Ivanti Discloses Zero-Day Vulnerability in Connect Secure VPN - DTH - Daily Tech Headlines

Summary

Daily Tech Headlines – January 9, 2025

Hosted by Tom Merritt

In today’s episode of Daily Tech Headlines, host Sarah Lane delivers an in-depth overview of the most significant technology news from around the globe. From cybersecurity threats to major corporate strategies and innovative product launches, here's a comprehensive summary of the key discussions:

1. Ivanti Reveals Critical Zero-Day Vulnerability in Connect Secure VPN

Sarah begins with a significant cybersecurity alert:

"Software giant Ivanti disclosed a critical zero-day vulnerability in its Connect Secure VPN appliance, allowing unauthenticated attackers to remotely execute malicious code." [01:10]

This vulnerability has been actively exploited since December 2024 and is linked to suspected China-based cyber espionage groups. Ivanti has promptly released a patch for Connect Secure, although fixes for related products are expected to roll out by January 21st. The disclosure underscores the persistent threats in VPN security and the importance of timely updates.

2. Meta Collaborates with eBay to Comply with EU Antitrust Regulations

In regulatory news, Sarah discusses Meta’s strategic move:

"Meta now offers to publish listings from competitor eBay in Facebook Marketplace in order to comply with the European Union's antitrust order." [02:30]

This initiative will initially be tested in France, Germany, and the United States. Users will soon be able to browse eBay listings directly within Facebook Marketplace and complete their transactions on eBay. This collaboration highlights Meta's efforts to navigate and adhere to stringent EU regulations while expanding its marketplace functionality.

3. Apple Addresses Privacy Concerns Over Siri Recordings

Apple faces scrutiny over user privacy, which Sarah elaborates on:

"Apple denied using Siri recordings for advertising, stating it never builds marketing profiles, never shares data with advertisers, and never sells user information." [03:15]

This statement follows Apple's payment of a $95 million settlement related to accidental Siri recordings. Apple emphasized that any retained audio is strictly opt-in and solely utilized to improve Siri's functionality, reinforcing its commitment to user privacy.

4. Nvidia’s Future CPU Strategy Hint at CES

At CES, Nvidia CEO Jensen Huang made intriguing comments about the company’s CPU plans:

"MediaTek might bring the ARM-based CPU inside the project to market on its own, but we have plans as well." [04:05]

While acknowledging MediaTek’s potential moves, Huang hinted that Nvidia is developing its own CPU strategy, signaling possible future advancements and competition in the processor market.

5. Radio Shack's Potential Revival by El Salvador's Unicomr Group

In a surprising turn, Sarah covers the efforts to bring back a classic brand:

"El Salvador's Unicomr Group is attempting to revive the Radio Shack brand that it bought back in 2023, starting with a line of 500 product offerings across 17 different electronics categories." [04:45]

This extensive product launch aims to re-establish Radio Shack in the modern electronics market, leveraging nostalgia while introducing contemporary gadgets.

6. Valve Announces SteamOS Beta Ahead of Legion Go Release

Gaming enthusiasts have reason to rejoice as Valve makes a significant announcement:

"Valve announced that ahead of Legion Go shipping, they will be releasing a beta of SteamOS to improve the experience on other handhelds." [05:15]

This initiative allows users to test SteamOS on various devices without waiting for the Legion Go's May release, enhancing the versatility and accessibility of Valve’s gaming ecosystem.

7. Honda Unveils Honda Zero EVs at CES

Automotive innovation takes center stage with Honda's latest offerings:

"Honda showed off its Honda Zero EVs, the Zero SUV and Zero Saloon, set to enter production in 2026." [05:45]

Both electric vehicles will feature Honda's new car operating system, Asimo OS, named after the famed robot. The system supports level three automated driving, enabling drivers to disengage from road monitoring under optimal conditions, marking a significant step towards autonomous vehicle technology.

8. Smart Lock Innovations Debut at CES

Finally, Sarah highlights advancements in smart home security:

"Smart lock makers are getting creative at CES this year, featuring products with Ultra Wideband technology for hands-free unlocking and integration with smartphones." [06:15]

Notable products include SL's Sense Pro Smart Deadbolt, UTech's Ultralock Bolt Mission, and Lockly Secure Pro, which offers Apple Home hands-free support. These innovations promise enhanced convenience and security, contingent on reliable performance upon their market release later this year.

