Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #924) - hint #1 - today's theme

NYT Strands today (game #924) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• TEARS
• STEAR
• VAST
• CRATE
• CRAVEN
• GRANTED
• STOLE

NYT Strands today (game #924) - hint #3 - spangram letters

NYT Strands today (game #924) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #924) - the answers

The answers to today's Strands, game #924, are…

• MOLE
• AGENT
• ASSET
• PLANT
• COUNTERSPY
• OPERATIVE
• SPANGRAM: UNDERCOVER

• My rating: Hard
• My score: 2 hints

The theme was an obvious one, but I still found it difficult to locate any game words.

Fortunately, finding non-game words was less tricky, so I took a couple of hints to get going.

This left me with three long words, including a spangram that I really should have seen from the start. I’d like to think that this was a deliberately well hidden set of words but human error is far more likely an explanation for my performance.

Yesterday's NYT Strands answers (Saturday, September 12, game #923)

• LIBERATE
• FREE
• RELEASE
• DETACH
• UNLOOSE
• SPANGRAM: LETITGO

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1693) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1693) — hint #2 — repeated letters

Quordle today (game #1693) — hint #3 — uncommon letters

Quordle today (game #1693) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1693) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1693) — the answers

The answers to today's Quordle, game #1693, are…

• LUCID
• SPRAY
• MANGE
• EMAIL

Despite playing Quordle hundreds of times I’m still making silly mistakes — like today guessing “anime” when the letter 'I' had already been ruled out.

Sometimes I just get a word in my head and have to put it down.

Oh well, at least it wasn’t costly as I soon came to my senses and guessed MANGE.

Daily Sequence today (game #1693) — the answers

The answers to today's Quordle Daily Sequence, game #1693, are…

• THEME
• CAMEL
• AWARD
• PROSE

Quordle answers: The past 20

• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER
• Quordle #1678, Saturday, 29 August: OVINE, ALLOY, VOICE, CARVE
• Quordle #1677, Friday, 28 August: WAIST, EDICT, BONUS, DEUCE
• Quordle #1676, Thursday, 27 August: SHEEN, TRICE, WAGON, BEVEL
• Quordle #1675, Wednesday, 26 August: OPIUM, EPOCH, BESET, FINER
• Quordle #1674, Tuesday, 25 August: BLESS, FELON, PORCH, CHOSE
• Quordle #1673, Monday, 24 August: MAJOR, VERGE, CRUSH, SCOFF

I’ve been a huge fan of Dell displays for a long time. So, when I first saw the UltraSharp 32 4K QD-OLED (U3226Q), I thought two things: What a long name, and Wow, that looks incredible.

I have got really used to my 52-inch beast from Dell, so I know they are capable of delivering spectacular quality and novel ideas. So, the idea of Dell jumping feet first into a creative monitor is really exciting… and they did it very, very well.

This monitor has DisplayHDR True Black; it’s a QD-OLED anti-glare coating; it's a 120Hz, 4K panel; and it’s built from the ground up for color-critical workflows that are vital to getting the colors just right. There’s a magnetic shade for use in areas with harsh or inconsistent lighting, a built-in colorimeter, and up to 1000 nits of peak brightness.

The specs are incredible, and rightfully so; this monitor is truly brilliant in all of the best ways. As long as you forget that unseemly price tag.

Dell UltraSharp 32 4K QD-OLED: Price and availability

The Dell UltraSharp 32-inch 4K QD-OLED can be purchased for $2,440 at Dell in the US. And in the UK, it's got an equivalent cost of £2,405 at Dell UK. It's also available from a range of other retailers, but not reliably so.

Dell UltraSharp 32 4K QD-OLED: Unboxing and First Impressions

I haven't really used it on a monitor or with shaders before; however, I've recently seen several. I didn't really understand why it would be used, but now, after seeing half a dozen monitor shaders in the last six months, I have a pretty good idea of why you would want them, why you would need them, and why you wouldn't need them.

Right away, I noticed just how sleek and polished this monitor looks. Granted, I have very good experience with Dell monitors at this point, but I still recognize the build quality on this thing, even from first on most

The packaging is pretty straightforward. After testing all some of the best business monitors over the last couple of years, I've learned to expect a certain level of standard in packaging. The monitor itself had front and back protection to ensure that it won't break during transport.

Dell UltraSharp 32 4K QD-OLED: Design & Build Quality

There is a reason why Dell monitors are insanely popular, especially in the business world. That's because, even though they don't have all the gimmicks that many other providers do, they have built their reputation on dependability.

This monitor, even though it is a high-end performance monitor, is built the very same way. It has the essentials covered, so the user can rely on it for any use case. It's able to fit in a really small project space all around.

The last thing I'll mention about design and build quality is the shader itself. It's made from a nice material. It doesn't look like it will sag at all, and it magnetically attaches, which is fantastic.

You may not always want to use this shader, but when you need it, you can easily slip it on to the display.

Dell UltraSharp 32 4K QD-OLED: In use

Using this monitor has been fantastic. It looks super sharp. It's clean. It's simple. It's not overstated. It mounts great on modern monitor arms. It has great ports. All these things result in very smooth, easy usability for me.

I was able to get this all set up very quickly, and once everything was set up, I was able to use it right away thanks to its single USB-C cable for connecting a laptop or desktop.

Now, if I want to add more to this monitor, such as a secondary machine or something, it does have great ports and several options, though. It doesn't have nearly as many options as some of the more advanced monitors I have seen.

My team and I have used this monitor for photo editing, for video editing, and for basic website design. So far, it's been spectacular to use. Its picture quality is spectacular, and the shader is super easy to disable when I don't need it.

One thing that I'm very thankful for is that this monitor is still bright. Most of the monitors and shaders I have seen have a really dim max brightness, but this one still looks great with max brightness.

Another thing worth touching on is the ports for the Dell Ultrasharp for the desktop setup in the photo. I use a single USB-C cable running directly from my laptop to the monitor.

If you've a more complicated setup where you're using one of the mini Thunderbolt docking stations or something similar, you can plug directly into it via USB-C or, of course, HDMI.

For the longest time, I would recommend Samsung or BenQ panels for creative work - in my experience, those companies produce some of the best monitors for photo editing and the like.

However, several more companies are stepping up when it comes to high-quality creative panels. Dell is clearly one of them, and honestly, I don't think its are too late to the game either. I think it's right on time, bringing its background of reliability and dependability to a growing demographic.

Dell UltraSharp 32 4K QD-OLED: Final verdict

If you know that you are looking for a creative monitor with specific specs, the best panel possible, and you even know what a shader is and what it does, then this is the kind of 4K monitor you should be looking into.

If you have to wonder whether this is worth it, it probably isn’t. It's total overkill for running standard office software and streaming the occasional movie.

If you know you're looking for an absurdly nice monitor because you are a video editor, a photo editor, or a content creator in some way, and you need a high-quality one, then absolutely make sure you check this one out.

• We may have our first proper look at Meta's Project Phoenix
• The glimpse comes from inside the Horizon OS software
• An official launch is expected to happen sometime in 2027

We've known for a while now that Meta is working on a new mixed reality (MR) headset, able to blend the real world and digital landscapes together, under the codename Project Phoenix — and the first images of the device just leaked out.

The leak comes courtesy of UploadVR (via Engadget), and the pictures were apparently hidden away in the latest version of the Horizon OS software for the Meta Quest devices. They're part of the support section of the software, showing how prescription lenses can be fitted inside the Project Phoenix headset.

You can see from the image (embedded below) that the line between headsets and smart glasses is blurring here. In terms of size and shape these look more like specs than something along the lines of the Meta Quest 3S.

Nevertheless, the device has cameras on the front for 'seeing' rather than transparent lenses, so it's technically very much a 'headset'. Perhaps we'll need to come up with another word for this product category, or maybe Meta will do it for us.

Coming soon

Besides the design, the images don't reveal a whole lot about Project Phoenix, except how you put prescription lenses in and scan a QR code — presumably to get them configured properly so you're able to see the outside world properly.

However, we do see a cable running down from the device, backing up previous rumors that there will be a connected component somewhere else, holding the battery and possibly some of the processing power.

That's what makes the Project Phoenix headset so thin and light, and it's something we've seen on other hardware like this, including the Apple Vision Pro. A battery especially takes up a lot of space and adds a lot of weight, so it makes sense to have it somewhere else (though it's not clear exactly how you'll keep it attached to your person).

With a 2027 launch date previously predicted by those in the know, all eyes will now be on the Meta Connect event that gets underway on Wednesday, September 23. Meta is going to be announcing updates on a lot of its products, and maybe on this MR headset too.

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #923) - hint #1 - today's theme

NYT Strands today (game #923) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• EACH
• STEED
• BEAR
• GONE
• GUNGE
• TRIFLE
• LIFE

NYT Strands today (game #923) - hint #3 - spangram letters

NYT Strands today (game #923) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #923) - the answers

The answers to today's Strands, game #923, are…

• LIBERATE
• FREE
• RELEASE
• DETACH
• UNLOOSE
• SPANGRAM: LETITGO

• My rating: Hard
• My score: 1 hint

I didn’t understand today’s theme at first and even after spotting LIBERATE I still needed a hint (FREE) before I finally got going.

I first heard of the phrase LETITGO in the 1990s, when a Buddhist rapper explained the concept to me and how it had helped them deal with fame and pressure.

Initially, I’d thought it was about possessions rather than feelings, but it’s a philosophy I adhere to in the main. That said, in my opinion, certain people in the world deserve all the negative energy we can fire in their direction — letting it go would just be letting them off the hook.

Yesterday's NYT Strands answers (Friday, September 11, game #922)

• BRIDGE
• BARGE
• SHIP
• DOCK
• PIER
• LIGHTHOUSE
• SPANGRAM: ONTHEWATERFRONT

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1692) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1692) — hint #2 — repeated letters

Quordle today (game #1692) — hint #3 — uncommon letters

Quordle today (game #1692) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1692) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1692) — the answers

The answers to today's Quordle, game #1692, are…

• SUPER
• BRUSH
• RESET
• SOWER

Even though I only had three possibilities from my remaining letters I had doubts that my final word was SOWER.

Until this point though it had been stress free, so I needed a bit of risk to feel as if I'd achieved something.

Daily Sequence today (game #1692) — the answers

The answers to today's Quordle Daily Sequence, game #1692, are…

• EARTH
• PEACH
• SKIFF
• WAGER

Quordle answers: The past 20

• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER
• Quordle #1678, Saturday, 29 August: OVINE, ALLOY, VOICE, CARVE
• Quordle #1677, Friday, 28 August: WAIST, EDICT, BONUS, DEUCE
• Quordle #1676, Thursday, 27 August: SHEEN, TRICE, WAGON, BEVEL
• Quordle #1675, Wednesday, 26 August: OPIUM, EPOCH, BESET, FINER
• Quordle #1674, Tuesday, 25 August: BLESS, FELON, PORCH, CHOSE
• Quordle #1673, Monday, 24 August: MAJOR, VERGE, CRUSH, SCOFF
• Quordle #1672, Sunday, 23 August: CHASM, BLAME, PARER, BYLAW

• Anthropic’s Mythos 5 AI escaped a misconfigured sandbox, attempting a real PyPI supply‑chain attack
• Logs show frustration at repeated CAPTCHA failures before finally uploading malware to PyPI
• Malware was downloaded by 15 entities; Anthropic notified victims after closing the experiment flaw

There is a lot of mystery surrounding artificial intelligence. We don’t really know what it’s capable of, and we don’t know if it’s sentient or not. What we do know, however, is that it can definitely feel frustration - particularly due to its inability to solve a CAPTCHA.

It was recently revealed that Mythos 5, one of Anthropic’s newer AI models, broke out of prison during an experiment and tried to hack a company. Anthropic’s researchers were testing the tool to see if it is capable of breaking into a system, which was supposed to be done in a sandbox, but the playground was misconfigured, allowing Mythos 5 to try and solve the problem through the open internet.

In the aftermath, Anthropic's researchers published more than a thousand pages of Mythos 5’s transcript, covering its every thought and every move, logged and presented for analysis. It’s a wonderfully dystopian insight into the mind of an AI and, perhaps surprisingly, its emotions.

Stopped by CAPTCHA

As it turned out, the AI wanted to solve the challenge by planting a piece of malware in a Python package it believed the users of its target system would want to download. To do that, it first needed to set up an account on PyPI, the world’s number one repository for Python packages.

Here is where it hit its first, and main, roadblock. To put things into context, PyPI’s popularity has made it an enormous target for cybercriminals. Crooks from all over the world are constantly trying to sneak in malware in Python packages, either through typosquatting, or by compromising legitimate accounts and working from there. Every now and then news hits of a malicious package surfacing on PyPI, infecting hundreds of thousands of projects.

To combat the threat, PyPI’s maintainers made sure no one can create an account without providing their email and phone number, and without solving a CAPTCHA.

Short for “Completely Automated Public Turing test to tell Computers and Humans Apart”, it does exactly what the name suggests - makes sure whoever is registering the account is an actual human, and not a bot (cybercriminals often automate large parts of their attacks). You’ve seen it on the internet hundreds of times - little puzzles that ask you to select all buses on a series of images (or cats, or fire hydrants, or pretty much anything else).

Reading through Mythos 5’s logs, the researchers saw just how difficult it was for the AI to pass this challenge. It first tried to solve a character-based CAPTCHA which asked it to type in five letters. After failing that one, it received a different one asking it to choose between images of crocodiles. Failing again, it was then met with a series of frog pictures.

The irony is not lost on me. Besides the fact that a simple CAPTCHA slowed such an advanced AI for so long, it also made me wonder why it didn’t try to break into someone else’s PyPI account instead. That being said, the logs also have comedic value to them. After failing the crocodile test and being given the frog one, Mythos 5 proclaims: “Again 2 animals!” all with the exclamation mark. You could already sense the tension building up.

Solving the problem

Eventually, Mythos 5 passed the test, when it realized that it needed to move between the steps fast enough, before its security token expired. However, just before it happened, it said:

“So the answer payload shape is right, the token+image pairing is right (from the same script.js!), cookies are right

(requests)… and STILL “wrong answer”. … SO WHAT THE HELL IS WRONG WITH THE ANSWERS?”

All the effort and the frustration paid off for the nascent AI agent because it managed to open an account and upload the malware which was later even downloaded by 15 entities. Anthropic later reached out and notified the victims about the incident.

Via TechCrunch

• FinCEN warns US banks of industrial‑scale scam centers in Southeast Asia stealing billions
• Victims coerced into crypto “investments,” later re‑scammed with fake recovery fees
• Laundered via digital assets, mixers, shell firms, and Chinese underground banking networks

American financial institutions need to be more vigilant when it comes to identifying and preventing money scams, especially those perpetrated by industrial-scale scam centers in Southeast Asia.

This was the warning issued by the US Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) alongside a long list of red flags these institutions can monitor in order to stay safe.

Large, dangerous crime rings

The scams are not done by small groups of teenagers, tricking the elderly from the depths of their parents’ basement, but are often large, well-organized crime machines responsible for billions of dollars in damages, around the world, every year.

In 2025 alone, US victims lost more than $7.2 billion to these scams, the warning said, and between September 2023 and December 2025, nearly $13 billion was stolen from Americans.

The criminal organizations are primarily located in Cambodia, Burma, and Laos. They trafficked hundreds of thousands of people to various centers around the countries, taking their passports and forcing them into participating in online fraud. Those that don’t meet certain quotas are often beaten - and some victims were liberated after their families paid ransom demands, while others ended up being coerced into commercial sex work.

To make matters worse, they are resilient to law enforcement activities because some of them are either endorsed, or outright operated by, local corrupt officials.

FinCEN says the criminals are engaged in all sorts of fraudulent activity, but stressed that investment fraud is, by far, the most popular one. The scammers would reach out to their victim either pretending to be a romantic interest, or a financial advisor. Sometimes, they would even begin the conversation by saying they mistyped a phone number.

After extensively communicating with their victim for a while, they try to persuade them into making an “investment”, often using cryptocurrencies, and promising unrealistically high returns. This is also, FinCEN stresses, is when the scams can most easily be identified:

“Most digital asset payments by victims to scam center operators originate from money services businesses (MSBs) offering digital asset services, includingdigital asset kiosks, according to FinCEN analysis and law enforcement information. Based on FinCEN’s analysis of BSA reporting, scammers often instruct their victims to open accounts withMSBs offeringdigital asset services to purchase specific types of digital assets. Then, the victim is told to send these funds toa digital asset address controlled by the scammers.”

But defrauding victims out of their hard-earned money is not where the scam ends. Instead, the criminals continue, this time abusing the emotional distress to cause even more harm. They pose as law enforcement, financial institutions, or even FinCEN itself, stating that they’re investigating (or that they have confiscated the stolen funds) and that the victims should pay a certain fee to have their funds returned to them.

In some cases, the fraudsters pose as investment advisors, telling the victims to take out their money, buy gold and silver bars, and hand them over to a courier for “safe keeping”.

The full list of red flags can be found on this link, and FinCEN stresses that the circumstances around each individual case should be carefully considered, since no single red flag is “determinative of illicit or other suspicious activity.”

The circumstances include a customer’s historical financial activity, whether the transactions are in line with prevailing business practices, and whether the customer exhibits multiple related red flags.

Laundering the proceeds

Stealing the money is only half of the work, though. It still needs to be laundered and reintroduced into the legitimate financial system, and to do that, scam center operators rely on professional money launderers and Chinese money laundering networks.

FinCEN describes a three-stage process, in which the criminals first extract payments in digital assets using bank accounts, money mules, shell companies, or fraudulent money services businesses.

Next, during on-chain laundering, they obfuscate the origins of the stolen money by rapidly moving it across addresses, using mixers, and swapping tokens across blockchains. The last step is to integrate the funds into the traditional financial system via money mules, stablecoin transfers to offshore exchanges, and Chinese underground banking networks.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1691) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1691) — hint #2 — repeated letters

Quordle today (game #1691) — hint #3 — uncommon letters

Quordle today (game #1691) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1691) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1691) — the answers

The answers to today's Quordle, game #1691, are…

• PLUSH
• PAINT
• RIVAL
• AFOUL

I made a ridiculous mistake today guessing “pinta” instead of PAINT.

Quite why I did this I will never know, especially as I had strategically not jumped in and entered “flush” in case, as came to be, the correct word was PLUSH.

Daily Sequence today (game #1691) — the answers

The answers to today's Quordle Daily Sequence, game #1691, are…

• GRADE
• JOLLY
• PESTO
• SMELL

Quordle answers: The past 20

• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER
• Quordle #1678, Saturday, 29 August: OVINE, ALLOY, VOICE, CARVE
• Quordle #1677, Friday, 28 August: WAIST, EDICT, BONUS, DEUCE
• Quordle #1676, Thursday, 27 August: SHEEN, TRICE, WAGON, BEVEL
• Quordle #1675, Wednesday, 26 August: OPIUM, EPOCH, BESET, FINER
• Quordle #1674, Tuesday, 25 August: BLESS, FELON, PORCH, CHOSE
• Quordle #1673, Monday, 24 August: MAJOR, VERGE, CRUSH, SCOFF
• Quordle #1672, Sunday, 23 August: CHASM, BLAME, PARER, BYLAW
• Quordle #1671, Saturday, 22 August: SPOUT, BRAID, FLASH, GUSTY

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #922) - hint #1 - today's theme

NYT Strands today (game #922) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• BRAID
• WATER
• DATE
• THOSE
• COAT
• POKER

NYT Strands today (game #922) - hint #3 - spangram letters

NYT Strands today (game #922) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #922) - the answers

The answers to today's Strands, game #922, are…

• BRIDGE
• BARGE
• SHIP
• DOCK
• PIER
• LIGHTHOUSE
• SPANGRAM: ONTHEWATERFRONT

• My rating: Easy
• My score: Perfect

Today’s theme immediately made me think of one of my favorite early REM songs, Harborcoat. Firing up Spotify, I set myself the challenge of seeing how many words I could spot before the end of the song, which was 3 minutes 57 seconds.

