Magazine menu Close Magazine menu

Emerging tech

Latest stories

insight story extended reality

How virtual and extended reality are transforming business

  • min read
    • Between virtual reality (VR,) augmented reality (AR) and assisted reality – or their catch-all names mixed reality and extended reality (XR) – you might feel like you're losing your grip on all of them. But many businesses are reaching out to these emerging technologies to help solve tough problems like getting the team together remotely and hands-on training. On Kaspersky's new podcast, Insight Story, Episode 6, I look at extended reality with Dr. Paul Tennent (UK,) Associate Professor, Mixed Reality Lab, University of Nottingham and David Kim (South Korea,) Business Development Manager for Soma virtual office by Zigbang. Insight Story unpacks emerging tech trends with global specialists and businesses successfully applying the technology. VR, AR, XR – what are the different realities? These technologies all fall somewhere on the virtuality-reality continuum, according to Paul. "We've got these two ends – virtuality and reality. All the way along this spectrum are these technologies. They're generally about replacing our senses with something else – for example, our vision with a screen close to our eyes, hearing with headphones or touch with haptics. Augmented reality (AR) involves putting digital things in the real world. Assisted reality involves telepresence. Mixed and extended reality (XR) are catch-alls for everything from virtual reality to assisted reality to telepresence." Business has applied these technologies for over a decade. The IKEA app uses AR to let you superimpose their furniture on your room. Chat video filters that make your face look like a cute dog are also AR. While we're familiar with these kinds of consumer uses, businesses are increasingly using XR in their work with other businesses (B2B.) Paul has seen engineering companies make good use of assisted reality. "You can support on-site engineers with assisted reality, having somebody sitting behind them, watching what they're doing." "If you were installing a heat pump, it's useful to see a geothermal survey of the area before you drill a big hole. AR can add that layer of data onto real life," says Paul. An engineer could see the extra data layer by pointing a smartphone or tablet at what they're working on. One award-winning use of haptics – technology that transmits tactile information like vibration, feel and force – in training vets often provokes laughs but helps solve a serious problem. "A virtual, haptic simulation of a cow's back end helps vets-in-training feel different contexts, like something cancerous or moving a calf. With virtual glasses, it looks like a real cow. We see similar uses in medicine, with point-based haptic systems imitating a scalpel cutting through skin." Virtually solving the remote collaboration problem Few businesses need to teach how to deliver a calf, but almost all are looking for ways to better facilitate collaboration in remote and hybrid work. Proptech startup Zigbang started creating virtual office Soma during the pandemic. David says, "When our company went remote, we did what everyone did – endless Zoom calls where you fall into Zoom fatigue. A missing core element was togetherness – small conversations that turn into bigger ideas. We wondered if there's a way to better go about this remote thing." Zigbang's existing work creating 3D models of apartments sparked an idea. "We thought, why don't we create an office we could go into together? We started testing it with developers and thought it was good enough to bring in the whole company." In Soma, avatars represent colleagues, with their device's camera feed over the avatar's head. Like in real life, if you're far from someone, you can't see or hear them. As you walk closer, you start to see them and, when really close, hear their audio and see them clearly. David says, "We wanted to create that instantaneous communication – being able to walk up to someone and ask, did you get that email?" If, like me, you enjoy the solitude of remote working, and find the idea of your boss's avatar stealthily approaching and interrupting you unappealing, there's a middle way. Soma lets staff ensure they're left alone to do deep work. "We designed spaces for people to get away from others and get work done – bookable conference rooms and 'pods' – by walking into a pod, you're saying, I don't want to be disturbed." David also has ideas to address some of the challenges for office-less businesses. "Employees who don't have enough space or privacy to work at home may prefer to be in the office where everything's set up, and companies pay for air conditioning, electricity and internet. There are different ways to handle that – one is a stipend to help staff set up a home office. We've also set up lounges across the city where employees can go to work." The shared office space market is booming – expected to be worth 123 billion US dollars by 2028. Reducing cybersecurity risk with realities Kaspersky's Fabio Assolini sees several privacy and cybersecurity risks for businesses using extended reality tech. "During the pandemic, we saw the rise of so-called Zoombombing – when someone accesses a conference call without permission and shows obscene or violent material. It can affect VR devices too." How Zoombombing happens isn't high-tech. Fabio says, "People openly share passwords. Employees must be trained not to." Meanwhile, VR headsets are in a league of their own for privacy concerns. Meta's Quest Pro headset has four front-facing cameras, three on each controller and several to track eyes and facial expressions. These devices could give deep insight into users' activity, read emotional reactions to ads and make inferences from your home interior — from what colors you like to how many pets and children you have. But none of this should deter businesses from exploring what immersive tech can do as a training aid. "The tech is already in use to help people learn about security problems or cyberattacks," says Fabio. Kaspersky Interactive Protection Simulation sees teams, including technical staff and leaders, protecting a virtual business from cyberattacks. Players use a limited budget and a moderator's input to build an optimal protection strategy. It helps managers and directors understand cybersecurity budgets better. Realities' future Asked where extended reality might go next, Paul predicts "a shift slightly away from VR towards AR. We're headed for a fluid reality, which is part physical and part digital." David urges businesses to get on board with these technologies. "Things are changing now in the realm of work. Companies more willing to look into and implement changes early will be the ones that succeed down the line." Listen to the full Insight Story audio series on Podbean or your usual podcast provider.
insight story blockchain

