New research found alarming rates of data collection and sharing among today's top fitness apps, with Strava and Fitbit being the most data-hungry.

Honda says its new line-up of electric vehicles will go on sale in 2026.

Witness the magic of Disneys Mufasa: The Lion King as MPCs celebrated Character Lab brings Taka and a cast of beloved characters to life! With more than 118 unique animals created for the film, from iconic characters such as Mufasa, Scar, Pumbaa, Timon, and Rafiki, the team truly pushed the limits of photorealistic animation.Each character was designed to perfection, from the detailed bone and muscle structures to the lifelike fur and realistic textures. It was hard to achieve something as true to life as realistic fur; however, Loma, MPCs inhouse grooming system, made the whole difference here. It helped the team to create some of the most detailed fur ever, dressing each character with an uncanny realism.The result is a breathtaking visual experience that pays homage to the legacy of The Lion King, immersing audiences in the rich, vibrant world of the Pride Lands like never before.The post Mufasa: The Lion King MPCs Character Lab Brings Taka to Life appeared first on Vfxexpress.

Step into a world of visually breathtaking beauty, courtesy of a great team and masterful craftsmanship: from intricately designed holographic bloodline displays to the sheer realism of one million grains of sand sliding across Arrakis. Every visual effect was created to enhance the scale and depth of the epic story, moving viewers to a desert planet so harshly beautiful that one wonders how human hearts can still endure.The reel showcases the perfect blend of cutting-edge technology and artistic precision to create immersive environments, lifelike creatures, and seamless integration of effects with live-action footage. Image Engines team worked hard to honor the rich legacy of the Dune franchise, bringing Frank Herberts vision to life with unparalleled attention to detail. With its groundbreaking visual effects, Dune: Prophecy promises to be an unforgettable cinematic experience.The post Dune: Prophecy Breakdown Reel by Image Engine VFX appeared first on Vfxexpress.

Electronics brand LG has unveiled a pair of projectors designed to blend in with modern homes at this week's CES tech fair.Named the PF600U and the CineBeam S (model PU615U), the projectors are the latest additions to LG's range of "lifestyle projectors", which aim to optimise spatial efficiency so they can be used in compact residential contexts.In a statement released ahead of the Consumer Electronics Show (CES), the company described the PF600U as a "versatile device" that "transforms living spaces with its multifunctionality".LG has unveiled the PF600U and the CineBeam S at this week's CES tech fair"Serving as a projector, Bluetooth speaker and LED mood lamp, it can tailor any room's ambiance to the user's preferences," said LG."Whether enjoying a private theatre, soothing visuals or a mood-lit listening session, it effortlessly curates a distinctive experience that enriches the moment."The PF600U's design was informed by floor lamps, with a circular base and upright pole supporting a 110-degree tilting head with automatic screen adjustment for projecting images onto a nearby wall.The PF600U functions as a projector, Bluetooth speaker and LED mood lampThe device supports 1080p Full HD resolution, along with 300 ANSI lumens of brightness and can project a screen size from 30 to 120 inches onto a nearby wall.Incorporated within the disc-shaped head are stereo speakers and an LED lamp that has nine colours and five brightness levels, allowing users to adapt the environment to match their mood.The PF600U's design is inspired by floor lampsThe CineBeam S is described as LG's smallest 4K UST (ultra-short throw) projector, with compact dimensions of just 110 x 160 x 160 millimetres and a minimalistic metallic finish intended to complement modern interiors.The device delivers 4K Ultra HD (3,840 x 2,160) resolution and 500 ANSI lumens of brightness. It is capable of projecting images ranging from 40 to 100 inches onto surfaces just a few inches away.This ultra-short throw capability means the CineBeam S can be located on a shelf or unit placed very close to the projection surface, therefore optimising space without compromising on image quality.Read: LG Display develops stretchable screen capable of expanding 50 per centThe product features a built-in stereo sound system