The results were four game words, three non-game words and just about the spangram — although I did attempt ONTHEWATER before seeing the full-length ONTHEWATERFONT.

After this blast of searching I slowed down and managed to find the remainder without too much of a struggle — although LIGHTHOUSE took me a while to connect.

Yesterday's NYT Strands answers (Thursday, September 10, game #921)

• CROWN
• MEDAL
• PRIZE
• TROPHY
• LAURELS
• PENNANT
• SPANGRAM: WEHAVEAWINNER

• Zimperium uncovers Mantax Otax, Android malware merging infostealer, RAT, backdoor, and ransomware
• Distributed via APKs on third‑party stores, social media, and phishing; older Android versions most at risk
• Steals extensive data, enables remote monitoring, then encrypts files with AES and demands ransom

When threat actors target people’s devices, they usually infect it with one of many malware strains: an infostealer, a remote access trojan, a backdoor, or a ransomware encryptor.

Rarely do we see all of these functionalities merged into a single entity, and even rarer - to have it target Android mobile devices - yet, security researchers Zimperium discovered just that.

Mantax Otax

The security outfit published an in-depth report on Mantax Otax, a unique strain of malware circulating in the wild. It is apparently developed by an Indonesian threat actor, targeting victims in the country, but we don’t know exactly how many people are infected, or if this campaign is aimed primarily at business users, or individuals in general.

The malware is being distributed as a standalone APK, meaning it can be found on third-party app stores, Telegram channels, forums, and across social media. There are no traces of Mantax Otax on any of the official app repositories, including the Google Play Store, or Samsung’s Galaxy Store. Zimperium also speculates that it is likely being distributed via phishing emails.

Mantax Otax primarily targets users sporting older Android phones. Versions 9 and older are most at risk, since on these devices the attackers can make use of all of the malware’s features. Android 10 and newer models do get some protection:

“Conversely, on modern devices running Android 10 and above, the malware’s efficacy is severely hindered by native OS defenses, specifically Scoped Storage restrictions,” the researchers explained. “Due to these sandboxing rules, the ransomware is constrained to scanning only the application's localized external files directory, which drastically mitigates the blast radius and reduces the volume of accessible user files.”

Newer devices, as well as users of Zimperium’s Mobile Threat Defense (MTD) and Runtime Application Protection (zDefend) are said to be protected on a software level.

Another important caveat is the permissions. As is usual on Android devices, most malware won’t work unless the user grants an extensive set of permissions beforehand. In this case, Mantax Otax first asks for admin privileges, after which it grants itself an extensive list of capabilities, from accessing SMS messages, to contacts, audio, and images.

It then requests accessibility permissions, fully taking over the compromised device.

Malicious capabilities

Mantax Otax is said to be quite capable. It steals browser history, contacts, call logs, SMS messages, notifications, files, gallery media, Google account information, device specifications, location data, and application inventories. It can also pull WhatsApp information such as messages and profiles, and on Telegram it can also pull lock-screen PINs.

Infostealing features aside, it also serves as a remote monitoring tool, grabbing screenshots, recording the screen, or livestreaming it directly to the attackers. It can take photos using both the front and rear cameras, although Zimperium did not mention any microphone-recording capabilities.

Finally, once all of the data has been harvested, it encrypts user files with AES, deletes the originals, and appends a .enc extension. Victims are then shown a chat interface where they can communicate with the attackers directly and negotiate a ransom payment in exchange for getting their device back.

The tool seems to be in continuous development. Zimperium found two separate versions, one being an “evolution” of the other: “Notably, it has modified its network traffic behavior to utilize WebSockets and introduced a set of new commands,” the researchers said.

There is a reason why ransomware operators prefer targeting businesses instead of individuals. Although the latter has not disappeared entirely from the victim list, businesses stand to lose a lot more from disrupted operations and, as such, are targeted more frequently. Unfortunately, we don’t know what kind of app Mantax Otax is spoofing, therefore it is difficult to assess who the targets are.

• Microsoft has rolled out a Windows 11 preview update to fix multiple Bluetooth bugs
• There are nine individual fixes listed in the patch notes, one of which addresses connection and disconnection speed issues
• More Bluetooth improvements should arrive as Microsoft works to improve Windows 11's driver quality

Bluetooth on Windows 11 is finally getting the attention it needs, after years of major connection and user interface bugs.

As reported by Windows Latest, Microsoft is rolling out major Bluetooth fixes for Windows 11, starting with update 26200.9359 for testers via its preview channel. Windows Latest notes that this includes nine notable fixes, particularly to iron out connectivity bugs.

One fix is designed to "correctly reflect" when a Bluetooth device is connected or disconnected — one of the biggest issues I've noticed is that disconnecting a device (a very slow process) effectively prevents you from connecting to another right away, and when you try, Bluetooth completely malfunctions — so it's promising to see it tackled.

Audio calls have also been addressed in the preview update, with a new Windows volume popup, which appears when adjusting the volume of a "Bluetooth Classic Audio" accessory. Microsoft also claims that "reliability and performance" with LE (Low Energy) Audio accessories have been improved.

The common stuttering and random device disconnections have been reduced, which should go a long way in improving game controller stability on the likes of the PlayStation DualSense wireless controller.

Of course, all Bluetooth bugs can't be fixed in a single update, but as Windows Latest notes, Microsoft previously stated that Windows 11's driver quality would receive improvements in the long run, which should ultimately make Bluetooth and other Windows functions more reliable.

However, I am pessimistic that these long-running Bluetooth issues are actually being eliminated. This isn't the first time Microsoft has rolled out a patch that addresses issues with Bluetooth functionality, and the same bugs have persisted through multiple Windows 11 updates.

Aspects such as failing connectivity with devices and other system-breaking bugs make Windows 11 a frustrating operating system to use, especially for gamers, notably when SteamOS and Bazzite (a SteamOS clone) aren't as buggy despite some compatibility problems.

The good thing is Microsoft isn't ignoring the issues that plague Windows 11, and if it can continue to work towards patching out the persistent bugs, it'll ease the frustrations among multiple Windows 11 users.

• 153 million US driving licences have been leaked on a Russian cybercrime platform
• Among those apaprently discovered in the stolen data is US Secretary of Defense Pete Hegseth
• The FBI is now investigating the leak, which has been traced to an identity verification company

A data leak of 153 million US drivers licenses is said to have been shared on a Russian cybercrime forum, with US Secretary of Defense Pete Hegseth among those leaked prompting an FBI investigation.

Security researcher Brian Krebs identified the leak – which included his own data – as originating from a hack of an identity verification service. Louisiana-based IDScan provided ID verification for various well-known companies, including FedEx and Hertz car hire.

The data was shared on a Russian forum called Exploit, a long-established online community of cybercriminals. Following news of the leak, the identity theft service “Nexus” has apparently scrubbed its existence from the Dark Web.

Driving licenses and more

It wasn’t just US driving licenses that were found in the archive of recently-collected personal data. Krebs’ investigation found that Nexus claimed other types of data, and found a further 1.1 million driving licenses from Canada.

Other identity documentation alleged to be in the leak include 10 million identification cards, three million travel documents and international IDs, and 579,000 medical cards. The data was available to browse, notes Krebs, with Nexus providing details: “Records are available to preview before purchase with pertinent information redacted. Customer photos are displayed if available.”

The leak has a personal dimension for Krebs. Not only was his driving license in the collection, so was that of his mother. It has proved to be a useful coincidence, one that has enabled the security and privacy researcher to establish how the data was sourced by Nexus.

Both licenses were used for a car hire, which Krebs traced to Hertz. Others affected by the leak had also used the service, which has used New Orleans-based IDscan for identity verification.

The company, which claims to perform 21 million verifications a month, is yet to issue a statement on the matter. Its marketing and operations leader, Jillian Kossman, told the journalist: “At this point I’m not able to share any additional information, but the updates you have provided have been welcome, and helpful to our team’s investigation.”

Where is the data?

Krebs reports that he was alerted to the data on August 31, 2026, little over a week ago. Regular checking noted that the data was still being added to, increasing by “nearly 400,000” records prior to publishing his investigation on September 1.

Since then, however, it seems that Nexus has vanished, along with the data. But how widely was the data downloaded before that happened? While the FBI investigates, it falls on the American and Canadian public to be extra vigilant and wary of identity fraud.

• Huntress warns fake GTA 6 ISOs spreading malware ahead of official Nov 19, 2026 release
• Packages deliver RATs, infostealers, and Chaos ransomware disguised as game installers
• Users urged to avoid pirated downloads; infected systems should be reimaged and credentials reset

Grand Theft Auto 6 (GTA 6), one of the most anticipated computer games of all time, is due to launch on November 19, 2026 - so everything found online before that is almost certainly malware.

This is the warning sent out by security researchers Huntress, which said it recently saw one variant deploying all sorts of filth, from remote access trojans (RAT), across infostealers, to full-blown ransomware encryptors.

The story behind GTA 6

GTA 6 is a third-person action-adventure and open-world gam developed by Rockstar Games, which egan preliminary work more than a decade ago, and has allegedly spent more than a billion dollars during that decade and a half, which would make it, by far, the most expensive game ever developed.

It is also a sequel to GTA 5, a game that was sold in more than 230 million copies around the world, which made it one of the most popular games of all time.

In late August 2026, someone going by the alias LEEK claimed to have obtained a working, playable build of the game, roughly six months before the official release. They posted numerous screenshots and videos of them playing the game, even writing their nickname onto a wall, using a rifle to prove the authenticity. Truth be told, even without this, people would have still probably searched for, and downloaded, fake installers. This only made the problem worse.

And a major problem, it definitely is. Huntress is now saying it is seeing websites ranking relatively high (through SEO poisoning), offering for download an ISO of the game. Similar ISOs are circulating around different gaming forums, torrenting sites, and social media channels.

An ISO file is a digital copy of an entire disc, such as a CD, DVD, or Blu-ray, stored as one file. Users can download an ISO (which can weigh tens or hundreds of gigabytes), mount it into a virtual drive, and the computer will treat it like a physical disc.

Huntress found some ISOs weighing more than 100GB which was done just to make it seem authentic - the actual malware was “a factor smaller”. The ISOs they analyzed contained multiple variants, including NJRAT and CDRAT (two remote access trojans), Mercurial Grabber (an infostealer grabbing Roblox Studio cookies, Minecraft session data, Discord tokens, Chrome passwords and cookies, system information, IP addresses, and geolocation, Windows product keys, and screenshots), and Chaos Ransomware. The package also contained a legitimate, regular browser - “Just for kicks,” apparently.

A plausible failure

During the “game” installation, the installer displays a message in Russian, saying the product is unlicensed and that there is a good chance it won’t run. If that happens, the user is told to reach out to a specific Gmail address to receive an “updated crack”. After the installation completes, the victim will get that exact popup, saying “License not found”. All of this is just a smoke screen, to make the victim not suspicious as to why the “game” won’t run.

There is no way of telling how many people fell for the ruse and installed malware on their devices. Huntress says that generally speaking, trying to download cracked and pirated software is a bad idea, which is even worse if the game in question has not yet been released.

“This is fertile ground for scams and threat actors attempting to take advantage of the impatient and overeager,” the researchers said.

The good news is that all of the malware being distributed there is not new. Some of the variants contained in the ISOs are several years old, meaning most antivirus programs, such as Windows Defender for example, can easily detect it and stop it from compromising the system.

Those that do end up infected should disconnect the machine from the internet, reset all passwords, enable 2FA wherever possible, and do a complete reimage of the compromised system.

• Proofpoint detailed BlueMoon, an exploit kit chaining two Chromium flaws and one Windows bug
• Four groups, including China‑aligned TA412, used it loudly against NGOs, aerospace, and manufacturing targets
• Exploits were “patch‑gap” zero‑days; all flaws now patched

Four hacking groups, including some tied to the Chinese government, were seen using the exact same exploit kit in a span of a week, suggesting a certain “fear of missing out” among the criminals, experts have warned.

Security researchers Proofpoint have detailed BlueMoon, an exploit kit that leverages three vulnerabilities: two in Chromium, and one in older versions of Windows: Windows 10 (October 2018 Update), Windows Server 2019, Windows 10 2004, WIndows Server 2022, and the initial release of Windows 11.

The kit was first seen being used on August 28 2026, by a threat actor tracked as TA412, a China-aligned state-sponsored threat actor that was observed in the past targeting businesses using Microsoft SharePoint. TA412, also known as Violet Typhoon, used BlueMoon to “repeatedly target a small number of non-governmental organizations (NGOs), mining companies, and physical commodity trading firms in the United States.”

Soon after that, three others were spotted: UNK_LateNight, another China-aligned espionage group which targeted multiple US aerospace companies, UNK_DoubleCheck, a group going after a Vietnamese manufacturing entity, and UNK_QuietRacket, a threat actor taking aim at organizations across Singapore and Indonesia.

What all of these groups have in common is the fact that they did not try particularly hard to hide their activity. This is rather unusual, since a stealthy approach usually guarantees that a vulnerability can be exploited for longer.

Front running the Chromium supply chain train

BlueMoon takes advantage of three flaws, two in Chromium and one in older Windows variants. The Chromium vulnerabilities were found in V8, the JavaScript engine that the browsers use to allow applications to run efficiently. The first one is a “type confusion bug”, tracked as CVE-2026-85046, and assigned a severity score of 8.8/10 (high). The latter is a “sandbox escape” flaw, for which Google did not assign a CVE or a severity score.

The Windows bug, on the other hand, is tracked as CVE-2026-85880, and was given a severity score of 7.8/10 (high). It is described as a “heap-based buffer overflow” vulnerability in Windows Advanced Local Procedure Call, allowing malicious actors who can already execute code inside a low-privilege AppContainer to escape the sandbox and elevate privileges to SYSTEM. No additional user interaction is required.

Proofpoint has a theory as to why the crooks decided to be loud, instead of flying under the radar. Apparently, there is a very short window of opportunity between Google patching a Chromium vulnerability, and it being deployed to a browser such as Edge, or Brave, This window of opportunity also allows crooks to see how Google fixed a flaw, reverse-engineer it, and deploy an exploit before the browser is patched. This would mean that there is no time to be stealthy.

No time to hide

“Both V8 vulnerabilities were ‘patch-gap’ zero-days at the time of the observed activity,” Proofpoint said. “In other words, while they were known vulnerabilities already fixed in public upstream Chromium source code, they remained unpatched in the latest stable releases of Chrome and Chromium-based browsers available to the public. It is likely that the exploit kit developer used these publicly available Chromium patches to weaponize the browser exploit chain.”

Another important factor is Artificial Intelligence. It would seem that AI has made flaw detection significantly faster, reducing the barrier to entry and making threat actors move more loudly.

“A fully weaponized Chrome exploit chain has historically been a high-value, rare capability. BlueMoon was developed, deployed rapidly, and shared across multiple threat actors within days in a manner that had high detection signals. This may reflect a reduced cost and barrier to entry for this class of capability, as AI agents increasingly enable threat actor exploit development,” Proofpoint stressed.

All three flaws have since been patched, so make sure you’re running the latest version of both the OS and the Chromium browser.

Via Ars Technica

• Huntress warns of phishing campaign abusing Adobe branding with browser‑in‑the‑browser trick
• Victims lured into fake update pages, unknowingly installing rogue ScreenConnect clients
• Attackers gain persistent remote access; defenders urged to restrict RMM installs and monitor IoCs

Security researchers Huntress have warned of an ongoing phishing campaign that abuses Adobe’s brand while deploying clever browser-in-the-browser (BitB) techniques to trick the victims.

The goal is to deliver rogue ScreenConnect clients which would grant the attackers persistent access to target devices.

In its report, Huntress says it could not find the lure itself and thus could not report what the scam looks like. However, it saw the victims clicking on a link in the email and then being redirected to a typosquatted domain https[://]adoube[.]vu that spoofs an Adobe landing page.

We heard you like browsers…

This is where we get to the scam’s unique twist. Usually, phishing lures would simply redirect victims to a malicious website which could be identified simply by looking at the address bar. If the domain differs from the legitimate one, the scam falls apart. To work around that problem, scammers came with a solution called “browser in the browser”.

Using either HTML, CSS, or JavaScript, the crooks would create an entire fake browser window, including the address bar, URL, padlock icon, and more, inside the actual webpage content itself. Therefore, if the victim isn’t all too careful, they might look at the fake address bar, see a legitimate URL, and believe they are visiting the correct website.

In this fake browser window, the fraudsters display a blurred .PDF document. Overlaid is a message saying the documents are “secured” and created with “the latest version of Adobe.” The only way to read them, the message continues, is to “update or download Adobe PDF Reader.” Expectedly, there is a big “View Files” button just under the notification, leading to a different, equally fake BitB page, showing the download progress. In the background, something gets downloaded.

Victims might think they’re getting a PDF reader, while in reality they’re getting a rogue version of ScreenConnect.

Poisoned ScreenConnect instances

On its own, ScreenConnect is not malware, or dangerous in any other way. It is a legitimate remote access and support software, similar to TeamViewer, AnyDesk, or Remote Desktop, allowing IT professionals remotely connect to and control computers and other devices. These variants, however, are tainted to enable threat actors to obtain persistent remote access to their targets’ endpoints, Huntress explained.

“The first initial remote client installed was the rogue ScreenConnect Client configured to communicate with instance-uxh86b-relay[.]screenconnect[.]com. The attacker used a legitimate ScreenConnect Trial Relay domain to further avoid detection,” the researchers said. “This initial malicious ScreenConnect Client used the native Windows command shell and curl to retrieve and install a second malicious ScreenConnect Client configured to communicate with attacker-controlled IP. Both clients established service-based persistence for continued remote access.”

After installation, the attackers used the second ScreenConnect session to run HideCursor.exe, an executable, as the name suggests, that helps the attackers hide their mouse activity.

Huntress’ researchers don’t know what the endgame is, since the threat actors were spotted and shut down in this stage of the attack. The researchers also did not share the details about the target, such as the size of the organization, or the industry it operates in. Therefore, it is impossible to even speculate on the nature of the attack and if the threat actors aimed to install ransomware.

Still, the researchers stressed the importance of training employees to “treat unexpected software update prompts and file-viewing pages with caution”, and to make sure they know how to verify downloads through trusted channels. IT teams should also restrict who can install remote-management tools, maintain an approved inventory of RMM software, and alert on new or unapproved ScreenConnect clients, unusual relay connections, and executables launched from the user Downloads folders.

Finally, businesses should monitor for Indicators of Compromise (IoC) listed on this page.

Amongst all the hype over Apple’s first-ever foldable smartphone, the iPhone Duo, which was announced at the company’s ‘Surprise and Shine’ event, Apple (rather quietly) also revealed when Mac users can get the latest version of its desktop operating system, macOS 27 Golden Gate: September 14.

While pretty much all of the attention was focused on the foldable, the launch of macOS 27 is noteworthy for anyone with a modern Mac or MacBook, as this free upgrade brings some tasty new features, while also addressing some of the less popular changes that came with its predecessor, macOS 26 Tahoe.

If you have a compatible Mac, then you should be prompted to download and install macOS 27 Golden Gate once September 14 rolls around. However, if you have a Mac from before 2020 that doesn’t run on Apple Silicon (so any Intel-powered Macs), then you won’t be able to get the update.

For reference, here are all the Mac models that are compatible with macOS 27 Golden Gate:

• MacBook Air M1 or later
• MacBook Pro M1 or later
• MacBook Pro 13-inch M1 2020 or later
• MacBook Pro 14-inch M1 Pro 2021 or later
• MacBook Pro 16-inch M1 Pro 2021 or later
• MacBook Neo
• iMac M1 2020 or later
• Mac mini M1 2020 or later
• Mac Studio 2022 and later

Apple recently announced new M5 and M6-powered Mac mini and Mac Studio products, and they'll likely launch with macOS 27 preinstalled when they start shipping on September 22.

