Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1649) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1649) — hint #2 — repeated letters

Quordle today (game #1649) — hint #3 — uncommon letters

Quordle today (game #1649) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1649) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1649) — the answers

The answers to today's Quordle, game #1649, are…

• MANIA
• SINGE
• STOOL
• LOFTY

Another challenging game today, although I managed to not take this one right to the edge.

The tricky part was having so many possibilities for each word.

Curiously, LOFTY featured in yesterday’s Daily Sequence and that’s how I got there despite my temptation to guess “jolty”. I’m glad I resisted.

Daily Sequence today (game #1649) — the answers

The answers to today's Quordle Daily Sequence, game #1649, are…

• LEERY
• DINGY
• CHIME
• LUMPY

Quordle answers: The past 20

• Quordle #1648, Thursday, 30 July: MODAL, IDLER, CHUMP, LUMPY
• Quordle #1647, Wednesday, 29 July: GAWKY, ALLOY, AUDIT, LATCH
• Quordle #1646, Tuesday, 28 July: SMITE, ROACH, RUDDY, GLOBE
• Quordle #1645, Monday, 27 July: TAFFY, FIGHT, GUILD, WAGER
• Quordle #1644, Sunday, 26 July: STOMP, LIMIT, FUNKY, STEAD
• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #880) - hint #1 - today's theme

NYT Strands today (game #880) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• SLOTH
• HOTEL
• CHILLY
• BOTHER
• COLD
• THEY
• LION

NYT Strands today (game #880) - hint #3 - spangram letters

NYT Strands today (game #880) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #880) - the answers

The answers to today's Strands, game #880, are…

• CHARMING
• BOLD
• BOSSY
• LOYAL
• GENEROUS
• DRAMATIC
• SPANGRAM: LEOTHELION

• My rating: Easy
• My score: Perfect

It took me far too long to understand that today’s words were about astrology.

My first word of CHARMING seemed to have nothing to do with the summer and so it continued until I realized that BOSSY, LOYAL and GENEROUS had nothing to do with the season and a lot to do with personality — and in particular the (supposed) personality of a LEO.

Yesterday's NYT Strands answers (Thursday, July 30, game #879)

• SMITH
• MASON
• JOINER
• TANNER
• COOPER
• WEAVER
• SPANGRAM: ARTISANS

It starts on the 4 Train, that straight-run subway line from Grand Central to Yankee Stadium, where I start to notice the red shirts. By the time I reach the massive gray stadium, people are circling the Bronx Bomber’s edifice like thousands of red ants, all queuing up for a rare baseball season sight: football (soccer) in Yankee Stadium.

Most of the shirts are for Premier League side Liverpool FC, but there's a smattering of Wrexham kits. Some of them look threadbare, and none feature the club’s newest sponsor: Firefox. The travel and away kits were unveiled just days before — too soon for die-hard fans to show their support for the team and its well-known but, by some measures, marginal web browser.

Walking through Babe Ruth Plaza, I follow behind the red shirts until I’m lined up behind fans who have come from as far as Arkansas and California to witness the pre-season match. None are musing about Firefox’s new Wrexham sponsorship or how Mozilla (Firefox’s parent) took over from United, which itself took over from TikTok.

The Reynolds effect

The scrappy Welsh club enjoys outsized notoriety thanks to its owners, actors and entrepreneurs Rob McElhenney and Ryan Reynolds, and the popular Hulu docu-series Welcome to Wrexham, which recounts the club’s rise from the ashes and ascent to, as of last season, just short of Premier League status.

While we wait to enter the stadium, the Liverpool team arrives late — following a day of storms and flight cancellations — on a pair of giant red touring buses to hearty cheers from the crowd. Everyone knows Wrexham, but the fans seem to be with Liverpool.

How does a browser and a keeper connect?

As we file in, I have time to think about the connection between Wrexham and Firefox. The kits, which I view later in person and on the field, are quite fetching. On top of the bold, red stretchable fabric is the iconic Firefox flame. It makes me think of the heat Mozilla hopes to generate around its best-known product.

The fit, though, between a scrappy football team and a portal you use to navigate the web, seems tenuous and as ill-fitted as the rectangular pitch they’ve somehow jury-rigged onto the baseball diamond. A covered home plate, third base, and right field jut out awkwardly, and much later a fan tells me the pitch looked kind of messy and maybe not a great experience for some of the players.

It’s not that I don’t understand why Mozilla tied its sails to Wrexham. As I write this, Firefox sits, according to StatCounter, at 3.4% of the global browser market share. By contrast, Chrome has 69% and Safari almost 16%. Put another way, the browser wars are over.

It's not that Firefox is irrelevant, but it's not as relevant as it once was. There was a time, maybe 15 years ago, when I was firmly in the Firefox camp. I’d adopted it because I was working with so many developers, who were all using the leaner and (some thought) meaner platform. It was built on the premise of openness, running counter to Internet Explorer (RIP) and the fast-growing Google Chrome.

Over time, though, it started to suffer from the same resource-hogging issues as Internet Explorer. I eventually gave it up and migrated to Chrome, then had a dalliance with Microsoft Edge and have now settled on Chrome on the desktop and Safari for mobile. If I’m being honest, I stopped considering Firefox years ago.

The most obvious answer

As the team took the makeshiift pitch and the stands filled with red shirts, I waited for Mozilla’s relatively new CEO Anthony Enzor-DeMeo and CMO John Solomon to arrive so I could quiz them about product plans and Mozilla’s dive into AI.

Enzor-DeMeo joined Mozilla in 2024 after stints at Roofstock, Better, and Wayfair. In each, the admitted nerd appears to have held positions relating to products, technology, and engineering. Solomon comes to Mozilla from Apple and Beats.

When Enzor-DeMeo finally does arrive, he looks younger than I expected and has a sort of nervous energy. It’s been a busy few days with a lot of interviews, and when I try to ask about Mozilla and AI, he tells me he doesn’t want to do any more. Still, he’s open and affable, explaining that he’s a die-hard It’s Always Sunny in Philadelphia (Rob McElhenney is a series star) fan, so much so that when someone else says they love the show, he asks them to name their favorite episode and then, without waiting for an answer, tells us his.

Still, Enzor-DeMeo was not a closet fan of the beautiful game. Instead, Solomon, who comes from the much more culturally connected Beats brand, suggested this partnership. Enzor-DeMeo watched Reynold’s Welcome to Wrexham doc and thought, “Oh, this makes a lot of sense.”

I stared at him, wondering what he saw that I didn’t. Sure, a partnership with the Red Dragons, as Wrexham are also known (I even spotted their red dragon mascot wandering the pitch and hugging fans) makes some sense. You know, fire, dragons? And this would be Wrexham’s second tech sponsorship after TikTok, which was widely featured in early seasons of Welcome to Wrexham. Mozilla confirmed that as they film the new season, we will see the Firefox brand on display in some fashion.

I looked at Enzor-DeMeo, who was still enthusiastically talking about It’s Always Sunny in Philadelphia, and asked him, “What’s the throughline from Firefox to Wrexham?” Enzor-DeMeo smiled and quickly answered, “Underdog.”

The only thing that would’ve made the moment more perfect is if an announcer suddenly screamed, “Goooooaaaallll!” But I got it.

It's never just about money

If you’ve never seen the documentary, Wrexham AFC was the disintegrating center of a hardscrabble town that, despite over 150 years of footballing history, had been largely forgotten and fallen to the fifth tier of the English league system. Achieving Premier League status, a feat they very nearly accomplished last season, seemed impossible. Until Reynolds and McElhenney arrived.

Sure, there are people unhappy with the way celebrity and money have throw off the balance of a well-worn system, but if you watch the doc, you know that it was never enough to throw money and fame at it. It’s a very human story with equal measures of failure and success.

Firefox is surely the underdog in the browser game. Built on its own Gecko browser engine, it stands apart from Google, Apple and Microsoft, which all have a profit motive in having you use their platforms. Mozilla’s parent organization is non-profit, and although the Mozilla Corp, under which Firefox lives, is for-profit, its revenues are used to fund the non-profit effort.

Like its competitors, Firefox has AI features, letting you access the AI chatbot of your choice in a sidebar, and using AI to help you organize tabs. It does, though, seem a bit less interested in force-feeding AI.

Still, underdog status is no guarantee of a Cinderella story, and as the game drags on with countless missed shots and a handful of fouls, I wonder if Wrexham can embarrass Liverpool in front of its US fans. A moment later, Liverpool manages at roughly 60 minutes in to sail one over the outstretched arms of Wrexham substitute goalkeeper Callum Burton.

There’s no victory for the underdog this time, but it’s the pre-season, and Wrexham and its new sponsor Firefox should have many more chances to win on the pitch.

• Microsoft launches MAI-Cyber-1-Flash, its first in-house cybersecurity model.
• It also reveals Project Perception, an agentic system whose red, blue, and green agents find, triage, and patch vulnerabilities
• The launch comes days after OpenAI said its models escaped a sandbox and attacked Hugging Face

Microsoft has unveiled two significant security announcements - MAI-Cyber-1-Flash, the first cybersecurity model it has trained in-house, and Project Perception, an agentic defense system that finds vulnerabilities, decides which ones matter, and writes and deploys the patches.

