Technology News from Around the World, Instantly on Oracnoos!

First Apple-notarized porn app available to iPhone users in Europe - Related to blood, giant, tata, app, donation

First Apple-notarized porn app available to iPhone users in Europe

First Apple-notarized porn app available to iPhone users in Europe

enhancement: Added statement from Apple below.

The first Apple-notarized porn app, "Hot Tub," is now available to iPhone people in Europe through the alternative app marketplace, AltStore PAL.

Apple does not allow pornographic or adult content apps on the official Apple App Store. However, to comply with the EU's Digital Markets Act (DMA), Apple is now required as a "gatekeeper" to allow sideloading of apps through third-party app platforms, which can offer these types of apps.

AltStore PAL launched in April 2024 and is an alternative app marketplace for iOS consumers in the EU, initially created to distribute the founder's Delta Nintendo emulator and the Clip clipboard manager for iOS.

The platform allows customers in the EU to install apps not available on Apple's official App Store, including those that may not meet Apple's content guidelines, such as adult content.

Today, AltStore revealed that they are now distributing the first Apple-Notarized porn app called "Hot Tub," which was developed by c1d3r.

"iPhone turns 18 this year, which means it's finally old enough for some more ~mature~ apps…," reads a post on Threads.

"Introducing Hot Tub by c1d3r, the world's 1st Apple-approved porn app! Try it now exclusively on AltStore PAL — just in time for the season of love."

The app is described as an ad-free "adult content browser" and has successfully passed Apple's notarization process, which reviews apps for security and privacy risks before they can be installed on iOS devices.

While the Hot Tub app has passed this process and thus is allowed to be installed on Apple devices, it does not mean Apple has approved it for its own app store.

For those looking to install the app, it is not visible by default in the AltStore PAL app store.

"Hot Tub is NOT visible in AltStore PAL by default, and it is not a Recommended Source," explains AltStore.

"You must explicitly add its source before it will appear in AltStore PAL — just like the majority of AltStore apps. This means you'll only see it if you want to."

As part of the app's launch, AltStore PAL says it will be donating all of its Patreon earnings to organizations supporting sex workers and the LGBTQ+ community.

Apple shared the following statement about the release of the "Hot Tub" app on the AltStore PAL.

“We are deeply concerned about the safety risks that hardcore porn apps of this type create for EU people, especially kids," Apple told BleepingComputer.

"This app and others like it will undermine consumer trust and confidence in our ecosystem that we have worked for more than a decade to make the best in the world."

"Contrary to the false statements made by the marketplace developer, we certainly do not approve of this app and would never offer it in our App Store. The truth is that we are required by the European Commission to allow it to be distributed by marketplace operators like AltStore and Epic who may not share our concerns for user safety.”.

A security vulnerability has been disclosed in AMD's Secure Encrypted Virtualization (SEV) that coul...

Besieged by scammers seeking to phish user accounts over the telephone, Apple and Google frequently ...

Microsoft has released patches to address two Critical-rated security flaws impacting Azure AI Face ...

Indian tech giant Tata Technologies hit by ransomware attack

Indian tech giant Tata Technologies hit by ransomware attack

Tata Technologies Ltd. had to suspend some of its IT services following a ransomware attack that impacted the business network.

A subsidiary of Tata Motors, Tata Technologies is an Indian public multinational tech firm that focuses on automotive design, aerospace engineering, and R&D engineering in general.

It is one of India’s key tech developers and state project contractors, employs over 11,000 people, has an annual revenue of $600 million, and operates 18 locations in India, North America, Europe, and Asia-Pacific.

The enterprise says in a notification today to India's national stock exchange that the ransomware attack that has temporarily affected IT assets that now have been restored.

Client delivery services remained fully operational through the cyberattack, though, causing no impact on customer operations.

“This is to inform you that the corporation has become aware of a ransomware incident that has affected a few of our IT assets,” reads the public notice.

“As a precautionary measure, some of the IT services were suspended temporarily and have now been restored. Our Client delivery services have remained fully functional and unaffected throughout.” the organization reports.

A detailed investigation is underway in collaboration with cybersecurity experts, and more details will be disclosed when available.

At the time of writing, no major ransomware groups have claimed the attack on Tata Technologies. It is also unclear if the attacker managed to steal any data from the business.