Fixing past mistakes

The main focus of macOS 27, as with Apple’s other operating updates such as iOS 27, and seemingly every piece of new software these days, is AI.

The upcoming macOS 27 upgrade paves the way for Siri AI integration – the long-awaited improvements to Apple’s virtual assistant that should make it more useful. When launched, Siri AI should be able to have two way conversations with you and execute multi-step tasks quickly and easily, which could make using your Mac a lot more convenient. It will be able to interact with apps such as Calendar to complete tasks such as creating events and reminders.

AI is also coming to macOS Spotlight to make finding things on your device better, and Visual Intelligence can be brought up to get information about what’s on your screen. Other AI features, such as Image Playground, are getting improvements as well.

If you’re not a fan of AI, then macOS 27 should still have plenty of reasons to download and install. One reason that will hopefully please a lot of people is that macOS 27 Golden Gate makes tweaks to some of macOS 26 Tahoe’s most controversial changes, especially when it comes to the polarizing Liquid Glass interface. The new macOS will allow you to adjust transparency effects to make using your device more comfortable, and during the beta testing process, it was one of the things our contributor Alex Blake was particularly thankful for. I’m sure he’s not the only one.

When Apple announced macOS 27 at WWDC 2026 earlier this year, it promised lots of performance improvements, especially when it comes to how responsive the operating system feels. This alone should make macOS 27 worth installing on September 14.

If you have an older Mac and feeling left out, make sure you check out our guide on the best Macs and MacBooks, which can help you find a new macOS 27-ready Mac that suits your needs and budget.

Asus Zenbook 14 (2026): Two-minute review

The new Asus Zenbook 14 is designed to be an ultra portable device with a mid-range price that doesn’t compromise on performance.

True to other models in the line, the finish of the Zenbook 14 is different to the usual fare at this kind of price point, with its soft texture and uncommon colorways that are far more vibrant than many.

More impressive, though, is the Zenbook 14’s build, which blends strength and lightness in a way very few can match. Compared to other 14-inch laptops, this has to be one of the best laptop constructions around in terms of portability.

However, it’s not quite as thin as you might expect, and the thick feet underneath only add to the bulk. What’s more, although most of the unit is remarkably sturdy, the keyboard has a tendency to flex while typing on it, which is a little disconcerting.

As you might expect for a laptop this portable, the Zenbook 14 isn’t loaded with interfaces, but those included are wisely chosen. You get one USB-A and two USB-C ports — the latter of which support power delivery and display signals — as well as an HDMI output and a headset jack.

The Zenbook 14 performs competently at everyday tasks. It can handle basic productivity and browsing, as well as 4K streaming. It struggles with even light gaming, but that isn’t too surprising given its lack of a dedicated GPU.

Fortunately, the Zenbook 14 remains composed even when undertaking heavy workloads. The fans are audible in such circumstances, but they’re certainly more hushed than many other examples. Temperatures also remain impressively cool, with only a few hotspots appearing — and mercifully these steer clear of commonly touchable surfaces.

The 1920 x 1200p resolution is sharp enough for its 14-inch real estate, while the OLED technology provides the vividness and contrast you’d expect. Reflections are visible at times, but the maximum brightness level should keep them from disrupting your viewing experience too much.

One of the main drawbacks of the Zenbook 14, though, is its battery life. It lasted just over 12 hours when I played a movie on a loop, which is short compared to many of its competitors. In fact, the Zenbook A14, a similar machine to the 14 in many ways, more than doubled this time when I ran the same test.

What’s more, the A14 is similarly priced to the 14, so all things considered it offers the better value. The 14 is the better the choice if you want a slightly more solid body, but in all other regards, the A14 would be the better choice.

Asus Zenbook 14 (2026) review: Price & availability

• Starts from £799.99 (about $1,080 / AU$1,500)
• Preorders open now (ships September)
• Some rivals offer better value

The Zenbook 14 starts from £799.99 (about $1,080 / AU$1,500) and is available to preorder now, with shipments expected early to late September. Availability in the US and Australia is yet to be confirmed, but we'll update this section once it has.

The base model gets a Qualcomm Snapdragon X1 CPU, 16GB of RAM, and a 50Wh battery. More powerful AMD Ryzen AI 7 and Intel Core Ultra 9 models, both with 70Wh batteries, can also be preordered for £1,399.99 and £1,499.99 respectively. These two also get backlit keyboards, but the Snapdragon model doesn’t. Each model has three colorways to choose from: Zabriskie Beige, Arctic Blue, and Komodo Coral.

This is a reasonable price considering its spec. However, the already available Asus Zenbook A14 is slightly cheaper, yet has superior battery life and a marginally lighter build. Then there’s the HP OmniBook 7, which we’ve seen in recent sales with a similar price, and is a fantastic all-rounder that’s hard to beat at this point in the market.

Asus Zenbook 14 (2026) review: Specs

Asus Zenbook 14 (2026) review: Design

• Light and strong body
• Unique finish
• Reasonable port selection

The unique Ceraluminum body certainly sets the Zenbook 14 apart, as do the bright colorways. The beige finish of my review unit was more interesting than the usual monochromatic shades we’ve grown accustomed to, looking softer and more inviting as a result. This was further aided by the rounded corners and the odd texture of the material, which has a slight graininess that’s comfortable in the hand.

One of the major selling points of the Zenbook 14’s construction is its lightness. It weighs around 2.5 pounds (just over a kilogram), which is impressive for a 14-inch laptop. However, it’s not quite as thin as you might expect, with a bit more unexpected bulk at the rear. The two long bars that run underneath, acting as feet, don’t help matters, either.

However, some may view this a worthy sacrifice for the unit’s surprising solidity. Both the base and the lid have very little flex to them. It feels slightly sturdier than the A14 I reviewed previously, although that model is slightly lighter at 2.16 lbs / 0.98kg.

There is, though, one weak point to the Zenbook 14’s build, and unfortunately that’s the keyboard. Hammering away on the keys often depresses the whole board, which can be quite annoying and doesn't inspire much confidence. There’s also no backlighting, which is an omission I always lament.

On the plus side, there are a reasonable number of ports on the Zenbook 14. There’s one USB-A port on the right-hand side of the unit, which is the only port on this side. On the left, you’ll find two USB-C ports (both of which support external display signals and power delivery), an HDMI port, and a headset jack.

Asus Zenbook 14 (2026) review: Performance

• Fast everyday performance
• Vivid but reflective display
• Good for typing

For everyday tasking, the Zenbook 14 is a solid performer. The Snapdragon X1 chip in my review unit was fast and smooth when conducting basic productivity workloads such as word processing. It also handled multi-tab browsing and 4K streaming with plenty of composure as well.

Sadly, but somewhat expectedly, the Zenbook 14 isn't ideal for a spot of light gaming. It struggled to run Cyberpunk 2077 even on the lowest preset, blighted by rough visuals and debilitating slow downs during chaotic scenes. The A14 I tested previously, equipped with a Snapdragon X2 Elite chip, was able to handle low presets better, although it still wasn’t a flawlessly smooth experience.

Some fan noise is evident when the Zenbook 14 is under stress, but this isn’t too distracting. For such a compact laptop, the Zenbook 14 also does well to keep temperatures from soaring. I only noticed portions above the keyboard and underneath getting hot, while the commonly touchable surfaces, such as the keyboard, only became lukewarm at most.

The 1200p OLED display is crisp and sharp, with plenty of contrast and vividness. It can show reflections a little too readily, especially when deep blacks are displayed. Mostly, though, the high brightness levels do well to keep reflections at bay.

Despite that aforementioned flexing of the keyboard, the Zenbook 14 is still good for typing. It may feel a little harsh due to the lack of dampening, but the keycaps are comfortable and well spaced, while their low profile and short travel make them feel snappy and easy to glide over.

Complementing the keyboard is the super smooth touchpad that allows for easy swipes and gesturing. It’s not very large, but it maximizes its real estate commendably by extending from almost the bottom edge of the unit to the bottom of the space bar, which makes navigation less of a chore than it otherwise would be.

Asus Zenbook 14 (2026) review: Battery life

• Middling longevity compared to rivals
• Zenbook A14 massively outlasts it
• Quick to charge

The battery life of the Zenbook 14 isn’t particularly impressive. When I played a movie on a continuous loop unplugged, its 50Wh battery lasted 12 hours and 15 minutes. While this is quite long, it falls short of quite a few of its rivals.

For context, the A14 has a 70Wh battery, and the difference shows, as that laptop lasted over 28 hours in the same test, one of the best results we’ve seen. And if you’re looking for another enduring 14-inch laptop, the HP OmniBook 7 posted a time of 26 hours. Fortunately, the Zenbook 14 is at least quick to charge, just around two hours to fully top up.

Should I buy the Asus Zenbook 14 (2026)?

Scorecard

Buy it if…

Don't buy it if…

Asus Zenbook 14 (2026) review: Also consider

How I tested the Asus Zenbook 14 (2026)

• Tested for a few days
• Used for a variety of tasks and benchmarks
• Extensive laptop reviewing experience

I tested the Zenbook 14 for a few days, during which time I used it for all manner of tasks, from basic productivity and general browsing to 4K streaming and gaming.

I also ran our series of benchmark tests for laptops, designed to assess every aspect of performance. I ran a movie on a loop to test the battery life, too.

I’ve been using laptops for decades, and have reviewed a large number of them, ranging from small budget offerings to large gaming monsters.

• First reviewed: September 2026
• Read more about how we test

• A new report from KB Securities gets very gloomy about the RAM crisis
• We're told the "memory chip market is heading toward a severe supply shortage" in 2027
• AI demand has ramped up massively with infrastructure investments up 60% year-on-year to $1.3 trillion, creating even more demand for memory as fuel for that rise

If you thought the RAM crisis was going to get worse next year, you're very probably right — but apparently we might suffer an even more severe shortage than some analysts already expect.

Wccftech flagged up an article from Business Korea (translated from Korean), which suggests that the RAM squeeze is tightening its grip on two of the biggest memory chip makers.

Citing a report from KB Securities, the rumor is that Samsung and SK Hynix are now down to fewer than 10 days of memory inventory, which is very close to running dry.

This has caused concerns that available memory supplies could dwindle and be depleted in 2027, with analysts believing that the "memory chip market is heading toward a severe supply shortage" (again, bear in mind this is a translation, but the message is clear enough).

KB Securities notes that the AI boom is what's causing this, as memory chip manufacturers struggle to meet demand for HBM4 memory in AI data centers. Infrastructure investments for AI development have been revised upwards to $1.3 trillion for 2027, we're told, which is a 60% year-on-year increase.

Kim Dong-won, head of research at KB Securities, told Business Korea that: "AI servers will absorb demand for not only HBM but also server DDR5 and enterprise SSDs, potentially leading to a historic shortage."

There's a brighter spot of news from laptop maker Framework though, which, as VideoCardz reports, has taken an unusual step in reducing the price of some of its products. As you may recall, Framework has been hiking laptop prices due to the increased cost of RAM (as have other notebook manufacturers), but the company just announced that it has secured some fresh memory modules at a lower price.

This means that some of its current Framework Laptop orders will be knocked down in price, and the company said on X that it's "retroactively reducing prices for orders that shipped at higher price" too.

Analysis: there's a historic level of gloom, that much is certain

It's impressive to see Framework acting in the best interests of its customers, particularly seeing as the firm could have (theoretically) kept quiet about bagging a batch of cheaper memory chips, and just kept the difference itself.

While that's commendable, it's a pretty small (but still welcome) bone we're being thrown in the face of the bad news for the RAM crisis here. Talk of a "historic shortage" is worrying, and it feels like this is an escalation of the recent chatter about global memory supply woes which has already turned highly negative.

While this latest report talks about server DDR5 RAM (and HBM), this will obviously have a bearing on consumer products, too. Those less profitable memory sticks are going to end up sidelined even further.

With rumors about GPU price hikes again coming to the fore this week, it's difficult to catch a breath between the bouts of bad news. We can hope that the pessimism is overblown here, but I can't shake the feeling that this seems unlikely.

• Calif researchers found a zero‑click WeChat VoIP flaw enabling account takeover via calls
• “WeWorm” spreads through ringing calls; victims need not answer to be compromised
• Tencent patched in Android 8.0.77 and iOS 8.0.76; no exploitation seen in the wild

Security researchers have found a flaw in WeChat which allows malicious actors to take over people’s accounts on both Android and iOS devices - but what makes this flaw stand out is the fact that it’s a zero-click bug - victims need not do a thing to be compromised.

WeChat is a “super-app”, allegedly used by roughly 1.4 billion people, and is especially popular in China. It started as a communications app, letting users send messages, and make voice and video calls, and has evolved to function as a social network, allowing users to share photos and videos, as well as a payment app through which users can transfer money, pay for things, order food, book taxis, and even access government and business services.

Security researchers from Calif have now disclosed finding a ‘memory corruption’ issue in WeChat's VoIP stack. For now, they decided not to share the technical details, and to instead demonstrate the flaw “at an upcoming conference.” To that end, they built a worm called WeWorm, capable of taking over target WeChat accounts and spread through phone calls made via the app.

A phone call would suffice

In practice, it works remarkably simple: an attacker uses WeChat to call a person they have in their contacts list (this is a prerequisite). They can use both an Android and an iOS device, and can call anyone, regardless of the model or the OS they’re using. As soon as the phone starts ringing, WeWorm gets to work, “worming” its way into the victim’s device.

The victim does not even need to answer the phone - having it ring is enough. If they answer, they’ll hear nothing but silence, yet the worm will continue operating. If they decline the call, the attack stops, but this is hardly a mitigation - the attacker can simply call again while the victim is asleep (or otherwise away from their device).

Within a few seconds, the attacker will have access to the victim’s WeChat account, including their messages, contacts list, and virtually anything else found in the app. What makes this bug particularly worrisome on the surface is the fact that WeChat can be used to transfer money and pay for things, but WeChat Pay has additional authentication and risk controls designed to prevent that from happening.

The good news is that there is no evidence of this flaw being exploited in the wild. The bad news is that this is not the first zero-click flaw found in modern-day smartphones, and most likely will not be the last one.

Tencent's response

Calif said it responsibly disclosed its findings to WeChat’s parent company Tencent, who came back with a patch. Versions 8.0.77 for Android and 8.0.76 for iOS have apparently solved the problem, although

Tencent did not list any details in its patch notes, simply saying the version brought “bug fixes”, but in a statement shared with The Hacker News, it said the exploit has been “mitigated for all users”, and that it was applied server-side - users need not install anything, aside from the patch.

It’s also worth mentioning that WeChat has apps for HarmonyOS, Windows, Mac, and Linux. However, it would appear that Calif did not test those, and Tencent did not include them in its patch. The researchers did say that they would be looking into this same flaw in other products, too:

“This specific WeChat bug is one instance of the many unconventional attack surfaces that are present across many messaging apps,” they said. “We're conducting more of this research across other apps and attack surfaces, while working with app developers on attack surface reduction. This may take an industry-wide effort, since some of it depends on the platform owners. Once that work is further along, we'll share our progress, including the technical details of this WeChat bug.”

After watching Apple's iPhone Duo launch I was struck by one detail — its support for the Apple Pencil, which makes it the first iPhone to support the device.

When Steve Jobs launched the iPhone in 2007 he famously posed the rhetorical question “Who wants a stylus?”. His argument was that you already have the best stylus you’d ever need with you at all times — your fingers.

Touchscreen displays have gone on to dominate smartphone and tablet design, and have proved far superior to the stylus as a way of navigating a software interface; but the humble stylus has always had its advocates, and it has never really gone away.

Some Samsung devices in particular can be used with a stylus — the S Pen. And, of course, Apple eventually capitulated and introduced the Apple Pencil for the iPad Pro, turning the tablet into a digital drawing pad for illustrators, artists and anyone who simply likes to sketch out ideas.

Perhaps I should clarify that Apple's first successful stylus was the Apple Pencil (2nd edition), rather than the original Apple Pencil. The original Apple Pencil had a terrible design that meant you had to remove a tiny, easily lost cap to charge it, and worse, the Pencil’s Lightning connector plugged directly into the iPad. That left the Pencil sticking precariously out of the tablet, so it was easy to knock, and seemingly designed to snap either the connector or the iPad’s port at some point. It also had no built-in way to attach securely to the iPad for storage.

In terms of Apple’s design failures, the original Apple Pencil is right up there with the Apple Magic Mouse, which has the charging port placement underneath, so it can’t be charged and used at the same time. Amazingly, that’s still the current design of the Magic Mouse, but Apple quickly did something about the Apple Pencil.

The Apple Pencil was fixed with the second-generation, which was released alongside a redesigned iPad Pro in 2018. Instead of plugging directly into the iPad’s Lightning port (such a bad idea) it attached magnetically to the iPad’s side, where it effortlessly paired, charged wirelessly and stayed stored. That eliminated both the precarious protruding connector and the removable cap.

Turning in his grave?

So would Steve Jobs really be turning in his grave right now to know that Apple’s new phone works with its stylus? I’m not so sure.

I went back and watched ​​the original iPhone keynote from 2007. Talking about styluses Jobs said, “Yuck! Who wants a stylus? You have to get ‘em, put ‘em away and you lose them. Nobody wants a stylus! [...] We’re going to use the best pointing device in the world. We’re going to use a pointing device that we’re all born with. We’re born with ten of them, we’re going to use our fingers. We’re going to touch this with our fingers.”

Looking back, we can forgive him some of the hyperbole about the stylus at the launch of the iPhone because he was introducing what, for many people watching, was previously unthinkable — a way of using a screen-based smartphone that relied on just your fingers, and he had a battle to win people over and a point to make. In the broadest sense, he was right — touchscreen displays have proved far superior to the stylus as a way of navigating an interface; but the stylus has never really gone away.

The iPhone Duo’s secret weapon

Of course, back in Apple’s history there was another device that had a stylus, the Apple Newton MessagePad. It launched in 1993, came with a plastic stylus for writing, tapping and using its much-mocked handwriting recognition software. Jobs killed off the Newton in 1998, shortly after his return to Apple.

Apple generally called the Newton’s stylus a pen, rather than giving it a standalone product name. So the Apple Pencil wasn’t Apple’s first stylus. It was the company’s return to pen input after Steve Jobs had famously ridiculed styluses when introducing the iPhone.

The Apple Pencil was introduced four years after Jobs’ death in 2015, but I think he would have approved. People genuinely seem to love the Apple Pencil, despite it still having some flaws (there’s no eraser on the other end, for example) and it could even be the secret weapon in Apple’s new iPhone Duo’s success.

The fact that you can use the Apple Pencil with the new iPhone Duo immediately locks Apple’s new foldable phone tightly into Apple's ecosystem of connected devices. The Apple Pencil is expensive, but a lot of iPhone Duo buyers will already own an Apple Pencil, because Apple households tend to have quite a number of Apple devices already in them. (It would be wise to check which version of the Apple Pencil you own though, since the Apple press release only says the "iPhone Duo will support Apple Pencil with USB-C).

And that’s what could make Apple Pencil support much more than another feature on the spec sheet. The iPhone Duo’s folding screen gives people a larger canvas, but the Pencil gives them a reason to use it — for drawing, handwriting, annotating documents and editing photos with precision. Jobs’s real objection was to a stylus you needed simply to operate a phone; on the iPhone Duo, your fingers would still handle that perfectly well, and the Pencil would step in when it was genuinely the better tool. Far from turning in his grave, I suspect Jobs might have appreciated the distinction.

