Security-Portal.cz je internetový portál zaměřený na počítačovou bezpečnost, hacking, anonymitu, počítačové sítě, programování, šifrování, exploity, Linux a BSD systémy. Provozuje spoustu zajímavých služeb a podporuje příznivce v zajímavých projektech.

Kategorie

Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

The Hacker News - 3 Červenec, 2024 - 11:53
Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as part of a campaign primarily targeting users in Canada, India, Poland, and the U.S. "MerkSpy is designed to clandestinely monitor user activities, capture sensitive information, and establish persistence on compromised systems," Fortinet FortiGuard Newsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Apple’s Phil Schiller may join OpenAI’s board

Computerworld.com [Hacking News] - 3 Červenec, 2024 - 11:16

Apple Fellow and App Store head Phil Schiller may have something else to fill his time, taking an observer role on the OpenAI board, a Financial Times report claims. It’s yet another signal of the importance Big Tech now attaches to generative AI.

Schiller hasn’t attended a meeting yet but is expected to take the role as ChatGPT support is rolled into Apple devices. There is a precedent to this. The firm’s other Big Tech partner, Microsoft, also holds an observer’s seat on the board.

Some might say

Some might say the decision to bring Apple more fully inside the tent means OpenAI hopes to persuade Apple to integrate its tech more deeply into Apple products. It seems unlikely that Apple will easily be convinced to move beyond a certain point, in part because it is expected to work with other AI suppliers (principally Google Gemini), but also on strength of its own investments in Apple Intelligence and future fee-based AI services. It seems far more likely to reflect the need to ensure good governance.

Think back and you’ll remember that Microsoft, which has invested $13 billion in OpenAI, gained its own observer’s seat after the November 2023 boardroom battle at OpenAI during which co-founder Sam Altman was fired and then rehired as CEO

The truth is neither Apple nor Microsoft will want to countenance poor governance or flawed results as they make the tech available to the world’s population of Windows, Mac, Surface, iPad, and iPhone users. 

Wonderwall

Holding positions, even nonvoting observer positions, on the OpenAI board may help them protect against that, and those roles may expand should Altman’s board have a second meltdown, or in the event the company becomes an acquisition target for either, both, or another big firm.

Microsoft and Apple may also recognize the need to both partner and support AI firms while also developing their own tech, particularly in light of increased regulatory interest in the sector. The US Federal Trade Commission earlier this year launched an inquiry into the partnerships between Big Tech firms and genAI companies. 

“Our study will shed light on whether investments and partnerships pursued by dominant companies risk distorting innovation and undermining fair competition,” said FTC Chair Lina M. Khan in a statement at that time.

Definitely maybe

Competitive concerns aside, the swift evolution of these technologies has thrown a very large brick into the middle of the tech industry pond. Not only does server-based AI generate problems around energy and water supply, but hardware manufacturers are hustling to make or deploy devices with enough computational horsepower to handle this form of AI. Even Apple appears to have been forced to accelerate progress along its processor road map — the M4 MacBook Air was a huge surprise, and with additional M4 models set to ship this year and expectation now that all iPhone models will gain their own higher-end chip, it’s crystal clear the hardware is being tooled up to handle genAI.

There is, however, a limit to what is possible, so it makes sense for Apple — and Microsoft — to gain insight into OpenAI’s future plans, which will both inform their own product development and help guide OpenAI’s. 

Standing on the shoulder of giants

In Apple’s case, the company is also developing its own Apple Intelligence strategy with the introduction of on-device and self-hosted AI models to handle some common tasks, and an anticipated intention to monetize that work somewhere down the line.

Along the way, the company will also be exposing ChatGPT tech to hundreds of millions of people who may never have experienced it before — after all, even though most of the planet now has a smartphone, they may never have experienced artificial intelligence at this level before.  

Please follow me on Mastodon, or join me in the AppleHolic’s bar & grill and Apple Discussions groups on MeWe.

