Author: Matthew Miller

Quick Overview

• Wi-Fi 7 offers enhanced speeds and improved reliability but may not be ideal for homes with legacy devices.
• Multi-Link Operation (MLO) in Wi-Fi 7 can create complications for devices limited to 2.4GHz.
• Numerous smart home devices do not support the advanced functionalities of Wi-Fi 7.
• Wi-Fi 6 may be a better fit for residences with both old and recent devices.

Understanding Wi-Fi 7

Wi-Fi 7 represents the most recent advancement in wireless tech, offering unmatched speeds and the ability to accommodate multiple devices at once. However, these benefits come with drawbacks, especially regarding older smart home gadgets.

The Promised Future That Didn’t Fully Materialize

Wi-Fi 7 aims for backward compatibility to support older devices. However, many of these devices experience difficulties connecting to Wi-Fi 7 mesh networks. A key feature, Multi-Link Operation (MLO), intends to minimize lag by allowing devices to link across various bands. Unfortunately, this often results in confusion for older devices that are limited to the 2.4GHz band, resulting in frequent disconnections.

Is Speed a Necessity?

For numerous users, the transition from Wi-Fi 6/6E to Wi-Fi 7 may not be noticeable. If your NBN plan is under gigabit speeds, or if your primary usage centers around internet streaming and browsing, Wi-Fi 6/6E is still adequate. Those who transfer sizable files within their home network may find Wi-Fi 7’s advantages more beneficial.

Common Challenges

Problems with Wi-Fi 7 are widespread. Reports from forums and technology sites frequently indicate that most smart home IoT devices still rely on the 2.4GHz band, which is not optimally supported by Wi-Fi 7 systems. Router manufacturers, such as Asus and TP-Link, have recommended deactivating Wi-Fi 7’s advanced features to preserve connectivity, effectively reverting to Wi-Fi 6.

Older Smart Home Gadgets

Households with a range of devices, from new to over five years old, encounter issues with Wi-Fi 7. Items like smart hot water heaters and air conditioners, which depend on 2.4GHz connectivity, face struggles with the automatic band-switching features of Wi-Fi 7, leading to frequent connection interruptions.

Replacing Devices Isn’t Always the Solution

The idea of swapping out incompatible devices isn’t a feasible option for many. The expense of replacing high-value appliances that operate satisfactorily on older Wi-Fi standards can be daunting. Numerous smart home devices are not yet designed to accommodate the latest Wi-Fi technologies, rendering replacement an impractical remedy.

Returning to Wi-Fi 6

After experimenting with Wi-Fi 7 systems, reverting to a Wi-Fi 6 mesh system showed to be more effective for sustaining stable connections among mixed device types. For example, the D-Link Aquila Pro AI M60 mesh system supports both 2.4GHz and 5GHz bands, allowing older devices to stay connected without interruptions.

Conclusion

While Wi-Fi 7 delivers advanced features and enhancements, it may not be suitable for homes with a diverse range of smart home devices, particularly those that depend on 2.4GHz. Wi-Fi 6 continues to be a strong and dependable option for such settings, balancing speed and compatibility efficiently.

Q&A

Q: What is the Multi-Link Operation (MLO) in Wi-Fi 7?

A: MLO enables devices to connect across multiple frequency bands at the same time, aiming to decrease lag and enhance congestion management.

Q: Why do older devices find it hard to use Wi-Fi 7?

A: Many older devices only work with the 2.4GHz band and cannot manage the automatic band-switching employed by Wi-Fi 7 systems.

Q: Can turning off Wi-Fi 7 features enhance connectivity?

A: Yes, deactivating features like MLO can aid devices in connecting more reliably, but it effectively converts your Wi-Fi 7 router into a Wi-Fi 6 router.

Q: Is Wi-Fi 6 still a viable option?

A: Certainly. Wi-Fi 6 provides solid performance and compatibility for households with a blend of old and new devices.

Q: How should consumers choose between Wi-Fi 6 and Wi-Fi 7?

A: Evaluate the types of devices present in your home and their compatibility with newer standards. If you possess many older 2.4GHz devices, Wi-Fi 6 might be the better choice.

Quick Overview

• A widely-used JavaScript library, Axios, with more than 100 million downloads weekly, was breached in a supply chain attack.
• The assault targeted npm’s Axios library to spread a remote access trojan across various systems.
• The harmful version, plain-crypto-js@4.2.1, was released following the establishment of a deceptive sense of security with a legitimate version.
• Developers are recommended to revert to axios@1.14.0 or axios@0.30.3.
• Indicators of compromise consist of network connections to sfrclak.com and certain file paths on macOS, Windows, and Linux.
• The incident is connected to an advanced persistent threat (APT) entity concentrating on data collection and credential theft.