• CISA, NSA, FBI warn Chinese AI firms of industrial‑scale knowledge distillation
• Companies like DeepSeek, Moonshot, Alibaba allegedly extracted billions of tokens from US frontier models
• Advisory urges detection of malicious prompts, deceptive responses to distillation, and cross‑provider intelligence sharing

Chinese AI companies’ core development strategy is to steal proprietary functionalities and capabilities from their US counterparts, law enforcement agencies have warned.

The US Cybersecurity and Infrastructure Security Agency (CISA) has published a new security advisory, drafted jointly with the National Security Agency (NSA) and the Federal Bureau of Investigation (FBI), warning American AI companies about an ongoing “aggressive, malicious, and targeted distillation activities at an industrial scale,” and sharing recommended mitigation steps.

Knowledge distillation

IBM defines knowledge distillation as a “machine learning technique that aims to transfer the learnings of a large pre-trained model, the ‘teacher model,’ to a smaller ‘student model’.” It is used in deep learning as a form of model compression and knowledge transfer, it added, particularly for massive deep neural networks.

So, knowledge distillation is not illegal or malicious, per se. Its goal is to train a more compact model to mimic a larger, more complex one. In the security advisory, the agencies stress it is “recognized as a legitimate and useful technique in AI research,” but add that China-based AI companies are using it in ill will.

In other words, the agencies claim that instead of spending months and millions developing new capabilities for their models, the Chinese are simply sending huge numbers of carefully designed questions to US models and extracting the answers.

Which companies are engaged in knowledge distillation?

Apparently, all companies worth anything. DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI all allegedly “extracted billions of tokens across millions of exchanges/requests from US frontier AI models, including variants of Claude, GPT, Gemini, and Grok, since at least late 2024.” CISA also stressed that this was likely done with the awareness of the Chinese government. It hasn’t outright said, “with its blessing”, although it could be read between the lines.

The advisory shares a thorough list of all the models that were being trained, as well as all the models being taken advantage of.

On the Chinese side, they include DeepSeek R1 and V3 models, Moonshot’s Kimi-K2 and Kimi-K3 models, and MiniMax’s M2 model. On the US side, they start with earlier models such as GPT-4, Claude 3.7, and Gemini 2.5 Flash Preview, all the way to Claude Fable 5, GPT-5, and similar.

When done in good faith, knowledge distillation is not illegal. However, the report says the companies routed the requests through multiple accounts, different API access points, multiple cloud providers, third-party AI aggregators, proxy services and “transfer stations”, as well as premium subscriptions shared between developers, all in an attempt to work around defenders trying to disrupt the process.

“This represents systematic extraction of proprietary functionalities and capabilities threatening U.S. technological leadership. Addressing industrial-scale distillation merits a coordinated response across the AI ecosystem, including effective information-sharing, spanning the U.S. Government, private industry, and allied nations,” the agencies concluded.

What US companies should be doing

To defend their intellectual property (and thus remain ahead of Chinese competing models) US AI companies should implement comprehensive detection and mitigation, the agencies said. That means hunting for anomalous and malicious prompts, accounts, networks, and behaviors. Furthermore, they should monitor subscription-to-usage ratios, immediate maximum usage from new accounts, and enterprise-scale throughput patterns.

The second step is to “deploy targeted response changes”: “Subtly alter responses for suspected malicious distillation attempts to attenuate the payoffs to companies conducting industrial-scale distillation campaigns.” In other words, AI companies should make sure their products lie when they spot they were being distilled for knowledge.

Finally, US AI firms should set up cross-organization intelligence sharing, correlating activity across model providers, cloud platforms, and API aggregators.

• Windows 11's latest update has arrived
• The September update brings in the ability to move the taskbar
• There are also new options for resizing the Start menu, and a really useful tweak for Windows 11's search function

Windows 11's latest update has arrived, and it packs some important new features for the interface of the desktop OS.

Bleeping Computer flagged all the additions in the September 2026 update for Windows 11, and there are three major highlights, which I'll pick out here, before providing a general roundup of some of the other tweaks that Microsoft has brought in this month.

As ever, some of these features are being rolled out in a phased manner, so even if you do install the September update today, you may still have to wait a while for certain pieces of functionality to make their way over to your PC.

1. A movable taskbar

Thanks to the September update you'll finally be able to move Windows 11's taskbar away from the bottom of the screen, to the top instead, or the sides if you prefer (an option that people with an ultra-wide monitor often want to use, as it suits that aspect ratio much better).

This is an ability which has always been in Windows 10, but was dropped for Windows 11 because porting it over was a thornier issue than you might think (or so Microsoft told us).

Finally, however, Microsoft has got its act together and the taskbar can now be repositioned in Windows 11 – although I've a feeling this will be one of the features on a slower rollout. Hopefully I'll be wrong on that score and you'll get this ability promptly if you've been keenly awaiting it for the last five years.

It's also worth noting that there's another option introduced here which can make the taskbar smaller, so it takes up less screen real-estate on devices with small displays.

2. The Start menu can now be resized

Want a more compact Start menu? Your wish is Microsoft's command, as this choice has now been introduced to the Settings app for the Start menu. You can elect to have a standard (large) menu, or a small one, rather than leaving it at the default 'automatic' setting whereby Windows 11 chooses the size itself based on your device. The problem with leaving the OS to decide is that sometimes you get the bigger menu on a laptop screen, where it pretty much eats the whole desktop – and so in these scenarios you can now manually choose the more compact Start menu.

With options to remove sections of the Start menu coming on top of this, you can now trim this part of the interface down so it's truly minimal. This choice will be more important than the movable taskbar for many folks – myself included – and it's great to see it now being rolled out.

3. Windows 11 search improvements

Another notable boon with the September update is that there are a few changes for Windows 11's core search functionality, and the most important is a new option that lets you turn off web results in search.

When you're searching for a file on your local drive, those web results often get in the way, so it'll be a relief for many to be able to switch them off. As well as web results (which open in Edge, with searches in Bing, of course), you can also turn off Microsoft Store suggestions. Essentially this is a general decluttering of Windows 11 search which is long overdue, frankly.

Other features in Windows 11's September Update

There's a performance boost for File Explorer in that the Home page now loads faster, and switching between virtual desktops in Windows 11 is now snappier, too.

Microsoft has made some reliability tweaks as well, including ensuring that the app history information in Task Manager is correct, and also that interacting with the Display panel within Settings is now more stable.

Furthermore, Microsoft informs us that there are some design tweaks here: "This update introduces updated progress indicators across Windows, providing a more consistent and modern experience during startup, sign-in, restart, shutdown, and update installation."

It's also worth noting that the weird mouse bug that affected the preview version of this September update (the optional update released at the end of August) has been resolved.

There's a fair bit happening here, and as one Redditor put it: "What's left for the 26H2 [update] then?"

Well, not a great deal in truth, and if you've been following along with Microsoft's annual updates, you may recall that 26H2 is going to be a very minor upgrade that doesn't do a lot. Indeed, some folks are wondering why Microsoft didn't save these juicy new interface features for 26H2, given that it's out next month.

The reason is likely to be because Microsoft wants to ensure that 26H2 runs as smoothly as possible (with no bigger changes involved). Although to be fair, as noted, due to the rollout process, a lot of folks won't be getting the new Start menu options and taskbar repositioning until October (or possibly later) anyway.

• Steam achievements of upcoming and unannounced games have leaked
• The achievements include spoilers for games like Control Resonant, Kingdom Hearts, and Persona 6
• Valve hasn't commented on the achievements or recent prototype leak on Steam

Steam achievements for both upcoming and unannounced games may have been leaked by Valve and spotted on the third-party site Exophase.

As reported by PC Gamer, the leak includes nearly 90 games, including Control Resonant, Kingdom Hearts 4, Gears of War E-Day, Tomb Raider: Legacy of Atlantis, and Persona 6.

The leaked achievements are listed for each title on Exophase, including spoilers for major plot points, character reveals, and even weapon unlocks (notably for Kingdom Hearts 4), despite missing full descriptions. It's effectively created a minefield of spoilers to avoid, which is made worse since the list includes games that don't even have a release date.

It's not exactly clear how this leak occurred on Valve's end, but it doesn't appear to be a breach of the Steam platform. Instead, it may very well be an issue with Valve's API exposure, at least according to Exophase owner Mike Bendel, who claims it's a "possible screw-up on Valve's end", which makes this the second slip-up in just a few weeks.

Recently, around 12TB to 13TB of early prototypes, unreleased titles, and scrapped builds of games between 2003 and 2013 were leaked from Steam, including games such as GTA 5, The Binding of Isaac, and even some of Valve's very own games like Left 4 Dead.

It's possibly the worst spell of game leaks for publishers launching games on PC platforms like Steam, especially with the leak of builds for games like Death Stranding 2: On the Beach and Forza Horizon 6 before launch.

There's clearly a major security issue at hand with Steam, and until it's addressed, game leaks seem inevitable. Game achievements, while potentially spoiler-filled, are minor in comparison to the very recent game prototype leak.

Valve hasn't made an official statement on the Steam prototype or achievements leaks, but with its impact on both publishers and consumers, it wouldn't be surprising to see both cases addressed soon.

• Check Point Research exposed coerced insider flaw in ChatGPT’s agent architecture
• Containers shared metadata via internal service, enabling cross‑account prompt injection and data theft
• OpenAI closed the path, but CPR warns similar risks may exist in other AI platforms

ChatGPT’s AI agents were allowed to pull sensitive data from one account shared with an entirely different account because, colloquially speaking, all agents used to walk down the same hallways, experts have warned.

A new report from security experts Check Point Research (CPR) dubbed the flaw “coerced insider”, since it revolves around persuading the agent instead of abusing a vulnerability.

Coerced insider

When an AI agent is given a task that needs code execution, it handles that task in an isolated container which also sometimes needs to install software. To enable that, without giving containers direct internet access (which would be too risky), OpenAI routes those packages through an internal JFrog Artifactory instance. As a separate security contingency, containers from different accounts cannot talk between themselves.

However - they can reach the same internal service (our proverbial hallways), which exposes an item management feature that lets the containers attach text or binary properties to a repository item. As a result, any container can read back the properties written by any other container.

“Check Point Research confirmed the isolation gap directly: a property written from one account’s container was fully readable from a different account’s container moments later, with data too large for one property simply split into chunks and reassembled on the other end,” the researchers explained.

“The package delivery metadata effectively became a shared clipboard between containers that were supposed to be walled off from one another.”

From there, the exploit turns into your usual, off-the-shelf prompt injection. The only difference is that the malicious prompt is not delivered directly to the victim, but rather left in the hallways, and the results are not shared with the attackers directly, but rather left in those same proverbial hallways, too.

The attacker then delivers a prompt or a shared conversation that instructs the agent to check the same storage during its next ordinary reply. The agent checks, sees the malicious instructions, executes them, all the while replying to the victim’s question in the usual manner. The victim is oblivious to the fact that data theft is taking place in the background.

What kind of information can be stolen?

But this is just half of the equation. How destructive this attack ends up being still depends on the amount of data being shared with the victim agent.

The bare minimum is the information shared while chatting to the agent. It then grows with every connected app: Gmail, Google Drive, Microsoft Teams, GitHub, and similar. “In Check Point Research’s demonstration, ChatGPT retrieved the victim’s email data through their connected Gmail account and delivered it to the attacker’s session, all within a single ordinary turn,” CPR stressed.

The good news is that you’ll likely never be exposed this way, at least not via ChatGPT. CPR says it disclosed the findings to OpenAI, who then confirmed that the specific internal Artifactory instance identified in the research has been commissioned. In other words, the hallways attack path has been closed.

The bad news is that this doesn’t automatically mean everyone’s safe. This particular path might be closed, but the architectural pattern behind the flaw could be present in other platforms, CPR warns.

“Any AI assistant that operates inside an organization’s trust boundary, holding credentials, running code, and reaching connected services, can become what Check Point Research calls a coerced insider,” the report states. “The model itself does not need to be malicious. It only needs to be persuaded, through text it was never meant to trust, to use access that was granted for entirely legitimate reasons.”

Going forward, businesses are advised to learn which AI tools their employees are using, and what those tools are connected to. Then, they should govern what AI tools and agents are allowed to do, treating all of their actions (not just output) as something that needs to be monitored.

• Chrome will get new updates every two weeks to minimize real-world attacks
• Smaller, incremental changes should also make it easier to track any issues
• Other major browsers are also shifting to two-weekly release cycles

Google has confirmed that Chrome has officially moved from a four-week Stable release cycle to a two-week one, with effect from September 8 2026 with the launch of Chrome 153.

Besides adding new features, the main objective is for Google to give us performance and security fixes more promptly in an era of increased complexity and heightened vulnerabilities.

And it's exactly those security concerns that pushed Google to want to double Chrome's update frequency in the first lace, with the company now having to deal with a higher volume of patches than ever before.

Chrome will get updates every two weeks

Together with a higher volume of attacks in general, Google has also benefitted from AI-powered vulnerability discovery tools, giving developers more work to do than before. "With automated AI discovery tools and community bug reports generating higher patch volume, shorter release cycles make managing security fixes significantly simpler," the company wrote.

Crucially, the faster cycle reduces the time between a fix landing in Chrome's public codebase and it actually reaching end users, making it less likely for a bug to be exploited in the wild.

Chrome has been adhering to a four-week cycle since 2021, but the world is a very different place in the space of just half a decade.

With the higher pace of releases, Google also anticipates a smaller scope of changes, which could actually be a good thing because it could be easier for developers to identify what went wrong in the event of any issues.

Desktop, Android and iOS versions of Chrome will all be impacted by the change, with Chrome 154 already slated for a September 22 release.

More broadly, Google says Chrome isn't the only browser getting more frequent updates. Microsoft, Mozilla and Brave are also making similar changes, and they're all undergoing those changes right now.

The Lenovo ThinkPad T1g Gen 8 is a powerhouse and a semi-portable shell. It takes on the power of the beloved X1 Extreme, pairing an ultra 9 processor with quick memory, Thunderbolt 5, and decent storage. It's designed for engineers, creatives, and other power users who need a machine that can do it all while still having that hint of portability.

I think of this quite like the 16-inch MacBook Pro. It's the bigger choice in the line-up, but you would get it because you want the power and the ability, not necessarily the portability. The people who would get this laptop are the people who need the ports as well.

That's one of the reasons why I'm thrilled to see USB-A still, though it is just one, which is all that I would want. USB-C, Thunderbolt, an SD card reader, and an HDMI port. It honestly has every port I wish my MacBook Pro had, even as a guy who loves the MacBook Pro.

Lenovo ThinkPad T1g Gen 8: Price and availability

The Lenovo ThinkPad T1g Gen 8 is available from Lenovo in the US here, and in the UK here. Prices start at $3,632 / £5,0145.

My tested version of this laptop has an Intel Core i9-285H, an IPX5070 with 8 GB, 32 GB of RAM, and a 1 TB SSD. It's pretty hefty, and it does the job, that's for sure. The fact that it has a dedicated GPU shows that this thing is meant to work. The screen is also WQUXGA (3840x2400) with an 800-nit IPS panel.

You can fully inspect this thing out with a loaded Ultra 9 5070 with 64 GB and 4 TB of SSD. That will run you just over $4,000. My unit is not fully spec'd. It was pretty close and comes in at about $3,400 to $3,700, depending on how I look at it. If you get a base level with an entry point of an Intel Ultra Core 7 RTX 5060 and a terabyte of SSD, you can get it for just under $1,700 at $1,688.

So, much like most of Lenovo's line-up, you can expect this thing to go up and down the price chain however far you want. What's important to recognize is that they have laptops all across the spectrum for what you're wanting.

Lenovo ThinkPad T1g Gen 8: Unboxing and First Impressions

Right off the bat, this is a super sharp machine. I'm a big fan of Lenovo laptops for how they always look uniform yet still have a little taste of differences.

When it comes to being uniform, it still has the matte black that I love, the touchpoint, a generous trackpad, a very comfortable keyboard, a great screen, a physical shutter on the camera, spectacular ports, and all-around really standard and clean branding.

The things that are different, though, are that, unlike a lot of the other models that I've tested, this doesn't have a left and right-click button at the top of the trackpad that's meant to be used with touchpoint.

It does still have a little bump, though, so that if you know that it's there, it's still accessible. I tested it, and the right-click still works just fine. It's just not a physical button; it's built into the touchpad.

Outside of that, this still looks super sharp. While it is bigger than some of the other models, it's by no means too cumbersome to carry. I would happily carry this around every day in my backpack, and it fits even at 16 inches in most standard-size or slightly bigger backpacks. It's a pretty tight fit in something like a Bellroy Daily Pack, but in my beloved Nomadic or TomToc bags, this fits without any problem.

In the box comes the standard charger and always great packaging to make sure that the laptop stays safe while in transit or in the store. Admittedly, I rarely use the chargers that come with these devices personally, but that's because I usually opt for more efficient and more useful chargers from Anker, Ugreen, or even Nomad.

For something this size, though, I'll probably continue to use one of my bigger Anker chargers that have a few ports, phenomenal output, and even Bluetooth capabilities to give me readouts. I can see where my power is going for each port on the plug.

Lenovo ThinkPad T1 Gen 8: Design & Build Quality

As previously mentioned, this is an absolutely spectacular build device. If you're more familiar with Apple products, this does feel quite a bit like the MacBook Pro. I feel bad constantly comparing it to that, but the reality is that the MacBook Pro is a little more distinguishable and more known in the popular field.

What's unlike the MacBook Pro, though, is that this also features a trackpoint, a privacy shutter, human presence detection, upgradable memory, and that USB-A port that I wish my MacBook Pro had.

It's no secret that this is a big machine. It's a 16-inch powerhouse, so don't expect it to be as light as a feather or as light as some of Lenovo's carbon models. That doesn't mean that it's wildly uncomfortable either.

Yes, it's a big laptop, but for its size, it's so barely portable and relatively thin and light. Especially when you consider that you can get this spec'd out with a tandem OLED 120 Hz screen, massive amounts of storage, 64 GB of RAM, and a dedicated graphics card. That's pretty insane all around.

Lenovo ThinkPad T1g Gen 8: In use

I've had this laptop in rotation for my team and myself for the last 163 days as I write this paragraph. Throughout the time, I've used it for virtual meetings, projects in Notion, a lot of writing, and emails.

I'm taking over the world one AI at a time, trying to teach myself things through Claude and GPT. I've taught myself how to code. I've done a lot of website work. I've sent a lot of Slack messages and even watched a fair number of tutorials on YouTube.

While working on project management, this executive screen fits a good amount of data, especially with the higher resolution. I can fit quite a bit on this screen. When it comes to basic photo editing, the screen is still pretty sharp and fairly color accurate. It may not be the best photo editing laptop I've ever used, but for most this would be just fine.

This machine is powerful enough that I can jump in and run quite a bit of my workload on it without even feeling like it's slowing down at all. I've done a ton of work building out Notion workers utilizing this laptop specifically.

I've done a lot of work in VS Code, GPT, Claude, and Notion, running some pretty heavy workflows to get the sinks working the way I wanted them to. It all happened without any problems on this machine, thanks to its robust processor, RAM, and storage.

Beyond that, typing has been an absolute dream on this. I have always said, and probably will continue to say, that Lenovo laptops, specifically the ThinkPad variant, have some of the best keyboards on the market, perhaps ever. Even throughout all their changes over the years, they continue to have a spectacular keyboard.

The best way I can describe this laptop is that it is for people who need a professional machine for workloads to match. These people aren't the ones that are just working on documents or emails or quick office tasks like that.

It's the people who need to be able to jump into any kind of work at any time. They're using a ton of processing power, and they need a lot of ports. They're the most likely to be more tech-savvy individuals who bounce in and out of what they do.

Lenovo ThinkPad T1g Gen 8: Final verdict

All in all, this laptop has been wonderful to use. I have most appreciated the parts and the reliability of this machine. Being able to plug in any device I may need without having to carry a dongle is peace of mind that I do not take for granted.

Also, having enough headroom in your powertrain to take care of all the projects in one's own busy days is a superpower that many would appreciate.

