Google has built an AI-powered app that lets users scan physical documents and automatically organise them into Google Drive.

«Stacks» can analyse bills, receipts and any paper documents you have laying around the house and uses artificial intelligence (AI) to scan and categorise before turning them into a PDF. 

Users only have to take a photo of their document as the programme can automate the rest. It identifies important information within the document, such as a «due date» or «total amount due», and these bits of information can then be used to help store and search for the documents, with the app auto-generating names based on its content. 

The idea comes from Christopher Pedregal, whose ed-tech startup Socratic was acquired by Google back in 2018. Socratic used Google’s computer vision and language understanding to make learning tools for high school students. The project was developed by Google’s in-house incubator, Area 120, and pulled in members of the tech giant’s DocAI team – which has AI programmes for analysing documents. 

The app is currently available on Android – free and without in-app purchases – and Google will wait to assess user feedback before launching a version on other platforms, such as iOS. Currently, the Android version can scan a range of different sized documents, such as utility bills, shopping receipts and even identification papers. 

Stacks was not the only new AI-based tool Google is showed off on Wednesday as Google Maps has also added a slew of new features. The first is ‘Live View’, which uses augmented reality to help users navigate indoor spaces such as airports or shopping centres. It uses ‘billions’ of Street View images to provide live information for a user as they walk through a building, and graphics will mark out where toilets are or the path to the check-in desk. 

According to a new report, suspected Russian hackers accessed email accounts belonging to the Trump administration’s head of the Department of Homeland Security (DHS).

The Associated Press reported that hackers also gained access to emails belonging to members of the department’s cyber security staff that had the job of hunting foreign cyber threats.

The emails belonged to then-acting secretary Chad Wolf, and hackers compromised them during the months-long SolarWinds attack. It’s unknown what information, if any, was stolen.

Senator Rob Portman of Ohio, top Republican on the Senate’s Homeland Security and Governmental Affairs Committee, said the SolarWinds hack “was a victory for our foreign adversaries and a failure for DHS. We are talking about DHS’s crown jewels,” AP reported.

In addition to Wolf’s email, hackers also obtained officials’ schedules at the Energy Department, including then-Secretary Dan Brouillette. But, in this instance, schedules were not confidential.

A DHS spokesperson said in a statement to the media that “a small number of employees’ accounts were targeted.»

«Upon learning about the campaign, the Department took immediate steps to respond to the incident, including leveraging response teams from CISA and private sector partners, to continue executing its mission,” said the spokesperson, reported The Hill.

«The Department no longer sees indicators of compromise on our networks and remains focused on further securing our networks against future attacks, integrating lessons learned from this incident. However, this widespread intrusion campaign has again shown that our strategic adversaries are sophisticated, persistent, and have increasing capabilities.»

In interviews with AP, anonymous officials said the response to the hacking campaign was hampered by its outdated technology and there were struggles to discover how many servers ran the SolarWinds software.

In one example, the Federal Aviation Administration (FAA) said the hack didn’t affect it, only to admit a few days later that it was conducting investigations a few days later.

Other victims of the SolarWinds hack include the Commerce and Treasury Departments, National Finance Centre, the State Department, the National Institutes of Health, the Energy Department, and the National Nuclear Security Administration.

The AP reported the Biden administration isn’t planning to step up government internet surveillance but will instead focus on better private sector partnerships and enhanced information sharing.

Students at London-based Harris Federation schools have been cut off from their email accounts after the trust became the latest educational institution to fall victim to a ransomware attack.

The incident, which took place over the weekend, comes just days after the University of Northampton fell victim to a cyber attack and follows a worrying trend of hackers targeting educational institutions and disrupting student learning, which has already been heavily affected by the coronavirus pandemic.

The Harris Federation has been forced to “temporarily” disable its email systems and devices of all of the 50 primary and secondary academies that it manages, leaving 37,000 students unable to access their correspondence and coursework.

The academy trust said that the steps were necessary to mitigate the impact of a ransomware attack that encrypted the data on the schools’ IT systems.

It also added that it is “using the services of a specialised firm of cyber technology consultants” as well as “working closely with the National Crime Agency and the National Cyber Security Centre”. Details of the ransom are not publicly available and the trust was not immediately available for additional comment.

In the past five weeks alone, hackers have targeted the University of Northampton as well as Oxford University’s Division of Structural Biology. The recent increase in cyber attacks on educational institutions has prompted the National Cyber Security Centre (NCSC) to issue an alert urging organisations to follow its guidance on ‘Mitigating malware and ransomware.’