Blockchain’s amazing versatility promises world-changing uses

  • min read
    • New blockchain applications are spreading fast in every type of business. It can do things once hard to do reliably, like validating supply chain sustainability, giving consumers more trustworthy information and even rewarding people for getting exercise. Does your business need to get to grips with blockchain, and how could you use it to transform your business for the better? Kaspersky's new podcast, Insight Story, unpacks emerging tech trends with global specialists and businesses successfully using the tech. Episode 3 looks at blockchain. I speak with UK-based Helen Disney, Director of The Realization Group and Founder of Unblocked. Germany-based Abhi Sharma, Global Lead of Mobility Platform, Blockchain and Partner Universe at BASF also joins us. A simple way to understand blockchain Helen likens blockchain to an old idea everyone recognizes. "We've had ledgers for a long time – someone sends you an invoice, you write down when someone pays and match the two. Blockchain is a digital, distributed ledger. It provides an audit trail for all transactions and activities on a shared network. 'Distributed' means everyone in that network has a copy, so you can't go back in time and change things." Businesses see that a reliable, shared ledger that's hard to change makes more things possible. Helen says, "There are examples of using blockchain in business and for social impact, like in healthcare and supply chains, in creative industries, the energy sector and environmental initiatives. In financial services, blockchain can create efficiencies, speed up settlement times and let people transact with assets not currently tradable." Blockchain Research Institute continually examines the many applications of blockchain, from ocean health to medical research to border security. Grand View Research estimates the global blockchain market is worth 10 billion US dollars today and will grow 88 percent each year. Cottoning on to value in supply chain sustainability Abhi Sharma explains a BASF blockchain initiative that capitalizes on the premium consumers are willing to pay for sustainable products to incentivize sustainable cotton production. The largely undifferentiated nature of the commodity market has made this challenging in the past. Abhi says, "Farmers have had no incentive to use better practices to protect the environment because that information doesn't flow to the consumer." Seed 2 Sew aims to change that. "Farmers enter information in a mobile application at every stage of their season, harvest and delivery of goods. When they use sustainable practices like natural irrigation, they can enter the practice in the application and take photos for proof, creating extra value." It's not just farmers who could claim credit for doing the right thing. "Other players in the market could be motivated to install solar panels, use sustainable electricity and so forth." Seed 2 Sew is designed to fit naturally with how farmers already work. "They're not sitting at a computer filling in spreadsheets – they're taking photos in the field and feeding that data into the blockchain. Their motivation is high, because there's high demand on the retail side for more sustainable products." And on the retail side, consumers need confidence in sustainability claims. "Consumers are becoming more conscious. They want to buy less, but buy more meaningful, story-driven products. We're creating that traceability and transparency that prevents greenwashing." Where to start with blockchain But where should a business leader start? Helen thinks it's down to understanding your business as much as blockchain. "Think about, in my business, where could this be beneficial? Do I want to offer some reward points or incentives to customers, change the business's financial infrastructure, or do something with my supply chain? Start with what's important to you, and look for real-world examples of what's been done." Many early-adopter projects haven't continued, and Abhi sees lessons in that. "Organizations need a start-up culture. You need fail fast, learn fast models. But it's more about the people than the investment – whether they can drive a project, whether they can scale it. Your people will drive your idea into the marketplace." He thinks exploring blockchain is worth it regardless of whether you ultimately use it. "For those who've dived into it, it shifts their mindset. Thinking about the possibilities gives them different ideas. Once you realize you can do something in a decentralized or distributed way, it changes how you think." Blockchain and cybersecurity Head of Kaspersky Global Research and Analysis Team (GReAT) for Latin America, Fabio Assolini, thinks businesses should note risks associated with blockchain, whether you use it in your business or not. "Blockchain isn't immutable. Attacks on these systems have happened, like 51 percent attacks." That's when a group of cryptocurrency miners achieves control of more than half of a network's computational power, allowing them to alter the blockchain. "Another problem with blockchain is double-spending – under certain conditions, miners can modify blocks to spend cryptocurrency twice. For small companies, that can be a real problem." But cybercriminals using blockchain is behind a fast growing number of attacks. "Cryptojacking is one of the most common attacks. Cybercriminals hijack the power of processing on your servers by programming your device to mine cryptocurrency for them. When they invade a system, they will also sell the access to other cybercriminals." Cryptojacking is rising dramatically – Kaspersky research showed a 230 percent increase in 2022. It can slow systems and ramp up your energy bills, but Fabio warns there aren't always obvious signs. "More professional fraudsters prepare crypto mining software that runs smoothly. The administrator may not realize there's something going on." Businesses can prevent cryptojacking by adopting cybersecurity best practice. "There's no single action, but a set of good practices to protect against remote access. For example, you need firewalls, access control to all systems and logging of all user activity," says Fabio. "Attacks that install crypto mining software will also be detected by a good endpoint security solution." Where will blockchain go next? Blockchain will be as common as smartphones, according to Helen. "In the future, we'll all have a web wallet and assets and tokens sitting on blockchains." She believes the incentives and benefits will compel consumers to adopt blockchain-based products fast. "We're already seeing examples, like play-to-earn games, where you can earn cryptocurrency playing computer games and then trade it for other things. Sweatcoin lets you earn money for walking. These apps also generate data business or research organizations could use to understand our lives better." Our experts have a few thoughts for those considering or starting to use blockchain. Abhi says, "Business leaders should think more about how to maintain it. I see many sustainability-related blockchain initiatives, but few survive." Helen thinks we need a more widespread understanding of blockchain to unleash its true potential. "We can solve big global problems by building communities of interest and incentivizing change. Blockchain is for everybody. You needn't be technical to understand it. Make time to learn, and you'll find it fascinating." Listen to the full Insight Story audio series on Podbean or your usual podcast provider.
insight story smart grids