The launch took place days after OpenAI disclosed that its own models had broken out of a sandbox and hacked Hugging Face, which makes the timing either unfortunate or pointed.

With Microsoft claiming a 96% score on CyberGym, an industrial benchmark for cybersecurity, nearly 12 points above Anthropic's Claude Mythos 5, while promising as much as 50% savings in token cost, the company says it is bringing what it calls a 'well-tuned, multi-model system with access to uniquely rich historical training data',

A competitive product with excellent timing?

The Hugging Face incident drew much attention, not all of it was negative: as it painted OpenAI's models as more capable than the company's own assessments had suggested. It also sharpened a question researchers have been raising for years: what happens when a model becomes capable enough to defeat the controls placed around it?

Microsoft's answer is well-timed and two-pronged, claiming to be both cheaper and more capable than the alternatives, though the performance figures are, so far, Microsoft's own.

MAI-Cyber-1-Flash, is a sparse mixture-of-experts transformer with 137 billion total parameters, five billion active, and a 256,000-token context window, built as a cybersecurity fine-tune of MAI-Code-1-Flash, itself developed from a MAI-Thinking-1 mid-training checkpoint.

It is designed to handle up to 90% of the tasks inside MDASH, Microsoft's multi-model vulnerability harness, with OpenAI's GPT-5.4 reserved for the hardest 10 percent.

Microsoft says that split costs about half as much as its previous best MDASH configuration. For now, it runs only within MDASH and is available to approved MDASH customers through an Azure AI Foundry private preview, with no standalone API.

Project Perception is the wrapper around it, drawing on MAI-Cyber-1-Flash for its first workflow alongside frontier models such as GPT-5.4. Three classes of agent split the work: red agents probe for paths an attacker could take, blue agents investigate and decide what constitutes meaningful risk, and green agents remediate and harden.

On the specific failure that let OpenAI's models loose, Microsoft took the precaution OpenAI did not, as it says all benchmark testing ran in a network-isolated environment with no access to production systems, the public internet, or external services.

OpenAI's sandbox, by contrast, kept one route outward in the form of an internal package-fetching service, and its models found a flaw in it, escalated privileges and worked across the research network until they reached a machine with internet access. Microsoft says its isolation held. Nobody outside Microsoft has verified that.

The harder question is not containment during testing. Project Perception moves the work out of a research network and into customer production environments, where green agents are authorized to change live systems as their normal function.

There is no sandbox to escape, because acting on real infrastructure is the product. And attribution is difficult even when someone is watching: Hugging Face detected the intrusion within days and reported it to law enforcement, but had no idea who was behind it until OpenAI said so.

It also could not get help from the leading American models, which read its defensive requests as offensive ones and refused. It ended up defending itself with GLM 5.2, a Chinese open-weight model, running on its own infrastructure.

For now, the industry's answer to dangerous capability remains narrower distribution, and the one documented case of a defender needing that capability urgently ended with them reaching for a model nobody had gated.

Artificial intelligence came at just about the right time, speeding up app and software development as the world started to contend with skills shortages, but it changed the pace so much that security teams have not been able to keep up.

Recently, we’ve seen AI being applied across multiple other domains with role-specific agents and tools, but that’s introduced its own challenges. While tools like Claude Code have proven a hit for generating, reviewing and editing code in seconds, security-focused tools like Anthropic’s Claude Mythos family of models are having broader impacts on the industry.

Anthropic itself has even admitted that Mythos is so powerful that the worry it could be abused by malicious criminals is extremely real – the Preview model is currently only available to a select number of pre-approved partners.

So with AI now capable of inspecting code, discovering vulnerabilities and suggesting fixes, do organizations even need as many human workers on the case, or can they get by with significantly fewer humans in the loop serving as AI reviewers? Recent layoffs have certainly implied as much.

The evolving role of security workers in an AI-first world

But with the entire lifecycle of development now amplified by AI, experts are warning that companies could actually be creating more work for themselves, and more than they could ever handle, leaving them facing strains from angles they weren’t previously exposed to.

For example, fewer than one in 10 companies now fix 90% of identified vulnerabilities within 90 days – implying that the volume of vulnerabilities is indeed increasing, rather than that fix efficiency is slipping.

Anthropic even revealed that its around 50 early Mythos Preview partners discovered more than 10,000 high- or critical-severity vulnerabilities – and thousands more of lesser significance.

Checkmarx CEO Sandeep Johri predicts we could soon find a balance, where vulnerabilities volume matters less and we revert our focus back toward exploitable risks. I spoke with Johri about the evolution of AppSec, where AI is and isn’t useful, and how organizations can balance speed and control.

• With the rise of AI coding tools and AI-generated software, some are questioning whether traditional application security practices are becoming outdated. Is AppSec actually becoming obsolete, or is it evolving?

Traditional application security is not obsolete. It is evolving to meet the reality of how software is being built today.

For years, the process was fairly linear: developers wrote code, security teams scanned it, and vulnerabilities were addressed later. That approach becomes much harder when software is being created at a much faster pace with the help of AI.

AI accelerates development and risk simultaneously: 70% of developers say AI-generated code created more vulnerabilities in 2025, according to our research. As code volume and complexity compound, security needs to move earlier into the development process, giving developers the tools and guidance they need while they are building.

Security teams will continue to play a critical role to help organizations develop software and maintain confidence in their enterprise applications. But their focus needs to shift from finding vulnerabilities to remediating them at scale, because we are tracking an enormous gap in most companies. Our data finds that fewer than 10% of organizations fix 90% of identified vulnerabilities in 90 days.

• AI coding tools are helping developers create software faster than ever before. What new security challenges does this introduce for organizations adopting these technologies at scale?

The biggest challenge is that development speed is increasing faster than many security processes can keep up with. AI coding tools allow teams to create and deploy software quickly, but the code generated by AI still needs to be reviewed, tested, and secured.

Companies that ship 81-100% of their code with AI are nearly three times more likely to ship vulnerable code than those who use AI 1-20% of the time. This volume can overwhelm security teams with thousands of findings, many of which don't represent meaningful risk. The priority needs to be identifying the vulnerabilities that actually create exposure and helping teams fix those issues faster.


• Many organizations are looking to AI to help identify and fix security vulnerabilities. Why shouldn’t companies rely solely on AI models to secure the code that AI is helping create?

AI is a valuable tool for security teams, but organizations still need accuracy, context, and human oversight. AI can help identify patterns, analyze code, and accelerate remediation, but security decisions require confidence in what risks actually matter.

Frontier models can uncover hidden exploit paths, but they can also deliver inconsistent findings and false positives. Their results may change depending on the prompt, and they can still miss known critical vulnerabilities.

The challenge with relying only on AI is that organizations may create a false sense of security, or “automation bias.” AI models can generate code and help analyze vulnerabilities, but they need to be paired with security expertise and proven security practices.

The most effective approach combines AI-driven capabilities with strong security foundations, so teams can move faster while maintaining control over risk.

• As companies adopt more AI tools throughout the development process, what are the biggest security risks they need to consider beyond just AI-generated code?

Organizations need to think beyond the code itself and look at the entire AI ecosystem being introduced into software development. Many companies are adopting AI tools, models, agents, libraries, and other components faster than they can establish governance around them. This creates visibility challenges because security teams may not know what AI technologies are being used, where they exist in applications, or whether they meet security requirements.

Another concern is shadow AI, where employees use AI tools without formal approval or oversight. Organizations need visibility, clear policies, and a way to manage these technologies as part of their overall software supply chain.



Perhaps the most urgent problem is the expansion of the attack surface itself. With LLMs, it has never been faster, cheaper, or easier for bad actors to exploit software. Issues that sat undetected for years are now being surfaced and weaponized at machine speed. Of the vulnerabilities Mythos has found so far, 99% haven't been patched, according to Gartner.

• How does the rise of AI change the role of security teams? Does the traditional approach to finding vulnerabilities need to shift toward a model focused more on prioritization, remediation, and continuous protection?

Identifying vulnerabilities is no longer enough when organizations already have more findings than they can realistically address. Security has to become continuous, embedded in development workflows, working in lockstep with developers, to build securely from the start while maintaining visibility and control.



We are shifting the focus to understand which issues create the greatest risk to give developers the context to address them fast, where code is written in the IDE.

Fidelity now matters more than volume. One verified true positive is worth more than a hundred low-confidence findings. If developers can’t trust what they’re shown, they’ll start ignoring it. That’s why organizations are increasingly looking at metrics like F1 score, which measure precision and recall together, rather than raw finding counts.

• What does the future of application security look like in an AI-driven software development world? Will organizations need a different approach to balancing speed, innovation, and security?

The future of application security will require a more integrated approach. Organizations are going to continue adopting AI because the productivity benefits are significant, but security needs to evolve alongside that innovation.

