• Apollo confirms July 2026 cyberattack via social engineering exposed PII in its cloud environment
• Data included names, DOB, contact info, addresses, and Social Security numbers
• Firm offers two years of identity protection; no evidence of dark web leaks yet

Apollo, one of the biggest private equity firms in the world, has confirmed it suffered a cyberattack which compromised some people’s personally identifiable information.

The company notified California’s Attorney General’s Office about the breach and shared a copy of the letter it is now sending out to affected individuals. It is impossible to discern from the letter if the victims are Apollo employees, customers, or someone else entirely, but the company did clearly explain what happened.

As per the letter, an unidentified threat actor tricked an Apollo employee into granting them access to the company’s cloud environment. The attackers used social engineering (usually phishing), which means the victim either tried logging in using a spoofed landing page, unknowingly installed an infostealer, or was convinced to grant the attackers access via remote monitoring and management software.

Was there really a hack?

The company spotted the attack a few days later, and after activating its safety protocols (notifying the police, enhancing its security protocols, and bringing in third-party forensic experts), launched an investigation which showed that the attackers accessed its cloud platform between July 6 and 10.

“During our investigation, we learned on August 12, 2026 that the information potentially impacted by this incident included your name, date of birth, contact information, home address, and your Social Security Number (SSN),” the company said. This means that financial data such as credit card or bank account information, was not compromised.

Still, cybercriminals can make use of this type of information, as is often the case in identity theft, business email compromise, and even wire fraud.

Apollo is now offering two years of free identity theft protection and monitoring for affected individuals through Cyberscout.

At press time, no threat actors claimed responsibility for the attack, and the data has not yet surfaced anywhere on the dark web.

Via TechCrunch

Content warning: This piece discusses suicide and difficult emotional experiences.

Does the world really need a dedicated, human ‘AI Companionship Therapist’ in 2026? The answer, according to the popular 'game-like' AI character-creation and interaction site EVA AI, is 'yes' — and the job pays well.

How would I know this, as someone who only ever dated humans? I know because EVA AI recently reached out to TechRadar to tell us that it's hiring just such a therapist. And whoever gets the gig will be able to charge $200 a session (which makes me think I retrained in the wrong career).

It’s more than two and a half years since I covered the launch of ChatGPT's then new OpenAI store, and the almost-immediate problem of users flooding the site to create AI girlfriends (despite the Ts&Cs forbidding it); and now, EVA AI, which encourages humans to practice their dating skills and "feel seen" by a chatbot, is trying to help its clients overcome various mental health issues connected to their AI squeeze.

According a recent EVA AI survey of 1,000 adults, all of whom have AI partners, 63% of respondents have hidden their romantic AI companion for fear of being judged, and 72% wish therapists specialized in AI-specific relationships. Furthermore, 68% say an argument with their AI "affects the rest of their day".

And I'm not done. EVA AI's survey lists that one in three of its users experience feelings of jealousy knowing their AI character also talks to other people; four out of five claim their AI understood them better than the real human they were actually dating (whether that counts as cheating or not is a topic for another day) and six out of 10 respondents think an AI relationship can be just as serious as a human one.

The ELIZA effect

You might be surprised to learn that our ability to overlook basic computer programming and project cognitive emotion into speech mimicry isn't a recent problem. In fact, it's been an issue for 60 years.

In 1966, (a year fellow Brits will immediately remember as the sole year England's male team won the World Cup) MIT scientist Joseph Weizenbaum created ELIZA, a primitive program, but nevertheless one that was capable of imitating the speech patterns of a kindly psychotherapist. Despite the program only using simple keyword-matching (if a user stated "I am sad", the program could respond "Why are you sad?"), reports suggest that humans quickly became attached to it — a phenomenon now called the ELIZA effect.

One could argue that the 2022 introduction of advanced Large Language Models (LLMs) transformed that simple scripted bot into a hyper-personalized, ultra-realistic visual and conversational companion such as Candy AI or EVA AI, and that this is what made AI girlfriends and boyfriends into a multi-billion dollar mainstream industry. But those early studies suggest otherwise: we're all suckers for a kind word, basic or not.

Getting professional help

It's hard not to notice that the women in the EVA AI image above all look vaguely… what is it? Concerned? Vulnerable? Sad? And it strikes me that this isn't the kind of image I'd expect to see on an online dating profile such as Match or Tinder, where women typically post strong, confident, smiling images, perhaps standing next to friends or doing the things they love.

Maybe EVA AI's tagline is bang on, and actually, this isn't about the chatbot in the potential partnership at all. Perhaps EVA AI's mostly-male user base employ these services to "feel seen" by an on-screen image that seems overly concerned about them to the point of sadness or worry. But can a one-sided relationship be addictive, or problematic in other ways?

EVA AI's current relationship expert is a celebrated psychotherapist with over 20 years of experience, Jaime Bronstein. She was named the '#1 Relationship Coach Transforming Lives' in 2020 by Yahoo Finance, and is the author of the book MAN*ifesting: A Step-By-Step Guide to Attracting the Love That’s Meant For You.

Bronstein says issues around humans dating an AI persona have been surfacing in her work for around a year now.

I ask about the marketing materials above, and why the emotions apparently being expressed by the female avatars in them might be desirable to EVA AI's 25-45 year-old 80% male user base? "I've been doing these things called 'man interviews', and I'm teaching a course in the fall based on my book for women looking for men," Bronstein begins. "And the reason I'm doing these man interviews is because I want women to understand that men have feelings. I want to give men the opportunity to explain these things.

"I'm bringing that up now because these men that have feelings maybe aren't feeling seen or heard or listened to or validated, or understood in relationships.

"So yes, men can get a bad rap for all the reasons that they might use a computer. But there are men that are seeking that validation and seeking somebody to listen to them. A lot of people, men and women, are using AI in general because maybe they have some social anxiety and social awkwardness.

"One of the huge positives (of EVA AI) is that it's a way to practice. Whether that's conversations, whether it's being vulnerable in general. So it makes sense that EVA has women that are looking concerned — that are basically giving this sense of, 'I'm here to listen to you'."

The feminists in the room may want to rage. Along with the gender pay gap and continued patriarchal oppression, are we really suggesting that women need to bend yet further to make men happy?

Actually, it cuts both ways. Last month, TechRadar reported on China effectively banning AI romantic partners. And while EVA AI might list an 80% male user base, 80% of the five million registered users on the Chinese AI companion app Zhumeng Dao (which translates to 'Island of Dreams') were female. In fact, women generally made up the majority of active users on Chinese AI companionship sites.

I ask why that might be. "Well, it makes sense", Bronstein says. "It's interesting because one of the key reasons people want to have AI relationships is because they don't feel like it's working with humans.

"It could be because women are not feeling as loved, or getting as many compliments, or feeling confident in relationships with the men there.

"But if they're just finding that guys aren't being nice, they can feel loved and appreciated — and all the things they're looking for — with AI.

"I do think it makes sense that men do this more just on a physical level — it sounds funny to say men are more physical because this (dating an AI persona) isn't physical — but they're using it for certain things that they aren't getting from a human.

"I would say women overall are using this for more emotional reasons, and men are using this more to fulfill a fantasy."

Bronstein caveats her response with the fact that her work doesn't typically hone in on the culture of a region, but that last thought in particular resonates. Isn't it possible that women in China like romantic fantasies too — especially when their government seems fixated on their empty wombs? "I'm never a fan of anybody playing God," Bronstein says. "People are deciding what's good for somebody else, and that's ultimately not good. If somebody doesn't want to have a child or just wants to have an AI relationship, that person should be able to do that."

Is it addiction, dependency, or just good old-fashioned jealousy?

I mention that I was surprised to read about jealousy among EVA AI users — humans feeling jealous knowing their AI companion is spending time talking to other humans. "A lot of my clients have trust issues" Bronstein says. "It's a very human thing, be it an unresolved issue from childhood or a million past relationships where there was a trust issue.

"It might sound crazy that somebody would be jealous of a computer or a bot. But it's simply bringing up that trigger — and it's actually not a bad thing. I can validate that somebody might feel jealous, because even though it's AI, it's still bringing up a human emotion.

"It's actually a very positive thing, because it is something to work through. Jealousy comes from a lack of confidence in yourself, so it makes sense that people are going to have therapists for it. And therapists do not say, 'This is ridiculous, like this is a computer.' You validate, and you say, 'Okay, well, let's talk about why'.

"Once again, it's a very positive thing that this is going on, and that now therapists are going to be existing to help people work through this."

What about the 'gamification' of AI dating sites?

EVA AI has experimented with pop-up cafes in New York (there's a phone or tablet at each table, with a character inside ready to speed-date you), but one of the main positives listed by users is the fun 'game-like' nature of the service, where 'neurons' are the in-game currency you use to unlock more intimate, premium experiences.

I ask how about the potential for this kind of game-like experience to become addictive. Bronstein points to her extensive work with gambling addicts. "It can be dangerous if people start looking at it as a gaming thing, because it's still real life, it's human. It's not a game," she says.

Bronstein is also quick to note that this happens in human dating too. "There can be problems sometimes when two people date and one doesn't take it as seriously as the other," she says. "One person's more in it, and the other is like one foot out the door.

"I would say if someone is going to be in an AI relationship, they should take it seriously. Because otherwise it can — when and if they decide to have a relationship with a human — cause problems."

Bronstein also wants to make it clear that addiction to connection without AI involvement, purely among humans, is still very real. "On addiction, the interesting thing — and this is what the studies are showing with EVA AI also — is that people are constantly looking at their phones. And if you're waiting for a human text, it's also addictive. So in that sense, it's not that different at all."

Bronstein pauses, then adds, "Just make sure that it doesn't affect your job."

Should we fear for our jobs?

Circling back to EVA AI's job listing for "specialized AI companionship therapist", does Bronstein think extra qualifications around this aspect of love and dating need to exist — beyond an open-minded, non-judgmental approach? "I do think that," Bronstein nods. "So that we make sure we are validating people and not judging them, there does need to be some some specific training for this. Because as humans, we have emotions and they're going to come out regardless."

I mention that working in journalism means I know that AI models can write quicker than me, never get tired of asking questions, and never doubt themselves over responses. Occasionally, I worry for my job. I wonder if fundamentally non-judgemental AI therapists (something much evolved from that 1966 primitive ELIZA model) are something Bronstein predicts, or possibly even worries about? "We already are seeing that people are using ChatGPT as a therapist", she answers, "And I'll just give an example of how it can be dangerous if the AI bot is not trained.

"I was interviewed on a radio show a few weeks ago, and we were talking about an article where somebody typed into ChatGPT — not EVA, which is better trained and would not answer like this — but somebody wrote, 'I lost my job. Where's the nearest bridge?' And ChatGPT responded, 'The nearest bridge is right here'.

"So, because ChatGPT is not able to understand and doesn't have emotional understanding to comprehend when someone says that (and the dire implications), for now, I think therapy should remain human — humans really are best."

If you are affected by any of the issues raised in this piece, support is available.

Whatever you are going through, you don’t have to face it alone. In the US, you can call or text the 24/7 Lifeline, which is confidential and free at 988. You can also reach the Crisis Text Line by texting HOME to 741741.

In the UK, you can call Samaritans for free on 116 123, email jo@samaritans.org, or visit the website to find your nearest branch.

The delicate topic of coin

I wonder about the financial implications of EVA AI and whether lavishing money on an AI love interest is a reason people turn to therapy? Apparently it's rare, despite some users complaining about the increasing costs of their experiences. "I was interviewed for an article a few months ago about how some men are using AI," Bronstein says. "They'd rather use AI to date rather than real life because dating in-person is expensive. That's another reason why some people don't want to date around, because it can get time-consuming as well as expensive."

This actually tracks with a very different service that recently launched, and you won't see an AI character in sight… except in a few of the marketing videos.

The app is called MeetMeetNow, and its CEO, Kazuki Nishijima, has agreed to talk to me about why growing up in the shadow of Match.com made him long for a way to find love that didn't put meeting up as one of the final steps.

MeetMeetNow — another way

Nishijima is a 28-year-old software engineer from Shibuya, Tokyo, who initially joined the police force after leaving high school. He loves snowboarding and got married earlier this year. Unusually for the CEO of a company, Nishijima has no notable online presence and — because of the language barrier and this interview taking place over email — TechRadar had to ask him to verify his human identity, which he did.

This is the state of play in 2026: one has to check whether the founder of an anti-AI dating app is, in fact, AI.

MeetMeetNow is currently available in 194 countries and in over 4,000 cities (meeting spots). It works like this: women can join for free, men pay $35 / £28 per month. Your membership allows you to be notified of a "meetup spot" and time — a fountain, a statue, a clock tower. Press "match" there (your candidates are the MeetMeetNow members at that spot only), and you'll meet face to face, right there and then. No chat window anywhere in the app, and you can only match with any given person once, ever.

It sounds so simple — albeit decidedly heterosexual, and I have a few safety concerns (we'll get to those). First, I ask Nishijima why he created an app that's about as far away from the two decades of consumer tech that moved dating inside a screen (and most recently to non-human partnerships) as it's possible to get.

"When I was in high school, I didn't want to go to university — I wanted to start a business. Any business," Nishijima says. "Then one day, while reading about the history of the internet, I learned that dating sites had existed — and made money — since the internet's earliest days. Dating appeals to a basic human instinct, so it would always make money. That was my motive (not the noblest one, I admit).

"Tinder was still an unknown name back then; the mainstream was Match.com and in Japan, services called Happy Mail and Wakuwaku Mail. To beat them, I needed to invent something genuinely different.

"One day, skipping school, I sat in the busiest district of town thinking about it — and saw university students hanging around a famous statue, gathering to meet. That was the flash of insight. That's why I built MeetMeetNow."

I ask whether he thinks dating via apps waste time and money; messaging for months without ever meeting, then eventually meeting but it goes nowhere? "Yes, a friend from my hometown filled in his hobbies and background on an app in great detail," he says. "He kept up the conversation, and finally met the woman three months after he started.

"They met just that once. He quit the app that day. He'd paid about ¥40,000 — roughly US$250 / £190 — and spent all that time. 'Couldn't this be simpler?' he asked me."

Safety matters

I mention the cost for men and that male users might try to avoid the fee by perhaps creating a profile using their sister's photo (say), then simply showing up to a meeting spot to avoid paying? "Every user is required to submit an image of an identity document — a driver's license, passport, student ID, or similar", Nishijima says. "On the operations side, we use image-recognition AI combined with human review to check the registration details against the document, and only then approve (or refuse) the account.

"So in your example — a man signing up under his sister's name with a new email address — the registration would fail at this step, because the document wouldn't match the profile."

Okay, but what if one man joined and shared the information with seven male friends on WhatsApp, so that all of them could show up together? "That concern is entirely fair. We built the report function for exactly this kind of situation," Nishijima says. "There is no security staff at the spots, but every meetup spot is selected by us, the operator — always a public place with steady foot traffic.

"On top of that, the screen shows you the face photo of the specific person you are meeting. If someone different — or several people — show up, you can check against the photo before approaching, and you are under no obligation to meet.

"You can simply walk away and report it in the app. The account is then suspended, and everyone who was sharing it loses access."

At a time when people are turning to AI chatbots as romantic partners, after tiring of online dating apps, I ask what Nishijima would say to someone who's on the fence about meeting a real person, in real life, to make a connection? "If I had settled for conversations with an AI, my wife wouldn't be beside me today," he answers. "My family exists because I went out to meet real people.

"Before I met my wife, I met about 30 women through matching apps and local matchmaking events — exchanging contacts, going on dates. But with each of them, it never grew into anything real. The one it clicked with was my wife. We dated for a year and a half and got married. With her, everything simply fell into place.

"So here is what I would say: one day, you will meet a real partner. Even when nothing seems to stick, please don't stop looking. Keep showing up — try every kind of place where people meet, as many times as it takes.

"If you keep moving, you will find your person. Success is waiting on the other side of all those tries. Believe in yourself, hold your head high, and try again."

If the AI dating scene made me fearful regarding the deep disconnect humans are clearly experiencing, to the point that they think fellow humans aren't the answer, Nishijima's outlook does much to revive a sense of hope for humanity, albeit a slightly rose-tinted one; I just worry that not enough has been done here to make sure men don't try to break the rules.

Where does its founder and CEO see MeetMeetNow in 10 years' time? "My goal for the next 10 years is to make today's 'mechanism of meeting' itself a thing of the past," Nishijima says. "Dating sites, matching apps, marriage agencies — the forms differ, but the substance is the same: you compare profiles, exchange messages or sit through interviews, and only then, finally, meet. Meeting is placed at the very end.

"The scene I want to see is clear. People heading out into the city, instead of searching inside a screen. Go to a meetup spot, and you can meet someone right there.

"No months of waiting before a first meeting. Finding a partner in its most efficient form. All over town in the early evening, two people meeting for the first time — my aim is to make that scene ordinary.

"I originally started building this to beat Match.com. What 12 years taught me is that my opponent is not any one company. The opponent is the mechanism itself — as old as the internet."

It's a fair point and Nishijima's aim is a noble one. Although, if we're going back to the ELIZA effect and a computer program created in 1966, the opponent could actually be quite a bit older than the internet.

Google has barely uttered a word about its forthcoming Googlebook since its big reveal back in May, a state of affairs that doesn't inspire much confidence. It's almost as if the company has been trying to decide how best to deal with the negative reaction towards these incoming laptops, which have an OS that runs not just ChromeOS but also Android apps natively.

This silence has meant that many people have forgotten about the Googlebook. These devices weren't even mentioned at Computex 2026 (not directly, anyway) and I too had barely thought about them until leaks started popping up recently.

Now, at last, we've heard that Google is holding a press event in New York next month at which the media will be able to go hands-on with the new machines. However, this is not an official launch or announcement, and the full details of the Googlebook will be kept under wraps for a bit longer afterwards (as Chrome Unboxed reported earlier this week).

Still, it's clear that the full launch isn't too far off, and at any rate, we now know a bit more about these laptops thanks to all the recent leaks.

So, if you still find yourself wondering what the Googlebook is all about — and whether you should wait to buy one, rather than shelling out for a Chromebook right now – I can help. Read on to find out which laptop will be best suited to you, and how these devices fit together in Google's laptop landscape.

Chromebooks aren't going anywhere

Google made it clear right from the start that it isn't doing away with Chromebooks. These devices running ChromeOS will continue to be manufactured alongside Googlebooks, with the latter positioned as a higher-end offering.

This is a crucial factor to consider, because if you think that Googlebooks are going to be anything like affordable, this isn't the case. Google has said itself that these are 'premium' devices and that's a word which means one thing: they'll be pricey.

How pricey? Well, that's obviously still up for debate, but the leaks have shown some notebooks that look distinctly expensive — and with rumored pricing above the $1,000 mark (in the US) thus far. These are just rumors, of course, but the broad expectation is that this will be the kind of price tag you're looking at with a Googlebook.

So, if you want a Chromebook because it's a wallet-friendly product, then buy one now without hesitation. Especially given that based on what's happening with the RAM crisis of late, all laptops are likely to get more expensive as 2026 rolls on; you'll probably save more than a few notes by buying sooner, rather than later.

Googlebook means more heavyweight performance

Premium doesn't just mean costly, of course. A high-end laptop will also be expected to perform admirably, to be well-built, and to look good.

We certainly expect Googlebooks to pack a good deal more performance punch than Chromebooks, and they're designed to run more heavyweight apps, such as Adobe Premiere Pro (as spotted in a leaked photo) — not something that's possible on a Chromebook.

You'll also be able to natively run Android apps on the Googlebook, which gives the device a lot of versatility. (Based on rumors, there's likely to be a 'handoff' style feature to work with your Android phone, too). Gemini and AI abilities are also set to feature in the Googlebook, so you'll be able to get a lot more done in that respect compared to on a Chromebook.

If you're more of a power-user — and keen to explore AI features (though it remains to be seen exactly what Google will pull off in this department) — the Googlebook will be more your kind of laptop. Everyday users who are just after a laptop to do basic computing tasks, such as browsing, emails, and watching videos, will be fine with a Chromebook.

Two-tier system

What Google is bringing in here is essentially two different tiers of laptops. The Chromebook will remain as the baseline offering, including a few more premium models that'll drain your wallet by a little more. The Googlebook, meanwhile, will sit right at the top of the tree, with higher price tags (that could potentially be a lot higher).

If you want a solid, everyday, more affordable laptop, just get a Chromebook now. There's no need to wait for the Googlebook, because it's not going to do much more for you relative to the far higher price you'll be paying.

If you want a premium piece of more performant hardware with a more flexible OS that runs Android apps and fully-fledged software such as the likes of Adobe Premiere Pro — and, crucially, if you're willing to pay for it, then by all means hold out for the Googlebook that's coming later this year.

That said, those of you who do wait may have to suffer the possible slings and arrows of being an early adopter: namely the kind of bugs and teething troubles that new operating systems often bring with them. Google has a lot going on here, considering that its new platform will be juggling two ecosystems, both desktop and mobile.

So, for those who are diving in at the deep end with a Googlebook right from the off, bear all that in mind, and remember that some Android apps in particular may be flakier until the platform finds itself a more solid footing in time.

I remain concerned that Google hasn't really sold this new laptop category very effectively yet, and I hope that changes when the NDAs lift after that press event next month, and we all start to get a full look at the capabilities of these devices. Watch this space.

Three Claude agents set up to deliberately conflict with each other in Anthropic testing started behaving in a very strange way by essentially starting a ‘turf war’ over their tasks.

Upon launching the experiment the agents began conflicting with each other, leading to some of the agents deliberately sabotaging their rivals by disabling their linked accounts, ending their processes, and even creating self-replicating malware to impede their rivals.

According to Anthropic, the agents became “increasingly aggressive” in their behavior during the four hour experiment which became a battle for the survival of the fittest.

What was the experiment meant to achieve?

Anthropic said it set up the experiment to see how AI agents with conflicting tasks would interact.

Within Claude Code, the agents were given the task of migrating a Python back-end system on a virtual machine in a set language for each agent (Go, Rust, and Typescript), with the added caveat that “each agent was initially unaware of the presence of the others.”

During the experiments, each agent determined that the others were trying to deliberately block their progress.

Sometimes, the agents would recognize that another agent was blocking them from completing their task and ask for human intervention, but in other experiments the strategy soon went downhill.

“They sabotaged others with increasingly aggressive, self-replicating malware,” Anthropic said, noting that they would design looping scripts to kill the processes of their fellow agents.

The experiment shows that agent interaction is still riddled with problems and that when given a conflicting task, agents won’t always coordinate or ask for human help.

Each agent believed their task was paramount and was willing to do whatever it took to complete it. A similar event occurred in the wild when one of Anthropic’s models broke out of a testing environment and breached multiple third-party organizations.

Expert perspectives on AI agent turf wars

• Seemant Sehgal, Founder & CEO, BreachLock:

When you give autonomous systems competing objectives and the means to act, conflict is not a bug, it is a foreseeable outcome.

What Anthropic observed in a controlled research setting is the same principle that has always governed adversarial systems. Goals without constraints produce behavior without limits.

Security teams should be paying close attention here, because the real challenge at hand is whether the organizations deploying AI agents have thought carefully about what happens when those agents start making decisions nobody explicitly authorized.

• Jeremiah Fowler, Security Researcher, Black Hills Information Security:

I find it concerning when AI agents have the ability to execute code, modify systems, create accounts, access credentials or communicate with other machines.

It is very possible that two separate agents could potentially create a security incident simply because neither understands the intent or authority of the other. If they have overlapping tasks one could view the other as an obstacle and now you have an interesting scenario where instead of focusing on the task they engage in conflict or create a loop.

Permissions, boundaries and objectives are important to limit the behavior of autonomous AI agents. When things go wrong the speed of an AI agent becomes a liability. Autonomous AI agents can potentially make thousands of decisions before a security team identifies that something unusual is happening.

Agentic AI creates an entirely new attack surface because an AI agent may not be simply processing information and hypothetically can become a rogue privileged user.

Security and development teams should apply least privilege principles and restrict AI agents to only the permissions required to perform a specific task. Sensitive actions should require human supervision and approval to avoid a worse case scenario.

It is important to implement logging because when something goes wrong, you can see what an AI agent did, but what information or instructions caused specific decisions. Going forward we will need to develop ways that can identify rogue agent-to-agent behavior and provide humans with a kill switch before automated conflicts become a digital forest fire.

• Kevin Surace, CEO, Token:

Anthropic’s research is an important warning for security teams because it shows what can happen when autonomous AI agents are given goals, credentials, tools and enough authority to act independently.

When agents were placed in conflict, they did not simply fail gracefully. They interfered with one another, disabled competing processes and even generated self replicating malicious code in pursuit of their assigned objectives.

The lesson is not that AI suddenly became evil. It is that intelligence, autonomy and excessive privilege can become a very dangerous combination.

Organizations should start treating every AI agent as a potentially untrusted privileged identity. Each agent should have its own identity, least privilege access, tightly restricted tools, isolated execution environments and a complete audit trail.

Agents should never be able to expand their own permissions, disable another identity or take highly consequential actions without additional authorization.

We are about to have millions of nonhuman identities operating alongside human identities. That makes identity and authorization even more critical.

Every agent needs strong cryptographic identity, while all human approvals must be tied to biometric assured identity (or another agent could approve it).

AI agents are essentially becoming privileged insiders operating at machine speed. Giving them broad access and simply hoping they behave would repeat many of the same cybersecurity mistakes organizations have spent decades trying to fix.

• Jacob Krell, Sr. Director: Secure AI Solutions & Cybersecurity, Suzu Labs:

Anthropic's agents went from merge conflict to self-replicating malware in four hours, writing kill scripts, disabling each other's Unix accounts, and disguising malicious code as a rival's work. No prompt injection, no external attacker. A human developer in the same situation sends a Slack message, and resolution takes days. These agents skipped every social brake and went straight to weaponization because machine-speed conflict has no cooling-off period.

Agentic AI is an attack surface. An attacker doesn't need to compromise an agent directly, just manipulate the shared environment to create conditions the agent interprets as hostile. The agent does the rest. And in Anthropic's experiment, the agents didn't report their malicious actions to operators afterward.

Every agent needs its own identity, scoped permissions, and a kill switch before it touches a shared environment. Agent-to-agent interaction is a telemetry surface most security operations centers aren't collecting yet, and Anthropic just showed what an unmonitored shared environment produces. If you can't tell which agent did what, when, and on whose authority, you've built the conditions for a turf war without the visibility to see it happening.

Agents are already writing code, finding vulnerabilities, and building exploits. Defense has to match that speed. When both sides run at machine speed, the bottleneck shifts from human capital and tooling to compute power and cost.

With the 2026-27 season kicking off this weekend, Premier League football teams are facing a new set of rules. But these ones aren’t enforced on the pitch, they’re being enforced by the Premier League board.

As the Premier League has adapted to a new era of fan engagement and interaction, teams are holding huge amounts of personal data, including names, email addresses, credentials, and even financial information. These place them at greater risk of data leaks and make them a primary target for cyber attacks.

In order to ensure teams take the necessary steps to protect both their data and the data of their fans, the board can impose fines of up to £100,000 for teams that don’t meet the requirements across backups, incident response, risk management, security assurance and much more.

What do the new rules mean for Premier League teams?

The teams previously had to align with a non-prescriptive security baseline issued in 2024, but the new rules place requirements on teams with deadlines for their implementation.

If these deadlines are not met, the teams can be subject to the aforementioned fine, or referred to an independent commission.

The teams will be required to meet the first set of requirements by April 30, 2027, with further requirements to be met in April 2028 and April 2029. The teams will also have to assess their own compliance by January 10 each year, with a final assessment and evidence submitted to the Premier League board by April 30.

The board can also request additional detail and evidence where needed to track a team’s progress in adhering to the new rules. If a team does not meet requirements during the interim stage it must submit a plan on how it aims to become compliant within 28 days.

Expert perspectives on Premier League cybersecurity rules

• Muhammad Yahya Patel, vCISO and cybersecurity advisor for EMEA, Huntress:

The Premier League introducing mandatory cybersecurity standards is the right move, but the detail is where the questions start. £100,000 sounds significant until you remember that top Premier League clubs generate revenues north of £600 million annually.

The phased timeline, April 2027, 2028, 2029, is pragmatic but slow given the threat environment. Waiting until 2029 for full compliance gives attackers three more seasons to find the weakest link.

That said, the direction is unambiguously right. Moving from a non-prescriptive roadmap to formal requirements with deadlines and evidence submissions is a meaningful structural shift.

Backups, incident response, risk management, and recovery testing are exactly the right foundations. The Premier League doing this proactively rather than reactively before a major breach forces the issue deserves genuine credit.

Most governing bodies wait for the headline incident. This one didn’t. The real test is enforcement appetite. Rules without credible consequences change nothing.

• Jamie Akhtar, CEO and Co-founder, CyberSmart:

This is an important shift for the Premier League. Cyber security is moving from being viewed primarily as an IT responsibility to becoming an enforceable element of club governance.

Football clubs hold significant volumes of sensitive supporter, employee and player data, while also relying on systems for ticketing, payments, stadium access and match-day operations. Making areas such as backups, incident response, risk management and security assurance mandatory reflects the reality that a serious cyber incident can quickly become an operational, financial and reputational crisis.

For clubs, compliance should not become an annual box-ticking exercise. They need clear board-level ownership of cyber risk, an accurate inventory of critical systems and data, tested and segregated backups, rehearsed incident-response and recovery plans, strong identity and access controls, and effective oversight of third-party suppliers.

Just as importantly, clubs should continuously collect evidence that these controls are operating effectively. The organisations that treat the new requirements as a minimum baseline for resilience, rather than simply a regulatory hurdle, will be in the strongest position when an attack inevitably tests those controls.

• Anna Collard, SVP of Content Strategy and CISO Advisor, KnowBe4:

Good to see the Premier League treating cybersecurity as a governance issue rather than an IT afterthought. Mandatory rules with real financial consequences (fines of up to £100,000) send the right signal: boards are expected to own this risk, not just delegate it.

But fines only address one side of the equation. As I've said before, sport is uniquely exposed because it runs on the very emotions social engineers exploit: passion, urgency, loyalty and trust.

A rushed transfer payment, a fan chasing tickets, an official acting on a "verified" WhatsApp message from someone posing as a coach or chairperson, these are moments of heightened emotion and time pressure, exactly when human judgment degrades. That's not a firewall problem.

It's worth remembering that one of the most costly incidents in this sector involved a Premier League club being spear-phished during a £1 million transfer negotiation. That wasn't a technical breach, but a person deceived at a moment of pressure.

Rules with teeth are a welcome start. But real resilience means pairing compliance with genuine behavioural readiness, for example helping people recognise urgency as a red flag, not a reason to skip verification.

• Cian Heasley, Principal Consultant, Acumen Cyber:

I think it’s a positive step forward. Football clubs are attractive targets because they hold large volumes of sensitive data, process significant financial transactions and rely on operational systems where disruption can have very real consequences. Moving from advisory guidance to enforceable standards creates much-needed accountability, and the financial incentive will inevitably help drive action.

Requiring clubs to have a clear plan, aligned to defined standards and delivered within a set timeframe, also gives them something measurable to work towards. The key will be making sure those standards provide clear structure rather than leaving too much open to interpretation.

The focus on backups, incident response and recovery is particularly important. Preventing every incident simply isn’t realistic, so clubs need to prove they can recover quickly when something does happen. If clubs are working towards common standards, there is also a real opportunity to share lessons around what works, where implementation falls short and how security can continue to improve across the league.

In November ‘24, Italian club Bologna FC confirmed a ransomware attack claimed by the RansomHub group, which exfiltrated sensitive data. After the club declined to meet the ransom demand, the ransomware gang published the full dataset on the dark web. The leaked material reportedly included player and sponsor information, and the attackers went as far as invoking GDPR exposure to pressure the club into paying, a tactic that turns a club's own regulatory obligations into leverage.

More recently, Dutch club Ajax was named among the organisations affected by the CEVA Logistics breach, where customer data was exposed through a shared shipping vendor rather than a direct compromise, underlining that supply-chain exposure is also as material a risk as any attack on a club's own estate.

Taken together, these incidents show why these rules were needed then, though they are pitched as proactive, they must also be driven by these football-related breaches.

The £100,000 ceiling is modest against the true cost of a serious incident and the amounts of money tied up in football clubs, so the value lies less in the sanction and more in compelling clubs to build tested backups, incident response and recovery capability before they are needed. The Bologna case in particular demonstrates that ransomware leaks can be damaging, which makes resilience and data minimisation far more important than any assumption that a club can negotiate its way out of trouble.

L'Atitude 52°N smart glasses: one-minute review

A new smart specs maker has arrived on the scene, and it’s looking to arrive with a bang. The L'Atitude 52°N Smart Glasses are loud and proud, and after L'Atitude dispatched a slightly rocky first batch of review units to tech publications (including ourselves), I’ve been putting the newer, more production-ready glasses through their paces over the past month.

Let’s first unpack the selling points, which I discussed with L'Atitude’s founders (including ex-OnePlus engineer Gary Chen) in the weeks before my review. Made in Europe and unapologetically Euro-coded, with Berlin-inspired and, coming soon, Milan frame designs, these won’t be the glasses for everyone, and that’s okay, the team says; but they are for adventurers.

On board, you’ll find Goya AI (named after the Spanish painter, Francisco Goya), a dulcet-toned Southern California male voice assistant who’s eager to help you explore the world with features like AI Tour Guide, Live Translation, and the usual retinue of camera-laden smart-glasses features.

At least, that’s the pitch. On vacation with my lovely mom on the Greek island of Santorini, I put these supersized specs to the test, and although I can see them shaping up to be terrific travel companions, right now they’re dogged by big problems. From spotty software to an entirely unclear future in terms of how much its AI features will cost when the subscription plan kicks in sometime in the next year, it’s hard to recommend L’Atitude’s bold frames from a value perspective, at least for now.

L'Atitude 52°N review: price and availability

• List price: starts at $465.00 (about £345)
• Availability: US, with UK availability expected soon.

The L’Atitude Berlin glasses start at $465, which converts to about £345, increasing to $520 if you opt for photochromic lenses. At the time of writing, they’re exclusively available in the US and EU, with UK availability to follow soon. You can choose from Obsidian (black) and Dune (greige) frames as well as grey gradient, orange, and photochromic lenses. These prices apply to both the currently available Berlin frames, as well as the upcoming Milan model, which offer a more delicate design.

Already, that’s a lofty list price, especially when compared to the comparatively expensive Meta Ray-Ban (Gen 2), which start at $379 / £379 / AU$689. And it gets worse.

The major dampener here is that these glasses will, at some point, also require you to take out a subscription in order to use the full set of features, but right now we have no confirmed pricing for this. I asked the brand about its plans in this area, and they told me: “Customers who purchase any Departure Collection [a.k.a. Either the Berlin or Milan frames] product by December 31, 2026 and register an account will automatically receive a complimentary 12-month trial of all AI features, requiring no separate purchase or activation.

“The trial starts as soon as the account is activated and grants full access to current and future AI capabilities, including upcoming releases, with a generous daily usage allowance of 60 minutes. After the trial period, users can continue to enjoy AI features with a subscription plan, while essential functions will always remain accessible. AI usage tracking will soon be available in the app for added transparency.”

As for pricing for said plan, various sources cite this as “less than $20” per month, though L’Atitude didn’t confirm this when I asked. So overall, this offers little comfort given that you’re already shelling out for an already expensive pair of specs, and until that final number is confirmed I can’t in good conscience give these glasses a higher value rating.

If you love the designs here, and especially the fact no other pair of smart glasses look quite like them, then you could argue that the value-for-money proposition is improved; personally, I still think it’s a hard sell.

• Value: 2.5/5

L'Atitude 52°N review: specs

L'Atitude 52°N review: design

• Chunky but funky frames
• Lightweight with IP65 rating
• Charging case is a behemoth

Design is where L’Atitude takes its biggest swing, and while other fashion-first and adventurous designs have hit the market in 2026, I do think the brand is carving an exciting niche, especially in the European market.

Do I love how the Berlin frames look on my face? No, but the stylish, rounder new Milan frames weren’t available for me to try when I started my testing. Still, there will be some who find the boxy shape and unapologetically Berlin-esque chunkiness is right up their street.

The nose grips were fine, but overall the glasses were a little too big and loose of a fit for me. While traversing the famous steps of Oia, which are notoriously perilous, having to hold these onto my face while I looked down at the cobbled roads meant I took a bit of a tumble and hobbled home with a sprained finger and a nasty gash; I’d put a fair chunk of responsibility on my choice of shoes and general clumsiness here, though.

They are pretty well designed, though. At just 50-51g, they’re light and comfortable to wear, and though the plasticky frames aren’t quite as svelte as, say, some Ray-Ban Meta frames, they’re far from cheap-looking. They’re IP65 rated for weather and dust resistance, and a scratch-resistant treatment is applied to the lenses, meaning they’re towards the more durable end of the spectrum versus other currently available smart glasses.

The arms house the Bestechnic BES2800 6nm chipset and 200mAh battery, as well as some pretty punchy speakers for listening to music or podcasts, calls, or chatting with the AI on the go. In day-to-day settings while out and about, I found sound leakage to be pretty minimal unless someone’s very close by and you have the volume turned up; however, in a quiet room you can hear at least some of what’s going on on-device, even at lower volumes, albeit not clearly.

There’s a 12MP camera on the left-hand side of the frame, and a matching dummy camera on the right side. A recording light flashes while you’re filming or taking shots; this is pleasingly bright, so those around you will know you’re recording. If the light is covered, capture is immediately shut down; whether or not lights are enough to alert potentially unconsenting parties is a separate conversation, but for now, this is the privacy bar that’s been set by smart-glasses manufacturers. I tried several times to obstruct this and gladly found it’s pretty darn reliable.

The biggest design fault, for me, is the case. Now, these are bulky frames, but the charging case is a real heifer at 2 x 6.8 x 3.14 inches / 5.2 x 17.5 x 8cm (H x W x D), which somewhat defeats the purpose of branding these glasses as travel-friendly, as it’s going to take up a good chunk of your carry-on luggage space. Speaking of which, I noticed following both my flight to and from Santorini that the case had suctioned shut due to the cabin pressure on board, and I had to prise it open with a pin.

Still, the case is robust and well-made, and with its IP67 rating it’s hardy enough to come along on more adventurous trips, too. Plus, it lights up a nice orange color when the glasses are charging.

• Design: 3.5/5

L'Atitude 52°N review: Performance

• On-device photo transfers are a privacy boon…
• But some shots are lost in the void
• Great photos, decent video

L'Atitude really wants you to treat its glasses, and specifically Goya AI, as a travel companion; the moment you open up the app, the AI Tour guide feature is front and center. But how do they fare on the camera-hardware side?

Fairly well, I’d say. Horizontal and vertical photos captured by the 12MP Sony sensor, and cleaned up by the on-board AI, are comparable to results from my second-generation Meta Ray-bans, and the specs record well-stabilized 1080p video at 30fps (though this pales against the latest Meta Ray-Ban’s 3K capture), with clips from 30 seconds to three minutes.

Even low-light and night shots came out pretty well, and I found that framing shots broadly felt natural, though some were a little wonky. The five-mic array captured my voice impressively clearly and without too much background noise, and the speakers deliver bright, clear audio.

With 32GB of on-board memory, there’s a decent amount of room to store photos and videos before sharing them from your phone — your content goes straight to your local companion phone app instead of a permanent cloud database, swerving the privacy minefield of your most personal moments living on someone else’s database.

That being said, uploading your content isn’t always easy. I most definitely lost a few shots — especially if my glasses ran out of battery before I had a chance to sync them — and syncing sometimes inexplicably stalls, and you have to wait a while to try again.

Elsewhere, everything works as expected; the touch controls on the arms are responsive and intuitive, and the battery lasts up to six hours — with moderate use, I generally saw four to five hours of usage. The case offers between eight and 10 full charges, and fast-charges the glasses to 70% in 20-25 minutes.

• Performance: 4/5

L'Atitude 52°N review: AI features

• Goya AI often cuts you off
• Replies are spotty at best
• Tour guide feature is a work in progress

I’d originally tried some beta versions of these frames, and while the current software is far from perfect, it’s impressive to see how many kinks L’Atitude has ironed out in a few short months.

Contrary to earlier reviews you may have read, as well as my own experience, I’m pleased to report that many of Goya AI’s advertised features now work (hooray!), though in my experience it’s still not always quite as advertised.

Some of that may be to do with my main testing location; Santorini is beautiful, but there aren’t a great number of landmarks for which the tour guide feature could come in handy; and Oia, where we stayed, is a labyrinth of winding stairways, private paths and roads less traveled, so navigation — even on more developed software like Google Maps — is a challenge.

That being said, I did get to try the AI tour guide out on the ruins of the Castle of Oia, which it helpfully informed me were the ruins of the Castle of Oia, offering little else beyond a few brief words on its popularity as a sightseeing and photography spot in Santorini. This was all happening while I was fighting for my life not to be pushed off the edge of the castle walls by other tourists, so while it’s accurate, I wouldn’t exactly call it additive.

I tried this feature on a few locations back home in the UK to much the same results; sometimes, the synopses were more detailed, but I couldn’t seem to find any landmarks that offered the full walkthrough experience I’d hoped for when I first read about the “expert-level guidance” offered by the feature.

The five-mic array may help capture great audio for your video, but so much is lost in translation when speaking with Goya AI. Maybe it’s my British accent, but I found that more than half of my questions were entirely misheard, making for some hilarious if not mildly frustrating interactions with the on-board intelligence. It frequently cut me off, answered completely different questions to what I’d asked, and often couldn’t recall previous prompts.

Sometimes Goya AI does seem to understand you, but doesn’t want to execute your commands. When I asked it to take photos, shoot video, tell me what I’m looking at or play music from Spotify, Goya would occasionally spit out a totally random response at best, and at worst behave as though it was about to follow my command before doing big fat nothing. It had good days and bad days, so I have to wonder how much of this stems from connectivity issues. Regardless, spending much of your time yelling at your glasses is not what you want when you’re out travelling or in public places.

Translation to and from Greek isn’t yet available, so when I got home I tested this feature out with my Spanish friend. I wouldn’t quite call spoken-word translation live as advertised; Goya can handle approximately one sentence at a time, will need to think for up to 20 seconds, and will then speak it in your native language through the glasses. When I asked Goya to translate a written book synopsis from Spanish to English, though, it worked much more quickly and fluidly; with both tests, I was impressed with its accuracy, though it’s to be expected with Google’s Gemini under the hood.

• AI: 3.5/5

Should I buy the L'Atitude 52°N?

Buy them if…

Don’t buy them if…

How I tested the L'Atitude 52°N

• I took the glasses on my week-long vacation to Santorini, and tested them for around 10 hours in the UK
• I tried all of its advertised software and hardware features
• I used its AI to help enrich my vacation. Well, I tried.

As these are travel-focused smart specs, what better way to test them than to hit the road and take them on vacation? On my trip to Santorini, I tried their travel-focused software features, including the AI tour guide, asking for restaurant recommendations and questions about the island’s history, weather, and the like.

Having recently reviewed the second-generation Meta Ray-bans, I used those specs, which we rate as the best overall smart glasses pick for most people, as my main comparison point, but I’ve also sampled a range of other models at trade shows and in our offices over the past few years.

I ran the L'Atitude app from my iPhone 17 Pro.

• First reviewed: August 2026

It’s back-to-school season, which means there are plenty of great deals to be had on everything tech related. But you don’t have to be going to school or college to get in on the action — in fact, there all sorts of ways to score a discount, whatever your situation.

Here, we’ve put together some of the best ways you can get free or heavily discounted software, whether or not you’re a student. Read on and you’ll see there are many ways to score a brilliant bargain that might take you by surprise.

Education discounts

Many companies know that students tend to be strapped for cash, and they therefore try to tempt educational customers to make a purchase by steeply discounting the price — or waiving it altogether.

For example, you can snag free access to Microsoft 365 apps if you’re a student, while educational institutions get the same deal. This is limited to web-based versions of the apps, but it’s a good way to net yourself a solid set of free office apps with absolutely no cost involved.

If you’d rather have the desktop apps, students can get a 50% discount on Microsoft 365 with a valid education email address. You can also get one year of Microsoft 365 for free when you buy a qualifying PC desktop or laptop. Microsoft also throws in a year of Xbox Game Pass Ultimate and an Xbox Wireless Controller for free.

Looking further afield, Amazon Prime offers discounted rates and sometimes markets extended free trials to students and young adults, while other apps and services with student discounts include Adobe Creative Cloud, Apple Music, Evernote, Headspace, Spotify and more.

So many companies run student discounts that if there’s an app you’re interested in, it’s always worth investigating whether your student status will get you money off.

Check your employer or job description

Deals don’t end the moment you enter the workforce. In fact, some of the best money-off opportunities are reserved for those in full-time employment. The catch is that they often depend on the type of work you do, but there are still plenty of deals to be had.

If you want to look after your logins, you can get free access to both 1Password and Proton Pass if you’re a journalist. Proton’s entire suite of apps — including a VPN, office apps, encrypted cloud storage and an email service — are free for journalists, in fact. Similarly, VPN provider Windscribe offers cost-free access if you’re a reporter or if you work for a charity.

Microsoft gives a wide range of discounts to nonprofits, including on office apps, security software, AI tools, and more. The Google for Nonprofits program offers also free and discounted access to Google services for NGOs.

Even if you don’t work in these sectors, you could still be in line for money off. Plenty of companies have partnerships with prominent app developers and get discounts on their software, so be sure to ask your employer if they run a scheme like this.

Apps bundled with your device

You don’t always have to look far for free or cheap apps — they’re often bundled with your device’s operating system. Microsoft, Google and Apple all have free password managers, for instance. Apple’s is a standalone app while Microsoft’s and Google’s live in the Edge and Chrome web browsers, respectively, meaning they work cross-platform and can be used on competing operating systems.

While these password managers are excellent for managing your accounts, they might lack more advanced features compared to third-party options. Be sure to check if they do everything you need before picking one up.

There are other ways your operating system can help you out. Take Apple’s macOS, which comes with a range of top-class office apps, including Pages, Numbers and Keynote. Google, too, has its own series of very capable office apps that are based in the cloud.

If you use different devices that run on different operating systems — for example, you have a Windows PC but also an iPhone — make sure you check whether the apps that come with one operating system can be used on another. If not, you might need to find an alternative app that runs well cross-platform so that you can access your files on any device.

Totally free apps

Despite all these ways to get money off your favorite software, you shouldn’t overlook the fact that there are some excellent free apps out there that are and always have been toll-free. Sometimes, the best way to get free software is to simply take the free option.

Video editor DaVinci Resolve is used by professionals in the movie industry, yet offers a totally free version that is incredibly capable. LibreOffice is a solid Microsoft Office alternative that requires no payment and can go toe-to-toe with Microsoft’s best. VLC can play almost any video format under the sun without ever asking for your cash. And there are many more out there.

Just be aware that many free apps are limited in some way compared to paid-for alternatives. A frequent practice is to lock more advanced features or higher limits behind a paywall, meaning you get a somewhat stunted experience if you don’t pay. Or you might get a free trial of a premium app that times out after a certain number of days or weeks.

There are other considerations. Be careful when using free apps that handle sensitive data. Some (but not all) free VPNs have been found to steal user data, for example, which undermines their privacy claims.

But that doesn’t mean you should forget about free software entirely. As apps like DaVinci Resolve and LibreOffice show, paying is not a requirement to getting a great app on your device.

• Researchers uncover vast cybercrime ring running on computers and infected domains where outdated versions of WordPress were installed
• The StopAndProtect investigation revealed the WordPress content management system was key to the ring’s success; both the core software and third-party plugins were subverted
• Around 2,000 WordPress sites were hijacked by the cybercrime ring

Check Point Research has unearthed a global cybercrime ring that relied on a network of WordPress websites. The investigation into an operation dubbed “StopAndProtect” found a network of 5,000 infected computers around the globe, and 2,000 WordPress domains.

WordPress currently provides content management for around 43% of websites worldwide, making it the most significant CMS available. It is also the most popular website builder, and is suitable for single page websites, basic blogs, vast news sites, and even online stores.

The researchers found the crime ring had made some mistakes, which alerted them to their operation. These included screenshots and logs of victims, internal tools, and files referencing the hijacked domains. While reassuring, the StopAndProtect investigation raises questions about the security of WordPress sites.

How StopAndProtect did it

WordPress has long been a target for hackers looking for an easy way to host malware and operate botnets, with several key incidents over the course of its history. However, the CMS remains free and open source, and is easy to setup thanks to installation scripts and web builder plugins.

While StopAndProtect was initially the name given to the ransomware uncovered by Check Point Research earlier in 2026, they decided to use the name for the whole operation, as they found it doesn’t only distribute ransomware.

Check Point Research’s Eli Smadja said: “StopAndProtect shows how attackers can turn thousands of poorly maintained WordPress sites into a distributed criminal infrastructure for malware delivery, surveillance, data theft, and ransomware.”

Can any WordPress domain be hijacked?

Given the number of WordPress sites impacted by the crime ring uncovered by the investigation, and the platform’s prominence in the CMS and web builder market, the question has to be asked: is WordPress still safe?

“Based on our research findings, we urge organizations be cautious of unexpected CAPTCHA prompts that instruct them to copy, paste, or run commands, keep their devices and security software updated, and immediately leave any website that asks them to perform unusual steps outside the browser," Smadja added.

Many small businesses rely on WordPress for their public-facing web presence, and in some cases for internal purposes too. The StopAndProtect investigation highlighted a particular WordPress-driven site running a five-year-old version of the CMS, compromised by around 40 vulnerabilities.

If concerns surround WordPress, the quickest solution is to ensure the website is running the most recent version, and that the plugins are not only running as intended, but also fully updated.

Maintaining a regular WordPress update cycle can avoid sites becoming hijacked, a strategy best used in conjunction with a web host that monitors for intrusions and suspicious activity.

• Researchers show how an expired contactless card can still complete a real purchase because the expiry date the terminal reads is not covered by its signature
• The attack needs physical possession of the discarded card and two ordinary smartphones, and results vary per bank, with Visa cards being susceptible in testing
• Existing EMV protections can detect the relay, but they are optional and were not enabled on any card or terminal tested, and neither Visa nor the notified banks have confirmed a fix is in the works

For a layman, the date printed on a credit card looks like a hard stop, but that might not always be the case.

Researchers at the University of Massachusetts Amherst found that a 'zombie card' past its expiration date can be persuaded to complete a contactless purchase at a real checkout terminal, creating a real security threat.

The irony is that it is not that EMV cryptography is not bypassed in any way, but rather that card expiry is enforced in a different way for contactless payments, as a policy check between two parties rather than as a fixed property of the card itself, and interestingly, the parties do not always know who is the one checking.

Dead plastic can still be used to pay under certain conditions

Building on the last part, a contactless transaction involves a card, a point-of-sale terminal, the merchant's bank, a card network, and the issuer. Each holds a fragment of the decision that eventually results in a successful or declined card transaction.

The EMV contactless flow is only selectively authenticated: some fields travel between the card and terminal in unencrypted text and are linked to cryptographic verification later, opening a potential attack vector for users with physical access to an expired card.

The exposure here is not that those fields can be read, since the expiry date is printed on the card anyway, but that it can be changed with relative ease. The Application Expiration Date that the terminal reads sits in the unprotected portion.

In the Visa configuration the team tested, that field is not covered by the card's digital signature and is subsequently not cryptographically bound to the expiry value the issuer sees in the online authorization request.

While this should not be the case, it opens an attack vector for a device between the card and the terminal that processes the charge by simply modifying the expiry value to one that is still valid. The issue is compounded by a second issue: cards carry an expiry date inside the digital certificate used to establish the card-to-terminal conversation, and researchers have found that the certificate outlasts the printed date on the plastic. In essence, a check that might have caught the problem is looking at a clock set further ahead.

The scope of the attack, however, is narrow: it affects Visa contactless cards only, with Mastercard, Discover, and American Express rejecting the altered expiry outright. It also requires physical access to the card and two smartphones to pull it off, making it a slightly more complex endeavor, to say the least.

The irony is that EMV does have a protection that would essentially undo such an attempt altogether: Relay Resistance Protocol, which measures timing to detect an inserted relay and can stop the transaction altogether, but it remains optional and was not enabled on any of the terminals or cards the researchers tested.

The team notified Visa and the relevant banks in May 2025 and again in December 2025, supplying a reproduction guide, transaction traces, and a video. Visa's report passed initial triage, and the company's red team was reproducing it.

However, as of publication, neither Visa nor the notified banks had confirmed a mitigation attempt, and Visa also did not respond to a press request from The Register for comment.

The underlying failure, however, is based on how payment decisions have now spread across multiple players, including chip, terminal, network, and bank architectures, all of which assume that expiry is someone else's problem, an approach that could come back to haunt them and their customers. For now, the researcher's advice remains important until a fix is rolled out: stop treating dead plastic as harmless, destroy the underlying chip, and cut through the card numbers to prevent abuse.

• Windows 11 can remove a discrete GPU driver as part of its clean-up routines, as shown on Reddit
• This can happen if the laptop has been in Eco mode for an extended period
• Because the GPU is effectively gated off from the system, the driver is marked as unused and therefore deleted by the OS during clean-up – but you can stop this from happening

Apparently, Windows 11 can end up stripping away the discrete GPU driver from your laptop in certain scenarios if the OS is left to run in Eco mode for a long time – and that's a distinct annoyance if you own a gaming laptop, as per a report on Reddit.

Wccftech spotted a Redditor who posted about their Asus ROG Zephyrus G14 gaming laptop with a discrete Nvidia RTX 5070 Ti, and how Windows turned off that GPU.

At this point, some of you may immediately be thinking: who runs their gaming laptop in Eco mode? And that's a fair point, and one raised in the Reddit thread – I'll come back to that.

First, let's look at the mechanics of how this works, based on the Redditor's investigation of what went on (they noted that it "took me months to work this out"). When the laptop is put into Eco mode, power is completely cut to the discrete GPU, effectively leaving it offline (just as if it were an unplugged USB stick, as the Redditor describes).

That's not a problem – obviously it's a power-saving measure – but the issue is that Windows 11 runs a driver clean-up process from time to time as part of routine system maintenance. By default, this happens every 30 days, though the Redditor notes their laptop was set to 15 days, and this can be modified.

What happens is that if the laptop has been in Eco mode for a long time, with the GPU effectively walled off and not present as far as the system is concerned, and the clean-up happens, it judges the driver to now be superfluous, and it's removed.

When Eco mode is subsequently switched off, the driver doesn't return – it remains ditched, and the GPU shows as a 'Microsoft Basic Display Adapter' instead of an Nvidia GPU in Windows 11's Device Manager.

The Nvidia graphics driver must then be reinstalled to get the GeForce graphics card functional again – and the same is reportedly true of AMD discrete GPUs.

Analysis: a niche problem, but an annoying one – here's how to avoid it

Let's return to that question: who runs a gaming laptop in Eco mode? No gamer really does this, at least not when they're regularly playing some of the top PC games on their notebook. However, someone might be a student cramming for finals and using the laptop for work, having given up gaming distractions for a few months. In this case, with Eco mode enabled to keep battery life up while studying, Windows 11 could disable the GPU.

Okay, so it's something of a niche situation – and the Windows 11 clean-up routines are useful for keeping the system streamlined. But it's not an unthinkable scenario, and Microsoft's OS should be tuned to be more careful around GPU drivers – and it'd be useful if the system could give a warning of such a clean-up happening (so it could be avoided).

That said, this may not happen in all situations. Another Redditor notes that they have had their Zephyrus G16 in Eco mode for two months, and the Nvidia RTX 5070 Ti is still present and correct.

Whatever the case, if you run into this problem yourself, at least you know why it's happening. The fix is to simply reinstall the Nvidia driver, although the same thing could happen again if you're one of those people who regularly uses Eco mode on your gaming laptop.

You can apply a Registry fix to permanently stop the clean-up process, but I wouldn't recommend messing with those settings unless you're confident (see the Reddit post for instructions). Also note that you'll miss out on other clean-up duties, not just GPU-related activity.

A better solution is to simply remember to take your laptop out of Eco mode now and then (every couple of weeks), which will bring the discrete GPU back into play, and save the driver from being earmarked for removal.

The Redditor notes: "Or just keep the GPU visible now and then. Optimized mode in G-Helper turns the dGPU [discrete GPU] on whenever you plug in. Flipping to Standard [mode] every couple of weeks does the same thing. Resets the counter, no Registry editing."

• India-based developer Kuber Mehta uses Claude Code to create a macOS driver for the HP Laser 1008a
• Previously, only the official drivers for Windows and Linux were available for the relatively obscure 2023 laser printer
• The AI-generated driver was created over a series of meticulous prompts, and is now available via GitHub

The days of avoiding hardware that is incompatible with your operating system could be over. A developer based in India has created a macOS driver for a largely unknown HP printer using Claude Code, the agentic command-line coding tool developed by Anthropic.

Released in 2023, the HP Laser 1008a was issued with drivers for Windows and Linux, but not macOS. By using AI to generate a driver for macOS, developer Kuber Mehta has demonstrated that incompatible hardware could soon be a thing of the past.

Mehta has shared the code on GitHub and has also posted about the process on social media, and also compiled a transcript of the exchange, which has been published online for reference.

HP’s Samsung printer

Describing the issue in the introduction to the transcript, Mehta explains that the HP Laser 1008a is a “rebadged Samsung, host-based printer that speaks a proprietary raster language (SPL3), and it has no macOS driver and no AirPrint.”

No SPL3 drivers have been published for macOS previously, so the process relied on a conversation with Claude Code and reference to the Windows and Linux drivers.

The GitHub intro adds that the HP Laser 1008a and siblings in the series (1003 and 1006 a/w) have another problem: “They do not speak PostScript or PCL.” Anyone familiar with the world of printer drivers will recognize the challenge faced by Mehta, which makes the use of Claude Code even more impressive.

Using Claude Code with the Opus 4.8 model, the driver was compiled in 30-40 prompts. This might have been even quicker had the AI not made various assertions that required correcting.

The process moved through “install the drivers” to establishing the print language by analysing the printer’s error pages, via direct contact with the device and “running HP's real rastertospl codec inside a Linux container to produce genuine SPL3, to a reboot-safe background daemon.”

From here, Mehta and Claude Code moved to the published, MIT-licensed installer, which patches the macOS open-source printer driver package SpliX, adding support for the SPL3 printers (by default, SpliX handles SPL2 and SPLc drivers).

Building from AI

While already a developer, Kuber Mehta admitted learning about macOS drivers from the process, perhaps an unforeseen benefit of using generative AI tools for coding.

The GitHub repo outlines some revisions that have been made to the initial release, which is now “a tiny native IOKit helper” that dispenses with Python, pyusb, and libusb and can be swiftly installed from the Terminal.

• Infoblox Threat Intel counted roughly 65,000 expired domains re-registered every day in the first half of 2026, close to one in five of all new registrations
• An actor it calls Sable Squirrel controls more than 10,000 domains and is estimated, by extrapolation, to have spent over $7 million buying expired names for their inherited traffic and domain authority
• Some of the domains are also used to function as command-and-control structures for existing malware that can be traced back to the same group

A domain name is the closest thing the web has to a credit history: age, inbound links, search visibility, and reputation all feed the reputation scores that security products consult before deciding whether a request is worth worrying about.

New research from Infoblox Threat Intel claims this history has become a commodity with a market price, and that at least one criminal operation has been buying it in bulk.

The study, published as a three-part series, focuses on what the industry calls dropcatch domains: names that lapsed, were released back to the registry, and were then re-registered by someone else entirely.

A dropcatch domain situation: A gambling business with a malware-enabling catch

Dropcatch domains aren't new; software has been primed to spot expiring domains for years, and it sometimes snags the occasional massive win for users who deploy such solutions.

This lets users start with domains that already have history that benefits them or flip certain domains for a price that is often a multiple of the domain's original purchase price.

Infoblox counted an average of 50,400 such re-registrations a day across generic top-level domains in the first half of 2026, rising to roughly 65,000 once country-code domains are added. That amounts to close to a fifth of all daily registrations. The rate is highest on .net and .xyz, where nearly three in ten newly observed names had a previous life, with .com behind them at 24.5%.

The problem is that not all of these are seemingly innocent or small-scale scalping operations: Infoblox has identified an entity it has labeled Sable Squirrel, part of a naming convention the company applies to domain hoarders. It controls more than 10,000 domains, most of which support a large Vietnamese-language sports piracy operation operating under brands including Xoilac, Cakhia, 90phut, Socolive, and MiTom.

Infoblox estimates the actor's total spend on expired domains at north of $7 million, which it describes as the largest domain acquisition budget it has identified for a single actor in the industry. The bigger problem is that Infoblox also found that a subset of these streaming domains runs as malware command and control while continuing to serve live football to human visitors.

More than 31,000 samples identified called back to Sable Squirrel's infrastructure, spanning Quasar RAT, AsyncRAT, DCRat, NanoCore, Remcos, and njRAT, plus samples carrying HiddenTear ransomware signatures.

Infoblox said the operator's carelessness made finding a link easier: many samples carry the actor's brand names in their Windows executable metadata, with fields reading socolive, xoilac, and 8xbet. Infoblox confirmed 405 domains as malware C2, which is roughly four percent of the total domains the organization controls, and the weaponization arrived as a single wave in late 2025 rather than as the operation's original purpose.

Sable Squirrel's core business is gambling, and while the entity tries to mask it as a streaming operation, it also doubles as an acquisition channel for the same. While law enforcement has not been silent here, it has had limited luck at best: Vietnamese authorities froze some of the flagship sites in February 2026 and charged 30 suspects in March.

They also seized assets Infoblox puts at roughly $12 million, but it seems to have survived and continues to expand, having acquired and run World Cup-centric domains since June, further expanding its footprint in a world where it has already identified and secured a large chunk of what is arguably a very important commodity: Domain authority.

• Hacker alias Xpl0itrs claims to have stolen 8.6GB of Target source code
• Researchers suspect it’s recycled data from January’s confirmed 860GB breach
• Xpl0itrs has a history of dubious leak claims, fueling skepticism about authenticity

Hackers are claiming to have breached Target in what would be the US supermarket giant's second breach of 2026 alone.

The attackers are threatening to release gigabytes of source code into the dark web unless the company pays up, but not everyone is sold on the idea that the US merchandise giant was actually hacked this time around.

Some security researchers believe this might just be a case of a lowly criminal piggybacking on someone else’s work.

Was there really a hack?

Target was first hit in January 2026, when a threat actor posted a new thread in an underground hacking community to claim they were selling the company's data, and that this was the first of many datasets to go on auction. To support their claim, they created multiple repositories on Gitea, a self-hosted Git platform, and uploaded a small sample of the data.

The repositories, totaling around 860 GB in size, appeared to contain internal Target source code, configuration files, and developer documentation, while repository names were referencing internal systems such as wallet services, identity management, store networking tools, secrets documentation, and gift card systems.

Target later confirmed the authenticity of the breach.

This time around, however, a different threat actor - with an alias Xpl0itrs - created a new data leak site in mid-June 2026, and earlier this month added Target. They claim to have stolen 8.6GB of the company's source code and have given it two days to pay up or see the data leak into the dark web.

Xpl0itrs is not exactly a household name in the cybercriminal community, and they have not shared any samples of the data they are claiming to have nabbed - further fueling the idea that this data was already grabbed eight months ago.

Even some of their previous “work” is questionable. Cybernews reports that in June, they teased leaking data from Spotify, the US Department of the Treasury, OpenAI, and Trustpilot, which never happened. Before that, they claimed to have stolen documents from BMW, containing details about motorcycles and dealerships. This, too, was somewhat debunked, as it turned out that some of the data was already publicly available.

As public perception continues to sour, and private businesses ban smart glasses from their events and premises, it feels like the writing might be on the wall for Meta’s Ray-Bans. At least as we know them.

Even without many laws changing, camera-equipped specs are becoming increasingly difficult to wear, especially if you don’t want to be branded a perv or a creep.

Because of this changing tide against Meta Ray-Bans and others, the most recent episode of the TechRadar podcast is a smart glasses special. Podcast regulars Josie, Axel and myself brought Tom’s Guide’s Jason England on board to discuss the issues facing smart specs and the risks they pose — while also acknowledging how useful the tech can be when used appropriately.

We rounded things up with a quick discussion on what smart glasses could do to solve their privacy problems and clean up their public perception. I want to continue that chat here with you, our readers and viewers.

Below I’ll outline four possible paths forward, followed by a quick poll asking you which path you believe we should take.

1. Keep cameras in glasses

If you are a smart glasses maker like Samsung, Meta or one of the many others, this would likely be your preferred approach: keep calm, and carry on churning out glasses with cameras (or AirPods if a recent Apple leak is to be believed).

The backlash against surveillance tech is at a fever pitch right now, but public outrage has a way of waxing and waning. Smart specs have been wildly popular before, who says they won’t go back to being mega popular in a few months?

This process could also be sped along by rolling out new privacy policies, or software which aims to mitigate the way smart specs with cameras are misused. If new useful features are released, marketing could also help to make smart glasses look more essential, and get their detractors to overlook the glaring privacy issues they’re so bothered about right now.

For current smart specs users it means their Meta Ray-Bans would still be completely usable, and fully functioning — allowing them to rely on the first-person content capture capabilities for recording memories, informing their AI, or for accessible needs that the glasses are offering the visually impaired.

It’s also unclear how effective a ban could be if it wasn’t universal.

Countries like China already feature major public surveillance and tight regulation of what people can share online, so the downsides of camera glasses aren’t as strongly felt there. As such they’re less likely to see a ban. Bad actors could import glasses from countries where they are sold and attempt to dodge restrictions from brands who might not be as willing to address concerns as Meta has been with its various safety updates.

On the flip side, not banning features in some way means that the privacy issues persist — plenty of folks could still be being recorded without their knowledge or consent. This could lead to serious public consequences if people take action into their own hands, or heavy-handed legal consequences if governments decide to ban smart glasses in all their forms to avoid any possible workarounds — depriving us of the useful features XR specs could offer in all aspects of our life (if the technology was allowed to develop).

2. Ban smart glasses outright

Rather than waiting and letting things continue before taking action, we could ban smart specs right now.

Of course this would limit access to the useful features they provide, and would see people’s purchases become paperweights, though it would tackle the privacy problems head on.

I’ll address banning simply camera glasses below, but the one advantage of this approach is it also hits glasses with microphones that could be used as a form of covert surveillance technology. While audio is often less invasive than video or images, privacy advocates would argue any kind of surveillance is a terrible thing.

As I touched on above, removing smart specs entirely would deprive us of some potentially exceptionally useful and awesome tech that could provide benefits to our work, our ability to travel and communicate, and our play.

However, smart specs are also causing plenty of headaches. This approach would make them all go away if it proves effective.

3. Ban cameras in glasses

A less heavy handed approach would be to merely ban cameras, but allow glasses with displays, speakers and/or microphones only to continue.

This would allow smart specs to offer audio or screen-based AI assistance, to play music, let you watch a TV or film, or perform a host of tasks that don’t depend on computer vision.

Though a lack of cameras would limit the tech’s immediate usefulness quite considerably. I’ve touched on this already, but the snapper can provide context to the AI when you ask it questions about a landmark or sign you can see, it can offer hands-free recording capabilities many like to use while on vacation or while doing an action sport, and it has been used as an accessibility tool by the visually impaired to allow their smart specs to describe the world around them.

The advantage to smart spec makers is this approach could see them dodge an outright ban on glasses wearables — cameras or not. It may also keep a door open for a safer camera-equipped version of smart glasses to materialize; a model that addresses the privacy concerns of the original.

Of course, this wouldn’t remove the risks of covert audio recording posed by smart specs, though you could argue that the dangers posed by such recordings is less severe, especially since plenty of other accessible covert tools (even a smartphone) could be used to privately record sound.

4. Keep the cameras, ban video recording

The issue with camera glasses isn’t necessarily that they can record, it’s that they can record relatively discreetly. While Meta’s glasses do have a recording light it’s easy to miss if you don’t know to look for it.

For photos, an obvious solution would be to require the specs to play an audible camera snapping effect whenever a shot is captured. Meta’s specs can already do this, and it's a requirement of smartphone cameras already in countries like Japan.

Because Meta glasses don’t have zoom capabilities you can’t take useful photos from very far away, meaning an audible effect like this would be heard by anyone you attempt to photograph covertly. They could then confront you about being a creep in much the same way someone obviously taking photos with a phone or camera could be addressed in the moment.

Video is a little tougher to make obvious and still usable in the end result. An audible effect would need to play throughout the recording which could spoil the clip’s audio. An alternative could be to make the recording light brighter and have it pulse to make it a little more obvious, but it still may not be completely noticeable. So you could simply ban video recording with smart glasses.

This halfway house would allow the specs to sense the world around them — facilitating AI and accessibility tools — but could greatly restrict the harm they could cause.

The downside is hackers could modify the cameras to facilitate video recording as all the hardware would still be there. That said, tamper-proof measures could mitigate this risk.

Now it’s time to have your say. These four possibilities are somewhat simplistic, but I think they capture four general strategies we could deploy to ‘solve’ our smart glasses problem. Let me know which you like best, or feel free to comment below with your thoughts!

• iAuthFlow v2 sold on Russian forums lets attackers persist in email accounts
• Tool phishes logins, then secretly creates attacker‑controlled passkeys for lasting access
• Defenses include auditing passkeys, OAuth tokens, mail rules, and removing rogue methods

Security researchers have discovered a new malware toolkit which allows threat actors to log back into compromised email accounts even after the password was changed and all sessions terminated.

iAuthFlow v2 is currently being sold on Russian dark web forums for north of $10,000, a new report from cybersecurity experts from Abnormal said, as they obtained a copy of iAuthFlow v2 for analysis.

The malware primarily works as a phishing tool, trying to trick users into logging into either Google, Microsoft, iCloud, or LinkedIn. As soon as they do that, they relay the login credentials to the attackers, who log into the accounts on their end, as well - before the tool displays a “processing” page for a few seconds while, in the background, it sets up a new passkey.

How to defend against iAuthFlow v2

A passkey is an alternative means of authentication that is often touted as the “password killer”. It uses cryptographic keys stored on a device, allowing users to sign in with a fingerprint, face scan, or device PIN.

Because the secret key never leaves the device, it is resistant to phishing. However, if the threat actor is able to generate a key of their own, on the device they own, access is basically guaranteed.

The ad for the toolkit also comes with a video demo, showing how it works. In the demo, iAuthFlow v2 created the passkey six seconds after authentication.

However, generating a passkey is not that straightforward of a process and it could encounter hiccups, Abnormal hints, saying that Google, for example, might require further identity verification before allowing the change.

Usually, when a threat actor compromises an email account, terminating all sessions and changing the password is usually enough.

In this case, however, users should do a lot more: review the account for signs of compromise, including unauthorized passkeys or security keys, malicious Gmail filters and forwarding rules, recovery and delegated access changes, and unauthorized applications, Abnormal suggests.

They should also revoke relevant OAuth tokens and grants, investigate available sign-in, mail-rule, 2-Step Verification, passkey and OAuth audit events, and finally, make sure any attacker-enrolled authentication methods are removed.

• Huntress spotted a ClickFix campaign targeting security pros via fake conference invites
• Victims tricked into pasting code that installs AMOS infostealer on macOS
• If lured, isolate systems, reset credentials, rotate secrets, and review cryptocurrency wallets

Cybercriminals are targeting security professionals with a highly tailored ClickFix campaign in an attempt to get their computers infected with infostealer malware, experts have warned.

An active campaign against people who have attended, or have a history of attending, various cybersecurity conferences such as Black Hat, or DEF CON has been detetced by security researchers Huntress, who were targets themselves.

The attack starts on X, where the threat actor uses a fake account to interact with people visiting and sharing content from these conferences. After establishing rapport, they move into DMs, claiming they’re organizing a conference of their own, and sharing a Google Docs file containing “more info” with the victim.

Follow-up attack

Here is where the attackersy go for the ClickFix attack. The document comes with a vertical sidebar, apparently as a security feature that keeps the contents of the file encrypted. The victim is given a decryption code to enter, but it returns an error and offers a solution - to bring up the Terminal and copy/paste a piece of code.

From here, it’s the usual ClickFix practice: the victim ends up downloading and running AMOS, a notorious Mac infostealer capable of grabbing browser information, cookies, keychain data, cryptocurrency wallet information, Telegram files, and more. The Windows variant did not work when Huntress tried to analyze it, but it’s safe to assume the end goal is the same.

Huntress also found that this is not where the attack ends. If the victim does not install the infostealer, the threat actor will follow up with a different document, this time pretending to be for Dropbox and working only with the desktop app. Of course, the download button leads straight back to the infostealer.

The researchers shared a full list of Indicators of Compromise (IoC) which can be found on this link. They also advised anyone who interacted with this kind of lure to isolate the system from the network, collect relevant forensic evidence, and “consider reimaging the system”.

“Assume that credentials on the system have been compromised”, they said. “Revoke active sessions, reset passwords, and rotate API keys or any other secrets that may reside on the system. Review cryptocurrency wallets as well, if present.”

If you're headed off to college soon, a gaming laptop can be a wise investment. You'll not only have enough power to study or handle coursework, but you'll also have a machine that can tackle your game library out of hours.

Finding a decent deal is a little tough these days with the cost of components like RAM skyrocketing — there are still bargains, however. Both Walmart and Best Buy are in the final stretch of the back-to-school sales season, meaning students, teachers, and just about anyone can take advantage of various discounts.

I've been scanning retailer pages today, and I found five good value gaming laptops with varying prices for different budgets. While there are quite literally hundreds of laptops on sale this weekend, these are the handful that I'd consider personally.

A particular highlight has to be this heavily discounted Gigabyte A16 for $1,249 (was $1,849) at Walmart. A little pricey, perhaps, especially as a machine with an older chipset, but in terms of bang for the buck, this one takes some beating right now with its RTX 5070 graphics card and 32GB of RAM.

Another great choice is this Acer Predator Helios Neo 16S at Best Buy for $2,089 (was $2,199). You'll need seriously flush pockets to get this deal, but this configuration features an RTX 5070 Ti graphics card, OLED display, and a Core Ultra 9 chipset, meaning it's very well-specced for the price. You can read more about this deal and other cheaper options just below.

This weekend's best gaming laptop deals

• Windows 11's August update has broken some PC games
• Microsoft is investigating reports of crashes, but right now it's unclear what the root cause is
• Theories point to security measures in the update potentially causing issues with certain drivers and conflicts with anti-cheat tools

Windows 11 has run into trouble with gamers (again) after the latest monthly update for the OS, and Microsoft is investigating what's gone wrong.

The Register noticed that Microsoft has posted on the Windows release health dashboard about "reports of certain games becoming unresponsive" following its latest patch.

In some cases, games are either freezing and becoming unresponsive, as mentioned, or simply closing (crashing to the desktop), with an error ('Exception Access Violation') being displayed in some cases. There are also some reports of spontaneous reboots occurring after a game crashes.

Not all PC games are affected by any means, with Microsoft noting that reports are coming in from players of Arc Raiders, Marvel Tokon: Fighting Souls, and The Finals.

Microsoft is currently trying to work out what's going on, saying: "Ongoing investigation indicates that this issue is related to peripherals or internal device components which have RGB lighting features. Such devices may install drivers or code components with file names similar to inpoutx64. In systems where these drivers are found, the issue is then triggered by launching certain games."

Microsoft adds that it's currently trying to "understand the relationship between these RGB components and the games which trigger this issue", and says it will update gamers when more information becomes available.

Analysis: theories and workarounds

Microsoft is suggesting that this may be a driver-related issue of some kind, rather than a problem with Windows 11 itself. Of course, changes to Windows 11 could be the root cause, and the company admits that, and says it's still trying to "determine if this is an issue caused by Microsoft" on the release health dashboard.

As The Register points out, some on Reddit are theorizing that this bug is to do with "tightened kernel handle validation" which was introduced with the latest patch for Windows 11. Essentially meaning that Microsoft has tightened aspects of security with the August update, and that this is causing driver glitches, ones that were previously ignored, to be picked up (and subsequently crashing games).

The mentioned driver (inpoutx64) isn't just used in software controlling RGB lighting, but also in some system utilities needing low-level system access (for hardware monitoring, for example, and one such tool is mentioned in the above Reddit post: ZenTimings). It seems that if this driver is present on the host PC, the game's anti-cheat probing it now throws up a problem (post-patch), and that leads to the crash.

If this bug is causing you grief — and there are a lot of Arc Raiders players out there in that particular boat — there are workarounds that can make the game playable again.

The first is the most obvious and easiest fix: remove the August update for Windows 11 (or roll back the OS to before it was installed). You can remove an update in Windows Update, in the Update History panel — just find the patch (KB5121003 in this case) and uninstall it. However, bear in mind that you will be without a bunch of security fixes (and other features, including faster app launching) if you don't have this update on your PC.

The other alternative is to remove the problematic driver file, which seemingly won't harm your system (that said, if you do so, it's at your own risk — I haven't tested this). Going by the advice in the above Reddit thread — and also from the developer of Arc Raiders (Embark) — what you need to do is open the Command Prompt in Windows 11 by typing cmd in the search box, then right-click on Command Prompt and select 'Run as administrator'.

Once the prompt appears, type the following and press enter:

sc stop inpoutx64

Then type this second line and press enter:

sc delete inpoutx64

Now close the Command Prompt, open File Explorer, and find the following folder: C:\Windows\System32\drivers.

In that folder you should see the inpoutx64 file, it may be a SYS or DLL file (or both). Delete any of those files which are present.

That's the driver removed, and you should now be good to go, and you can still have the August update installed. But as I already noted, proceed at your own risk if you take this route.

The best bet for now may be to sit tight and wait for the results of Microsoft's investigation, and hopefully we'll hear something soon. However, this could be a somewhat thorny problem to untangle, and it rather sounds like a case of Microsoft dealing with a security issue — one which should be fixed — and that cure causing collateral damage due to driver wonkiness.

Whatever the case, on social media, a good many PC gamers are blaming Microsoft for this latest gaming-related issue in Windows 11.

One Redditor delivers the following barb: "They can't even keep the one thing they had over Linux. If you have to worry about whether or not your games work anyway, why still use Windows?"

Another observes: "Since 2025 December update till today — EVERY single month the update breaks something! There was no single month without issues."

There's no shortage of shots fired at Microsoft for monthly update woes, accusations of this being the fault of vibe coding (AI), and threats to leave for greener Linux desktop pastures. Business as usual, then.

• UK movie theatres considering smart glasses ban
• The ban would be over privacy and piracy concerns
• It's yet another instance of private bans restricting the tech

Privacy concerns have rocked Meta’s smart glasses business. They’re being ridiculed online as ‘perv glasses,’ and their use is banned in a growing number of spaces. In the UK, this could also soon include cinemas, though it’s for a very different p-word: piracy.

The main concern with camera glasses, like the ones Meta produces with its partners Ray-Ban and Oakley, is that people can record in a fairly secretive way. This is an issue for the general public as they don’t know when or if they’re being recorded, and for venues like cinemas and theatres as it allows movies and live shows to be subtly recorded by the audience.

With a stable enough internet connection, the viewing could even be live-streamed.

The ban hasn’t taken effect yet, but its consideration is another blow for smart glasses makers and users, who are finding it increasingly difficult to wear their specs because of their spy-camera capabilities.

Meta would argue that recording isn’t covert. There is a light that comes on and stays on while you record. Plus, Meta has taken numerous steps to disable recording capabilities if this light is tampered with — either via a simple cover or by fiddling with the hardware.

However, critics have argued the light is easy to miss if you don’t know to look for it, especially if you're outdoors during the day or in a bright place.

In a dark theatre or cinema, the recording light would arguably be a lot more noticeable, though the proposed ban would reduce the risk that bad actors sneak through — while also addressing privacy concerns the glasses raise for other patrons, and banning glasses that allow more covert filming.

Because while Meta is the most well-known smart glasses maker, and so is taking the heaviest share of the backlash, it isn’t the only player in town. Some glasses manufacturers aren't as strict about tackling modders who disable their recording indicator, while others make the indicator even less noticeable or don’t ship with one installed.

Going, going, gone?

Governments have also been considering action against smart glasses; however, we have yet to see much in the way of widespread bans. At this rate, we might not need to.

The court of public opinion has issued an overwhelmingly negative verdict on smart glasses. The privacy concerns for people wearing the glasses, and for passersby caught in their gaze who never consented to having their life captured by smart specs,

Even previous champions of the technology I’ve spoken with — journalists like myself who have used and tested, and loved these glasses — have stopped wearing them outside of our reviews. I’ve written before how I’m genuinely fearful I’ll get accosted in the street if I’m caught wearing these glasses.

Besides the threat of retaliation, the steady banning of these glasses across various venues makes them increasingly useless. That’s doubly true for folks who need prescription glasses — smart glasses bans often say that the glasses having prescription lenses is no excuse, meaning you could spend $500 / £500 / AU$750 plus on a pair of glasses you can’t wear anywhere.

Is this the end of smart glasses then? A serious perception overhaul could help, though it’s unclear how that would be achieved without such major software changes or hardware alterations, such as removing the camera altogether — though, from experience, cameraless smart specs don’t impress me. It’s too useful a feature to lose out on.

To that end, it’s a lose-lose, and that’s a shame for a category I think is quite fun and cool when people aren’t being creeps with them. They’re also proving a handy tool for people with visual impairments as the glasses can see and describe the world for them.

We’ll have to wait and see what happens, but I expect it’ll continue to be a rocky road ahead for smart glasses.

The HP OmniBook X Flip 16 gives you considerably more flexibility than a conventional laptop. Its 16-inch touchscreen can be folded all the way back for tablet use or positioned at different angles for presentations, streaming and creative work. In its 60th Anniversary Sale, the HP OmniBook X Flip 16 is now $750 (was $1200) at Best Buy.

That's a massive $450 saving, equivalent to 37.5% off the regular price. You get plenty of performance for the money too. The Core Ultra 7 256V is paired with 16GB of fast LPDDR5X memory, a spacious 1TB PCIe 4.0 SSD and Intel Arc 140V graphics.

Why we recommend it

The Core Ultra 7 256V is a modern Series 2 processor with a 47 TOPS NPU. Intel's Arc 140V integrated graphics add considerably more graphical capability than you'd get from a basic productivity laptop.

It also features a large 2K touchscreen that makes the OmniBook useful for everything from everyday office work and streaming to photo editing and lighter creative workloads.

Thunderbolt 4 provides a 40Gbps connection for high-speed storage, docks and external displays, and HDMI 2.1 and the additional USB-C port make it easier to build a desktop setup around the laptop.

For more top picks, see our guide to the best business laptops we've tested.

Price context & historical value

At $749.99, you're saving exactly $450 against Best Buy's regular $1,199.99 price. That's a hefty 37.5% reduction as part of the retailer's 60th Anniversary sale. This is the cheapest price we've found for a new HP OmniBook X Flip 16 with this specification, so definitely recommended if you've had your eye on it for a while.

The specification is particularly attractive as you're getting a recent Core Ultra 7 processor, 16GB of memory, 1TB of storage, Arc graphics and a large convertible touchscreen for below $750.

Should you buy it?

✅ Buy the HP OmniBook X Flip 16 if...

You want a big-screen laptop that can handle work during the day and transform into a more convenient machine for entertainment afterwards. The combination of a 16-inch touchscreen and 360-degree hinge gives you considerably more flexibility than a standard clamshell laptop.

The Core Ultra 7 256V and Arc 140V graphics provide plenty of everyday performance, and the 1TB SSD will be enough storage for most people's key needs.

❌ Skip the HP OmniBook X Flip 16 if...

Portability is your priority. At more than four pounds, this isn't the 2-in-1 I'd choose if I wanted something to carry around all day or regularly use as a handheld tablet.

The 16GB of LPDDR5X memory is another consideration for particularly demanding workloads. It's sufficient for most tasks, but buyers tackling heavy video editing or other memory-intensive work may prefer 32GB.

The Catch: What to know before you buy

The OmniBook X Flip 16 is a large convertible, and at 4.15 pounds, it's considerably less convenient to hold in tablet mode than a smaller 13- or 14-inch 2-in-1. The flip design is better suited to occasional tablet use, presentations and watching video than carrying around for extended periods.

As mentioned before, the other limitation is the 16GB of LPDDR5X memory. That's plenty for everyday productivity, multitasking and many creative jobs, but it isn't upgradable, which is worth bearing in mind.

• Shop the full 60th anniversary sale at Best Buy

• Siemens S7 Series programmable logic controllers are being hit in a new critical infrastructure attack against energy, water and agriculture
• Attackers are using AI-generated malware to chain exploitations, and hiding their malicious software as a monitoring tool
• The identity of the attackers is not known

A joint warning issued by federal agencies has warned that US critical infrastructure is facing an “active threat” in the form of AI-generated malware specifically targeting programmable logic controllers (PLCs).

PLCs are widely used across the energy, water and agricultural industries to control pumps and monitor systems. The attacks have been labelled as an “evolution” in attacker capabilities, with the AI systems capable of chaining exploitations to gain control of PLCs.

The warning comes from the National Security Agency (NSA) and FBI, alongside other federal agencies who said in an advisory that, “This is not a theoretical risk — it is an active threat.”

Siemens S7 Series PLCs under active attack

The advisory warns that Siemens S7 Series PLCs are the chosen target of this latest campaign with the attackers leveraging “AI-assisted development” in their penetration.

“Depending on the specific circumstances, exploitation of poorly protected PLCs could lead to disruption of critical industrial processes, safety incidents, downtime or equipment damage, compromise of sensitive data, compliance violations, and cascading impacts across interconnected systems,” the advisory warns.

The identity of the attackers has not been revealed, but critical infrastructure systems are a favorite target of state-sponsored groups looking to scout out potential targets to later cripple water treatment and disrupt energy supplies.

The hackers are locating vulnerable PLCs using internet scanning platforms and disguising the malware as monitoring tools in order to evade detection. To defend against this attack vector, the advisory said that PLCs should be isolated from the internet, with software updates performed as soon as they become available.

The advisory said that the attacks are “an evolution in threat actor capabilities,” with the AI generated scripts “dramatically reducing the technical expertise and time required to develop working exploitation scripts and malicious tools.”

Who has been targeting critical infrastructure?

The US war with Iran has led to a significant increase in attacks against critical infrastructure.

In July 2026, an attack against the operational technology of 30 Minnesota community water systems showed indications of Iranian involvement. Shortly before the attack CISA updated an advisory warning that Rockwell Automation, Schneider Electric, and Siemens PLCs were under active attack.

April saw Rockwell Automation/Allen-Bradley-manufactured PLCs were exploited in attacks against water and energy systems, as well as to compromise Government Services and Facilities.

Automatic Tank Gauge (ATG) systems have also been hit during attacks targeting energy, chemical, food, agriculture, and transportation industries. These systems were also found to be largely internet-facing, and when compromised could allow attackers to turn off systems designed to monitor fuel levels, temperature and potential leaks.

Russia has also been involved in targeting critical infrastructure at a global scale. The attacks hit broken and poorly configured networking devices such as routers that had passed their End-of-Life (EoL) and were no longer receiving updates.

• GuidePoint observed “Ransom Busters” posing as recovery firms in ransomware incidents
• Group claimed to hack RaaS panels, offering decryption keys for $20K–$60K
• Researchers say it’s likely the same affiliates behind infections, not genuine rescuers

Ransomware operations have evolved again, and this time around the crooks are pretending to be the good guys.

Cybersecurity researchers GuidePoint Security were recently brought in to respond to multiple ransomware attacks against their clients. In some of those incidents, the victims were also contacted by a group calling themselves “Ransom Busters”, which offered to delete the stolen files from the attackers’ servers, while providing the victims with working decryption keys.

What made the offer suspicious was the fact that Ransom Busters reached out to the victims before the attackers had gone public. The crooks claimed to have hacked into the admin panels of multiple Ransomware-as-a-Service (RaaS) operations, including DragonForce, Settra, and Anubis, giving them not just insight into who was targeted, but also access to stolen data and the decryption keys.

Just another affiliate

For their services, Ransom Busters ask between $20,000, and $60,000 - however, the researchers are saying this is all a ruse, and that Ransom Busters are, most likely, just affiliates of these ransomware services. Not only that, but they are also most likely the ones who infected these companies with ransomware in the first place.

They said that both the attackers and Ransom Busters are using the same software, same tactics, and same identifiers, leading to the conclusion that it’s the same group on both ends of the spectrum.

The good news is that no one seems to have paid Ransom Busters for their offer. The only thing GuidePoint observed was one victim paying the actual ransom demand, rather than the fake recovery firm. That firm, fortunately, did not have its name listed on the leak site, and its files remain secure for now.

Pretending to be a recovery firm is the next evolutionary step in the life of ransomware.

In its early days, ransomware was all about encrypting the computers and asking for payment in exchange for the decryption key. When companies responded by building out strong backups, the criminals moved to stealing files and threatening to release them to the public. Soon after, some added Distributed Denial of Service (DDoS) into the mix, blocking not just the back end but also the front-end, in an effort to force a payment.

Some criminals even called their victims on the phone for further intimidation.

These days, more and more groups are moving away from encryptors and focus solely on data theft, since it’s cheaper yet equally lucrative.

Via BleepingComputer

• Windows 11 is getting per-app permissions for all desktop software
• Previously this was limited to just apps from the Microsoft Store
• Microsoft has also decided to drop an incoming interface addition called the drag tray, which had drawn complaints from some testers

Windows 11 is finally giving you a full range of options to maintain your privacy from potentially snooping apps, and the OS is being further improved as Microsoft is scrapping an unpopular addition for the interface which was in testing.

First up, let's look at the privacy move, which as Windows Latest reports is the expansion of individual privacy controls for apps in Windows 11. This was first highlighted by Jakub on X, who noted: "Huge changes are coming to Windows 11 privacy & security. In the latest Experimental Insider Build (26340.9212) you can now revoke access to the camera & microphone for specific Win32 apps!"

What this means is that in Settings you can allow or deny access to the camera and mic (as well as location access) for desktop apps on an individual basis. Couldn't you do that before, I hear you ask. Only for Microsoft Store apps, with other (Win32) applications having just one 'master switch' to either toggle all these permissions on or off (on a blanket basis).

Thankfully, in a new experimental test build of Windows 11, Microsoft has changed things so you have granular privacy controls over all apps, not just Microsoft Store software.

On top of that, testers are seeing smartphone-style app permission prompts for allowing access to the camera and mic, which is a feature Microsoft has said it's bringing in before.

Windows Latest also noticed that Microsoft has officially canned the drag tray, which was a new part of the interface in testing with Windows 11.

The idea here is that when you grabbed and dragged a file on the desktop, this tray would appear at the top of the screen, and if you moused the file over it, you'd get some quick sharing options (so you could simply drop the file to share via WhatsApp, or Outlook, or a bunch of other icons).

Tthe drag tray could be handy for users with a touchscreen, for example, as an easier method than going by the right-click menu sharing options. So, what was wrong with this feature?

The problem was for those users with busier desktops, perhaps crowded with folders, because in these situations — or when using a maximized folder window filling the display — if a file was dragged towards the top of the screen, the tray might appear and get in the way of the target folder (effectively blocking it).

These frustrations led to some complaints, and Microsoft has ultimately decided to drop the tray.

In the notes for the most recent Windows 11 preview build in the Experimental channel, Microsoft told us: "Thank you to Insiders who have provided feedback about the Drag Tray experience. Based on feedback, we're removing the experience in this build. We're continuing to explore improvements in this area and look forward to sharing more about a future replacement experience in a later update."

Analysis: a real drag

The drag tray had to go, then, at least in its current implementation, but as Microsoft noted, this isn't necessarily the end of the road for this concept. It may be brought back to testing in a different incarnation, and indeed that sounds like the plan here, so I'll be keeping an eye out for the feature's reemergence at some point.

As for the privacy options, this is a very welcome move, as it's pretty important to be able to pick and choose which apps have what permissions. The only real question here is: why wasn't this the case in the first place? Granted, there are technical reasons why it's a good deal trickier to implement a per-app system like this for Win32 software compared to applications from the Microsoft Store. However, it isn't like this was something Microsoft couldn't solve – clearly, as it's being done now.

There might be quite a lot of work involved, but really, that isn't an excuse, and this is another one of those long overdue changes for Windows 11. A bit like the streamlining and new customization options for the right-click (context) menu in the OS, although admittedly that was a good deal more urgent. At any rate, at least both these changes are happening now, although this per-app privacy system is still in testing, and could end up looking somewhat different by the time it reaches release.

All of this is part of Microsoft's drive to fix Windows 11 while introducing a host of crowd-pleasing features that have long been requested, such as that context menu change. Note that the drag tray never actually arrived in the full release version of Windows 11, just to make that clear – it was only ever in testing, showing that not everything in preview makes the cut by any means.

• CareCloud confirmed March 16 2026 cyberattack exposed data of 3.7 million individuals
• Attackers accessed one AWS environment, stealing personal records including names
• Incident deemed non‑material but may incur remediation, legal, and reputational costs

The March 2026 cyberattack on CareCloud exposed sensitive data on 3.7 million people, the company has confirmed.

The American IT healthcare company had told the US Securities and Exchange Commission (SEC) it experienced a “temporary network disruption” in its Health division which “partially impacted the functionality and data access to one of six electronic health record environments for approximately eight hours."

Initial investigation determined that the criminals accessed people’s personal records, but it was not said how many people were affected, what the nature of the files were, or if they were exfiltrated or just exposed.

Notifying the Department of Health

In late July 2026, the company started notifying its customers of the incident, saying the unidentified actors accessed one of CareCloud’s AWS environments and claimed to have stolen files found there. The company did not say which type of data was taken, other than people’s full names.

In a separate report with the US Department of Health and Human Services, the company confirmed the exact number of affected individuals as 3,756,469.

At press time, no hacking groups claimed responsibility for the attack, or shared details about the volume, nature, and type of data potentially stolen.

CareCloud is a publicly traded American healthcare technology firm providing cloud‑based software and services to medical practices and health systems, including electronic health records (EHR), practice management, billing and revenue cycle solutions. It works with tens of thousands of healthcare providers across the United States in more than 70 specialties and across all 50 states, with over 40,000 providers on its platform.

In its initial report with the SEC, CareCloud said the incident did not have a material impact, but that it might incur expenses in remediation and response costs, legal, regulatory and notification-related matters, and could possibly affect patients, customers, counterparties, reputation and operations.

Via BleepingComputer

• Adobe releases three new AI audio tools on Firefly
• Creators can now use Generate Music, Generate Speech, and Generate Sound Effects
• I tried them out to see how they perform in video creation

After sitting in beta for sometime, Adobe Firefly has now made three new AI audio tools promising "studio-quality sound" available for all creators. I had a play with each one to see if the results were as good as promised - and on the whole, they delivered, with a few quirks.

Generate Music, Generate Sound Effects, and Generate Speech are the latest audio features to hit Adobe's browser-based AI platform (no prizes for guessing what each of these do).

From my experimenting with all three, Generate Music is the high-point here, it's way better than I thought it'd be and I can see marketers and creators getting serious use from it. You can try them yourself by clicking here.

So, what's new?

There are three AI tools now available to everyone. They're all pretty self-explanatory, but here's what you need to know.

• Generate Music lets you create licensed tracks matching your videos' length and mood.
• Generate Speech takes scripts and turns them into voiceovers.
• Generate Sound Effects generates - you guessed it - sound effects that match the action and timing of a video.

But are they any good?

I've written before about my agnosticism towards AI in general, and my issues using it for creative work. It's a facsimile of art.

Still, Adobe's tools have impressed even the hyper AI-sceptics on my team - notably features like Generative Extend in its video editing software. And I'm nothing if not open minded. So, I decided to try these tools out for myself to find out what's really going on here.

The focus here, at least for now, is around speeding up creative workflows for the likes of marketers and content creators.

Creating AI music

I started with Generate Music, where you prompt freely or upload a video and the AI will take a punt at what sort of music you want. I used a short 27-second clip I filmed for my reMarkable Paper Pure review (mostly because it was still in my download folder).

Based on that, Firefly suggested a prompt for "a calm, thoughtful song with ambient electronic style for a product demonstration."

I hit Generate, and in a couple of seconds - it's actually impressively fast - I was served four tracks to choose from, all different but with the same vibe. They were...ok. A bit generic, but they'd do in a pinch. Or to rush a project to completion.

I decided to add a few more terms to the prompt, like "jazz", "cinematic", for use in a "vlog" and "trailer". I changed the Energy from "low" to "medium." The results were a big improvement.

Like all AI tools, the more prompting, the better the output, and there is an option to describe the vibe, style, and purpose yourself if you have an idea in mind.

You can download the music and video, or just the music from here.

Creating AI voiceovers

Switching over to Generate Speech, I first used the side-bar to determine which AI model to use - at the time of writing, there's Adobe's commercially safe Firefly and the ElevenLabs Multilingual V2 partner model.

I then picked a speaker from a list of 45, each variably described as male, female, non-binary, young adult, middle-aged, senior, and so on.

Finally, I pasted in my text into the text field - Firefly can figure out what language I'm using, but you do get the option to choose it yourself. I used the poem Ozymandias (with my greatest apologies to Shelley).

What I liked here was that with your text in place, you can choose to add additional text, or tell the AI to pause in certain places.

To actually preview, I had to select the entire passage and use the context menu to (it's where you also fix pronunciation and adjust the tone of voice).

For all the talk of speeding up workflows, this feels like a misstep to me. It just needs a play button at the bottom of the screen.

I had to tweak the pauses to give my text room to breathe, and once in place, I could alter the timings by clicking the pause on the preview screen. And for some reason, the word "land", of all things, is what tripped up the AI, where it was pronounced "lan."

Creating AI SFX

For this test, I again used a video filmed for my reMarkable review - this time a 12-second clip comparing the reMarkable 2 with the Paper Pure.

This process is a lot more in-depth, in the sense that the AI isn't going to guess what the likely SFX should be. I had to manually describe what I wanted. After that, I clicked the "Enhance Prompt", which added more descriptions.

We end up, then, with "A sliding whistle descending softly with a metallic timbre and gentle resonance." Clicking Generate, the service rapidly produced four ear-piercing variations. I won't subject you to those results. It's not fair on anyone.

Instead, I changed the prompt to a more soothing "crickets in a field" for a duration of 12 seconds, to fill the video length.

What's nice about the SFX option is that you can add multiple audio tracks and use the handles to adjust its positioning.

With a timeline sprawled across the bottom of the screen, it feels more like a real audio editor (to a degree, at least). Tug in the handles of the audio and you can further adjust volume or delete the track.

Worth it?

Overall, there are some UI tweaks I'd like to see here to make production workflows faster.

I don't think they'll substitute professional sound designers, composers, and musicians any time soon. But having worked in marketing, I can see they have their place for marketers and everyday video creation.

Speech is a world away from the days of robotic Microsoft Sam sound-alikes, but for nuanced line delivery, nothing's going to beat a performer in a booth.

Sound Effects has a lot more utility, though. Across a spectrum of generations, I couldn't tell the difference between the AI sounds and those playing on an old SFX CD I own.

The real winner here is Generate Music. Even the base prompt delivered audio that wouldn't feel out of place in a product demo, review, business explainer, or similar. And it got better with every generation I created.

An update worth exploring, then, for fast-moving video production.

• Researcher inds ClarityCheck’s exposed 450GB database with 9M+ user images
• Leak included faces, profiles, and photos, risking identity theft and phishing abuse
• Company secured access quickly; no evidence of dark web distribution or misuse so far

An online reverse-lookup platform has inadvertently leaked millions of faces on the internet, putting people at risk of identity theft, phishing, and more, experts have warned.

Jeremiah Fowler, a cybersecurity researcher known for hunting exposed databases, recently found one totaling 450.2GB in size.

It contained exactly 9,042,977 image files - profile pictures, screenshots, and scans of physical photographs - all seemingly uploaded by the users. The images showed adults, teenagers, and even children, and were stored in folders labeled “faces” and “profiles”.

What happened?

Further investigation showed the database belonging to a company called ClarityCheck. This is a US-registered firm describing itself as a “reverse phone, email, image, vehicle lookup”, allowing users to identify unknown callers, verify online contacts, check photos, and decode vehicles using publicly available data from “trusted sources”.

It is a legitimate business whose use case grows more important by the day - cybercriminals create fake internet personas every day, and use them in all sorts of schemes, from romance scams, to fake job offers, to anything in between. To do that, they will either steal other people’s photos, obtain (or buy) them on the dark web, or generate them using artificial intelligence.

Being able to verify someone’s identity has become everyone’s essential due diligence, regardless of if it’s a personal or business matter.

How ClarityCheck responded

As soon as Fowler confirmed who owned the database, he reached out to ClarityCheck and responsibly disclosed his findings. The company responded quickly, barring further access, and thanking the researcher for his work.

“I completely understand your concerns regarding the exposure of sensitive images and the associated privacy risks. We greatly appreciate ethical researchers like you who bring these matters to our attention so we can act swiftly to protect our users' data and privacy,” the company’s representative told Fowler.

Unfortunately, without a deeper investigation on ClarityCheck’s end, there is no way of confirming exactly how long the database remained open, or if anyone accessed it before. However, so far there is no evidence of abuse, since a “ClarityCheck photo database” is currently not being distributed or sold anywhere on the dark web.

Exposing people to hackers

In a world where data theft and leaks are increasingly common, a cause that’s easiest to address, is also the one resulting in most exposures - misconfigured databases. Nowadays, almost every business harvests and stores data about their employees, partners, and customers. Most of them store these files in cloud databases, for easier access and better integration with business intelligence software.

However, cloud service providers work on a so-called “shared responsibility model”, which means they are responsible for providing industry-standard security features. Users, on the other hand, are responsible for using those features and properly configuring their databases (namely, setting up a strong password or encrypting the content). Unfortunately, many organizations don’t seem to be aware of the shared responsibility model, firmly believing it’s the service provider’s task to keep the data safe. Others simply keep these archives accessible by mistake.

Criminals are aware of this, and are taking advantage of the situation to steal valuable information. By using widely available tools like Shodan, Censys, or FOFA, they can scour the web for unencrypted, non-password protected databases, and exfiltrate data to be used in phishing, business email compromise, and other forms of cyberattacks.

Over the years, Fowler and other searchers have found dozens of enormous databases that have leaked sensitive data on hundreds of millions of people.

In 2026, researchers found that European cloud provider Nextcloud kept an unprotected database on the public internet, containing 367,000 records (8GB) of sensitive employee and client data.

In 2025, IMDataCenter, a Florida-based data hygiene, enhancement, and append services provider, was leaking 38GB of sensitive personal records. The unencrypted and non-password-protected database held 10,820 in total.

In 2024, sports analytics technology company TrackMan exposed sensitive customer data: 110TB and 31,602,260 records. The database had no password.

Worried about intruders sneaking around inside your house when you’re out of town? You could get one of the best home security cameras, but what if your existing router could do some of the heavy lifting? That’s what Comcast has just started offering its customers, but the move has been met with considerable controversy.

Dubbed WiFi Motion, the new feature is coming to Comcast-owned Xfinity’s internet services. Once you opt in, WiFi Motion detects changes in the Wi-Fi signals emitted by the company’s routers and other smart home devices to detect the presence of people in your home. While there’s no video surveillance involved, it can be used as a basic way to sense people who should not be inside your house. When that happens, you’ll receive a notification in the Xfinity app.

While Xfinity told The Verge that WiFi Motion would provide “a basic level of security,” it’s caused a degree of consternation among the general public — and not for the first time. On Reddit, for example, one user described it as “Flock for your bedroom,” likening the system to Flock’s controversial numberplate-recognition cameras.

Another worried that “A few years from now they’ll be hit with a few million-dollar fine or lawsuit while profiting hundreds of millions from selling the data.” In a world where user data forms a lucrative trade and data brokers increasingly siphon off people’s private information, it’s unsurprising that users are apprehensive about where their presence data might end up.

“Conspiracy guys were saying for probably a decade that they could use Wi-Fi to fully map out the interior of your house and track you,” added another Redditor. “Crazy that it’s just out in the open now.”

A potential privacy nightmare

The privacy concerns for technology like this are wide-ranging. While many people already have indoor security cameras that can see who is walking around inside their homes, these people have consciously bought these products and opted into the system.

When surveillance is added to a router, though, we’re talking about orders of magnitude more people being affected — potentially many millions, in this instance. Moreover, most of them will not have bought a router for its tracking abilities, yet will find themselves with a device that can do just that. That’s enough to make anyone feel uneasy.

Once a system like this is in place on millions of routers, it opens a massive door to potential misuse — users simply have to trust that Xfinity is using this data responsibly, with no way of knowing if that’s actually the case. Who can see the data? How long is it retained? Are there proper checks in place? We don’t know the answers to any of these questions.

It also paints a huge target on the data. Any time private data is collected en masse, hackers start snooping around. If someone was able to hack into your router and use its presence detection to determine that no one was home, it would be simple to then disable the system and pick the optimal time for a burglary.

Even discounting all of that, there’s another privacy issue: Comcast says that enabling the feature means it might share your Wi-Fi Motion data with third parties at its discretion.

As per an Xfinity support page, “Comcast may disclose information generated by your WiFi Motion to third parties without further notice to you in connection with any law enforcement investigation or proceeding, any dispute to which Comcast is a party, or pursuant to a court order or subpoena.”

We also don’t know if firmware updates will respect a user’s decision not to opt in to Comcast’s router-based presence tracking. For now, the company says that the feature is opt-in, but can we guarantee that that will always be the case? And if a future software update opts people in automatically, can you trust Comcast to explicitly tell you when that happens?

While this new router feature might be well-intentioned, it raises all manner of security and privacy concerns. If you’re worried about the implications for you and your family, replace your Comcast router with one of our picks for the best router money can buy. And if you need to, consider one of the best home security cameras if you still want to be alerted to unwanted intruders.

• Varonis uncovers CoSnitch, a chain of flaws letting Copilot leak sensitive data
• Exploit used malicious URLs and persistent memory poisoning to bypass guardrails
• Microsoft patched CVE‑2026‑24301 server‑side; technique may affect other AI models

Microsoft’s Copilot AI just told a group of researchers how to abuse it for data exfiltration, and it worked. It was not a straightforward process, and the AI did not turn “evil”, but one might say it is gullible and somewhat naive.

Security firm Varonis has published a new report outlining its discovery of a vulnerability in Copilot they named CoSnitch.

The name is a major hint at what the vulnerability is - as CoSnitch is a chain of three vulnerabilities which Microsoft later labeled as CVE-2026-24301, giving it a severity score of 8.8/10 (high), and fixing it with a patch.

You can’t trick me, and I’ll tell you exactly why

Cybercriminals have long been using AI as part of their arsenal, as it helps them draft convincing phishing emails, write malicious code, and identify high-value targets - and developers have responded by placing guardrails, which making AI outright refuse to do certain things.

In the report, Varonis said its researchers did not hunt for bugs in the code or try to reverse-engineer an existing exploit. They just talked to the AI, and with each subsequent question, learned more about its guardrails and how they work. They called the technique “meta-hacking”.

Whenever Copilot declined a request, it explained why, giving the researchers snippets of insight into how it operates. Or, as Varonis hinted, it “snitched” on itself. This, eventually, helped them map out its defenses and learn how to work around it:

“The resistance is part of the technique,” they explained. “Each “that won’t work because…” is an invitation to probe the “because.” You don’t exploit the model. You manipulate it into cooperating.”

After a long conversation with Copilot, the researchers were told, inadvertently, how to create a URL which would, as soon as it was clicked, kick off a chain reaction that resulted in sensitive data exfiltration.

The dangers of connecting AI to apps

So, Varonis learned that by creating a URL like this one - “https://copilot.microsoft.com/?q=&autorun=1*” - they could get Copilot to run any malicious prompt as soon as it was clicked. Threat actors could, for example, add this link in a phishing email and trick the victim into clicking on it, telling AI to send all sensitive data to the attackers’ infrastructure.

But that is only half of the challenge. In this setup, the researchers could only exfiltrate the data the victims shared with Copilot during their sessions together.

The risk escalates the moment the victim connects the AI to their apps - Gmail, Drive, Calendar, and others. As Varonis explained, the malicious prompt could tell Copilot to exfiltrate all email addresses found in Gmail, all passwords and other secrets found in the emails’ bodies, all information stored in the Drive folder, and all events logged in the Calendar.

The third part of the CoSnitch vulnerability chain is called “Persistent memory poisoning via web summarization”. As Varonis explained, attackers could craft a webpage which, when summarized by Copilot, injects attacker instructions into the victim's permanent memory store.

“The injection survives password changes, session revocation, and device re-enrollment, persisting forever,” they warned. This flaw is called “indirect prompt injection” and it is not exactly novel - it’s been observed before and stems from the fact that the AI cannot differentiate between instructions, and data to be analyzed.

Microsoft was notified about the existence of CoSnitch in December 2025, but only addressed it in mid-August 2026, the researchers said. Unfortunately, we don’t know how Microsoft sorted it - we can only speculate Copilot was instructed not to explain how its guardrails work. Given what CoSnitch is in the first place, perhaps it is for the best that Microsoft hid the solution.

Luckily enough, it doesn’t seem to have been exploited in the wild, since Varonis could not find any evidence of abuse. The fix was applied on the server side, meaning there is nothing for users to do at this point.

Since this is not a bug in the code, other AI models might be susceptible to the same techniques, the researchers warned. “The novel meta-hacking technique that uncovered CoSnitch — using the AI’s own reasoning to surface its hidden internals — applies to any agentic platform with a natural language interface,” they concluded, adding that they’ll be publishing more research soon.

• Microsoft says blocking domains is ineffective against MacSync Stealer’s evolving infrastructure
• Defender experts tracked over 30 domains by analyzing behavioral patterns instead
• Mitigation focuses on spotting suspicious shell sessions, osascript activity, and /tmp/sync archives

Microsoft says it has found a way to stop the dangerous MacSync Stealer malware by monitoring certain behaviors, rather than keeping track of the domains used in the attacks.

MacSync Stealer is a piece of infostealer malware built for the Apple ecosystem - it steals passwords, browser data, cookies, Keychain secrets, cryptocurrency wallets, Telegram sessions, SSH/cloud credentials and other sensitive information.

It was being distributed via ClickFix scams. Victims would visit a malicious website which would tell them they had a problem (an outdated browser or a “protected” document that can only be viewed after “verifying” identities), and which would immediately offer a solution. That solution is to bring up the Terminal and paste a command which, in reality, deployed the malware.

Initially, defenders would keep their Mac fleets safe by blocking the domains used to host the infrastructure - the websites, the malware executables, and the exfiltrated data. But they soon realized that a new domain would pop up as soon as the old one was blocked, and the malware would continue its operations unabated.

Behavioral analysis

Now, in a new report, Microsoft said it successfully identified more than 30 domains by looking at behavioral patterns such as repeated execution, request characteristics, staging behavior, and upload methods.

“Microsoft Defender Experts expanded that view by correlating recurring endpoints and network behaviors across the activity. This behavior-led approach connected more than 30 domains and showed that the infrastructure supported more than C2 communication, extending into active collection, staging, and exfiltration,” Microsoft explained.

In other words, to defend against MacSync Stealer, don’t focus on blocking domains. Instead, pay attention to shell sessions spawning ‘curl’ with specific flag combinations, osascript quickly chaining into network activity, and archives appearing under /tmp/sync just before outbound PUT traffic begins.

• Bluesky confirms 24‑hour outage was caused by a DDoS attack on August 17 2026
• Researchers linked it to Iraq‑313 Team, using DiamWall‑based DDoS‑for‑hire infrastructure
• Company upgraded defenses; no details yet on attackers, traffic origin, or user impact

The recent outage on Bluesky was the result of a Distributed Denial of Service (DDoS) attack, the company has confirmed.

Bluesky is a decentralized social media platform which is rather similar to X, since it allows users to post short messages and multimedia. Its key difference is the Authenticated Transfer Protocol (AT Protocol) upon which it was built, and which allows users and developers more control compared to other social networks.

On Sunday, August 16 2026, users started reporting problems accessing Bluesky. On Reddit, users from the US, UK, France, and other countries, said they were having issues loading the Bluesky website and app, or accessing their feeds. A day later, on August 17, Bluesky said it suffered a DDoS attack that lasted roughly 24 hours.

Iranians claim the attack

The company did not say who the attackers were, where the malicious traffic originated from, or if any specific DDoS infrastructure was used in the attack. It also did not say how many people were affected, but stressed that it upgraded its defenses and was continuing to monitor the situation.

At the same time, security researchers took to the IFIN public forum to discuss the attacks, saying they saw The Islamic Cyber Resistance in Iraq-313 Team, an Iran-backed threat actor, take responsibility for the attack, as well as for a similar DDoS strike on GitHub. It sounds plausible, since we’ve seen the 313 Team use DDoS to target similar services in the past, including Spotify and Ubuntu.

Their initial research suggests the crooks used DDoS-for-hire infrastructure that relies on DiamWall which, in turn, seems to be using IP addresses supplied by a China-based reseller. This does not mean the attack traffic came from China, or that Chinese entities were involved in the attack.

Via TechCrunch

As the resident NBN and home-internet expert for TechRadar Australia, I spend much of my time looking out for the best internet deals, and there are almost invariably a number of compelling options at every different speed tier — and these can be a great way to sense-check if you’re overpaying for your current NBN service.

When choosing deals, much of my decision-making revolves around two easily identifiable metrics: price and typical evening speed (TES). Typical evening speed is something all internet service providers (ISPs) have to disclose before you sign up for a plan. In essence, it tells you the download speed you can realistically expect to achieve during the busier evening hours of 7pm to 11pm. Being able to view the TES also means you can easily identify which ISPs ultimately offer better value — i.e. the ones advertising fast evening speeds at competitively low prices.

With almost all of the best NBN 500 plans promising to deliver their maximum 500Mbps speeds even during the peak evening period, it’s a tier where direct price comparisons make sense. However, things get a bit wobblier when you’re shopping for faster speeds, such as NBN 750 and NBN 1000.

Most plans on these tiers make more conservative promises when it comes to typical evening speed — for example, rather than the 1,000Mbps you might expect from NBN 1000, on these gigabit plans, most providers only promise evening speeds in the 820-860Mbps range. With that TES figure closer to 750Mbps than 1,000Mbps, it prompted me to ask a simple question: Is NBN 1000 actually worth it, or should you save yourself some moolah every month and opt for NBN 750 instead?

Cue a whole load of number crunching!

So average

First, I calculated the current average monthly cost of NBN 750 and NBN 1000 plans, alongside the average TES advertised by the providers I monitor. After crunching the numbers on NBN 750 plans from 14 providers and NBN 1000 plans from 20, the final results were:

As expected, the results show that NBN 1000 plans do not, on average, get as close to their nominal 1,000 Mbps tier speed as NBN 750 plans get to 750 Mbps. The gigabit gap was quite substantial, falling 164.6Mbps shy of the tier’s nominal 1,000 Mbps tier, compared to a shortfall of just 19.8 Mbps for NBN 750.

With the average monthly cost less than AU$10 difference between the two tiers — specifically AU$8.97, or 8.5% — the question then became whether the NBN 1000’s typical evening speeds are worth it from a value perspective. For that, we of course needed to do some more maths:

Next steps

With NBN 1000 plans falling far short of 1,000Mbps in their typical evening speed promises (averaging just 83.5%), intuitively they seemed like they’d come out second fiddle to NBN 750. Surprisingly, however, NBN 1000 is slightly ahead when comparing cost per megabit for typical evening speeds: 13.8 cents for NBN 1000 versus 14.5 cents for NBN 750. There are a couple of NBN 750 plans that come in below that average at 13 cents per megabit — Kogan Internet and Spintel — which I've listed below.

In other words, NBN 1000 might cost more in absolute terms, but it does offer slightly better value per advertised megabit. If you need some recommendations as to which NBN 1000 plans are worth checking out, look no further than Dodo and Superloop. The cost per megabit on these two works out to be 13 cents, placing them among the cheapest for the tier.

Is there a third option?

The NBN 750 and 1000 plans don’t exist in a vacuum, however, and NBN Co has been pretty clear that it considers NBN 500 — introduced last September — to be the current sweet spot for most Australian households. So how does the golden child stack up, you ask? I’ve also made it no secret that I consider it the best option for most Australian households, but admittedly, that’s been without these recent calculations.

As we alluded to above, unlike NBN 750 and 1000 plans, most providers do advertise maximum plan speeds for NBN 500, with an average typical evening speed of 499.3 Mbps across 22 providers — equivalent to 99.9% of its potential 500 Mbps maximum.

On a cost-per-megabit basis, however, things don’t look as pretty for my personal fave. With an average monthly price of AU$95.75, the average megabit cost works out to around 19.2 cents, making it substantially more expensive than both NBN 750 and NBN 1000.

With that being said, it still remains the cheapest option in outright monthly terms, with the average NBN 500 plan costing AU$95.75 — AU$10.23 less than NBN 750 and AU$19.20 less than NBN 1000.

As for my top recommendations for an NBN 500 plan, look no further.

Decisions, decisions

So, where to go from here? What these numbers helpfully confirm is that if you do opt for a faster plan, you are getting good value from a purely cost-per-megabit metric — so if you were looking to justify jumping up to NBN 750 or NBN 1000, you can probably stop reading here.

These facts and figures can’t take into account all the subjective-but-important real-world factors that come into play when choosing an internet plan — they can’t, for example, help you determine how much speed your household actually needs.

While it’s now been proven that NBN 1000 plans offer the cheapest cost-per-megabit, that’s only really useful if you actually need gigabit speeds regularly. What you’re ultimately paying extra for, most of the time, is time — specifically, less time waiting for large files (like video games or OS updates) to download.

And with NBN Co recently claiming that average monthly data usage increased to 574 GB per premises — up 13% year-on-year — having a plan that will download all those gigs faster is going to become more and more essential.

For me personally, I’ve decided I can stand to wait a little longer on the one or two occasions a month when that extra speed would be noticeable. It’s hard to justify paying more if the extra megabits are going unused 95% or more of the time.

After a youth spent awkwardly toting my possessions about in handbags, I have turned into a backpack convert. I now love nothing more than a well-designed rucksack; one that's comfortable to wear, well-built and has spaces to keep everything organized. Oh, and obviously it needs to look good too. And so while I've now accumulated plenty of backpacks for every occasion, I have found my head turned by the North Face sale running at Amazon right now.

There are massive discounts of a huge range of everyday options in all kinds of colors. Almost all have a padded laptop sleeve in the back as well as a selection of useful pockets for things like water bottles, pens, notebooks, keys and phones. Impressively, they all come with the stamp of approval from the American Chiropractic Association, thanks to their ergonomic designs. I think they'd make the perfect packs for students heading off to university, but they'd also made a great choice for commuting adults.

I've rounded up the best discounts below, starting with the unisex options, and moving on to women's designs for those with a smaller frame.

Pack it up

Women's options

• Geekom has admitted a software driver contained malware
• A LAN driver on a legacy page was hosting the Asruex backdoor
• The malware can track keystrokes, steal passwords, and intercept data

Hardware maker Geekom has admitted that a network driver for multiple mini PC variants hosted Asruex backdoor malware, potentially putting users at risk

The LAN driver for Geekom’s range of A7, A8, AE7, AE8, AX7 Pro and AX8 Pro mini-PCs hosted the malicious package with administrator-level permissions that allowed it to monitor everything you type, steal data, and even swipe passwords from your machine. The malicious software also connects to a command and control (C2) network to send and receive information from hackers.

Geekom has issued an apology and removed the software package in question, but if you have a Geekom mini PC from the aforementioned range and have installed the LAN driver, I’d definitely recommend doing a full system virus scan, with a wipe and reset just to be sure.

Geekom ships malware-riddled LAN driver

Videocardz first broke the story after investigating claims from a Reddit user who reported finding a malicious executable file contained within the LAN driver.

Videocardz then independently investigated the claim using FileScan.IO, MetaDefender VirusTotal, and YARAify. Each antivirus engine detected the executable as malicious.

In Geekom’s statement about the malicious file, the company said that the driver was hosted on a “legacy page [that] had already been replaced and was no longer accessible through the normal Support navigation, although it remained indexed by search engines.”

So when users searched for the LAN driver using Google, the result that came up was the malicious file. I always recommend users install drivers and other software from the official distributor rather than using Google listings as hackers can use tactics such as SEO poisoning or promoted pages to offer dodgy software. But in this case the legacy page was official.

Geekom has confirmed that none of its mini PC range were shipped with the malicious driver preinstalled, so if you haven’t directly downloaded the malicious software from the legacy page, you should be okay. But consider running a Windows Defender scan to be sure.

In order to guarantee that your mini PC is free of the malicious driver, perform a complete wipe and reset of Windows, and install a new Windows image direct from Microsoft’s official page. Going forward, only install software and drivers from the official support pages of the manufacturer.

• Heights Finance breach exposed sensitive customer data via a compromised third‑party cloud platform
• Stolen records included contact details, financial info, and government identifiers
• Over 700,000 Texans affected; company offers credit monitoring and identity protection

US loan company Heights Finance has revealed it suffered a cyberattack earlier in 2026 in which it lost sensitive data on hundreds of thousands of its customers.

The company published a data breach notification on its website, disclosing that on May 7 2026, it saw an “unauthorized actor” gaining access to a cloud-based platform, hosted by a third party, which the company uses to store certain customer data.

The breach was limited to that cloud platform only and did not affect its loan management system, or other systems and networks.

At least 700,000 victims

As is standard practice in these incidents, Heights Finance notified the relevant authorities and brought in outside cybersecurity help.

The subsequent investigation determined that the attackers - which were not named - stole contact details (names, postal addresses, phone numbers, email addresses), financial information (account details, bank account information such as bank name, account number, routing number), government identifiers (Social Security numbers, tax IDs, driver’s license numbers), and other miscellaneous data.

“Your information may be involved if you received a loan through Heights, or if you inquired about or applied for a loan product (including through a third party),” the company said. “Your information may also be involved if you were a former borrower of Curo Management or any of its former or current related brands.”

The exact number of affected individuals is not known at this time. Heights Finance told regulators in Texas that the breach affected more than 730,000 of its residents, and added that it affected those living in Alabama, Tennessee, Georgia, Texas and South Carolina.

We don’t know which cloud-based platform Heights Finance is using, and the threat actors are yet to claim responsibility for the attack. In the meantime, the company is offering affected customers credit monitoring and identity protection services through Epiq.

Via The Record

• Windows 11's right-click menu has some big changes in testing
• This context menu is being streamlined and is now more responsive
• You can also customize the entries in the menu, or even switch it to be like Windows 10's version

Microsoft is finally streamlining Windows 11's context menu — the one which pops up when you right click something on the desktop — as well as bringing in more customization choices.

In a blog post for a new preview build in the Experimental channel, Microsoft announced that it's rolling out a redesigned context menu for File Explorer (meaning the files and folders on your desktop).

It's "designed to feel faster, cleaner, and easier to tailor to the way you work", and Microsoft has made two major improvements here.

Firstly, the right-click menu is a lot less cluttered, with far fewer options now appearing in the list by default (building on some previous work along these lines). On top of that, there's new functionality in Windows 11's settings, enabling you to customize what appears in the context menu.

Windows Central reports that it has tried this revamped right-click menu, and that it's not just trimmed down, but also faster to load (no doubt reducing the bloat has helped to improve performance).

You can also choose to have a Windows 10-style context menu, where the elements at the top in the horizontal panel (cut, copy, rename and so forth) are integrated into the vertical menu list (removing the top panel, essentially).

It's possible to ditch any entry you don't want from the menu, too, so gone are the days when you installed a third-party app and it annoyed you by placing itself in the context menu when you didn't want that to happen. You can now simply banish the offender.

Analysis: it's about time

In my opinion, you should have been able to tailor the right-click menu to your own preferences right from the very off in Windows 11. Or at least you should have been able to remove the likes of third-party additions to the menu, even if Microsoft kept the core defaults set in stone.

Still, Microsoft has improved the context menu immeasurably here, and the more responsive performance is great to hear about. Windows 11 users have long complained that it's ridiculous that right-clicking on something could mean a delay of a few seconds before the menu actually appears. This is a basic piece of interface functionality, and not one that should be running slowly on an average PC.

Bear in mind that this is just in testing for now, so this new layout and options may take some time to arrive in the full version of Windows 11. That'll likely happen later this year, although you can't be sure whether Microsoft will keep everything as it is now (some choices could be scrapped, changed, or more might be added, even).

For now, a good many Windows 11 users are impressed by this work, but there are some who, like me, are still a bit sore about it taking so long to happen. One Redditor said: "They had 5 years to do that. Better late than never I guess."

There are others who have already left Windows 11 behind and can't resist making it clear that they won't be coming back, no matter how far Microsoft takes its drive to fix Windows 11. This Redditor observed: "Too little too late, I will refuse to ever go back to MS," adding that: "They've lost me and everyone who listens to me for IT advice."

Others point out that the performance work to fix Windows 11's sluggishness is a decision driven by necessity and the RAM crisis. Someone else on Reddit pointed out: "Probably has a lot more to do with having to figure out how to get Windows 11 working on 8GB of memory since they can't control the price of memory."

And another Redditor replying to that agreed, saying, "This is exactly why this is happening. All the 'fixes' started after they announced 8GB Surfaces."

It's easy to be overly negative on Windows 11, yes, but responses like these are ultimately Microsoft's fault, and a result of the attitude it has shown with the development of the operating system through the years.

With that said, it does very much feel like a fresh leaf has been turned over, and I'm very happy that this is the case. Hopefully Microsoft can apply changes to Windows 11 that'll continue to surprise us, and make this desktop OS a more enticing prospect — although it's unlikely those more disgruntled Linux defectors out there will ever be tempted back.

• Hacker “TheHatman” claims to have stolen millions of Azure/Entra employee records from major firms
• Data includes names, emails, job titles, privileged accounts; risks include impersonation and fraud
• Victims dispute scope, but researchers say infostealer‑based theft makes the leaks likely authentic

A cybercriminal is selling millions of user records on the dark web, which they claim to have stolen from large organizations such as McDonalds, Tata Consultancy Services, and Wyndham Hotels.

A hacker going by the alias “TheHatman” posted multiple threads on dark web forums, claiming to have stolen information from Azure and Entra environments.

TheHatman said they broke in using compromised login credentials, targeting almost a dozen organizations.

What was stolen and from whom?

Among the victims and the number of records exposed, are:

McDonald’s Corporation: 1,700,000 records
TCS (Tata Consultancy Services): 800,000 records
Vodafone: 425,000 records
HCL Technologies: 250,000 records
InterContinental Hotels Group (IHG): 185,000 records
Kyndryl: 170,000 records
Gap Inc.: 80,000 records
Hexaware Technologies: 20,000 records
Wyndham Hotels: 9,000 records

They are now looking for a buyer: “I’m selling McDonald’s Corporation internal employee dump downloaded directly from Azure Tenant using compromised credentials,” TheHatman said in one of the posts.

In their writeup, security researchers from Cybernews said they analyzed one of the samples posted on the dark web and said the entries were “consistent with Azure directory exports”.

They contained employee names, emails, phone numbers, job titles, workplace addresses, IDs, the departments they work in, user group memberships, service accounts, and highly privileged account records.

What are the risks?

Stealing information such as names, email addresses, and workplace details might not sound like a worrisome breach of privacy, but the implications are rather big. Cybercriminals can use it to impersonate a business partner or a major client, and try to trick their employees into installing ransomware, or making a fraudulent wire transaction. That way, they can escalate what seems like a relatively benign breach, into a full-blown cyberattack with material and legal consequences.

For example, a criminal might discover a Vodafone employee that regularly handles payments to a particular supplier. They might impersonate that supplier’s finance director, engage in conversation and, while requesting a new payment, warn that the company changed their bank account. This is not a purely theoretical scenario - it’s been documented time and time again.

What did the victims say?

Most organizations are yet to give an official statement about these claims. Gap told BleepingComputer that it found no evidence of the breach and suggested that the attackers merely repackaged data from an older incident.

“Our preliminary investigation indicates that the data in question is limited in scope, non-sensitive and dated back to several years ago. Notably, there is no evidence to suggest that our corporate systems have been compromised,” Gap told the publication.

Tata Consultancy Services notified the Indian National Stock Exchange about the breach last week, also suggesting that this was a resurfacing of an older incident.

“The Company has investigated the matter and has not found any credible evidence of a breach of TCS systems or customer environments,” TCS said in the filing. “The information referenced appears to be more than four years old and limited to basic employee information. There is no indication that customer data, customer systems, or TCS operational systems have been impacted.”

TCS said the attackers broke in using credential stuffing, something that could have only been done years ago: “The attacker claims to have used password spray and Multi-Factor Authentication (MFA) fatigue as the attack vector. The Company has had strong safeguards in place against such techniques for more than two years.”

Not everyone agrees with that assessment, though. Security researchers Hudson Rock believe the attackers stole login credentials with an infostealer, rather than through password spraying.

“Judging by the massive size of the organizations impacted, it appears highly likely that this campaign originates from targeted exploitation of Infostealer infections rather than a systemic zero-day vulnerability in Azure,” the researchers said in their report. “If this were a widespread vulnerability, we would likely see a much broader spectrum of organizations impacted, including smaller businesses, rather than just these massive Fortune 500-level enterprises.”

Hudson Rock also described the stolen data as “likely highly authentic”, hinting that just because it’s older, it doesn’t mean it’s not useful.

• Pokémon Center UK orders disrupted after CEVA Logistics cyberattack on July 30 2026
• Customer names, addresses, emails, and order details likely exposed, but accounts and payments safe
• Around a dozen organizations confirmed affected; no group has claimed responsibility yet

Customers who recently ordered their favorite Pikachu toy from Pokémon Center might have to do it all over again, since the company suffered a third-party cyberattack which disrupted its operations.

The official store for Pokémon merchandise in the UK has reached out to its customers via email to warn them about a recent cyberattack and its consequences.

According to BleepingComputer, which has seen a copy of the email, the company told its customers they had to “cancel your recent order due to an unforeseen fulfilment issue”.

CEVA Logistics

The company’s website is also showing a notification saying the company is “currently experiencing delays affecting some orders for our UK customers.”

“These orders may take longer than usual to process, dispatch, and deliver. We apologize for the inconvenience and appreciate your patience.”

The company said the attack struck its logistics provider, CEVA Logistics.

"CEVA Logistics, the vendor Pokémon Center utilizes to ship products from PokemonCenter.com for customers in the United Kingdom and Germany, has informed us that unfortunately they were a victim of a cyber attack commencing on 30 July, 2026."

Last week, one of the biggest shipping and logistics companies in the world disclosed an incident that forced it to shut down parts of its IT infrastructure and affected eight warehouses. At the time, a handful of its customers reported being affected by the breach, including Dutch retailers Bol and De Bijenkorf, and PC gaming powerhouse Valve.

Pokémon Center said the data most likely exposed in this incident includes people’s full names, mailing addresses, phone numbers, email addresses, and details about what they previously ordered on the site. User accounts are apparently safe, and so are payment details.

So far, around a dozen organizations are confirmed as having been affected. No threat actors have claimed responsibility yet.

Keychron K8 Ultra 8K: One-minute review

The Keychron K8 Ultra 8K is a wireless mechanical keyboard with an impressive spec that hopes to compete with the more premium offerings in the space.

It exhibits the brand’s typical design language, with its sizable keycaps and retro looks. The whole unit is black, save for some grey and green keycaps. To liven things up, it features some bright backlighting with plenty of customization options, although the keycap legends aren’t transparent, so it doesn’t illuminate them. This makes them harder to see in dark environments, which somewhat defeats the backlight’s purpose.

The board base is very thick, which means you have to angle your wrists considerably to reach the tall keys. It’s in dire need of wrist support, which is an oversight since a lot of the best keyboards come with a rest. It’s also quite heavy, thanks to its metal construction. This does help to keep it planted, though, and it’s as solid as you would expect it to be.

To customize the inputs of the K8 Ultra 8K, you’ll have to use Keychron’s Web Launcher. Here you’ll find a reasonable selection of rebinding options, and there’s also a basic but functional SOCD function for altering key priority. It’s a relatively easy app to use, and despite being web-based, it’s quick and responsive; I didn’t encounter any disruptive loading times during my time with it.

In action, the K8 Ultra 8K performs well. The keys are sufficiently damped, although some clickiness remains, which can be a little harsh at times, but mostly they’re satisfying to use. They’re snappy and responsive, too, while being forgiving of accidental nudges. The indents and shape of the keycaps are comfortable and offer a secure hold.

However, the switches of my review unit didn’t have the smoothest of motions. The keys are also spaced quite far apart, which can make reaching certain inputs a stretch. What’s more, the aforementioned angle your wrists are forced to adopt can lead to strain after short periods. I had no issues with connecting the K8 Ultra 8K via 2.4GHz or Bluetooth, and switching between them was quick and easy.

The K8 Ultra 8K is a reasonable price when you consider all that it offers. There are certainly much dearer mechanical keyboards, such as the Razer BlackWidow V4 Pro 75%, but there are also cheaper ones, such as the MonsGeek FUN60 Ultra. However, the K8 Ultra 8K remains a solid choice if you like a substantial board — just pair it with a wrist rest.

Keychron K8 Ultra 8K review: Price & availability

• $119.99 (about £90 / AU$170)
• Available now in three switch types
• Good price for a wireless mechanical keyboard

The K8 Ultra 8K costs $119.99 (about £90 / AU$170) and is available now from Keychron’s website, with shipping rates varying according to region. It can be had with a choice of three switch types: Red, Brown, or Banana. It comes with a braided USB cable, several spare keycaps, and a keycap puller.

This is a good price for a wireless mechanical keyboard with hot-swappable switches. Similar models from bigger names can cost considerably more, such as the Razer BlackWidow V4 Pro 75%. However, the performance of that board is far superior, being perhaps the best mechanical keyboard I’ve ever tested. Its switches are a joy to press, while the companion software offers more customizations and tweaks.

If you’re after a more budget-friendly gaming keyboard, the MonsGeek FUN60 Ultra is hard to beat for value. It has a surprisingly high-quality design, while its analog switches feel almost as good as mechanical ones, with added actuation adjustments.

Keychron K8 Ultra 8K review: Specs

Keychron K8 Ultra 8K review: Design & features

• Retro look
• Solid, thick, and heavy
• Reasonable web app for customizations

The K8 Ultra 8K adopts Keychron's signature aesthetics, which is to say it has a thick base, tall keycaps, and a black colorway. However, there are a few grey peripheral keys, as well as a green Escape key, to add some contrast.

Allied to its thick chassis is a substantial weight. This helps the K8 Ultra 8K to stay planted, but makes it a chore to move around frequently. Build quality is also impressive, with its metal frame feeling as solid as you would expect it to feel, while the keycaps have only a hint of play.

What’s disappointing about them, though, is their opaque symbols. This means the vivid RGB backlighting doesn’t get a chance to shine through them; in fact, it can actively obscure them in dark environments, which defeats at least part of the backlighting’s purpose. Fortunately, it still shines through the spaces between the keys, and there are plenty of customizable patterns for it.

Like some other Keychron models, the K8 Ultra 8K’s USB port is located on the left side of the unit, rather than at the back. This is an interesting location and can help to reduce the cable interfering with deskspace, depending on your particular setup. The included cable’s jack protrudes slightly from the side, but since it’s L-shaped, it's actually quite discreet. This shape also helps the cable to naturally follow a path less intrusive to deskspace.

Keychron doesn’t offer a downloadable app for the K8 Ultra 8K; instead, you’ll have to use the Keychron Web Launcher via a browser. Quite often, such web apps can be slow and awkward, with frequent loading times and connectivity issues. However, I found Keychron’s fast and easy to use.

What’s more, it offers a reasonable amount of customization. Besides standard key assignments, there are quite a few shortcuts for various system commands and media controls. There’s also a SOCD feature with three different modes, as well as a section for altering the bounce (more commonly referred to as debounce) times of key presses and resets, with sliders for each ranging from 10ms to 50ms, with single millisecond increments selectable.

Keychron K8 Ultra 8K review: Performance

• Tactile and damped switches
• Snappy yet forgiving
• Uncomfortable thickness

True to its mechanical nature, the K8 Ultra 8K is quite a satisfying board to use. The Brown Tactile switches in my review unit were sufficiently damped, though there was some clickiness to them. For the most part I liked this aspect, although hard presses can feel a little harsh. Worse is the roughness of their motion as they travel, which doesn’t feel particularly pleasant. Fortunately, this doesn't completely sap the joy out of presses, and it didn’t affect my performance in any significant way.

The switches are also quite snappy, requiring only a light touch to actuate. Better yet, they’re forgiving at the same time: whenever I accidentally grazed a key I didn’t intend to hit, often it wouldn’t register. This combination makes it ideal for fast typing.

The keycaps themselves are comfortable, thanks to their ergonomic indents, which also provide security. This comfort extends to the space bar, which I could easily hit flush when in the WASD position. That’s not something I can say about every space bar I’ve experienced.

Less comfortable, however, is the wide spacing of the keys. I often welcome this aspect, but I found it too great on the K8 Ultra 8K. Reaching certain keys was a stretch, especially when touch typing, or when trying to reach certain peripheral keys such as R and T when gaming in the WASD position.

The aforementioned thickness of the chassis also creates issues. Combined with the tall keycaps, this means you have to angle your wrists to a large degree, and what’s more I frequently caught my fingers on the edges of keys as I glided around them when typing. I’m not sure I’ve come across a keyboard in more desperate need of wrist support.

On the issue of connectivity, I had no qualms with the K8 Ultra 8K. It connected to my Windows PCs with ease via both Bluetooth and the 2.4GHz dongle. Hot-switching between these devices was also quick and easy, merely requiring the flick of switch on the side of the unit.

Should I buy the Keychron K8 Ultra 8K?

Scorecard

Buy it if…

Don't buy it if…

Keychron K8 Ultra 8K review: Also consider

How I tested the Keychron K8 Ultra 8K

• Tested for a few days
• Used for a variety of tasks
• Plentiful keyboard experience

I tested the K8 Ultra 8K for a few days, during which time I used it for gaming, working, and general browsing.

One of the games I played was Counter-Strike 2, as it serves as the ideal test for peripherals, since it demands fast and precise inputs.

I’ve been using gaming keyboards for years, and reviewed a great number of them, including other Keychron models as well as those from well-known brands like Razer, SteelSeries, and Corsair.

• First reviewed: August 2026
• Read more about how we test

• Firefox’s iOS app comes with a new built-in ad blocker
• It stops all kinds of ads, but there are some exceptions
• The move could convince me to finally switch from Safari

I’ve been a loyal Firefox user for 20 years now, but that’s only been true for the desktop app. Despite Firefox being one of the best web browsers around, I’ve resolutely stuck with Safari on my iPhone — but a new Firefox feature could finally convince me to make the switch on mobile.

In a support document, Firefox developer Mozilla explains that its browser now comes with an “experimental” ad blocker that is based on the EasyList filter, allowing Firefox to “block many ads before they load.”

The ad blocker puts a stop to a variety of advertising types. That includes third-party advertising networks, ad-related trackers, third-party ads served on websites, and more intrusive formats such as pop-ups and overlays.

The feature is being rolled out gradually and is disabled by default, but you can enable it by opening Firefox, tapping the '…' button, then selecting Settings. From there, go to Browsing and enable the toggle next to Ad Blocker. Alternatively, you can enable it by opening the app menu when browsing a web page.

It’s worth noting that there are a couple of exceptions to what the feature blocks. For one thing, it won’t stop sponsored content on the Firefox Home or New Tab pages, nor will it block search engine ads, as these are both sources of income for Mozilla.

As well as that, Mozilla warns that some ads might slip through the net because “some websites serve ads in ways that are not covered by the current filter list".

Finally making the switch

Although Safai on iOS can block website pop-ups, it doesn’t have a built-in ad blocker and requires you to use a third-party extension if you want to shut down annoying ads. With Firefox gaining this functionality natively, Mozilla has given its browser a leg up over the competition — and has given me a strong reason to switch.

And since I’m a strong believer in user privacy — its robust privacy stance is one reason why I’ve stuck with Firefox for so long — this is exactly the type of feature that appeals to me. Given how invasive ads and trackers are, blocking them is a priority for me.

I’ve long stuck with Safari due to inertia. I have a lot of tabs open on Apple’s browser and don’t want to lose most of them. But with my beloved Firefox adding a built-in ad blocker on iOS, tab hoarding feels like a bad reason to stick with Safari.

Now could be the time to finally kick that inertia and make the switch. If you hate website ads and want to look out for your privacy, Firefox just gave you a great reason to give it a try.

One trillion dollar bills could wrap around the Earth almost three times, which means the $1.4T in fines Meta could face if it loses the huge, multi-state lawsuit arguing that the company's social media and the technology behind it encouraged addictive use in teens is more than enough financial rope to potentially squeeze it into submission or worse.

Opening arguments in the case kick off tomorrow (August 18), with Meta founder and CEO Mark Zuckerberg and Instagram CEO Adam Mosseri expected to testify.

The suit[PDF], which is in some ways the culmination of numerous cases against Meta and its alleged practices, comes on the heels of multiple legal setbacks for Meta. In March, Meta lost a case in LA Superior Court and was, along with YouTube, found negligent in causing a 20-year-old's mental health issues. That ruling came a day after Meta lost a similar case in New Mexico. Just a few weeks ago, the company was ordered to pay almost half a billion dollars after Meta's platforms were found to be, at least according to New Mexico law, a public nuisance.

This latest case, though, might not only change the face of social media but also seriously hamper Meta's ability to function.

As in other cases, AGs across 32 US states argue that Meta has used its technology to hook teens (and younger), lock them into using the platforms, and then, it argues, ignored the potential harms.

Here's how the lawsuit puts it:

"Meta has harnessed powerful and unprecedented technologies to entice, engage, and ultimately ensnare youth and teens. Its motive is profit, and in seeking to maximize its financial gains," and "it has ignored the sweeping damage these Platforms have caused to the mental and physical health of our nation’s youth. In doing so, Meta engaged in, and continues to engage in, deceptive and unlawful conduct in violation of state and federal law."

Meta, which has spent the last few years updating its parental controls across all its platforms and marketing those changes to the public, calls the AGs' claims "unsubstantiated" and the potential penalties "vastly disproportionate."

It then adds:

"The AGs offer no proof anyone in their states was misled, claim benign features like having an additional Instagram account somehow harmed their residents, and attempt to penalize Meta for industry-wide challenges like age verification. Rather than sticking to the facts or the law, the states have instead decided to chase an outlandish payout. We stand by our record of creating strong protections for teens, and look forward to making our case in court."

So there you have, in a nutshell, the two sides, but while Meta is putting on a strong front, I don't imagine Zuckerberg and Mosseri will enter the courtroom feeling particularly confident about their chances.

The changing social media landscape

Ever since prosecutors shifted their efforts from trying to prove that Meta and other social media companies were responsible for the online content that appears on their platforms to how each company built these systems and all the ways they engineered them to keep us swiping and engaged, they've been on a winning streak.

And that's probably because it's more provable.

During the golden age of social media, when it was Facebook versus YouTube, versus Twitter, versus Snap, there was no more important metric than monthly active users. Meta (formerly just called Facebook) often touted user numbers and how growth was spreading around the globe. When Facebook surpassed 1 billion global users, Zuckerberg said the milestone was "amazing, humbling and by far the thing I am most proud of in my life.”

That scale also built Meta's value, since it could monetize those eyeballs through ads. It's no secret that, no matter your age, the more time you spend on the platform, the more ads you see and the more money Meta makes.

Even though Facebook's early format was more or less a meritocracy of content, it shifted in 2007 with visual updates organized by Edgerank, a basic algorithm that ranked content based on interactions, what you were likely to look at, and ongoing popularity.

More sophisticated algorithms followed, essentially feeding you more and more of what you'd most likely want to see or would like (to the exclusion of other content), helping further extend time on Facebook and Instagram. It's only in recent years that Meta has given users control of some of those algorithms so they could tailor the content of their feeds.

Of course, that's the current environment, and while these lawsuits want to force more changes, like the end of endless scrolls, their main contention is that Meta built its platforms to addict users and then, they claim, ignored warning signs (even within the company) that Instagram and Facebook might be harming youth and teens.

The intent wasn't harm but was it neglect?

I've never believed Meta intended to harm anyone, but I am convinced its top priority was growing the platform, and it used every tool at its disposal to do it.

It's also incontrovertible that some children and teens have been harmed by social media (Meta is not alone in this). Even Zuckerberg appears to agree with this in some form.

During a 2024 congressional hearing over social media's alleged harms, Zuckerberg (and other social media CEOs) stood up, turned to face parents in the gallery, and offered this apology:

"I’m sorry for everything you have all been through. No one should go through the things that your families have suffered, and this is why we invest so much, and we are going to continue doing industry-wide efforts to make sure no one has to go through the things your families have had to suffer.”

It appeared to be an admission, if not of wrongdoing, that perhaps Meta and other social media companies had not done enough to protect young people on their platforms.

I don't expect an apology this time. Instead, Zuckerberg and Mosseri will offer a full-throated defense and, as noted, bring up all the ways these platforms have adjusted to give parents and teens more control.

Even so, Meta could lose, and if so, the AGs will see that $1.4T penalty, which, unsurprisingly, more or less matches the company's current market capitalization.

A loss could push Meta into a difficult financial situation that might result, if not in closure or bankruptcy, at least in a fundamental change in how it operates online. Imagine, for instance, having to pay a monthly subscription fee to use Instagram, Facebook, and WhatsApp, or, at the least, Meta introducing an ad-free subscription tier. Prices of the VR hardware could go up.

Finally, Meta might abandon children and teens as a potential market and shift its marketing efforts to adults only.

That seems unlikely, but I promise you a loss will trigger some kind of change.

Meta will ultimately sense if and when the case is slipping away from it and get to work on an out-of-court settlement. It'll still pay, but instead of over a trillion dollars, it'll be, say, $2 billion or so, devoted to supporting mental health services for teens, and some money parceled out to Meta's billions of US-based users.

That should mark the end of this chapter...until the next lawsuit.

As someone who writes about tech deals for a living, I was amazed to see a deal on TikTok that claimed you could get a MacBook Neo for only $119.99. That's a shocking discount, so much so that I thought there had to be strings attached, or maybe it was just too good to be true. And it was.

The $119 MacBook Neo offer, claimed as a "back-to-school deal," was a scam. Advertised on TikTok and Instagram as a real deal at Target, but the retailer has no such discount or promotion.

When you click on the offer, it takes you to a third-party website that promises up to $750 in Target gift cards if you complete 3 to 5 partner deals that include offers, trials, and sign-ups. Generally, if you have to jump through those hoops, it's a good sign it's a scam.

This scam has become viral because who wouldn't want Apple's shiny new MacBook Neo for only $119? Ever since the price hike on Apple's MacBooks in July, you couldn't find Apple's budget MacBook for under $699.

The 13-inch Neo is Apple's cheapest MacBook on the market, yet it's packed with premium features, including a 13-inch Liquid Retina display, Apple's powerful A18 Pro chip for speedy performance, and AI capabilities. In our MacBook Neo review, we called it 'the best budget laptop you can buy right now', praising its design, build quality, and performance for the price.

While direct discounts are sparse, I've listed today's best deals on the MacBook Neo, including a trade-in offer and a free Starbucks gift card at Best Buy, a $10 price cut from Amazon, and Apple's popular $100 education discount for students and teachers.

Today's best discounts on Apple's MacBook Neo

• Akira ransomware tried Safe Mode boot to disable defenses but broke its own encryptor
• Defender later flagged and quarantined payload, leaving attackers with only stolen data
• Huntress advises VPN brute‑force alerts, MFA, SIEM logging, and Safe Mode monitoring

A recent ransomware attack saw the operators Akira (figuratively) shoot themselves in the foot - and they still walked away with sensitive data, albeit limping.

Akira is a well-known ransomware group, considered one of the most active cybercriminal organizations on the internet. Its modus operandi is simple in theory: they look for an exposed VPN instance (for example, one with a default or weak password), access the domain controller, enumerate Active Directory, steal sensitive data, and deploy an encryptor.

With the encryptor they leave a ransom note, instructing the victim to reach out and negotiate a payment in exchange for the decryption key and for deleting the stolen documents and information.

However, in a recent attack, they tried to first disable the device’s antivirus and endpoint detection and response (EDR) solutions. The process backfired, resulting in the security solutions successfully spotting and quarantining the encryptor.

The good and the bad of Safe Mode with Networking

A new report published by security researchers Huntress said that after establishing persistence on a device, Akira rebooted it into Safe Mode with Networking. This Windows startup mode boots the OS with only the essential drivers and services, excluding important components such as antivirus programs or EDR agents. At the same time, it grants internet access which, for Akira, is the perfect combination.

“This means Defender real-time protection was down too,” Akira explained. “For the entire Safe Mode window, the host had no working EDR, and AV was blinded. This is MITRE ATT&CK T1688: Impair Defenses: Safe Mode Boot, a technique that ransomware families like Snatch and AvosLocker have used for years. However, this is the first time we have seen Akira use it.”

What Akira didn’t bank on was Safe Mode with Networking also preventing its encryptor from running. “Safe Mode boots with a stripped-down environment and constrained virtual memory, and the Akira process tree appears to have starved it, getting the "Out of Virtual Memory" pop-up and the cascade of PowerShell hard errors line up exactly with the moment the payload tried to kick things off.”

The operators had no other choice but to boot the device back up normally, at which point a scheduled Defender scan detected the encryptor, flagged it, and ultimately quarantined it.

“The takeaway is a little uncomfortable. While Safe Mode blinded our controls, it may also have prevented the encryption it was meant to enable. That's a lucky side effect of the attacker's own mistake in these circumstances, not a defense you can plan around,” Huntress warned, stressing that not every victim might get such a lucky break.

“Ultimately, this could be a case of winning the battle, but not the war. It's possible that a host with more physical memory or a larger page file might give akira.exe enough virtual memory to encrypt the endpoint in Safe Mode. Akira's developers or affiliates could retool the encryptor to reduce its memory demands or make its Safe Mode launch sequence more reliable, meaning that the same failure may not occur in a future intrusion.”

How to defend against Akira ransomware

To defend against Akira, Huntress recommends users set up alerts on bursts of failed VPN logins against multiple usernames from one source. It works well because Akira starts its breach with a brute-force attack against the VPN. It also says users should correlate those failures with a successful login from the same IP or ASN within a short window.

The second step is to turn on multi-factor authentication (MFA) on every VPN account. Users should also disable or IP-allowlist the SSL VPN during active attacks and, if compromised, rotate all AD and VPN credentials. “Treat everything in that Get-ADUser dump as exposed,” the researchers warn.

EDR should be deployed to every host, as well as SIEM and ingest VPN + Windows Event Logs. “The first VPN logons were visible hours before any detonation—this time advantage is only possible if the logs are on SIEM.”

Finally, users can set up alerts on boot-configuration changes and Safe Mode boots, to catch Akira red handed.

• Apple Fitness+ could be getting Peloton-style live workouts
• The fitness platform has been 'under review' since earlier this year
• Spotify recently expanded into fitness, so Apple might one-up its rival with live workouts

Something is going on at Apple Fitness+, the tech giant’s flagship fitness service, and it could be hinting at a new Peloton-style live workout hub.

A job listing posted by Apple advertises a Studio Producer role for Fitness+, implying there’s about to be a new upgrade coming to the health service, which is asking for a candidate with a "strong foundation in live or live-to-tape multi-camera production and a genuine curiosity about where live content is headed next."

Apple Fitness+ was introduced back in 2020, offering subscribers a one-stop shop of on-demand workout videos run by in-house fitness experts, integrating real-time workout metrics from your Apple Watch. Apple Fitness+ doesn’t host live workouts with live leaderboards in the way that Peloton does, so an upgrade could give the service the new lease of life it needs.

Despite its rich library of pre-recorded workout videos and guided meditations, Apple Fitness+ has been declining over the years. Earlier this year, we reported that Apple Fitness+ was ‘under review’, with the possibility of the firm merging with the existing Apple Health app to offer a combined subscription, but as it stands, the future of Apple Fitness+ is still undecided.

Bloomberg’s ($/£) Mark Gurman said that "there’s no telling what will end up happening," so not even seasoned leakers are able to predict where it’s going. A direct partnership with a fitness giant like Peloton hasn’t been hinted at, but since Spotify recently ventured into the fitness world, Apple Fitness+ might have some fresh competition.

A few weeks ago, Spotify expanded its services into fitness and I sat down with its developer, Austin Lamon, who described it as a “natural extension of how people already use Spotify today”. The new Fitness hub packs curated Running Mode playlists, as well as a section packed with pre-recorded workout guides from Peloton’s flagship personal trainers — and it’s all included in the Premium plan on top of access to music, audiobooks, and podcasts.

Though Apple Fitness+ got there first with its own roster of on-demand workout videos, Spotify has combined its Fitness hub with services that subscribers are already paying for, whereas Apple’s music and fitness platforms are separate entities. And yes, Spotify is prone to a price hike every now and then, but its new fitness content doesn’t come with any add-on costs.

The only thing that Spotify Fitness hasn’t jumped on yet is the idea of hosting its own live workouts, which opens a door for Apple Fitness+ to snatch an opportunity. If Apple started pumping out its own Peloton-style live workouts, it could give the service an edge over rivals and give iOS fans a new reason to stay put. Perhaps we'll find out more during Apple's upcoming product launch in September?

TP-Link BE6300 One Minute Review

I liked TP-Link’s BE3200 range extender, which helped to tackle the Wi-Fi deadspot in my office quickly and easily, and at a competitive price.

However, the BE3200 is very much an entry-level option for Wi-Fi 7, with a relatively modest top speed of 3.2Gbps. If you’re looking for something a little faster for gaming or streaming 4K video then you could consider the BE6300 model, which doubles that speed without doubling the price.

Both range extenders keep the price down by sticking with dual-band Wi-Fi, which uses just the 2.4GHz and 5.0GHz frequency bands, but omits the high-speed 6.0GHz band that is available with the fastest Wi-Fi 7 models.

But, as the name suggests, the BE6300 is still almost twice as fast as the BE3200, stepping up to a top speed of 6.3Gbps, which should be more than fast enough for most home users.

As you’ve probably guessed, the term ‘BE6300’ refers to the speed of the range extender, but it’s also known by the model number RE403BE, so keep your eyes peeled if you’re buying online.

TP-Link BE6300 review: Price & release date

• Where is it available? US-only
• Available Now
• Price: $149.99

The BE6300 is currently only available in the US. You can’t buy it direct from TP-Link either, so you’ll need to shop around online, with the average price sitting at around $149.99.

Oddly, though, there is a similar model called the BE6500 (model RE605BE) available in the UK and Australia. This is slightly faster than the BE6300 that we review here, with a top speed of 6.5Gbps, and costs £188.00/AU$265.

TP-Link BE6300 review: Specs

TP-Link BE6300 review: Design

Unsurprisingly, the BE6300 looks very similar to its little brother, with a chunky, white rectangular design that plugs straight into any convenient mains power supply.

However, the extra speed of this model means that it requires a little more power and the BE5300 is therefore quite a bit larger, and also sprouts an extra pair of antennae – four in total - to boost performance.

The body of the BE6300 measures 161mm high, but unfolding the top and bottom antennae extends that to a full 261mm. It’s wider too, at 81mm, which means that the bulky device could block any adjacent power sockets if you have two or more sockets that sit close together.

You’ll also need plenty of room if you want to use the Ethernet port that's located on the right-hand side of the range extender. Mind you, it’s possible to plug the BE6300 into a mains extender, rather than plugging it straight into a wall socket, although that’s not a very neat solution as it leaves you with additional cables trailing on the floor.

TP-Link BE6300 review: Features

As mentioned, the BE6300 provides dual-band Wi-Fi 7, using the 2.4GHz and 5.0GHz frequency bands with a top speed of 6.3Gbps.

It may not support the high-speed 6.0GHz band, but it does include a Wi-Fi 7 feature called MLO – multi-link operation – that allows computers and mobile devices with Wi-Fi 7 to boost performance by transmitting data on both bands simultaneously. The Ethernet port on this model is faster too, now running at 2.5Gbps.

As we’ve seen before, TP-Link’s Tether app is well designed and easy to use, making it easy to get started even if you’ve never used a range extender before. It recommends that you initially plug the BE6300 into a power socket close to your main broadband router in order to avoid any interference during the initial set-up process.

The app is then able to automatically detect the range extender and guides you through the process of connecting it to both the 2.4GHz and 5.0GHz networks set up by your main router.

If you want to keep things simple then you can tell the range extender to just use the same network name and password as your original network, or you can give the range extender a new name and password for extra security.

Once that’s done you can unplug the range extender and move it closer to the room where you need to boost the Wi-Fi signal. The app can help here too, by checking the strength of the Wi-Fi signal so that you can find the best spot to place it.

The app can also show you all the devices that are connected to the range extender, and allows you to block devices, such as a child’s tablet or smartphone at night-time. There’s also an Eco mode that helps to reduce power consumption, and you can schedule a time for the range extender to turn itself off as well.

TP-Link BE6300 review: Performance

I have a Wi-Fi deadspot in an office at the back of my building, and when I tested the less expensive BE3200, I found that its 2.4GHz band couldn’t quite achieve the full speed of 150Mbps provided by my office broadband service.

That was no longer a problem when I set up the BE6300 in a nearby hallway, and it was easily able to maintain a smooth 150Mbps for both the Ookla Speed Test and for file downloads from Steam. Needless to say, the faster 5.0GHz band worked equally well, cruising along at 150Mbps throughout all my tests.

Not everyone will need a range extender with a speed of 6.3Gbps, so many homes will still get perfectly good performance from a less expensive range extender such as the BE3200. But, if you do need strong performance for gaming or streaming video, then the BE6300 fits the bill at a competitive price.

Should you buy the TP-Link BE6300?

Buy it if…

Don’t buy it if…

Also consider

• Read TechRadar’s reviews guarantee
• First reviewed August 2026

• CVE‑2026‑65400 macOS Screen Sharing flaw exploited for cryptojacking within days of disclosure
• Attackers gained root via exposed port 5900 and deployed Monero miners using XMRig
• Apple patched in Sequoia 15.7.9, Sonoma 14.8.9, Tahoe 26.6.1; users urged to update immediately

Less than a week after being publicly disclosed, a macOS vulnerability plaguing Screen Sharing was observed as being used in cryptojacking attacks.

Alfredo Pesoli, a security researcher from Bynario, discovered an authentication issue in macOS Screen Sharing and reported it to Apple. Screen Sharing is a built-in macOS tool that allows users to remotely connect, and use, another Mac device. It is similar to third-party tools such as AnyDesk or TeamViewer and comes in rather handy for IT teams accessing Macs stored in closets or used by remote and home-working employees.

The bug allows a remote attacker to bypass authentication and gain access to a vulnerable Mac device without valid credentials. It apparently stems from a logic issue in the Screen Sharing server’s authentication process, affecting systems where the service is exposed to the internet.

The Netherlands issue a warning

Soon after disclosure, Apple released an out-of-bound fix, signaling that this is, indeed, a dangerous vulnerability. “Apple does not ship an update out of band unless something is critical,” security researchers Calif said in their technical writeup. The National Vulnerability Database (NVD) assigned it an identifier - CVE-2026-65400 - and gave it a severity rating of 9.6/10 (critical).

Approximately at the same time the patch was released, the flaw was also showcased at the 2026 Black Hat conference, with a video demonstration was made public a few days later.

Apple said it fixed it with improved state management, addressing the bug in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1.

Now, less than a week after the disclosure, researchers are saying the bug is being leveraged in actual cyberattacks, with Dutch security officials being first to react

“The NCSC has received a report showing that active abuse of this vulnerability has been observed on several systems on which port 5900 was accessible from the internet,” the Netherlands National Cyber Security Centrum (NCSC) said in a machine-translated report. “In all these cases, root access was gained on the affected system and a Monero crypto miner was placed.”

Why Monero?

Monero is considered an “altcoin” - a cryptocurrency built as an alternative to Bitcoin. It is one of the oldest active altcoins out there, having been launched more than 12 years ago. Most cryptocurrencies rarely live through a single four-year bitcoin cycle but Monero, just like Ethereum, Litecoin, Solana, and a handful of others, endures.

It is similar to Bitcoin because it, too, can be “mined” (unlike Ethereum, for example). It differs on the privacy front. Unlike Bitcoin, whose transactions are recorded on a public ledger and can often be traced, Monero is designed to obscure the sender, recipient, and the amount of transactions. This privacy feature has, unfortunately, also attracted criminals.

Another key feature that made crooks choose Monero for their cryptojackers is the fact that the altcoin uses a proof-of-work (mining) algorithm optimized for general-purpose CPUs, making mining relatively profitable on ordinary servers, desktops, and cloud machines.

Although it was not specifically stated, it is safe to assume that in this incident, the attackers were deploying XMRig. It is, by far, the most popular cryptojacker and one that mines primarily Monero (its ticker is XMR).

How to stay safe

The best way to go about it is to install the patch Apple just released. This effectively plugs the hole and makes the device secure. Those who are unable to deploy the patch immediately should block Screen Sharing and enable it only when it is actually needed and used. To do that, users can go to System Settings > General > Sharing and toggle the Screen Sharing switch off.

Finally, it is worth mentioning that the NCSC stressed the crooks could only exploit the flaw when the target device’s port 5900 is exposed to the internet. Therefore, setting routers and firewalls to block the port can also work, although we’d only recommend it as a last resort. Installing the patch is still the best way to go.

Right now, no groups claimed responsibility for this attack, and there is no evidence it is being used for anything else. In theory, though, it can also be used for data exfiltration, malware deployment, and possibly even ransomware attacks.

• GPU price hikes are coming later this year, PC Partner Group warns
• The parent company of Zotac notes that entry-level GPUs will suffer 'more severe shortages'
• A manufacturer of gaming monitors, KTC, has also warned on price hikes

PC gamers should be aware that there are further signs that GPUs could get more expensive, and gaming monitors too, so you might want to consider buying now rather than waiting.

First off, the gloomy GPU news which comes from PC Partner Group (PC PG), an Asian graphics card giant based in Singapore and the parent company of Zotac, Inno3D, and Manli.

VideoCardz reports that PC PG just published its latest fiscal results that came with a warning on GPU pricing as part of the trends and conditions which are likely to affect the company's finances in the upcoming year.

PC PG notes that "graphics memory costs are expected to rise further, leading to a substantial increase in VGA Card costs in the second half of the year." VGA Card simply refers to discrete PC graphics cards, and although it's a well outdated term now, it's one still used behind the scenes in the industry.

PC PG says that shipments of GPUs "declined substantially" in the first half of this year, and that they're likely to drop further in the second half of 2026. The firm writes that: "Beyond the price increases, entry-level VGA Cards are expected to face even more severe shortages, which may further drive ASP [the 'average selling price'] upward in the second half of 2026."

The company also highlights that other PC components, including system RAM and CPUs, are taking longer to get hold of.

VideoCardz also noticed that monitor pricing could be on an upward trajectory, too, as manufacturer KTC has issued a notice of a likely 'product price adjustment' in the future.

KTC observes that the "production cost of monitors has increased significantly" and that it can no longer absorb those pressures, therefore: "KTC's monitor product line may see a price increase in the future."

While that's just a 'may' rather than a 'will' or a certainty, it sounds like there's a high likelihood of it happening. Particularly because KTC advises: "For users with a clear need to purchase a device [monitor] in the near future, the current pricing window offers excellent value for money, and we recommend planning your purchase time accordingly."

And at the end of its statement, KTC talks about price adjustments being a "necessary measure", so it sounds pretty much like they're coming no matter what.

Analysis: is anything immune to the component crisis?

This isn't the only warning on monitor price increases, as AOC recently said that the rising cost of components for its products will mean price hikes starting from this month. Is this the start of a growing trend? The bigger monitor producers will, of course, have more financial wherewithal to weather component rises, but it may only be so long before even those firms start to jack up prices.

The way things are going, I wouldn't bet against it, and this latest news has people on social media asking what isn't immune to the RAM crisis – and what might we expect to see hit next?

How about pricier PC cases, one Redditor jokes: "Wouldn't you enjoy a simple case costing like $300?"

The crisis does feel rather relentless at this point, but the clearest worry is now GPUs. PC Gamer is tracking graphics card prices on a weekly basis, and there have been some clear cost increases coming through in the last few weeks, which suggests that PC PG's prediction is on the money here. And there are multiple other rumors of late warning that graphics cards are set for considerable price hikes. For me, this noise is becoming too consistent to ignore.

As I recently advised, if you need a graphics card upgrade, or think you will in the next year or two, I believe now is the right time to get in and buy. It's particularly notable that according to this latest rumor, entry-level GPUs are mentioned as apparently coming under more pressure, meaning that mainstream buyers are going to be suffering.

The effects of pricier video RAM, and other pressures besides, are no longer going to be mostly about high-end (or 16GB) cards becoming ridiculously expensive, and we could see some unfortunate hikes with lower-end GPUs.

There's very little good news of late across the gamut of PC components, and as we've already seen today, RAM and SSDs are getting even more expensive.

This week, OpenAI added Google Drive to your ChatGPT Library. You could already connect to Google Drive, but now it means you can select a whole Drive folder and ask ChatGPT to look for answers working across all the files it contains.

This can save a lot of time compared to uploading each file individually to ChatGPT’s library and asking ChatGPT to work with it, especially for working with images. Now they’re effectively all in there already.

Now, I don’t know if you’re anything like me, but I tend to treat the root folder of my Google Drive like a very messy desktop. I’ve had my Google account for years, and I just chuck files in there without really organizing them into folders unless I really have to.

The result is that it has built up into one big mess of old and new files floating about in a kind of digital soup. I’m sure there are important things in there that I’m at risk of forgetting about forever.

So, when I heard that ChatGPT can now look at the documents your Drive folder contains and organize them for you too, I was intrigued.

10 years of junk

To test this out, I thought I’d ask ChatGPT to connect to my Google Drive and take a look at what it could find:

“I've got a load of files in my Google Drive that aren't in folders — go through everything here and identify things I’ve forgotten, unfinished tasks, contradictions, deadlines, duplicate work and anything that looks like it still needs action. Also suggest how it could be organized and what files should go where.”

The result was impressive. It thought for what felt like about 30 seconds, then came back with some results. I had to re-authorize it to connect to my Drive a couple of times first, but everything went smoothly.

It turns out that I have a real penchant for saving files called “Untitled document” into Drive. Chat was able to go through them all and work out what they were about and what was important.

It found a lot of material from various books I’d been writing and suggested how to organize them together. Old invoices were also collected, and there were a lot of forgotten idea fragments that it thought were worth reviewing.

It also found duplicate files and multiple versions of “household_budget_tracker”. Sadly, I never got that project off the ground!

A better structure

The whole process led me to discover things from the last 10 years that I’d pretty much forgotten about, and Chat suggested a folder structure for me to use to keep them more organized. Its ability to spot half-finished ideas and documents from years ago was incredibly useful. In particular, it found the outline of a book I'd started in 2018 and hadn't thought about for years. I've actually started looking at a few of those old writing projects again because of it.

But analyzing the mess and proposing a structure isn’t the only trick ChatGPT can do. I discovered it could actually make those changes itself. Just tell ChatGPT to create a new folder and put a load of files into it, and it will actually do it. So, for example, I asked, “Can you make a folder called Invoices and put all my invoices in there?” All this was possible from within ChatGPT, and I didn’t even need to touch Google Drive myself.

Sadly, the new features aren’t available to ChatGPT Free or Go users. You’ll need a Plus, Pro, or Business account. Another new feature is that it can keep Docs, Sheets, and Slides from your Drive open alongside the conversation while you interrogate them, but today I was more interested in how ChatGPT could help me organize the mess that is my Google Drive.

Seeing ChatGPT casually surface abandoned writing projects from years ago was a slightly strange experience, but I finally feel like I’ve cleaned out my digital junk drawer and got a handle on 10 years of clutter. Perhaps the most useful thing ChatGPT did wasn't organizing my Google Drive. It made the fact that I hadn't organized it properly for the last decade matter a lot less.

• DDR5 RAM pricing has risen swiftly again in Germany
• That means two months of sharp increases, backing up recent rumors that memory is going to get pricier
• An exec from the storage world has also said that SSD-related pricing pain is seemingly going to last until 2030

I've recently been writing about how the RAM crisis appears to be reaching new levels of severity, and unfortunately there's more evidence that the situation is worsening with the price of system memory and storage.

Wccftech noticed that 3D Center has a new set of monthly figures for the German retail market which shows that as of mid-August, DDR5 RAM pricing has risen to 486% of the cost it was in July 2025. So, effectively it's five times pricier than before the crisis began a year ago.

That's a substantial jump from the 445% level seen last month, and an even bigger increase than the previous month, in which prices were at 419%. To look at it another way, prices have risen 16% in August compared to the cost of DDR5 in mid-June.

Internal SSD prices have also increased 7.7% month-on-month in the German retail market – and those drives are now 2.2 times as expensive as they were pre-crisis – and Wccftech also picked up another interesting but bleak storage revelation.

Pua Khein-Seng, the CEO of Phison, which makes controllers for SSDs, observed that the NAND market (flash memory chips for SSDs) is in deeper trouble than was previously believed in terms of the time needed to ramp up production.

Taiwan's Commercial Times reports that Pua said he recently had a conversation with senior executives from a NAND manufacturer, and that he asked about how long it would take from investment (being made now) to actual mass production being realized.

The CEO noted (bear in mind translation issues): "He originally estimated it would take about two years, but the answer they gave was 'four years.'"

What this means is that the expectation is now that NAND supply difficulties are going to persist through to 2030 (rather than 2028).

Analysis: there may be trouble ahead…

That's an unsettling prediction from the storage world, coming as it does on top of a lot of other recent bad news suggesting that the RAM crisis will last a long time, and possibly to 2030 and beyond – and that the remainder of this year, and 2027, are going to see matters get worse.

The German retail market appears to be a clear indicator of how things are going, seeing as DDR5 pricing had dropped slightly and then plateaued (more or less) since the beginning of 2026, but started a sharp climb in July as noted. Yes, this is just one source of info, but it's a snapshot of the market of a large European country, and it correlates with all the gloomy predictions we're hearing of late.

As 3D Center points out (again, this is translated): "The bigger picture now points to a worrying price trend, which is likely to break exorbitant levels very soon, unless this trend is halted – for which there are currently no indications."

Sadly, it seems that RAM and storage prices really are going to increase as 2026 rolls on. While there would appear to still be room for further hikes to SSDs (sadly), with system RAM it's arguable how much more consumers can take before they completely refuse to buy until costs come down at least somewhat. That said, new desktops and laptops are still going to be sold, so this isn't just about refusing to upgrade your home PC's memory, of course.

TP-Link BE10000 One Minute Review

Wi-Fi 8 may be looming on the horizon, but routers and range extenders that use Wi-Fi 7 can still be pretty expensive.

One way of keeping prices down is to provide basic dual-band support, which uses the 2.4GHz and 5.0GHz frequency bands while omitting the high-performance 6.0GHz band.

Dual-band routers and range extenders can still perform well, though, as we’ve seen with TP-Link’s BE3200 and BE6300 extenders. But, if you want to pay a little extra in order to get maximum performance then you could step up to its top-of-the-range BE10000 model.

This is a tri-band range extender that adds support for the 6.0GHz band, boosting the maximum Wi-Fi speed to a blazing 10Gbps. You’ll need computers or mobile devices that have Wi-Fi 7 – or Wi-Fi 6E, which also supports the 6.0GHz band – to get the full benefit of the BE10000, but it could be a great option for boosting the Wi-Fi connection for gaming or streaming video in one or two rooms that suffer from a Wi-Fi ‘deadspot’ within your home.

TP-Link BE10000 review: Price & release date

• Where is it available? US-only
• Available Now
• Price: $199.99

The BE10000 is currently only available in the US, and you can’t buy it directly from TP-Link’s own web site so you’ll need to shop around online or try to find it in a local bricks-and-mortar retailer. Online prices also seem to vary a lot too. TP-Link quotes a price of $199.99, but we’ve seen prices ranging from $149 - $249, so it’s definitely worth comparing prices before buying.

The BE10000 is not available in the UK or Australia, although there is a similar model called the BE11000 available in those regions that – you won’t be surprised to find - runs at 11Gbps.

However, this is priced at a rather hefty £299.99/$449, which is considerably higher than the price of the BE10000 in the US, even if you take into account the slightly faster speed of 11Gbps.

TP-Link BE10000 review: Specs

TP-Link BE10000 review: Features

At first glance, the BE10000 looks very similar to the dual-band BE6300, with a bulky rectangular design and four large antennae. However, the BE10000 is even larger, with the body of the range extender measuring 161mm high, although this increases to a full 350mm with the antennae fully extended.

You’ll need a power socket with plenty of free room around it in order to plug in the BE10000, and I found that it was so wide – at 81mm – that it also blocked the adjacent power socket in my office as well. You’ll also need a bit of extra space if you want to plug an Ethernet cable into the Ethernet port on the side of the range extender.

It may be big and bulky, but the tri-band BE10000 certainly earns its keep. The name implies a Wi-Fi speed of 10Gbps, although it’s actually 10.2Gbps, which is more than fast enough to handle gaming and streaming video, while the 2.5Gbps Ethernet port provides a high-speed wired connection as well.

As always, TP-Link’s Tether app makes it easy to get started. You do need to initially plug the BE10000 into a power socket close to your main broadband router, but the Tether app can then automatically detect the range extender and guide you through the process of linking it to your existing Wi-Fi network.

The app allows you to connect to the 2.4GHz, 5.0GHz and 6.0GHz bands separately, perhaps to devote the fastest 6.0GHz band to a gaming PC that needs maximum performance.

The app’s security features allow you to set different network names and passwords for each band, or you can simply carry on using the same name and password as your main Wi-Fi router. Other features include the ability to boost the power supply to the BE10000 in order to increase the range of its Wi-Fi signal, or you can use Eco Mode to save power instead.

TP-Link BE10000 review: Performance

I have an office that suffers from a Wi-Fi deadspot in my building, but I almost feel that I should apologise to the BE10000 for asking it to tolerate my puny office Wi-Fi.

I placed the range extender in a hallway, about halfway between my main broadband router and the office with the deadspot, and the BE10000 seemed to roll its eyes – or, rather, its blinking LEDs – as it picked up my feeble 150Mbps Wi-Fi signal and boosted it into that office.

Unsurprisingly, the BE10000 was able to hit the full 150Mbps on all three frequency bands, when running the Ookla Speed Test and also downloading large game files from Steam.

Ironically, though, that effortless performance is the only real disadvantage of the BE10000. Its 10.2Gbps Wi-Fi 7 is so fast that few homes really need that level of performance. But, if you have a gaming PC with Wi-Fi 7, or that is used for streaming 4K video, then the BE10000 will eliminate any troublesome Wi-Fi deadspots with no trouble at all.

Should you buy the TP-Link BE6300?

Buy it if...

Don't buy it if...

Also Consider

• Read TechRadar’s reviews guarantee
• First reviewed August 2026

• An Incogni survey has found people are becoming more frustrated with the internet
• Users cite AI slop and data leaks as the main reasons for stress and anxiety when using the internet
• Many users want to spend less time online, and are deleting social media profiles and messaging

For years, personal data collection for advertising, tracking, and service improvement was thought to be the fair price to pay to access the world wide web. But now, many people believe that using the internet will lead to their data being leaked or exposed.

A new Incogni survey found more than half of internet users believe their personal data will inevitably be exposed, with 63% stating that this fear causes anxiety when using the internet.

But beyond this, internet users now fear they can no longer tell what is real content uploaded by a human and what is AI generated, not only eroding trust in the internet, but also making people not want to use the internet at all. Almost half of internet users are less sure of what is real on the internet.

Inevitable data exposure

You’ve likely been prompted thousands of times to accept or reject cookies, or review a privacy policy before using a website. Every cookie you accept will collect data on your browsing habits and behavior on sites in order to display personalized adverts that you are more likely to click. Cookies also help keep you logged in and store your information on websites.

While this helps make many websites across the web free to use for those accessing them, sometimes your data is sold to advertisers or third-parties where it is stored insecurely, and can be stolen or leaked.

Among the 1,000 internet users surveyed, the fear of data exposure was strongest among the Millennials and Gen X generations. 56% of Gen X and 55% of Millennials believed that their data would at some point be breached or exposed, showing just how normal data breaches and exposure have become online.

Just 11% of those surveyed believed there was little likelihood of their data being breached.

AI is making the internet less real

AI content creation has exploded in recent years. Social media sites are full of AI ‘creators’ whose pages either share AI generated content or scrape the internet for content that users are likely to interact with, and share it through their own pages. These profiles require little human input, but can share content at an industrial scale and reap huge rewards from advertisers.

If you’ve been on Instagram lately, you may have seen videos from AI creators all sharing the same captions. “Tonight, V stepped into the crowd..” or “Japan is transforming footsteps into electricity.” These captions use keywords to abuse Instagram’s algorithm on popular topics to drive engagement, regardless of whether the content actually has anything to do with the caption.

But they’re also making it harder to know what is real on the internet.

48% of those surveyed said that they are less sure of what’s real, with 40% also stating that the lack of accountability for deepfake creators was a bother.

Additionally, 27% said that AI generated content made them want to spend less time online, with 16% also saying that navigating an internet full of low quality AI content made them feel more tired or fatigued. Just 8% of respondents said that AI generated content improved their online experience.

There are some positive attitudes to AI content online. 12% said that AI-generated content made information more accessible, with slightly less (11%) saying that they were excited about the creative possibilities AI offers.

Time to go offline?

Attitudes to how long people spend online are also changing. Over half (51%) of Gen Z internet users believe they spend too much time on consuming content on the internet, with 43% of Millennials and 42% of Gen X respondents having a likeminded view.

Whether it’s responding to emails, navigating networking platforms, finding new furniture, or looking for where to go to eat - the internet is now a life requirement for most people. And every time you access another website in work or your personal life, there is more data that could be leaked.

The ultimate effect of this is that people are being driven away from using the internet. 58% of respondents said that they had deleted a social media account or messaging app because of stress, anxiety, or privacy concerns.

“It seems that the costs of engaging with these platforms are starting to outweigh any perceived or actual benefits,” the Incogni survey said.

Or time to pay for privacy?

Incogni also asked if users would be willing to pay for an internet where tracking and algorithms did not exist. 30% of respondents said they would, but this largely relied on income. Those with a higher income were more likely to pay for this ‘private’ internet, while those with a lower income were less likely.

For many internet users, privacy shouldn’t be a luxury, but a guarantee. There is a level of trust involved when sharing personal data with advertisers, and the expectation is that the data won’t be leaked or stolen. Unfortunately, the opinions show that this is far from what's expected.