As bills rise, smart businesses are saving with smart energy tech

  • min read
    • Alongside emissions reduction goals, energy prices have hoisted reducing energy consumption to the top of business agendas. In the UK, between 2022 and 2023, electricity prices rose 67 percent and gas prices 129 percent. In the US, energy prices are up as much as 40 percent. It's no longer a case of, should businesses cut their energy use, but how? Many organizations are looking for technologies that can help them better control their power use and use more renewable energy. As I wrote in this primer on electricity's history, a shocking 13 percent of the world's population, mostly in sub-Saharan Africa, have no access to electricity. Could more business investment in renewables help to bridge the gap? Kaspersky's new podcast, Insight Story, unpacks emerging tech trends with global specialists and businesses successfully using the tech. Episode 2 looks at smart energy. I speak with Feroz Koor, Group Head of Sustainability at Woolworths Holdings. South Africa and Singapore-based Nilesh Jadhav, Founder and CEO of BtrLyf creators Qi Square, and former Programme Director, EcoCampus initiative, Nanyang Technological University. BtrLyf is an "AI-enabled assessment and marketplace platform to plan and achieve super-low energy, net zero and green certified buildings, quickly and at super-low costs." It creates 'digital twins' that let businesses model a range of energy conservation measures to find out what will work best.  Slashing grocery energy bills Woolworths has some 1,400 stores in Sub-Saharan Africa, Australia and New Zealand selling groceries, clothing, homeware and more. "Retail food businesses have a large energy footprint," says Feroz. Sustainability data science experts ESource says energy costs make up around 15 percent of food retail overheads. Feroz's company opted for smart tech to become more energy-efficient. "We've sub-metered all our stores with smart meters. There are different meters for lighting, refrigeration and air conditioning for example, so we can see what's driving consumption." The tech isn't cheap but paid for itself fast. Feroz recounts a huge discovery: "After metering one store in a new shopping center, we found we were being billed for other stores' electricity – the meters paid for themselves on the first day by proving it. We often use smart meter data to challenge incorrect billing – you'd be surprised how common it is." Meanwhile, the meters helped identify small changes that could save a lot of power. From smarter stores to smarter buildings Nilesh Jadhav, Founder of Qi Square who created BtrLyf, says, "Our customers want to improve their energy efficiency and reduce reliance on imported energy. Our platform makes the data available. So far, we've made digital models of 20,000 buildings in Singapore." Modeling their buildings gives businesses an approachable window on a daunting task. "If businesses can do an initial assessment of how they could save energy today, then how they could go to net zero [greenhouse gas emissions,] they can see the bigger picture." Woolworths is approaching a similarly daunting task – to use 100 percent sustainable energy by 2030. Feroz says, "We've made the commitment because it's the right thing to do, but we've got our work cut out for us. We have several options, like self-generation at shopping center level or sourcing from independent bulk producers. We're looking at wheeling, where you buy energy from a producer who then 'wheels' it through a distribution network. " From smarter buildings to smarter energy grids Increasingly nations and energy companies are making electricity smarter at grid level, aiming to reduce emissions and improve energy security. Smart grids can detect and react to customer use patterns, empower consumers to be more energy efficient and encourage renewable energy production by buying excess. All this can maximize renewable energy use and minimize the use of fossil fuel to generate electricity. Nilesh continues, "Microgrids take it to a system level using central energy management software and batteries to manage fluctuations." Smart grids also enable a market that incentivizes renewable energy production. Nilesh says, "If you can't put solar panels on your roof but your neighbor can, you could make a power purchase agreement (PPA). Singapore also has a market for renewable energy credits: You can buy these credits instead of buying electricity directly. If I want renewable energy but can't pay upfront for solar panels, buying renewable energy credits encourages third parties to invest, then sell the power." Securing smarter energy solutions Fabio Assolini, Head of Kaspersky Global Research and Analysis Team for Latin America, advises companies and nations to approach smart energy tech with due caution. "We've seen destructive attacks on civilian energy infrastructure – not just power grids, but their systems too." Fabio says over the years, these kinds of attacks are increasing. In 2021, a ransomware attack shut down a major US fuel pipeline. The same year, IBM reported energy was the third most attacked sector. Kaspersky threat predictions for 2023 foresee hacker groups carrying out high-profile cyberattacks on civilian infrastructure – such as energy grids and public broadcasting – using advanced persistent threats (APTs.) Critical infrastructure makes an attractive target for cybercriminals because of how much disruption successful attacks cause. Fabio suggests businesses pay attention to the security of their in-house energy infrastructure, as it may be particularly vulnerable. "Corporate and personal power grids are not as well protected as national infrastructure. They're often connected to the internet using older, more vulnerable hardware, and software not readily updated. Do a full security audit before launching a microgrid or smart grid." The future of smart energy for business Nilesh sees smart energy tech evolving through user participation. "On the tech side, I hope it'll go the same way as the smartphone: More resources for companies and innovators to make applications that sit on a central platform. Users could then adopt energy management tech faster. Over time, you'll see more participation from consumers." On the energy side, he thinks peer-to-peer energy sales are the future. "More people will be 'prosumers:' Consuming and producing energy and being paid for excess. Everyone will have better energy-buying options." Feroz has simple advice for businesses wanting to reduce their energy footprint. "Start now. The sooner you start doing something, whether it's just understanding your footprint or what your needs are, the better." Listen to the full Insight Story audio series on Podbean or your usual podcast provider.
insight story metaverse

