Category: What’s New in Technology

A notable instance of this fraud is that of a Hong Kong-based multinational firm that lost $25 million after being duped by a deepfake impersonation of their CFO. Using a realistic video call, the scammer instructed an employee to transfer the funds to a supposedly urgent business acquisition in China. Unfortunately, the employee was unaware of the deepfake and fell victim to the elaborate scam.

In another instance, a cybercriminal impersonated the CFO of a prominent financial institution using a deepfake audio recording. The fraudulent call, which sounded identical to the CFO’s voice, instructed an employee to disclose sensitive client information. Believing it was a legitimate request from the CFO, the employee complied, unintentionally compromising confidential data and exposing the organization to regulatory penalties and lawsuits.

Mitigating the Threat

Organizations must implement robust cybersecurity measures and employee training initiatives to deal with the rising threat of CEO and CFO fraud facilitated by deepfakes and social engineering. Below are some strategies to consider:

• Employee education and awareness: Companies can hold regular training sessions to educate employees about the dangers of social engineering tactics and how to identify suspicious communications, including deepfake content. They also can encourage vigilance and emphasize the importance of verifying requests, especially those involving financial transactions or sensitive information.
• Multi-factor authentication (MFA): Businesses are implementing MFA protocols for financial transactions and accessing sensitive data. By requiring multiple verification forms, such as passwords, biometrics or one-time codes, MFA adds an extra layer of security that can help hinder unauthorized access, even if credentials are compromised.
• Strict verification procedures and zero-trust policy: Organizations can establish strict verification procedures for any requests involving changes to payment instructions or the disclosure of sensitive information. Employees must verify such requests through multiple channels, such as phone calls or in-person meetings.
• Advanced detection technologies: Companies also might invest in advanced detection technologies capable of identifying deepfake content and other forms of manipulated media. These tools use AI algorithms to analyze multimedia content for signs of tampering or manipulation, helping organizations identify potential threats before they escalate.

As deepfake technology advances, these scams will likely become even more sophisticated and challenging to detect. As Gartner predicts, by 2026, identity verification and authentication solutions such as face biometrics could become unreliable due to AI-generated deepfakes. Therefore, it is crucial to acknowledge the broader implications of deepfakes and social engineering. Regulatory bodies, technology companies, and other concerned institutions must collaborate to develop comprehensive frameworks that address the ethical use of AI, establish clear guidelines for deepfake technology, and enhance overall cybersecurity resilience.

Conclusion

As deepfakes and social engineering tactics continue to evolve, the threat of CEO and CFO fraud is a real challenge for organizations of all sizes. Sophisticated technology and deceptive practices have made it easier than ever for cybercriminals to impersonate executives and manipulate employees into unknowingly facilitating fraudulent activities. Organizations must adopt proactive approaches to mitigate the risks associated with deep fake-enabled fraud and to safeguard their assets and reputations in an increasingly digital landscape.

Starting this February, major email providers Gmail and Yahoo are implementing stricter email deliverability rules to combat spam and protect user inboxes. This announcement was made by both Google and Yahoo on Oct. 3, 2023, indicating a united effort to enhance email security.

Initially intended for bulk senders (marketers, businesses, and individuals) sending more than 5,000 emails a day, it also applies to senders who send regular emails to their subscribers and meet criteria as per the updated Google Email Sender Guidelines.

Although it may sound strict, there is nothing to worry about. By understanding the rules and adopting best practices, you can ensure your messages land safely in your subscribers’ inboxes.

Key Rules to Remember

• Domain Authentication is Paramount – Implement security protocols, including Domain Keys Identified Mail (DKIM), Sender Policy Framework (SPF), and Domain-based Message Authentication, Reporting and Conformance (DMARC) to verify your sending domain and prevent spoofing. DKIM digitally signs emails for verification. SPF confirms that sending domain authorization prevents spammers from impersonating and sending messages from your domain, while DMARC specifies the handling of unauthenticated emails. Basically, these protocols confirm your sending domain as legitimate and not from a malicious email spammer or phisher. Although these protocols have been previously considered best practices, many senders have unknowingly or knowingly bypassed them. Some have ignored them, considering them challenging to deploy. Hence, the step to enforce them as mandatory requirements.
• One-Click Unsubscribe is Mandatory – Make it easy for subscribers to opt out with a clear and accessible unsubscribe link in every email. The unsubscribe requests must be honored within 2 days. You can add an unsubscribe button to the header, whereby recipients can unsubscribe easily instead of marking an email as spam. This will ensure email deliverability is not harmed. Allowing easy unsubscribe also offers the benefit of having an email list of quality subscribers.
• Maintain a Low Spam Complaint Rate – Keep your spam complaints below 0.3 percent (ideally, this should be below 0.1 percent) to avoid landing in the spam folder or getting blacklisted. Failing to comply with the spam complaint threshold could put the sending domain under review, restricting your email reach.