and is powered by LG's webOS software, which provides access to popular streaming platforms.Both the CineBeam S and the PF600U adjust the screen automatically to ensure optimal alignment and easy set up in various room configurations.The CineBeam S is LG's smallest 4K ultra-short throw projector to dateAccording to LG vice president YS Lee, the two new devices "set a standard for lifestyle projector that cater to diverse spaces and user demands"."LG is dedicated to delivering versatile projectors that adapt to different moods and lifestyles while seamlessly integrating into various environments, elevating the everyday experiences of modern users," added Lee.The CineBeam S and PF600U join LG's line up of lifestyle products that use the latest technologies to offer innovative solutions for domestic settings.The projector's ultra-short throw capability optimises space without compromising on qualityAt last year's CES, the brand unveiled an OLED television with a transparent screen that does not need to be placed against a wall like a traditional screen, as well as an AI robot that can perform various household tasks.The annual CES fair is taking place in Las Vegas from 7-10 January 2025. It is widely recognised as the tech industry's leading trade fair and is the setting for many of the year's biggest product launches.Other innovations showcased at this year's CES include a testing kit for monitoring hormone levels at home. Last year, health tech company Withings launched a device at CES that allows users to conduct several routine medical checks at home.The photography is courtesy of LG.CES 2025 takes place at various locations in Las Vegas from 7 to 10 January 2025. SeeDezeen Events Guidefor an up-to-date list of architecture and design events taking place around the world.The post LG reveals 3-in-1 "lifestyle projector" that is also a lamp and speaker appeared first on Dezeen.

TikTok is challenging a possible ban or forced sale to new owners in the United States, but has for several years been waging other fights in at least 20 countries.

We know for a fact that Nintendowillbe unveiling its next-gen console sometime before the end of this fiscal year (which runs until March 31), but as some may have expected, in the absence of anything official, unofficial leaks are continuing to pick up pace.For instance, the Nintendo Switch 2s logo now seems to have leaked. Prominent Nintendo leaker Necro Felipe Lima, whos the editor-in-chief of Universo Nintendo, recently took to Twitter and shared what he claims is an exact recreation of the upcoming Switch successors logo. Lima claims its based on a photo of the console that was sent to him by a reliable source.Recent days have brought several Switch 2 leaks courtesy of accessory manufacturers, while images of the consoles new magnetic JoyCon controllers have also emerged online. A recent patent also seemed to corroborate previous leaks of the console making use of upscaling technology.As per Circana analyst Mat Piscatella, the Switch 2 is projected to sell 4.3 million units in 2025 in the US alone. Read more on that through here.Bom dia e posso dizer que, pela primeira vez obtive acesso logo do Nintendo Switch 2 graas a uma foto do console que uma fonte confivel me enviouCom base no que vi e respeitando as medidas, recriei e ela ser EXATAMENTE assim: pic.twitter.com/ON4Yu7FLe0 Necro Felipe #UnivNintendo (@necrolipe) January 8, 2025

Jan 09, 2025Ravie LakshmananZero Day / VulnerabilityIvanti is warning that a critical security flaw impacting Ivanti Connect Secure, Policy Secure, and ZTA Gateways has come under active exploitation in the wild beginning mid-December 2024.The security vulnerability in question is CVE-2025-0282 (CVSS score: 9.0), a stack-based buffer overflow that affects Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3."Successful exploitation of CVE-2025-0282 could lead to unauthenticated remote code execution," Ivanti said in an advisory. "Threat actor activity was identified by the Integrity Checker Tool (ICT) on the same day it occurred, enabling Ivanti to respond promptly and rapidly develop a fix."Also patched by the company is another high-severity flaw (CVE-2025-0283, CVSS score: 7.0) that allows a locally authenticated attacker to escalate their privileges. The vulnerabilities, addressed in version 22.7R2.5, impact the following versions -CVE-2025-0282 - Ivanti Connect Secure 22.7R2 through 22.7R2.4, Ivanti Policy Secure 22.7R1 through 