Dec 19, 2024Ravie LakshmananCloud Security / EncryptionThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 25-01, ordering federal civilian agencies to secure their cloud environments and abide by Secure Cloud Business Applications (SCuBA) secure configuration baselines."Recent cybersecurity incidents highlight the significant risks posed by misconfigurations and weak security controls, which attackers can use to gain unauthorized access, exfiltrate data, or disrupt services," the agency said, adding the directive "will further reduce the attack surface of the federal government networks."As part of 25-01, agencies are also recommended to deploy CISA-developed automated configuration assessment tools to measure against the baselines, integrate with the agency's continuous monitoring infrastructure, and address any deviations from the secure configuration baselines.While the baselines are currently limited to Microsoft 365 (Azure Active Directory / Entra ID, Microsoft Defender, Exchange Online, Power Platform, SharePoint Online, OneDrive, and Microsoft Teams) the cybersecurity agency said it may release additional SCuBA Secure Configuration Baselines for other cloud products.The BOD, named Implementing Secure Practices for Cloud Services, primarily requires all federal agencies to meet a series of deadlines next year -Identify all cloud tenants, including tenant name and the system owning agency/component for each tenant no later than February 21, 2025 (to be updated annually)Deploy all SCuBA assessment tools for in-scope cloud tenants no later than April 25, 2025, and either integrate the tool results feeds with CISA's continuous monitoring infrastructure or report them manually on a quarterly basis Implement all mandatory SCuBA policies no later than June 20, 2025Implement all future updates to mandatory SCuBA policies within specified timelinesImplement all mandatory SCuBA Secure Configuration Baselines and begin continuous monitoring for new cloud tenants prior to granting an Authorization to Operate (ATO)CISA is also strongly recommending all organizations to implement these policies in order to reduce potential risks and enhance resilience across the board."Maintaining secure configuration baselines is critical in the dynamic cybersecurity landscape, where vendor changes, software updates, and evolving security best practices shape the threat environment," CISA said. "As vendors frequently release new updates and patches to address vulnerabilities, security configurations must also adjust.""By regularly updating security configurations, organizations leverage the latest protective measures, reducing the risk of security breaches and maintaining robust defense mechanisms against cyber threats."CISA Pushes for Use of E2EE ServicesNews of the Binding Operational Directive comes as CISA has released new guidance on mobile communications best practices in response to cyber espionage campaigns orchestrated by China-linked threat actors like Salt Typhoon targeting U.S. telecommunications companies."Highly targeted individuals should assume that all communications between mobile devices including government and personal devices and internet services are at risk of interception or manipulation," CISA said.To that end, individuals who are senior government or senior political positions are being advised to -Use only end-to-end encrypted (E2EE) messaging applications such as SignalEnable phishing-resistant multi-factor authentication (MFA)Stop using SMS as a second factor for authenticationUse a password manager to store all passwordsSet a PIN for mobile phone accounts to prevent subscriber identity module (SIM)-swapping attacksUpdate software on a regular basisSwitch to devices with the latest hardware to take advantage of critical security featuresDo not use a personal virtual private network (VPN) due to "questionable security and privacy policies"On iPhone devices, enable Lockdown Mode, disable the option to send an iMessage as a text message, secure Domain Name System (DNS) queries, activate iCloud Private Relay, and review and restrict app permissionsOn Android devices, prioritize getting models from manufacturers that have a track record of security commitments, use Rich Communication Services (RCS) only if E2EE is enabled, configure DNS to use a trusted resolver, enable Enhanced Protection for Safe Browsing in Google Chrome, make sure Google Play Protect is enabled, and review and restrict app permissions"While no single solution eliminates all risks, implementing these best practices significantly enhances protection of sensitive communications against government-affiliated and other malicious cyber actors," CISA said.Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Dec 19, 2024Ravie LakshmananPrivacy / Data ProtectionThe Dutch Data Protection Authority (DPA) on Wednesday fined video on-demand streaming service Netflix 4.75 million ($4.93 million) for not giving consumers enough information about how it used their data between 2018 and 2020.An investigation launched by the DPA in 2019 found that the tech giant did not inform customers clearly enough in its privacy statement about what it does with the data it collects from its users. This includes email addresses, telephone numbers, payment details, as well as information about what customers watch on the platform."Furthermore, customers did not receive sufficient information when they asked Netflix which data the company collects about them," the DPA said, adding these constitute violations of the General Data Protection Regulation (GDPR).Besides failing to