Microsoft has brought to everyone’s notice that a new attack named “Dirty Stream” is enabling malicious Android apps to overwrite files in another app’s home directory. This could potentially lead to arbitrary code execution and theft of sensitive data secretly.

The flaw can be a result of the improper use of Android’s content provider system, which manages to gain access to structured data sets that are meant to be shared between different apps.

This system features data isolation, URI permissions, and path validation security measures that curb unauthorized access, data leaks, and path traversal attacks. When used in the wrong manner, custom intents, which are messaging objects providing communication between components in the Android apps, could bypass these measures.

Also Read: OpenAI Reportedly Working On Search Engine To Rival Google

How does Dirty Stream Attack Operate Within The Apps?

One may wonder what are these incorrect implications. Well, they include trusting unvalidated filenames and paths in intent, misuse of the 'FileProvider' component, and inadequate path validation.

Ditry Stream attack enables malicious apps to send a file with a changed filename or path to another app. The targeted app is misled into trusting the filename and stores the file in a critical directory.

As per Microsoft researcher Dimitrios Valsamaras, these incorrect implications are very abundant, impacting apps installed over four billion times and setting the field for massive attacks.

"We identified several vulnerable applications in the Google Play Store that represented over four billion installations," reads the report. "We anticipate that the vulnerability pattern could be found in other applications. We're sharing this research so developers and publishers can check their apps for similar issues, fix as appropriate, and prevent introducing such vulnerabilities into new apps or releases."

Also Read: Engineers Report Burnout As Tech Companies Chase AI Gold Rush

Microsoft Names Two Apps Vulnerable To Dirty Stream

Microsoft’s report highlighted two apps as vulnerable to the attacks. The company said that Xiaomi's File Manager application, with more than a billion installations, WPS Office, has over 500 million downloads. 

Both companies have acknowledged the findings and collaborated with Microsoft to roll out fixes to bring down the risks posed by the attack. The findings of the report were shared with the Android-developed community via an article on the Android Developers website to curb resembling vulnerabilities in the upcoming builds.

Google has also updated its app security guidance to show the common implementation errors in the content provider system that fail to detect security bypasses. For end users, there’s not much they can do to avoid it apart from keeping these apps up to date and avoiding downloading APKs from third-party app stores.

Sony seems to be playing with the idea of a PlayStation controller that comes with a dedicated “rewind” button, as per a recently published patent. The patent spotted by Tech4Gamers is for gameplay rewind technology that would activate when the user pressed "a universal button on a controller during live gameplay."

The button will activate a mode where players can see several image frames of the live gameplay that they can then scroll through. Selecting one will allow the player to review their gameplay from that point.

As per the patent images, the button could be located where the “Share” button on the controller is currently. Another image shows an on-screen interface button similar to those on a TV remote, with images indicating Play, Pause, Next, Previous, Fast Forward, and Rewind. Moreover, there’s also a “Return” button.

Also Read: Sony To Introduce 50+ Games To PS5 Pro On Launch Day

How Will This New Feature Come In Handy For Users

The patent description suggests that this feature would come in handy in a number of ways, such as reminding a player of important quest information they might have missed, or how to reach a location they have been before that they cannot recall how to access.

It also describes that a player might bookmark certain sections of gameplay they may want to revisit later, with the rewind button enabling them to quickly revisit these saved moments. The patent also talks about the challenges:

"Accessing recent gameplay while the player is playing a video game is difficult, and requires hacking an existing service to view the portion of the gameplay of interest," the patent explains.

Also Read: Sony Confirms PS5 Faceplates Are Not Compatible With PS5 Pro

When Will the Feature Go Into Development Phase

"For instance, the player may have to specifically instruct the gaming system to create a file including portions of gameplay for purposes of sharing with other players. The player may have to exit the gameplay in order to create the sharing file. When the sharing file is completed, the player can then access the portion of the gameplay of interest for viewing."

While this patent is certainly interesting, it doesn’t mean it’s guaranteed to see a rewinding controller in the coming days. Gaming firms often patent tech they are working on, some of which makes it to market, and some do not. In the last few years, Sony has patented adaptive game difficulty systems, an interactive AR-based trophy system, auto-play and slow mode features, NFT, and blockchain tech.

Microsoft seems to be stepping back from charging Microsoft 365 Personal and home subscribers another $20 per month to get access to AI-powered Office features. The software giant quietly announced it’s making Copilot Pro features part of its Microsoft 365  personal and Family subscription recently, but only in Australia, New Zealand, Malaysia, Singapore, Taiwan, and Thailand for now.

“It’s been nine months since we introduced consumers to Copilot in our Microsoft 365 apps via Copilot Pro. We’ve spent that time adding new features, improving performance, and listening carefully to customer feedback,” says Microsoft in a press release spotted by ZDNet. “Based on that feedback, we’re making Copilot part of our Microsoft 365 Personal and Family subscriptions.”

