Roku will put Walmart shopping ads on its streaming devices

Roku has teamed up with Walmart to serve a new kind of advertisement that will let you shop straight from your TV. Unlike typical TV ads that only showcase a specific service or product, these shoppable ads are more similar to advertisements you see online. Viewers who do find something they want to buy from the shoppable ads can press OK on their remote to begin Walmart's checkout process. Their payment details will be automatically populated with their information from Roku Pay, so they'd only have to press OK to complete their purchase. They'll then get an email confirmation from Walmart with shipping and return information. 

Since this is a pilot partnership between the companies, the shoppable ads powered Roku's ad-buying platform called OneView will only feature products fulfilled by Walmart. Of course, ads always have the potential to be annoying, but Roku's announcement suggests that it will at least show ads targeted towards its users, thanks to its advertising tech. The company also said that future iterations of this pilot program "will look for opportunities to build deeper commerce experiences that meet customers where they are."

This isn't the first time Roku and Walmart have joined forces: Last year, Roku debuted its new LE streaming player as a $15 Walmart exclusive for Black Friday. The device eventually made its way to other retailers like Amazon, where it's being sold at prices ranging from $24 to $30. 

Senate bill would break up Google’s ad business

A bill that would break up Google's advertising business if it becomes law has been introduced in the Senate. The Competition and Transparency in Digital Advertising Act, which has support on both sides of the aisle, would prevent companies that process more than $20 billion in annual digital ad transactions "from participating in more than one part of the digital advertising ecosystem," as The Wall Street Journal reports.

Google easily falls under that distinction. It generated $54.7 billion in ad revenue last quarter alone. While other companies meet the dollar-figure threshold of the proposed rules, Google has a hand in many aspects of the advertising process. It runs an exchange where ad networks bid on inventory. It also offers tools to help companies buy and sell ads.

A House of Representatives version of the legislation is also expected to be introduced imminently. If the bill becomes law, Google would have to exit some of those businesses. It would have a year to comply with the rules after the law is enacted. Meta may also be impacted by the legislation.

“When you have Google simultaneously serving as a seller and a buyer and running an exchange, that gives them an unfair, undue advantage in the marketplace, one that doesn’t necessarily reflect the value they are providing,” Sen. Mike Lee (R-Utah) told the Journal. “When a company can wear all these hats simultaneously, it can engage in conduct that harms everyone.”

Lee is the ranking member of the Subcommittee on Competition Policy, Antitrust, and Consumer Rights. Committee chair Sen. Amy Klobuchar (D-Minnesota) is a cosponsor of the bill, as are Sens.Ted Cruz (R-Texas) and Richard Blumenthal (D- Connecticut).

“Advertising tools from Google and many competitors help American websites and apps fund their content, help businesses grow and help protect users from privacy risks and misleading ads," a Google spokesperson told Engadget. "Breaking those tools would hurt publishers and advertisers, lower ad quality and create new privacy risks. And, at a time of heightened inflation, it would handicap small businesses looking for easy and effective ways to grow online. The real issue is low-quality data brokers who threaten Americans’ privacy and flood them with spammy ads. In short, this is the wrong bill, at the wrong time, aimed at the wrong target.”

Other provisions of the bill include rules for companies that process at least $5 billion of ad transactions per year. They'd be required to provide transparent pricing and act in their customers' best interest. Customers would have the option to sue over breaches of those.

There are other pieces of antitrust legislation in the works that target tech giants. Klobuchar's American Innovation and Choice Online Act, which advanced out of committee in January, would ban companies from giving preference to their own products over those from rivals on their own platforms. For instance, Apple wouldn't be able to position its own apps above competing ones in App Store search results.

Hackers conduct one of the largest supply chain cyberattacks to date

Hackers just perpetrated one of the largest known supply chain cyberattacks so far. The Financial Times and Wall Street Journal report that IT management software giant Kaseya has fallen victim to a ransomware attack that compromised its VSA remote maintenance tool. The company initially claimed that "fewer than 40" of its customers were directly affected, but security response firm Huntress said three managed service providers it worked with had also succumbed to the attack and compromising over 200 companies.

The number could be higher. Huntress noted there were eight affected cloud service providers, potentially affecting many more firms. Swedish supermarket chain Coop closed almost 800 stores after one of its contractors became a target.

Kaseya said it had identified the likely source of the security flaw and was developing a patch that would be "tested thoroughly." In the meantime, though, the company urged all customers to shut down their VSA servers and keep them offline until they could install the update. Software-as-a-service customers were "never at-risk," Kaseya added, although the company took down that functionality as a precaution.

It's not certain who's behind the attack, although Huntress tied the campaign to the Russia-linked REvil group that attacked beef supplier JBS.

The incident is the latest in a string of high-profile ransomware attacks, including JBS and Colonial Pipeline. It also follows the large-scale SolarWinds breaches attributed to another group, Nobelium. Online security is quickly becoming a major issue in the supply chain, and it's not clear these problems will disappear any time soon.

Kaseya's breach also reflects the dangers of relying heavily on one company's software platform. While the number of directly affected clients is small, the supply chain network appears to have created a ripple effect that damaged numerous companies down the line. The situation might not improve until there's either tighter security among Kaseya-like providers or more competition that reduces the potential damage.

Hackers conduct one of the largest supply chain cyberattacks to date

Hackers just perpetrated one of the largest known supply chain cyberattacks so far. The Financial Times and Wall Street Journal report that IT management software giant Kaseya has fallen victim to a ransomware attack that compromised its VSA remote maintenance tool. The company initially claimed that "fewer than 40" of its customers were directly affected, but security response firm Huntress said three managed service providers it worked with had also succumbed to the attack and compromising over 200 companies.

The number could be higher. Huntress noted there were eight affected cloud service providers, potentially affecting many more firms. Swedish supermarket chain Coop closed almost 800 stores after one of its contractors became a target.

Kaseya said it had identified the likely source of the security flaw and was developing a patch that would be "tested thoroughly." In the meantime, though, the company urged all customers to shut down their VSA servers and keep them offline until they could install the update. Software-as-a-service customers were "never at-risk," Kaseya added, although the company took down that functionality as a precaution.

It's not certain who's behind the attack, although Huntress tied the campaign to the Russia-linked REvil group that attacked beef supplier JBS.

The incident is the latest in a string of high-profile ransomware attacks, including JBS and Colonial Pipeline. It also follows the large-scale SolarWinds breaches attributed to another group, Nobelium. Online security is quickly becoming a major issue in the supply chain, and it's not clear these problems will disappear any time soon.

Kaseya's breach also reflects the dangers of relying heavily on one company's software platform. While the number of directly affected clients is small, the supply chain network appears to have created a ripple effect that damaged numerous companies down the line. The situation might not improve until there's either tighter security among Kaseya-like providers or more competition that reduces the potential damage.