Connect with us
DAPA Banner
DAPA Coin
DAPA
COIN PAYMENT ASSET
PRIVACY · BLOCKDAG · HOMOMORPHIC ENCRYPTION · RUST
ElGamal Encrypted MINE DAPA
🚫 GENESIS SOLD OUT
DAPAPAY COMING

Tech

C0XMO botnet spreads via DD-WRT router flaw, kills rival malware

Published

on

C0XMO botnet spreads via DD-WRT router flaw, kills rival malware

A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures.

The researchers found samples for ARM, MIPS, PowerPC, SuperH, x86, x86_64, and other architectures, featuring exploits for DVRs, routers, video management platforms, and Android-based devices.

The botnet was seen targeting a Japanese technology company, but researchers discovered that the source IP address was for a device located in Germany.

image

Fortinet researchers discovered C0XMO and highlighted its modular design, which allows operators to update its exploitation techniques, add/remove targeted architectures, and expand its lateral movement capabilities independently of the main payload.

Fundamentally, C0XMO remains a malware for launching distributed denial-of-service (DDoS) attacks and supports 19 methods, including UDP/TCP/SYN/ICMP floods, “ping of death,” NTP/Memcached amplification, Discord voice UDP floods, and Valve-specific floods.

Advertisement

According to the researchers, the C0XMO botnet malware is delivered by exploiting CVE-2021-27137, a buffer overflow vulnerability caused by insufficient user input. It can be leveraged without authentication and leads to executing arbitrary code.

Gafgyt scanner

For wider distribution, C0XMO downloads a Python script that installs additional packages such as ‘requests,’ ‘paramiko,’ and ‘beautifulsoup4,’ which are required for network scanning and communication, and for running activities over SSH and telnet protocols.

The scanner then uses worker threads to randomly scan internet-facing systems on common ports like 22 (SSH), 23 (Telnet), 80/443 (HTTP/HTTPS), 7547, 8080, 8443, 8888, and others.

After finding a target, the malware attempts to brute-force weak Telnet and SSH credentials, detects the CPU architecture, and deploys a compatible C0XMO binary.

Advertisement

The script contains almost two dozen functions for various tasks for scanning, exploiting HTTP and ADB-based vulnerabilities, detecting the CPU architecture, SSH/telenet login, and checking IP addresses. Its main purpose is to move laterally on the network.

Once it gains access to a device, the malware copies itself to hidden locations such as ‘/tmp/.sys,’ ‘/var/tmp/.sys,’ and ‘/dev/shm/.sys,’ and then creates cron jobs that relaunch it every 15 minutes. Also, shell startup files are modified to enable automatic execution.

Furthermore, C0XMO actively scans running processes to identify competitor botnet clients on the host, as well as red-team tools, programming tools, and network services that may interfere with its operation, and terminates them.

It does so by deleting binaries and removing their persistence mechanisms, including cron jobs, init scripts, system services, and shell profile entries.

Advertisement
List of processes the malware checks for
List of processes the malware checks for
Source: Fortinet

After that, it connects to a hardcoded command-and-control (C2) address using a custom multi-stage handshake that includes magic strings and shared secrets, and then awaits commands.

The supported commands include heartbeat checks, starting and stopping scans, and launching DDoS attacks using one of the 19 supported methods.

The general recommendation for defending against C0XMO and other botnet malware is to keep devices up to date, use unique admin credentials, and disable remote access capabilities when not needed.

Fortinet describes C0XMO as having “a considerably more advanced architecture and feature set compared to earlier IoT botnets.”

The researchers note that the overall design of the malware indicates “a greater degree of operational sophistication and complexity than typical Gafgyt malware.”

Advertisement

article image

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Tech

How Much Does An Alternator Replacement Cost? Here’s What To Know

Published

on





An alternator is an important part that enables you to power your car’s electrical system and maintains the batteries charge. While the battery stores enough of a charge to get the vehicle’s engine running, it’s not doing much once the vehicle is in motion. 

The alternator, which gets its power from the engine, runs systems like your dashboard lights, power windows, and even electric power steering. So, you can’t operate a car without a healthy alternator (at least not for long). There are ways to tell if your car’s alternator is bad, especially if your electronic components start flickering or dimming, and this isn’t something to ignore.

An alternator typically lasts up to a decade, though there are ways to extend their lifespan, so, older vehicles will eventually need а new alternator. The cost of a new alternator depends on several factors, such as your vehicle model and your mechanic’s labor rate. According to J.D. Power, typical prices fall between $100 and $350, not including installation. 

Advertisement

If you include the cost of the part along with installation, you’re looking at $230 on the low end and north of a $1,000 on the upper end. In addition, since the alternator is belt driven, you may need to invest in a new belt, pulley, and tensioner, which can run anywhere from around $30 up to $300. Of course, you can always save money by making the repair yourself.

Advertisement

Is replacing an alternator a challenging do-it-yourself project?

If you have some familiarity around vehicle engines, replacing an alternator is a fairly straightforward job. You’ll need some basic tools like a socket set in order to remove the bolts that hold the part in place. However, depending on the engine configuration, the ease of accessing it can vary. Before getting anywhere near the alternator, you must first disconnect your car’s battery, which helps protect the electrical system and prevents you from getting shocked.

Next, take a picture of the belt going around the alternator so you’ll have an idea of how it wraps around the various pulleys. Remove the belt going around the alternator by loosening the tensioner, which holds it taut. You can find various instructional clips showing this process, such as O’Reilly Auto Parts’ YouTube video, “How To: Replace an Alternator.”