Beyond the Rules: Deliverability Best Practices

• Clean and Permission-Based Email Lists – Send only to subscribers who have opted-in, and keep your list clean by removing inactive users and bounced addresses.
• Personalization and Segmentation – Tailor your emails to individual preferences and segment your list based on demographics, interests, or engagement levels.
• Mobile-Friendly Design – Ensure your emails are optimized for mobile devices, as most users check their email on smartphones.
• Subject Line Optimization – Craft compelling and relevant subject lines that invite users to open your emails.
• Craft High-Quality and Engaging Content – Provide relevant and valuable information to maintain audience interest and avoid being marked as spam.
• Avoid Spammy Tactics – Avoid excessive images, ALL CAPS text, and misleading content.
• Engagement and Reputation – Encourage engagement by asking questions, including social media links, and providing valuable content. Positive user interactions improve the sender’s reputation.

Consequences of Ignoring the Rules

Failing to adhere to the new rules can have severe consequences, including:

• Emails Landing in Spam Folders – Your messages may never reach your intended audience.
• Domain or IP Blacklisting – Repeated violations can lead to your domain or IP address being blocked by email providers.
• Decreased Sender Reputation – This can negatively impact your future deliverability rates, affecting domain reputation and overall business performance.

Adapting to the New Landscape

Although these requirements may seem overwhelming, they represent an opportunity to improve your email marketing practices and build stronger relationships with your subscribers. By prioritizing sender authentication, clear communication, and valuable content, you can ensure your emails reach the right inboxes and achieve your marketing goals.

Remember, staying informed about email deliverability best practices and adapting to evolving regulations is crucial for successful email marketing in today’s landscape.

The adoption of super apps in the West has been slower and more fragmented compared to Asia. While user preferences are shifting toward integrated digital experiences, regulatory and market dynamics have challenged the widespread adoption of super apps. However, elements of the super app model are gradually being incorporated into existing Western apps as companies explore ways to provide users with a broader range of services within their ecosystems. A good example is the acquisition of Twitter, rebranded to X by Elon Musk, intending to turn it into an everything app.

According to research on the global super apps market, the value of the market in 2022 was $58.6 billion. The market size value is expected to reach $722.4 billion by 2032. This signals the enduring presence of super apps, requiring businesses to adapt in order to maintain their competitive edge.

The Impact on Traditional Business Models

Super apps have challenged established business models in many industries, including finance, retail, and transportation, among others. In retail, super apps often include marketplaces that offer users a wide range of products and services. This has disrupted traditional brick-and-mortar retailers and standalone e-commerce platforms. As users spend more time within super apps, they are less likely to use separate e-commerce apps, leading to a shift in the retail landscape.

In finance, super apps frequently integrate financial services, such as mobile payments, digital wallets, and personal financial management. This has upset traditional banking models by offering a more accessible and user-friendly way to manage money. The convenience and speed of financial transactions within super apps are compelling, drawing users away from traditional banking.

In transportation, super apps have revolutionized the industry with ride-sharing and mobility services. Traditional taxi companies and car rental agencies are facing stiff competition from these apps, which offer efficient, cost-effective, and user-friendly alternatives for getting around.

Super apps have also transformed the food and delivery industry by offering a seamless way to order meals, groceries, and other goods. This has challenged traditional restaurants and grocery stores to adapt to the changing market dynamics.

How Businesses Benefit from Super Apps

1. Super apps provide a platform for businesses to reach a vast and diverse user base, leading to increased brand awareness and customer acquisition. They also allow businesses to upsell and cross-sell existing products or services to their customers, increasing sales.
2. By offering a wide range of services, super apps create new revenue streams for businesses and increase customer loyalty as users can access all their favorite services in one app.
3. By bringing together multiple service providers inside their ecosystem, super apps promote cooperation and innovative ways to solve client problems.
4. Businesses may invest in joint ventures and collaborations with other businesses using the super app, resulting in the development of distinctive products and value-added services.
5. Super apps simplify processes for businesses by bringing together multiple service providers. This lets businesses give undivided attention to their core competencies and leave other services to the super app.
6. Super apps allow businesses to build stronger brand loyalty by providing a more convenient, personalized, and cost-effective user experience.
7. Super apps can help businesses reduce costs by eradicating the need to develop and maintain multiple standalone mobile apps. Besides, building a single super app is less expensive than managing multiple apps, and it allows developers to focus on a single product and eradicate unnecessary costs involved in the app development process.

