Microsoft is offering a steep, and relatively rare, discount on the Surface Pro 9 hybrid tablet as part of a larger Black Friday sales event. The savings fluctuate depending on which model you purchase, but you could save $800 on the absolute top-of-the-line model with 32GB of RAM and a 1TB SSD, bringing the price down to $1,800 from $2,600. This is a record-low deal for this particular SKU.

The discounted models offer 8GB to 32GB of RAM and 256GB to 1TB of solid-state storage. You have your choice between the 12th Gen Intel i5, the 12th Gen Intel i7, Microsoft’s proprietary Arm-based SQ2 chip or even the latest SQ3 chip. With this in mind, discounts range from $50 all the way to the aforementioned $800. Unfortunately, these deals don’t ship with a keyboard or a stylus. 

There has been some confusion between the Arm-based models and the Intel models. Simply put, the Intel models are for power users and the Arm-based models are more for general use. Yes, even though the SQ chips are newer, the Intel chips are faster. In our review of last year’s Surface Pro 9 SQ3, we called it a compromised machine compared to its Intel-based siblings.

With that said, the Surface line is well-regarded for a number of reasons. The 13-inch screen is gorgeous, the form factor is on-point and Microsoft makes it easy to source replacement parts, unlike certain rivals.

These deals are also available on Amazon, if that’s your preferred retail experience. You can grab an Intel i7 version with 16GB of RAM and 256GB of solid-state storage for $1,100, a savings of $500. You can also grab the aforementioned flagship tablet for $1,800, the same price as ordering directly from Microsoft. The company’s wider Black Friday deal also offers discounts on the Laptop 5 and Laptop Studio 2, among others. 

Your Black Friday Shopping Guide: See all of Yahoo’s Black Friday coverage, here. Follow Engadget for Black Friday tech deals. Learn about Black Friday trends on In The Know. Hear from Autoblog’s experts on the best Black Friday deals for your car, garage, and home, and find Black Friday sales to shop on AOL, handpicked just for you.

This article originally appeared on Engadget at https://www.engadget.com/microsoft-black-friday-deals-discount-the-surface-pro-9-by-up-to-800-161628594.html?src=rss

Source: Engadget – Microsoft Black Friday deals include up to 0 off the Surface Pro 9

If there’s a book lover on your holiday list, consider yourself lucky. There’s a huge range of gifts you can give them — and you don’t even need to know what’s next up on their to-be-read list. I’m a former bookseller with an abiding fiction habit who now tests book-related (and other) tech. Andrew Tarantola is Engadget’s resident book expert who produces our Hitting the Books column. He’s compiled the ten books he recommends for 2023 and I’ve included ereaders, accessories and subscriptions that I think the reader in your life will appreciate. Here are the best gift ideas for book lovers this year.

Kobo Clara 2E

Kindle Paperwhite Signature Edition

Twelve South HoverBar Duo

Sony WH-CH720N

Nimble Champ portable charger

Glocusent Tri-Head Book Light

Audible subscription

Libro.fm subscription

Storygraph Plus

Blood in the Machine

Elon Musk

Extremely Online

The Teachers

Monsters, Aliens, and Holes in the Ground

American Prometheus

Starter Villain

The Far Reaches Collection

Optimal Illusions

Mother Brain

This article originally appeared on Engadget at https://www.engadget.com/best-gifts-for-book-lovers-160047468.html?src=rss

Source: Engadget – The best gifts for book lovers in 2023

Google’s Threat Analysis Group revealed on Thursday that it discovered and worked to help patch an email server flaw used to steal data from governments in Greece, Moldova, Tunisia, Vietnam and Pakistan. The exploit, known as CVE-2023-37580, targeted email server Zimbra Collaboration to pilfer email data, user credentials and authentication tokens from organizations. 

It started in Greece at the end of June. Attackers that discovered the vulnerability and sent emails to a government organization containing the exploit. If someone clicked the link while logged into their Zimbra account, it automatically stole email data and set up auto-forwarding to take control of the address. 

While Zimbra published a hotfix on open source platform Github on July 5, most of the activity deploying the exploit happened afterward. That means targets didn’t get around to updating the software with the fix until it was too late. It’s a good reminder to update the devices you’ve been ignoring now, and ASAP as more updates become available. “These campaigns also highlight how attackers monitor open-source repositories to opportunistically exploit vulnerabilities where the fix is in the repository, but not yet released to users,” the Google Threat Analysis Group wrote in a blog post. 

Around mid-July, it became clear that threat group Winter Vivern got ahold of the exploit. Winter Vivern targeted government organizations in Moldova and Tunisia. Then, a third unknown actor used the exploit to phish for credentials from members of the Vietnam government. That data got published to an official government domain, likely run by the attackers. The final campaign Google’s Threat Analysis Group detailed targeted a government organization in Pakistan to steal Zimbra authentication tokens, a secure piece of information used to access locked or protected information.

Zimbra users were also the target of a mass-phishing campaign earlier this year. Starting in April, an unknown threat actor sends an email with a phishing link in an HTML file, according to ESET researchers. Before that, in 2022, threat actors used a different Zimbra exploit to steal emails from European government and media organizations.

As of 2022, Zimbra said it had more than 200,000 customers, including over 1,000 government organizations. “The popularity of Zimbra Collaboration among organizations expected to have lower IT budgets ensures that it stays an attractive target for adversaries,” ESET researchers said about why attackers target Zimbra.

This article originally appeared on Engadget at https://www.engadget.com/an-email-vulnerability-let-hackers-steal-data-from-governments-around-the-world-160005510.html?src=rss

Source: Engadget – An email vulnerability let hackers steal data from governments around the world