Also Read: Microsoft’s AI-Powered Chatbot Available For Some Xbox Users

Microsoft 365 Getting New Apps In Select Markets

The company is also adding its Microsoft Designer app to Microsoft 365 Personal and Family subscriptions in these select markets. “Microsoft 365 Personal and Family subscribers will receive a monthly allotment of AI credits to use Copilot in Word, Excel, PowerPoint, Outlook, OneNote, and Designer,” explains Microsoft. “The credits will also apply to apps like Paint, Photos, and Notepad on Windows.”

If you have a Microsoft 365 Family subscription in one of these select markets, only the subscription owner will get access to Copilot and it cannot be shared with other family members. While some Microsoft 365 Personal and Family subscribers are getting more for their monthly subscriptions, prices are going up in exchange for Microsoft rolling in Copilot Pro.

“To reflect the value we’ve added over the past decade and enable us to deliver new innovations for years to come, we’re increasing the prices of Microsoft 365 Personal and Family,” says Microsoft. “The price increase will apply to existing subscribers upon their next renewal.”

Also Read: Xbox Game Pass November Line-Up Revealed

Microsoft’s AI-Powered Chatbot Available For Some Xbox Users

Microsoft has been testing their AI-backed chatbot for Xbox for several months and now the update is available for selected users. Dubbed Support Virtual Agent, it is an AI-powered technology designed to help Xbox players resolve support-related gameplay difficulties more efficiently.

As per the tech giant, the AI chatbot can quickly gain information from Xbox help pages to answer questions about Xbox console and game support difficulties. According to reports, Xbox Insiders based in the US can try the Xbox AI chatbot through support. Xbox. Command will address questions about the Xbox console and game support issues.

Megha Dudani, Senior Product Manager Lead Xbox said, “We appreciate feedback from Xbox Insiders on this preview experience, and any feedback received will be used to improve the Support Virtual Agent," as quoted by The Verge.

Beats, Apple’s iconic audio brand, has announced a new collaboration with Kim Kardashian, launching a special-edition version of its Beats Studio Pro headphones and the Beats Pill speaker to the Indian market.

As of November 2024, fans of the brand and Kardashian’s aesthetic can buy the limited-edition Beats x Kim collection on Apple.com/in and at selected Apple outlets and authorized retailers across India.

The Beats x Kim collection gives two popular Beats products a chic makeover, bringing Kardashian’s signature neutral palette to the design. The Beats Studio Pro headphones are now available in three distinctive shades: Moon, Dune, and Earth. Meanwhile, the Beats Pill portable speaker is offered in two colors: Light Grey and Dark Grey.

Also Read: Huawei Launches New Android-Free Mobile Operating System

Beats x Kim Kardashian Headphones, Speakers Price

Available in limited quantities from November 7, the Beats x Kim collection brings a premium price tag. The Beats Studio Pro headphones are priced at Rs 37,900, while the Beats Pill speaker retails at Rs 16,900. 

Customers can find these special-edition products at select Apple stores in Mumbai’s Apple BKC and New Delhi’s Apple Saket, as well as online retailers including Amazon, Flipkart, Croma, and Reliance.

Also Read: HMD Fusion Venom Edition With Snapdragon 4 Gen 2 SoC Teased

Beats Studio Pro Headphones Features

The Beats Studio Pro headphones are designed with Active Noise Cancellation (ANC) technology, enabling users to eliminate noise for a focused audio experience. Moreover, the Transparency in varied environments. For an immersive experience, these headphones support Personalised Spatial Audio with dynamic head tracking.

The headphones have prioritized comfort with UltraPlush leather cushions that offer wearability over extended listening sessions. The headphones come with an impressive battery life of up to 40 hours and, with USB-C compatibility, enabling users to enjoy Lossless Audio, making good clarity.

The compact Beats Pill speaker, another highlight of the collection, is designed for portable, high-quality audio with up to 24 hours of battery life. Like the Studio Pro headphones, it charges via USB-C, facilitating faster recharging. The speakers for a fuller audio experience. With compatibility across iOS and Android devices, the Beats Pill caters to a wide range of tech preferences.

Besides, Android users will also be able to use added features through the Beats companion app, making this device accessible across platforms. 

iQOO 13 is set to launch in India soon. The company has confirmed that the smartphone will come packed with Qualcomm’s latest octa-core Snapdragon 8 Elite chipset. It has teased the design of the handset alongside some display features.

Now, the company has announced the launch timeline of the iQOO in India. The smartphone was launched in China on October 30. the Indian version is said to be similar to its Chinese counterpart in terms of design and key specifications.