Conclusion

Super apps are here to stay, and their impact on traditional business models is undeniable. They offer users unparalleled convenience, forcing traditional businesses to rethink their strategies. To thrive in this evolving landscape, businesses need to embrace digital transformation, innovate, and consider how they can leverage the reach and capabilities of super apps to their advantage.

Data breaches have been on the rise as cybercriminals keep coming up with new ways to steal user-sensitive information. Just in the second quarter of 2023, 110.8 million user accounts were breached. Of these accounts, 49.8 million were from the United States, accounting for 45 percent of the global figure. However, amid the rising threats, a revolutionary concept known as decentralized identity systems has created a solution to reduce data breach cases.

Data Breaches and the Current State of Identity Management

A data breach happens when unauthorized individuals or entities gain access to sensitive information, often for malicious purposes. These breaches can happen to anyone, from individuals to large corporations, and they come with severe consequences that could include financial losses, reputation damage, and identity theft.

The current identity systems are centralized and have inherent vulnerabilities and limitations. These centralized identity systems involve a central authority, such as a government agency or a corporation, storing and managing individuals’ personal information. This means that if a hacker breaches the central authority’s security, he or she gains access to a vast amount of sensitive data.

Furthermore, since the centralized systems often collect extensive personal information, the practice raises concerns about data privacy. The entities storing user data predominantly control and monetize it, which has led to discomfort and distrust among users.

The centralized systems also create a fragmented user experience. This is because different platforms, such as social media, online retailers, news websites, etc., require users to create accounts. Users then must juggle multiple usernames, passwords, and data formats, complicating the digital experience. Businesses also incur high costs associated with ensuring secure systems, the latest infrastructure, and compliance.

How Decentralized Identity Systems Can Help Prevent Data Breaches

Decentralized identity systems are an alternative to centralized identity management. These systems put individuals in control of their own digital identities. The decentralized identity systems are enabled by technologies such as Web3, a concept based on a trust framework for identity management. Web3 evolution has led to decentralized identifiers, and this allows for secure management of user data and authentication through blockchain wallets.

Using blockchain technology ensures the security and immutability of identity data. Once information is added to the blockchain, it cannot be altered or deleted without the user’s consent.

However, they allow users to have control over their identity information. Users choose what data to share and with whom, enhancing privacy and security. There is no need for third parties to verify user identity.

Since users store data on their devices or a location they choose, it eliminates single points of failure. Instead of a centralized authority, identity data is distributed across a decentralized network of nodes. Additionally, these systems use advanced cryptographic keys, allowing only the user to access their data.

Decentralized identity systems are already making an impact in various industries, such as healthcare, financial services, and government services. The security benefits of decentralized identity include:

• Enhanced Security

Decentralized identity systems offer robust security measures. With data stored on a blockchain, it becomes exceedingly difficult for hackers to breach the system. Even if one node is compromised, the decentralized nature of the network ensures that other nodes maintain the integrity of the data.

• Privacy Control

Users regain control over their personal information. They decide what data to share and retain the ability to revoke access at any time. This puts an end to excessive data collection by corporations and governments.

• Reduced Identity Theft and Fraud

Decentralized identity systems make it incredibly challenging for fraudsters to impersonate individuals or access their data. This significantly reduces the risk of identity theft and related fraudulent activities.

• New Economic Models
  Decentralized identity models can create new economic models where consumers are awarded when they choose to share their data with service providers.

While decentralized identity systems offer promising solutions, they are not without challenges. The widespread adoption of decentralized identity systems presents scalability challenges. Another challenge is usability, as complexity can deter individuals and businesses from embracing this technology. The need for a regulatory framework is another challenge, as it is necessary to address factors related to legal and compliance.

Conclusion

Decentralized identity systems offer hope in an age where data breaches are a constant threat. These systems can revolutionize how users secure their digital identities by putting control back into individuals’ hands. While challenges exist, the benefits of enhanced security, privacy control, and reduced fraud make decentralized identity systems a promising solution in the ongoing battle against data breaches.

Marketing efforts today depend on collecting, analyzing, and leveraging data to make informed decisions. Therefore, business owners need to understand how to harness the power of data and personalization to create targeted campaigns that drive growth.

Importance of Data and Personalization in Modern Business

Businesses today collect loads of data, enabling them to understand their customers’ preferences, behaviors and interests. The data comes from different channels, such as a business website, emails, or social media. It is then used to identify patterns and trends to make informed marketing decisions. This yields valuable insights that help craft highly personalized and effective marketing strategies.