Once the belt is lifted off the pulley on the alternator, you have two different connections to remove; a plug which regulates voltage, and a positive cable, which is held in place by a nut. Finally, there are a few bolts holding the alternator in place that will need to be removed. Once you extract the old part, simply install the new alternator and follow these steps in reverse.

Advertisement

Can you repair an alternator instead of replace it?

You can choose to have an alternator fixed rather than replace it with a new unit, but it only makes sense in certain situations. The age of the part, complexity of the repair and your skills are the determining price factors when opting whether to fix or replace it. If the alternator is only a few years old for instance, it might be worth fixing yourself, especially if you want to save some money.

Current must flow only one way in an alternator, and this is accomplished with diodes, which can sometimes develop faults. This is something you can check using a multimeter as demonstrated by the maddoxmechanic YouTube short called, “Quick Check: How to Test Alternator Diodes with a Multimeter.” The diodes themselves typically run around just under $50, but they do require you to take apart the alternator, which demands more skill. Optionally, you can also find alternator rebuild kits, which can be between $28 and $60.

Advertisement

However, if you’re not comfortable with more in-depth automotive tasks or are short on time, having a mechanic do the repair work might not save much money at all. This is especially true if the part is old and worn, which would be better to replace rather than salvage. Labor costs for replacing the diodes could run between $150 and $400, per Partcatalog.com



Advertisement

Source link

Continue Reading

Tech

How Many Lumens Do You Need For An Outdoor Projector?

Published

on





A backyard movie night can be a great way to get family and friends together over the weekend. However, the experience can also be an exercise in frustration if the picture is difficult to make out due to ambient light pollution. When picking out the best possible portable projector for your needs, factors like resolution, smart features, and audio quality may top your list. But you shouldn’t neglect brightness, which is measured in lumens.

In terms of projectors specifically, ANSI lumens are used, as they provide a more precise evaluation of brightness. One ANSI lumen is around the strength of 2.4 lumens and measures brightness from nine separate points in order to arrive at an overall figure. Conversely, lumens are measured from a single point, the source of the light.

So, how bright does your projector need to be for a well-defined picture that isn’t washed out? Typically, a unit rated above 2,000 ANSI lumens should be sufficient in all but the most challenging of scenarios. The brighter the projector, the better the experience can be across a wide range of conditions. But unfortunately, more ANSI lumens can mean higher costs as well, so you’ll need to consider the best options within your budget.

Advertisement

Can outdoor projectors work in daylight?

Unfortunately, forcing a projector to compete with the Sun isn’t a recipe for success. According to LBC, the Sun puts out an estimated 6,840,000,000,000,000,000,000,000,000 or 6.84 octillion lumens. For context, the number of lumens you should look for in a camping flashlight is between 300 and 1,000. So, as you may imagine, there isn’t a projector on Earth that can overpower the brightness of the Sun, meaning that watching movies outdoors during the day will be difficult or even unfeasible in some situations.

However, if you are determined to set up a projector during the day, there are ways to help improve your chances of achieving a watchable picture. Of course, a projector with a rating north of 3,500 ANSI lumens can help, but contrast is also a vital component. How intensely a projector can produce bright white colors versus dark blacks is measured using contrast ratio. The higher the number on the left, the better, especially in daylight, making a projector with something above a 6,000:1 contrast ratio desirable.

Advertisement

While the projector itself is a factor in terms of improving daylight viewing, it can’t do all the work. Investing in a quality reflective screen can also help keep your projector’s image looking bright and sharp. Other considerations include things like the time of day, as viewing experiences are often better around sunset. Strategically using your yard’s available shade can help, too. Weather, is another variable, with a cloudy day providing a clearer viewing experience than a sunny one.



Advertisement

Source link

Continue Reading

Tech

Dopl raises $6.3M to bring remote robotic ultrasounds to rural patients as it pursues FDA clearance

Published

on

Illustration of a patient receiving an ultrasound using Dopl’s remote technology as a medical assistant looks on. (Dopl Illustration)

Dopl Technologies announced $6.3 million in new funding to support the development and commercialization of a remotely operated robotic ultrasound system. The Bothell, Wash.-based startup has now raised more than $8 million.

Dopl is pursuing FDA clearance for its platform, which pairs off-the-shelf ultrasound probes with commercially available robots. The system facilitates communication between a remotely based ultrasound technician (or sonographer) and the robot, allowing the sonographer to conduct the exam with haptic feedback.

The platform also includes a video connection to allow conversations between the sonographer, patient and onsite health personnel.

The goal, said CEO Ryan James, is to target underserved and typically rural communities “to improve access to care and the time it takes for patients to get that care.”

Ryan James, CEO and co-founder of Dopl Technologies. (Dopl Photo)

While Dopl could eventually create remote interfaces for a variety of health services, ultrasound has widespread applications.

“People say that ultrasound is the new stethoscope,” James said. While perhaps best known for its use in obstetric exams during pregnancy, the diagnostic tool is also employed for cardiac and vascular exams and can be used to detect stroke, cancer, heart disease and other conditions.

Advertisement

The startup was co-founded by James, Chief Operating Officer Steve Seslar, and Chief Medical Officer Wayne Monsky, who began researching novel care delivery methods together at the University of Washington in 2017.