clarify the purpose and legal basis for gathering the data, the company has also been accused of being unclear about what kinds of information are shared with third-parties and for what reasons, the data retention period, and security guarantees when it comes to transmitting the information to countries outside of Europe.Austrian privacy non-profit None of Your Business (noyb), which filed the complaint against Netflix in January 2019, said it's "happy" with the DPA's decision, while noting that it took almost five years to obtain it."Netflix didn't just fail to provide sufficient information about why it collects data and what it does with it," it said. "The company didn't even manage to provide a full copy of the complainant's data."Although the company has since updated its privacy statement and improved the information it provides to users, it's objecting to the fine, the DPA added."A company like that, with a turnover of billions and millions of customers worldwide, has to explain properly to its customers how it handles their personal data," Dutch DPA chairman Aleid Wolfsen said. "That must be crystal clear. Especially if the customer asks about this. And that was not in order."Noyb has also filed similar complaints against Amazon, Apple Music, Spotify, and YouTube, with the case against Spotify resulting in the music streamer facing a fine of around 5 million from the Swedish Data Protection Authority (IMY) in June 2023.The development comes as the Irish Data Protection Commission (DPC) imposed a monetary penalty of 251 million (around $263 million) on Meta for a 2018 data breach that impacted 3 million users in the European Union.Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Artificial intelligence capabilities are coming to a desktop near you with Microsoft 365 Copilot, Google Gemini with Project Jarvis, and Apple Intelligence all arriving (or having arrived). But what are the risks?

Thinkhubstudio/Getty ImagesIf 2024 was a busy 12 months for IT professionals, 2025 will present similar challenges -- and then some.The IT department just wrapped its collective head around generative AI use cases, and nowagentic AI is threatening another digital revolution. Add in continuing demands for other emerging technologies -- such as automation, machine learning, and augmented reality -- and senior IT executives can expect 2025 to be a formidable year.Also: AI transformation is the new digital transformation. Here's why that change mattersSo, how can digital leaders deal with these pressures and deliver great results during the next 12 months? Four business leaders share their best-practice tips.1. Provide lateral thinkingWendy Redshaw, chief digital information officer at NatWest Retail Bank, says successful digital leaders act less like technologists and more like business leaders.The democratization of IT knowledge will continue in 2025 as professionals use more digital services in their everyday roles."Everyone is becoming technology literate -- the business won't be just the business, and the technologists won't be just technologists."Also:5 ways to tell people what to do at workRedshaw told ZDNET that effective digital leaders play an important role in allowing the rest of the organization to embrace innovation with a sense of perspective."From a business perspective, it's not being overly excited or overly scared of the technology that's coming, but stopping and thinking, 'Where is the customer benefit here, and how do we make sure it's bringing benefits?'"Digital leaders will use their IT knowledge to work with the business and deliver improved customer experiences safely and effectively, especially in an age of AI."For people with a traditional technology background, the engineering blocks are still important for keeping customers safe, especially with changes in cybersecurity and quantum computing coming down the road," she said."Generative AI is not human. It's important to understand that, even though it looks like a superhuman and behaves like one, you can't assume it's correct. So, we need real discernment and lateral thinking on what we're doing." 2. Design your futureGabriela Vogel, senior director analyst in the Executive Leadership of Digital Business practice at research firm Gartner, said the heightened interest in technology is good news for digital leaders but comes with a side order of challenges. "CIOs have a lot of pressure to deliver the value of technology," she said, especially given that non-IT executives are boosting their digital credentials. Gartner's research suggests as many as 80% of CXOs and business leaders believe digital leadership is part of their jobs. If CIOs don't deliver value quickly, other executives will start stomping on their territory -- and for some digital leaders, that might be a suitable solution to an intractable challenge.Also:5 ways to be a great leader at work"You can pretty much design the work and responsibility you want because as tech and business move together, you can start focusing on the parts of the role you want," said Vogel. "You might say, 'You know what? I don't want any of this. I want to do the old IT,' and that's all fine and fair.'"Gartner's research suggests just 12% of CIOs who lead a digital transformation operate in a franchise model, integrating themselves with the rest of the business to create a democratized approach to technology. Vogel said it's these digital leaders who will deliver the most value. "We do see a trend of them connecting and being part of the executive committee more and more," she said. "And the relationship that we