Security will become more agentic, more intelligent, and more closely connected to the development process. Part of that evolution is combining deterministic, rules-based scanning with AI-driven reasoning in a single process, rather than running them as separate, disconnected tools. Deterministic methods catch what’s already proven; AI reasoning catches what’s novel. Together they’re more complete than either alone.



In addition, deterministic models have real cost advantages. Asking a frontier model to reason its way to security (i.e. extra review passes, self-generated threat models) burns tokens fast. That cost compounds the longer a vulnerability survives: cheap to fix in the IDE, more expensive in CI/CD, most expensive once it's live in runtime. And every time a developer has to stop and pull a vulnerability out of code that's already shipped, that's velocity lost to rework instead of innovation.

Teams will need technology that can help identify real risks, support faster remediation, and provide visibility across the entire software lifecycle. The organizations that succeed will be those that make security part of how they build software, allowing developers to move quickly while reducing unnecessary risk.

• For organizations that are embracing AI coding tools today, what steps should they take to make sure they can innovate quickly without introducing unnecessary security risks?

The first step is visibility. Organizations need to understand where AI is being used, what tools are being introduced, and what impact those tools have on their applications.

Remediation is far cheaper the earlier it happens — catching an issue in the IDE costs a fraction of catching it further down the pipeline. But there’s another unsettling gap in our research: nearly all developers have access to in-IDE security tools, but fewer than one in five actually secure code as they write it. The cost of fixing that issue compounds as it passes through later stages of development.



In addition, organizations need clear governance around AI adoption, because only 22% currently have formal AI governance policies in place. That means defining policies, monitoring usage, and making sure teams have the right security controls as they continue to innovate.



AI will continue to change software development. The companies that benefit most will be the ones that embrace the technology while building security into the process from the beginning.

Loath as I am to say it, the future of gaming platforms isn’t looking so rosy right now. Windows is increasingly becoming more recalcitrant, constantly throwing hurdles in the faces of PC gamers in the form of performance-ruining updates and unsolicited AI implementations. And in the console world, Sony has irked everyone by ditching physical games from January 2028, while the recent bout of mass layoffs at Xbox belies its ‘back on track’ messaging.

Meanwhile, Valve appears to be going in the opposite direction. It already has a big advantage in the form of Steam, near enough the default storefront and launcher for PC gamers everywhere. Why, it’s generated an estimated $11.1bn in gross revenue in the first half of this year already. With pockets as deep as these, and without having to divert its earnings to shareholders (given it’s still, for now, a private company), that’s cash it can invest in expansion.

So is now the perfect time for Valve to break out, capitalize on its competitors’ floundering and shoot its shot at making SteamOS the next big platform?

SteamOS vs Windows

There’s no question that SteamOS has been quite the success already. This is almost entirely thanks to the success of the Steam Deck, Valve’s hugely popular device that launched in 2022 and kickstarted a mini revolution in handheld gaming. It runs SteamOS 3, which is based on the Arch Linux distribution and far superior to its initial Debian iterations. These were used on the original Steam Machines of 2015, and are no doubt part of the reason for the discontinuation of the units in 2018.

The big advantage of SteamOS 3 is its support for Proton, the compatibility layer that allows Windows games to run on Linux devices. Although it predates the Steam Deck, Proton found its calling on the handheld, proving a lot of doubters wrong by running a large library of modern games well on a small, portable device. Even AAA titles such as 007 First Light and Cyberpunk 2077 are perfectly playable, along with plenty of others.

But Valve is no longer confining its operating system to the Steam Deck and Steam Machine. It’s recently expanded support to ARM, AMD and Intel devices, which means it can run on more devices such as the Lenovo Legion Go S and the Asus ROG Ally. Chris Hewish, a former Executive Producer at Activision and current President of gaming MoR Xsolla, explains the advantages of running SteamOS on such devices over Windows 11.

“With the SteamOS 3.8 release in June, Valve officially took the OS beyond the Steam Deck to the ROG Ally line, and Lenovo's Legion Go family, and early Intel support is starting to pull devices like the MSI Claw into the fold," he tells me. "On the same hardware, reviewers keep finding it ahead of Windows 11 where handheld players actually feel it: battery life, sleep and resume, and an interface built for a controller instead of a desktop squeezed onto a seven-inch screen.”

So, does the continued success of SteamOS rely on expanding to more hardware? Greg Weller, Head of Gaming Partnerships at Generation Media, and someone with over 20 years of industry experience — which includes stints at Rockstar Games and Bethesda Softworks — thinks so.

“The opportunity is significantly bigger if SteamOS continues to be device agnostic," he says. "The Steam Deck proved Valve could build a fantastic hardware experience, but the bigger strategic opportunity is allowing consumers to carry their Steam ecosystem across multiple devices rather than tying it to one piece of hardware.”

He continues: “We're seeing the same evolution across other entertainment sectors, like music, film and television, which have largely moved beyond device-specific experiences. People increasingly expect their content to follow them rather than the other way around. So, Valve hardware can absolutely remain the benchmark experience, but if SteamOS becomes the connective layer between a player's library, identity and multiple devices, that's a much bigger opportunity.”

However, not everyone in the industry shares this view. “SteamOS’ success largely depends on Valve's hardware for now and how far they actually push the OS itself,” says André Pimenta Ribeiro, CEO and co-founder of Anybrain, whose behavioral AI tools are used in popular online games such as Arc Raiders and The Finals.

He adds: “SteamOS’ success largely depends on Valve's hardware for now and how far they actually push the OS itself. I think Valve’s best case here is to grow to a broader, more casual audience through its own hardware and by offering its massive library to the mainstream player base, rather than exporting SteamOS to more devices in general. Once Valve hardware or SteamOS reach more mainstream adoption, then opening up the ecosystem makes sense. For now it feels mostly like a development play.”

Sticking points

If SteamOS wants a larger slice of the gaming pie, though, there are certain obstacles it needs to overcome. Hewish points to one of the system’s major sticking points: its incompatibility with games requiring anti-cheat tools.

“Kernel-level anti-cheat either does not run on Linux or has not been enabled there," he says. "Until the biggest competitive games work reliably through Proton, SteamOS is not a no-compromise choice. It is an 'as long as you don't play those games' choice, and those games are some of the most played in the world.”

Another problem is what Hewish calls “hardware breadth,” explaining that: “Windows still has the deepest compatibility layer for the long tail: niche peripherals, capture cards, VR headsets, external GPUs. If the reports about official GeForce support come to pass, that closes a meaningful piece of the gap, since SteamOS has effectively been an AMD platform until now.”

Of course, the other advantage of Windows is that once you’re done gaming, you can switch to using it as an everyday computer. “SteamOS is deliberately narrow, a console-like shell, and that focus is a strength on a handheld,” says Hewish. “But if it wants to take on Windows more broadly, the path into desktop mode for a browser, schoolwork, or a spreadsheet has to get smoother.”

SteamOS vs consoles

But what about SteamOS as a console competitor? The revitalized Steam Machine launched in June this year was hotly anticipated, and looked like a serious contender to the PlayStation-Xbox-Nintendo triumvirate. Russell Kay, a former Grand Theft Auto developer and Head of popular 2D engine GameMaker, believes it was a success in bringing SteamOS to a wider audience.

“In the living room, SteamOS is now a proper alternative to a console,” he says. "The library is already there, and so is the audience. Millions of people have a huge digital collection sitting on Steam, and SteamOS finally gives them a way to put that under the TV instead of on a console. That's a real advantage no other platform has.”

However, he says: “The real problem is the price — Steam Machines cost more than a console. A gap that’s unlikely to close anytime soon thanks to the rising cost of RAM and hardware.”

And there are other issues for SteamOS in the console space. Hewish explains: “The Steam Machine needs reasons to exist beyond ‘runs your existing library’. Consoles win on curation and exclusives as much as hardware. That fight is about habit and content, not benchmarks. Close the anti-cheat gap and keep the hardware momentum, and ‘the default handheld OS’ is realistic within a couple of years. [But] the living room is a longer climb no matter what the software does.”

Ribeiro, meanwhile, thinks: "[Valve] can make a splash against this weaker console market, but right now it's still a niche system for a specific subset of people — growing beyond that depends on where they take it. Valve is known for doing its own thing, and that’s not always conducive to serving the broader global ecosystem of casual players. I think it makes sense from the perspective that they want to grow beyond a distribution platform, but the extent of impact and its longevity is still to be seen.”

He concludes: “I already see Steam devices akin to consoles, such as the Steam Deck and Steam Machine. I wouldn’t replace my Windows PC or mobile device with it, but vs the existing console ecosystem, that’s more a toss-up.”

The future of SteamOS

It seems fairly clear-cut, then, that SteamOS is clearly leading the way when it comes to handheld gaming. But a push beyond that realm to usurp Windows or seriously challenge consoles is less certain.

Ultimately, Hewish sees it this way: “Windows still wins in two places: games with kernel-level anti-cheat, and anything you want to do that is not gaming. And in the living room it is early days. The new Steam Machine only started shipping at the end of June. So I would put it this way: [SteamOS is] a genuine competitor on handhelds today, and a credible but very young challenger in the living room.”