The system pulls together a suite of technologies including fine-motor robotic control, haptics, computer vision, AI, and advanced networking.

The new investment allows the company to hire staff to help it navigate the FDA approval process. Dopl is conducting clinical evaluations of its platform and aims to submit an application for FDA clearance next year.

Dopl currently provides in-person ultrasounds using its technology through traveling sonographer services. FDA clearance would allow it to perform remote robotic exams and scale its platform.

Advertisement

The startup has a letter of intent with a rural health care collaborative that includes 31 critical access hospitals in Washington and has partnerships across the nation, including on the East Coast.

The company also expects to take advantage of opportunities through the Rural Health Transformation Program, a $50 billion federal effort that will distribute funds in every state from fiscal years 2026 to 2030. The program is targeting innovations that expand access to care.

The seed round was led by SpringTide Ventures, which was joined by WRF Capital, Tacoma Venture Fund (pre-seed round lead), HeartX, Transform Health Ventures, Precursor Ventures, and additional early-stage institutional investors.

Dopl was a finalist for startup of the year at the 2026 GeekWire Awards.

Advertisement

There is competition in this market, including traditional ultrasound companies and startups. A notable rival is AdEchoTech, which launched in France in 2008 and has since received FDA clearance to sell in the U.S.

James said Dopl’s haptic technology sets it apart, allowing remote technicians”to actually feel the patient as they’re scanning.”

The remote robotic care delivery industry is rapidly growing, James said, and “represents the next wave of care delivery and shift in mindset in terms of how clinicians operate.”

Source link

Advertisement
Continue Reading

Tech

What Was The Top Speed Of The Original 1965 Ford Mustang?

Published

on





Answering the question of the top speed of the original Ford Mustang that was made in 1965 is tricky — it depends. For our purposes here, we will use the highest possible top speed that was produced by the highest-performing Ford-produced Mustang of this particular year. We are not including Shelby Mustangs, which were initially made for racing and were not production-line Mustangs. Instead, we will focus on the famous K-code Mustang, about which we have covered how to identify one and what one’s worth today.

The K-code Mustang was available between 1964 1/2 and 1967. The K-code engine was a high-performance 289 cubic-inch V8 that produced 271 horsepower, thanks to upgrades to its four-barrel carburetor, cylinder heads, pistons, connecting rods, and lifters. A handling package and dual red-stripe tires were also included, with a fender badge proclaiming “High Performance 289.” A four-speed manual transmission was required. In addition, you couldn’t get air conditioning or power steering on a K-code, while the car’s warranty was shrunken to three months or 4,000 miles. Ford seemed to know exactly who the buyers of these “hi-po” Mustangs would be, which had a lot to do with what made these early Ford Mustangs so iconic.

Advertisement

The performance of the Mustang with the K-code engine was revealed in a road test contained in a 1965 special Mustang edition of Car Life magazine. It did 0-60 mph in 8.3 seconds, made it through the quarter-mile in 15.9 seconds at 85 mph, and hit a top speed of 120 mph at 6500 rpm in top gear.

Advertisement

What else should you know about the 1965 Mustang?

The 1965 Ford Mustang was a runaway sales success, with a total of 559,451 sold that year alone, or 680,989 if you include the 1964 1/2 models that are considered to be 1965s. The Mustang was initially introduced at the 1964 New York City World’s Fair, while Ford also ran Mustang commercials on all three TV networks, reaching 29 million viewers with the Mustang message. Over four million people visited Ford showrooms during the first weekend, while 22,000 placed orders for a Mustang. Four months later, sales surpassed 100,000. It was March 2, 1966, when one million Mustangs had been produced, with a retail value of $2.8 billion. Ford had a winner on its hands.

The Ford Mustang was an iconic vehicle for the Baby Boomers, who were just reaching college age. This was also a time when many families were moving to suburban areas, where they found a need for an extra car. This “youth market” had a set of needs and desires that were unique, yet they did not have much cash, which drove Ford to keep the Mustang’s price low. The Mustang prototype that Ford developed to gauge public reaction was intended to be, “…demure enough for church-going, racy enough for the dragstrip, modish enough for the country club.” While the 1965 Mustang represents the car’s first iteration, we have done a deep dive into every generation of the iconic pony car. The Ford Mustang made history back in 1965, and continues today as the only “pony car” that has been in continuous production since it debuted.

Advertisement



Source link

Continue Reading

Tech

The 10 Best WIRED-Tested Handheld Vacuums of 2026

Published

on

Compare Our Picks

Others We Tested

Image may contain Appliance Device Electrical Device and Vacuum Cleaner

Photograph: Molly Higgins

Riccar Gem Handheld Vacuum With Tools for $70: This model is very similar to the Simplicity corded model above, and although it’s portable and handheld, this big boy needs to be plugged in for power. I like how basic it is: It just has a top switch for on/off, and a button on top to release the dust canister, which is at the front of this model rather than behind. Once disengaged, you just need to pull up the semi-spherical fabric mesh filter and dump out debris. Unfortunately, lots of fur and dust get stuck to the filter, so you’ll need to make sure you wipe it with a semi-damp cloth to clean. It comes with several attachments, including a bendy hose, long crevice nozzle with detachable brush, upholstery brush, and dusting brush. Instead of twisting or snapping, each attachment fits snugly into the opening, making it easier for those with fine-motor issues. I liked that the long, flexible hose reached easily into tight spaces like between my counter and fridge and behind my automatic litter box. The corded machine is loud and gets hot quickly due to its sheer power. While I don’t think this is the best handheld vac for everyone, it’s a solid option with lots of power.