More by Jonny Evans:

Kategorie: Hacking & Security

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

The Hacker News - 3 Červenec, 2024 - 09:05
The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal. "FakeBat primarily aims to download and execute the next-stage payload, such as IcedID, Lumma, RedLine, SmokeLoader, SectopRAT, and Ursnif," the company said in a Tuesday analysis. Drive-by attacks
Kategorie: Hacking & Security

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

The Hacker News - 3 Červenec, 2024 - 09:05
The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal. "FakeBat primarily aims to download and execute the next-stage payload, such as IcedID, Lumma, RedLine, SmokeLoader, SectopRAT, and Ursnif," the company said in a Tuesday analysis. Drive-by attacks Newsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

The Hacker News - 3 Červenec, 2024 - 05:56
Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver. The campaign, believed to be highly targeted in nature, "leverage target-specific infrastructure and custom WordPress websites as a payload delivery mechanism, but affect a variety of entities across unrelated verticals, and rely on
Kategorie: Hacking & Security

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

The Hacker News - 3 Červenec, 2024 - 05:56
Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver. The campaign, believed to be highly targeted in nature, "leverage target-specific infrastructure and custom WordPress websites as a payload delivery mechanism, but affect a variety of entities across unrelated verticals, and rely on Newsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

The Hacker News - 3 Červenec, 2024 - 05:33
An unnamed South Korean enterprise resource planning (ERP) vendor's product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center (ASEC), which identified the attack in May 2024, did not attribute it to a known threat actor or group, but noted that the tactics overlap with that of Andariel, a sub-cluster within the
Kategorie: Hacking & Security

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

The Hacker News - 3 Červenec, 2024 - 05:33
An unnamed South Korean enterprise resource planning (ERP) vendor's product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center (ASEC), which identified the attack in May 2024, did not attribute it to a known threat actor or group, but noted that the tactics overlap with that of Andariel, a sub-cluster within the Newsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Omnissa downplays its VMware past in official launch

Computerworld.com [Hacking News] - 2 Červenec, 2024 - 23:45

News that VMware’s former End User Computing (EUC) division is now officially called Omnissa — and that reference to the former was mentioned only in a footnote in the firm’s press release — is not surprising at all, said Shannon Kalvar, research director of virtual client computing at IDC.

Yesterday marked the official launch of the new organization, now owned by Menlo Park, Calif.-based KKR. The global investment firm paid $4 billion for VMware’s EUC division in a deal announced in late February, only a few months after Broadcom’s $69 billion acquisition of VMware was finalized. The EUC division purchase included Horizon, a desktop and application virtualization platform, and Workspace One, a unified endpoint management platform for the enterprise.

Instead of dwelling on the past, the Omnissa executive team, which includes Shankar Iyer as the firm’s CEO and who formerly headed up the VMware EUC division, has an opportunity to “come out and really lay out a vision for end user computing in an era where companies are increasingly very much digital and becoming AI driven,” Kalvar said.

“By that, I don’t mean all the excitement about LLMs,” he added. “But there have been tremendous advancements in hundreds of different kinds of models for predictive and interpreted analytics, for all kinds of things,” he said.

There is, he said, also an opportunity to say, “OK, we are stable now, but we can go further, we can do more.”

John Annand, practice lead at Info-Tech Research Group, said that as “Broadcom has continued its attempts to mend fences following the acquisition of VMware, we now finally know the outcome of the division they did not want to take into the new partnership.”

Annand described Omnissa as a company that is “aggressively looking to retain the former VMware client base by appealing to the goodwill VMware used to have in both the enterprise and reseller partner space. Senior staff in operations, engineering, marketing, product, and, of course, the new CEO, Shankar Iyer, are all familiar faces for those who took the EUC track at past VMWorld conferences.”

Combine these staff choices, he said, with the “vision and value statements, and the messaging seems clear: ‘We will be the company you used to like doing business with.’”

Omnissa is “wasting no time reaching out to industry analysts to schedule briefings and invite us to attend their Omnissa Live conference” on July 23, Annand said.

“I imagine over the next 20 days, in the lead-up to their conference, we’ll begin to get a sense of their partner program and pricing models. Certainly, these are topics that are foremost on the minds of former VMware customers. And whatever goodwill Omnissa hopes to retain will depend on a large part of how they respond to these questions.” 

Position-wise, said Annand, “this is a great time for them, and it makes a lot of sense for them to move quickly. Citrix recently had to go back to the well in order to raise some more cash and is aggressively ‘evaluating’ its customer portfolio, which is to say focusing on strategic ones at the expense of nonstrategic ones. And while Microsoft continues to reimagine what an entirely cloud-native desktop experience might look like, enterprises need solutions that work with existing software and devices today and not just into the future.”

Annand added that the need for desktop and app virtualization, as well as end-user device management, “has not gone away by any means. Zero-trust and security requirements across all the different form factors, manufacturers, and operating systems we put in front of workers these days have exponentially increased the operational complexity of enterprise IT.”