Investigating the Axios Supply Chain Incident

The popular JavaScript library Axios has faced a supply chain breach impacting over 100 million downloads each week. The attack aimed at Windows, Linux, and macOS platforms, introducing a remote access trojan (RAT) via harmful dependencies.

Analyzing the Axios Attack

The breach involved the compromise of the npm account held by Axios’ main maintainer, Jason Saayman. By switching the registered email to a ProtonMail address, the attacker manually uploaded harmful packages, circumventing the GitHub Actions continuous integration system.

Phases of the Breach

The intruder initially launched a non-malicious version, plain-crypto-js@4.2.0, to create a credible npm publishing record. The malicious iteration, plain-crypto-js@4.2.1, was then released, designed to evade security scans.

Steps for Developers to Take Immediately

Those utilizing Axios should promptly revert to either axios@1.14.0 or axios@0.30.3. Analyzing network logs for connections to sfrclak.com and specific file paths may assist in detecting possible compromises.

Takeaways from the Open Source Malware Community

The Open Source Malware community characterized Axios as one of the most utilized JavaScript libraries worldwide. They emphasized the attack’s complexity, utilizing obfuscation and anti-analysis tactics to implement RAT features across platforms.

Conclusion

This prominent supply chain attack on the Axios npm package highlights the weaknesses in prevalent software dependencies. The attack’s complexity and emphasis on data collection imply participation from an advanced persistent threat actor, rather than financially-driven cybercriminals.

Q: What is Axios?

A: Axios is a widely-used HTTP client library for JavaScript, heavily employed in web development to perform HTTP requests.

Q: How was the Axios package compromised?

A: The breach involved a malicious entity taking control of the npm account of the package’s maintainer, releasing a harmful dependency that introduced a remote access trojan.

Q: What actions should developers take to safeguard their projects?

A: Developers should revert to secure versions of Axios (axios@1.14.0 or axios@0.30.3) and scrutinize network logs for unusual activity.

Q: What are the signs of a compromised system?

A: Signs include network connections to sfrclak.com and particular file paths on macOS, Windows, and Linux platforms.

Q: Who is believed to be responsible for the attack?

A: The attack is thought to be orchestrated by an advanced persistent threat actor, prioritizing intelligence gathering over financial incentives.

Brief Overview

• A council in Western Australia lost $350,000 due to a phishing scam.
• This event is featured in a report emphasizing the IT vulnerabilities in local jurisdictions.
• Social engineering attacks are a frequent risk for organizations.
• Education and awareness are crucial in thwarting cyber threats.
• Only one organization met the access management standards during the audit.

Phishing Incident Reveals IT Weaknesses in WA Local Councils

A Western Australian council incurred a loss of around $350,000 due to a phishing scam, illuminating the ongoing weaknesses in local government IT infrastructures. This incident, presented in the report from the Western Australian Office of the Auditor General (OAG), brings attention to the continuous hurdles local authorities encounter in protecting their digital frameworks.

Exploiting Vulnerabilities

The audit characterizes this event as a successful social engineering tactic, wherein criminals exploited the council’s financial system to change a supplier’s account information. The report does not disclose if the misappropriated funds were recovered or which specific council was involved.

Prevalent IT and Security Issues

In addition to the significant phishing incident, the report uncovers further security deficiencies. In a concerning example, a council’s internal networks were reachable from a public library due to insufficient network controls. Another organization failed to update default administrator passwords, creating vulnerabilities in its building management system. Additionally, a server room in another council lacked fire suppression measures, raising alarms about physical security.

Access Management Deficiencies

Weak access management practices were identified as the most widespread vulnerability, with 78 issues detected across 36 organizations. Only one entity complied with the access management criteria, while merely two entities adhered to the endpoint security protocols. Such shortcomings heighten the likelihood of data breaches, financial setbacks, and damage to reputation.

Decline in Capability Maturity

The audit evaluated 15 organizations, revealing a decrease in capability maturity across all 10 control categories compared to the preceding year. This decline is partly due to the inclusion of four new entities, but previously examined organizations also exhibited drops in various categories.

Emphasis on Training Instead of Technology

Auditor General Caroline Spencer stressed the significance of training and awareness over expensive technological solutions. She advised the adoption of phishing-resistant multi-factor authentication, regular security awareness programs, pre-employment background checks for sensitive positions, and efficient offboarding protocols.

Upcoming Cyber Security Projects

The WA Department of Local Government, Industry Regulation and Safety is partnering with the Office of Digital Government on a cyber security pilot initiative aimed at bolstering the local government sector’s defences against cyber threats. This report signifies the seventh iteration of the OAG’s audit on general computer controls pertaining to local government entities.

Conclusion

The phishing incident that resulted in a $350,000 loss for a WA council underscores the urgent necessity for enhanced cyber security practices within local governments. The OAG’s findings shed light on persistent vulnerabilities and highlight the critical role of training and awareness in countering cyber threats. These insights are intended to assist local authorities in strengthening their digital safeguards and protecting taxpayer information from malicious threats.