Tineco Go Mini Cordless handheld vacuum leaning against a wooden panel and carpet

Photograph: Molly Higgins

Tineco Go Mini Cordless Hand Vacuum for $200: A lightweight vacuum that’s fairly straightforward and charges through the end of the handle, the Tineco Go must charge for five to six hours before use, which gets you 10 to 20 minutes of use time. The main things I wanted to focus on cleaning in my everyday life were cat litter and pet hair. This vacuum spit out roughly 80 percent of the litter I tried sucking up, and the pet hair just sort of rolled around on the carpet rather than being sucked back into the vac. (I’m not sure if it was the angle or shape of the mouth that aided in both of those problems.) The suction wasn’t as powerful as others tested, and it tended to work best on hard surfaces. This vac wasn’t bad, per se, but others on this list at similar price points worked a lot more effectively on a lot more various surfaces (with multiple head attachments) than this was seemingly capable of.

Advertisement
Bissell AeroSlim Handheld Vacuum propped up against a wooden panel with carpet underneath it

Photograph: Molly Higgins

Bissell AeroSlim Handheld Vacuum for $45: Not the most powerful I’ve tested, but it’s lightweight and super easy to maneuver. It comes with a multi-accessory tool that combines a long, slim crevice tool with a moveable brush (the brush moves up and down on the tool depending on need), but you can also just use the vac without the slim attachment for more general surface cleaning. The tiny 0.1-liter front of the vac twists off to empty, and a small dual filter can also be removed for cleaning/replacement. When testing, I wasn’t able to successfully pick up bigger items like wood shards or litter, and only picked up a fraction of pet hair as some of the more powerful models with a roll brush, but I wasn’t expecting it to—that’s not this cutie’s job. It’s light, simple, and easy to use—making it a great lightweight portable option (just don’t expect it to handle bigger messes).

The 10 Best WIREDTested Handheld Vacuums of 2026

Photograph: Molly Higgins

Hoto AutoCare Air Duster & Vacuum for $60: Looking for a lightweight (0.78 pounds) vacuum that can also blow debris/dust, inflate and deflate, and vacuum-seal? The Hoto may be a fit. It has tons of attachments: a pointed crevice nozzle, dust brush, dust cup nozzle, air nozzle, and swim ring nozzle. It can hold a little over 3 ounces, has 20,000 Pa suction, and each attachment easily twists off and on. I found that the grooming brush head tended to push around fur/hair rather than sucking it up. Like many gadgets we test here at WIRED, this one fell into the pitfall of trying to do a lot of things, rather than doing any one thing really well. This is a great deal for a device with so many capabilities (if that’s what you need), but if you’re just looking for a really great handheld vacuum, there are others that are more effective.

Image may contain Appliance Blow Dryer Device Electrical Device and Smoke Pipe

Photograph: Nena Farrell

Black and Decker Dustbuster Flex for $74: WIRED reviewer Nena Farrell thought this cordless handheld vacuum was great for cars and hard-to-reach spots because of its 4-foot hose. It has a crevice tool and pet hair brush attachments for a variety of messes, and runs on a 20-volt lithium-ion battery that delivers high suction power. Plus, it has a handy charging mount that the accessories clip into. However, we aren’t fans of the short 15-minute battery life.

FAQs

I factored in charge and actual power time in overall value and ranking, considering some charge for four hours and last less than half an hour of run time—that just won’t be practical for certain people. Since most of these come with attachments for specific needs, I made sure to test each on a myriad of surfaces, like rugs, carpet, hardwood, stairs, counters, crevices, inside my car, on furniture, and even in between vents and blinds. I also tested on various types of messes (no liquids though), especially focusing on my personal major mess gripes—cat litter and pet hair.

Advertisement

Definitely pay attention to specs like charge and usage time, as well as power (like voltage) and attachments provided. If you’re working construction and need a handheld vac for debris, I’d recommend something like a Ryobi, while if you’re looking for a portable lightweight travel vacuum, the AeroSlim might be better suited for you. It’s also important to factor in charging versus usage time. Some of these last less than 15 minutes and have very small waste capacities, so if you have a bigger project, you’ll need to take that into consideration.

Power up with unlimited access to WIRED. Get best-in-class reporting and exclusive subscriber content that’s too important to ignore. Subscribe Today.

Source link

Advertisement
Continue Reading

Tech

This dentist built a S$500M dental empire from one clinic. Now, Q&M is betting S$146M on Asia.

Published

on

Q&M Dental Group is eyeing 300 clinics with a S$146M expansion plan

If you’ve walked around Singapore long enough, you’ve probably seen one: a neighbourhood dental clinic with bright green lettering and a giant tooth logo.

Chances are, you never thought much about it. But behind those familiar storefronts sits a SGX-listed company worth over S$500 million, operating 110 clinics across Singapore and now pursuing acquisitions in Australia, Thailand, China, and even of another local rival.

That company is Q&M Dental Group—and after nearly three decades of quietly dominating Singapore’s heartlands, it’s now betting big on becoming a regional dental giant.