NCSC director of operations Paul Chichester labelled the targeting of the education sector by cyber criminals as “completely unacceptable”.

“This is a growing threat and we strongly encourage schools, colleges, and universities to act on our guidance and help ensure their students can continue their education uninterrupted.

“We are committed to ensuring the UK education sector is resilient against cyber threats, and have published practical resources to help establishments improve their cyber security and response to cyber incidents.”

Commenting on the Harris Federation ransomware attack, Ilia Kolochenko, CEO of security company ImmuniWeb said that, “unlike large universities, which can afford spending considerable budgets on cybersecurity, primary schools often struggle to get budgets even for the very foundational security controls, let alone advance cyber defense solutions”.

“Worse, such victims commonly have no choice but to pay the ransom from modest school funds, leaving no money for other activities,” he added.

Kolochenko urged the UK government to «urgently intervene with cyber training, financial and technical support in the UK educational sector”. 

“For example, when buying security software, a volume-discount for all schools in the UK could be huge and make even premium security products affordable. Importantly, cyber police units are also deprived of sufficient funding proportional to surging and sophisticated cybercrime.

«Law enforcement agencies require undelayed financial support to attract new professionals, align forensic capacities with modern cyber threats and perform educational support and awareness among future victims.”

When Boris Johnson uses WhatsApp for official government business, he may be in violation of UK laws due to the platform’s support for «self-destructing» messages. 

That’s according to non-profit groups Foxglove and Citizen, which are threatening legal action over Freedom of Information (FOI) requests that the government is yet to acquiesce.

Citizen said it has sent «several» FOI requests to the government regarding messages on «topics that are in the public interest», but, so far, these have not been acknowledged. As a result, Foxglove and Citizen have sent a legal letter with the threat of a judicial review if it receives an «unsatisfactory» response from the government. 
 
Ministerial use of WhatsApp and Signal is well documented, with various reports of the prime minister using the app to discuss official business with special advisors and other MPs. Foxglove said the capability to instantly delete messages means that legal analysis can never be fully performed and that for a democratically elected government, it presents a lack of accountability. 

A spokesperson for Citizen said that the government’s use of digital messaging apps could render «one giant black hole» in British history.  

«Government business is being conducted under a cloak of secrecy enabled by the tech platforms,» the spokesperson said. «The only way we can have any hope of holding power to account or even simply maintaining the historic record is through transparency. We desperately need to challenge what we believe is a clear breach of the law on behalf of both Britain’s investigative journalists and its future historians.»
 
In response, a spokesperson for the Cabinet Office told IT Pro that «records of official communications are retained in accordance with the relevant publicly published guidance». It also pointed out that instant messages are subject to section 3 of the Public Records Act 1958 which requires them to be permanently preserved so they can be made available for appraisal, selection, sensitivity review and transfer to The National Archive at the appropriate time.
 
The director of Foxglove, Cori Crider, said it was «deeply concerned» by the government’s approach to data, suggesting it involved collecting more and more information on the general public while offering less information on itself. 
 
«This turns democracy on its head,» Crider said. «Privacy is for the people – transparency is for the government. And if we have to sue to tip the scales back in favour of the citizen, so be it.» 

A live broadcast by Australia’s Channel Nine TV station was taken offline by a cyber attack on Sunday evening, the station has confirmed.

The incident affected several shows, including the Weekend Today programme, according to the BBC, with staff now working from home until further notice.

In a statement, the organisation said its IT teams were working «around the clock» to fully restore its services and that the attack also affected its corporate business units, its websites, and email systems.

Australia’s shadow treasurer, Jim Chalmers, told reporters: «These are very concerning reports. What we’re hearing about here is a serious, and sophisticated, targeted attack on a media organisation.»

The attack on Channel Nine coincided with «technical disruption» at Australia’s Parliament House where MPs and senators lost email access over the weekend. The issue was related to an unnamed external provider, according to the country’s minister for defence, Andrew Hastie.

As a precaution, the service was cut off from the rest of the government’s systems as soon as it was detected and Australia’s Cyber Security Centre has been brought in to investigate. At this stage, it isn’t clear whether the parliamentary outage and the cyber attack on Channel Nine were connected.

«This is a timely reminder that Australians cannot be complacent about their cyber security,» Hastie told News.com.au on Sunday. «Cyber security is a team effort and a shared responsibility. It is vital that Australian businesses and organisations are alert to this threat and take the necessary steps to ensure our digital sovereignty.»

