Monday, October 27, 2025
- Advertisement -
More
    Home Blog Page 19

    Russia blocks Ookla’s Speedtest to tighten internet control

    • Regulator suggestes that Russians switch to domestic alternatives amid push for digital sovereignty

    Russia’s communications watchdog Roskomnadzor announced the nationwide blocking of Speedtest, the US-based internet performance tool operated by Ookla.

    According to Roskomnadzor, the measure was taken to mitigate what it identifies as threats to the security and stability of Russia’s digital infrastructure, citing a 2020 decree aimed at reinforcing protections over the country’s segment of the internet.

    Foreign technology companies, including major players like Alphabet, Meta, and Apple, have faced ongoing scrutiny from Russian regulators regarding the content they host and the locations where user data is stored.

    The pressure on these companies has noticeably intensified over the past several years, especially in the wake of Russia’s invasion of Ukraine in February 2022, which accelerated the country’s efforts toward “digital sovereignty.”

    Threaten user privacy

    Roskomnadzor suggested that Russians switch to domestic alternatives, explicitly recommending ProSet—also known as ProNet in English—a homegrown application that offers internet speed and signal testing, similar to Speedtest.

    The recommendation is part of a broader campaign to promote Russian-developed digital products and reduce reliance on Western technology.

    This isn’t the first major move by the Kremlin to assert control over the national digital landscape. The Russian government has previously blocked major social platforms such as Instagram and Facebook (both owned by Meta), reduced the accessibility of YouTube, and pressed the messaging service WhatsApp to prepare for an exit from Russia.

    A new messaging platform, MAX, developed under state oversight, is reportedly poised to take its place.

    International organisations are watching Russia’s tightening grip with concern. In a report released, Human Rights Watch warned that the government’s increased surveillance capabilities and greater authority over internet infrastructure enable wider censorship and more comprehensive blocking of independent tools—even those designed to bypass restrictions.

    “For years, Russian authorities have been carefully constructing a highly regulated and isolated segment of the internet,” observed Anastasiia Kruope, assistant researcher for Europe and Central Asia at Human Rights Watch.

    New laws, she noted, significantly strengthen censorship and could threaten user privacy, with penalties now in place for online searches related to content the government labels as “extremist.”

    The report further emphasised that these policies put Russian citizens at greater risk, as their personal data is more likely to be shared with law enforcement authorities under the new regulations.

    Lenovo issues urgent BIOS updates for high-severity vulnerabilities

    • The vulnerabilities affect certain IdeaCentre AIO 3 and Yoga AIO all-in-one desktop computers.
    • While BIOS fixes for some Yoga AIO models aren’t expected until between September and November 2025, many others have updates already released.
    • The main risk: a privileged local attacker could exploit these flaws to read protected memory contents or even execute arbitrary code within System Management Mode.

    Lenovo has addressed a set of critical BIOS vulnerabilities that put millions of devices at risk, releasing urgent firmware updates for multiple system models.

    As of July 2025, while many updates are available, some models remain pending fixes, and Lenovo is actively communicating these risks to users.

    The weaknesses were discovered in specific BIOS versions provided by Insyde Software, a major supplier of system firmware. According to Lenovo, these vulnerabilities affect certain IdeaCentre AIO 3 and Yoga AIO all-in-one desktop computers.

    The main risk: a privileged local attacker could exploit these flaws to read protected memory contents or even execute arbitrary code within System Management Mode (SMM).

    Six separate issues

    SMM is a specialised operating mode running with exceptionally high privileges—beyond even the operating system (ring -2)—giving it the ability to halt virtually all other software on the system.

    SMM is responsible for handling power management, direct hardware control, and various OEM-implemented low-level operations. As such, vulnerabilities in this area can have serious, far-reaching impact.

    The vulnerabilities, first disclosed by the Binarly Research team in April 2025, comprise six separate issues: four rated as high severity (8.2/10 on the CVSS scale) and two rated as medium (6/10).