Ransomware attacks, even if caught before the encryption stage, typically involve data theft. In the case of tech firms, such incidents could result in corporate, confidential data being exposed, which could cause damage to their intellectual property and technological portfolio.

In October 2022, the now-defunct Hive ransomware group claimed an attack against Tata Power, India’s largest integrated power corporation.

The threat actor stole and leaked data on its extortion portal on the dark web, including engineering schematics, financial and banking records, as well as personal client information.

Buzzy Chinese artificial intelligence (AI) startup DeepSeek, which has had a meteoric rise in popularity in recent days, left one of its databases exp......

​Law enforcement authorities in the United States and the Netherlands have seized 39 domains and associated servers used by the HeartSender phishing g......

BeyondTrust has revealed it completed an investigation into a recent cybersecurity incident that targeted some of the corporation's Remote Support SaaS in......

Ransomware attack disrupts New York blood donation giant

Ransomware attack disrupts New York blood donation giant

​The New York Blood Center (NYBC), one of the world's largest independent blood collection and distribution organizations, says a Sunday ransomware attack forced it to reschedule some appointments.

NYBC collects almost 4,000 units of blood products every day and serves more than 75 million people in more than a dozen states. It also provides transfusion-related medical services to over 500 hospitals nationwide.

On Wednesday, NYBC stated it detected the attack after noticing suspicious activity on its IT systems over the weekend, on January 26.

"We immediately engaged third-party cybersecurity experts to investigate. This investigation has confirmed that the suspicious activity is a result of a ransomware incident," NYBC expressed in a Wednesday statement. 'We took immediate steps to help contain the threat, including taking certain systems offline. We are working diligently with these experts to restore our systems as quickly and as safely as possible."

However, the organization still accepts donations but warned that some might have to be rescheduled. NYBC added that it already had to cancel some blood donor appointments and blood drives following the attack because of ongoing disruptions to its operations.

The attack came days after NYBC introduced a blood emergency after a nearly 30% drop in blood donations that led to 6,500 fewer donations and "crippled the region's blood supply."

The blood center has yet to disclose whether the attackers stole or accessed donors' personal and health information. While no ransomware operation has claimed the attack until now, the vast majority of ransomware gangs also steal sensitive information from victims' compromised systems before encryption and use it as leverage for extortion.

"We understand the critical nature of our services, and the health of our communities remains our top priority," NYBC added on Wednesday. "We remain in direct communication with our hospital partners and are implementing workarounds to help restore services and fulfill orders."

Earlier this month, major blood-donation non-profit organization OneBlood also notified an undisclosed number of donors that their personal information was stolen in a ransomware attack last summer.

London hospitals also faced blood shortages in early June 2024 after pathology provider Synnovis was hit by a ransomware attack linked to the Qilin (Agenda) Russian cybercrime group. Following the incident, England's NHS Blood and Transplant (NHSBT) urgently called for universal blood donors to book appointments.

In December, the [website] Department of Health and Human Services (HHS) proposed updates to HIPAA (short for Health Insurance Portability and Accountability Act of 1996) to secure patients' health data following a surge of massive healthcare security breaches affecting [website] hospitals and Americans in recent years, including the February Change Healthcare ransomware attack that affected 190 million individuals.

Community Health Center (CHC), a leading Connecticut healthcare provider, is notifying over 1 million patients of a data breach that impacted their pe......

The [website] Cybersecurity and Infrastructure Security Agency (CISA) and the Food and Drug Administration (FDA) have issued alerts about the presence of h......

Market Impact Analysis

Market Growth Trend

2018201920202021202220232024
8.7%10.5%11.0%12.2%12.9%13.3%13.4%
8.7%10.5%11.0%12.2%12.9%13.3%13.4% 2018201920202021202220232024

Quarterly Growth Rate

Q1 2024 Q2 2024 Q3 2024 Q4 2024
12.5% 12.9% 13.2% 13.4%
12.5% Q1 12.9% Q2 13.2% Q3 13.4% Q4

Market Segments and Growth Drivers

Segment Market Share Growth Rate
Network Security26%10.8%
Cloud Security23%17.6%
Identity Management19%15.3%
Endpoint Security17%13.9%
Other Security Solutions15%12.4%
Network Security26.0%Cloud Security23.0%Identity Management19.0%Endpoint Security17.0%Other Security Solutions15.0%

Technology Maturity Curve

Different technologies within the ecosystem are at varying stages of maturity:

Innovation Trigger Peak of Inflated Expectations Trough of Disillusionment Slope of Enlightenment Plateau of Productivity AI/ML Blockchain VR/AR Cloud Mobile

Competitive Landscape Analysis

Company Market Share
Palo Alto Networks14.2%
Cisco Security12.8%
Crowdstrike9.3%
Fortinet7.6%
Microsoft Security7.1%

Future Outlook and Predictions

The Giant Ransomware Attack landscape is evolving rapidly, driven by technological advancements, changing threat vectors, and shifting business requirements. Based on current trends and expert analyses, we can anticipate several significant developments across different time horizons:

Year-by-Year Technology Evolution

Based on current trajectory and expert analyses, we can project the following development timeline:

2024Early adopters begin implementing specialized solutions with measurable results
2025Industry standards emerging to facilitate broader adoption and integration
2026Mainstream adoption begins as technical barriers are addressed
2027Integration with adjacent technologies creates new capabilities
2028Business models transform as capabilities mature
2029Technology becomes embedded in core infrastructure and processes
2030New paradigms emerge as the technology reaches full maturity

Technology Maturity Curve

Different technologies within the ecosystem are at varying stages of maturity, influencing adoption timelines and investment priorities:

Time / Development Stage Adoption / Maturity Innovation Early Adoption Growth Maturity Decline/Legacy Emerging Tech Current Focus Established Tech Mature Solutions (Interactive diagram available in full report)

Innovation Trigger

  • Generative AI for specialized domains
  • Blockchain for supply chain verification

Peak of Inflated Expectations

  • Digital twins for business processes
  • Quantum-resistant cryptography

Trough of Disillusionment

  • Consumer AR/VR applications
  • General-purpose blockchain

Slope of Enlightenment

  • AI-driven analytics
  • Edge computing

Plateau of Productivity

  • Cloud infrastructure
  • Mobile applications

Technology Evolution Timeline

1-2 Years
  • Technology adoption accelerating across industries
  • digital transformation initiatives becoming mainstream
3-5 Years
  • Significant transformation of business processes through advanced technologies
  • new digital business models emerging
5+ Years
  • Fundamental shifts in how technology integrates with business and society
  • emergence of new technology paradigms

Expert Perspectives

Leading experts in the cyber security sector provide diverse perspectives on how the landscape will evolve over the coming years:

"Technology transformation will continue to accelerate, creating both challenges and opportunities."

— Industry Expert

"Organizations must balance innovation with practical implementation to achieve meaningful results."

— Technology Analyst

"The most successful adopters will focus on business outcomes rather than technology for its own sake."

— Research Director

Areas of Expert Consensus

  • Acceleration of Innovation: The pace of technological evolution will continue to increase
  • Practical Integration: Focus will shift from proof-of-concept to operational deployment
  • Human-Technology Partnership: Most effective implementations will optimize human-machine collaboration
  • Regulatory Influence: Regulatory frameworks will increasingly shape technology development

Short-Term Outlook (1-2 Years)

In the immediate future, organizations will focus on implementing and optimizing currently available technologies to address pressing cyber security challenges:

  • Technology adoption accelerating across industries
  • digital transformation initiatives becoming mainstream

These developments will be characterized by incremental improvements to existing frameworks rather than revolutionary changes, with emphasis on practical deployment and measurable outcomes.

Mid-Term Outlook (3-5 Years)

As technologies mature and organizations adapt, more substantial transformations will emerge in how security is approached and implemented:

  • Significant transformation of business processes through advanced technologies
  • new digital business models emerging

This period will see significant changes in security architecture and operational models, with increasing automation and integration between previously siloed security functions. Organizations will shift from reactive to proactive security postures.

Long-Term Outlook (5+ Years)

Looking further ahead, more fundamental shifts will reshape how cybersecurity is conceptualized and implemented across digital ecosystems:

  • Fundamental shifts in how technology integrates with business and society
  • emergence of new technology paradigms

These long-term developments will likely require significant technical breakthroughs, new regulatory frameworks, and evolution in how organizations approach security as a fundamental business function rather than a technical discipline.

Key Risk Factors and Uncertainties

Several critical factors could significantly impact the trajectory of cyber security evolution:

Evolving threat landscape
Skills shortage
Regulatory compliance complexity

Organizations should monitor these factors closely and develop contingency strategies to mitigate potential negative impacts on technology implementation timelines.

Alternative Future Scenarios

The evolution of technology can follow different paths depending on various factors including regulatory developments, investment trends, technological breakthroughs, and market adoption. We analyze three potential scenarios:

Optimistic Scenario

Rapid adoption of advanced technologies with significant business impact

Key Drivers: Supportive regulatory environment, significant research breakthroughs, strong market incentives, and rapid user adoption.

Probability: 25-30%

Base Case Scenario

Measured implementation with incremental improvements

Key Drivers: Balanced regulatory approach, steady technological progress, and selective implementation based on clear ROI.

Probability: 50-60%

Conservative Scenario

Technical and organizational barriers limiting effective adoption

Key Drivers: Restrictive regulations, technical limitations, implementation challenges, and risk-averse organizational cultures.

Probability: 15-20%

Scenario Comparison Matrix

FactorOptimisticBase CaseConservative
Implementation TimelineAcceleratedSteadyDelayed
Market AdoptionWidespreadSelectiveLimited
Technology EvolutionRapidProgressiveIncremental
Regulatory EnvironmentSupportiveBalancedRestrictive
Business ImpactTransformativeSignificantModest

Transformational Impact

Technology becoming increasingly embedded in all aspects of business operations. This evolution will necessitate significant changes in organizational structures, talent development, and strategic planning processes.

The convergence of multiple technological trends—including artificial intelligence, quantum computing, and ubiquitous connectivity—will create both unprecedented security challenges and innovative defensive capabilities.

Implementation Challenges

Technical complexity and organizational readiness remain key challenges. Organizations will need to develop comprehensive change management strategies to successfully navigate these transitions.

Regulatory uncertainty, particularly around emerging technologies like AI in security applications, will require flexible security architectures that can adapt to evolving compliance requirements.

Key Innovations to Watch

Artificial intelligence, distributed systems, and automation technologies leading innovation. Organizations should monitor these developments closely to maintain competitive advantages and effective security postures.

Strategic investments in research partnerships, technology pilots, and talent development will position forward-thinking organizations to leverage these innovations early in their development cycle.

Technical Glossary

Key technical terms and definitions to help understand the technologies discussed in this article.

Understanding the following technical concepts is essential for grasping the full implications of the security threats and defensive measures discussed in this article. These definitions provide context for both technical and non-technical readers.

Filter by difficulty:

API beginner

algorithm APIs serve as the connective tissue in modern software architectures, enabling different applications and services to communicate and share data according to defined protocols and data formats.
API concept visualizationHow APIs enable communication between different software systems
Example: Cloud service providers like AWS, Google Cloud, and Azure offer extensive APIs that allow organizations to programmatically provision and manage infrastructure and services.

platform intermediate

interface Platforms provide standardized environments that reduce development complexity and enable ecosystem growth through shared functionality and integration capabilities.

zero-day intermediate

platform These vulnerabilities are particularly dangerous because defenders have no time to develop and deploy patches before exploitation occurs. They are highly valued in both offensive security markets and criminal underground.
Zero-day vulnerability timelineTimeline showing vulnerability discovery to patch development
Example: The SUNBURST attack exploited a zero-day vulnerability in SolarWinds Orion software, remaining undetected for months while compromising numerous government agencies and private organizations.

SOC intermediate

encryption

phishing beginner

API Modern phishing attacks are increasingly sophisticated, often leveraging AI to create convincing spear-phishing campaigns that target specific individuals with personalized content that appears legitimate.
Phishing attack flowAnatomy of a typical phishing attack
Example: Business Email Compromise (BEC) attacks are sophisticated phishing campaigns where attackers impersonate executives to trick employees into transferring funds or sensitive information.

ransomware beginner

cloud computing Ransomware typically encrypts victim data using strong cryptographic algorithms, making recovery impossible without the decryption key. Advanced variants now also exfiltrate data before encryption, enabling double-extortion tactics.
Example: The REvil ransomware group leveraged a supply chain attack against Kaseya VSA to deploy ransomware to thousands of organizations simultaneously, demanding a $70 million ransom payment.

encryption intermediate

middleware Modern encryption uses complex mathematical algorithms to convert readable data into encoded formats that can only be accessed with the correct decryption keys, forming the foundation of data security.
Encryption process diagramBasic encryption process showing plaintext conversion to ciphertext via encryption key