Conclusion

Today's episode provided a thorough examination of critical vulnerabilities in cybersecurity, strategic corporate collaborations, advancements in autonomous driving, and innovative consumer electronics. For more detailed analyses and updates, listeners are encouraged to visit dailytechnewshow.com, where show notes and links to these headlines are available.

Stay informed and join us again tomorrow for the latest in technology.

This summary was crafted based on the transcript provided and structured to highlight the key points and insights discussed in the episode. Notable quotes are attributed with their corresponding timestamps for reference.

Transcript

A (0:00)

Did you know that two out of three listeners say podcasts are the best way to learn about the things they care about most. That makes podcasts the perfect place to introduce your brand, where ads are more relevant and trusted than any other media channel. Want to learn more? Download the Full Podcast Pulse 2024. Report now at podcastpulse2024.acast.com and see how you can make your brand part of the conversation.

B (0:28)

AI requires a lot of compute power and the cost for your AI workloads can spiral. That is unless you're running on oci. Oracle Cloud Infrastructure this was the cloud built for AI, a blazing, fast, enterprise grade platform for your infrastructure, database, apps and all of your AI workloads. Right now, Oracle can cut your current cloud bill in half if you move to OCI. Minimum financial commitment and other terms apply. Offer ends March 31st. See if you qualify@oracle.com DailyTech Oracle.com DailyTech Tech.

C (1:01)

These are the Daily Tech headlines for Thursday, January 9th, 2025. I'm Sarah Lane. Software giant Avanti disclosed a critical zero day vulnerability in its Connect Secure VPN appliance, letting unauthenticated attackers remotely execute malicious code. The flaw has been actively exploited since December of 2024 and also has been linked to suspected China based cyber espionage groups. Avanti has released a patch for Connect Secure, but fixes for related products are delayed until January 21st. Meta now offers to publish listings from competitor Ebay in Facebook Marketplace in order to comply with the European Union's antitrust order against Facebook Marketplace. It will test this in France, Germany and the US to start letting users browse listings from Ebay directly on Facebook Marketplace while completing their transaction on ebay. In a statement Wednesday evening, Apple denied using Siri recordings for advertising, saying it never builds marketing profiles, never shares data with advertisers and never sells user information. This follows Apple paying a $95 million settlement over accidental Siri recordings but not admitting to any wrongdoing. Apple also clarified that retained audio is opt in only and only used to improve Siri. In an investor presentation at CES this week, Nvidia CEO Jensen Huang said MediaTek might bring the ARM based CPU inside the project to market on its own, but he also hinted that Nvidia might also have a CPU strategy of its own, saying, you know, obviously we have plans. Radio Shack might be Back El Salvador's Unicomr Group is attempting to revive the Radio Shack brand that it bought back in 2023, starting with a line of 500 product offerings across 17 different electronics categories. On Wednesday, Valve announced that ahead of Legion Go as shipping, we will be shipping a beta of Steam os, which should improve the experience on other handhelds, and users can download and test this themselves. So in other words, you don't have to wait for Legion Go in May to run a legit copy of SteamOS on another handheld without using a fork like Bazzite or other means, the Verge reports the beta is expected this March in the automotive category. This week at CES, Honda showed off its Honda Zero EVs, the Zero SUV and Zero saloon. The EVs will go into production in 2026. Starting with that SUV, both cars will run Honda's new car operating system, Asimo OS, named after the robot. Yes, it will support level three automated drivers where drivers will not need to pay attention to the road in optimum conditions. And finally, smart lock makers are getting creative at CES this year. SL's Sense Pro Smart Deadbolt and UTech's Ultralock Bolt Mission both feature Ultra Wideband or UWB technology for hands free unlocking when you're paired with a smartphone. There are other locks, for example Lockly Secure Pro, which promises Apple Home Hands free support, while Palm Scanners and digital peephole equipped models also emerged. Though these devices are supposed to deliver seamless access, their success depends on reliable and secure performance when they hit the market later this year. For more analysis of the tech news of the day, subscribe to dailytechnewshow.com this is where you can find show notes and links to these headlines there as well. I'm Sarah Lane. Thanks for listening. We'll talk to you tomorrow.