What metaverse experts think your business should know

  • min read
    • There's much noise about the metaverse, and a feeling business must get on board today. Should you dive in? Two metaverse experts say yes, and no. Kaspersky's new podcast, Insight Story, unpacks emerging tech trends with global specialists and businesses successfully using the tech. Episode 1 looks at the metaverse, with Cortney Harding, World Economic Forum Metaverse Council member and founder of virtual and augmented reality agency Friends with Holograms. James Whatley, Chief Strategy Officer at gaming industry agency Diva, also joins me. James's 2022 talk What Metaverse? garnered much attention from the marketing industry, debating definitions and the effectiveness of brand-sponsored 'metaversal experiences,' as he calls them. A more cynical onlooker could say the metaverse is the emperor's new (virtual) clothes. In its glitchy 2006 version I attended – or tried to attend – in-world conferences in the early metaverse, Second Life. My clever friend sold virtual shirts to passers-by, but the predicted virtual commerce revolution didn't ignite then. I was keen to explore with James and Cortney whether the metaverse is really open for business, or if FOMO (fear of missing out) and the hype cycle is encouraging investment before audiences are ready. From science fiction to (virtual) reality There's no single agreed definition of the metaverse. Metaverses are virtual worlds where users see the world and interact through characters called avatars. Using a virtual reality (VR) headset, interacting in a metaverse can feel like real life. It can mirror many real-world experiences, like shopping, going to concerts, even owning property. Some say it's 'the next iteration of the internet' or 'Web 3.0.' Metaverses like Activeworlds and Second Life have been around for over 20 years. Others exist within online multi-player games like Fortnite and Roblox. Facebook changed its name to Meta in 2021, signaling a future focus on virtual experiences. Should businesses be in the metaverse? Cortney Harding says brands should approach the metaverse from their own perspective. "It depends on your audience. If you're a bank, you probably don't need to build a metaverse world right now – they've tried, and failed." Examples abound of banks establishing an often half-baked presence in the metaverse, then quietly backing away. Cortney continues, "If you're a consumer brand focused on a young tech-savvy audience, you should start thinking about it." But it's not about audience age. "It's more, is your audience tech-savvy? And niche communities are often strong in the metaverse." According to games researcher company Newzoo, more than a quarter of gaming metaverse users are age 36 or older. James Whatley thinks brands should work to understand not just who is in the metaverse, but why. Nike's success in Roblox is often hailed as an example of a brand getting it right. Their Nikeland shop, selling virtual Nike gear, attracted 7 million visitors in its first two months. James notes, "They're doing great, but copying Nike is not a strategy – it's looking and learning from it." Cortney gleans this from Nike's success: "You must resource metaverse worlds correctly to keep them going, making sure people have reasons to return. Nike has social events, and guest speakers – they give people a reason to go there." In developing metaverse experiences, brands should consider what makes the metaverse different. "In early VR, I saw directors do what's in 2D except in a VR headset," says Cortney. "Embodying an avatar with your voice is different than typing or watching a video. How can you harness that? Think beyond replicating and get to the point where it's creating something wholly new." Metaverse for good Cortney works with clients using metaverses and linked technology like VR for the greater good. "I do VR training around racial bias, child welfare, mental health and more. It lets people be in a space they've never been in and experience things like bias or exclusion, in hope they'll better understand what it feels like." PwC research found bias awareness training in VR is highly effective: "75 percent reported a 'wake-up call moment' that helped them identify times in their past when they had not been as inclusive as they'd thought. V-learners were up to 275 percent more confident to act on what they learned after training." Cortney also sees work needed to prevent bias being 'baked in' to the metaverse as it has been with other tech. "Many who built the current internet came from the same background. We want to build a world that's inclusive and safe – one everyone can be part