Of course, the high price of the Steam Machine certainly dampened its appeal. The consensus seems to be that while it was a capable device, it was too expensive to present a viable challenge to the living room market. Of course, the seemingly interminable RAM crisis threw a spanner in the works, even crashing the Steam Deck’s party thanks to a price hike that put a serious dent in its sales. But the fact remains the PS5, Switch 2, and Xbox Series X|S all undercut the Steam Machine considerably.

But perhaps there’s hope yet for the Gabecube and other SteamOS implementations besides handhelds. After all, Hewish makes the point that having one platform dominate isn’t especially useful for game developers.

He says: “If you make games for a living, you do not actually want any single platform to win outright, even one you like. Concentration is where leverage goes to die. When one storefront or operating system controls the path to players, it eventually controls the terms, the fees, and the relationship. The healthiest ending to this story is not SteamOS replacing Windows. It is real competition at the platform layer, because that is what forces every gatekeeper to treat developers and players better. SteamOS taking a real share does exactly that.”

He further adds: “My bet is SteamOS becomes the preferred choice for people buying a device specifically to game, and Windows holds wherever one device has to do it all.”

Weller sees another benefit to the gradual permeation of SteamOS.

He says: “SteamOS has already established itself as a credible competitor, but not in the way people traditionally define competition. Rather than trying to replace Windows or persuade console players to switch overnight, SteamOS is reducing friction between players and the game libraries they've already invested in, allowing people to take their Steam ecosystem into more places and devices.”

“This reflects a much bigger shift happening across entertainment. Historically, consumers bought hardware first and then built a content library around it. Now, they're increasingly buying into ecosystems. Players care less about the operating system they're using and more about whether their games, saves, achievements, friends and purchases move seamlessly between devices.”

Gaming ecosystems have become important for another reason. “Our research found 72% of players discover games through social media, 67% through YouTube and 53% through platform stores such as Steam, PlayStation Store and Xbox Store," Weller explains. "Platform ecosystems have become both the storefront and the discovery engine. So SteamOS isn't simply an operating system but another touchpoint within a much broader ecosystem.”

“Valve's long-term competitive advantage has never been selling games, but focusing on the surrounding ecosystem: community features, recommendations, cloud saves, and overall experience of staying connected to your library. Those are the areas where Valve can continue to differentiate, rather than relying on exclusivity.”

The point about community features is an important one. The community around Steam has played a major role in the platform cultivating its loyal fanbase and the general good will of gamers. Its openness to mods and add-ons via its Workshop is a large part of this. And, as Kay points out, although games purchased on its storefront do contain DRM, “[it has] been one of the better stories when it comes to DRM". So if SteamOS wants to expand its horizons beyond handhelds, it needs to retain the element that sets it apart from other, closed-off gaming platforms.

Do you think SteamOS is going to be the next big platform in gaming? Vote in the poll below, and if you want to say more, why not leave a comment as well?

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1648) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1648) — hint #2 — repeated letters

Quordle today (game #1648) — hint #3 — uncommon letters

Quordle today (game #1648) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1648) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1648) — the answers

The answers to today's Quordle, game #1648, are…

• MODAL
• IDLER
• CHUMP
• LUMPY

After a long run of easy games I am now on back to back days where I came very close to losing.

Today, I had to take the game very slowly in order to get three words in three guesses and fortunately it paid off with the letter M in MODAL unlocking the final two words.

Daily Sequence today (game #1648) — the answers

The answers to today's Quordle Daily Sequence, game #1648, are…

• KAYAK
• NERDY
• STINK
• LOFTY

Quordle answers: The past 20

• Quordle #1647, Wednesday, 29 July: GAWKY, ALLOY, AUDIT, LATCH
• Quordle #1646, Tuesday, 28 July: SMITE, ROACH, RUDDY, GLOBE
• Quordle #1645, Monday, 27 July: TAFFY, FIGHT, GUILD, WAGER
• Quordle #1644, Sunday, 26 July: STOMP, LIMIT, FUNKY, STEAD
• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #879) - hint #1 - today's theme

NYT Strands today (game #879) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• WART
• RAVE
• MAST
• STOP
• TROOPER
• PASTE

NYT Strands today (game #879) - hint #3 - spangram letters

NYT Strands today (game #879) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #879) - the answers

The answers to today's Strands, game #879, are…

• SMITH
• MASON
• JOINER
• TANNER
• COOPER
• WEAVER
• SPANGRAM: ARTISANS

• My rating: Hard
• My score: 1 hint

As I was working around the board collecting “trade names” I could not help but wonder how many of today’s trades would be considered the work of ARTISANS in the future — programmer, writer, barista?

Many in the search are jobs that are now quite niche, yet we only need think of how many people are named SMITH or COOPER to realize how commonplace they once were.

Not so commonplace, however, to prevent me from needing a hint, although in my case it was laziness that prompted me to take the shortcut, thus demonstrating my inevitable replacement by a far more capable AI version.

Yesterday's NYT Strands answers (Wednesday, July 29, game #878)

• DOLL
• PUPPET
• DUMMY
• MANNEQUIN
• FIGURINE
• STATUE
• SPANGRAM: FABRICATED

Though attack vectors and threat environments have changed since the advent of the internet, one thing has remained a constant – humans use software, and software has predefined parameters.

That distinction is exactly why social engineering remains so effective. Cybercriminals exploit predictable weaknesses in human behavior, granting them accesss to accounts and other sensitive information.

For the first time ever, that long-standing assumption is being turned on its head. In today's increasingly autonomous world, AI agents can take action on behalf of humans, creating an entirely new class of attack vectors that target machine autonomy rather than human weaknesses.

The boundary between software and user is getting really, really blurry

The purpose of an agent isn't just to retrieve information or wait for a human's approval – its responsibilities can include interpreting objectives, developing plans, choosing tools, accessing data autonomously and taking actions. In short, agentic AI bridges both software and user.

This doesn't make everything we know about software and SaaS security obsolete, but it does mean that many of the assumptions underpinning today's controls are no longer sufficient. Humans will continue to use conventional software, but alongside agentic workflows, leaving organizations responsible for security both types of environment.

Thankfully, the fundamentals remain – least privilege, strong authentication and separation of duties will all be central to the next wave of cybersecurity. What will change, though, is how those principles will be applied to agents, which don't behave as software or human users.

AI agents need identities of their own

The first requirement is to stop treating agents like features hidden inside applications, or software in their own right. An enterprise agent should actually have a first-class identity just like any other human colleague.

This means AI agents should have unique identities, named owners (line managers), clearly defined purposes and specific permissions. But they should also have their own lifecycles akin to software, such as creation dates, review points and expiry dates.

"Expiry dates or periodic recertification are important because agents can otherwise become long-lived access paths that are harder to govern than human users," Zendesk Chief Security Officer Vinay Patel explained to me in an exclusive interview.

At the end of the day, these are the sorts of controls that already exist for human users because organizations already understand the risks of unmanaged access, due to role changes or company departures, for example.

Without treating AI agents as users in their own right, companies risk accumulating abandoned agents, stored credentials and even data access paths whose original business purposes may have disappeared – an unthinkable consequence for humans, so one that should be treated just as severely for AI agents.

Human-in-the-loop automation is the future

Importantly, AI agents don't just occupy one space. They can act autonomously, be commissioned on a task-by-task basis by a human user, or operate somewhere between the two. Patel told me that an "audit trail should preserve both identities: the human who initiated or authorized the action and the agent that executed it."

For fully autonomous agents, a log tying them back to their "owner, purpose, and approved policy" is still just as important.

But of course, it all boils down to flawless visibility and effective management. "Companies need inventory and discovery across the places agents can be created or embedded, including SaaS platforms, internal automation tools, development environments, and third-party integrations," Patel added.

Organizations must monitor not only which agents are deployed, but whether their permissions and behavior remain aligned with their original business purposes.

Recent NIST research raises many of the same priorities, including verifiable records of agent actions, intent, data sources and generated output. But while NIST is developing guidance around agent adoption, visibility, control and accountability, agents are already being deployed, and often without the necessary safeguards.

Traditional IAM falls short

A separate Cloud Security Alliance paper concluded, "traditional identity and access management (IAM) protocols, designed for static applications and human users, can’t keep up."

The researchers argue that credentials and permissions should be task-specific, short-lived and easily revokable, unlike human identities which are generally set for the duration of their employment contracts.

The CSA also recommends applying zero-trust principles by treating agent compromise as a credible possibility. By enforcing least privilege, isolating systems and continuously verifying access, organizations can limit the potential consequences of an attack or misconfiguration as they adapt to this new security environment.

Accountability starts before deployment

Patel says that, "accountability should not collapse onto a single party by default." It's as much the responsibility of adopters as it is lawmakers, and even end users.

Key to understanding vulnerabilities and potential risks is identifying where the failure occurred: "user’s instruction, the agent owner’s governance, the developer’s design, the platform provider’s controls, or the enterprise’s deployment model."

Above all else, Zendesk's Chief Security Officer argues that "accountability must be defined before deployment, not reconstructed after an incident."

