Apple has expanded its approach to introducing new features over time, delivering notable updates for both users and enterprise IT admins. The added MDM capabilities underscore Apples focus on refining device management and security within enterprise environments. These updates, like controlling RCS messages, restricting call recording, and managing per-app VPN usage, offer IT teams more granular control over devices.As Apple continues its rolling thunder strategy for iOS and macOS updates, IT administrators can expect further improvements that align with evolving enterprise needs. iOS 18.1s advancements mark a step forward in empowering admins to secure and streamline device management.Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost.Request your EXTENDED TRIALtoday and understand why Mosyle is everything you need to work with Apple.Add 9to5Mac to your Google News feed. FTC: We use income earning auto affiliate links. More.Youre reading 9to5Mac experts who break news about Apple and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop. Dont know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Wait, what?Shadow and BoneA team of scientists has found that the narrow beam of a laser, under specific conditions, can cast a shadow a counterintuitive finding that could open the doors for new applications of optical lasers.Conventional knowledge presupposes that if two light beams cross, nothing of note happens. But in an experiment, as detailed in a new paper published in the journal Optica, Brookhaven National Laboratory researcher Raphael Abrahao and his team found something strange: a narrow green laser beam, when shot through a larger blue laser beam inside of a ruby crystal, created a shadow."Laser light casting a shadow was previously thought impossible since light usually passes through other light without interacting," said Abrahao in a statement. "Our demonstration of a very counter-intuitive optical effect invites us to reconsider our notion of shadow."Throwing ShadeThe concept for the experiment started because of a joke the researchers shared over a meal together."What started as a funny discussion over lunch led to a conversation on the physics of lasers and the nonlinear optical response of materials," Abrahao explained. "From there, we decided to conduct an experiment to demonstrate the shadow of a laser beam."First, the team shot a high-power green laser through a cube-shaped ruby crystal. They then shot a different blue laser through the same material at a perpendicular angle.Lo and behold, readings from a sensor pointed at the surface the blue laser was illuminating revealed a shadow in the shape of the green laser beam.In simple terms, the green laser acted more like an object, not a beam of light, creating what by all accounts could be described as a shadow.The researchers suggest this is because of "optical nonlinear absorption" occurring inside of the ruby cube. The green light increases the absorption of the blue beam, creating a darker region that casts the shadow.The researchers measured a maximum contrast of around 22 percent, roughly the equivalent of a shadow a tree casts on a sunny day."This discovery expands our understanding of light-matter interactions and opens up new possibilities for utilizing light in ways we hadnt considered before," Abrahao explained."This new finding could prove useful in various applications such as optical switching, devices in which light controls the presence of another light, or technologies that require precise control of light transmission, like high-power lasers," he added.The team is now hoping to demonstrate how a laser beam's intensity can be controlled with the use of another laser, and to explore whether the same effect can be reproduced using other wavelengths and materials.More on lasers: NASA Spacecraft Shoots Japanese Moon Lander With LaserShare This Article

Thanks, Grandma.Grandma DesignUK telecom company Virgin Media O2 just revealed a fascinating AI entity: an audio chatbot that takes the persona of a confused grandmother, fine-tuned to do nothing except make phone scammers angry."As 'Head of Scammer Relations,' this state-of-the-art AI Granny's mission is to talk with fraudsters and waste as much of their time as possible with human-like rambling," Virgin Media wrote of the bot. "Created using a range of cutting-edge AI technology and trained with the help of one of YouTubes best known scambaiters, Jim Browning, Daisy is a lifelike AI Granny completely indistinguishable from a real person."Daisy seems like the rare noble application of AI chatbots, which have more often been used to perpetrate scams than fight them a clever reversal that just might help the vulnerable people, including flesh-and-blood grandmothers, on whom scammers tend to prey.Phone ProneTo keep scammers occupied, Daisy to which the company says it automatically connects likely scam callers deploys confusing digressions about her family and love of knitting. When pressed for bank information, she'll provide scammers with random numbers.She's kept scammers on the line for as long as 40 minutes, O2 says."By tricking the criminals into thinking they were defrauding a real person and playing on scammers' biases about older people, Daisy has prevented them from targeting real victims," read the Virgin blog."But crucially, Daisy is also a reminder that no matter how persuasive someone on the other end of the phone may be, they aren't always who you think they are," Virgin fraud director Murray Mackenzie added.Share This Article

Nov 15, 2024The Hacker NewsMachine Learning / Identity SecurityIn recent years, artificial intelligence (AI) has begun revolutionizing Identity Access Management (IAM), reshaping how cybersecurity is approached in this crucial field. Leveraging AI in IAM is about tapping into its analytical capabilities to monitor access patterns and identify anomalies that could signal a potential security breach. The focus has expanded beyond merely managing human identities now, autonomous systems, APIs, and connected devices also fall within the realm of AI-driven IAM, creating a dynamic security ecosystem that adapts and evolves in response to sophisticated cyber threats.The Role of AI and Machine Learning in IAMAI and machine learning (ML) are creating a more robust, proactive IAM system that continuously learns from the environment to enhance security. Let's explore how AI impacts key IAM components:Intelligent Monitoring and Anomaly DetectionAI enables continuous monitoring of both human and non-human identities, including APIs, service accounts, and other automated systems. Traditional monitoring systems typically miss subtle irregularities in these interactions, but AI's analytical prowess uncovers patterns that could be early signs of security threats. By establishing baselines for "normal" behavior for each identity, AI can quickly flag deviations, allowing for a fast response to potential threats.For example, in dynamic environments such as containerized applications, AI can detect unusual access patterns or large data transfers, signaling potential security issues before they escalate. This real-time insight minimizes risks and provides a proactive approach to IAM.Advanced Access GovernanceAI's role-mining capabilities analyze identity interaction patterns, helping organizations enforce the principle of least privilege more effectively. This involves analyzing each entity's access needs and limiting permissions accordingly, without the need for manual oversight. AI can continuously monitor for policy violations, generating compliance reports, and maintaining real-time adaptive governance. In risk-based authentication, AI also assesses machine-to-machine interactions by weighing the risk based on context, such as resource sensitivity or current threat intelligence. This creates a security framework that adapts in real-time, bolstering defenses without disrupting legitimate activities.Enhancing the User ExperienceAI in IAM isn't just about improving security; it also enhances user experience by streamlining access management. Adaptive authentication, where security requirements adjust based on assessed risk, reduces friction for legitimate users. AI-driven IAM systems can automate onboarding by dynamically assigning roles based on job functions, making the process smoother and more efficient.Usage patterns also enable AI to implement just-in-time (JIT) access, where privileged access is granted only when needed. This approach minimizes standing privileges, which can be exploited by attackers, and simplifies the overall access management process.Customization and PersonalizationAI enables a high level of customization within IAM, tailoring permissions to meet each user's needs based on their role and behavior. For instance, AI can dynamically adjust access rights for contractors or temporary workers based on usage trends. By analyzing user behaviors and organizational structures, AI-driven IAM systems can automatically recommend custom directory attributes, audit formats, and access workflows tailored to different user roles. This helps reduce risk and streamlines governance without one-size-fits-all policies that often overlook organizational nuances.In compliance reporting, AI customizes audit trails to capture data most relevant to specific regulatory standards. This streamlines reporting and enhances the organization's compliance posture, a critical factor in industries with stringent regulatory requirements.Reducing False Positives in Threat DetectionA significant challenge in traditional threat detection systems is the high rate of false positives, leading to wasted resources. AI addresses this by learning from massive datasets to improve detection accuracy, distinguishing between genuine threats and benign anomalies. This reduces false positives, streamlining operations, and enabling quicker, more precise responses to real threats.Practical Applications of AI in IAMBeyond conceptual improvements, AI has practical applications across various IAM components:- Privileged Access Management (PAM): AI can monitor privileged accounts in real-time, recognizing and halting unusual behavior. By analyzing past behaviors, it can detect and terminate suspicious sessions, proactively mitigating threats for both human and non-human identities. AI also optimizes access workflows by recommending time-based access or specific privilege levels, reducing over-privileged accounts and ensuring policies align across multi-cloud environments.- Identity Governance and Administration (IGA): AI automates the lifecycle management of non-human identities, continuously analyzing usage patterns to dynamically adjust permissions. This reduces the risk of over-privileged access and ensures each identity maintains the least privilege needed throughout its lifecycle. By analyzing organizational changes, AI can even preemptively adjust access as roles evolve.- Secrets Management: AI is invaluable in managing secrets, such as API keys and passwords, predicting expiration dates or renewal needs, and enforcing more frequent rotation for high-risk secrets. A non-human identity AI-powered approach, for instance, extends secret detection beyond code repositories to collaboration tools, CI/CD pipelines, and DevOps platforms, categorizing secrets by exposure risk and impact. Real-time alerts and automated mitigation workflows help organizations maintain a robust security posture across environments.Simulating Attack Patterns on Non-Human Identities (NHI)With machine learning, AI can simulate attack patterns targeting non-human identities, identifying weaknesses before they're exploited. These simulations enable organizations to reinforce defenses, adapt to emerging threats, and continuously improve IAM strategies.ConclusionAI is redefining Identity Access Management, bringing enhanced monitoring, smarter anomaly detection, and adaptive access governance. This evolution marks a shift from reactive to proactive cybersecurity, where AI not only defends but also anticipates and adapts to ever-evolving threats. With AI-driven IAM, organizations can achieve a more secure and efficient environment, safeguarding human and non-human identities alike.Found this article interesting? This article is a contributed piece from one of our valued partners. Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Nov 15, 2024Ravie LakshmananVulnerability / Database SecurityCybersecurity researchers have disclosed a high-severity security flaw in the PostgreSQL open-source database system that could allow unprivileged users to alter environment variables, and potentially lead to code execution or information disclosure.The vulnerability, tracked as CVE-2024-10979, carries a CVSS score of 8.8.Environment variables are user-defined values that can allow a program to dynamically fetch various kinds of information, such as access keys and software installation paths, during runtime without having to hard-code them. In certain operating systems, they are initialized during the startup phase."Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g., PATH)," PostgreSQL said in an advisory released Thursday."That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user."The flaw has been addressed in PostgreSQL versions 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21. Varonis researchers, Tal Peleg and Coby Abrams, who discovered the issue, said it could lead to "severe security issues" depending on the attack scenario.This includes, but is not limited to, the execution of arbitrary code by modifying environment variables such as PATH, or extraction of valuable information on the machine by running malicious queries. Additional details of the vulnerability are currently being withheld to give users enough time to apply the fixes. Users are also advised to restrict allowed extensions."For example, limiting CREATE EXTENSIONS permission grants to specific extensions and additionally setting the shared_preload_libraries configuration parameter to load only required extensions, limiting roles from creating functions per the principle of least privileges by restricting the CREATE FUNCTION permission," Varonis said.Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

The basicsThe stack: Postgres, Node.js/Express.js, React. Currently running on Heroku, eventually AWSThe product: We're building the ultimate suite for Finance teams to manage everything from billing to revenue recognition to subscription metrics, and much moreThe way we work:This is a remote job - work anywhere you want, and in any timezone on earth (or outside earth, whatever).We are an asynchronous team - we don't do scheduled meetings, and rely on each team member to pick their own schedule and to communicate clearly in writing and with recorded videos. Hear from our co-founder Michelle Lee on what it's like to work asynchronously (click here).We operate completely autonomously - no one will tell you what to do, we'll just tell you the goals and you will figure out how to work towards them with the rest of the team.The role you'll play on our team:You'd be one of the first ten engineers on the team.You'll work onBackend: database design and implementation, complex data management problems, API design and implementation, writing testsFrontend: building features in our react app, HTML/CSS + styled components, building amazing user experiences, writing testsFrontend and backend: building and iterating on our product, collaborating with designers and founders, and making a product that users will love.Like all start-ups we're scrappy, but not scrappy on compensation: Subscript is committed to paying our awesome team members at market-rate, including benefits.Our interview processOur interview process is designed to focus on your skills as a software engineer, and your ability to communicate clearly. We're a fully asynchronous company, so that's how we will communicate in this interview process too .We'll ask you to work on a small code challengeAfter reviewing the short code challenge, we'll ask you to work on a ~90 minute exercise while recording a loom (or other screen recording) video.If the video interview above goes well, we'll want to learn a bit more about how you communicate in writing - we will ask you to put together a technical design document. This is one of the biggest ways we communicate at Subscript, so we want to see that you can work well with that!And finally, hopefully we'll send you an offer. And hopefully you'll accept!RequirementsYou're an excellent engineer (you write high quality code, you write great tests, you ship quickly)You're a great communicator via writing, and via recorded videos.You're excited about working on a globally-distributed and diverse team, in an incredibly unique culture where autonomy, accountability, and ownership are equally as valued as your skillset.That's it!BenefitsUnlimited vacationCompletely flexible work schedule - work literally anytime (and anywhere) you want!Benefits appropriate to your location (health/dental/vision in the USA)Company wide retreats multiple times per yearLike all start-ups we're scrappy, but not scrappy on compensation: Subscript is committed to paying our awesome team members at market-rate, including benefits.

Submitted by WA ContentsInspireli Awards launches Kashitu School Competition in ZambiaZambia Architecture News - Nov 16, 2024 - 12:53 html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd"The Inspireli Awards, the worlds largest architectural competition for students, proudly announces a new competition as part of its global platform: the Kashitu School Competition in Zambia. This initiative invites architecture students worldwide to reimagine and design innovative structures for the Kashitu Secondary School Campus, challenging them to push both architectural and technical boundaries beyond the conventional designs of typical Zambian schools.This unique Design and Build project offers students the rare chance to participate in both the design and construction of the school, gaining hands-on experience that bridges academic study with real-world application. All participants get a chance to travel to Zambia, contributing directly to the building process and enhancing their skills in sustainable design, teamwork, and construction.The announcer of the competition is the Czech Technical University in Prague in partnership with Architects Without Borders. Together, they aim to inspire students to create impactful, community-focused designs that address local needs while showcasing global architectural innovation.Inspireli Awards connects students and architects from over 160 countries, offering a platform to present their work and participate in real-world challenges like the Kashitu School project. Kashitu School competition is one of 4 ways how to participate in Inspireli Awards.JuryChairman: Jan TilingerJuror: Petr anda (Project Coordinator)Juror: Bornface Mamfunda (Chairman of New Renato Community Society)Juror: Aneka Havrnkov (Chairman of Ptel New Renato)Juror: Andrea Tabocchini (Founder of Andrea TabocchiniArchitecture)Juror: Hermann Kamte (Founding Associates and the Creative Director at HKA | Hermann Kamte&Associates)The other members of the jury will be specified latter.PrizesThis is a non-profit project and therefore it is not possible to provide financial prizes. The winning team will be given the opportunity to build the selected building by themselves, on site in Zambia. (Winning the competition does not guarantee the provision of funds for construction, transportation, or accommodation of the team members. However, the participating organizations will provide support in obtaining funding for the construction, transport and accommodation)In case of construction of the design (s), the name(s) of the author(s) of the winning design(s) will be displayed at the appropriate building, which will come from the winning design.Registration is now open, the competition ends on June 15, 2025 and is free-of-charge.ScheduleTermination of registration for the competition: June 15, 2025Voting in the semifinals: June 17-23, 2025Voting in the finals: June 26-July 7Announcement of finalists: June 26, 2025Announcement of the winners: Autumn 2025Download the materials:For more information, please visit website.Top image courtesy of Inspireli.> via Inspireli Awardsarchitecture competition

Our Experts Written by Katie Collins, Chris Wedel Our expert, award-winning staff selects the products we cover and rigorously researches and tests our top picks. If you buy through our links, we may get a commission. Reviews ethics statement Why You Can Trust CNET 16171819202122232425+ Years of Experience 14151617181920212223 Hands-on Product Reviewers 6,0007,0008,0009,00010,00011,00012,00013,00014,00015,000 Sq. Feet of Lab Space How we test CNETs expert staff reviews and rates dozens of new products and services each month, building on more than a quarter century of expertise. What to consider Type of flooring Buy the right vacuum to clean the type (or types) of flooring in your home. Battery life and runtime If you have a lot of home to vacuum, you'll want a model with good runtime. Weight, size and bin capacity Smaller vacuums are easier to maneuver but they often give up power and bin capacity. Warranty Don't spring for an expensive vacuum without a warranty to back it up. Table of Contents Our Picks $750 at LG Best overall cordless vacuum LG CordZero A949 View details $750 at LG View details See at SharkClean.com Cordless solution for powerful home deep cleaning Sponsored - Shark PowerDetect Clean & Empty System View details See at SharkClean.com View details $611 at Amazon Best suction performance Dyson V15 Detect View details $611 at Amazon View details $649 at Amazon Best for thick carpets Samsung Jet 90 View details $649 at Amazon View details $200 at Amazon Best budget cordless vacuum Levoit LVAC-200 View details $200 at Amazon View details $500 at Best Buy Best for pet hair Tineco Pure One S15 Pet View details $500 at Best Buy View details $45 at Amazon Best handheld car vacuum Dirt Devil Grab & Go Plus View details $45 at Amazon View details Table of Contents Fact: Every home needs a vacuum. You don't need to break your budget for a decent one. That's why CNET compiled a complete list of cordless vacuums for every need, from top-of-the-line units with loads of features to high-performing budget options. CNETs labs team has been testing vacuums for decades, simulating real-life conditions and looking beyond the brand claims and tech specs. We score each cordless vacuum on suction performance, ease of use, battery life, comfort/handling, standout features an