Built for the heartlands

q&m dental clinic bukit batok singaporeq&m dental clinic bukit batok singapore
Image Credit: Q&M Dental Surgery

Q&M was established at Bukit Batok in Nov 1996 by Dr Ng Chin Siau, an NUS dental surgery graduate who had worked as a Dental Officer with the Ministry of Health before joining a private clinic at Bukit Batok—and eventually buying it over after selling his three-room Clementi flat for S$180,000

From the outset, Dr Ng had little interest in building a premium dental brand. Instead, he focused on something far more scalable: providing affordable dental care to everyday Singaporeans.

Advertisement

That philosophy was even reflected in the company’s original Chinese name, “全民” (Quan Min), meaning “for all the people.”

Demand grew quickly and outpaced what one dentist could handle.

By 1998, fellow dentist Dr Ng Jet Wei had joined the practice. A year later, together with Dr Chong Kai Guan, the trio had opened another four clinics. By 2000, Q&M was already operating 10 clinics with 20 dentists.

Rather than chasing prime shopping malls or affluent districts, Q&M planted its clinics where Singaporeans actually lived—in HDB estates, neighbourhood centres, and suburban malls.

Advertisement

The strategy was simple: keep prices accessible, expand steadily, and acquire smaller dental practices whose dentists and patient bases came as part of the deal.

Along the way, Q&M also built supporting businesses, including its own dental laboratory to produce crowns, bridges, and dentures in-house, giving it greater control over costs and operations.

By the time the company listed on the SGX Mainboard in 2009, it already had a proven expansion playbook. The IPO simply gave it the capital to execute it at a much larger scale.

Building the Q&M empire

q&m college of dentistry singaporeq&m college of dentistry singapore
Image Credit: Q&M College of Dentistry

In the years that followed the IPO, Q&M expanded aggressively through acquisitions, and revenue climbed from roughly S$60 million to S$155 million by 2016. 

By then, its outlet count had grown to 76 clinics across Asia—a number that would nearly double over the following decade.

Advertisement

This brought Q&M Dental Group’s market capitalisation to S$557.6 million that year.

Q&M’s growth has not been limited to opening more outlets. Alongside the clinic network, the group has built a set of adjacent capabilities that reinforce the core business.

In 2019, it launched the Q&M College of Dentistry at City Square Mall—Singapore’s first private postgraduate diploma programme in clinical dentistry, designed to train general dentists with an expanded range of advanced skills. The college earned a full four-year EduTrust certification from Feb 2026, allowing it to enrol international students. 

This is a crucial move with Singapore’s dentist supply constraint. Singapore’s only domestic dental school graduates around 50 to 60 dentists per year, and foreign-trained dentists must pass a rigorous licensing exam before practising. Any competitor trying to build a rival chain faces the same thin talent pool. 

Advertisement

Q&M’s training college gives it a head start in sourcing and retaining the practitioners it needs to keep opening clinics, a structural advantage that competitors cannot easily replicate.

q&m acumen diagnostics pcr testing covid-19q&m acumen diagnostics pcr testing covid-19
Image Credit: Business Times

When COVID-19 hit, Q&M pivoted part of its operations, acquiring Acumen Diagnostics to distribute test kits and run laboratory PCR testing in 2021—a business that briefly became a significant revenue contributor before demand evaporated as the pandemic receded.

As pandemic revenues evaporated, results retreated sharply in 2022 and 2023. But the core dental business proved its resilience: core healthcare EBITDA held steady at around S$37 to S$40 million throughout, even as the group-level numbers were distorted. By FY2025, the group had returned to profit, recording a16% growth.

In 2023, it opened a Free Dental Clinic at Chai Chee Road, offering essential dental treatment at no cost to underprivileged patients. While charitable in nature, the initiative also reinforces Q&M’s standing in the communities where its business is most deeply rooted.

More recently, Q&M has turned its attention to technology.

Advertisement

In 2024, the group invested in EM2AI, a dental technology firm developing AI-powered diagnostic and treatment-planning tools, including a cloud-based practice management system called EM2Clinic.

The tools are designed to reduce the administrative burden on dentists and standardise clinical workflows, which is useful as Q&M grows toward a network where consistency across hundreds of clinics matters more than before.

Why scale matters

q&m dental clinic bedok reservoir singaporeq&m dental clinic bedok reservoir singapore
Image Credit: Q&M Dental Surgery

With 110 clinics, Q&M operates roughly 8% of Singapore’s nearly 1,300 licensed dental clinics. According to the company, it also serves around one-third of all patients who visit private dental groups.

That scale creates advantages that go beyond simply having more outlets.

As Singapore’s largest private dental chain, Q&M has greater bargaining power with landlords and suppliers, while its size also allows it to spread fixed costs across a much larger network.

Advertisement

Government healthcare policies could further strengthen that position.

The enhanced Community Health Assist Scheme (CHAS) subsidies introduced in Oct 2025 expanded coverage for restorative dental procedures and extended eligibility to 1.7 million cardholders. As the country’s largest CHAS-accredited private dental chain, Q&M stands to benefit more than smaller competitors. Analysts estimated the changes lifted the group’s revenue by around 3% in the second half of FY2025.

More support is also on the way. From mid-2026, seniors will be able to use up to S$400 a year from Flexi-MediSave for dental treatment at CHAS clinics. The policy aligns neatly with Singapore’s ageing population, with one in four residents expected to be aged 65 or older by 2030. As dental needs typically increase with age—and many seniors live in the heartland estates where Q&M has built its network—the demographic trend could provide another long-term tailwind for the group.