of." Examples of creator bias leading to tech that discriminates include, voice recognition not recognizing women's and people of color's voices because its training data sets mostly contain white men's voices. Soap dispensers, fitness trackers and heart-rate monitors have also been found to rely on users having a light skin tone. It's unsurprising women have higher rates of injury in car accidents when you learn that a truly woman-shaped crash test dummy is a new thing – previous 'female' dummies were simply a smaller male dummy. Cortney appeals to brands to stay aware of how their metaverse presence affects customers. James agrees. "I believe video games are good for building community, and they have done for decades. Whatever the next iteration of the internet, the community piece comes where humanity goes." Alongside many good experiences, research shows more than half of children who play online games experience harms like bullying, hacking and inappropriate contact at some point. Raising your metaverse understanding Cortney says companies dipping a toe into the metaverse shouldn't expect too much at first, but should be in it for the right reasons. "If you look at some websites from the early days of the internet, your eyes will bleed out of your head. We can't expect everyone's metaverse execution will be perfect at this point, but you need more of an idea than just having heard a buzzword." If you choose to go there, James recommends involving metaverse natives. "Bring in the Roblox audience to help build, because they understand it. Get people with gaming experience – they understand narrative and interaction. Make a small investment, start experimenting, have people work on it as a side project. So when things start to really shift, you haven't ignored it." He thinks brands should avoid thinking metaverse is the answer, instead considering all options. "If you want to build a community around your brand, there are other ways. Do stuff in social media. Look at your customer relationship management (CRM.) Don't close the door – be aware of it, but act when it's right for your business." Metaverse cyber risks As new tech arrives, so do new threats. What are the cybersecurity implications of the metaverse? Fabio Assolini is head of research in Latin America for Kaspersky Global Research and Analysis Team (GReAT,) uncovering and understanding cyber threats in digital environments, including metaverses. "We're concerned about the kinds of attacks already common on Meta platforms like Instagram, Facebook and WhatsApp. On new platforms, we expect the same, like fraudsters impersonating brands," says Assolini. "We also expect more complex attacks like SIM swapping, where cybercriminals hijack users' phone numbers to receive authentication tokens." Assolini is also concerned about unclear roles and responsibilities in the metaverse. "If I'm a business and investing in, say, a launch party in the metaverse, is it my responsibility to put encryption and other security in place? Or is it for the end user to be more savvy when they're joining these experiences?" 'Cryptojacking' is another concern in the metaverse. Hacking users' devices to use their processing power for mining cryptocurrency is seriously on the rise, with Kaspersky research showing a 230 percent increase in 2022. While Meta's chief technical officer says moderating user behavior "at any meaningful scale is practically impossible," business will be glad to know metaverse security concepts are roughly the same as any online, digital environment. "Fundamental security practices carry over because the architecture is the same. It still runs on a server, you have databases on the backend, user and password management, and so on," said Nick Donarski, co-founder and chief technology officer at blockchain company ORE System. Best metaverse advice for business I asked James and Cortney their best metaverse advice for business. James says, "Go the extra click. If someone sends you a headline saying this is where the future is, find out where that's come from. Who paid for that data? There's an often-cited report from McKinsey valuing the metaverse at 5 trillion US dollars. When you look at where that figure came from, it doesn't mean anything." Cortney says, "Just start learning and experimenting. It's free or very cheap to sign up to many metaverses. Create a world just for fun. Spend time talking to people. Then you'll understand what you like, what you don't like, what could be better. You'll be more informed – or worst case scenario, have some fun." Listen to the full Insight Story audio series on Podbean or your usual podcast provider.
cyber future interview