    Successfully exploiting these flaws would let an attacker with existing local, high-level privileges escalate from kernel-level access (ring 0) to system management mode (ring -2), potentially exposing sensitive firmware memory (SMRAM) and allowing malicious code execution in this privileged context.

    A powerful reminder

    Such deep-level access could enable attackers to install persistent threats—malicious firmware capable of surviving a full wipe and OS reinstall, completely bypassing most conventional security defenses. However, exploiting these bugs is not trivial and would require the attacker to have pre-existing high-level (kernel) system access.

    Lenovo’s official guidance is clear: users should check for the latest available BIOS updates for their affected systems and apply them as soon as possible.

    While BIOS fixes for some Yoga AIO models aren’t expected until between September and November 2025, many others have updates already released. For maximum protection, keeping system firmware current is essential.

    This situation is a powerful reminder of how critical firmware security—and timely patching—has become in today’s computing landscape. Staying up to date with vendor advisories and recommended security practices remains the surest way to protect against these evolving risks.

    Palo Alto to acquire CyberArk for $25b to advance AI-driven cybersecurity

    • Deal details reveal that CyberArk’s investors will receive $45 in cash along with 2.2005 shares of Palo Alto for each share

    Palo Alto Networks is making waves in the cybersecurity world with its landmark $25 billion acquisition of Israeli rival CyberArk Software.

    The deal marks the largest in the company’s history and a significant move as CEO Nikesh Arora drives toward building a truly comprehensive cybersecurity powerhouse. The need for more complete, AI-driven protection is greater than ever, and Palo Alto’s latest move is a direct response to these global trends.

    The cash-and-stock transaction stands out as one of the year’s most high-profile tech takeovers, reflecting the intense wave of consolidation across the cybersecurity industry.

    As businesses experience more frequent and sophisticated breaches, many are eager to move away from the complexities—and vulnerabilities—of cobbling together services from multiple vendors. Instead, they’re looking for one-stop-shop solutions, which is exactly what Arora aims to deliver.

    Palo Alto’s acquisition follows closely after Alphabet’s $32 billion purchase of Israeli security startup Wiz, highlighting the demand for cutting-edge defenses.

    Palo Alto broadening its toolkit

    By bringing CyberArk on board, Palo Alto is broadening its toolkit, especially by adding best-in-class identity security technologies. This is great news for massive enterprise clients, who now have a single provider able to tackle the growing threats that come with increased AI adoption.

    The industry has seen a notable spike in cyberattacks ranging from data breaches to ransomware, prompting companies worldwide to bolster their cyber defenses.

    Demand for sophisticated tools like those offered by CyberArk—which specialises in privileged access management to protect critical assets—shows no signs of slowing. Big-name customers such as Carnival Corp., Panasonic, and Aflac already rely on CyberArk’s expertise.

    Deal details reveal that CyberArk’s investors will receive $45 in cash along with 2.2005 shares of Palo Alto for each share. The offer, valuing CyberArk at $495 per share, reflects a strong 29.2 per cent premium over the price before talks surfaced—an enticing proposal by any standard.

    According to industry analysts, Palo Alto’s global sales muscle could significantly accelerate the adoption of CyberArk’s technology, particularly as identity security takes center stage in defending AI-powered systems.

    Shared mission

    International Data Corp. forecasts a substantial 12.2 per cent jump in cybersecurity spending in 2025 as companies rush to meet these intensified requirements.

    Approval for the transaction has come from the boards of both companies, and the acquisition is set to close in Palo Alto’s fiscal 2026. Notably, the buyout will immediately contribute to both revenue growth and margins for Palo Alto.

    Nikesh Arora shared his vision, expressing that the era of AI and machine identities means every digital identity should have precisely controlled privileges—a vision he believes CyberArk is perfectly equipped to fulfill.

    For Udi Mokady of CyberArk, the deal caps a decades-long journey, emphasising the shared mission of protecting the world’s most critical digital assets.

    Ultimately, this union represents more than just a merger of products: it’s an acceleration of the quest to build resilient, AI-powered defenses in a rapidly evolving digital landscape.