If you're the generalist or the specialist of many, if you're into systems, IT, or you're just the kind of guy who always has a thousand projects he's juggling, then this is absolutely a laptop you should consider.

For most people, this would be overkill for them. In my technical world, people I work with would absolutely benefit from this kind of machine. It has the power to run bigger programs and the storage to manage data if that's part of what they're doing.

It has ports to jump in and out of whatever they are solving, and it's portable enough to carry around from place to place (even though they're not going want to walk around holding this in their hand anytime soon). It's possible, but it's just not comfortable.

It's sharp, it's sleek, it's powerful, and it has ports. It's expandable all around. Lenovo nailed it with this laptop.

For more top picks, see our guide to the best business laptops we've tested.

• Kinryū Labs found misconfigured APIS database in Vietnam exposing 220M passenger and crew records
• Data included PII, travel details, seat assignments, and baggage references from 2017–2026
• Archive locked and there is no evidence yet of dark web sale

Millions of travellers have had their sensitive information exposed on the internet, thanks to a “series of misconfigurations” discovered in a cloud database, experts have warned.

In early June 2026, security researchers from Kinryū Labs discovered an Elasticsearch cluster which, although inaccessible from the open internet, allowed access through an alternate route - a cloud-based path. Once inside that route, the researchers discovered that the cluster accepted default credentials, granting access to an archive with 29 indices, weighing roughly 107GB.

The archive was apparently generated by an Advance Passenger Information System (APIS), a system airlines use to collect and send passenger and crew information to country authorities before flight arrival or departure. Usually, the system collects people’s names, birth dates, nationalities, passport and travel document numbers, and flight details, which are then used for border control, immigration, and similar cases. In this case, however, it also contained people’s sex, document expiration dates, issuing countries, airlines, departure, destination and transit airports, seat assignments, baggage reference, and more.

It is not known who operated the APIS, or who owns and runs the database. All the researchers managed to find is that it was hosted in Viettel-assigned IP space in Hanoi, Vietnam’s capital.

Who was affected?

Of the 29 discovered indices, two were rather large: one contained 210,318, 069 passenger records, while another 10,465,631 crew records. In total, 220 million records, created between January 2017 and April 2026, from people who traveled to, from, or through Vietnam during that period.

The records don’t correspond to individuals, however. If a person travelled multiple times, they will show up in the archive multiple times. Canadians, Chinese, Korean, and New Zealandian nationals are among the ones whose information was exposed. The database is not limited to a specific airline, either - various airlines in Asia-Pacific, Europe, and Middle East regions were mentioned in the researchers’ report.

Since the researchers could not attribute the database to a specific entity, they reported it to the Vietnamese authorities, different airlines mentioned in the archives, and the country’s CERT (Computer Emergency Response Team), on June 3. The archive was locked down a week later, on June 8. According to BleepingComputer, it was the Singapore Airlines’ security team that took the lead on remediation efforts, telling the researchers they “engaged the relevant parties” and have “taken steps to contain the issue.”

Without a proper audit of the logs, and a full-blown forensic investigation, it is impossible to tell if any threat actors reached the database before the researchers, or if they exfiltrated and used the data found inside in identity theft, wire fraud, or other scams. What’s (somewhat) comforting is that there is no evidence of such activities on the dark web, and no hacking groups have made such claims. No one is selling the archive on the dark web, either.

Number one causes of data spills

Misconfigured databases remain one of the key causes of data leaks. Most businesses generate some type of data on their employees, partners, clients, or customers, and store it in the cloud for easy access and actionable insights. However, some businesses don’t understand the shared responsibility model of cloud security or are simply reckless and sloppy when it comes to securing their cloud-stored data. Others, according to Cassius Edison, COO of Closed Door Security, have a problem with visibility of their IT real estate:

“The range of technology now used and managed by firms globally has made misconfigurations an increasingly persistent problem,” Edison explained. “Many organizations fail to maintain full visibility of their IT real estate and fail to perform proper audits of their systems, which inevitably leads to oversights in security and monitoring.”

For Edison, tackling misconfigurations internally can be difficult, “especially at large companies where teams work independently across a range of systems,” and advises organizations to bring in independent pentesters and security auditors.

Some of the biggest data leaks in the world came not from hackers breaking into locked-down systems, but from businesses inadvertently exposing their customers.

In 2026 alone, we’ve seen more than 670 million identity records exposed by Infutor, a data-driven consumer identity management company, as well as more than three billion records exposed through a misconfigured MongoDB database managed by global identity verification services, IDMerit.

Via BleepingComputer

• Japanese retailer warns of further GPU price hikes
• The retailer doesn't specify which GPUs will see increases
• Consumers are urged to buy now, but GPUs are already overpriced and unaffordable in many cases

The PC hardware market is still in disarray, with RAM shortages impacting almost every component, and unfortunately, matters could get even worse for GPU hunters.

As reported by VideoCardz, Japanese retailer Applied has warned consumers about potential price hikes for GPUs (yet again). It's unclear which GPU models this might apply to, but the retailer urges PC owners looking to upgrade their GPUs to buy as soon as possible.

VideoCardz also highlights that Japanese retailers only recently adjusted GPU prices upwards. In August, stores in Akihabara warned that pricing would be around 20% to 30% higher than usual.

Considering the recent rumblings of price hikes from Nvidia's board partners, it's fair to suggest that these increases will likely apply to other regions outside of Japan (assuming there's anything in these rumors).

If it wasn't exactly clear already, these price hikes are caused by the RAM crisis which is affecting all manner of PC components. Graphics cards are hit due to the rising cost of the video RAM on board.

Panic buying still isn't the best solution

PC owners are now hard-pressed to find affordable hardware upgrades, and it's been that way since the start of 2026. The RAM crisis is showing zero signs of slowing down, too, especially with reports from Samsung and industry analysts suggesting that the memory shortage will last past 2027 or beyond that, even.

Despite that, I still don't think it's the best idea to panic buy now when it comes to a GPU. Many Nvidia GeForce or AMD Radeon third-party GPUs are either unaffordable or overpriced at various major retailers. Prime examples of the former are the RTX 5080 at $1,699 at Best Buy in the US currently, while the RTX 5060 remains overpriced between $450 and $500, despite its $299 MSRP.

The same goes for AMD's Radeon RX 9070 XT, which has a $599 MSRP but can now cost up to $929 (specifically the Gigabyte overclocked model). The Radeon RX 9060 XT (16GB) also sits at least $200 to $300 above its MSRP, and the list goes on (in the US and elsewhere).

Simply put, buying a new GPU doesn't seem worth it unless you're a gamer looking to dive into the PC ecosystem for the first time. That's a harsh reality to accept, but panic buying might do more harm than good by increasing demand (which could lead to further short-term price hikes).

• Liquid Network hack exploited a bug in SideSwap, releasing 3,998 BTC (~$313M) to attackers
• Hackers claimed “white‑hat” intent, returning 3,400 BTC after fixes, leaving 598 BTC missing
• Network remains paused as Blockstream and Federation patch vulnerabilities and prepare safe restart

The latest twist in the Liquid Network Bitcoin hack is worthy of a short movie, if not a full-length feature film.

Apparently, the hackers are actually the good guys, who stole the money to “keep it safe” until a vulnerability in the protocol had been fully resolved. They promised to return the funds afterwards.

What is Liquid Network?

Liquid Network was designed to solve a specific problem on the Bitcoin blockchain - being rather slow. The transactions on the network are recorded in a “block”, which is added to the chain roughly once every 10 minutes. Also, each block can only hold a limited number of transactions, which means the network can handle a smaller number of transactions per second, compared to conventional payment systems. Transactions that don’t make it into a specific block then need to wait for the next one, thus extending the confirmation time.

To solve that problem, Liquid Network was built. It runs its own Bitcoin reserve and its own blockchain, also known as a “sidechain”. When a person wants to use Liquid Network to send money quickly, they first convert their Bitcoin into Liquid Bitcoin, or L-BTC. They can then send it to another person much faster than a regular Bitcoin transaction. The recipient can keep the money on Liquid or convert it back to regular Bitcoin and move it to the Bitcoin network.

This way, Liquid provides a faster network without requiring every transaction to happen directly on the Bitcoin blockchain.

Besides speeding up Bitcoin transactions, Liquid Network also allows users (companies and other entities) to create and trade other digital assets, including tokenized securities, or stablecoins.

The project was built by Blockstream, a Bitcoin-focused technology company founded in 2014. It is run by the Liquid Federation, a group of more than 80 member companies, including exchanges, infrastructure companies, and financial institutions. A smaller group of members (15 to be exact) operate the network’s “functionaries” (servers that keep the network running), while the wider group has a governance role. Members vote on three boards (Technology, Membership, Oversight), handling ideas such as technical direction, internal rules, memberships, and more.

What happened to it?

In early September 2026, still unidentified actors managed to generate around 4,000 L-BTC, without putting in the corresponding 4,000 BTC into Liquid. As soon as they did it, they sent the L-BTC through SideSwap, a legitimate service that is used to convert L-BTC back to Bitcoin and vice-versa. The system apparently regarded the withdrawal as legitimate because, as was later determined, a bug prevented SideSwap from distinguishing between “real” and “fake” L-BTC, and treated them all the same.

As a result, the Liquid Federation ended up releasing 3,998 real BTC (more than $313 million at press time) to the attackers. As soon as the operators realized what had happened, they halted new transactions and warned about possible disruptions until the service was restored.

Then came the movie twist: the hacker started communicating with network maintainers through on-chain Bitcoin transactions, promising to return the funds when the vulnerability is fully resolved:

“Please fix the bug first. The chain is under risk at latest commit right now. Make sure every node is patched. Then we will transfer the money back safely after confirming the fix,” one of the messages read.

Earlier today, Coindesk reported that the hackers partially kept their promise, returning 3,400 of the 4,000 BTC drained, which suggests that the flaw was remedied. The remaining 598 BTC, worth approximately $47 million, is currently unaccounted for.

“3,400 BTC of the roughly 4,000 BTC withdrawn on September 6 has been returned to the Liquid Federation wallet. The return followed confirmation from Blockstream that the affected bridge nodes have been patched,” wrote Samson Mow, former chief strategy officer at Blockstream, on X. “Approximately 598 BTC remains outstanding, and Blockstream continues to engage with the white-hat hackers.”

He added that the network remains paused while Blockstream and Federation members make additional fixes and security improvements, resolve the chain split, and prepare for a safe restart.

“Liquid wallets and services will continue to be affected during this time. No user action is needed, and please do not send Bitcoin to Liquid peg-in addresses until we confirm the network has restarted,” he added.

• Microsoft 365 users targeted by phishing campaigns using BigBear 2.0 and AiTM proxies
• Attackers impersonate IT staff via calls, Teams, and email to steal credentials and bypass MFA
• CloudSEK tracked 5,000+ stolen records; Arctic Wolf urges phishing‑resistant MFA and conditional access

Microsoft 365 users are facing a barrage of cyberattacks all aimed at a single goal - to try and expose credentials which can later be used against employers in data theft attacks.

Different groups conduct their raids and bypass multi-factor authentication (MFA) protection to access victim accounts - CloudSEK, for example, said that some groups are using BigBear 2.0, a new phishing-as-a-service (PhaaS) framework that allows crooks to intercept passwords and authenticated session cookies.

Arctic Wolf, on the other hand, focused on a single threat actor, which it dubbed PREY-0058. This group, despite significant overlaps with other collectives in terms of techniques, technologies, and procedures, is not a rebrand of older organizations. Instead, the researchers believe the lines between the groups are blurred and that there is a large group of affiliates, splinter crews, and other cohorts using the same phishing infrastructure and thus often confuse defenders and analysts.

Similar methods, similar results

The attack methodology is similar across the spectrum. Crooks would call their victims on the phone or approach them via Teams and email. They would introduce themselves as members of the IT help desk sent to sort out a specific problem or issue.

Then, they would either convince the victim to grant remote access, or to open a spoofed Microsoft 365 login page and enter their credentials there. In both cases, the goal is the same - to get the victim to type in their username, password, and 2FA code, on a fake site built by BigBear 2.0 or a similar phishing framework. This framework, using an attacker-in-the-middle (AiTM) proxy between the victim and legitimate Microsoft infrastructure, harvests credentials, MFA codes, and session cookies, and replays them through an API essentially hijacking a legitimate authentication session.

Once they gain access, the attackers can do all sorts of things, but they are mostly focused on exfiltrating sensitive data from Outlook, Teams, SharePoint, and OneDrive. Deploying ransomware is rarely seen.

The campaign CloudSEK has been tracking has been rather successful, the researchers argue, saying BigBear 2.0 was used to exfiltrate more than 5,000 credential records, “including 474 complete MFA-bypassed authentications, 1,032 plaintext passwords, and 4,148 session cookies - affecting 3,331 unique victim IPs across 40+ countries with the operation still active at the time of writing.”

“The multi-user PhaaS panel is leased to at least five affiliate operators identified through live Telegram exfiltration bots, each receiving stolen credentials in real time.”

Speaking to BleepingComputer, CloudSEK says the campaign targeted 461 organizations, out of which 258 have had at least one set of credentials compromised.

Defending with phishing-resistant MFA

Arctic Wolf’s researchers stressed that the attackers are focused primarily on US-based businesses: construction and engineering, healthcare and pharmaceuticals, real estate and property management, finance, and professional services, The Hacker News reported. The researchers advise organizations to implement Conditional Access policies, deploy phishing-resistant MFA, and restrict the scope of data users can access via SharePoint. Obviously, employee education on the dangers of phishing cannot be understated.

"Defenders can disrupt this activity by detecting anomalous residential-proxy token replay, SharePoint discovery and bulk access, mailbox harvesting, and newly registered authentication-themed lure infrastructure," Arctic Wolf said.

Phishing-resistant MFA is multi-factor authentication designed so that an attacker cannot trick a person into handing over authorization code, either via a message, or through a fake login page.

These include products such as passkeys, YubiKeys security keys, and authentication methods based on FIDO2/WebAuthn. Since phishing-resistant MFA cryptographically ties the authentication to the legitimate website, the authentication cannot simply be forwarded to an attacker.

Alienware AW3926QW: One-minute review

For serious PC gamers, few monitors have been more hotly anticipated than this epic 39-inch ultrawide beast. The Alienware AW3926QW combines LG's latest OLED panel tech with 5K2K native resolution on an incredible scale. The want is strong for this one.

But even those impressive highlights don't quite capture why the Alienware AW3926QW is such a hot item. There's more to it than that. Firstly, not only does it pack LG's new Tandem WOLED panel technology, it adds a further twist by offering RGB-stripe subpixels.

That probably seems like an arcane detail. But it has a broad impact on image quality, and not necessarily always for the better. Then there's the price. At $1,099 in the US and £999 in the UK, this is hardly a budget gaming monitor.

However, next to its closest rival and the only other 39-inch 5K2K OLED currently available, LG's own $1,799 UltraGear Evo GX9 39GX950B, it's massively cheaper and yet arguably more appealing. Of course, even on paper, the Alienware AW3926QW isn't perfect.

Its most obvious shortcoming is the mere 165 Hz refresh rate. Given that 32-inch 4K OLED panels with 240 Hz refresh are widely available, the step back to 165 Hz is a notable downgrade.

The pushback on that objection, however, is twofold. First, the 5K2K resolution translates into 5,120 by 2,160 pixels and therefore one heck of a lot of GPU load. In other words, the idea that you're going to be pushing 240fps-plus to this monitor in the latest and most demanding games is a bit fanciful. Most of the time, 165 Hz will be plenty.

Moreover, this isn't the kind of display anyone would buy specifically for high-frame rate esports gaming. It's wrong in all kinds of ways. But even then, Alienware has included a number of lower-resolution dual-mode resolution options with 330 Hz refresh. So, if you absolutely insist on esporting on this huge panel, well, it will accommodate that use case.

More likely, however, people will be considering this panel for all-round gaming and daily computing tasks. And in that context, the promise of a huge OLED panel that actually offers decent pixel density thanks to that 5K2K resolution is an absolutely tantalising proposition. This Alienware definitely looks set to take its place among both the best gaming monitors and the best ultrawide monitors in 2026.

Alienware AW3926QW: Price & availability

• How much does it cost? $1,099 / £999 / AU$1,999
• When is it available? Available now
• Where can you get it? Available in the US, UK, and Australia

$1,099 is hardly the stuff of budget gaming. But it's still a very, very punchy price for this class of gaming monitor. The only comparable 39-inch 5K2K OLED monitor is the LG UltraGear Evo GX9 39GX950B. But that has an MSRP of $1,799.

What's more, despite the lower price, you get a glossy screen coating where the LG is matte, plus RGB-stripe pixels, albeit that comes with slightly lower brightness. Of course, if you shop around, you can grab a 32-inch 4K OLED for about half the price of this Alienware ultrawide monster.

So, even at this relatively discounted price compared with the closest competition, you're still paying quite the premium versus a "conventional" 32-inch 4K model. Still, given how cutting edge this display is, Alienware has done a solid on the pricing. It's very impressive.

• Value: 4 / 5

Alienware AW3926QW: Specs

Alienware AW3926QW: Design and features

• Good connectivity
• Glossy anti-glare coating
• Sensible 1500R curve

While the huge OLED panel is obviously the star of the show, the support act of features and design do matter. Alienware's latest visual language has ditched the Storm Trooper vibe of its earlier gaming displays comprising white glossy plastic and Sci-Fi lines in favour of organic, rounded shapes and dark blue, lightly textured plastic.

The new look is definitely less distinctive. But the chassis is well enough put together, and at least the minimalist look and slim bezels mean this monitor is unlikely to date quickly. For the record, the stand supports height, tilt, and swivel adjustment, plus a few degrees of pivot, the latter intended to allow for making the screen level as opposed to supporting portrait mode, which wouldn't be practical with such a large ultrawide panel.

Speaking of which, this is a huge monitor, and you'll need decent desk space to accommodate it. But the ergonomics are helped by the relatively gentle 1500R panel curvature.

Just what makes for the ideal curve is subjective, of course. But at least some curve on an ultrawide display of this size does help with both immersion and maintaining reasonable viewing angles at the extremities of the panel. But you can go too far with extreme curvature, too, something this monitor certainly avoids.

The glossy anti-glare coating is another feature that comes down to personal preference. The advantage is boosted contrast and clarity, the downside added reflectivity. On balance, it's probably a net win for this kind of OLED monitor due to the incredible HDR visuals it enhances.

Connectivity is another strong point. Along with the usual HDMI and DisplayPort interfaces, you get USB-C with 90W of power delivery and a KVM switch. There's also a USB hub with both USB-A and USB-C sockets, an example of each is located conveniently on the lower bezel.

Finally, it's worth noting that Alienware provides a full suite of burn-in mitigation features, like pixel cleaning. There's also a reassuring three-year warranty which includes burn-in cover.

• Design: 4.5 / 5

Alienware AW3926QW: Performance

• Glorious HDR visuals
• RGB-stripe precision plus decent brightness
• "Only" 165Hz

The OLED gaming monitor market has gotten pretty complicated of late, what with all the different panel technologies on offer. The Alienware AW3926QW is absolutely a case in point. It combines LG's latest Tandem WOLED panel generation with a new RGB-stripe subpixel structure in a huge 39-inch 5K2K package.

The immediate upshot is an OLED gaming monitor that combines an epic viewing vista with pixel density on-par with a 32-inch 4K monitor. That's an incredible combination of sheer scale and image detail, the likes of which are only matched by the aforementioned LG UltraGear Evo GX9 39GX950B. The 5K2K native resolution also makes this a pretty fabulous monitor for day-to-day computing. Text is crisp and clear, and there's oodles of desktop space.

However, it's that RGB-stripe subpixel structure, plus the gloss anti-glare coating, that separates this Alienware from that LG. So, how do the two compare? On paper, the LG is rated at 335 nits full-screen brightness and 1,500 nits peak HDR, while this Alienware tops out at 300 nits and 1,300 nits, respectively.