How business can use cyber futurism to see what comes next

  • min read
    • With new technologies like the metaverse arriving regularly, how can business leaders and cybersecurity professionals know what new threats to expect? Futurism – analyzing future scenarios to inform today's decision-making – is one way. Victoria Baines is professor of information technology at UK's Gresham College and a former Facebook executive and Europol officer. She uses future scenarios to understand technology today and how we should prepare for threats to come. We chat about what these scenarios reveal about our world today, what might happen with new technologies like the metaverse and what business can do to keep users safe. Gemma: What does it mean to explore the future of cybersecurity through scenarios? Victoria: Scenarios are not predictions, but if you do them right, they tell you as much about your situation now as what might happen in future. It's not just threats – it's how the world's changed, and what the tipping points may be. The pandemic was a tipping point for remote and hybrid working, but many find hybrid work just means doing all the things, all the time – the expectation they'll be available constantly for online and physical meetings. We'd been working up to that for a long time. Reliance on email was a compelling signal we needed to find something better, quieter, with less churn. I think we'll see something like that with the metaverse. We've now got the ultimate business case for it because Zoom and Teams aren't enough to feel like we're really working with people – we're still just on a call. Futures methodology is as much about exploring our present and spotting things in the past. What have you found out about the metaverse through your cyber futures work? Although there's hype and uncertainty around the metaverse, we have certainties about how it will develop. For example, Apple will probably bring out, or at least announce, a mixed-reality headset next year. However expensive, people want to use whatever Apple brings out. So we'll see people wanting Apple's mixed-reality headset in a way they haven't wanted other virtual reality (VR) headsets like Hololens or Oculus. This will significantly speed up metaverse adoption. The metaverse is less of a tipping point and more of an evolution. Roblox, Fortnight and Second Life are already metaverses. They use the feeling of presence and co-presence, and there's old research on this – academics like Mel Slater and Ralph Schroder showed us that being together virtually is emotional – it brings about positive reinforcement. We'll need AI-powered synthetic individuals to bump into in online social spaces because we need to feel like we're interacting with people – shaking hands, having sex and so on. We'll probably need 6G to power and connect all that technology, particularly if we want to use it when out and about. What security implications have you identified in the metaverse? Nothing's 100 percent secure – we must assume there'll be technical and human vulnerabilities in every aspect of VR, augmented reality (AR) and other metaverse-enabling technologies. In these scenarios, we look at all those vulnerabilities. We have signals already, like the panic around 'zoombombing' – hackers interrupting video conferencing with obscene and violent material. It happened because people shared their passwords on the open internet. We needn't panic – basic security measures would deal with it. But it shows that exploitation and infiltration will also play out in VR and AR. Are there new cyberthreats for the metaverse and related immersive technologies, or is it the same threats in new spaces and technologies? Much of it comes back to basic digital hygiene like patching, updating, and installing antivirus software. Basic 'handwashing' can do much to prevent ransomware infections. In that way, the new stuff isn't new, but we haven't given it enough attention. We've viewed online harm as less impactful – as it's not physical abuse, we treat it less seriously. With metaverse technologies, you can physically sense resistance and impact, which means opportunities for physical assault. That has an operational impact for information security and cybersecurity. What implications do these threats have for cybersecurity leaders today? Technical information and security aspects become more important in addressing psychological and physical harms in these connected spaces. Pacemaker interference with medical internet of things (IoT) signals that. We already have people walking around with internet-connected medical devices like defibrillators, insulin pumps and continuous glucose monitors. If those don't function properly, and if somebody dies, the question of responsibility arises. If it hasn't already happened, Chief Information Security Officers will be asked, 'What did the data say about any interference with that pacemaker? Was the firmware up to date?' We can see something similar playing out in the metaverse. Everyone will say it's someone else's responsibility – those who make the hardware will say it's the experience developer's responsibility, they'll say it's the user's responsibility, and so on. People used to thinking only about data security and network security must now consider users' physical safety.
data security metaverse