Meanwhile, Q&M continues to consolidate its position. In Mar, the group announced plans to fully acquire an unnamed Singapore dental chain, backed by a profit guarantee of up to S$34 million over five years. The deal would further strengthen its presence in its home market even as it looks overseas for growth.

Advertisement

Now betting big on the region

aoxin q&m stomatology hospital dalian chinaaoxin q&m stomatology hospital dalian china
Aoxin Quanmin Stomatology Hospital in Dalian, China./ Image Credit: Aoxin Q & M Dental Group Limited

For most of its history, Q&M’s overseas ambitions effectively stopped at the Causeway.

Over the years, the group steadily expanded its presence in Malaysia, where it now operates 38 dental clinics alongside a dental supplies and equipment distribution business. Beyond that, however, its growth remained largely concentrated in Singapore.

That is now changing.

In recent months, Q&M has unveiled plans to enter three markets almost simultaneously, marking the group’s most ambitious expansion programme to date

The biggest move is Australia. In Jul 2026, Q&M signed binding agreements to acquire Experteeth Group for A$119.64 million (S$107.83 million). The deal would add 40 clinics and around 120 dentists across New South Wales, Victoria, Queensland, Tasmania, and the Australian Capital Territory, making it Q&M’s largest acquisition ever and its first entry into a market outside Asia.

Advertisement

In Thailand, it signed a deal to acquire a group of 30-plus clinics focused on cosmetic and aesthetic dentistry, a sector closely tied to the country’s medical tourism industry. 

In total, the acquisitions in both countries will amount to a combined US$113.2 million (S$146.26 million) investment to build a pan-Asian dental company. 

China forms the third pillar of Q&M’s expansion strategy. The group also owns Chinese dental operator Aoxin Q&M, which it has now fully consolidated as a subsidiary. It plans to use the business as a platform to acquire dental chains in southern China, expanding beyond Aoxin’s traditional base in the country’s northeast.

If all three acquisitions close, Q&M’s footprint could grow from over 160 dental outlets today to more than 300 within two years.

Advertisement

Not every growth initiative, however, has gone according to plan.

In Apr 2025, the group also proposed a secondary listing on Bursa Malaysia, which would have given Malaysian investors direct access to the stock and strengthened Q&M’s capital markets presence in its second-largest operating market. The plan was later shelved, with the company citing prevailing market conditions.

What could go wrong?

aoxin q&m stomatology hospital panjin chinaaoxin q&m stomatology hospital panjin china
Aoxin Quanmin Stomatology Hospital in Panjin./ Image Credit: Aoxin Q & M Dental Group Limited

Three concurrent acquisitions in markets Q&M has limited or no experience operating in are an ambitious programme for a management team whose track record has been built almost entirely in Singapore and Malaysia. 

China is the cautionary tale here. Q&M first entered China back in 2013, and later spun that business off as a separately listed company, Aoxin Q&M, in 2017. Aoxin broke even for its first couple of years, then racked up losses for several years running—around RMB142 million (S$27.09 million) in total losses from 2020 to 2024—as it battled COVID-19 shutdowns and China’s strict lockdown policies.

It only turned a profit again in 2025, roughly six years after the losses began.

Advertisement

Now Q&M has folded Aoxin fully into its own accounts, and in doing so has added S$77.0 million of goodwill to its balance sheet—essentially the premium it’s paying on the bet that these businesses will earn enough in future to justify the price.

If they don’t, that goodwill may eventually need to be written down, hitting profits the same way it did for Aoxin’s own past investments. Australia and Thailand are brand-new markets for Q&M with no comparable track record to lean on, so if that expansion underperforms, the money put into it may not pay off.

q&m dentists singaporeq&m dentists singapore
Image Credit: Q&M Dental Group

Dental practices are also relationship-driven businesses, where patients follow their dentist, not the brand. When a chain acquires a clinic, the real asset is the practitioners inside it. 

If key dentists leave post-acquisition and take their patient books with them, the acquired revenue can evaporate quickly. 

Q&M has tried to address this through 15-year service agreements and long lock-up equity arrangements with acquired dentists, but such structures have never been tested at the scale Q&M is now attempting across four markets simultaneously.

Advertisement

Then there is the Johor-Singapore dynamic complicating profits further. The Rapid Transit System Link scheduled to open in Dec 2026, will cut the Woodlands North to Bukit Chagar crossing to around five minutes—at a fare of roughly S$5 to S$7.

Singaporeans already save 50 to 65% on identical dental procedures by crossing the Causeway, with more than 100,000 estimated to make the trip annually. A single dental implant costs S$4,500 to S$6,500 in Singapore versus S$1,200 to S$2,000 in Johor Bahru. 

When the RTS removes the main friction, being the border queue, from that equation, the maths for price-sensitive patients shifts meaningfully. 

Q&M’s 38 Malaysian clinics, including in Johor, might mean some of that outflow stays within the group. But how much of Q&M’s dental revenue holds up once the crossing becomes as easy as taking the MRT is a question nobody can fully answer yet.

Advertisement

From a single clinic in Bukit Batok to a listed group eyeing four countries simultaneously, Q&M’s story is, in many ways, a study in patience. Three decades of unglamorous, heartland dentistry have built toward a moment where the company is finally ready to bet big on becoming Singapore’s dominant private dental chain in the region. Whether the bet pays off will be the next chapter.

  • Learn more about Q&M Dental Group here.
  • Read other articles we’ve written on Singaporean businesses here.