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2 through 22.7R2.3 CVE-2025-0283 - Ivanti Connect Secure 22.7R2.4 and prior, 9.1R18.9 and prior, Ivanti Policy Secure 22.7R1.2 and prior, and Ivanti Neurons for ZTA gateways 22.7R2.3 and prior Ivanti has acknowledged that it's aware of a "limited number of customers" whose appliances have been exploited due to CVE-2025-0282. There is currently no evidence that CVE-2025-0283 is being weaponized.Google's owned Mandiant, which detailed its investigation into attacks exploiting CVE-2025-0282, said it observed the deployment of the SPAWN ecosystem of malware. The use of SPAWN has been attributed to a China-nexus threat actor dubbed UNC5337, which is assessed to be a part of UNC5221 with medium confidence.The attacks have also culminated in the installation of previously undocumented malware families dubbed DRYHOOK and PHASEJAM. Neither of the strains has been linked to a known threat actor or group.The exploitation of CVE-2025-0282, per the cybersecurity company, entails performing a series of steps to disable SELinux, prevent syslog forwarding, remount the drive as read-write, execute scripts to drop web shells, use sed to remove specific log entries from the debug and application logs, re-enable SELinux, and remount the drive.One of the payloads executed using the shell script is another shell script that, in turn, runs an ELF binary responsible for launching PHASEJAM, a shell script dropper that's designed to make malicious modifications to the Ivanti Connect Secure appliance components."The primary functions of PHASEJAM are to insert a web shell into the getComponent.cgi and restAuth.cgi files, block system upgrades by modifying the DSUpgrade.pm file, and overwrite the remotedebug executable so that it can be used to execute arbitrary commands when a specific parameter is passed," Mandiant researchers said.The web shell is capable of decoding shell commands and exfiltrating the results of the command execution back to the attacker, uploading arbitrary files on the infected device, and reading and transmitting file contents.There is evidence to suggest that the attack is the work of a sophisticated threat actor owing to the methodical removal of log entries, kernel messages, crash traces, certificate handling errors, and command history.PHASEJAM also establishes persistence by covertly blocking legitimate updates to the Ivanti appliance by rendering a fake HTML upgrade progress bar. On the other hand, SPAWNANT, the installer component associated with the SPAWN malware framework, can persist across system upgrades by hijacking the execution flow of dspkginstall, a binary used during the system upgrade process.Mandiant said it observed various publicly-available and open-source tunneling utilities, including SPAWNMOLE, to facilitate communications between the compromised appliance and the threat actor's command-and-control (C2) infrastructure.Some of the other post-exploitation activities carried out are listed below -Perform internal network reconnaissance using built-in tools like nmap and digUse the LDAP service account to perform LDAP queries and move laterally within the network, including Active Directory servers, through SMB or RDPSteal application cache database containing information associated with VPN sessions, session cookies, API keys, certificates, and credential materialDeploy a Python script named DRYHOOK to harvest credentialsMandiant also cautioned that it's possible multiple hacking groups are responsible for the creation and deployment of SPAWN, DRYHOOK, and PHASEJAM, but noted it doesn't have enough data to accurately estimate the number of threat actors targeting the flaw.In light of active exploitation, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-0282 to the Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to apply the patches by January 15, 2025. It's also urging organizations to scan their environments for signs of compromise, and report any incident or anomalous activity.Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Time zones: SBT (UTC +11), GMT (UTC +0), CET (UTC +1), EET (UTC +2), MSK (UTC +3)Help Developers Build Amazing Experiences with Maps!Are you passionate about connecting with developers, fostering vibrant communities, and shaping the future of online mapping? At MapTiler, we're looking for a talented and driven Developer Advocate/Community Manager to champion our platform and empower developers worldwide.Your MissionBe the bridge between MapTiler and the developer community:Build Community: Grow and engage our developer ecosystem on Reddit, GitHub, Hacker News, and more.Advocate for Developers: Represent developer needs and feedback to our product and engineering teams.Create Content: Develop tutorials, blogs, and sample code that educate and inspire.Provide Support: Answer questions, troubleshoot, and guide developers to success.Spot Trends: Stay updated on web development and mapping trends to connect with the community.Collaborate & Optimize: Work with product teams and measure your impact to drive improvement.What You BringDeveloper Focus: A passion for helping developers succeed and solving their pain points.Technical Skills: Experience in web development (JavaScript) and web mapping concepts.Community Savvy: Active in developer spaces like GitHub and Stack Overflow, with a positive reputation.Strong Communicator: Explain technical ideas clearly in writing and speech (C1+ English).Proactive & Collaborative: Independent and a great team player with a thirst for learning.Bonus PointsExperience in a Developer Advocate, Community Manager, or similar B2D (Business-to-Developer) role.Prior experience working with web mapping APIs or libraries (Leaflet, OpenLayers, Mapbox GL JS, etc.).Knowledge of GIS (Geographic Information Systems) principles.Familiarity with the market trends in online map visualization.What We OfferCompetitive Compensation: Hourly fixed salary based on your experience, plus an annual performance bonus (potentially multiples of your monthly salary!).Flexibility: Flexible working hours to fit your lifestyle.Location: Work from our beautiful office in Brno, Czech Republic, or remotely from within Europe.Top-Tier Equipment: We'll provide you with the hardware you need to succeed (e.g. laptop and widescreen external LCD).Global Impact: Work with interesting clients and world-famous companies from around the globe.Growth & Development: We're committed to your long-term professional growth and offer ample opportunities for learning and advancement.Awesome Team: Join a friendly and supportive team that loves to celebrate success (regular team-building events in Czechia and Switzerland!).See all the work benefits.About usYouve likely used MapTiler without knowing it! Our maps power weather apps, travel sites, and tools for humanitarian crises, reaching over 350 million users monthly. Join us to make an even greater impact! Read more about the MapTiler team and watch what we do worldwide.Ready to help developers create the next generation of amazing map experiences? Apply now!

Normally, CES brings a raft of display announcements, but it seems a bit quieter this year. That's not to say there's nothing notable: In addition to a new spate of 27-inch 4K/240Hz displays and 1440p/500Hz options forthcoming, there are some novelties as well.But in addition to monitors, there were some specification announcement updates that you'll run into as we head into 2025. They include:VESA DisplayHDR True Black 600:OLED has traditionally gotten a pass on brightness in VESA's HDR display certification because it's really hard to make OLED really bright, and it's got great contrast regardless. But highlights matter, so I'm glad to see the brightness levels creep up. I'm not sure whether we'll see it first on laptop screens or desktop monitors.New VESA ClearMR tiers:ClearMR is VESA's standard for a way to certify and convey motion clarity (really more of the lack of motion artifacts) by evaluating the contrast of a screen element in motion (the ratio of clear edges to blurry edges. As refresh rates rise, so does the metric and as refresh rates have been rising...VESA added three new levels: ClearMR 15000, 18000 and 21000.DisplayPort 2.1b:Monitors have barely ramped up on support for DP 2.1a, but the DisplayPort Association is way ahead of them. The DP 2.1b standard it announced at CES is really about a new DP80LL active cable specification necessary for long cables to carrying 2.1a bandwidth signals (80Gbps) without disruption or degradation. For monitors, you'll want DP 2.1 in order to handle 4K at high refresh rates or real HDR (or 8K, if you're going there) without having to rely on display stream compression.HDMI 2.2: HDMI 2.1 brought variable refresh rate support, key for connecting a monitor to a TV or console; HDMI 2.2 raises the bandwidth to 96Gbps (you'll need a new Ultra96 HDMI cable!) including an upgrade to the bandwidth of HDMI Fixed Rate Link technology. That