With phishing attacks being favoured for their effectiveness by attackers and most ransomware attacks now targeting backup storage, we look at what businesses can do to protect themselves.

Spear Phishing Accounted For Two-Thirds Of All Attacks Last Year 

A recent report from security provider Barracuda has revealed that although spear phishing attacks make up just 0.1 per cent of all email-based attacks in 2023, they were responsible for two-thirds of all breaches. The report showed that a massive 50 per cent of the 1,350 organisations surveyed had fallen victim to a spear-phishing attack in 2022, a quarter had had at least one email account compromised via an account takeover. The report also showed that of those who fell victim to a successful spear phishing attack, 55 per cent had machines infected with malware or viruses, and 49 per cent and 48 per cent respectively had sensitive data or login details stolen.

What Is Spear Phishing? 

Spear phishing is a targeted form of phishing that aims to deceive individuals or organisations by sending bogus, fraudulent emails or messages. While traditional phishing attempts are more generic and widespread, spear phishing campaigns are highly tailored and personalised to trick specific targets, such as employees of a particular company or members of an organisation.

Targets Are Researched 

The attackers behind spear phishing typically research their targets extensively to gather information that will make their messages appear legitimate and increase the chances of success. They may gather details from social media profiles, online directories, or leaked data from previous breaches. This information is then used to create highly convincing email messages that appear to be from a trusted source, such as a colleague, a client, or a supervisor.

Personalised Content To Make Them More Convincing 

Spear phishing emails often contain personalised content, such as the recipient’s name, job title, or other relevant details, which makes them appear more authentic. They may also exploit psychological manipulation techniques to evoke a sense of urgency, curiosity, or fear to compel the target to click on a malicious link or download a malicious attachment. Once the recipient interacts with the malicious content, the attacker may gain unauthorised access to sensitive information, such as login credentials, financial data, or proprietary information.

The Consequences 

Spear phishing attacks can have severe consequences for individuals and organisations, including data breaches, financial loss, reputational damage, and further exploitation of compromised accounts.

How To Protect Your Business From Spear Phishing 

To protect against spear phishing, it is important to exercise caution when opening emails, verify the legitimacy of unexpected or suspicious requests, and regularly educate and train employees on identifying and reporting phishing attempts. Also, account takeover protection solutions with artificial intelligence capabilities can be effective.

It is difficult, however, to stop attackers from gathering the information about a business and specific personnel within that business to help them target their attacks. For example, some information may have been gathered from information stolen in previous cyberattacks or data breaches and may have been gathered from social media. Businesses should, where possible, be careful about how much information is shared online about the business and staff members, e.g., ‘meet the team’ or ‘about us’ pages, as this could also be used by attackers.

A Launching Point For More Advanced Attacks 

Spear Phishing is widely recognised as one of the most successful and commonly used techniques in cybercriminal campaigns and is favoured by attackers because it capitalises on human vulnerabilities/human error, exploits the trust placed in familiar or authoritative sources, and can be easier than trying hack complicated and well-defended systems – cyber criminals always look for the maximum payoff from minimum effort and risk.

By carefully crafting personalised messages, attackers can significantly increase the chances of success in compromising targets compared to generic phishing attempts. The level of sophistication and customisation in spear phishing attacks makes them harder to detect and raises the probability of successful infiltration.

Moreover, spear phishing serves as a launching point for more advanced attacks, such as targeted malware infections, social engineering exploits, or business email compromise (BEC) schemes. Once an attacker gains a foothold through spear phishing, they can proceed with their malicious activities, including data exfiltration, network infiltration, or financial fraud.

Reasons For The New Figures 

The reasons why spear phishing makes up only 0.1 per cent of all email-based attacks but are responsible for two-thirds of all breaches (i.e they have disproportionately higher success rate compared to other types of email-based attacks) are, therefore, that:

– Spear-phishing attacks are highly targeted and tailored to specific individuals or organisations, and this customisation makes the attacks more convincing, increases the likelihood of victims falling for them and, therefore, increases their effectiveness.

– These attacks take advantage of human psychology and behavioural traits, such as trust, curiosity, and urgency and, by leveraging these vulnerabilities, attackers can trick individuals into divulging sensitive information or performing actions that compromise security.

– Spear Phishing bypasses technical security measures, e.g. firewalls, antivirus software, and spam filters, enabling attackers to circumvent traditional security controls and directly target individuals.

– While spear-phishing attacks may target a specific individual initially, their success can lead to broader repercussions. For example, compromising one employee’s credentials through a spear-phishing attack could provide the attacker with access to sensitive systems or information, potentially leading to a significant breach affecting an entire organisation.

Most Ransomware Attacks Target Backups 

The 2023 Ransomware Trends Report from software company Veeam has revealed that 93 per cent of cyber-attacks target backup storage to force the ransom payment because it removes the option of recovery. The report found that these attacks are successful in debilitating their victims’ ability to recover in three-quarters of events and that more than one-third (39 per cent) of backup repositories are completely lost in these backup-targeted attacks.

Ransomware? 

As the name suggests, ransomware is a type of malicious software designed to encrypt files on a victim’s computer or network, rendering them inaccessible until a ransom is paid to the attacker (usually to a crypto account like bitcoin to avoid detection). It is a form of cyber extortion that aims to extort money from individuals, businesses, or organisations by holding their valuable data hostage.

Paying The Ransom? 

It is widely known that paying the ransom often doesn’t work and even if the ransom is paid, data can still be destroyed and/or, the attackers don’t provide the decryption key and simply make off with the money.

That said, according to the Veeam report, for the second year in a row, most of the organisations surveyed (80 per cent) said they had paid the ransom to end an attack and recover data, despite 41 per cent of organisations actually having a “Do-Not-Pay” policy on ransomware. Still, while 59 per cent paid the ransom and were able to recover data, 21 per cent paid the ransom yet still didn’t get their data back from the cyber criminals. Additionally, only 16 per cent of organisations avoided paying ransom because they were able to recover from backups. Sadly, the global statistic of organisations able to recover data themselves without paying ransom is down from 19 per cent in last year’s survey.

Protecting Your Business Against Ransomware Attacks

Typically, preventing ransomware attacks involves a combination of proactive measures such as regularly updating software and systems, implementing robust security practices, training employees on recognising and avoiding suspicious emails or websites, maintaining secure backups of important data, and deploying reliable antivirus and anti-malware solutions.

Veeam notes in its comments about the report’s findings that while best practices like securing backup credentials, automating cyber detection scans of backups, and auto verifying that backups are restorable can help protect against attacks, “the key tactic is to ensure that the backup repositories cannot be deleted or corrupted. To do so, organisations must focus on immutability.”  

Immutability 

Veeam reports that those who have fallen victim to ransomware have learned lessons and 82 per cent use immutable clouds, i.e. a cloud computing environment where the data stored within the cloud infrastructure is maintained in an immutable or unchangeable state. Also, 64 per cent now use immutable disks, and only 2 per cent of organisations don’t have immutability in at least one tier of their backup solution.

Being Careful About Re-Infection During Recovery 

In Veeam’s study, respondents were asked how they ensure that data is ‘clean’ during restoration. 44 per cent of respondents said they complete some form of “isolated-staging” to re-scan data from backup repositories prior to reintroduction into the production environment. Whilst this is positive news, the flip side of this statistic is that more than half (56 per cent) organisations risk re-infecting the production environment by not having a means to ensure clean data during recovery. The point is, therefore, that it’s important to thoroughly scan data during the recovery process.

What Does This Mean For Your Business? 

The obvious effectiveness of spear phishing attacks and the fact that most ransomware attacks are now targeting backups presents significant challenges for businesses, requiring proactive measures to protect themselves.

As highlighted by Barracuda’ report, spear phishing attacks have proven to be highly successful, accounting for two-thirds of all breaches despite constituting a small percentage of email-based attacks. The targeted and personalised nature of spear phishing makes it difficult to detect, as attackers extensively research their targets to create convincing messages. To protect against spear phishing, businesses should, therefore, exercise caution when opening emails, verify the legitimacy of requests, and provide regular training to employees on identifying and reporting phishing attempts. Account takeover protection solutions with artificial intelligence capabilities can also be effective.

As highlighted by Veeam’s report, ransomware attacks, on the other hand, have increasingly targeted backup storage, rendering organisations unable to recover their data even if they pay the ransom. While some organisations have paid the ransom and recovered their data, many have not been as fortunate. For businesses, the key to protecting against ransomware attacks lies in proactive measures such as regularly updating software, implementing robust security practices, training employees, maintaining secure backups, and deploying reliable antivirus and anti-malware solutions. Additionally, businesses should focus on immutability, ensuring that backup repositories cannot be deleted or corrupted.

To combat the risks associated with spear phishing and ransomware attacks, businesses should favour a multi-layered approach to security. This includes investing in employee education and training, implementing strong technical security measures, and regularly evaluating and updating security protocols. Businesses can also help protect themselves by staying informed about emerging threats and best practices in cybersecurity to enable them to adapt their defences accordingly.

In this Insight, we look at how it is possible to uncover and read deleted messages on WhatsApp, and what a number of privacy features on the app mean for business users.

Changes  

WhatsApp have made changes as regards message deletion that focus on giving users more control, such as:

– Delete messages for everyone. This allows users to delete messages they’ve sent to an individual or group chat. This can be helpful if a user has sent a message to the wrong chat or the message containing a mistake, and for group admins who need to remove problematic messages in a chat. To use the feature:

– Open WhatsApp, go to the chat with the message to be deleted and click ‘Menu,’ click ‘Delete message > DELETE FOR EVERYONE > DELETE FOR EVERYONE > OK’

– Delete messages for yourself. With this feature, users can delete their copy of messages they’ve sent or received from their phone. This has no impact on the recipients’ chats, recipients will still see the messages in their chat screen and, after clicking on delete, users have 5 seconds to undo the action by clicking Undo (before the message is permanently deleted). To use this feature:

– Open WhatsApp, go to the chat with the message to be deleted and click ‘Menu’ within the chat message. Click Delete message > DELETE FOR ME.

– Chat Lock is designed to protect users’ “most intimate conversations“ behind one more layer of security. Locking a chat takes the thread out of the inbox and puts it behind its own folder that can only be accessed with the user’s device password or biometric, like a fingerprint. It also hides the contents of that chat in notifications.

– Most recently, the ability to edit a message within 15 minutes of sending, e.g. if they contain a mistake, if the sender has second thoughts, or if they’ve been sent to the wrong person. To edit messages, users can long-press on a sent message and choose ‘Edit’ from the menu for up to fifteen minutes after. Edited messages will display ‘edited’ alongside them.

How To Read Deleted Messages 

There are, however, ways for users to uncover and read deleted messages in WhatsApp. For example iOS users can delete and re-download the WhatsApp app. After ensuring messages are backed up on iCloud:

– Delete WhatsApp from the phone, redownload the app from the App Store, and sign back into the account.

– A message will appear asking if you want previously backed up messages to be restored. If you select this option, all messages will be restored, including deleted ones.

For Android (11 and above) users, senders can view deleted messages by using the Notification History feature. This involves clicking on smartphone ‘settings,’ ‘apps and notifications,’ and selecting ‘use notification history.‘ This displays all notifications received by the device, including messages sent to the user via WhatsApp which were later deleted by the sender.

Android users can also try restoring WhatsApp messages through a database. This can be done by opening a file browser, going to the WhatsApp folder, clicking on ‘database,’ holding down the ‘msgstore.db.crypt12’ file and hitting ‘edit name’. From here, it’s a case of changing the name to ‘msgstore backup.db.crypt12’ (so it’s not overwritten), going to Google drive and tapping on the three lines (top right), clicking on ‘backups’ and erasing the WhatsApp backup. Finally, users can delete the WhatsApp app and install it again whereupon they will be prompted to recover WhatsApp through a local backup and can choose ‘msgstore.db.crypt12’, and click ‘Restore’ to restore all messages, including those deleted by the sender.

What Does This Mean For Your Business? 

WhatsApp is known to be a secure end-to-end encrypted app anyway, which is widely used by business (2 billion+ people use it) because it’s free, effective, instant, secure, and convenient. Security concerns could include the fact that it’s Meta-owned, it has shown malware vulnerabilities (patched last year) and, like other digital messaging services and email, is also vulnerable to phishing scams. That said, most business users trust it and are now invested in using it widely, and WhatsApp has introduced other features to keep business users on-board, e.g. multipole devices using one account.

However, governments (including the UK Government) have for many years been wanting ‘backdoors’ and some kind of access to WhatsApp that would essentially destroy end-to-end encryption and create wider privacy and security risks. Now, with increased competition from other encrypted apps like Telegram and Signal, and also with pressure now mounting as legislation is introduced to try and force a way in for governments (e.g., aspects of the Online Safety Bill, which prompted WhatsApp to threaten to bar UK users), it’s perhaps no surprise to see WhatsApp giving users more ways to personally manage the privacy and security of their messages. Some aspects, such as Chat Lock have even led critics to say that WhatsApp’s becoming a platform for ‘relationship cheaters’. It seems however, that there are still ways around certain aspects of privacy, and the above insight shows that it is possible for users to view deleted messages without too much difficulty.

University of Cambridge researchers have developed an ‘artificial leaf’ that uses sunlight to convert water and carbon dioxide into ethanol and propanol that could be used as a low-emissions petrol alternative to power car engines.

Inspired By Photosynthesis 

The ‘leaf,’ made from thin-film metal oxides and materials known as perovskites and including multiple layers including copper, glass, silver, and graphite, was made as part of University of Cambridge researchers’ experiments designed to produce ultra-thin, flexible devices, which take their inspiration from photosynthesis.

Why? 

Although renewable technologies (e.g. wind and solar) have become cheaper and more available in recent years, other industries such as global shipping using fossil fuel powered vessels have not made much progress in decarbonisation. For, example, global shipping produces three per cent of the world’s CO2 emissions. The Cambridge researcher group, led by Professor Erwin Reisner has therefore been working to tackle this challenge by developing sustainable solutions to petrol which are based on the principles of photosynthesis.

Floating Artificial Leaves 

The idea with the leaf design was to create a low-cost, autonomous device that’s light enough to float on water and which could be used to generate a sustainable alternative to petrol without taking up space on land.

The thin leaf is coated onto flexible plastic and metal foils and covered with micrometre thin, water-repellent carbon-based layers that prevent moisture degradation.

Tests 

Tests of the artificial leaves have taken place in Cambridge on the River Cam, near the iconic the Bridge of Sighs, the Wren Library and King’s College Chapel. The latest leaf design, which can split water into hydrogen and oxygen (or reduce CO2 to syngas) has been shown to convert sunlight into fuels as efficiently as plant leaves.

Like Solar Farms But For Fuel Synthesis 

Cambridge researchers Dr Virgil Andrei says: “Solar farms have become popular for electricity production; we envision similar farms for fuel synthesis,” and “these could supply coastal settlements, remote islands, cover industrial ponds, or avoid water evaporation from irrigation canals.”

Professor Reisner also highlighted another beneficial aspect of the leaf design saying, “In theory, you could roll up these devices and put them almost anywhere, in almost any country, which would also help with energy security.” 

What Does This Mean For Your Organisation? 

The floating fuel synthesis leaf design is an early step towards the automation and up-scaling of solar fuel production and could help industries that have struggled to decarbonise (such as global shipping) to find a simple way to do so. The fact that the ‘leaves’ can simply be rolled-up to be moved to where they’re needed and floated on water (i.e. not taking up space on land) give the design real flexibility in where and how they could be used. For example, as highlighted by the researchers, the leaves could be used to supply coastal settlements, remote islands, cover industrial ponds, or even be used to avoid water evaporation from irrigation canals. The leaves could, therefore, benefit whole industries, businesses, and individuals wherever there’s an expanse of water (which accounts for most of the earth’s surface) and, if scaled up, offer a real a sustainable and low-carbon alternative to petrol.

For a Few Bits More

On June 8th, 1978, a technological milestone was born, significantly shaping the future of computing because this was the day that marked the introduction of the Intel 8086, Intel’s inaugural 16-bit microprocessor.

In the world of computing and microprocessors, the term “bit” signifies the basic units of data a processor can process simultaneously. Transitioning from 8-bit to 16-bit didn’t just signify a capacity increase; it represented an astronomical leap in intricacy and performance. This increase in bit-capacity enabled the processor to manage larger numbers, increased memory, and execute faster computations. 8 Bit processors were dominant for around a decade in the 70’s. By comparison, modern computers are typically running 32 or 64 bit processors. Incredibly, a 16 bit processor was first introduced by MIT as early as 1951 however this used vacuum tubes!

Intel, the mastermind behind this ground-breaking technology, wasn’t alone in the competition. It faced significant challenges from emerging tech-titans, like Texas Instruments, Motorola and Zilog. Texas Instruments launched their 26 bit version 2 years earlier.

Intriguingly, it was software, rather than hardware, that provided Intel with a competitive edge. Morse and his team engineered the 8086 with backward compatibility, implying it could operate software developed for the preceding 8-bit processors. This ingenious strategy not only conserved developers’ precious time but also opened a galaxy of opportunities.

Initially, the commercial world overlooked the monumental significance of this invention. However, the processor soon silenced its doubters. The 8086 laid the foundations for the x86 architecture, which continues to be the backbone of a multitude of today’s computers, from the unpretentious personal computer to powerful servers powering the internet, the legacy of the 8086 is ever-present.

In the rapidly progressing tech ecosystem, chances for development and innovation frequently stem from collaboration and strategic alliances. To reiterate, a key step in Morse’s breakthrough was built upon the understanding of existing 8-bit software so that the 16-bit processor could be backwardly compatible. In light of this, an you think of how you can make your products/services more compatible with other providers’ offerings?

ESET researchers have reported finding mic-snooping hidden malware in the legitimate Android iRecorder – Screen Recorder (screen-and-audio recorder) app while it was still available in the Google Play Store. The malware was added as an update, and it’s thought that tens of thousands of people may have downloaded the app before Google was alerted and the app was removed from its online store.

If you’d like a way to create and share a WhatsApp call link so that anyone with a WhatsApp account can join your call by opening the link, here’s how:

– Tap the ‘Calls’ tab and tap ‘Create Call Link’.

– Select your call type, video, or voice.

– Tap ‘Copy Link’, and send the ‘Link via WhatsApp’ to share in WhatsApp, or ‘Share Link’ to share it in another app.

Each time you create a call link the URL is different and secure, so no one can guess your call links.

Here we look at most of the modern top-level domains and their uses, along with the advantages and disadvantages of choosing a newer, lesser known, or more specific TLD for your website domain name.

What Are Top Level Domains? 

Top-Level Domains (TLDs) are the highest level in the hierarchical Domain Name System (DNS) structure of the internet, i.e. they are the last segment of a domain name that follows the final dot (e.g., .com, .org, .net). In short, TLDs categorise and classify domain names based on their purpose or geographic location.

Two Main Types 

There are two main categories of TLDs:

1. Generic Top-Level Domains (gTLDs): These are TLDs that are not specific to any country or geographic region. Some common examples of gTLDs include .com, .org, .net, and .info. Originally, gTLDs were limited to a few generic options, but with the expansion of the internet, many new gTLDs have been introduced to provide more specific categorisations for websites.
2. Country Code Top-Level Domains (ccTLDs): These are TLDs that are associated with a specific country or territory. Each country is assigned a two-letter code (e.g., .us for the United States, .uk for the United Kingdom, .ca for Canada) to create country-specific TLDs. These TLDs help indicate the geographic association or targeting of a website.

TLDs serve several purposes, including indicating the nature of a website (e.g., .com for commercial, .edu for educational institutions) or its association with a particular country or region. They provide a structured and organised system for domain names on the internet, allowing users to easily identify the purpose or location of a website based on its TLD.

Main Top Level Domains 

There are many TLDs that most of us would recognise e.g., .com, .org., .net, and many country specific TLDs such as .co.uk. However, new TLDs are introduced all the time, and the list below includes many of the newer ones and their intended purpose.

1. .com: Originally intended for commercial websites, it has become a widely used TLD for various types of websites.
2. .org: Primarily used by non-profit organisations and associations.
3. .net: Initially designated for network infrastructure, it is now used for a variety of purposes.
4. .gov: Restricted to U.S. government entities.
5. .edu: Restricted to accredited educational institutions, such as universities and colleges.
6. .mil: Restricted to U.S. military entities.
7. .int: Reserved for international treaty-based organisations and institutions.
8. .info: Intended for informative websites, although it’s open for general registration.
9. .biz: Designed for business-oriented websites.
10. .mobi: Intended for websites optimised for mobile devices.
11. .name: Meant for personal websites and portfolios.
12. .pro: Originally intended for professionals like doctors and lawyers, but it’s now open for general registration.
13. .co: Originally the TLD for Colombia, it has gained popularity as a global alternative to .com.
14. .io: Originally the TLD for British Indian Ocean Territory, it has become popular among tech companies and startups, and for downloadable games. They are treated as generic top-level domains by Google and there are no restrictions on who can use a .io domain.
15. .me: Often used for personal websites, blogs, and online resumes.
16. .tv: Originally the TLD for Tuvalu, it is frequently used by television and media-related websites.
17. .dev: Geared towards developers, programmers, and technology-focused websites.
18. .design: Targeted towards designers and creative professionals.
19. .agency: Suitable for advertising agencies, marketing firms, and creative service providers.
20. .store: Ideal for e-commerce platforms and online retail businesses.
21. .blog: Geared towards bloggers and individuals sharing their thoughts and ideas.
22. .travel: Restricted to entities in the travel and tourism industry.
23. .photography: Suited for photographers and photography-related websites.
24. .restaurant: Targeted towards restaurants, cafes, and food establishments.
25. .esq : a secure domain for lawyers or ‘distinguished’ people.
26. .foo: a domain from a word used in computer programming that can offer a distinctive and different position.
27. .nexus: Another a top-level extension designed for entities in the technology industry.
28. .prof: A domain designed to connect professors to students, colleagues, universities, and peers.
29. .zip: A domain for storage services (think zip files).
30. .mov: A domain for anything related to films and video.
31. .phd: Designed to show the credentials of those with a PhD qualification.
32. .giving: A domain to be used for fundraising efforts by non-profits, social enterprises, or companies involved in fundraising.
33. .kids: Useful for websites aimed at entertaining and educational web content for children and youth.
34. .rsvp: A secure domain for events and reservations, e.g. events, fundraisers, business bookings, and more.
35. .boo: For fun marketing or special events, e.g. Halloween.
36. .abbvie: Solely for websites affiliated with US pharmaceutical giant ‘Abbvie’.
37. .pioneer: A domain solely for those affiliated with the Pioneer Corporation (Japanese company known for electronics).
38. .channel: For uses by creators and publishers to host or redirect to storefronts featuring digital and physical products.

.Dad Domain For Father’s Day? 

Google’s. dad domains (which could make a good Father’s Day present) can be used for fatherhood-related content e.g., urname.dad, yourblog.dad, yourbusiness.dad. Google says its .dad registry is for dads who want to start a blog or someone showing appreciation for the father figures in their life. Examples of some of the sites and communities on .dad include:

– Classic.dad – All about the Dad Life, such as puns, dad cooking, fixing just about anything with duct tape and more.

– Lifeof.dad and life.dad – a leading community of dads whose mission is to celebrate fatherhood by entertaining and supporting dads.

– WorldsGreatest.dad – a Father’s Day page dedicated to a great dad, complete with photos and captions.

– Mr.dad / expectant.dad /new.dad – a site sharing resources to help dads become the fathers they want to be.

What Are The Advantages And Disadvantages Of Having A Lesser Known Or More Specific Domain? 

Choosing a lesser-known, newer, or very specific Top-Level Domain (TLD) for your website domain name can have both advantages and disadvantages. Here are some considerations:

Advantages: 

– Availability. Lesser-known or newer TLDs may have a wider range of available domain names compared to popular TLDs like .com, where many desirable names are already registered. This gives you a better chance of finding a domain name that matches your brand or business.

– Specificity. Certain TLDs are tailored to specific industries or interests. If the TLD aligns closely with your niche or target audience, it can help communicate your website’s purpose or specialisation right in the domain name, making it more memorable and relevant to visitors.

– Branding. A unique or specific TLD can enhance your brand identity and differentiate your website from competitors. It can give your website a distinctive and memorable web address, which can be advantageous for marketing and branding purposes.

– Availability of keyword-rich names: In some cases, newer or specific TLDs might have more keyword-rich domain names available. This can be valuable for search engine optimisation (SEO) as having relevant keywords in your domain name can potentially improve your website’s visibility in search results.

Disadvantages: 

– Familiarity. Lesser-known or newer TLDs may not be as well-recognised or familiar to internet users compared to traditional and popular TLDs like .com or .org. This could lead to a perception of untrustworthiness or unfamiliarity, especially if visitors are accustomed to more established TLDs.

– User perception. Some users may associate specific TLDs with low-quality or spammy websites. If you choose a TLD that has a negative reputation or is commonly used for malicious purposes, it might impact user trust and deter potential visitors.

– SEO considerations. While having keyword-rich domain names can be beneficial for SEO, the impact of TLDs on search engine rankings is debatable. Search engines like Google claim that TLDs do not directly affect rankings. However, user perception and click-through rates can indirectly impact SEO performance, and a less recognisable TLD might affect user behaviour and therefore SEO.

– Limited availability of domain extensions: Depending on the specific TLD you choose, you might have fewer options when it comes to domain registrars or web hosting providers. Some TLDs have limited availability and/or higher registration costs due to exclusivity or being managed by specific entities.

– Ultimately, the decision to choose a lesser-known, newer, or very specific TLD for your website domain name should consider your brand identity, target audience, marketing strategy, and long-term goals. It’s essential to weigh the advantages and disadvantages and consider how the TLD choice aligns with your overall online presence and branding objectives.

Will Having A New Or Lesser-Known Domain Have A Negative Impact On Your Search Engine Rankings? 

According to Google, the choice of TLD does not directly impact a website’s search visibility or rankings.

Google says its primary focus is to provide users with the most relevant and high-quality search results, regardless of the TLD used by a website and that its search algorithms primarily assess factors such as content relevance, user experience, backlinks, and other SEO signals to determine search rankings.

However, it’s important to note that user behaviour and perception can indirectly influence search rankings. If users are less familiar with a specific TLD or have a perception that it is associated with low-quality websites, they may be less likely to click on search results with those TLDs. This lower click-through rate (CTR) can potentially impact the visibility of websites with new or specific TLDs in search engine results.

Additionally, the content and relevance of a website’s pages, its overall SEO optimisation, and the quality and quantity of backlinks it receives remain crucial ranking factors. These factors are not directly influenced by the TLD but rather by the website’s overall optimisation efforts.

It’s worth noting that search engine algorithms and practices may evolve over time (with the introduction of AI within searches), and new information or updates may be introduced. Therefore, it’s always advisable to stay informed about the latest SEO practices and guidelines from search engines like Google to ensure your website performs well in search results, regardless of the TLD chosen.

What Does This Mean For Your Business? 

Choosing the right Top-Level Domain (TLD) for your website domain name is a decision that can significantly impact your online presence and branding. While newer, lesser-known, or very specific TLDs offer certain advantages, they also come with potential drawbacks. It’s crucial to carefully consider these factors and evaluate how they align with your business goals.

The advantages of opting for a lesser-known or specific TLD include, for example, increased availability of domain names, better specificity and relevance to your niche, enhanced branding opportunities, and the potential for keyword-rich domain names. These factors can contribute to better visibility, differentiation from competitors, and improved memorability for your target audience.

However, there are also disadvantages to consider. Lesser-known TLDs may lack familiarity among internet users, potentially leading to a perception of untrustworthiness. User perception and trust are crucial for attracting visitors to your website. Additionally, the impact on search engine rankings remains uncertain, with search engines like Google stating that TLDs do not directly affect rankings. However, user behaviour and click-through rates can indirectly influence SEO performance.

Also, the limited availability of domain extensions and potential higher costs associated with specific TLDs can pose challenges when registering a domain or finding suitable web hosting providers.

Ultimately, the choice of TLD should be aligned with your brand identity, target audience, marketing strategy, and long-term goals. Consider the advantages and disadvantages outlined in this article and weigh them against your specific business needs. Stay informed about the latest SEO practices and guidelines to ensure your website performs well in search results, regardless of the TLD chosen.

Choosing the right TLD, therefore, is a strategic decision that requires careful consideration. By understanding the advantages and disadvantages, you can make an informed choice that aligns with your business objectives and helps create a strong online presence.

The Shap-E AI system from OpenAI (creators of ChatGPT) and available for open-source download, can create 3D models from text.

What Is It? 

According to the Cornell University researchers behind the system, Shap-E is “a conditional generative model for 3D assets” which, unlike other 3D generative models “generates the parameters of implicit functions that can be rendered as both textured meshes and neural radiance fields” rather than producing a single output representation. In short, Shap-E is a big step forward in simplifying the generation of 3D models that can generate “complex and diverse 3D assets” in seconds (when trained on a large dataset of paired 3D and text data).

Trained In Two Stages 

OpenAI says that Shap-E works so well (and better than the previous Point-E models) because it is trained in two stages: first, the encoder that deterministically maps 3D assets into the parameters of an implicit function is trained and second, we train a conditional diffusion model on outputs of the encoder.

Faster & Better 

When compared to Point-E, which is an explicit generative model over point clouds, the new Shap-E converges faster and reaches comparable or better sample quality despite modelling a higher-dimensional, multi-representation output space.

Examples 

Examples of the text-conditional models created by Shap-E and the simple prompts used to create them can be seen at the foot of this page. For example, the first model was created simply by using the text prompt “a chair that looks like an avocado.”

Where & How? 

Shap-E can be downloaded free here https://github.com/openai/shap-e/ and accessed on Microsoft Paint 3D.

Challenge 

Even though Shap-E simplifies 3D model making, some tech commentators have reported that getting the new model installed and running can be complicated and take some time, and that a lot of system resources are required to use it.

3D Printing 

There are also developments in the 3D printing world, e.g., with advanced models like the Chinese Artillery 3D Sidewinder. Today’s advanced, large 3D printers are moving more into the production technology stage from one-off manufacturing and prototyping, and additive manufacturing (constructing a three-dimensional object from a CAD model or a digital 3D model) could soon be fed by models created by AI models that use text or even speech to create items.

What Does This Mean For Your Business? 

The Shap-E represents a big step forward in speeding up and simplifying the making of 3D models and making it more accessible to all kinds of businesses. Being able to quickly visualise a concept or idea and chop and change it with just words, and to create a model that can be used to make a 3D printed item is used in many industries and fields for making prototypes, components, end products, reconstructed fossils, or artefacts (and much more) could deliver huge benefits to many businesses. Although Shap-E, as shown by the example models, is still at an early (but still impressive) stage, linking things like AI text (or speech) model generators to 3D printers could dramatically speed up, cut costs, and simplify areas of manufacturing that would have proved much more challenging before.

For the moment, having a free 3D model generator for general usage that works on simple text inputs makes 3D modelling more accessible to any business and will help with creativity and conceptualising, and we have yet to see its true value and range. Reports indicate that it may be a little challenging to install but as it’s from OpenAI it comes with a good pedigree and once up and working, it may prove a useful tool for many businesses, as well as being fun!

Apple has reportedly banned the internal use of ChatGPT and other chatbots plus AI writers like Bard, Copilot and GitHub to prevent the sharing of sensitive company information.

Internal Document Seen 

The ban came to light following a report by the The Wall Street Journal, which said it had seen internal documents informing Apple employees of the ban.

Why? 

The main reasons for the extra secrecy measures from Apple are that:

– There are rumours that Apple is either working on its own generative AI or is making secret technical improvements to Siri to help it compete with Google and Amazon’s digital assistants.

– Confidential data fed into AI chatbots is often used to further train them and can, therefore, be revealed if someone asks the chatbot similar questions. Also, possible bugs in chatbots, such as the one (discovered in March) in an open-source library, can lead to sensitive information being revealed. This fear of revealing company secrets and possible security issues is why many tech companies and banks (such as Amazon, JPMorgan Chase, Bank of America, Citigroup, and Deutsche Bank) have all banned internal usage of ChatGPT. Other companies, such as Samsung, have imposed a character count and other limitations on the use of AI chatbots for the same reason.

What Does ChatGPT Say? 

Users of ChatGPT are warned upon login anyway that ‘conversations may be reviewed by our AI trainers.’

Also, last month, addressing fears of ChatGPT having the potential to reveal commercially sensitive information, OpenAI announced that it has introduced the ability to turn off the chat history in ChatGPT and that conversations started when chat history is disabled won’t be used to train and improve its models, and won’t appear in the history sidebar.

OpenAI also said that when chat history is disabled, it will retain new conversations for 30 days and review them only when needed to monitor for abuse, before permanently deleting them.

Working On A New Business Version

In the same announcement, OpenAI said it’s working on a new ChatGPT Business subscription for professionals who need more control over their data as well as enterprises seeking to manage their end users. This business version will follow its API’s data usage policies, so that end users’ data won’t be used to train OpenAI’s models by default.

Call For Regulation of AI 

Recently, OpenAI’s CEO, Sam Altman, told the US Senate judiciary committee that he supported the use of regulatory intervention by governments to mitigate the risks of increasingly powerful models.

What Does This Mean For Your Business? 

It has been known for months that, due to how they are trained (and the possible bugs in this relatively new technology), ChatGPT and other AI chatbots have the potential to reveal sensitive information that’s been inputted by users. This is why many big companies have moved to close this risk-loophole by simply banning the internal use of ChatGPT. OpenAI has been relatively transparent about the way its AI chatbot is trained and the possible risks and its CEO has himself publicly supported regulation of AI as the technology moves forward at an alarming pace. Also, as highlighted above, OpenAI has introduced measures around control of ChatGPT history by users and promised a business version that gives users more control over their data. For businesses that are particularly concerned about privacy and security issues in the use of chatbots for work, the safest guidance for now may simply be to ban the use of an AI chatbot or introduce controls on what can be inputted and how.

BT has announced that the completion of its fibre roll-out, 5G rollout, adapting to new technologies like AI, plus general cost cutting are key reasons why it will be axing up to 55,000 jobs, primarily in the UK, by the end of the decade.

40 Per Cent Of The Workforce 

The massive 40 per cent cut in BT’s workforce will lead to a significantly reduced cost base by the end of the 2020s and, according to boss Philip Jansen, make the new BT Group “a leaner business with a brighter future.”

Drivers Of Job Cuts 

The main drivers and numbers of the job cuts are reported to be:

– The completion of the most labour-intensive stage of BT’s next-generation full-fibre and 5G network expansion, which will mean 15,000 job cuts as fewer engineers will be required.

– The digitising of BT’s business and the wider adoption of AI, e.g. for call handling and network diagnostics, which will result in the loss of 10,000 jobs.

– The above-mentioned changes leading to fewer maintenance staff being required, which will result in another 10,000 jobs being cut.

– Cuts in the number of contractors (mainly abroad) which will mean the loss of 30,000 jobs.

– General re-structuring and cost-cutting as part of a rolling programme, meaning a loss of 5,000 jobs.

Vodafone  

BT’s job cuts announcement follows Vodafone’s decision to cut 11,000 jobs (around 12 per cent of its 90,000 global workforce) over three years.

Unions Expected It

The Communications and Workers Union (CWU) said that the BT job cuts were no surprise due to the introduction of new technologies and the completion of infrastructure projects.

Share Value Affected 

BT’s profits had dropped 12 per cent to £1.7 billion for the year ending in April and the company’s shares also fell more than 7 per cent after the job cuts announcement. Analysts suggest that the job cut announcements may be aimed at convincing investors of the promised cost savings.

AI Opportunities

With ChatGPT’s massive impact on the business world, much has been made around the part it will play in replacing some of the BT jobs. BT’s Boss Philip Jansen admitted that he sees “huge opportunities” to use AI in the business, e.g. to improve customer service and that an AI tool like ChatGPT “gives us confidence we can go even further”. However, he also says that, although adapting to new technologies, he doesn’t want to make customers “feel like they are dealing with robots”. 

What Does This Mean For Your Business? 

As the unions pointed out, job losses at BT were expected anyway due to the introduction of new technologies across BT and the completion of the fibre infrastructure replacing the copper old network (resulting in in less labour costs). The arrival and enormous impact of ChatGPT (and now Bard), CoPilot, and others, however, have brought with them the kind of automation that has long been thought could lead to job losses, which appears to be the case here for around 10,000 BT workers. This could now become a growing trend as other big companies start to bring the cost and time saving benefits of AI into more parts of their business. As many commentators have noted, however, AI can also create new opportunities and new types of jobs and we are still very much at the beginning of the journey with generative AI, and regulation is likely to be an important step in making sure that the rapid growth of AI usage is safe and beneficial.