Also Read: ⁠The price of going regional: Raffles Medical’s S$600M bet is still struggling to pay off

Featured Image Credit: National University of Singapore, Velocity @ Novena Square

Advertisement

Source link

Continue Reading

Tech

Google Chrome could soon let you translate pages right inside Reading Mode

Published

on

Chrome‘s Reading Mode just got a new button tucked inside its settings menu. Google is quietly testing a translate option for the feature on Chrome Canary, the browser’s experimental testing channel where new ideas show up long before they’re ready for everyday use.

What does this new translate button actually do?

The option was first spotted by @Leopeva64, who shared a video demo on X highlighting the new button tucked inside Reading Mode’s dropdown menu. It exists alongside the controls for theme, font, images, and links, though it doesn’t actually do anything yet. Once this feature is live, clicking it would translate whatever page or PDF you’re reading into your preferred language, without leaving Reading Mode.

For now, clicking the button does absolutely nothing. Google appears to have added the interface piece first, well before building out the actual translation function behind it. If you need to translate a page today, the existing Google Translate browser extension already covers the same job just fine.

Is it rolling out to everyone on Canary?

Not quite yet, it seems. PiunikaWeb tested this on the latest Chrome Canary build, but the translate button was nowhere to be found. That mismatch suggests Google might be testing this in limited batches rather than pushing it to every Canary user simultaneously, or it could be a platform-specific rollout.

Advertisement

In the last few months, we have seen a bunch of other Chrome upgrades. Google overhauled Reading Mode into a fullscreen, distraction-free view earlier this year, and rolled out vertical tabs alongside it. The company also added split view, PDF annotations, and direct Google Drive saving. Separately, Chrome is working on native lazy loading support for video and audio, a change that could speed up page loads across the board once it ships.

Source link

Advertisement
Continue Reading

Tech

Germany’s The Exploration Company eyes $2bn valuation

Published

on

The Bavarian space-tech is reportedly aiming to raise at least $300m.

As Europe ramps up efforts to compete with US heavyweights in the space sector, Germany’s The Exploration Company (TEC) is reportedly eyeing a major raise that could value the start-up at more than $2bn.

Founded in 2021 by Hélène Huby and a team of aerospace veterans, TEC is building a full-stack space transportation system.

Nyx, the company’s reusable space capsule designed to dock with any space station is expected to go on its first flight demonstration in 2028. The company is also developing a high-thrust staged combustion rocket engine called Storm.

Advertisement

TEC’s website states that it aims to address the “exclusive[ity]” of space travel by building space vehicles “for humanity”. It is the first European company to have signed a Space Act Agreement with NASA.

The company operates out of Germany, France, Luxembourg, Spain and Italy, with offices in the US and the United Arab Emirates.

According to the Financial Times, the Bavarian space-tech is aiming to pool at least $300m, with the EQT-managed $5bn Scaleup Europe Fund in talks to make one of its first investments in the company.

The fund aims to close the persistent late-stage financing gap that has long pushed European scale-ups to raise capital elsewhere and, in many cases, to relocate abroad altogether. Scaleup Europe Fund is also reportedly expected to back the Paris-based Mistral AI in an upcoming round.

Advertisement

EQT Ventures has backed TEC since 2023. Other investors, including Bayern Kapital, Promus Ventures, Partech, Vsquared Ventures, Cherry and Red River West also back the company.

TEC did not disclose its valuation following a 2024 raise of $160m. Earlier this month, the company opened a new lab near the NASA Johnson Space Center in Houston to conduct further testing on a full-scale mock-up of a Nyx crew capsule.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Advertisement

Source link

Continue Reading

Tech

Apple Watch fall detection saves father

Published

on

A Cincinnati man says that if the fall detection feature of Apple Watch hadn’t called 911, he would have died from undiagnosed blood clotting.

Back in 2023, it was the Apple Watch heart rate monitor that saved a Cincinnati woman’s life by alerting her to a dangerous condition. Now the device’s fall detection has done the same for Mohammad Islam in the city, according to local station WKRC.

Islam was at home and taking out the trash when he said he turned around and “just collapsed.”

“I don’t know how long I was there,” he continued. “Suddenly my eyes opened up and I was on the ground and sweating like crazy.”

Advertisement

“I tried to get up, but couldn’t. There was a chair so I held it…,” he said. “Then I heard the sirens coming.”

Emergency medics took him to the University of Cincinnati Medical Center where he has been diagnosed with blood clots in his lungs. The cause has not yet been identified, but he has been sent home with medication.

The Apple Watch he wore was given to him by his daughters, and even before the incident, they reportedly pressed him about wearing it. “[Also they] gave a gift to their mother… an Apple Watch,” said Islam, “and every day they call me, they say ‘Are you wearing your Apple Watch?’”

“They’re overjoyed that their gift saved me,” he said.

Advertisement

Islam had not intentionally turned on the fall detection feature, but he is aged over 55, so it was enabled automatically. He says that he was aware of it because of getting occasional false alarms, but he did not know the extent of what the feature can do.

“Because when I work in the yard or something and I bang my hand, it says, ‘Hey, did you fall down? Should we call SOS or something?’” he said. “So, it was in the back of my mind, but I did not know that it was going to call 911.”

Apple Watch keeps saving lives

Apple and just about every smartwatch maker is currently being sued over fall detection and an allegation that it infringes on patents owned by UnaliWear. But in the meantime, it has directly saved countless lives since its introduction with the Apple Watch Series 4 back in 2018.