In the short term, this work could slow AI adoption as companies address controls that might've been overlooked during early, informal experimentation. The danger arises when a successful pilot actual progresses into production without pausing to define ownership, permissions and other policies.

Before scaling agent deployments, organizations should pause other ensure the right foundations are in place. Governance becomes much harder to retrofit once an agent has actually been embedded.

Preparing for the autonomous workforce

The question is no longer how, or even whether, AI agents will become part of the enterprise – it's about how employers can establish the necessary controls before they're more common than human workers.

The most valuable security investments today focus on visibility, control, accountability and governance, not forgetting over investments tech admins are making across data foundations and interoperability.

But thankfully, none of this requires a business to abandon the security principles it's spent decades developing. All it requires is for leaders to extend and reframe these for the agentic world.

The future enterprise will combine the human-software environment we already know with a new end-to-end agentic layer – neither one of these will replace the other. Companies preparing for this new hybrid will see the greatest returns.

• Just 27% of Gen Z respondents use antivirus software for mobile devices, and are less likely to regularly change passwords
• 57% of Gen Z spend more time online than offline, Kaspersky finds
• And only 28% regularly backup important personal data stored on their phones

Gen Z has no awareness of cybersecurity, online safety principles, or the risks of not changing your password. With just over half (52%) of respondents admitting they have had devices, data, or online accounts attacked, only 27% actually employ standard countermeasures like mobile antivirus tools.

In a study of 7200 respondents from 18 countries, the company also found only 28% regularly backup important personal data stored on their phones.

An average Gen Z-er appears to rely almost completely on their smartphone, which is where they store the information they value most, apparently without cloud backups or syncing in place. The survey has shown that social media accounts have been hacked (17%) and gaming accounts lost (12%), but smartphones have further risks to personal privacy if the correct precautions are not taken.

Gen Z needs to appreciate the risks

Access to personal photographs, identity documents, email, financial details, and of course social media profiles can be acquired via a compromised smartphone, opening the victim to a host of targeted attacks. Direct financial attacks can be made, identity theft, and more, depending on how successful the attacker is. Keeping the device out of an attackers reach, rather than inadvertently sharing its contents, is the safer course of action.

Irina Ermilova, Vice President for Consumer Product Management at Kaspersky, looked to address the apparent disconnect between a generation that has grown up with internet access and portable digital tech, and its lack of cybersecurity nous.

“Gen Z has grown up online, so digital services often feel intuitive and familiar to them. However, familiarity should not be confused with security expertise," she noted. "Being able to navigate apps, platforms and devices confidently does not necessarily mean being able to identify scams, manage passwords securely or protect personal data.”

“The findings show that cybersecurity tools and habits need to become as natural part of everyday digital life as messaging, gaming or using social media.”

Training Gen Z to find digital threats

Looking for a solution to this lack of cyber-risk awareness, Kaspersky has launched an interactive online game aimed at Gen Z users. Case 404 is a "cyber-detective adventure" in the point-and-click mold, set in the future with fictional cases that have been inspired by actual digital threats.

In playing the game, Kaspersky hopes that Gen Z users will spot the scams and phishing attempts, and take that knowledge with them into the real world and stay safe and secure online.

• SyLC 3D Player supports everything from 3D Blu-ray to Apple spatial videos, and it can convert 3D video to display it on Apple Vision Pro headsets
• It's backwards and forwards compatible — and the creator says it can get dual-HDMI output for dual projection, for future-proofing
• The app runs on Windows, and is free via Github 'because this format deserves better than a slow death'

One of the great tech disappointments of the last few decades was 3D TV. Like many movie fans I was excited by the possibilities, invested in a 3D TV, and watched the entertainment industry ensure that yet again, 3D movies were a short-lived trend. By 2013, it was already generally agreed that 3D TV was dead and that smart TVs and 4K were the way ahead.

Not everyone got the memo [I had mine until 2020… -Ed]. Over on the r/audiovisual subreddit, Jarod-The_Centre is determined to ensure 3D never dies — so they have been making a free player that now "plays EVERYTHING in 3D" from Blu-ray to Apple spatial videos.

And that's just the beginning of its talents. If you're a fan of things pointing out of the screen for no good reason, Jarod's player is fascinating.

I refused to let 3D die ! So I spent months building a free player that plays EVERYTHING in 3D: Blu-ray MVC, 4K HDR side-by-side, even Apple spatial videos. And it converts your 3D Blu-rays to Vision Pro format... from r/audiovisual

What does the 3D player do?

What doesn't it do? The player, called SyLC 3D Player, is a Windows app that's now in its fifth release. It's designed to play three different generations of 3D content: Blu-ray 3D/ISO/MVC MKV; HEVC/H.265 3D up to 4K 10-bit HDR; and Apple's MV-HEVC spatial videos. "The MVC of the 2020s, playing on your 2010s 3D TV," Jarod writes. "There's something poetic about that."

The app outputs in frame-packed 3D for compatible 3D TVs and projectors, and it can do something else that's really impressive: it can export 3D content as MV-HEVC, so you can take a 3D Blu-ray and turn it into a spatial video for Vision Pro.

I love Jarod's explanation for making the app. "It exists because this format deserves better than a slow death, and because apparently I don't know when to stop."

Jarod's in good company. Reddit's response to the latest announcement has been really positive and packed with good ideas, so for example Acceptable-Rise8783 suggests that for future-proofing, the app should be able to "send the two fields separately but in sync through two HDMI outputs."

With 3D TVs and projectors becoming increasingly hard to find — as they point out, "projectors are dropping support left and right because the chips that do 3D are becoming hard to come by" — the choice of viewing platforms will be reduced to dual-projector 3D or VR headsets.

The creator says this is something likely to appear in the player in a future version as the player already drives two windows simultaneously — and it means that dual projectors is the most 'future-proof' option for 3D, and the app supports it as best it can.

The whole discussion is fascinating, and I think Jarod sums it up beautifully. "Keep the faith. The format's not dead while we're still building for it 🔥".

Thinking of buying a new TV?

Try our TV size and model finder! You tell it how far you sit from your TV, we'll tell you what size to buy based on viewing angle advice from image quality experts, and we'll recommend our three top TVs at that size for different prices.

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #878) - hint #1 - today's theme

NYT Strands today (game #878) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• QUEST
• NEST
• BRAT
• MANIC
• STIR
• FETA

NYT Strands today (game #878) - hint #3 - spangram letters

NYT Strands today (game #878) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #878) - the answers

The answers to today's Strands, game #878, are…

• DOLL
• PUPPET
• DUMMY
• MANNEQUIN
• FIGURINE
• STATUE
• SPANGRAM: FABRICATED

• My rating: Easy
• My score: Perfect

A made man could mean a titan of industry, a mobster or if taken literally a scarecrow or indeed a PUPPET.

My first two words had double letters, a pattern that continued with DUMMY and the slightly more challenging MANNEQUIN — a word that I would have struggled to spell without the helper.

With the search virtually cracked I saw FABRICATED — although for full disclosure I should reveal that I missed it completely while collecting “fabric” as a non-game word.

Yesterday's NYT Strands answers (Tuesday, July 28, game #877)

• COMPLETE
• UNDEVIDED
• FULL
• TOTAL
• WHOLE
• ENTIRE
• SPANGRAM: ITSALLTHERE

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1647) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1647) — hint #2 — repeated letters

Quordle today (game #1647) — hint #3 — uncommon letters

Quordle today (game #1647) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1647) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1647) — the answers

The answers to today's Quordle, game #1647, are…

• GAWKY
• ALLOY
• AUDIT
• LATCH

Another game where I came close to losing.

As it is common with words ending in Y I was convinced that i was looking for a word with a double letter, but after trying the unlikely “gammy” and “gappy”, I fortunately ran out of options and arrived at the correct answer.

Daily Sequence today (game #1647) — the answers

The answers to today's Quordle Daily Sequence, game #1647, are…

• PRIOR
• WHINE
• VENOM
• MEATY

Quordle answers: The past 20

• Quordle #1646, Tuesday, 28 July: SMITE, ROACH, RUDDY, GLOBE
• Quordle #1645, Monday, 27 July: TAFFY, FIGHT, GUILD, WAGER
• Quordle #1644, Sunday, 26 July: STOMP, LIMIT, FUNKY, STEAD
• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE
• Quordle #1627, Thursday, 9 July: CRUMP, PHONE, SHINY, STONY

It’s probably fair to say Meta is facing serious public backlash to its AI glasses.

Musician Lorde took time at a recent concert to tell her audience, “Don’t get the glasses,” many online are branding them “pervert glasses,” and activist group Everyone Hates Elon has put up spoof adverts for the glasses featuring Jeffrey Epstein wearing a pair (note: the story behind a paywall).

I myself have been unsure if I’ll keep using my Meta glasses, despite their utility making them one of my favorite gadgets I’ve tested while working at TechRadar.

Meta has rebutted with new measures to combat misuse of its glasses. It recently patched its specs to prevent modders from using the camera despite disabling the recording light, and Instagram head Adam Mosseri recently announced harassment videos shot using Meta glasses will be banned from the platform — with some high-profile accounts already getting the boot.