The iQOO 13 will hit the Indian market in December, the company confirmed in an X post. As part of the company’s collaboration with BMW Motorsport, the smartphone will arrive in a Legend Edition with blue-black-red tricolor patterns.

Also Read: Oppo Find X8, X8 Pro To Launch In Indian Market Soon

iQOO 13 Under The Hood

The Indian variant of the iQOO 13 will be available for purchase through the official iQOO e-store and Amazon. An Amazon microsite for the handset has gone live. The smartphone is teased with the Halo light feature. The microsite reveals that it will get a 2K LTPO AMOLED display panel with a 144Hz refresh rate. It is said to carry a Snapdragon 8 Elite SoC paired with a Q2 gaming chipset.

The iQOO 13 launched in China with a Snapdragon 8 Elite SoC, an in-house Q2 gaming chipset, up to 16GB of RAM, and up to 1TB of onboard storage. It ships with Android 15-based OriginOS 5. It is said to arrive in India with a FuntouchOS 15 skin on top. The smartphone sports a 6,150mAh battery with 120W wired fast charging support.

The iQOO 13 comes equipped with a 6.82-inch 2K (1,440 x 3,168 pixels) BOE Q10 8T LTPO 2.0 OLED screen with up to 144Hz refresh rate and HDR support. As for the cameras, the smartphone has a 50MP triple rear camera unit, which has a 50MP telephoto, and a 50MP ultra-wide shooter. The front-facing camera is a 32MP sensor and the phone has an IP68 and IP69-rated build as well as an in-display ultrasonic fingerprint sensor for security.

Also Read: Honor Magic 7, Magic 7 Pro Launching Globally Soon

iQOO 13 Posts Impressive Benchmark Scores

The benchmark scores hint at a robust processing power for the upcoming handset. The benchmark shows that the iQOO 13 scored 3,142 points in single-core tests and 10,052 points in multi-core tests. These scores surpass those of the Samsung Galaxy S25 Ultra, which reportedly achieved 3,069 and 9080 points respectively using an 'overclocked' Snapdragon 8 Gen 4 chipset.

When pitted against Apple’s latest smartphone, the iPhone 16 Pro Max managed to get higher scores in single-core tests with a score of 3,562 but fell short in multi-core tests with only 8,814 points.

This comparison highlights the competitiveness of iQOO’s upcoming smartphone might hold against other flagship devices. Despite these promising features and performance scores, some leaks hint that the iQOO 13 could have slower charging capabilities compared to its precursor, the iQOO 12.

The Samsung Galaxy S25 series will reportedly come with a new ‘Slim’ model alongside regular vanilla, Plus, and Ultra models. This new version should come months ahead of the also new and rumored Apple iPhone 17 Slim/Air, providing the Samsung smartphone an edge over other devices. Now, the alleged Samsung Galaxy S25 Slim launch timeline and more details have been reported in the latest development.

Besides, the new ‘Slim’ model, another leak reveals the Galaxy S25/S25+ has two new Sparkling colors. The launch timeline for the Samsung Galaxy S25 series flagships seems to be fast approaching as the speculations intensified in recent days.

Also Read: Samsung Tipped To Launch Affordable Galaxy Z Flip FE in 2025

Samsung Galaxy S25 Slim Appears Online
 

The regular Galaxy S25 models reportedly have the model numbers: SM-S931 (S25), SM-S936 (S25+), and SM-S938 (S25 Ultra). Smartprix notes the company is working on a fourth new smartphone with the model number SM-S937U, where the ‘U’ at the end could mean it will be the US version.

The model number has appeared on the GSMA IMEI database. The database listing mentions the market name as just Galaxy, possibly because the company doesn’t want the actual name to come out. The Samsung SM-S937U is said to be the Galaxy S25 Slim US variant, although the moniker is not officially confirmed.

The report suggests that Samsung usually registers its devices in the GSMA IMEI database 6-7 months before the launch. This will give the brand enough time to test before officially launching. Smartprix notes the alleged Samsung S25 Slim will be announced in Q2 2025. This is months after the regular Galaxy S25 launches.

Also Read: Snapdragon 8 Elite Chip Powering Flagships Has Heating Woes

Samsung Galaxy S25 Slim To Take On iPhone SE 4

If the timeline turns out to be true, the Samsung Galaxy S25 Slim will look to take on the Google Pixel 9a and the Apple iPhone SE 4, which are said to launch around the same timeline.

While it’s too early to know the specifications, tipster Ice Universe claims the Galaxy S25 Slim will have an ‘Ultra’ camera. While it is not clear what this exactly means, it is possible the smartphone could pack a similar camera setup as the Galaxy S25 Ultra or better than the regular S25 and S25+ camera setups. Apart from the Galaxy S25 Slim, the Galaxy S25 and Galaxy S25+ are said to get two new colors: Sparkling Blue and Sparkling Green.