means potentially higher refresh rates when connecting to consoles, although probably not until the next gen arrives. LG LG UltraGear 45GX990A Dual-mode, 5K2K, bendable OLED LG launched a new GX9 line of UltraGear gaming monitors at CES 2025, with debut models 45GX990A, 45GX950A and 39GX90SA -- as the names indicate, two 45-inch and one 39-inch displays. GX9 designates the company's "premium OLED gaming monitors," which I guess means all the latest features. The most interesting of the three (to me, at least), is the 45GX990A, because it's the most kitchen-sinkiest of the three -- relative high resolution (5,120 x 2,160), support for multiple picture sizes and refresh rate configurations (dual mode) and a curved-to-flat bendable screen (like the Corsair Xeneon).The 39-inch model incorporates WebOS, to make it "smart" -- operate standalone to run apps and stream. Samsung/CNET Samsung Odyssey OLED G6 G60SF High-refresh OLED Samsung announced a handful of monitors at CES 2025, and this looks like the most notable -- or at least newsworthy -- gaming monitor. Mostly because gamers get excited by high numbers (except if it's latency). In this case, the company has updated its G6 line with a 500MHz refresh rate version of its 1440p, 27-inch OLED.The company also revealed that the 3D display it teased at last year's showis now a real product, and it's for gamers. Like competitors, the 27-inch Odyssey 3D (G90XF) uses a lenticular layer plus eye tracking to create a 3D view.There's also a new Odyssey G8 (G81SF), which the company claims is the first 27-inch 4K OLED. Both support DisplayHDR True Black 400. Asus/CNET Asus ROG Strix OLED XG27AQDPG Another speedy OLED Asus' ROG gaming line has similar offerings to Samsung, including a 27-inch, 4K/240Hz QD-OLED (ROG Swift OLED PG27UCDM) and a 27-inch, 1440p/500Hz QD-OLED (ROG Strix OLED XG27AQDPG); it makes sense that the new models are similar because Samsung makes the panels. Josh Goldman/CNET Dell 32 Plus S3225QC QD-OLED monitor The speakers make it Dell made some minor refreshes to its Alienware monitors, instead leaving the most interesting changes to its mainstream S series. Its new QD-OLED is pretty typical for its type -- 32 inches, 4K/120Hz, USB hub. But this model adds custom-tunable 3D Spatial Audio with AI-driven head-tracking and beamforming technology. I got to try the monitor before CES, and while it won't replace spatial headphones for 360-degree sound, it's pretty good at widening stereo to about 180 degrees; possibly better, because the audio I listened to wasn't really surround. And even if you don't care about the spatial aspect, it has dual 5-watt speakers that offer more power than you typically get from ones built into displays. HP/CNET HP Omen 32X Smart Gaming Monitor Now with Google inside This is a pretty run-of-the-mill mainstream gaming monitor -- 32 inches, 4K/144Hz -- but the little difference here is that HP has incorporated Google TV to compete with LG, Samsung and others in order to offer standalone cloud gaming and streaming app support, along with Android. Other companies who've offered this capability generally have their own TV operating systems on which to build these features. MSI MSI MPG 322URX DisplayPort 2.1a arrives There may be other displays which debuted DisplayPort 2.1a support, but if few of the manufacturers are highlighting it except MSI -- and as long as the company is shouting it, we might as well highlight that model. Like others mentioned here, this is a 4K/240Hz QD-OLED, and the high resolution/refresh rate, high bit-depth combo can use the extra bandwidth of the new standard.MSI announced the deluge of monitors we're used to seeing at CES, but a few strike me as notable. Like the me-too 27-inch 500Hz QD-OLED (MPG 272QR QD-OLED X50), as well as a 24-inch, 1080p/600Hz model (MPG 242R X60N) which uses a Rapid TN panel.It's not all about gaming, though: one highlight is a 24-inch USB-C portable monitor. I don't really think of 24 inches as portable, but I'm also not six-feet-plus tall. Corsair Corsair Xeneon 14.5-inch touchscreen System control at your fingertips This isn't a traditional monitor, but it's an interesting concept: a small, standalone touchscreen (2,560x720 resolution at 60Hz) that you can use for apps, system metrics and more. Yeah, you can do all that from your main screen, but if you're kitting out a gaming system, this looks way cooler -- you can even mount it inside. There isn't much detail about it available yet, though.