Why brands must get ahead on metaverse privacy and security

  • min read
    • While there's much buzz around the metaverse, few conversations focus on its security, privacy and safety. But these challenges may be even bigger in this emerging space than in the rest of the digital world. I spoke with several experts who agree organizations wanting to embrace this new medium must think about the challenges now – not when the metaverse gains full steam. What is the metaverse? The metaverse is an immersive three-dimensional world where people engage in social and commercial activities through digital avatars. Users can access it on many kinds of connected devices, but it's most immersive when used with a virtual reality (VR) headset. There are many metaverses, including that being developed by Meta, formerly Facebook, Horizon Worlds. Some call it the future of the internet. In this metaverse future, our physical and virtual spaces and lives may converge seamlessly. It could create a common place to work, shop and socialize. Some put this future closer than we might think. Global analysts Gartner predict 25 percent of people will spend at least one hour in the metaverse by 2026. Market Research Future says the metaverse market will grow by 45 percent annually until 2030. By contrast, they expect the Internet of Things (IoT) to grow by just 26 percent each year. Little focus on metaverse security and safety "The metaverse's attack surface [possible entry points for malicious actors] is bigger, and it's also a new technology space," says Nick Donarski, co-founder and chief technology officer at blockchain company ORE System. "Developers don't have the experience, technical resources and exposure for long-term understanding of its security and how it applies to organizations." Al Pascual, senior vice president of enterprise risk solutions at identity security provider Sontiq, thinks we can easily get 'ahead of our skis' when it comes to security. "We invent new ways to give people experiences and products using old security paradigms and have to clean up the mess later," he says. "We must think about security before we start deploying the metaverse to everyone." Securing the 'Wild West' "The metaverse is like the Wild West right now. There aren't even any standards yet," says Aarti Dhapte, senior research analyst at Market Research Future and an author of its metaverse market forecast reports. "You can't even regulate it well because everybody doesn't define the metaverse the same way." Gartner defines the metaverse as "a collective virtual space created by the convergence of virtually enhanced physical and digital reality" that's "device-independent and not owned by a single vendor" with "an independent virtual currency." Other definitions include fully immersive experiences, a three-dimensional overlay on the physical world and a persistent collection of universes we can traverse with digital identities and assets. Despite its early stage, many security experts expect the metaverse will see familiar security threats: Social engineering, phishing, identity theft and more. "Cybercriminals' methods are rarely new. More often, they use the same methods in a new channel," says Pascual, whose fraud prevention career includes working for global banks. Adding blockchain to the mix Many think blockchain will play a central role in the metaverse because of the need to decentralize the space and enable the various worlds within it to interoperate. Cryptocurrency, which uses blockchain, is the natural candidate for metaverse ecommerce. The metaverse could use smart contracts – digital transactions stored on blockchain that self-execute under certain conditions – to implement rules. Also a new technology, blockchain adds complexity and security challenges to the metaverse. And while many think its immutability makes it more secure, recent attacks on blockchain highlight its security shortcomings. Virtual currencies, whether cryptocurrency or non-fungible tokens (NFTs,) are also hard to navigate, especially for a big metaverse user group – children. "It's risky for kids and teens to understand handling virtual money in all forms and can lead to big losses," Dhapte says. People still the weakest link Malicious actors most often use people manipulation to attack. For example, Verizon's 