see is the higher the digital maturity of the business, the more likely it is that the digital leader will report to the CEO, and, hence, have more opportunities to deliver value."3. Don't hog the gloryNick Woods, CIO at airport group MAG, said digital leadership titles -- such as CIO, CTO, or CDO -- are far less important than how you partner with the business. "Do you understand the business problems you're trying to solve?" he said. "Technology for technology's sake solves nothing. Digital leaders must address tangible business outcomes and deliver value." Woods said digital leaders reach that goal using their IT engineering expertise to help their business colleagues implement technology."We're used to taking complex pictures and plotting logical courses and routes," he said. "I think the tentacles are extending as tech becomes more pervasive and integrated into more parts of the organization."Woods told ZDNET that successful digital leaders grab the opportunity to build bonds with the rest of the business and identify strong use cases."It's not the reality that you're going to the ops guys and saying, 'Hey, I've got this great new technology solution that I'm going to put on top of everything and deliver you 30% more capacity. I'll see you next week when I've finished it,'" he said "You must partner because digital success is people, process, and tech coming together. So, just implementing tech in isolation doesn't do it. There has to be mutual gains and benefits." Woods said the best position for digital leaders is to view success as supporting others. Get that area right, and you'll be recognized for your efforts."The reality is the costs often sit with me, and the benefits sit with someone else. I pay for the cloud and compute we're using to run an AI algorithm, but the efficiency, the gains, and the upside sit somewhere else," he said. "So, digital leadership has to be built on a partnership model. And everyone wins as a result of that. If you try and take all the glory yourself, then you're [certain to fail]."4. Provide smart answers quicklyClaire Thompson, group chief data and analytics officer at insurance giant L&G, said she's in a fortunate position where she sits on a board subcommittee. "I have a seat at the top table and can talk about what's going on," she said. "But I know that's not true for other peers."If you're a digital leader who doesn't attend board-level meetings, Thompson told ZDNET you must find another way to hammer home the importance of technology and data."That's tough if you don't sit at the top table and can't ask senior stakeholders, 'Have you thought about how that's possible?'" Also:5 ways to ensure you spend time on the right tasks at workThompson said the good news for digital leaders who feel left out in the cold is that the broad interest in generative AI and other emerging technology means the focus on technology and data will keep increasing."Boards and executive committees must think about what's happening in that space and how they might leverage those advances," she said. "And that's exactly what you'd expect from a board -- to look at the organization and ensure they're keeping up with innovation happening elsewhere."Of course, if you are seen as someone who can help the board achieve its digital objectives, then there'll be new pressure to deliver quickly and effectively. "Success is all about how these aims tie back into the digital and data piece, and ensuring you have the right individuals in your organization that help you answer questions the board asks."Featured

Update Google Chrome browser nowGetty ImagesUpdate, Dec. 20, 2024: This story, originally published Dec. 19, now includes further advice on update action for organizations running any Chrome or Chromium-powered browsers.Hot on the heels of an emergency update to Googles Chrome web browser comes yet another security update for billions of users across multiple operating system platforms. This time, the update urgency remains the same, but the number of vulnerabilities does not: four high-rated vulnerabilities have been confirmed by Google; heres what you need to know and do.Urgent Google Chrome Security Update For All Users ConfirmedWhat You Need To KnowGoogle has confirmed that the Chrome web browser is being updated again, an update that will roll out in the coming days and weeks. The reason? A total of four high-rated security vulnerabilities which between them have earned the security researchers who discovered them a whopping $75,000 in hacker bounties.The four vulnerabilities that Google has confirmed are:CVE-2024-12692: A type confusion vulnerability in the Chrome V8 Javascript rendering engine.CVE-2024-12693: An out-of-bounds memory access vulnerability in the Chrome V8 Javascript rendering engine.CVE-2024-12694: A use-after-free vulnerability in the Chrome browser compositing function.CVE-2024-12695: An out-of-bounds write vulnerability in the Chrome V8 Javascript rendering engine.Access to bug details and links may be kept restricted until a majority of users are updated with a fix, Prudhvikumar Bommana from the Google Chrome security team said, We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but havent yet fixed.MORE FOR YOUHow To Securely Update Google ChromeTo Ensure Protection From The Latest VulnerabilitiesChrome has been updated to the following versions:131.0.6778.204/.205 for Windows and Mac131.0.6778.204 for Linux131.0.6778.200 for AndroidThe more than 3 billion users of Google Chrome who are potentially impacted by these security vulnerabilities need to make sure that they are