Data is the foundation of personalization strategies. Personalization involves tailoring customer experiences to meet individual interests, needs, and preferences. It aims to build strong customer relationships, encourage engagement, and drive revenue and growth.

Personalization takes different approaches, such as recommendations based on previous purchases, creating unique landing pages, or sending emails based on customer browsing behavior. For example, e-commerce websites recommend products based on user browsing history and search queries.

Business owners can’t afford to ignore personalization since customers today are more informed, can easily access information, have more options, and have more control over purchase decisions. Furthermore, customers are more demanding and want to be recognized as individuals, expecting to receive personalized experiences. This has rendered traditional, one-size-fits-all marketing strategies obsolete.

How Businesses Can Use Data and Personalization for Targeted Campaigns and Growth

Using a data-driven approach, a business can create campaigns that deliver the right message to the right audience at the right time by doing the following:

1. Audience segmentation

Capturing the attention of a specific audience segment leads to higher conversion rates. To do this, a business can leverage data insights to segment the target audience. This means it is possible to categorize potential customers based on demographics, interests, or browsing behavior.

2. Crafting personalized content

Once segmentation is complete, it becomes possible to create tailored campaigns that resonate with each segment’s unique preferences. Aside from addressing customers by their names, it involves delivering content that speaks directly to their needs, interests, and pain points. This could include product recommendations based on past purchases or sending targeted offers that align with customer browsing history.

3. Omnichannel personalization

Customers interact with businesses using various channels, such as a business website, social media, emails, and mobile apps. A business can integrate data and personalization efforts to ensure a seamless journey for customers, regardless of where they engage. Additionally, it is crucial to deliver consistent and personalized experiences across these channels.

4. Continuous improvement in data-driven campaigns

Data insights also help guide businesses on the most suitable content and distribution strategies. They can analyze types of content performing well and in which channels. For example, a business can conduct A/B testing to compare campaign and content variations to identify the most effective approach for each segment.  

5. Measuring and analyzing results

To establish the effectiveness of personalized campaigns, a business will need to develop clear key performance indicators (KPIs) and measurement methods. One way to measure the impact of personalization is through customer engagement. This is done by measures such as click-through rates on personalized emails, customer retention rates, customer lifetime value, customer feedback, and number of sales.

It is worth noting that to make the most out of data insights. It is helpful to invest in advanced analytics tools or collaborate with data experts.

6. Adapting to changing trends

The digital landscape is evolving constantly, with new technologies and trends emerging regularly. Businesses must stay updated on these changes and adapt their personalization strategies accordingly. Remaining flexible and open to innovation ensures that the company’s targeting efforts are relevant and effective.

Data Privacy and Security

Although personalization in modern business is crucial, it must be balanced with privacy concerns. First, a business must be transparent about the data it collects and how it will be used. In addition, businesses need to be careful with the data they collect. They must ensure data security by safeguarding data storage and using safe transmission methods, have access control limits, and regularly audit data privacy policies and practices. Customers should be allowed to opt out of data collection and personalization efforts easily.

Customer data must be well protected to ensure compliance with relevant regulations. It also helps build trust with customers. Besides, a breach of trust can severely affect a business’s reputation and growth.

Data breaches are the work of criminals who aim to obtain specific data. Criminals do this through various methods, including phishing attacks, malware attacks, targeted attacks, vulnerability exploits, and loss or theft of devices. However, data breaches are also a result of technical or human errors. For example, a misconfiguration error exposed the car location data of 2 million Toyota customers in Japan and overseas for 10 years; and the work of an insider led to Tesla’s massive data breach.

Unfortunately, data breach cases keep rising. May 2023 alone saw numerous breaches from different organizations, including healthcare organizations, education institutions, the transportation department and even tech giants.

For companies, the consequences of data breaches are reputation damage, loss of consumer trust, intellectual property theft, financial loss and fines due to failure to conform with data protection legislation. While cybercriminals mainly target organizations, individuals also experience identity theft and financial crimes. This especially happens when stolen data is sold on the dark web or publicly published.

What action can data-breach victims take?

Unfortunately, no one is immune from a data breach. However, victims can survive a breach with less disruption. Once a data breach has occurred, the U.S. breach notification law requires businesses or governments to notify those affected immediately after its discovery.