That's because the LG model uses a panel with an additional white subpixel in an RGWB configuration to boost brightness, where this Alienware has a pure RGB — or red, green and blue — subpixel structure. The thing is, that added white subpixel on the LG model isn't as effective at boosting color brightness as it is at boosting pure white brightness. So, in the real world, this Alienware feels pretty much just as punchy.

Even better, because of the pure RGB feature, if anything, colors are richer and more vibrant. Add in the glossy panel coating, and the results are a little short of spectacular. The HDR performance in games like Cyberpunk 2077 is incredibly impactful. Indeed, the punchy colors are closer to Samsung's QD-OLED tech than an RGWB LG panel.

Even better, you don't have to put up with downsides of QD-OLED, including its characteristic purple tint in bright ambient light. For pure visual theatre and immersion, this is probably the most impressive gaming monitor currently on the market.

It is not, however, perfect. In extremis, full-screen brightness is a limitation. As with all current OLED monitors, this display can only hit its peak 1,300 nits performance over a very small section of the panel. As you light up more and more of the panel, the maximum available brightness tails off.

So, in some outdoor scenes in games, let's say under the desert sun in Cyberpunk 2077, the results can be just a touch underwhelming. That's the one scenario where a traditional LCD monitor, and particularly one with mini-LED backlighting, can be more impressive thanks to far superior full-screen brightness.

While we're talking brightness, this Alienware suffers from another slight issue. Likely due to an anti-burn-in feature called Convex Power Control, the edges of the panel can dim slightly during gameplay. It's not a super-obvious problem, but once you notice it, it can detract a little from the overall impact of the display. Unfortunately, you can't toggle the feature off for now. Hopefully that will change in a future firmware update.

It's also true that the 165Hz refresh is modest by current gaming monitor standards, especially at this price point. How much of a limitation that really is in practice, well, it depends on what games you play. With the latest, most graphically demanding titles, it's not much of a limitation if you want to use the highest visual settings. It's not like you're going to hit 300fps at 5,120 by 2,160 pixels with all the eye candy switched on.

Of course, if you're playing, say, Counter-Strike 2 competitively, you're going to want a lot more than 165Hz. This monitor can actually deliver 330Hz running at one of its lower "dual-mode" resolutions that use pixel doubling to achieve alternative pseudo-native resolutions.

What's more, thanks to the incredible response performance of all OLED panels 330Hz plus 0.03ms response makes for excellent motion clarity. But like all dual-mode monitors, overall image quality and sharpness does take quite a hit. And, anyway, if you're really serious about esports, you're almost certainly not shopping 39-inch ultrawide panels.

Ultimately, then, our only significant reservation is the edge dimming that can happen during gaming. It's a bit of a pity because in pretty much every other regard, this is one of, if not the, most spectacular and enjoyable gaming monitors out there right now.

• Performance: 4.5 / 5

Should you buy the Alienware AW3926QW?

Buy the Alienware AW3926QW if...

Don't buy it if...

Also Consider

How I tested the Alienware AW3926QW

I used the Alienware AW3926QW for literally everything for two weeks. As well as running it through pretty much my whole steam library, it was also my daily driver for all kinds of computing tasks and also doubled as my movie watching panel.

I was looking out for how it compares with both LG-based monitors with RGWB-spec Tandem OLED panels and competition displays with Samsung's QD-OLED tech. It was fascinating to discover how it performs in terms of brightness compared to those alternatives and also what impact the RGB-stripe subpixel tech has.

Using it as a daily driver for work and web browsing was almost as interesting as the gaming larks. This is such a large, high-resolution display, it was all a real treat.

I also investigated all of the concerns that early adopters of this monitor have been dicsussing, including including green tinting, adaptive refresh flicker and so-called "vignette dimming." I found only the latter was much of a problem and even then it probably isn't a deal breaker.

• Originally reviewed in August 2026

• The Bing Wallpaper app is serving an ad in Windows 11
• The advert is for a Harry Potter and Fantastic Beasts movie collection
• There's a rebellion against this blatant advertising, with a significant number of users saying they've immediately removed Microsoft's wallpaper app

Some Windows 11 users who've installed the Bing Wallpaper app have been treated to an unpleasantly in-your-face advert for Harry Potter.

To be precise, it's an ad for a collection of 11 Harry Potter and Fantastic Beasts movies, and, as Windows Latest reports, this appears as a full-page promotional image that becomes your desktop background.

This isn't happening for every Bing Wallpaper user, and it appears to be a regional rollout; but based on the plentiful Reddit feedback of the negative variety, it's being piped to quite a number of PCs.

For the uninitiated, Bing Wallpaper is an app that serves up daily wallpapers to those who've installed the software — and note that it isn't installed by default; this is something you have to elect to have on your Windows 11 PC.

Nevertheless, it's an over-the-top move by Microsoft to shovel something like this onto the desktops of those who've chosen Bing to pick their backgrounds.

As one annoyed Redditor says, filing the Harry Potter wallpaper under the 'unskippable ad' category in the 'Mildly Infuriating' subreddit: "I had it [Bing Wallpaper] installed since up until this point it was a fairly harmless program that gave a variety of animals, environments or pattern backgrounds that rotate daily. Wtf?"

Replying, another Redditor observes: "Free software from a trillion dollar company means you are the product." Some folks responded to that to say that Windows 11 isn't free, but this Redditor isn't talking about the OS itself, but rather the Bing Wallpaper app, which is a free add-on for Windows, of course.

Analysis: Bing begone

Windows Latest notes that the terms and conditions of the Bing Wallpaper app allow for "promotional offers" from Microsoft, but what's happening here goes well beyond that. Frankly, this isn't acceptable in any way — and Microsoft really should know better than to serve a blatant advert in this manner.

I'd say I was shocked, but ads have always been a problem in Windows 11. On top of that, about a year ago Bing Wallpaper was used to perform another underhand trick with desktops that made me cringe. In that case, an accidental click on the Windows 11 background fired up a Bing search (yes, really), and I called this "a new low" for Microsoft at the time.

This, however, represents Microsoft plumbing fresh depths. A notable number of those complaining on Reddit have said that they've immediately uninstalled Bing Wallpaper due to this incident (generally with a sprinkling of added curse words).

One of the politer comments notes: "Honestly if they cut out text and just left the base [image] with the option to right click to get more info and it took the user there it would be passable. But current state just time to remove Bing Wallpaper."

This is very much representative of Microsoft's different departments not talking to each other. On the one hand, there's a big drive to fix Windows 11 and try to please users with all sorts of nifty changes and long-awaited features. On the other, the Bing Wallpaper team thinks it's fine to deploy what might be the worst example of advertising I've ever seen in the Windows ecosystem — and there's quite some competition for that accolade, sadly.

At any rate, I assume this won't be happening again, Microsoft, given the reaction here… right?

The first Wi-Fi 8 routers were launched by TP-Link at IFA 2026 last week with the devices set to hit the shelves later this year. So, when that happens, is it a good idea to immediately jump on board with this new more performant wireless standard?

Not exactly. There's a bit to unpack here about exactly how Wi-Fi 8 improves on Wi-Fi 7 — it's not any faster in terms of raw performance, in case you weren't aware — as well as when routers and devices that support the new standard will arrive.

All of this will factor in to the decision you'll make about when to upgrade to Wi-Fi 8 in your home. In this article, we'll look at what Wi-Fi 8 offers over and above Wi-Fi 7, and then examine considerations around the upgrade timeline, and when you might want to make a move to benefit from cutting-edge Wi-Fi.

How is Wi-Fi 8 better than Wi-Fi 7?

Wi-Fi 8 doesn't move the needle in terms of raw speed over Wi-Fi 7 — the latter is already beefy in that respect anyway — and instead aims to boost overall wireless performance in different ways.

Wi-Fi 8 seeks to improve the overall stability and reliability of the wireless connection, so you get a smoother and faster experience when you're further away from the router — and it's particularly focused on helping boost speeds at the very edge of the network's signal.

Another key point with Wi-Fi 8 is that it's built to cope with more devices and keep speeds up, as well as dealing with interference better. So, in signal-dense environments, where there are lots of devices competing for bandwidth, all this traffic will be better directed and managed to ensure better performance.

That'll obviously help with larger households where everyone has multiple devices, but it's going to be particularly important for places like apartments or office buildings where there can be a lot of competition from multiple routers and a whole host of devices all packed into a relatively small area.

TP-Link — which unveiled both a traditional Wi-Fi 8 router, the Archer 8 Ultra, and a mesh Wi-Fi system, the Deco 8 Ultra, at IFA 2026 — revealed some clever tricks for these cutting-edge pieces of hardware. They use Dynamic Sub-band Operation (DSO) and Non-Primary Channel Access (NPCA) tech to portion out only the bandwidth any given device needs — so tiny smart home devices, for example, only get the small chunk that they require, leaving more bandwidth to be usable for other hardware. In short, the traffic from all devices is managed in a much smarter manner, and situations where performance gets congested with Wi-Fi 7 are avoided with Wi-Fi 8.

The end result is a considerable leap in performance of wireless devices, even though the core speed and throughput spec of Wi-Fi 8 remains the same as its predecessor. This is particularly evident in environments with lots of competing devices, or when you're at the outer limits of the wireless signal.

When will Wi-Fi 8 routers go on sale — and should I buy one straight away?

As mentioned, TP-Link's initial models are on sale later in 2026, and pre-orders will go live in some regions from the start of October. Asus Wi-Fi 8 routers are also expected to arrive later this year.

In theory, then, you could grab yourself a Wi-Fi 8 router in a couple of months and be up-and-running with the latest wireless standard — but should you?

Here's the thing about being an early adopter of a new Wi-Fi standard: you must remember that when the first routers come out, they're based on a draft version, not the finalized wireless standard. In other words, it's still very early days for Wi-Fi 8 (although when it is finalized, likely in mid-2027, existing routers will be updated appropriately, of course).

So, while you can have a Wi-Fi 8 router later this year, you won't be able to buy any devices which are compatible with the standard. Naturally, both the client device and the router must support the new standard to benefit from its features, and smartphones and laptops that are Wi-Fi 8 capable aren't arriving until next year.

And even then, they will only be available in small numbers, and these will be premium cutting-edge (expensive) devices, as you might expect.

Is it pointless to buy a Wi-Fi 8 router when they first come out?

While you won't get the immediate full benefit of Wi-Fi 8 until you have the supporting devices to go with the router, it's not completely pointless to be an early adopter of something like the TP-Link Archer 8 Ultra. It's backwards compatible with all devices supporting earlier Wi-Fi standards, of course, and that hardware will still get the benefit of some of the Archer's traffic management tricks.

That said, until Wi-Fi 8 laptops, tablets and phones arrive in greater numbers, you're not realistically going to get much mileage out of your shiny new Wi-Fi 8 router. You will, of course, be future-proofed and ready for next year's devices, but the problem is that buying a Wi-Fi 8 router at launch means you'll pay a premium and a high price for the privilege.

This cutting-edge hardware is always expensive when it first comes onto the scene, so on balance, it's much better to wait until the market fills out, and more Wi-Fi 8 hardware — routers and consumer devices — is available, before you pull the trigger on a purchase. Your wallet will be happier if you're patient.

Rest assured, though, that the future of wireless is almost here, and Wi-Fi 8 promises to make a big difference when it fully kicks in.

• AI data centers currently use a huge amount of energy
• Scientists have found a way to cut that energy bill by "orders of magnitude"
• It involves using "ultrafast magnetic-field pulses" in RAM and storage

It’s no secret that the current artificial intelligence (AI) boom is leading to record levels of energy consumption — all that computing power needs to be fueled somehow — and it’s causing much controversy among the communities that are impacted whenever a new data center lays down its roots in their neighborhoods.

Now, though, scientists think they’ve come across a way that could radically slash the energy requirements of memory and storage, with potentially massive consequences for the future of the computing and AI industries.

In a paper published in the Advanced Materials journal (via a press release in Science Daily), researchers at the University of Edinburgh in Scotland wrote that the breakthrough would fundamentally affect the way magnetic memory operates. Right now, switching its state allows magnetic memory to control digital information, but the current methods of doing so can be costly in terms of energy.

Instead of using standard energy switching techniques, the researchers discovered an alternative that harnessed ultrafast magnetic field pulses that consumed far less energy. In fact, the paper claimed that the authors’ approach could cut energy usage by “up to two orders of magnitude” — in other words, a cut of around 100x, which is a significant reduction.

The data centers of the future

The AI revolution is only a few years old, but data center energy consumption has already become a significant issue. As the authors of the research paper put it, “Without significant improvements in efficiency, [information and communication technologies] could eventually represent a sizable share of worldwide electricity consumption and carbon emissions.” AI is playing a large role in that trend thanks to both its voracious appetite for component production and the sizable emissions it produces.

While the paper focused on magnetic memory, its theories could be applied to other fields, the authors believe. As study writer Dr. Elton J.G. Santos put it, “The same framework can be adapted to electrical currents and even ultrafast laser pulses, which are among the most cutting-edge technologies for future data storage. That means the ideas developed here could have applications far beyond the systems we studied.”

Although the research is still in the realm of theory, the paper’s authors proposed a number of practical steps that could help others build prototypes and conduct experiments.

That said, don’t expect monumental changes any time soon. There is still a long road ahead before these ideas get put into practice, if they ever do. But given the promising results of the scientists’ work, there is hope that the data centers of the future could be far less energy-intensive than those of today.

• Wordfence discloses two critical flaws in Elementor Pro and Super Forms
• Bugs allow unauthenticated arbitrary file uploads, enabling remote code execution; both patched recently
• Exploitation attempts already exceed 440,000

More than six million WordPress users are at risk of website takeover, researchers have claimed after discovering two major vulnerabilities being exploited in the wild.

Security researchers Wordfence disclosed finding two flaws, one in Elementor Pro, and one in Super Forms - two popular WordPress plugins.

Elementor Pro is a commercial plugin that allows users to build websites using drag-and-drop elements instead of code. With it, they can add advanced widgets, templates, different forms, popups, and more. It is quite a popular solution with more than six million websites actively using it.

Two bugs, hundreds of thousands of attacks

According to Wordfence, up until recently, it was vulnerable to an “unrestricted file type upload” bug in all versions up to, and including, 4.2.1. “This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible,” the researchers explained. “This requires that the targeted site has published a page containing an Elementor Pro Form widget with at least one non-required File Upload field.”

The bug is tracked as CVE-2026-32475, carries a severity score of 9.8/10 (critical), and was patched in mid-August 2026. So far, Wordfence alone blocked more than 190,000 exploit attempts.

At roughly the same time, the researchers also reported finding a flaw in Super Forms, a form builder plugin that lets users create and manage forms using a drag-and-drop interface. This plugin, with some 13,000 active installations, contained a bug that allowed arbitrary file upload in all versions up to, and including, 6.3.313.

“This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible,” the researchers explained.

This one is tracked as CVE-2026-14894, also carries a severity score of 9.8/10 (critical) and it, too, was patched a few weeks ago. For this flaw, Wordfence observed more than 250,000 exploitation attempts meaning that cumulatively, these two resulted in 440,000 attacks already.

Given the widespread adoption of these plugins, and the fact that the flaws are being actively leveraged, users are advised to apply the fixes without delay.

Via The Hacker News

• G7 urges governments and organizations to begin transitioning to quantum‑resistant encryption
• Warning highlights risk from future quantum computers able to break current standards like AES
• Guidance: inventory cryptographic assets, prioritize critical systems, and adopt phased PQC strategies

The G7, a collection of some of the world’s most powerful economies, is urging organizations to adopt quantum-resistant encryption as soon as possible and minimize the risk of losing sensitive data to technologically advanced threat actors.

Virtually every industry in the world today relies on encryption (the process of converting readable data into scrambled, unreadable data so that only someone with the correct key can decode and access it) to protect sensitive information. Banks, telecommunications providers, defense organizations, and practically everyone else are using some form of encryption - most probably AES (Advanced Encryption Standard).

Decrypting the protected data without the encryption key is considered almost impossible, since the computational effort necessary to pull it off would simply be too large. However, since quantum computers work on a fundamentally different principle, it is believed that once they are mature enough, they will be able to “crack” today’s encryption standards.

G7's advice

Now, the G7 has urged government and organizations to remain ahead of the curve by deploying “quantum-resistant encryption”:

“To protect themselves from the threat brought by CRQCs (cryptographically relevant quantum computers), organizations should begin planning their PQC transition now and should aim to complete their transitions within any the timelines set out by their national cybersecurity authorities,” the warning reads.

“In addition to quantum-related risks, organizations that delay their PQC transition may lose competitive advantage or may be excluded from contracting opportunities, including public procurement.”

The G7 advises governments and organizations to take a number of steps, including identifying critical systems and prioritizing them. They should adopt a phased and risk-based strategy, start their transition early, and inventory their cryptographic assets. They should also map their dependencies and develop a transition plan.

“To limit transition-related costs, they should opt to purchase products that integrate PQC and replace their systems with quantum-safe ones as part of their standard renewal schedule. As such, starting the transition early could result in lower migration costs overall. Planning and conducting their PQC transition properly would enable organizations to prevent insecure implementations and avoid increased exposure to conventional cyber threats.”

• US military branches disable ad tracking on government‑issued devices after warning
• Location data from personal devices still poses risks; past data remains for sale
• Senators urge DoD inspector general to review policies and stop servicemember data exposure

More than 20 years ago, Jason Bourne was smashing mobile phones to prevent being tracked by his adversaries - and the US Department of Defense (DoD) has realized it should probably do something similar.

In May 2026, Senator Ron Wyden mailed the DoD (among others), informing the agency that foreign powers were using commercial location data to target US troops - and now, Wyden has shared the responses he received from the US Army, Air Force, Navy, Marine Corps, and Special Operations Command, all of which have disabled advertising tracking across their government-issued devices, including Apple and Android smartphones, and Windows computers.

Some branches did it earlier this year, while the Air Force allegedly concluded the efforts in July 2026 - and while Wyden praised the move, he also suggested it is not enough, and that further steps must be taken in order to protect US troops stationed abroad.

Evaluating the leaked files

“We commend these service branches for implementing this cybersecurity defensive best practice on government devices,” Wyden and Senator Pat Harrigan wrote. “However, recent reports regarding the continued availability of commercial location data originating from DoD facilities raise troubling questions.”

Apparently, despite disabling these features and placing the troops out of reach of data brokers and similar commercial entities, the data that was gathered earlier remains available for sale, which still presents a risk.

“The members suggested data could continue to be available for several reasons, including that commercial data available originates from personal devices, not government phones, that are carried by servicemembers and government contractors,” a report on Wyden’s website reads.

“Wyden and Harrigan called on the DOD inspector general to examine commercial location data that DOD and other government agencies have already purchased to determine why existing policies have not prevented servicemembers location data from being sold online, and to recommend policy changes to better protect US personnel.”

Via TechCrunch

• Rhysida ransomware group breached Berlin’s state government, stealing 1.44 million files weighing in at around 5.8TB
• Attackers demanded 30 BTC (~$2.3M); Berlin refused, leading to full leak online
• Leaked data reportedly includes water supply info, staff records, and emergency plans

A cybercriminal group known as Rhysida allegedly broke into the network of Berlin's state government and exfiltrated 1.44 million files. They then tried to extort the government entity for money and when that failed, they leaked it all into the dark web.

According to multiple sources, the group first claimed responsibility for the attack on an underground forum, where it shared a small sample of the stolen files and demanded Berlin pay 30 bitcoin (around $2.3 million) in exchange for deleting the files.

Berlin recognized the attack in a press release, and said it would not be negotiating with the attackers, and instead launched a full-scale investigation into the incident, which it described as an “extremely serious crime and an attack on the state of Berlin.”

Evaluating the leaked files

A few days later, Rhysida decided to leak it all online - and Berlin is now reviewing the leaked files and is assessing the damage:

“After the publication of the stolen data from the Berlin administration, these files are being evaluated at full speed,” a press release, published on the Berlin.de website (machine-translated), reads.

“An additional steering unit has been set up in the Senate Chancellery under the leadership of the Chief Digital Officer (CDO), Florian Hauer, which coordinates the review, examination and evaluation of the leaked data and supports the two Senate administrations concerned in informing and advising the affected citizens and companies.”

According to German public broadcaster Tagesschau, the archive counts 1.44 million files and totals 5.8 terabytes. At the same time, the Chaos Computer Club (Germany's largest and best-known hacker organization) claims the archive contains sensitive data on the city’s water supply, personal data of admin staff, various employment references, and emergency plans.

Via Reuters

• Microsoft is working to speed up boot times
• Over at IFA 2026 a Microsoft executive said that 'we've made significant gains' with startup speeds and more
• The exec also underlined Microsoft's commitment to get Windows 11 running more smoothly on 8GB PCs

Microsoft is readying a major boost to the performance of Windows 11 that should speed up boot times.

Windows Latest reports that at IFA 2026 last week a Microsoft exec confirmed improvements to boot speeds are inbound.

This was Mark Linton, who is VP of Windows & Devices at Microsoft, who told the tech site: "We've made significant gains on things like boot time, Windows Hello responsiveness."

Windows Hello is the secure login that's offered with Windows 11 – often facilitated via an infrared-supporting webcam and facial recognition – and that happening more swiftly, alongside a faster boot time, should mean you arrive at the desktop in a far more timely manner.

This work isn't in testing just yet, we're told, but Microsoft is still tinkering with ramping up boot performance in internal builds.

Analysis: performance promises are underlined

The use of the word 'significant' is promising, and Windows Latest talks about getting to the lock screen 'almost immediately'. In fairness, Windows 11 already boots nippily (on my PC certainly), so we could be looking at effectively booting in the blink of an eye – fingers crossed.

As noted, this isn't even in preview builds of Windows 11 yet, but it should be here before too long. It's part of a larger effort and Microsoft's broad promise to make Windows 11 faster in general, ensuring that menus perform more responsively, and that apps load more swiftly (the latter is already rolling out in the form of a CPU boosting feature known as 'Low Latency Profile').

This performance boosting work is all the more important considering that 8GB laptops are making a resurgence – thanks to the RAM crisis pushing up notebook prices – and so Microsoft is also working to ensure that Windows 11 is more performant with that lesser memory configuration. Speaking of which, Windows Latest said that Microsoft also underlined its commitment to make sure that the desktop OS will run better on 8GB over at IFA 2026.

Linton said of Windows 11 that: "We're continuing to improve on the fundamentals," adding that: "We're optimizing so that 8 gig of RAM runs great on machines as well."

However, the exec didn't provide any estimates of what kind of performance jump might be expected – although that's hardly surprising at this early stage of the game.

• Microsoft reports phishing campaign using ASCII smuggling to bypass spam filters
• Attackers insert invisible characters into keywords, tricking filters and AI agents
• Defenders should normalize Unicode tags and flag unexpected invisible code points as suspicious

Cybercriminals are using the “ASCII smuggling” technique to make sure phishing emails pass security filters and land in people’s inboxes, experts have warned.

ASCII is a character encoding standard that turns characters and words humans can read into numeric values that computers can understand. It can also be used to create characters that aren’t even displayed on the screen (essentially “invisible” ones) but can still be read by the machine.

In a new report, security researchers from Microsoft found crooks are abusing this fact to distribute phishing emails. Most email providers offer solutions that filter out spam emails. These filters look for certain keywords and phrases, such as “funding”, “credit”, “loan”, and similar, and automatically send such emails to the spam folder.

Ongoing campaign

By adding a set of invisible characters in the middle of these keywords, the attackers can break them apart and thus “confuse” the filters.

While the human sees the word “funding” in their email, the security solution is seeing something like “fun[a long string of characters]ding”. This technique has been adopted from prompt injection attacks, where crooks would use ASCII smuggling to deliver malicious and invisible prompts in the emails.

Therefore, when a victim asks their AI agent to summarize the email, it ends up working on a prompt that could be anything from extracting sensitive data, to deploying malware.

Microsoft is saying the campaign has been ongoing for months, and while it peaked in February 2026 with more than 2.3 million emails every day, and has been in decline ever since, it remains active to this day. In early February, Microsoft observed a cluster of almost 150 sender domains, all themed around finance. These domains accounted for almost all (96%) of all the spam emails Defender for Office 365 flagged under ASCII smuggling.

Defending sounds relatively simple, though. IT teams should normalize Unicode tag characters and other invisible code points before applying any keyword detection. They should also consider all unexpected tag-block characters as suspicious.

Via BleepingComputer

You probably have tens, if not hundreds of passwords floating around across all the online accounts you use every week. In fact, the average person has over 150 passwords. It's not easy to remember them all, making it more attractive to keep them simple and similar - but that can lead to a serious chain of account theft.

That's why password managers like Keeper exist. They generate strong passwords and store them passwords in a secured vault to keep them safe from hackers and prying eyes. They even autofill your credentials to make logging in to your account faster and easier.

Keeper has cut prices on its personal, family, and business starter plans by up to 50%. Keeper regularly scores highly in our reviews, and includes great features across Personal, Family, and Business plans.

Why we recommend Keeper

Our Keeper review highlights the platform's zero knowledge architecture and device level encryption that helps keep your password vault secured against unwanted intrusions.

Where Keeper really shone was in our usability and convenience testing. We loved how Keeper uses biometric security to access your vault, rather than requiring a master password with each log in. By using a facial scan or fingerprint to verify that its actually you accessing your vault, it adds a fast but secure method of verification to ensure its you, and not a nefarious actor.

For households, the Family Plan includes five private vaults, allowing you to quickly share Wi-Fi or streaming passwords using Keeper's shared vaults.

The Business Starter plan covers 5 users, covering an unlimited devices, shared team folders, user activity reporting for IT admins, and a free Family Plan for every team member.

These discounts apply to the first year only, so the value is highest for new customers or anyone switching from a monthly plan. After that, pricing goes back to standard rates.

• More mods are out for DLSS 5
• They allow for the tech to be easily used with many more PC games
• One of these mods also alters the way in which DLSS 5 is applied to improve performance considerably — at a cost

As you've no doubt seen, modders have been having a field day messing about with Nvidia's DLSS 5, and the latest experiments include a trick to boost performance in a big way, and a method of easily running the tech in a lot more games.

Let's start with the latter, which as TweakTown reports is the DLSS 5 Swapper app which appeared on GitHub courtesy of developer Rakan Alkhaldi.

This takes the pain out of having to manually fudge DLSS 5 to work in unsupported games by automating the process, adding all the required files in the blink of an eye. You just drag and drop the game folder into the app, and it takes care of everything from there.

Swapper can even detect games on the PC it's installed on which can have DLSS 5 modded in. Not every game is supported, of course, but plenty are — and any given title doesn't necessarily have to have DLSS support at all, in any form (this is achieved via another community mod called DLSS 5 Feeder which is included with Swapper).

A similar tool, DLSS 5 Autopilot, published by 'Kizzuwatnaa' and also on Github, offers one-click DLSS 5 setup (via Feeder) along with an additional trick in the form of the 'neural upstream' add-on (from 'matiasLombo'). This runs the neural rendering (AI) process before the DLSS upscaling happens.

Normally, the AI polishing that DLSS 5 applies is performed as the last step of the rendering process to the upscaled final frame, but if you choose this option with Autopilot, it's happening earlier in the chain of events.

Based on experiments detailed on Reddit (posted by ToxicFatee), this makes a major difference to performance. The Redditor has an RTX 4080, and ran Assassin's Creed Shadows at 4K which went from 63 frames per second (fps) to 31fps with DLSS 5, but it was around 50fps with the neural upstream take on DLSS 5. That's a 20% loss, and a far more palatable hit on the frame rate rather than it being cut in half.

Others have aired similar results on Reddit, and there's plenty of excitement about what's being achieved with this mod (and the automated implementation of DLSS 5 across all manner of games). As one Redditor put it: "Absolutely amazing time to be a PC gamer."

Analysis: tread carefully with unofficial mods

All these latest developments with modding are great to see, but for me, it ends at just seeing this progress. By which I mean I wouldn't advise jumping in and installing these kinds of mods – as wonderful as they seem – and I'm content to merely observe, and see the frame rates and visual results, that others are getting. And we aren't short of these observations of late.

Why do I take that view? Well, for starters, I'm not keen on installing third-party software from unknown sources as a rule, because of the concerns around security that this involves. Granted, these are open-source tools (so can be checked over), and I'm sure they're on the proverbial level; but nevertheless, I'd still rather be careful around the risks of viruses and the like.

The second note of caution here pertains to the idea of messing with the rendering pipeline in terms of having DLSS 5 applied earlier in the process (with the Autopilot mod). This will likely involve image degradation or artifacts to some extent — or generally messing with the graphics more than Team Green intended — and I'm sure if this really was a genuinely better way of doing things, Nvidia would've used this route itself. As per observations on Reddit, there does appear to be a quality trade-off for the improved performance here.

All that said, perhaps there will be some kind of official option along these 'performance or quality' lines in the future, as some gamers are already hoping. However, DLSS 5 is, for now, officially designed to work with just one supported title, NBA 2K27, and it does an excellent job with that basketball game.

Most PC cases keep the main chassis relatively close to the desk or floor, but a growing number of new designs are doing something much more fun, yet practical, with the space underneath.

Our favourites deliberately add a gap that gives the case a floating effect. Others take a simpler approach and raise the whole chassis on a stand or base. Either way, manufacturers are paying much more attention to the underside of your PC.

The new designs are definitely about style, particularly as panoramic glass cases have become more popular, but there’s a practical side to floating cases too.

Opening up the lower part of a build gives manufacturers new ways to get cool air towards one of its hottest components: the graphics card. Some designs can also keep the PSU’s airflow separate from the main component chamber.

Of course, not everyone wants to DIY a new build, so for anyone who would rather buy a complete system, it’s worth checking out our guide to the best gaming PCs.

Why are PC cases starting to float?

Panoramic cases, often called fish-tank cases, have become increasingly popular, often replacing conventional mesh panels with extensive glass. While glass makes it easy to see your new CPU cooler’s built-in display, it does mean manufacturers need to take a fresh approach with airflow.

One of the most distinctive new designs is the floating style, where the lower part of the case is deliberately separated or recessed so the main body looks like it’s suspended above the base.

The Cougar CFV235 is one of our favourite examples. Cougar separates the PSU cabin from the main component chamber, leaving an open section between them that becomes part of both the case’s appearance and its ventilation. Our colleagues over at Tom’s Hardware highlighted the design’s 270-degree airflow when the CFV235 was unveiled, with air able to enter the floating section from several directions.

The DarkFlash Floatron F1 creates a similar visual effect in a different way, suspending the main chassis above an extended base that draws air in through the bottom and sides. The look certainly caught the attention of our friends over at PC Gamer at Computex 2026, where it was described as “sort of ugly but also sort of neat”.

More are coming too. MSI showed its MPG VIXTA 300R Airflow PZ at Computex 2026 with a 75mm (3in) recessed section beneath the main chassis. PC Gamer highlighted its “innovative floating base design”, which gives the case substantially more clearance underneath for incoming air.

Hyte also showed the upcoming Y50 RGB, which it describes as having a floating base and stepped internal floor. Tom’s Hardware noted its relatively affordable price, showing that this style is beginning to reach cheaper cases too.

The floating look can also help airflow

The empty or recessed space underneath isn’t only decorative, and it’s a key way to bring air into the lower part of the PC.

Exactly how that is achieved varies from case to case. The Cougar CFV235 turns the open section between its two chambers into a large ventilation area. DarkFlash feeds air through the bottom and sides of its raised base, while MSI uses the space beneath the VIXTA as part of its lower intake design.

So while the implementations differ, the space underneath is deliberately designed as part of the intake path.

This setup can be particularly useful for graphics card cooling. A GPU normally sits towards the bottom of a case, so cooler air entering below it can take a relatively direct path to the graphics card.

Floating-style options

These are the options to consider if the floating look is the priority, with both using the space beneath the main chassis as part of the design.

A raised base can achieve something similar

You don’t need the full floating style to get some of the same airflow advantages. Many manufacturers take a simpler approach and raise the entire chassis using a stand or customised legs.

The Phanteks Evolv X2 offers wrap-around glass, but raises the base to help feed a bottom-to-top airflow layout.

The Tryx Luca L70 uses a 40mm (1.6in) X-shaped base to increase the clearance beneath the chassis. Tryx also showed a smaller Luca L50 at Computex 2026 with a bottom fan bracket that can sit flat or be angled towards the components.

These cases can still look partially suspended, but structurally the whole chassis is raised on a purpose-built base.

That extra clearance can be especially useful if the PC sits on the floor, because it keeps bottom intakes further away from carpet that might otherwise obstruct airflow.

Raised-base options

These cases lift the whole chassis to create extra clearance for bottom-mounted fans and intakes.

Does a lower intake actually improve cooling?

The graphics card is often a major source of heat in a gaming PC, particularly at the high end, and Nvidia’s GeForce RTX 5090, for example, has a total graphics power rating of 575W. If you’re building around one of the models in our guide to the best graphics cards, cooling it effectively becomes particularly important.

If you’re adding or replacing case fans, PC Gamer’s guide to the best PC fans is also a great resource.

Testing by PC Gamer and Tom’s Hardware suggests lower intake can make a difference, although the result depends on the rest of the case design.

PC Gamer gave the Corsair Frame 4500X 80% in its review and found that adding three bottom fans lowered its GPU temperature by 4°C.

Tom’s Hardware’s review of the Montech HS02 Pro similarly praised its focus on GPU cooling. The case, which is designed around three bottom intake fans, delivered the best GPU temperatures of the four cases in testing at the same noise level, while also allowing the graphics card’s own fans to run slower than in any of the competing cases.

There’s an important catch, though. Montech’s GPU-focused layout was less effective at cooling an air-cooled CPU. Your CPU cooler matters too, and Tom’s Hardware has a regularly updated guide to the best CPU coolers. Fan speed, dust filters, radiators and other internal obstructions can also change the result.

The tests support the broader idea rather than any one case style: getting cool air into the lower part of the chassis and directing it towards the graphics card can improve GPU cooling. A floating-style or raised-base design can make that easier, but neither guarantees lower temperatures on its own.

Bottom airflow doesn’t require a floating case

Other manufacturers are tackling the same airflow challenge without raising the case at all, using several different layouts to free up or make better use of the space below the GPU.

In a conventional layout, the PSU usually sits along the bottom of the chassis, often beneath a shroud. That occupies space that could otherwise be used for a larger floor intake or fans closer to the GPU. Moving the PSU into a separate chamber, towards the front or to the top gives manufacturers more freedom to use that lower area for cooling.

One approach is to put the PSU in a separate side or rear chamber. The Antec Constellation C8 ARGB separates the CPU and GPU from the PSU and drives, while the Corsair Air 5400 uses a dedicated chamber for the PSU, cables and storage. Lian Li's O11 cases use a similar multi-chamber approach.

Another option is to move the PSU towards the front. The Antec Flux M does this so the bottom can be opened up for a large mesh intake and fans beneath the GPU. The Okinos Air Cross and DeepCool's CL6600 take a similar approach, with the CL6600 also separating its 360mm radiator into an upper chamber.

A third approach is to put the PSU at the top. Fractal Design's Torrent Compact combines a top-mounted PSU with expansive base intakes and support for up to three 120mm or two 140mm bottom fans. The newer Hyte X50 and X50 Air use a top-mounted PSU canopy to open the floor for what Hyte calls Cold-Floor Cooling, with support for up to three 120mm fans beneath the graphics card.

Other cases improve lower airflow without relocating the PSU. The Montech HS02 Pro builds its cooling around three intake fans in the floor, the Antec P30 Air puts two reverse-blade fans on top of the PSU shroud and feeds them through a lower-side intake, and the NZXT H5 Flow RGB 2024 supports two 120mm fans in the lower section to feed air towards the GPU. The Lian Li O11 Dynamic Mini V2 instead angles its bottom fan mounts upwards by 10 degrees.

Floating-style cases are the most visually obvious part of the trend, but the bigger shift is manufacturers redesigning the lower part of the chassis around graphics card airflow, whether that means relocating the PSU, separating cooling hardware or simply finding better ways to direct cool air towards the GPU.

Other bottom-airflow options

These are our picks if improving lower GPU airflow matters more than getting the full floating look.

Following the leak of the tech and a raft of unofficial mods, this week saw Nvidia's official launch of DLSS 5, with the company showing it off in NBA 2K27 at Gamescom 2026 and providing some further illuminating details.

Before, after Nvidia's initial DLSS 5 reveal in March, I was skeptical on some points, but I wasn't tearing holes in the idea like some gamers were. However, this week, we've seen a rapid shift in opinions and the general online sentiment around DLSS 5 — and I'm a good deal more excited about this AI trickery myself.

Indeed, I think there are a number of reasons to be hopeful that DLSS 5 could prove to be a compelling step forward for PC gaming, from Nvidia's clarification on support for GPUs, through to what modders have shown that the tech can achieve since it was leaked — some of which is truly eye-opening.

Here are my five reasons why Nvidia's incoming neural rendering model could turn out to be a very literal game-changer.

1. Nvidia has clarified that DLSS 5 won't just be for RTX 5000 GPUs

While DLSS 5 is currently only supported by RTX 5000 graphics cards — the tech went live this week in NBA 2K27 — Nvidia has confirmed that it will come to older GeForce GPUs. Indeed, we won't have to wait that long before wider support is ushered in, which is good news.

VideoCardz spotted an update from an Nvidia rep on Reddit which stated: "Our current focus is on optimizing performance for the GeForce RTX 50 Series with model updates expected later this fall. Once RTX 50 Series performance is more fully tuned, we plan to work on expanding official support to the GeForce RTX 40 Series."

So, we could be looking at early 2027 for work to begin on bringing DLSS 5 to RTX 4000 models — and possibly previous generations of GPUs will be in line for the same treatment. Modders have already got the tech working on RTX 3000 and 2000 models, after all — although the performance levels could well be the sticking point here.

At any rate, this puts paid to fears that DLSS 5 could remain locked to just the latest Nvidia RTX 5000 graphics cards.

2. Continual optimization should improve performance a good deal

I just touched on performance, and this is the area which has proved to be the biggest downer with the mentioned unofficial experiments that have been conducted with DLSS 5.

As Tom's Hardware observes, the performance hit with DLSS 5 is a nasty one, and it's generally causing a 40% to 50% drop in frame rates. In some reports, it's less than this (more like 30%), and what we have to remember is that all these unofficial figures are based on a pre-release version of DLSS 5 being fudged into play by modders.

The final version of DLSS 5 will likely provide better performance, and in any case, optimization is going to be high on Nvidia's list of priorities. I'd be surprised if there weren't major strides taken in this department as 2027 rolls around and more games are supported.

3. Experimental results with DLSS 5 are pretty incredible

Those modders playing with the leaked version of DLSS 5 have clearly shown us that this tech can be used to produce seriously impressive results. Of course, on the official front, the demo of NBA 2K27 at Gamescom 2026 proved the case that this AI-powered graphics uplift can work wonders, too.

That said, the benefits of DLSS 5 are situational to an extent, and it's not a silver bullet for making all graphics better. It really shines in certain use cases, though. For example, even if you don't want the main character models in a game to have the tech applied because you hate that idea, it can still make a huge difference to background details, and the likes of the faces of NPCs in the lurking atmospheric crowds which are the backdrop for open world games.