The challenge for Omnissa will be, he said, “do they bring the same bag of well-rehearsed tricks to the party, or can they, without legacy VMware hanging around their necks, do something truly innovative? If not, then at least we’ll have some competition as Microsoft continues to win the EUC space by default.”

Forrester principal analyst Naveen Chhabra noted in an email, “Companies that use VMware EUC products and plan to continue to do so will have to deal with Omnissa for continued support unless they need no more vendor support. Support is critical for most large organizations for functionality, performance, and security reasons.”

Chhabra noted that VMware customers have had to navigate a lot of change, first adjusting to the Broadcom acquisition and then to EUC division’s sale to KKR. And they’re not done yet.

“Omnissa is a new company, new leadership. Clients will have to learn how to work with a new company, new policies, new roadmap, new licensing,” he said. “So it is not going to be as easy or straightforward as one may want or like. There are credible alternatives from vendors like HCL, Microsoft, IBM, and Ivanti, but, as always, transition/migration is not going to be pain-free.”

Kategorie: Hacking & Security

China sets its sights on human brain-computer interface standards

Computerworld.com [Hacking News] - 2 Červenec, 2024 - 21:11

China aims to be among the first countries to begin developing standards for the future of brain-computer interfaces with the establishment of a new technical committee by its Ministry of Industry and Information Technology specifically for this purpose.

The ministry’s Brain-Computer Interface Standardization Technical Committee is currently fielding opinions and ideas on various issues associated with the technology and standards that the country already has set for its development, according to a press release published online by the Ministry.

These include developing and revising basic standards not only for the technology’s technical aspects, but also to hammer out issues around ethics and safety — which become increasingly more critical as technology that pushes boundaries for human-machine interaction advance.

The newly formed standards committee is currently soliciting comments regarding topics such as the “typical paradigms” of brain-computer interfaces; input and output interfaces such as brain information collection and preprocessing; and brain information encoding and decoding, data communication, and data visualization.

It’s also formulating and revising technical standards and test specifications for brain-computer interfaces in various fields, including medical, health, education, industry, and consumer electronics. It also will consider ethics and safety aspects such as the safety of emerging interface systems, as well as clinical applications of them.

Organizing standards leadership

Overall, the standards effort will attempt to create some kind of organization around stakeholders involved in China’s domestic brain-computer interface industry, including those in academia, research, and the tech industry itself.

The ultimate goals are “to focus on the hot spots of the industry and the needs of industry development, accelerate the research on the roadmap for the standardization of brain-computer interfaces, clarify the key directions and research and development priorities of brain-computer interface standardization, and coordinate and promote the formulation of brain-computer interface standards,” according to the release.

People have until July 30 to share their comments with the Science and Technology Department of the Ministry during the public announcement period.

The move supports China’s previously revealed three-year plan to establish itself as a global leader in computing standards, particularly for emerging technologies such as artificial intelligence. China is vying to strengthen its position in its ongoing technology race with the US and other nations taking the lead in tech that’s pushing the boundaries of how humans interact with machines.

Ethics to play a key role

While many technology standards efforts focus on interoperability, stewards for technologies such as AI and brain-computer interfaces — which push the boundaries of human-machine interaction — have a more pressing set of concerns, noted Brad Shimmin, chief analyst, AI & Data Analytics at Omdia. China’s new committee and groups such as the Institute of Electrical and Electronics Engineers (IEEE) in the US that seek to clarify these emerging standards will need to put ethical and safety considerations at the forefront of their agendas, he said.

“These organizations will be tasked with the difficult task of providing ethical guidance, providing a sustainable foundation upon which innovators can build solutions, as well as placing constraints on research and experimentation,” Shimmin said. “Such efforts can help to accelerate innovation while also ensuring that funded research conforms to the current socio-political expectations of the host country.”

Even with standards bodies such as the IEEE, the United States has historically encouraged aggressive research and experimentation with new technologies — up to a point, Shimmin noted. In the US, for example, Elon Musk’s brain-computer interface company Neuralink is currently in human trials with its surgically implanted brain chip, though it hit a snag this week when the second patient who was to receive the chip bowed out for medical reasons. As these trials evolve, however, organizations like the National Institutes of Health will continue to collaborate with lawmakers so they can step in to limit potentially dangerous research, he said.

Still, countries that can take a lead on the standardization of methods, interface mechanics, or materials used in creating human brain-computer interfaces, as well as the consideration of ethical issues, can “fuel national pride” that in turn drives investment in innovation and an influence on the global stage, Shimmin noted.