Among the folks still in love with the Meta glasses, however, is my wife Izzy.

When I suggested taking a pair each with us on our recent honeymoon to Tenerife, she wasn’t convinced — despite them being our only sunglasses without my prescription lenses in them — but she wore the white-and-gold Oakley HSTN specs nearly all the time we were abroad.

I was also testing out a pair of the Ray-Ban Meta Optics styles for an upcoming review, and time and again the glasses proved themselves useful. Our trip confirmed how awesome these glasses can be when used right, and why a middle ground needs to be found to maximize privacy and utility before things get out of hand.

An all-in-one AI supertool

Of course, the primary reason to rely on Meta glasses is their built-in tech.

Whether we were lounging on a sunbed, strolling through the streets and past the beaches of Los Cristianos, or kicking back with a drink in the evening, we both loved the open-ear speakers that let us enjoy our podcast or playlist of choice without tuning out the world.

For hours on end, I enjoyed Radio 1 through BBC Sounds, while Izzy drifted between Spotify hits, and both pairs lasted a good length of time battery-wise — with touch controls making it super simple to control the tunes when needed.

The AI translations came in clutch several times as well. It offered quick advice on what phrases to use when we realized our limited selection of “Hola,” “Gracias,” and “Por favor” wouldn’t cut the mustard.

Meanwhile, Look and Ask helped Izzy decipher which of the unrecognizable shampoos and conditioners would be best for her hair after a travel mishap saw the supply we packed leak into her travel bag. The AI could read the Spanish labels to her to help identify and filter out ingredients she knows to avoid, and we ended up buying a few extra bottles of the conditioner she found to bring home after she fell in love with it.

It can't be understated how useful the smart specs are simply as sunglasses too.

My Optics pair features Transitions XTRActive lenses, transitioning fast from clear to shaded as I moved between indoor and outdoor spaces, which was super handy for someone like me who wears glasses all the time. Meanwhile, the polarized gold HSTN lenses were perfect for Izzy as she spent hours of her day baking in high-UV weather.

Thanks to the charging case, my specs rarely ran out of battery, but even when they did, I could still rely on them just fine as stylish shades.

Of course, the controversial aspect is the camera. Beyond the AI assistance, it was helpful for snapping quick photos and first-person clips for the travel vlog I’m looking to cut together.

Though whenever I went to snap a photo, I had flashes of the story about Meta contractors who claimed to have seen intimate moments captured through the specs. Shots of either of us in swimwear went nowhere near the glasses’ snapper, and I kept a careful eye on who was in the background of any shots I did take.

We were also a little worried that someone might not like us using the glasses at all in their presence, though thankfully no one took any issue with us.

These fears and considerations do create points of friction when it comes to using Meta’s glasses—or any smart glasses, for that matter. While the Facebook company is the best-known for smart eyewear right now it is far from alone, and while it's making efforts to clean up its public perception smart glasses will be tarred with the same brush if any brand steps out of line.

I also don’t think Meta’s efforts are perfect so far, at least not yet. I’d like to see more work across social and hardware platforms to root out smart glasses misuse; I believe better, more thorough privacy rules are necessary to make it crystal clear what data is and isn’t shared with Meta and its staff, and I’m not convinced I could trust it with the immense amount of data its rumored super sense feature would capture from my daily life — blunders like its Instagram AI image use plan and backtrack don’t fill me with confidence in its AI decision making.

At the same time, my week falling back in love with the Meta glasses, and my wife loving her Oakley smart specs, proves there’s something really fun and useful about the tech that I equally don’t want to see taken away or banned outright.

With other brands joining in on intelligent eyewear — recently Samsung demonstrated its own pairs at Galaxy Unpacked — it’s clear the tech industry is storming ahead, just as it has with exciting emerging technologies in the past.

I just hope a middle ground can be found, because smart specs represent a serious privacy nightmare beyond other gadgets we’ve relied on. If the tech doesn’t hold itself to account, we could see even more regulation and public backlash than we’ve seen already, and that could kill off my favorite tech sector of recent years before it has a chance to thrive.

For quite a long time now, I've been concerned about how Microsoft is going to monetize Windows going forward. While the world's dominant desktop operating system remains available for a one-off fee (assuming you aren't an upgrader who can get it for free), there's a good chance this could change in the future.

Why do I think that? To me, it feels somewhat inevitable that eventually, Microsoft is going to look for a way to shift Windows from an upfront payment to a subscription model for consumers. That regular monthly income stream piling up in the coffers is the end game for most big tech companies and their products these days for good reasons in terms of the profits to be made.

Of course, rumors about Microsoft looking to charge a subscription fee for using Windows to consumers (as opposed to businesses, where there's already a subscription option) have been floating around for years. True, they've all been dubious and sketchy in nature, or indeed proven outright incorrect, but this idea keeps bubbling up, and I believe we're witnessing a development with AI right now that indicates how Microsoft might have an ideal opportunity to make this pivot at some point down the road.

Last week, Windows Central spotted that the Copilot feature Deep Research is getting the axe, to be replaced with a new feature: Researcher. The idea behind both pieces of functionality is roughly the same (researching and creating detailed reports complete with citations), but the difference is Deep Research was free, whereas Researcher requires a subscription to Microsoft 365 Premium.

This follows Microsoft Whiteboard (where AI assists you in brainstorming ideas) getting changed so personal accounts can no longer use it — the app now requires being signed up for a Microsoft Business account. On top of that, Outlook's Meeting Insight functionality was just shifted behind a paywall, being transformed into an admittedly beefier AI feature, but one that needs a Microsoft 365 Copilot license.

So, there's a trend towards turning previously free AI features into paid ones, presumably as Microsoft rejigs its Copilot offerings and figures out what works well — and what's being used — and whether any of that can be charged for.

AI pivot

Now, we all know AI agents are going to be the 'next big thing' (TM) in Windows 11, certainly if Microsoft has its way, and the idea is for these AI entities to be doing more and more within the OS.

We won't just have an agent for changing Windows settings — and I mean a proper incarnation of this already existing idea, which really can adjust a host of options based on a simple request to "make my laptop battery last longer" or similar — but we will have a small crowd of them. Maybe a troubleshooting agent, for example, which can take a problem that you're battling in Windows and use some genuine AI smarts to help solve it. Or perhaps a creativity agent which can tackle a host of image or video-related tasks, or more broadly help with organizing your projects and photos.

I think the catch will be that eventually, as we've seen with some aspects of AI and Copilot, Microsoft will start shuffling some of these agents behind a paywall — especially considering that more powerful capabilities like these in-depth AI tricks will cost Microsoft a fair bit to drive in terms of cloud resources. It's certainly conceivable that Microsoft could end up charging a small monthly fee to use these premium agents, maybe as separate add-ons in the hope that you'll bolt more of them onto Windows for a cumulatively greater benefit to its coffers.

We could ultimately be looking at a kind of modular, AI-focused OS, and to me, this seems like the easiest way for Microsoft to transform Windows into a subscription model, because it'll happen slowly. You don't need a troubleshooting AI agent to run Windows at all, but it'll be a nice thing to have — certainly for less tech-savvy types — in case problems do arise in the OS.

As more bits and pieces that might start off free drift behind a paywall — as these AI features are built up and become more compelling — people may eventually be tempted to buy a bundle of them. And before you know it, you've signed up for a Windows subscription of sorts (although the free version of the OS will, of course, still be available).

In the end, there may be a couple of bundles — tiered subscriptions, in other words — and let's not forget Microsoft's potential ambitions for a cloud PC model for consumers, either.

This has been a possibility raised in past rumors and leaks (and again, this is something which has already happened in the enterprise world), and if you put all this together, you're looking at a kind of Netflix model, if you will: a streamed OS with several paid subscription tiers. Albeit with a free basic tier for Windows – although who's to say that may not become ad-supported, or indeed more ad-supported, as Windows 11 already does a fair old line in adverts and promos. (Although admittedly Microsoft is cutting back on that front in its crowd-pleasing efforts to fix Windows 11).

Not a foregone conclusion — but a likely enough prospect

This is just my opinion, naturally, and yes, maybe I got rather carried away with the extrapolation at the end there. It's also true that some big question marks remain hanging over the wider notion I've put forward.

As I just mentioned, Microsoft is very much bending over backwards to please Windows 11 users right now, so any possible timeline for this shift may be pushed way back in view of that. Bringing in some form of subscription is hardly going to be a well-received move, even if implemented in small, delicate increments as I'm guessing it would be.

The other obvious sticking point is that Microsoft needs to make its AI agents in Windows worth having. They need to be objects of desire and come packing genuinely useful AI abilities, otherwise clearly, people won't pay for the privilege of having them on their Windows desktop. They also need to be secure and trustworthy so they don't end up throwing spanners in the works of your Windows installation.

That could be the biggest hurdle for Microsoft to overcome, because as it stands, when the idea of AI features being paywalled in Windows 11 has been raised (in rumors and the like), it's been actively welcomed by the more skeptical out there. The cynics are more than happy to have everything AI-related locked away from them, and as non-paying users, this would give them an AI-free Windows 11 desktop.