    India pips China to become largest exporter of smartphones to US

    • Apple scales up its production capacity in India over the last several years as a part of its ‘China Plus One’ strategy
    • Samsung and Motorola have also increased their share of US-targeted supply from India, although their shifts are significantly slower and smaller in scale than Apple’s.

    The share of US smartphone shipments assembled in China shrank from 61 per cent in Q2 2024 to 25 per cent in Q2 2025 and most of this decline has been picked up by India, according to a new report.

    The total volume of “Made-in-India” smartphones grew 240 per cent year on year, and now accounts for 44 per cent of smartphones imported into the US, up from only 13 per cent of smartphone shipments in Q2 2024, according to resecrh firm Canalys (now part of Omdia).

    “India became the leading manufacturing hub for smartphones sold in the US for the very first time in Q2 2025, largely driven by Apple’s accelerated supply chain shift to India amid an uncertain trade landscape between the US and China,” said Sanyam Chaurasia, Principal Analyst at Canalys.

    Apple leads the charge

    Apple has scaled up its production capacity in India over the last several years as a part of its ‘China Plus One’ strategy and has opted to dedicate most of its export capacity in India to supply the US market so far in 2025.

     “Apple has begun manufacturing and assembling Pro models of the iPhone 16 series in India, but is still dependent on established manufacturing bases in China for the scaled supply needed for Pro models in the US,” Chaurasia said.

    Samsung and Motorola have also increased their share of US-targeted supply from India, although their shifts are significantly slower and smaller in scale than Apple’s. Motorola, similar to Apple, has its core manufacturing hub in China, whereas Samsung relies mainly upon producing its smartphones in Vietnam.

    The United States smartphone shipments grew by 1 per cent in Q2 2025 as vendors continued to frontload device inventories amid tariff concerns.

    The uncertain outcome of negotiations with China has accelerated supply chain reorientation. Apple built up its inventories rapidly toward the end of Q1 and sought to maintain this level in Q2.

    Samsung scaled up its inventory stock in Q2, boosting its shipments to grow 38 per cent year on year, predominantly driven by Galaxy A-series devices, said the report.

    Will Tesla deal revitalise Samsung’s chip foundry business?

    • Deal offers Samsung the chance to reshape industry perceptions and move out from TSMC’s long shadow.
    • Samsung’s foundry business will need to string together more wins, consistently improve yields, mitigate engineering hiccups, and woo additional customers in sectors from automotive to AI accelerators.

    When the Tesla-Samsung blockbuster deal first caught my eye, I couldn’t help but dive into the ripples it’s creating across the tech world.

    The $16.5 billion partnership isn’t just a headline—it’s a potential game-changer for Samsung’s foundry ambitions, which, let’s be honest, have been stuck in the shadow of industry heavyweight TSMC for far too long.

    To set the stage: Samsung’s foundry business has long tried to claw its way up, pouring billions into R&D and next-generation chip technology. Yet the simple truth is, profit has been elusive. Most major clients still look to TSMC when it’s time to roll out cutting-edge chips at scale.

    Tesla CEO Elon Musk said that Samsung’s new chip factory in Taylor, Texas would make Tesla’s next-generation AI6 chip.

    Samsung currently makes Tesla’s AI4 chips, which power its Full Self-Driving (FSD) driver assistant system, while TSMC is slated to make the AI5, initially in Taiwan and then Arizona, Musk has said

    It holds just 8 per cent of the global foundry market, far behind TSMC, which has a 67 per cent share, according to data from market researcher Trendforce.

    A badge of credibility

    Despite its size and innovations, Samsung’s foundry arm has often played catch-up, struggling with inconsistent yields and the uphill battle of convincing big tech players to switch allegiances.

    But here comes Tesla—a customer with not just deep pockets, but also a relentless vision for self-driving vehicles and AI-powered infotainment.

    Landing Tesla as a flagship client delivers Samsung more than revenue; it’s a badge of credibility. In an industry ruled by trust, reliability, and bleeding-edge technology, having Tesla onboard sends tech companies and investors a strong, clear signal: Samsung can deliver, even on the most demanding projects.

    Let’s talk competition. While TSMC remains the dominant force, this deal plants a flag for Samsung, showing it’s determined to fight for a bigger slice of the pie. Tech giants like Apple, NVIDIA, and Qualcomm have traditionally shied away from Samsung’s foundry—often due to concerns around yield, delays, or simply comfort with TSMC’s track record.

    A giant leap forward

    But the Tesla contract opens the door for Samsung to retell its story: as a foundry that’s not only investing heavily but delivering for world-class, forward-thinking partners.

    Will this single deal guarantee long-term profitability? No—one big fish doesn’t make an ecosystem. Samsung’s foundry business will need to string together more wins, consistently improve yields, mitigate engineering hiccups, and woo additional customers in sectors from automotive to AI accelerators.

    The Tesla contract, though, is a giant leap forward: proof that the tide may be turning. With renewed industry respect, more doors could open, reviving not just balance sheets, but the very reputation Samsung has chased for years.

    If you ask me, the real significance of this deal lies beyond the numbers. It offers Samsung the chance to reshape industry perceptions and move out from TSMC’s long shadow. The foundry war is far from over, but for the first time in a while, Samsung’s fighting with renewed fire—and the whole industry is watching.

    India’s AI diplomacy: Sharing multilingual models with the Global South

    • Instead of building closed-off ecosystems, India is positioning itself as a bridge—offering AI toolkits tailored for diverse languages and cultural contexts.
    • Unlike tech innovation models driven solely by the state or the corporate sector, India advocates for a multi-stakeholder ecosystem.

    India is stepping onto the world stage with a spirit of collaboration, especially when it comes to artificial intelligence.

    On Friday, IT Secretary S. Krishnan reiterated India’s readiness to share its rapidly evolving AI models with countries in the Global South. The announcement, made at FICCI’s ‘Bhashantara 2025’ conference, signals a major leap in India’s diplomatic and technological ambitions—underscored by a distinctly inclusive approach.

    Harnessing its extraordinary linguistic diversity, India is well-placed to lead the development of advanced natural language processing (NLP) and multilingual AI tools.

    “If you can do it in India, you can do it practically anywhere else in the world,” Krishnan noted, underlining India’s unique environment as the ideal testing ground for robust, diverse language technologies.

    India’s collaborative stance hasn’t gone unnoticed. UN officials have previously acknowledged this openness, and now, the formal pledge boosts India’s profile as a trusted partner for regions navigating multilingual, resource-limited challenges.

    Instead of building closed-off ecosystems, India is positioning itself as a bridge—offering AI toolkits tailored for diverse languages and cultural contexts.

    Backed by successful projects such as Mission Bhashini and the Anuvadini application, India has demonstrated its ability to push the boundaries of human language technology. Particular attention has been paid to regional dialects, making these tools more accessible and inclusive for communities often left out of tech revolutions.

    The momentum is powered by the IndiaAI Mission, a government initiative fostering innovation by providing ‘AI Kosh’, a robust repository of over 400 databases. The rich resource serves as a playground for startups, researchers, and entrepreneurs to develop next-gen, multilingual AI solutions.

    India’s efforts also extend to digitising traditional knowledge—from age-old Ayurvedic texts to historical manuscripts—expanding the global pool of health and research data.

    Unlike tech innovation models driven solely by the state or the corporate sector, India advocates for a multi-stakeholder ecosystem. The approach actively pulls in talent and investment from academia, industry, and research organizations for a communal push in advancing AI.

    Private sector engagement was also front and center at the FICCI event. Harsh Dhand, a Google leader and FICCI Multilingual Internet Committee Co-Chair, called for greater data transparency.

    He suggested unlocking historical data from public broadcasters and connecting diverse research initiatives, helping avoid redundant efforts. Dhand also emphasised that the industry’s role can be expanded beyond technology provision to include seed funding for startups, university collaborations, and nurturing AI skills across the board.

    India’s open-source spirit—in technology as well as governance—continues to win attention. By inviting the Global South to share and iterate on its multilingual AI advancements, India is betting on collective progress, paving the way for more widely accessible technological solutions across continents.