Q: What primarily caused the phishing incident?

A: The phishing incident was brought about by a social engineering attack that interfered with the council’s finance system to change a supplier’s account information.

Q: Were the misappropriated funds recovered?

A: The report does not clarify whether the $350,000 was recovered.

Q: How many organizations were included in the audit?

A: The audit reviewed 15 selected organizations.

Q: Which IT weakness was found to be most common?

A: The most prevalent weakness was inadequate access management controls, with 78 issues identified across 36 organizations.

Q: What recommendations are provided to avert similar occurrences?

A: The report advises the implementation of phishing-resistant multi-factor authentication, regular security awareness training, pre-employment vetting for trusted roles, and effective offboarding practices.

Q: Is investment in technology essential to resolve these issues?

A: No, the Auditor General indicates that training and awareness are of greater importance than hefty technology expenditures.

Q: What future initiatives are planned to enhance cyber security?

A: The WA Department of Local Government, Industry Regulation and Safety is undertaking a cyber security pilot project alongside the Office of Digital Government to boost resilience within the local government sector.

Quick Read

• Meta and EssilorLuxottica enhance smart eyewear with fresh Ray-Ban and Oakley designs.
• New models like Blayzer and Scriber emphasize comfort and compatibility with prescriptions.
• Oakley collection upgraded with Prizm and Transitions lenses suited for various settings.
• Glasses now provide real-time translation in 20 additional languages.
• Available in Australia from 15 April, priced from A$709.

Addressing the Need for Daily Use

The fresh Ray-Ban Meta Optics Styles unveil the Blayzer and Scriber frames, both crafted for comfort throughout the day and designed to work with prescription lenses. The Blayzer features a timeless rectangular design, while the Scriber offers a rounded aesthetic, appealing to a variety of style preferences.

Meta has focused on ergonomics with elements like overextension hinges, replaceable nose pads, and adjustability in temple tips by opticians, ensuring a customized fit for every user.

New Colours and Oakley Expansion

Alongside classic black frames, seasonal colours like Transparent Dark Olive and Matte Transparent Peach enhance the range. For active enthusiasts, Oakley’s Vanguard and HSTN models now offer a wider selection of Prizm and Transitions lenses, optimized for various activities.

The addition of Prizm Dark Golf lenses boosts functionality, allowing users to engage in sports like golf with better visual contrast while remaining connected via the AI assistant.

Eliminating Language Barriers

The software of the glasses receives a major update, now capable of translating speech in real-time across 20 new languages, including Mandarin and Arabic. This makes the eyewear a valuable asset for international travel, facilitating smooth communication without relying on a smartphone.

Meta is also broadening its retail footprint into regions like Japan, Korea, and Singapore, indicating strong confidence in the global market for smart eyewear.

Pricing and Availability in Australia

In Australia, the new Ray-Ban Meta Optics Styles will launch from select optical retailers on 15 April, starting at A$709. The Oakley collection will follow with staggered introductions in May, featuring new Prizm Transitions options.

A New Chapter for the Vision Impaired

With the integration of prescription support, Meta’s smart glasses evolve from a niche gadget to a mainstream eyewear choice. Their similarity to conventional high-end Ray-Bans is a notable benefit, delivering advanced features such as live translation and discreet photo capture.

Concluding Thoughts

If you’ve been anticipating the evolution of smart glasses into a functional daily accessory, this new launch might be your signal. With enhanced comfort, a broader array of style choices, and advanced lens technology, these glasses offer an enticing fusion of style and practicality. Stay tuned for an in-depth review once we get firsthand experience with them in Australia.

Summary

Meta’s latest enhancements to its smart eyewear collection, showcasing new Ray-Ban and Oakley styles, signify a substantial progression in wearable technology. With better comfort, diverse styles, and useful features like real-time translation, these glasses present an appealing option for tech-savvy eyewear users.

Q&A

Q: What new frame styles has Meta introduced?

A: Meta has unveiled the Blayzer and Scriber frames, focusing on comfort and prescription compatibility.

Q: What new colours are now available for the Ray-Ban frames?

A: New seasonal hues include Transparent Dark Olive and Matte Transparent Peach, among others.

Q: How do the Oakley models improve functionality for active users?

A: Oakley’s Vanguard and HSTN models now incorporate Prizm and Transitions lenses, designed for various environments.

Q: In what languages can the glasses now provide real-time translation?

A: The glasses can translate spoken language in 20 new languages, including Mandarin, Japanese, Korean, and Arabic.

Q: When will the updated smart eyewear be released in Australia?

A: The Ray-Ban Meta Optics Styles will be available starting from 15 April, with Oakley styles arriving in May.

Q: What is the initial price point for the new smart glasses in Australia?

A: The initial pricing for the new collection is A$709.