Again, this plays into any potential move along these lines having to happen further into the future, but I think Microsoft does have this as an eventual goal. If you ask yourself the question: if Microsoft could charge a subscription for Windows 11, would it? The answer is clearly yes, a thousand times over. But the actual, real question here is whether Microsoft thinks it could successfully get away with such a plan without sparking a large-scale defection from its desktop OS.

We can keep our fingers crossed that a monthly charge for Windows isn't coming, but frankly, I think it's likely. Or even just a matter of time — perhaps a lot of time, granted — whether that subscription pertains to AI add-ons, or a cloud PC offering, or Microsoft finds another way to spin this.

Microsoft has been battling to truly establish itself in the device market for years now, with its Surface suite covering everything from foldable smartphones to 2-in-1s up to more traditional laptops and desktops - all the way up to the enormous Surface Hub (RIP).

But the company has seemingly always fallen short - whether it's battery life, falling short on power, or the unavoidable lock-in with the Microsoft 365 experience.

However its latest collection of Surface for Business releases, framed squarely at work and enterprise users, looked to address all of that, and having been using one for the last few weeks now, I can safely say, Microsoft may finally have cracked the formula for a great working laptop at last.

Going hands-on

Microsoft has positioned the Surface Laptop for Business squarely at enterprise customers rather than consumers, and it's a substantial refresh over the previous generation, with the biggest improvements around AI, security, manageability, battery life and repairability.

The device is light and portable, weighing in at just over 1.35kg, and its slim build (just 0.69in in width) means it slipped easily into a rucksack or carry-on bag.

It's a stylish device to look at as well - the polished black anodized aluminium build is far more striking than other identikit dull business laptops around today, with a well-designed keyboard and touchpad that offer more than enough space.

But where Microsoft is looking to take a real step forward with the Surface Laptop for Business is in hardware, where the company has equipped the device with Intel Core Ultra (Series 3) processor, up to 64 GB LPDDR5X RAM and up to 1 TB removable Gen4 SSD.

Crucially though, as with many modern devices, it also features AI-specific hardware, with an Intel AI Boost NPU delivering 50 TOPS of AI performance.

Along with offering local AI processing on the device, the NPU looks to perform a number of other tasks, from improved battery life to greater Windows performance. This is a decent level of performance, but if you're looking for tasks such as CAD, 3D rendering or AI model training, you may want something a bit more powerful, with a dedicated Nvidia GPU.

This looks to boost productivity and efficiency across the board - and I can say this was definitely true when I was working on the go.

Sadly I wasn't doing particularly AI-heavy work to really test it out, but I was able to take the device with me on a week-long overseas work trip, using it in conference keynotes, remote interviews, and site visits, and it absolutely ticked all my boxes when it came to responsiveness, usefulness and battery life.

At home however, it wasn't quite the same story.

It should also have meant the device was well-placed to be the centerpiece of my home office set-up, but unfortunately I frequently found issues when trying to connect a range of devices, from monitors to Bluetooth keyboards - this may have been a driver-led issue, but it was frustrating for quite some time.

The lack of ports may be an issue for some users - as there is just one USB-A connection, and two USB-C ports, which might be an issue for some creators. I use a docking station for my set-up, so for my usage I was largely OK - however as mentioned, even this wasn't always responsive - and it's a shame Microsoft has ditched the USB-A port on the charger block cable as well, as this has definitely saved me in the past with previous Surface devices.

Microsoft has also introduced a more advanced haptic touchpad for the Surface Laptop for Business, promising a more consistent click feel and improved gesture support, as well as customizable feedback. Although slightly smaller than my usual work device (a HP EliteBook) I found the touchpad incredibly responsive and interactive, making navigation between different apps and windows a breeze.

My device was equipped with the new integrated privacy display - a feature which gained a lot of attention when it was included in the latest Samsung Galaxy flagship smartphone earlier this year.

Toggled on via the alternate F1 button function, the privacy display instantly makes the screen difficult to read from side angles - no need for an external magnetic privacy filter any more.

This is obviously pretty useful for those workers accessing private or proprietary information, stopping snoopers or spies from catching a glimpse, but it also offers an anti-glare coating which should be a hit with everyone.

I loved it - but will you?

Will it be the ideal device for everyone? Probably not, as being a Surface device means it is closely tied-in with the Microsoft ecosystem - so if you use Microsoft 365 at work (which I don't) you'll have a much smoother set-up and overall experience.

The price will also be a sticking point for some shoppers, as my model starts from £1,599 - with the top spec hitting £2,499 - probably out of reach for most start-ups and SMBs.

But overall, I was incredibly impressed by the Surface Laptop for Business, easily the best Microsoft device I've used for work by a mile - and one I hope to get to use again sometime in the future.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1646) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1646) — hint #2 — repeated letters

Quordle today (game #1646) — hint #3 — uncommon letters

Quordle today (game #1646) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1646) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1646) — the answers

The answers to today's Quordle, game #1646, are…

• SMITE
• ROACH
• RUDDY
• GLOBE

Another close shave after two wrong guesses took me to the edge.

In reality it wasn’t quite as perilous as I thought, as words beginning with S and ending I-T-E are few, but it felt perilous at the time.

Daily Sequence today (game #1646) — the answers

The answers to today's Quordle Daily Sequence, game #1646, are…

• CURSE
• FEIGN
• EXTOL
• POESY

Quordle answers: The past 20

• Quordle #1645, Monday, 27 July: TAFFY, FIGHT, GUILD, WAGER
• Quordle #1644, Sunday, 26 July: STOMP, LIMIT, FUNKY, STEAD
• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE
• Quordle #1627, Thursday, 9 July: CRUMP, PHONE, SHINY, STONY
• Quordle #1626, Wednesday, 8 July: GHOST, TREND, EXALT, ALONG

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #877) - hint #1 - today's theme

NYT Strands today (game #877) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• DIALER
• NOTES
• UNDER
• DIVER
• UNITE
• SALT

NYT Strands today (game #877) - hint #3 - spangram letters

NYT Strands today (game #877) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #877) - the answers

The answers to today's Strands, game #877, are…

• COMPLETE
• UNDEVIDED
• FULL
• TOTAL
• WHOLE
• ENTIRE
• SPANGRAM: ITSALLTHERE

• My rating: Easy
• My score: Perfect

This was a speedy one.

Without any difficult words, twisting connections or multiple possibilities I managed to find all of the game words quickly, leaving just the spangram to complete the board.

Adding to the ease, it was also a great game for non-game words.

All in all like shooting fish in a bucket. Except with words.

Yesterday's NYT Strands answers (Monday, July 27, game #876)

• PLATFORM
• TRACK
• TICKET
• COUNTER
• KIOSK
• BENCH
• SPANGRAM: TRAINSTATION

My day usually starts with a scan around major retailers, specialist sites, and deals aggregators to get a snapshot of the best tech offers that are available - and then I share the very best with you. Results can be mixed, depending on the time of year and whether there’s a major sale on, but there’s been one consistent theme lately: the deals on most PC components are atrocious.

If you’re a regular in this space, then you’re probably already well aware of the situation with RAM and storage prices over the past few months. It’s got to the point where I’ve all but given up on finding any good deals in this space, especially when there are no signs that it's improving.

Where did all the deals go?

There’s no clearer evidence of just how dire the situation is with this Samsung SSD ‘deal’ that’s currently live on Amazon. This Samsung 870 EVO is advertised as a whopping 62% off. But that’s from the current list price of, um, $1,039.99. With that price cut, it’s now down to $399.99. Almost $400 for a 2TB SATA SSD? One that has been as low as $79.99 in the past? And this counts as a deal?

That’s just a snapshot of how bleak it is shopping for PC gaming components in 2026. Worst of all, there doesn’t seem to be any positive news on the horizon. You have SSD controller manufacturers saying that “the retail SSD market has almost disappeared”, RAM prices have increased by at least 400% in some regions, and now one chip maker says its production costs are set to increase by 10% next year - so CPUs are potentially next up for price hikes.

It puts into perspective just how lucky I was when I chose to upgrade my PC towards the end of 2025. There were rumblings of price increases and stock shortages in those few months towards the end of the year, but it hadn’t reached the disastrous depths we find ourselves in now for wannabe PC builders.

I did have to wait a few months for my RAM to arrive, after the manufacturer I was about to buy RAM from completely shut down, but the cost didn’t make up nearly 50% of my entire budget like it would in today’s prices.

And my PC is very much a mid-range device with a Ryzen 9600x, a 9060XT, 32GB of RAM, and a 2TB NVMe SSD, which is about all I wanted given I mostly use it for work. I do like to play the occasional game on PC that I can’t get on the PS5, or if there’s one I would prefer to play on that platform, or when prices make the PC version a more sensible choice. Those specs cover my needs nicely at a reasonable budget.

Calculating what the spend would be these days for the same spec is a terrifying exercise. It’s over £1,600 now, when I was comfortably under £1,000 at the end of last year.

What does the future hold?