“Any country able to set the tone for highly impactful areas of innovation … can to a great degree shape the future of influence in that market, drawing in talented researchers and investors,” he said.

Still, no matter what standards bodies decide about human brain-computer interfaces, the pace of the technology will likely move very slowly — at least in the US, given that any meaningful use or market application will have to be approved by medical and healthcare regulators, experts said. This may give China’s standards efforts an edge if they are not limited by such a rigorous approval structure. 

Related reading:

Kategorie: Hacking & Security

CocoaPods flaws left iOS, macOS apps open to supply-chain attack

Computerworld.com [Hacking News] - 2 Červenec, 2024 - 20:28

Recently patched vulnerabilities in a software dependency management tool used by developers of applications for Apple’s iOS and MacOS platforms, could have opened the door for attackers to insert malicious code into many of the most popular apps on those platforms.

One particular security weakness in the CocoaPods dependency manager created a mechanism for hackers to launch supply chain attacks, security researchers at EVA Information Security warned Monday.

Developers who relied on CocoaPods over recent years should verify the integrity of open source dependencies in their code in response to these security weaknesses, EVA advised.

CocoaPods is an open-source dependency manager for Swift and Objective-C projects. Software developers use the technology to verify the integrity and authenticity of the components they’re using by ensuring the checksums and digital signatures of packages are all present and correct.

Kategorie: Hacking & Security

With iOS 18, Apple deepens its connection to India

Computerworld.com [Hacking News] - 2 Červenec, 2024 - 16:22

Beyond Intelligence, India is another ‘I’ Apple is making big investments in, and the scale of its journey there becomes easier to see every single day. It’s a commitment that goes OS deep.

I say that because Apple has woven eight India-focused enhancements within iOS 18, which shows how the company is focused on building its reach into the nation’s smartphone market.

The market isn’t the only thing it wants to build in India. Manufacturing there is also on the rise — and Apple and its manufacturing partners are actually growing their business there even faster than they agreed with India’s government in the first place.

Designed in California, Made in India

Apple has three manufacturing partners in India: Foxconn, Pegatron, and Tata Electronics. All three are in receipt of various forms of support under India’s PLI scheme, which aims to bring more technology manufacturing to India. Under the scheme, manufacturers must agree to meet certain production targets to qualify for that help. 

Apple’s iPhone partners have massively exceeded those agreed targets, with production reaching levels 45% higher than was agreed. 

Apple’s iPhone sales are also increasing, reaching 10 million in 2023, up from six million the previous year. That gives the company 23% of India’s smartphone revenue share. 

In tandem with Apple’s other consumer-facing initiatives in India, including high street Apple retail stores and various developer education offerings, the company does seem to be successfully stimulating business there.

What else can it do?

India inside your iPhones

Localization isn’t just a good thing to do, it’s also the right thing to do. People recognize when a company has gone the extra mile to make products or services that are relevant to them. Believe it or not, the world is not one vast monoculture, but a medley of many, who at their best rub alongside each other. 

Recognizing this, it matters that Apple in iOS 18 will introduce numerous enhancements designed to reach India’s consumers. It’s a big message that tells India’s consumers the company remains seriously committed to doing business there, and will no doubt help it further improve those all important customer satisfaction levels upon which the company builds so much, from services to app and accessory sales.

That constant reaching out to the target market is typical of Apple. (Though not always consistent — for example, I do wish the company would introduce European Portuguese language support and do not understand why it has not.)

Ultimately, Apple knows that if you reach out effectively, you build business for tomorrow. That’s implicit across the company’s entire approach to its business, even to the extent of, for example, the high-quality design of the headbands on Vision Pro. That doesn’t necessarily mean its products are the most affordable but does mean it has a great reputation for being the best.

Bottom line? Additional iOS localization in India will help Apple spread its gospel in this strategically important market, creating stronger foundations for development there. It’s focus and investment that gave Apple its highest ever iPhone sales in India last year

iOS 18 gets ready for India

So, what has Apple added to its iPhone OS? A wave of improvements that represent the company’s growing understanding of the needs of that market:

  • You will be able to customize the Lock Screen’s time display using Indian numerals from 12 of the nation’s languages, including Arabic, Arabic Indic, Bangla, Devanagari, Gujarati, Gurmukhi, Kannada, Malayalam, Meitei, Odia, Ol Chiki, and Telugu.
  • If your carrier supports it, Live Voicemail transcription will be available in Indian English.
  • The multilingual keyboard will support English and up to two additional Indian languages, including Bangla, Gujarati, Hindi, Marathi, Punjabi, Tamil, and Telugu. 
  • Different keyboard alphabetical layouts will be available in 11 Indian languages (Bangla, Gujarati, Hindi, Kannada, Malayalam, Marathi, Odia, Punjabi, Tamil, Telugu, and Urdu).
  • Language search will be improved with the addition of select Indian languages.
  • Siri will support nine Indian languages in addition to Indian English. That means you’ll be able to interact in Bengali, Gujarati, Hindi, Kannada, Malayalam, Marathi, Punjabi, Tamil, and Telugu.
  • The Translate app will support Hindi, and that support extends to translation in Safari, Notes, and elsewhere across the OS.
A thoughtful strategy

The journey from Apple’s entry to India to now has been a very long road. Along the way, the company has demonstrated a brilliant strategy that should be part of the playbook for any firm seeking to access new markets. It’s so simple to articulate, and so complex to do. It works like this:

  • Every market is different. Engage with new markets on their own terms.
  • Invest selflessly. That new factory you spend millions on will build its own rewards in terms of local employment and consumer loyalty.
  • Meet people where they are.
  • Iterate and improve over time.

Apple’s successful execution of this approach is precisely why India is set to become Apple’s third biggest market.

Please follow me on Mastodon, or join me in the AppleHolic’s bar & grill and Apple Discussions groups on MeWe.

Kategorie: Hacking & Security

Exploring Linux Mint 22 'Wilma': Key Updates and Security Improvements for Admins

LinuxSecurity.com - 2 Červenec, 2024 - 15:21
Linux Mint is a user-friendly GNU/Linux desktop distribution built upon Ubuntu and Debian for maximum reliability while offering an aesthetically pleasing user experience. It stands out from other Linux distributions due to its ease of use, full multimedia support, and impressive security, making it perfect for personal and professional computing use.
Kategorie: Hacking & Security

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

The Hacker News - 2 Červenec, 2024 - 13:00
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average ransom payment has increased 500% in the last year with organizations that paid a ransom reporting an average payment of $2 million, up from
Kategorie: Hacking & Security

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

The Hacker News - 2 Červenec, 2024 - 13:00
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average ransom payment has increased 500% in the last year with organizations that paid a ransom reporting an average payment of $2 million, up from The Hacker Newshttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

The Hacker News - 2 Červenec, 2024 - 12:28
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen, leverages shortcomings identified in Indirect Branch Predictor (IBP) and the Branch Target Buffer (BTB
Kategorie: Hacking & Security

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

The Hacker News - 2 Červenec, 2024 - 12:28
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen, leverages shortcomings identified in Indirect Branch Predictor (IBP) and the Branch Target Buffer (BTBNewsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Top 5 AI employee fears and how to combat them

Computerworld.com [Hacking News] - 2 Červenec, 2024 - 12:00

As artificial intelligence adoption surges in business, employees are left to wonder how systems placed on “automatic” can be controlled and how long it will be before their jobs are on the chopping block.

Those were two top fears revealed in a recent study by Gartner about the five main concerns workers have over generative AI and AI in general. And those fears are warranted, according to survey data. For example, IDC predicts that by 2027, 40% of current job roles will be redefined or eliminated across Global 2000 organizations adopting genAI.

A remarkable 75% of employees said they are concerned AI will make certain jobs obsolete, and about two-thirds (65%) said they are anxious about AI replacing their job, according to a 2023 survey of 1,000 US workers by professional services firm Ernst & Young (EY). About half (48%) of respondents said they are more concerned about AI today than they were a year ago, and of those, 41% believe it is evolving too quickly, EY’s AI Anxiety in Business Survey report stated.

“The artificial intelligence (AI) boom across all industries has fueled anxiety in the workforce, with employees fearing ethical usage, legal risks and job displacement,” EY said in its report.

The future of work has shifted due to genAI in particular, enabling work to be done equally well and securely across remote, field, and office environments, according to EY.

Managing highly distributed teams doing complex, interdependent tasks is not easy; finding employees trained sufficiently well to offer effective IT support across a broad security threat landscape of applications, platforms, and endpoints is also not easy. That’s where AI promises to facilitate and automate repetitive tasks like coding, data entry, research, and content creation and also amplify the effectiveness of learning in the flow of work, according to EY.

Gartner’s recent study identified five unique fears employees have about how their company will apply AI:

  • Job displacement due to AI that makes their job harder, more complicated, or less interesting
  • Inaccurate AI that creates incorrect or unfair insights that negatively impact them
  • Lack of transparency around where, when, and how the organization is using AI, or how it will impact them
  • Reputational damage that occurs because the organization uses AI irresponsibly
  • Data insecurity because the implementation of AI solutions puts personal data at risk 

“Employees are concerned about losing their job to AI; even more think their job could be significantly redesigned due to AI,” said Duncan Harris, research director for Gartner’s HR practice. “When employees have these fears, they all have a substantial impact on either the engagement of the employee, their performance, or sometimes both.”

One problem Gartner cited in its report is that organizations aren’t being fully transparent about how AI will impact their workforce. Organizations can’t just provide information about AI; they also need to provide context and details on what risks and opportunities are influencing their AI policy and how AI relates to key priorities and company strategy. 

“We can say that the most common worry is that AI will impact an employee’s role – either making it obsolete entirely or changing it in a way which concerns the employee, For example, taking some of the challenge or excitement out of it,” Harris said. “And the point is, these perspectives are already having an impact – irrespective of what the future really holds.”

Harris said in another Gartner survey, employees indicated they were less likely to stay with an organization due to concerns about AI-driven job loss. That phenomenon has cost the average enterprise with 10,000 employees about $53 million a year in lost productivity, Harris said.

Gartner recommends organizations consider what tasks within roles are most likely to be disrupted by genAI. For example, GenAI will likely have the greatest immediate impact on tasks such as content creation, question answering and discovery, translation, document summarization and software coding. But this doesn’t mean wholesale replacement of employees in the near term, he said.

Organizations can also overcome employee AI fears and build trust by offering training or development on a range of topics, such as how AI works, how to create prompts and effectively use AI, and even how to evaluate AI output for biases or inaccuracies. And employees want to learn. According to the report, 87% of workers are interested in developing at least one AI-related skill.

AI has the potential to create high business value for organizations, but employee distrust of the technology is getting in the way, Gartner’s study found. Leaders involved in AI cite concerns about ethics, fairness, and trust in AI models as top barriers they face when implementing the technology.

Employee concerns are not fear of the technology itself, but fear about how their company will use the new technology.

“If organizations can win employees’ confidence, the benefits will extend beyond just AI projects. For example, high-trust employees have higher levels of inclusion, engagement, effort, and enterprise contribution,” Harris said.

One particular concern is that AI, especially GenAI can lead to organizations making inadvertent mistakes, according to Harris. “So, from an executive perspective, the biggest concern for the future in using GenAI is around data privacy – this is also one of the most common concerns for employees,” he said.

“We suggest that by 2026, enterprises that apply AI trust, risk and security management to AI applications will consume at least 50% less inaccurate or illegitimate information that leads to faulty decision making,” Harris said.

Companies should also work on partnering with employees to create AI solutions, which will reduce fears about inaccuracy. Companies that show how AI works, provide input on where it could be helpful or harmful, and test solutions for accuracy can allay fears. For example, many organizations are setting up sandbox environments for experimenting with AI solutions and are keen for employees to be involved in these.

Organizations also need to formalize accountability through new governance structures that demonstrate they are taking AI threats seriously.

“For example, to boost employee trust in organizational accountability, some companies have deputized AI ethics representatives at the business unit level to oversee implementation of AI policies and practices within their departments,” Harris said.

Organizations should also establish an employee data bill of rights to serve as a foundation for their AI policies.

“The bill of rights should cover the purpose for data collection, limit the data collected to the defined purpose, commit to use data in ways that reinforce equal opportunity, and recognize employees’ right to awareness about the data collected on them,” Harris said.

Investment in AI is going to continue and employees who lean into this trend will benefit, according to Harris. Instead of distancing themselves, Gartner found employees want to learn more and be involved in working with AI.

“In fact, when we asked employees in different industries whether they would swap jobs if they were nearly identical apart from the new role offering the ability to work with GenAI, the likelihood to swap was over 40% for employees in the finance, construction, telecom, and technology sectors,” Harris said.

Kategorie: Hacking & Security

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

The Hacker News - 2 Červenec, 2024 - 07:10
Meta's decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the company's "pay or consent" advertising model is in contravention of the Digital Markets Act (DMA).
Kategorie: Hacking & Security

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

The Hacker News - 2 Červenec, 2024 - 07:10
Meta's decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the company's "pay or consent" advertising model is in contravention of the Digital Markets Act (DMA). Newsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security
Syndikovat obsah