Hastie added that Australia saw around 60,000 reports of cyber security and cyber crime incidents last year, roughly one every ten minutes, he said.

Despite the issues, Channel Nine’s broadcast was back up on Monday.

A sophisticated strain of malware capable of stealing user data from infected Android devices is masquerading as the System Update application.

The malicious mobile app, which functions as a Remote Access Trojan (RAT), is part of a sophisticated spyware campaign that has the ability to record audio from devices, take photos, and access WhatsApp messages, according to Zimperium researchers.

Once installed, it registers with its own Firebase command and control (C&C) server, normally used by legitimate Android developers, as well as a second independent C&C server, to send across an initial cache of information. This includes information about whether WhatsApp is installed or not, battery percentage, storage stats, and other information. It can only be installed from a third party store and not the Google Play store.

The malware then receives commands to initiate various actions such as the recording of audio from the microphone or data exfiltration. Researchers have also discovered the malware is capable of inspecting web browsing data, stealing images and videos, monitoring GPS locations, stealing phone contacts and call logs, and exfiltrating device information.

The device also asks permission to enable accessibility services, and abuses this to collect conversations and message details from WhatsApp by scraping the content on the screen after detecting whether the user is accessing the messaging service.

It hides by concealing the icon from the device’s main menu or app drawer, while also posing as the legitimate System Update app to avoid suspicion. When the device’s screen is turned off, the spyware creates a ‘searching for updates’ notification using the Firebase messaging service which allows it to generate push notifications.

The spyware’s functionality is triggered under various conditions, including when a new contact is added, a new text message is received or a new application installed. It does so by exploiting Android’s receivers including ‘contentObserver’ and ‘Broadcast’, which allows communication between the device and the server.

The Firebase messaging service is only used to initiate malicious functions, such as audio recording or data exfiltration, by sending commands to infected devices. The data itself is then collected by the second dedicated C&C server.

The spyware also only collects up-to-date information, with a refresh rate of roughly five minutes for location and networking data. The same applies to photos taken using the device’s camera, but the value is instead set to 40 minutes.

Researchers have so far been unable to determine who is behind the campaign, or whether the hackers are trying to target specific users. Given this spyware can only be downloaded outside of the Google Play store, users are strongly advised not to download applications to their phones from unsafe third-party sources.

Ingka Investments, owner and operator of 389 Ikea stores and e-commerce across 32 countries, has invested close to £12 million in London-based tech startup what3words.

What3words technology divides the world into a grid of 3-metre squares, with each square being assigned a unique combination of 3 words that can be used to pinpoint the area to a high degree of accuracy. This has a number of use cases, including helping emergency services locate 999 callers in locations that are difficult to describe, such as a remote hillside.

Ingka said that the technology would prove useful with efforts to reduce CO2 emissions and reduce the number of vehicles on the roads by ensuring more first-time deliveries are successful.

“As we look to a future of drone deliveries and autonomous vehicles, the system, also designed for voice entry, will provide the accuracy needed,” it added.

The investment is set to launch the startup into new international markets while continuing to develop partners within the e-commerce and logistics sector.

Krister Mattsson, managing director of Ingka Investments, said: “We are delighted with this new investment in what3words as they are an innovative company and we are confident of their continued growth. With an increasing demand for home deliveries, scalable and sustainable solutions are becoming increasingly important.

“We see value in helping to support the build-up of a universal addressing system that can lead to better customer experience, while the precise locations will allow for a reduction in overall miles travelled, reducing the carbon footprint of home deliveries.”

The Ingka Group has already made a number of investments to help support the core Ikea retail business, including in areas such as digitalisation, customer fulfilment, fintech, and sustainability.

“What3word’s ambition is to become a global standard for communicating location,» said Chris Sheldrick, CEO and co-founder of what3words. «We envisage a world where on every platform, in every checkout field, you can give your what3words address, with retailers able to deliver to that precise 3-metre square. The investment from Ingka Investments will help us unlock new markets while accelerating our position as a ‘must-have’ in the logistics industry.”

In November 2019, Capita integrated the what3words app into its “Vision” control systems to help emergency services locate 999 callers in difficult to pinpoint areas.

Ingka Investments, owner and operator of 389 Ikea stores and e-commerce across 32 countries, has invested close to £12 million in London-based tech startup what3words.

What3words technology divides the world into a grid of 3-metre squares, with each square being assigned a unique combination of 3 words that can be used to pinpoint the area to a high degree of accuracy. This has a number of use cases, including helping emergency services locate 999 callers in locations that are difficult to describe, such as a remote hillside.