Although companies are responsible for securing customer data in their possession, customers also have a role to play in securing their data. Essential steps to take include:

• Being aware of any site claiming to be a data breach check site.
  Such sites could ask for personal information or ask a victim to click a link to verify their details. Hackers also take advantage of a breach and pose as the affected company to lure victims into clicking malicious links, primarily through emails. A user must, therefore, first confirm that a breach happened. This can be in the news or on the affected company’s website.
• Change passwords for accounts exposed.
  In most cases, affected companies will notify victims of their affected accounts, and their security team will provide instructions on how to stay safe. Such instructions include changing passwords on the breached site or any other account that uses similar login credentials.
• Set up two-factor or multi-factor authentication (2FA/MFA).
  This extra security measure will require a one-time user code to log in to an account in addition to the login and password.
• Notify the bank.
  If financial-related data was stolen, such as credit card information, the bank must be notified immediately to freeze the cards.
• Credit freeze.
  Cybercriminals can use stolen data to open new accounts and take loans. To avoid a ruined credit score, individuals can request a credit freeze from major credit bureaus such as Experian, Equifax and TransUnion.
• Monitor personal accounts for any unusual transactions.
  Although it depends on the type of data breach and exposed data, victims must look out for unauthorized transactions, including bank account transactions, medical bills, insurance claims and tax refund claims.
• File a report with the Federal Trade Commission (FTC).
  If criminals have already used personal data, filing an identity theft report will serve as proof to clear one’s name or dispute a fraudulent transaction.
• Practice cyber hygiene.
  These are practices that help individuals remain safe online. Aside from account security, consumers must use up-to-date software and operating systems, antivirus software, and avoid publishing too much personal information to minimize online footprints that fraudsters can easily access, such as on social media.

It is worth noting that data breaches are not detected immediately, which means that by the time users get notified, cybercriminals already have had access to the data for some time. And as technology advances, cybercriminals are taking advantage of new technologies such as generative AI for phishing attacks. This means that more data breaches may continue to be witnessed.

However, users can help prevent future data breaches by using strong passwords, being cautious of phishing scams, and regularly monitoring financial accounts.

The Pew Research Center and Elon University’s Imagining the Internet Center conducted a nonscientific canvassing to gather expert views about the future of the human agency.

The experts were specifically asked, “By 2035, will smart machines, bots, and systems powered by artificial intelligence be designed to allow humans to easily be in control of most tech-aided decision-making that is relevant to their lives?”

Of the 540 experts from different fields, 56 percent disagreed with the statement, while 44 percent agreed. Some of the main themes raised by the experts who disagreed with the statement include:

• The agendas of commercial interests and governments will determine the future.
• The convenience that comes with automation makes users less vigilant over technology.
• AI technology’s complexity and rapid evolution can be overwhelming, making it difficult for users to assert their agency.

Common themes raised by participants that agreed with the statement include:

• Humans also will evolve with technology, and there is the expectation that AI and tech companies will be regulated.
• Expectations that businesses will protect the human agency to retain public trust and to keep ahead of the competition.
• Technology will allow varying degrees of human agency.

Key Considerations for Upholding Human Agency

Seeing that technology will keep advancing and more automated systems will be witnessed, it’s crucial to implement ways to help uphold human agency. Some considerations include the following:

1. Implement mechanisms that contest AI systems. An AI system is as good as the information fed to it. Therefore, it can be faulty or deliberately flawed, and there should be ways to request redress. This can be through AI policies that allow users to contest or rectify a decision made by AI systems.
2. Empower users through systems that include meaningful choices and controls, enabling users to decide how to interact with them. For example, a system should allow users to adjust preferences, customize settings and choose the features they want. This promotes a sense of ownership and autonomy over digital experiences.
3. Promote digital literacy and education to teach about technology capabilities and limitations. Technology users must develop critical thinking skills to exercise human agency and make informed decisions.
4. Integrate ethical principles into technology design and deployment. This can be done by creating guiding ethical frameworks that consider the likely societal impacts and consequences of digital systems.
5. Guarantee transparency and explainability in technologies and algorithms, providing users with accessible explanations of how decisions are made and what data is utilized. This transparency fosters trust in the technology and empowers individuals to make informed choices.
6. Establish accountability for the design, development, and implementation of digital systems. Holding individuals and organizations accountable for the impact of their technology helps maintain human agency and promotes ethical behavior.
7. Implement robust measures to safeguard individuals’ privacy and protect their data. This includes incorporating strong data protection mechanisms, giving users control over their personal information, and establishing clear consent mechanisms for data collection and usage, accompanied by transparent policies. Respecting privacy rights is paramount for preserving human agency in the digital realm.

Conclusion

The essence of being human lies in exercising control over the nature and quality of an individual’s life. However, technological advances such as artificial intelligence are raising concerns about this human ability. Humans are responsible for actively embracing and comprehending the possibilities and implications of living in a world where digital systems take over various tasks and processes. Instead of surrendering their agency, humans should view partnering with these digital systems as a means to supplement and strengthen their intelligence rather than surrendering it.