Smartwatch on a person's wrist displaying Fall Detection settings, showing the feature switched on with options for Always on and Only on during workouts

Fall Detection settings on Apple Watch.

Advertisement

At times, that detection has been when the wearer has been involved in a car crash and the Apple Watch messaged the driver’s family. It’s helped injured mountaineers, too.

Then across its multiple health features, the Apple Watch has also alerted many users to conditions that, if not immediately life-threatening, were extremely series. It was AppleInsider managing editor Mike Wuerthele’s Apple Watch that warned him about a potential atrial fibrillation after his daughter’s passing.

It’s events like these that Tim Cook has said he is most proud of from his time as CEO.

“I remember getting the very first Apple Watch note from a user who told me that the watch saved their life,” he said in April 2026. “Now, of course, I get these on a daily basis, but that first one hit me particularly hard. It caused me to just stop in my steps.

Advertisement

Source link

Continue Reading

Tech

Clop ransomware targets Windchill, FlexPLM in data theft attacks

Published

on

Hacker

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.

Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances.

As cybersecurity company ReliaQuest reported on Thursday, Clop operators have been deploying JSP webshells that allow them to exfiltrate sensitive data from targeted companies’ compromised PLM platforms.

image

“ReliaQuest has observed threat actors actively exploiting CVE-2026-12569, a critical unsafe deserialization vulnerability (CVSS 9.3) affecting PTC Windchill and FlexPLM. Exploitation enables unauthenticated remote code execution and JSP web shell deployment for remote command execution and sensitive product data exfiltration,” the company said.

“The actor behind these attacks remains unconfirmed. however, the observed tradecraft shares characteristics with previous Cl0p campaigns targeting enterprise applications and high-value data repositories.”

Advertisement

Clop’s Windchill and FlexPLM attacks were also confirmed yesterday by the Ransomware Information Sharing and Analysis Centre (Ransom-ISAC), a non-profit organization dedicated to the tracking and defense against ransomware threats.

Ransom-ISAC’s Brandon Parsons from Ascent Solutions told BleepingComputer that Clop is using what appear to be previously compromised email accounts to send extortion messages to multiple employees of targeted organizations.

Clop extortion email
Clop extortion email (Ransom-ISAC)

“The extortion emails appear to originate from randomly compromised accounts, are sent to hundreds of users within an impacted organization and include Cl0p’s latest contact information,” Parsons said. “This extortion approach is consistent with what we observed with the Oracle EBS campaign last year, except for the use of new email addresses.”

As BleepingComputer has learned, it is a common tactic for this cybercrime group to change email addresses before launching a new extortion campaign.

Flagged as actively exploited in attacks

PTC began releasing security patches for the CVE-2026-12569 flaw on June 17 and, while it didn’t confirm in-the-wild exploitation, it released remediation guidance in a private advisory and urged customers to review their environments for indicators of compromise (IOCs).

Advertisement

After PTC warned customers of “heightened threat activity” on June 26, the Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability to its Known Exploited Vulnerabilities catalog and ordered U.S. federal agencies to secure their PTC Windchill and FlexPLM instances within three days.

According to German news outlet Heise, CVE-2026-12569 also prompted emergency action from German authorities, with the Federal Office for Information Security (BSI) emailing and calling PTC customers in the middle of the night and warning them to patch their systems as quickly as possible.

German authorities reacted with the same urgency in March after reports that a similar critical Windchill and FlexPLM flaw (CVE-2026-4681) may be exploited or was likely to be exploited soon.

On Thursday, ReliaQuest advised PTC customers to patch Windchill and FlexPLM systems and place them behind VPNs or trusted access gateways if possible. Additionally, if they suspect compromise, they should isolate the affected servers, collect forensic artifacts, and rotate any exposed credentials before restoring service.

Advertisement

A PTC spokesperson was not immediately available for comment when contacted by BleepingComputer earlier this week.

PTC Windchill and PTC FlexPLM are enterprise software platforms in a category known as Product Lifecycle Management (PLM) and used to track, design, and manage products from original idea to final manufacturing.

The two PLM systems are widely popular among engineering, manufacturing, quality, and supply chain teams across high-profile companies in the aerospace, defense, automotive, heavy machinery, retail, and medtech sectors. PTC says that its products are used by more than 30,000 customers globally, including over 1,500 brand and retail customers using FlexPLM.

Clop’s data theft campaigns

The Clop extortion gang has a long history of breaching enterprise platforms in data theft attacks, with previous campaigns targeting Accellion FTA, GoAnywhere MFT, SolarWinds Serv-U FTP, Cleo, and MOVEit Transfer file-sharing servers, the latter affecting more than 2,770 organizations worldwide.

Advertisement

Most recently, it exploited an Oracle EBS zero-day flaw to steal sensitive files from many organizations since early August 2025, including Harvard University, The Washington Post, GlobalLogic, the University of Pennsylvania, Logitech, Estée Lauder, Korean Air, and American Airlines subsidiary Envoy Air.

After breaching their systems and exfiltrating sensitive documents, Clop publishes the stolen data on its dark web leak site, making it available for download via Torrent if victims refuse to pay a ransom.

The U.S. Department of State now offers a $10 million reward for information that could link this cybercrime gang’s attacks to a foreign government.

Update July 24, 07:42 EDT: Added more info on the attacks from Ransom-ISAC.

Advertisement

article image

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

Source link

Continue Reading

Trending

Copyright © 2025