protected as soon as possible. If you are in that number, and the chances are high that you are, then you need to kickstart the updating process and then activate the updated browser itself to enable the protection to be in place. Google does automatically update the Chrome browser, but this relies on users restarting the client, which lots of people with lots of open tabs dont like doing. So, please follow these steps now:GoogleHead for the Help|About option in your Google Chrome menu to kickstart an automatic security update download.GoogleRestart your Google Chrome browser after the update has been installed, or it will not activate, and you will still be vulnerable to attack.GoogleRepeat step one to ensure that the Google Chrome update is installed and activated, and that you are now fully protected against these latest security threats.Chrome Patch Management Advice For OrganizationsIn light of the latest Google Chrome web browser security update addressing a number of serious, high-severity memory vulnerabilities, Alex Vovk, CEO and co-founder of Action1, an endpoint and patch management company, has offered the following advice for organizations that are impacted:Ensure that all organizational systems that use the Google Chrome web browser are updated to the latest versionthis can be done using remote management tools.Configure your browser settings through group policy or management tools to enable automatic updates for Chrome on all user endpoints as the norm.Deploy advanced endpoint protection solutions that can detect and prevent browser vulnerabilities from being exploited, such as behavioral detection and intrusion prevention systems.Conduct regular security assessments and penetration tests that include browser-based vulnerabilities in their scope.Communicate with employees about the importance of keeping software up to date, including the likes of Google Chrome and other web browser clients using the Chromium engine, Vovk said, and provide guidance on how to recognize update prompts and initiate manual updates when necessary.

Clarissa Shields (Photo by Tracey Biel/Variety via Getty Images)Variety via Getty ImagesClaressa Shields and Laila Ali, womens boxing pioneer and the daughter of Muhammad Ali, used to be close. Things have changed, and Shields discussed the situation with fellow Olympic gold medalist and boxing great Andre Ward on his Art of Ward podcast.Shields said the issues between her and Ali arent damaged beyond repair, but admits things were said and done that need to be hashed out. The beef between Shields and Ali was at its peak in 2020, but it never materialized into a fight. Shields revealed that the money Ali wanted was offered, but the latter didnt get clearance to fight.While Shields never fought Ali when their rivalry was at a fever pitch, she still believes they could create the biggest fight in womens boxing history. Ward asked Shields why the rumored fight between her and Ali didnt happen.Me fighting her right now is still the biggest fight in womens boxing, Shields told Ward. Right now. You got all the Amanda Serranos and Katie Taylors, but Claressa Shields vs. Laila Alieven in an exhibitionis still the biggest fight in the world for womens boxing. So why would I turn that down?Laila Ali (Photo by Paras Griffin/Getty Images)Getty ImagesMORE FOR YOUHere is a look at the entire interview, which I encourage you to watch. Ward has become arguably the best interviewer in the combat sports space, and hes just getting started.Ali is now 46, and coming out of retirement seems less likely, but its tough to say never in a world where tons of cash is being offered for fights between active fighters and legends.Jake Paul just fought a 58-year-old Mike Tyson on Netflix, and it produced the most-viewed boxing event in history. Shields-Ali wouldnt do those kinds of numbers, but there is some merit to it potentially being the biggest fight in womens boxing history.Serrano-Taylor II was on the undercard of Paul-Tyson, and while it was the best fight of the event, the massive viewership it garnered was because of the main event. Shields-Ali is likely a main event if it happens in the United States.ARLINGTON, TEXAS - NOVEMBER 15: (L-R) Jake Paul and Mike Tyson fight during LIVE On Netflix: Jake ... [+] Paul vs. Mike Tyson at AT&T Stadium on November 15, 2024 in Arlington, Texas. (Photo by Al Bello/Getty Images for Netflix 2024)Getty Images for Netflix 2024Perhaps a good landing spot for the fight could be on the same card as Logan Paul vs. Conor McGregor, if that rumored exhibition match comes to fruition in India. A card with Paul-McGregor and Shields-Ali is going to draw attention, and most importantly for the fighters involved, there will be massive paydays for all four.As far as the beef is concerned, it would be great to see Shields and Ali bury the hatchet. Both women have meant so much to womens boxing, and they have represented themselves and the sport well.Shields, 29, is moving into another stage of her career. Shes looking to become the undisputed heavyweight champion, which would make her a four-division undisputed champion in the sport. Thats something that has never been done before.With Shields biopic, The Fire Inside, hitting theaters on Christmas Day and her continued pursuit of greatness in boxing, shes arguably in her prime as a professional.According to Shields, she wants to retire at 38.Before that, Shields told Ward she has plans to move back down to 154 pounds to pursue a few big-money fights. On February 2, Shields faces Danielle Perkins in a defense of her WBC heavyweight title.

Time zones: EST (UTC -5), MST (UTC -7), ART (UTC -3), UTC -4, UTC -4:30, UTC -3, UTC -2About the Role:Were partnering with a remote-based company that's seeking a Senior Shopify Developer to lead a team of developers in building a Shopify Embedded Application that aligns with Shopify's "Built for Shopify" guidelines. You will provide technical direction, manage milestones, and act as a liaison engineering/product leadership and the development team. This role requires strong technical expertise, leadership skills, and excellent communication.Key Responsibilities:Technical Leadership: Break down project scope, Figma designs, and requirements into clear, actionable milestones and tasks.Team Management: Lead and mentor a team of 2 Intermediate Developers, providing technical guidance and ensuring the successful delivery of project goals.Project Management:Collaborate with engineering and product leadership.Communicate project progress, blockers, and resource needs through regular weekly updates.Ensure project milestones are met on time and within scope.Development: Contribute to coding and development tasks within Shopify's Embedded App ecosystem.Required Skills & Experience:5+ years of experience in software development, with strong expertise in Shopify Embedded Apps.Proficiency in the following technologies:Shopify CLI, App Bridge, Polaris, Shopify Admin APIReact / TypeScript, Shopify Remix, JavaScriptREST APIs / GraphQL APIsStrong familiarity with Shopify Partners Admin, App Setup, and Shopify App Design Guidelines.Demonstrated experience leading teams and managing projects within agile environments.Excellent problem-solving skills and ability to work collaboratively in a remote environment.Effective communication and reporting skills.What to Expect:Fully remote work with flexible hours (North American time zones).Light meetings: At least one coordinated team meeting per week.Collaborative tools: Slack, GitHub, Jira, and Figma.Support from engineering, product teams, and leadership to ensure success. Related Jobs See more Front-End Programming jobs

In a nutshell: Apple AirTags are a great way to keep tabs on physical items, but they aren't perfect. Battery life from the coin cell battery is rated at more than a year under normal use and while they are easy to replace, doing so annually can be a hassle especially if it is an AirTag you don't use on a regular basis or you have several to manage. The latest creation out of Elevation Lab solves this issue and more but introduces its own set of compromises.The Time Capsule is an Apple AirTag accessory that promises to extend battery life up to a full decade. To use it, simply remove your AirTag's back plate and the coin cell battery and place the entire unit on the contact points inside the Time Capsule. Then, install two AA batteries and screw the cover closed. Elevation Lab recommends Energizer Ultimate Lithium batteries to maximize runtime, but any pair of AA batteries should suffice.As mentioned, the Time Capsule is not a perfect solution either. The enhanced tracker is far larger and heavier than a standard AirTag. It does, however, bring full waterproofing (IP69) to the table. For reference, a retail AirTag is only splash, water, and dust resistant with a rating of IP67.There is also the added cost. The battery case retails for $19.99, plus you will need to factor in the cost of whatever AA batteries you install. This cost is somewhat offset by not having to buy a new coin cell battery every year for your stock AirTag. The energy consumption difference equates to two AA batteries once every decade versus one coin cell every year.Those interested in picking up a Time Capsule can do so over on Amazon. Units are in stock as of this writing and can arrive in time for the holidays, making this a great stocking stuffer. Apple AirTags start at $29 each, or $99 for a four-pack, and come with free engraving. A four-pack of Energizer Ultimate Lithium batteries will set you back $12.99. // Related Stories

Artemis II Core Stage Moves to High Bay 2Although it wont be blasting off until mid-2026 at the earliest, preparations are already well underway for the launch of NASAs highly anticipated Artemis II mission.Recommended VideosThe endeavor will involve the Orion spacecraft carrying its first-ever crew toward the moon after being launched by NASAs Space Launch System (SLS) rocket. The Orion will come within 80 miles of the lunar surface before circling the moon and returning home.Please enable Javascript to view this contentThis week, NASA shared a time-lapse video (top) showing the rockets 212-foot-tall core stage being moved from a horizontal position to an upright position in High Bay 2 at the Vehicle Assembly Building at NASAs Kennedy Space Center in Florida.RelatedWith the move to High Bay 2, NASA and Boeing technicians now have 360-degree access to the core stage both internally and externally, the space agency said in a comment accompanying the video.The core stage of NASAs SLS rocket inside the Vehicle Assembly Building at the Kennedy Space Center in Florida. NASAThe core stage of NASAs SLS rocket is a key component of the vehicle as its the main booster of three that propels the rocket and spacecraft or whatever other payload it might be carrying into space. It plays a critical role in supporting the entire structure of the SLS rocket, carrying the weight of both the payload and the upper stages, while also housing avionics systems that control flight operations.The core creates around 1.6 million pounds of thrust at launch, while its two side boosters generate around 3.6 million pounds of thrust, creating a total thrust of about 8.8 million pounds. This makes it one of the worlds most powerful rockets, though its significantly less powerful than SpaceXs Starship rocket, which generates a colossal 17 million pounds of thrust when it leaves the launchpad.NASAs SLS rocket has flown only once to date, in the Artemis I mission in 2022 that was essentially an uncrewed rehearsal for the upcoming Artemis II mission.The SLS is at the center of NASAs Artemis program, and following a successful Artemis II mission will carry a crew to lunar orbit, after which theyll transfer to a SpaceX Starship spacecraft for the first visit by NASA astronauts to the surface of the moon since 1972. The mission, Artemis III, had been targeting 2026 but was recently pushed by NASA to no earlier than 2027.Editors Recommendations

Popular tech YouTuber Marques Brownlee, aka MKBHD, has just announced his selection for best smartphone of 2024 and, no, its not an iPhone.In a new video that dropped for his 19.7 million followers on Thursday, Brownlee began by giving a shout-out to some of his top selections in the smartphone space, saving his top choice until the very end.Recommended VideosMy philosophy here is, Im rewarding overall greatness, the YouTuber said while sitting at a table laden with smartphone releases from the last 12 months.Please enable Javascript to view this contentRunners-up included the Vivo X200 Pro for being in the got it all territory its got the awesome, super bright screen, its got the great chipset, its got these incredible cameras and that shooting experience, great battery life, superfast charging, he said. What it doesnt have is maybe just the Snapdragon 8 Elite chip at this point, although it does have a pretty great MediaTek chip thats no slouch.RelatedBrownlee also singled out Googles Pixel 9 Pro Fold for being such a big comeback story for the Pixel Fold series and being such a good phone.The base iPhone 16 not the Pro version also caught the YouTubers attention for being the most complete base iPhone ever made, adding that this was a really good year for not spending $1,500 on an iPhone.Before announcing his winner, he also gave a nod to his current daily driver, the Googles Pixel 9 Pro XL. I use the XL over the smaller one just because of the extra battery life, Brownlee said.So, with those phones out of the way, can you guess which device he announced as the best smartphone of 2024?Drumroll, please! The winner is the Samsung Galaxy S24 Ultra.This phone is just so good at everything, literally everything, Brownlee said. He loves it for its great screen, a great chip a great battery, great cameras, great software, great support, great durability, even the anti-reflective coding on the screen is way above average. Even the vibration motor is good, even the speakers are good. Yes, he really likes the Galaxy S24 Ultra.The YouTuber added that over the last seven or so years of reviewing smartphones, this is the phone that hes returned to more than any other after reviewing a handset.However, he added that the selection might be the most boring choice here, in part because the phones design hasnt changed since the Galaxy S22 Ultra.In its own review of the Galaxy S24 Ultra, Digital Trends called it the best Ultra ever, noting that its not a refreshed design that makes a true upgrade, its new features, new technology, and lifestyle-enhancing alterations and, as Brownlee would agree, it clearly delivers on these points.Editors Recommendations