2022 Data Breach Investigations Report says 82 percent of data breaches involve a human element. The metaverse's human element is similarly exploitable. The metaverse will also magnify data privacy concerns. Artur Kane, vice president at secure remote access company GoodAccess, says that since the metaverse is a "world attacking even more of our senses," tech giants can use it to make more money with better-targeted advertising. That means tracking even more of our behavior online. "We give away much more information in the metaverse," says Kane, a frequent privacy speaker at industry events. "Companies can learn much about us – like race, sexual interest, potential health issues." He mentions recent research showing how attackers could exploit hardware and application weaknesses to violate privacy. They set up a benign-looking VR escape room game and inferred many participants' attributes, from height to age to location, with high accuracy using just minutes of gameplay. Regulation far behind Lagging data privacy and security regulation adds to the metaverse's Wild West feel. "We're giving away so much more data than we realize," says Kane. "There's huge potential for data breaches and leaks in a new environment where legislation doesn't restrict much." Blockchain regulation is also lacking, which Dhapte thinks could mean greater chance of fraud. "Since various countries don't have fixed regulations for blockchain, tracking fraudulent activities would be a real challenge for governments." User risks in immersive environments The metaverse is a rich playground for abuse – from sexual harassment to virtual assaults. "Any vulnerable group, especially children, faces higher risk as non-consensual contact and communication might be more intrusive and targeted, given how immersive the experience is," Kane says. A survey by global think tank Wunderman Thompson Intelligence found 66 percent of parents familiar with the metaverse have child safety concerns. Fears are not unfounded – one media investigation found behaviors like racist comments and sexually explicit content directed at children. Pascual of Sontiq says metaverse participants exchange little of monetary value today, "But in ten to 20 years, the potential for financial transactions is huge, especially as digital properties gain value. Thefts will become more meaningful." In the meantime, users still risk fraud. Pascual says scams draw kids looking for cryptocurrency and virtual swag. "We've seen evidence of predators targeting children in open worlds like Roblox. Parental oversight, education and control on who children can engage with and what they can see will be key." An investigation as part of Tomorrow Unlocked's hacker:HUNTER video series found rife hacking in children's games like Roblox, for example stealing hard-won digital items. These hacks had considerable impact on the child gamers. It's harder for parents to monitor children consuming content using VR headsets because they can't look over kids' shoulders as with a computer or phone. That gives brands launching metaverse experiences a greater responsibility to protect users. Protecting business in the metaverse For teams responsible for metaverse experiences, security experts like Pascual emphasize the need for moderation. He sees danger for brands in platforms ineffectively moderated. "Brand trust will be critical, so there's a need for moderation, including monitoring to ensure brands aren't easily imitated," he says. Moderation may not be easy. Tech giant Meta's chief technical officer said moderating user behavior "at any meaningful scale is practically impossible." Still, some experts think self-scrutiny by brands, alongside industry collaboration, will be a business imperative in the metaverse. The good news is security concepts are roughly the same in the metaverse, according to Donarski of ORE Systems. "The fundamental security practices carry over because the architecture is the same. It still runs on a server, you have databases on the backend, user and password management, and so on." It may take a while, but the metaverse will likely become a reality. Companies must consider security and privacy before that reality takes shape – whichever version of the metaverse unfolds.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries