Category: Australia Tech News

Brief Overview

• Google’s AI sector is experiencing shifts in leadership.
• Demis Hassabis, the AI head, moves to Alphabet’s chief scientist position.
• Longtime engineer Jeff Dean and others depart to create Discovery Loop.
• Koray Kavukcuoglu assumes daily management duties at Google DeepMind.
• This transition follows delays in the rollout of the Gemini model at Google DeepMind.
• Hassabis will concentrate on the development of AGI and its impact on society.

Leadership Shift at Google DeepMind

The parent company of Google, Alphabet, is reorganizing its leadership team within the AI division as Demis Hassabis, who was previously the CEO of Google DeepMind, transitions to the newly established role of Alphabet’s chief scientist. This change is intended to enable Hassabis to redirect his efforts toward guiding the development of artificial general intelligence (AGI).

Significant Leadership Adjustments

Koray Kavukcuoglu, who served as the chief technology officer, will now oversee the daily functions as the senior vice president of Google DeepMind. At the same time, several prominent leaders, including Jeff Dean, have exited Google to set up a new venture, Discovery Loop, focused on advancing machine learning and engineering.

Effects of Hassabis’s New Position

Demis Hassabis, a Nobel prize winner, aims to emphasize the social ramifications of AGI. His new role signifies a tactical shift as Google DeepMind addresses the challenges within the AI marketplace, particularly given the delays surrounding the release of its Gemini model, which have sparked concerns regarding Google’s competitive stance against firms like Anthropic and OpenAI.

Exit of Prominent Figures

Jeff Dean, along with other vital leaders, has left to establish Discovery Loop, a startup devoted to innovative research in machine learning and engineering, set up as a public benefit corporation. Discovery Loop has already garnered investments from Google and forged a partnership with its cloud division.

Challenges and Outlook

This restructuring is taking place at a pivotal moment when Google DeepMind is encountering heightened rivalry. Hassabis plans to dedicate additional time to Isomorphic Labs, an initiative focused on drug discovery, highlighting his commitment to employing AI for health improvements. He remains hopeful about the advancements in Google’s AI frameworks, including the anticipated Gemini 4.

Conclusion

The AI division of Google is experiencing noteworthy changes in leadership as it seeks to uphold its competitive edge in the swiftly changing AI sphere. With Demis Hassabis concentrating on AGI and its societal implications, alongside Jeff Dean’s move to Discovery Loop, Google DeepMind appears set for strategic realignment.

Q: Why is Demis Hassabis stepping down as CEO of Google DeepMind?

A: Hassabis is moving to the position of Alphabet’s chief scientist to prioritize the future of AGI and its societal impacts.

Q: What is Discovery Loop?

A: Discovery Loop is a new startup launched by former Google leaders, including Jeff Dean, focused on innovations in machine learning and engineering.

Q: Who will oversee the everyday operations of Google DeepMind following the changes?

A: Koray Kavukcuoglu will take on daily responsibilities as the senior vice president of Google DeepMind.

Q: What challenges is Google DeepMind currently facing?

A: Google DeepMind is experiencing delays in the Gemini model rollout and rising competition from adversaries such as Anthropic and OpenAI.

Q: How does the reorganization impact Google’s standing in AI?

A: The restructuring seeks to enhance Google’s focus on AGI and respond to competitive challenges in the AI field.

Q: What is Google’s plan for utilizing AI in healthcare?

A: Google intends to harness AI to enhance human health, with Hassabis committing more time to Isomorphic Labs for drug discovery.

Brief Overview

• MSPs can utilize a cohesive IaaS solution to lower costs and simplify processes.
• Acronis Cyber Frame provides both cloud and local variations for customized IaaS implementation.
• Incorporated security and backup solutions boost data security and operational effectiveness.
• Minimizes reliance on highly skilled IT personnel, addressing the worldwide skills shortage.
• Paves the way for new income sources by transitioning workloads from outdated systems to state-of-the-art infrastructures.

Overview of Acronis Cyber Frame

Acronis Cyber Frame, a specialized IaaS and hyperconverged infrastructure offering, is designed to assist Managed Service Providers (MSPs) and Cloud Service Providers (CSPs) in addressing ongoing challenges and tapping into new revenue sources. Acronis, a Swiss expert in cybersecurity and infrastructure, delivers this solution to empower MSPs in providing virtual machines, storage, networking services, and comprehensive security solutions.

Streamlining Tool Overload and Complexity

The Acronis Cyber Frame unifies infrastructure, protection, and management into one platform, significantly lowering the complexity and expenses linked to using numerous disconnected tools. This strategy not only simplifies the operational environment for service providers but also strengthens their capacity to deliver secure, dependable services to their customers.

Discovering Revenue Possibilities

By migrating client workloads from outdated virtualization systems to Acronis Cyber Frame, MSPs can create partner-branded cloud solutions and initiate IaaS without major hardware expenditures. This shift not only generates new revenue channels but also fosters more stable infrastructure settings.

Integrated Security and Lowered Costs

Fully incorporated into the Acronis Cyber Platform, Cyber Frame presents a complete set of tools, including backup and AI-driven anti-malware services, promoting strong data safeguarding. This integration minimizes the necessity for MSPs to maintain a large, highly skilled support staff, thereby reducing costs and alleviating the effect of the global skills deficit.

Conclusion

Acronis Cyber Frame delivers a revolutionary solution for MSPs, tackling persistent issues related to tool overload, operational complexity, and unpredictable infrastructure. Through this platform, service providers can enhance their service capabilities, optimize their operations, and unlock new revenue potentials, while ensuring high standards of security and efficiency.

Q&A Segment

Q: What is Acronis Cyber Frame?

A: It is a specialized IaaS and hyperconverged infrastructure solution aimed at assisting MSPs and CSPs in delivering integrated virtual machines, storage, networking, and security services.

Q: How does Acronis Cyber Frame aid MSPs?

A: It simplifies complexities and reduces costs by consolidating infrastructure management and security functions into one platform, allowing MSPs to introduce new income sources and enhance operational efficiency.

Q: What are the deployment choices for Acronis Cyber Frame?

A: The solution is provided in two forms: Acronis Cyber Frame Cloud, which operates from Acronis regional data centers, and Acronis Cyber Frame Local, which converts an MSP’s servers into a multitenant IaaS solution.

Q: How does Acronis Cyber Frame tackle security issues?

A: It possesses integrated functionalities like backup, AI-driven anti-malware, and endpoint protection management, lowering the risk of data breaches and ensuring business continuity.

Q: Can Acronis Cyber Frame assist with the global skills deficit?

A: Certainly, by minimizing the demand for highly skilled technical staff, it cuts down recruitment expenses and empowers existing personnel to manage reduced operational complexity, lowering the risk of burnout.

Q: What new revenue streams does Acronis Cyber Frame create?

A: It enables MSPs to transfer workloads from legacy systems to modern infrastructures, build partner-branded cloud solutions, and provide regional or sovereign IaaS offerings.

Brief Overview

• Conventional 5×5 risk matrices can give boards a misleading impression of clarity.
• Cyber threats function in a manner distinct from other risks, such as fire or flooding, rendering traditional frameworks inadequate.
• Cyber risks are fluid, necessitating prioritization models that can adapt to swift changes.
• Prioritization is essential given resource constraints and the requirements for strategic financial planning.
• Conventional models frequently oversimplify complex information, resulting in the loss of critical insights.

Recognizing the Constraints of Standard Cyber Risk Evaluation

Many cyber risk heatmaps appear orderly. They provide a clear visual summary—simple for boards to comprehend. Nevertheless, this seemingly straightforward nature contributes to the issue. Traditional 5×5 risk matrices can create a deceptive sense of clarity, often neglecting the vital question: where should the subsequent dollar of the cyber budget be allocated?

Luke Irwin, Aegis Cybersecurity

The Ever-Changing Landscape of Cyber Threats

In contrast to conventional risks such as fire or water damage, cybersecurity threats are intentional, strategic, and adaptable. Attackers may act in a targeted, opportunistic, automated, or persistent manner. Traditional risk models, designed for static threats, find it challenging to cope with this fluidity.

The Limitations of the 5×5 Framework

Corporate risk matrices generally employ long-term planning perspectives, which are poorly matched for the brisk environment of cybersecurity. Decisions must often be made in hours instead of years. The 5×5 framework can overly trivialize the intricacies of cyber threats, condensing them into a colored square that provides minimal practical direction.

Prioritisation and Resource Management

The primary obstacle is prioritisation. When numerous risks are evaluated as equally critical, organizations struggle with determining which to tackle first. This absence of prioritisation can result in poor budget distribution, lost chances for risk mitigation, and insufficient responses to dangers.

The Influence of Controls in Risk Oversight

Various controls impact risk in different manners. Multi-factor authentication may lessen the likelihood of breaches but does not mitigate the consequences of incidents. Encryption can reduce the severity of damage, yet it does not avert attacks. Monitoring and detection can alleviate damage but cannot prevent initial intrusions. A thorough cyber risk evaluation must address these subtleties.

Final Thoughts

The 5×5 framework presents the promise of structured risk oversight; however, it frequently falls short in delivering actionable insights. Cybersecurity necessitates frameworks that mirror its distinct, rapidly changing environment. Organizations require instruments that facilitate informed prioritisation and resource distribution to effectively safeguard their digital resources.

Synopsis

The conventional 5×5 risk evaluation framework is inadequate for cybersecurity, as it fails to address the dynamic, adversarial characteristics of cyber threats. Organizations require models that are more flexible and nuanced for efficiently prioritising risks and managing resources.

Q: Why are conventional risk matrices inadequate for cybersecurity?

A: Traditional matrices are tailored for static threats and do not consider the dynamic, adaptive properties of cyber threats.

Q: What distinguishes cyber threats from other risks like fire or flooding?

A: Cyber threats are intentional, targeted, and able to evolve in response to countermeasures, in contrast to static risks.

Q: How do conventional models fall short in prioritisation?

A: They often assess multiple risks as equally severe, complicating effective resource allocation.

Q: What should organizations take into account in cyber risk evaluation?

A: They should evaluate the unique impacts of different controls and the evolving nature of threats.

Q: How can organizations enhance their cyber risk management?

A: By implementing frameworks that adapt to rapid changes and offer clear prioritisation for resource allocation.

Brief Overview

• Midnight Blizzard, a Russia-affiliated group, aims at hotel Wi-Fi worldwide with CaptiveCrunch.
• Attackers seek to acquire user credentials and introduce malware through breached networks.
• Essential tools employed consist of the CornFlake RAT and ChocoShell infostealer.
• Recommended actions involve multi-factor authentication and utilizing secure travel routers.

CaptiveCrunch attack flow. Source: Microsoft

Exploring CaptiveCrunch

Since May 2026, CaptiveCrunch has infiltrated captive portal systems at hotels and various locations providing guest Wi-Fi. This effort is attributed to Storm-2945, part of the Russian state-associated group known as Midnight Blizzard.

Technical Insight

As noted by Microsoft, the attack reroutes travelers to phishing frameworks and deploys malware masked as updates. Midnight Blizzard is connected to Russia’s SVR intelligence agency. While the precise number of impacted sites remains unclear, cases have been documented in nations including the United States, India, and Saudi Arabia.

Instruments and Strategies

The perpetrators utilize tools like CornFlake, a remote access trojan capable of keylogging and additional functions, along with ChocoShell, an infostealer aimed at browser cookies and user credentials. Android devices could also face threats from malicious APK prompts. The phishing framework frequently exploits Microsoft’s device code authentication process.

Proposed Security Strategies

Microsoft recommends that organizations prevent Entra ID device code authentication where not essential and enforce multi-factor authentication or passkeys. Viewing public Wi-Fi as unreliable and employing secure travel routers or VPNs is strongly advisable.

Conclusion

CaptiveCrunch represents a serious risk to hotel Wi-Fi systems worldwide, with Midnight Blizzard utilizing advanced techniques to breach traveler data. Implementing strong security measures can help alleviate these threats.

Common Questions

Q: What is CaptiveCrunch?

A:

CaptiveCrunch is a cyber-attack initiative targeting hotel Wi-Fi networks, associated with the Russian group Midnight Blizzard, with the intent of stealing credentials and spreading malware.

Q: How does CaptiveCrunch operate?

A:

It compromises captive portal systems, redirecting travelers to phishing URLs and delivering malware disguised as genuine updates.

Q: What tools are utilized in CaptiveCrunch?

A:

Main tools comprise the CornFlake remote access trojan and the ChocoShell infostealer, focusing on browser cookies, passwords, and Wi-Fi credentials.

Q: How can individuals safeguard themselves from this threat?

A:

Implement multi-factor authentication, regard public Wi-Fi as unsafe, and use secure travel routers or VPNs to protect personal data.

Q: What are the ramifications for businesses?

A:

Companies should secure their workforce’s data by adhering to recommended protocols and educating employees regarding the dangers of public Wi-Fi.