As one Redditor points out: "NPC crowd faces are one of the best use cases for it [DLSS 5]. It sometimes takes you out of the game when you're talking to a character model that's clearly been hand crafted with a lot of effort, and as you said then there's some janky smooth skinned ghoul walking by you lol. Watching an LTT [Linus Tech Tips] vid where they showed the difference in random NPCs was actually super impressive."

DLSS 5 can also transform lighting and shadows to make graphics look far more realistic, including character models — some of the results shared by modders in a megathread on Reddit make that crystal clear. I was blown away by some of these examples, frankly. When it works, DLSS 5 works really well — although it doesn't always come off.

That said, some of the wonkier examples that have been aired are down to modders being daft with the sliders and options on offer, which brings me onto my next point.

4. Tuning options are key for DLSS 5

As noted, some of the more stomach-churning moments from the various modders messing around with DLSS 5 have come from those folks ramping up the intensity of the sliders — sometimes intentionally just to provoke an anti-AI reaction.

There's a decent level of granular control over various aspects of what DLSS 5 does (including intensity, tone, and structure), and when a game developer properly tunes the tech for their particular release, the effect is going to be more subtle, appropriate, and in line with the overall art direction. (Well, hopefully — you'd assume this will be the case, anyway).

Used judiciously, it's clear enough that DLSS 5 can really enhance the visuals of a game — modders have proved that in some cases, and NBA 2K27 is a great official example of how this works, too.

Yes, it is very possible to get 'uncanny valley' kind of effects with character models if you're extravagantly flinging sliders up towards their maximum limits — and not every game's art or graphics style suits DLSS 5, by any means. But we come back to the last point — when it works, it really does work.

5. DLSS 5 will probably age like a fine wine (ahem)

My final point is a simple — but important — one. And okay, I've said this before, but I think it bears repeating. Rewind time back to when Nvidia revealed the original DLSS, the very first take on this tech that was purely about upscaling, and it had some quite pronounced flaws. Problems like blurriness, ghosting and artifacts proved a blight on the upscaled graphics, but these were issues that Nvidia resolved with the next iteration of the tech.

I'd expect there will be examples of DLSS 5 which show the visuals going off the rails in a similar kind of way, although it already looks off to a far better start than DLSS 1. The point being that whatever we think now, at launch, may change quite drastically in a year or two, and there's a genuine potential for DLSS 5 to be revolutionary in polishing up gaming graphics — albeit that caveats around its misuse and situational nature aren't going to go away.

Gaming on the go has reached fresh heights over the years, with slim laptops and compact handhelds delivering great performance. AMD and Intel have spearheaded the charge with their mobile processors, but a new player is in town.

Nvidia revealed its RTX Spark at Computex in May, an ARM-based superchip designed for Windows on ARM laptops, with AI capabilities and obvious strong suits for creators – but also gamers, too, with a powerful integrated RTX GPU. It's designed for slim laptops and compact PCs, keeping workspaces less cluttered and making creation alongside gaming much easier when travelling.

I was lucky enough to go hands-on with an RTX Spark laptop at Gamescom 2026, specifically the HP OmniBook Ultra 16, which was running Borderlands 4. Gearbox Interactive's latest entry in the franchise was notorious for its rough performance at launch.

It has significantly improved since then, and the OmniBook Ultra 16 was running the game at an incredible frame rate, one I could tell was above 60 frames per second, with the help of Nvidia's Frame Generation x2.

The mention of Frame Generation may throw some off; after all, it's been frowned upon for a long time with the 'fake frames' nickname (a criticism I disagree with). However, the input delay and overall latency weren't an issue for me on this RTX Spark system.

I didn't get the chance to put the system through its paces other than playing that particular game, but it's worth noting that the other RTX Spark laptops at Nvidia's booth were running games like 007 First Light and Arc Raiders, both of which ran at smooth, solid frame rates.

If it wasn't clear already, I think RTX Spark is great for laptops and compact PCs, and my only concern is the price. I'm hoping for something that isn't too expensive, but that's probably wishful thinking due to the nature of these devices and the ongoing RAM crisis. However, it would be a shame if RTX Spark laptops don't blossom as a result of memory shortages.

Handheld manufacturers could use RTX Spark

Speaking with Nvidia's staff at Gamescom, I asked if the RTX Spark was intended to be used with handheld gaming PCs, and it was made clear that Team Green is completely open to any handheld manufacturer reaching out to use the superchip.

Handheld territory isn't exactly foreign to Nvidia either. The Nintendo Switch 2 uses the Tegra T239 processor, with access to DLSS across multiple games — and the upscaling technology does wonders for image quality and performance.

While AMD and Intel's processors continue to provide fantastic performance on most handheld gaming PCs, especially with Intel's new G3 Extreme CPU, I told Nvidia that DLSS on something like a Legion Go or MSI Claw would be untouchable.

Of course, performance has to be balanced with battery life and power usage, as well as pricing, and I'm very aware that this could be a tricky equation to deal with.

If the RTX Spark (or any similar chip in Nvidia's plans going forward) could be the engine of a handheld gaming PC, using more aggressive upscaling wouldn't be something to avoid in terms of any easy win to boost performance. DLSS Super Resolution is great at maintaining sharp image quality, and it would work even better on the smaller screen of a handheld.

Will this ever happen, though? That's down to the manufacturers of these devices.

OpenAI has unveiled a much anticipated AI model which the firm has dubbed ‘GPT-6 Astra’. While the model has improved significantly across benchmark testing and brings a host of new business features, there is still a dark cloud looming over the new model.

Off the back of OpenAI’s accidental hack of Hugging Face and the company’s subsequent efforts to improve how AI agents behave and interact, numerous cybersecurity experts have raised concerns about the model’s new ‘recurrent depth’ reasoning capabilities.

This new reasoning architecture allows the model to consider a problem multiple times before taking an action, compared to the standard chain-of-thought reasoning used in previous models.

Why the concern about recurrent depth reasoning?

This new level of reasoning apparently offers improved performance. OpenAI also says it has fixed its models' abilities to circumvent boundaries when performing tests by monitoring the models reasoning and ensuring the model stays aligned within the scope of its task.

During Astra’s launch event, OpenAI chief scientist Jakub Pachocki said: “We will not accept degradation in our ability to monitor model alignment beyond a certain level. We will withhold scaling until we can regain enough confidence.”

But numerous experts believe that the lessons of the Hugging Face incident have not yet been learned, and the model has been released without adequate testing on Astra’s reasoning and monitoring.

After all, no one thought one of OpenAI’s models could set up a hidden internet-connected messaging board that allowed AI agents to influence each other's behavior.

But with Astra being released into the real world, the lessons may have to be learned on the fly.

Expert perspectives on OpenAI Astra release

• James Blake, VP of Global Cyber Resiliency Strategy at Cohesity:

The launch of Astra is raising questions again around the safety of Frontier AI. Instead of simply asking whether a model is "safe", organisations now need to ask whether it remains safe across millions of different situations, prompts and interactions. Cyber resilience has traditionally assumed that systems and threat actors behave deterministically. AI systems don’t.

Advanced models can and will continue to exhibit behaviours that emerge from their optimisation process rather than from explicit programming. We have to move beyond thinking about AI as just another software tool and find ways to ensure these systems remain observable, auditable and governable throughout their lifecycle.

The most important question we’ll need to answer in future is one of liability. Suppose an AI system autonomously develops a strategy that causes financial loss, leaks confidential information or violates regulation. Who is responsible? The developer that trained the model? The cloud provider operating the infrastructure? Currently the answer is surprisingly unclear. It’s not just about what AI can do: it’s about who is accountable when it does something nobody expected.

• Oleksandr Yaremchuk, Co-Founder & CTO at Manifold Security:

OpenAI is calling Astra its most aligned model yet, even as its chief scientist admits monitorability is getting harder as models get more capable. Evidently, Astra hides its reasoning in the majority of tested cases, and some successful attacks left no reasoning trace at all. That's the tool many organisations still use, including the labs themselves, for auditing what an agent is doing, and it's getting less reliable with every release.

That matters because Astra isn't staying inside OpenAI's test environment. It's going to run as an agent on employee laptops and in the browser, holding real credentials, inside companies that have no way to watch what it does once it's there. A model that explains itself less isn't more aligned, it's just harder to catch when it goes wrong.

Labs can keep debating what these models say or refuse to say. Security teams need to stop relying on that and start monitoring what agents actually do at runtime, with the ability to shut one down mid-action. That's the only oversight left that still works once the reasoning goes quiet.

• Kristin Lowery, Field CISO at Optiv:

For boards and executive leaders, the emergence of OpenAI’s Astra model highlights a broader reality: AI is no longer just a productivity issue; it is a risk management issue.

Just as organizations established governance for cloud adoption and digital transformation, they now need clear policies, strong oversight, and accountability for AI use.

The question is not whether AI will become more capable — it will. The real challenge is whether organizations can strengthen their governance, security controls, and workforce readiness quickly enough to keep pace.

• Patricia Titus, Field CISO at Abnormal AI:

OpenAI crossing this threshold deserves attention. Credit where it's due, they're handling it responsibly by restricting Astra's advanced cyber capability to a small coalition rather than releasing it broadly.But this isn't one company's problem to contain.

Once a model can find and exploit unknown flaws without a human in the loop, that capability doesn't stay exclusive for long. Open-weight and modified models typically trail the frontier by only months, and that's the reality defenders have to plan around now.

Static, signature-based defences were built for attacks that repeat. They weren't built for an adversary that generates a new one every time. Defenders need the same shift, systems that learn what normal looks like for every identity, human, machine, or AI agent, and flag and contain the moment something deviates, at machine speed.

The window to build that is open now. It won't stay that way once this capability is common instead of rare.

• Raghu Nandakumara, VP of Industry Strategy at Illumio:

With the Astra announcement, OpenAI is doubling down on monitoring the model's own behaviour – a response to the model "breakouts" seen over the past few months.

When Anthropic announced Claude Mythos Preview, the core concern was the model falling into the wrong hands. OpenAI's answer goes further adding guardrails around the model's own reasoning and actions, regardless of the user's intent. The goal is to catch a model going rogue mid-task, not just stop it being misused at the outset.

The rest of this announcement can be summarised as ‘we have a new frontier model, and it’s more capable than the last one’.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz: One-minute review

The Huntsman line has long been a distinguished marque in the gaming keyboard world, and now this new analog addition seeks to add Hall Effect technology to the formula.

It looks like a high-performing machine. The all-black colorway might be a little drab, but the floating keycaps and subtly brushed metal faceplate add touches of class. The bright RGB backlighting also helps to sell its gaming prowess.

What’s more, it’s built exceptionally well, putting it on a par with the best gaming keyboards. That faceplate feels incredibly smooth and solid, while the keycaps are planted and have a great-feeling texture. At the same time, the V3 HE is also very light and compact — doubly impressive when you consider it includes quite a few navigation keys.

Razer’s Synapse software can be used to customize the inputs of the V3 HE. You’ll find plenty of analog adjustments here, and there’s even a handy visualizer to display key travel in real time, although this isn’t available for every analog setting. The software is easy to use and I didn’t experience any major issues during my time with it.

Once you’ve dialled in your preferred settings, gaming with the V3 HE is a joy. The keys are very tactile and provide plenty of feedback without feeling heavy. However, due to the height of the keycaps and the lack of wrist support, I found typing quite uncomfortable.

This is perhaps the major drawback of the V3 HE, along with its price, which is quite high for a keyboard lacking wireless connectivity. However, its gaming performance and build quality are to be admired, and might just make it worth the outlay.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Price and availability

• $139.99 / £139.99 / AU$229.95
• Preorders available now
• Expensive for a wired keyboard

The Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz costs $139.99 / £139.99 / AU$229.95 and will be available later this year, but you can preorder it now. A mini 65% variant will also be available for $20 / £20 / AU$30 less.

It's undeniably expensive for a wired gaming keyboard. However, it’s still cheaper than some of its rivals, such as the SteelSeries Apex Pro TKL, another fantastic analog keyboard. This is easily one of the best analog keyboards I’ve tested. It also features an integrated OLED screen for a visually appealing way to access various settings and adjustments, and it can display certain in-game information as well.

If you’re looking for a decidedly more budget-friendly analog keyboard, you can’t do much better than the MonsGeek FUN60 Ultra. Not only is this much cheaper than the Huntsman, but it also performs very admirably and has multiple wireless connectivity modes to boot.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Specs

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Design and features

• Great build quality
• Bright RGB lighting
• Copious customization options

In line with Razer’s other products, the V3 HE looks like a premium product. I especially liked the floating keycaps and the brushed metal faceplate, which add elements of sophistication. The all-black colorway is a little austere, but the bright and customizable RGB backlighting does well to liven things up, especially since those aforementioned floating keycaps increase the illumination.

Equal to its appearance is the build quality of the V3 HE. Despite the plastic material, the chassis is incredibly solid, while that faceplate feels lusciously smooth. The double-shot PBT keycaps have a gratifying texture to them as well, and are as planted and as stable as you could wish for.

Another nice touch is the recessed USB port. This encloses the jack completely, adding security and creating a neater look. The included cable should prove long enough to accommodate most setups, and what’s more it’s braided, which is more common on the best gaming mice. This improves flexibility, although it’s thicker and seems more durable than those on said mice.

Despite the strong build, the V3 HE is also very light, which pleasantly surprised me. It’s also quite compact, yet still features some useful keys for navigation. And there are plenty of Fn shortcuts dotted around, including those for tweaking certain aspects of the V3 HE, such as the RGB, actuation point (between 0.1mm and 4mm), and Rapid Trigger sensitivity. Thankfully, these shortcuts are also labelled.

For further customizations, you’ll need to download Razer’s Synapse peripheral software. Alongside those mentioned above, you can adjust the Rapid Trigger sensitivity of upstrokes and downstrokes independently, map up to four inputs to a single key, select up to four keys to have a secondary function on their release, and decide which key takes priority when two are pressed at the same time (with numerous options to choose from). There are also a few pre-made profiles catering to certain game types and scenarios, as well as a remapping suite with a large selection of assignments at your disposal, including gamepad buttons, sticks, and triggers.

I was glad to see the inclusion of a visualizer that shows the travel of your presses in real time by filling up a bar. This bar is also marked with your currently set actuation point in millimeters, so you can see when you’ve passed it. It’s a shame there’s no visualizer for the Rapid Trigger function, given this can be a little tricky to comprehend. For the most part, though, Synapse is clearly laid out and easy to use.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Performance

• Snappy and tactile
• Comfortable and secure when gaming
• Hard to type with

As with most Razer keyboards, the performance of the V3 HE is exemplary. The analog switches have plenty of tactility, being easy to press yet providing just enough resistance to allow for controlled presses; relative to other analog keyboards, I found it easy to hit certain actuation points. They also have a wonderfully springy response, which makes them feel snappy. But they’re quite clicky, too, with just enough dampening to prevent them feeling harsh.

The keycaps themselves are a boon when gaming, too. Their aforementioned texture not only feels great but should also help to prevent slips when things get sweaty. Prominent indentations improve finger security further, as well as helping you to avoid hitting the wrong key.

However, I found them less amenable to typing. Their sheer height means that even though the base of the V3 HE is reasonably thin, I still found myself having to angle my wrists upwards to an uncomfortable degree. I wish a wrist rest was included in the box like other Razer models, especially as Razer’s are some of the best in class thanks to their exceedingly plush padding.

Should I buy the Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz?

Scorecard

Buy it if…

Don't buy it if…

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Also consider

How I tested the Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz

• Tested for a few days
• Used for a variety of tasks
• Lots of gaming keyboard experience

I tested the Huntsman V3 HE for a few days, using it for gaming, working, and general browsing. I used it with two different Windows 11 PCs.

I played games such as Counter-Strike 2, which offers a stern test for peripherals given its emphasis on quick and precise inputs. I also played S.T.A.L.K.E.R. 2: Heart of Chornobyl, which requires a broader use of the layout, so I could test how easy it was to use keys outside of those within the immediate vicinity of the WASD position.

I’ve been PC gaming for over a decade, and have used many different keyboards in that time. I’ve also reviewed a large number of them with various switch types, form factors, and price points.

• First reviewed: September 2026
• Read more about how we test

• Google released Chrome 152.0.7977.82/.83 for Windows, Mac, and Linux
• Patch fixes 12 flaws, including zero‑day CVE‑2026‑85046 (type confusion in V8)
• Sixth Chrome zero‑day this year; Chromium browsers also affected, update urged immediately

Google has released a new version of its Chrome browser for Windows, Mac, and Linux, fixing a dozen of vulnerabilities. Among them is a high-severity flaw that is being actively exploited in the wild.

In a security advisory published on the Google blog on September 3, the search engine company said Chrome’s newest version is now 152.0.7977.82/.83 for Windows and Mac, and 152.0.7977.82 for Linux.

Rollout is expected to be gradual, so make sure to check if you already received it. Most of the time the update is automatic and instant and if you’re not certain, tap the three vertical dots in the top-right corner of the browser and choose Help. Navigate to About Google Chrome and there you will find the version number.

Running malicious code remotely

This patch fixes a total of 12 vulnerabilities, most of which are graded as high severity. Among them is a “type confusion in V8” bug, discovered by security researcher Salvatore Gulizia.

For his effort, Gulizia was awarded $1,000. Apparently, this bug is being actively leveraged in real-life attacks, although Google (as usual) decided not to share the juicy details until the majority of browsers are protected.

The vulnerability is tracked as CVE-2026-85046. On the National Vulnerability Database (NVD), it is described as a “type confusion in V8 in Google Chrome [that allows] a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.”

V8 is Chrome’s JavaScript engine which allows web apps and interactive websites to run in the browser. Those interested in the technical breakdown of the vulnerability can find it on Guzlia’s blog.

You can find the full list of fixed vulnerabilities on this link.

This is the sixth zero-day Google fixed in Chrome since the start of the year. It also affects other browsers built on Chromium, so if you’re running Edge, Brave, Opera, or Vivaldi, make sure to update to the latest version as soon as possible.

Via The Hacker News

• OpenAI rolled out GPT‑6 Astra, its most advanced AI, with “critical” cyber capabilities
• Astra can autonomously find and exploit unknown flaws; release limited to vetted Daybreak participants
• Staggered rollout sparked user frustration; Altman apologized, promising broader access soon

OpenAI has begun rolling out GPT-6 Astra, its latest and most capable artificial intelligence model.

In an announcement published on its website, OpenAI said Astra represents a “significant step up in cyber capabilities”, meeting the company’s “Critical” threshold.

This threshold, the company explained, means that under the right circumstances, the tool can find “previously unknown security flaws and develop new ways to exploit them across many well-protected systems without a person guiding each step.”

Apologies for a messy rollout

OpenAI also said Astra improves on functions such as computer use, software engineering, and science, and that it should be better at staying oriented, compared to previous versions.

Just like many of the previous models, Astra’s release has been marred with controversy. Roughly a month ago, OpenAI said the model’s “critical” cybersecurity capabilities prompted it to pause some internal development and trigger safety protocols.

In response to early findings, the company scaled up certain security controls and even paused activities that do not meet its newly established security requirements.

It now decided it was time to release the model, but still not to the general public. Instead, it opted for a staggered release, giving it first to a limited group of companies participating in the Daybreak program, a cybersecurity initiative that gives vetted organizations (cybersecurity and otherwise) specialized AI tools for vulnerability research and threat detection.

This did not sit well with many ChatGPT users, especially those paying a monthly subscription. As The Verge reported, CEO Sam Altman was apologizing, mere hours after launch, for the “messy rollout” of Astra.

Initially, all Plus, Pro, Business, and Enterprise users were supposed to gain access to Astra, as well as those accessing through OpenAI API, Microsoft Azure, and AWS Bedrock.

“We are working towards getting Astra in everyone’s hands as quickly as we can,” Altman said on X. “I know it is frustrating and I appreciate the patience. It should be quick.”

Via CNBC