Ingka said that the technology would prove useful with efforts to reduce CO2 emissions and reduce the number of vehicles on the roads by ensuring more first-time deliveries are successful.

“As we look to a future of drone deliveries and autonomous vehicles, the system, also designed for voice entry, will provide the accuracy needed,” it added.

The investment is set to launch the startup into new international markets while continuing to develop partners within the e-commerce and logistics sector.

Krister Mattsson, managing director of Ingka Investments, said: “We are delighted with this new investment in what3words as they are an innovative company and we are confident of their continued growth. With an increasing demand for home deliveries, scalable and sustainable solutions are becoming increasingly important.

“We see value in helping to support the build-up of a universal addressing system that can lead to better customer experience, while the precise locations will allow for a reduction in overall miles travelled, reducing the carbon footprint of home deliveries.”

The Ingka Group has already made a number of investments to help support the core Ikea retail business, including in areas such as digitalisation, customer fulfilment, fintech, and sustainability.

“What3word’s ambition is to become a global standard for communicating location,» said Chris Sheldrick, CEO and co-founder of what3words. «We envisage a world where on every platform, in every checkout field, you can give your what3words address, with retailers able to deliver to that precise 3-metre square. The investment from Ingka Investments will help us unlock new markets while accelerating our position as a ‘must-have’ in the logistics industry.”

In November 2019, Capita integrated the what3words app into its “Vision” control systems to help emergency services locate 999 callers in difficult to pinpoint areas.

Slack has removed a capability that allowed users to customise external invites with a message after users expressed concerns that the function could subject users to harassment and unwanted messages.

The communications platform has said it «immediately» removed the function on Slack DMs, a new cross-organisational messaging service that only launched yesterday.

Slack DMs was designed as a new feature for Slack Connect, the platform’s external channel sharing feature that provides a secure way of collaborating with teams outside of an organisation, that first launched in June 2020. The DMs feature allowed users to connect with an external user by sending an invite with a bespoke message.

Shortly after its launch, Twitter product developer Menotti Minutillo revealed that the function could be used to send a seemingly unlimited number of malicious messages to external users. The feature would also email a copy of the invite to the target containing the message in full, which appeared to be impossible to block as they originated from a generic Slack address.

Following the initial backlash, Slack has now said that users will be unable to customise messages as part of the invite function.

«After rolling out Slack Connect DMs this morning, we received valuable feedback from our users about how email invitations to use the feature could potentially be used to send abusive or harassing messages,» said Jonathan Prince, Slack’s vice president of communications and policy. «We are taking immediate steps to prevent this kind of abuse, beginning today with the removal of the ability to customise a message when a user invites someone to Slack Connect DMs.

«We made a mistake in this initial roll-out that is inconsistent with our goals for the product and the typical experience of Slack Connect usage. As always, we are grateful to everyone who spoke up, and we are committed to fixing this issue.»

Slack DMs – and Slack Connect – is only available on paid businesses accounts.

Slack has removed a capability that allowed users to customise external invites with a message after users expressed concerns that the function could subject users to harassment and unwanted messages.

The communications platform has said it «immediately» removed the function on Slack DMs, a new cross-organisational messaging service that only launched yesterday.

Slack DMs was designed as a new feature for Slack Connect, the platform’s external channel sharing feature that provides a secure way of collaborating with teams outside of an organisation, that first launched in June 2020. The DMs feature allowed users to connect with an external user by sending an invite with a bespoke message.

Shortly after its launch, Twitter product developer Menotti Minutillo revealed that the function could be used to send a seemingly unlimited number of malicious messages to external users. The feature would also email a copy of the invite to the target containing the message in full, which appeared to be impossible to block as they originated from a generic Slack address.

Following the initial backlash, Slack has now said that users will be unable to customise messages as part of the invite function.

«After rolling out Slack Connect DMs this morning, we received valuable feedback from our users about how email invitations to use the feature could potentially be used to send abusive or harassing messages,» said Jonathan Prince, Slack’s vice president of communications and policy. «We are taking immediate steps to prevent this kind of abuse, beginning today with the removal of the ability to customise a message when a user invites someone to Slack Connect DMs.

«We made a mistake in this initial roll-out that is inconsistent with our goals for the product and the typical experience of Slack Connect usage. As always, we are grateful to everyone who spoke up, and we are committed to fixing this issue.»

Slack DMs – and Slack Connect – is only available on paid businesses accounts.