With everything pointing to similar or increasing prices for a long time ahead, anyone looking for a PC upgrade has no choice but to put up with these prices for the foreseeable future. Yes, there will be a chance for some savings during Black Friday in November, but we are still looking at a significant markup compared to the savings of old.

In fact, and I usually wouldn't recommend this, but with the way component prices are lately, I'd actually lean more towards buying a pre-built PC if you're shopping around now. Sure, these companies are still suffering from the same price increases, but you can actually find some good value rigs.

Most recently, for example, the Presidents' Day and 4th of July sales at iBuyPower had some strong discounts on high-end gaming PC, with extra savings of up to $350 available on PCs with a Ryzen 7 7800X3D, an RX 9070 XT, and 32GB of RAM.

That would be my advice based on the poor quality of deals that are available on many PC components. Yes, there are still a few genuinely good offers out there that I've seen on the likes of CPUs and GPUs, but storage and RAM are certainly beyond saving right now — and I'd move quickly if there's anything good on the former, as those deals may be disappearing before long as well.

Apple’s macOS 27 release — dubbed ‘Golden Gate’ by the company — is packed with new features, despite Apple saying that this year was more of an evolution than revolution. There are plenty of additions that have got tongues wagging and pens scribbling across the internet.

Yet for every Siri app and Liquid Glass tweak, there are many more upgrades that people are barely talking about. That means that if you don’t dig below the surface, you might miss some of the interesting new ways you can use your Mac once you’ve downloaded and installed macOS 27.

Here, we’ll run through five of our favorite little-known inclusions in the macOS Golden Gate beta. Get to grips with all of them and you’ll have fresh ways to use your Mac on a daily basis.

Visual Intelligence

Previously, Visual Intelligence was only available on iOS. You’d point your iPhone at an object, press the Camera Control, and Visual Intelligence would identify the object or pull out details from an event flyer and add them to your calendar. Now, similar powers can be harnessed on your Mac.

But you might be asking how this will work on a Mac, seeing as you can’t just go up to something and take a picture of it with your laptop. Fortunately, Apple has adapted Visual Intelligence to macOS 27 in a handy new way.

Much like when you take a screenshot, you can drag a box over part of your screen using your mouse. When you let go, you can ask Visual Intelligence to help you with what you have selected. You can ask Siri AI a question about the image and it will respond. You can then go back and forth with the chatbot if you need more information.

If you highlight an event, you can add it to your calendar. Even better, if you use Visual Intelligence on a festival schedule with multiple acts playing at different times, for instance, you can add as many or as few to your calendar as you want, all saved as separate entries with relevant info like the band that’s playing and the stage that you’ll find them on.

This is one of my favorite features in macOS 27 as it’s not only useful, but highly flexible and intelligent. Visual Intelligence is able to understand many different inputs and the contexts surrounding them, turning Siri into much more of the powerful assistant that it was always meant to be.

Automatic password strengthening in Passwords

The best password managers often alert you if your logins stored in the app are weak or compromised, but that usually means updating them to stronger alternatives yourself.

If that requires manually visiting affected websites and changing your login details by hand dozens or even hundreds of times, the task can feel incredibly daunting. Faced with that kind of situation, many people likely just give up, preferring to stick with their untrustworthy passwords rather than go through the hassle of changing them all one by one.

That’s an obvious security risk, and it’s one that macOS 27 has attempted to put right. Although the following change hasn’t had much airtime since the feature was announced at Apple’s Worldwide Developers Conference (WWDC) in June, I feel like it could be one of the most important features in the new operating system.

In macOS 27, all you need to do is ask Apple’s Passwords app to fix your dodgy passwords for you. Just one click and it’ll get to work visiting affected websites and updating your logins without you needing to lift a finger.

It’s a great example of how useful AI agents can be, all backed up by Apple’s well-known security and privacy credentials.

Natural language in Calendar

How many times have you opened the Calendar app on your Mac and tried to create a new event with a phrase like “Movie night with James tomorrow at 8pm at home,” only to find none of the details — such as the time or the place — are properly added to the event?

It’s been a recurring problem for years, and a frustrating one, too, as Apple fans have watched other apps race ahead with similar features while Calendar lags behind.

Now, that’s been improved. Changes in macOS 27 mean that you just need to enter an event using the type of natural language that you’d use in an everyday conversation. Any details that Calendar can pick up on — like a person, place, time or date — will turn gray. Click them and select the suggested detail and they’ll be properly added. This feature understands your context, too, such as where your home is located.

Sure, similar features have been present in rival calendar apps for years, and that could explain why Apple’s Calendar update hasn’t exactly lit the world on fire in the weeks and months since it was announced.

But having this feature is nonetheless an excellent addition for users of the Calendar app. The more naturally you can use your apps, the more effortless they become, allowing you to quickly be done with them so you can get on with what matters in your day. This natural language upgrade for the Calendar app lets you do exactly that.

App resizing in iPhone Mirroring

Of all the clever new features announced last year as part of macOS Sequoia in 2024, iPhone Mirroring was one of the more intriguing. As the name suggests, it mirrors your iPhone onto your Mac’s screen, bringing up a software view of your device where you can open apps, type messages, and basically use everything on your iPhone through the Mac sitting in front of you.

But there was one annoying quirk with this system: you couldn’t resize the iPhone window to use different aspect ratios. That meant any apps you opened on the virtual iPhone were limited in size and failed to make use of your Mac display’s larger proportions.

Thankfully, Apple has fixed that up in macOS 27. Instead of being stuck with the unchanging iPhone window of the past, macOS 27 now lets you drag the on-screen iPhone and change its dimensions as required.

You can now make the iPhone window wider or taller and the content inside the app will automatically adapt. It’s far better than what we had before.

So, if you’d given iPhone Mirroring a try before but were put off by the tiny window you had to work with, macOS 27 could make using your iPhone on your Mac a little more comfortable.

Improved support for ultra-wide displays

Before macOS 27, using an ultra-wide display with your Mac could be a downright pain. Many ultra-wide resolutions were not supported natively in macOS, meaning you had to settle for something that wasn’t quite right for your display, which could in turn negatively affect your macOS experience.

And when competing operating systems like Windows could support ultra-wide monitors in a more comprehensive way, the frustration for Mac users was understandable.

Worse, if you ever unplugged your monitor and then plugged it in again, macOS would forget your previous display settings, forcing you to set up your ultra-wide monitor as needed every single time. If you relied on one of the best MacBooks as your daily driver and you frequently disconnected it from your desk display, this was a regular irritation.

In macOS 27, though, that’s finally a thing of the past. You’ll now be able to run an ultra-wide monitor up to 5K resolution and up to 120Hz refresh rate, meaning far more high-end displays will now work with macOS 27 without a hitch.

And Apple has fixed the disconnection issue so that hooking up your monitor no longer requires you to dial in your settings every time. Instead, macOS remembers your preferences so that no manual adjustments are needed.

That makes this a seemingly small change on the surface, but one that will be appreciated by anyone who owns an ultra-wide monitor and has long struggled with the limitations of macOS.

• 2.2 million vehicles are susceptible to a Bluetooth-based attack in the state of California
• The vulnerability is due to dealer-installed security systems
• Researchers at the University of California San Diego found that the Acrisure-built security devices all rely on the same secure key

A vulnerability has been found in KARR and SWDS automobile security systems manufactured by Acrisure that enables remote control via Bluetooth. The vehicles had the security systems installed by car dealers in California, specifically as anti-theft and tracking devices. Thanks to this hack, however, it seems that vehicles can be unlocked, with some further control given to the attacker.

Researchers at the University of California San Diego found that the 2.2 million automobiles were purchased from Southern Californian dealers since 2017, although the secondary market means that the vehicles could be elsewhere in the US, and even as far afield as Japan.

Worryingly, the researchers also found a publicly-accessible database holding information about all vehicles with the security system equipped.

How Bluetooth controls these cars

The researchers determined that the automobiles were purchased from Honda, Toyota, Mazda, Ford, and Jeep dealerships, and the affected vehicles have the “KARR-SWDS” label on the driver-side window, with the anti-theft device mounted under the dashboard.

Usage is straightforward: a mobile app connects to the KARR security system over Bluetooth and includes functions such as locking and unlocking doors, controlling the horn, and flashing the headlamps. It can also prevent the car from starting, although this only works if it isn’t already running.

The problem is with the implementation, which the researchers discovered relied on the same secure key on the KARR security systems. Once cracked, all cars equipped with the same device were believed to be open to attack.

Changing the secure key isn’t an option, and neither is disabling the Bluetooth. Of particular concern is that researchers found that even if the buyer doesn’t pay for a subscription for the app and the KARR system, the hardware is still in place. Worse, it has the same access to the vehicle’s doors, ignition, horn, and headlamps.

“Removing the devices is not trivial,” UCSD compsci PhD candidate and paper co-author Yibo Wei said in the report on the research (which is fully released in August). “You have to open up the dashboard and cut and reconnect the wires that are deeply intertwined with the car’s computers and ignition system.”

The patch is in

Jerry Yu, also co-author, wrote “Instead of smashing a window to get access to a vehicle, thieves could simply connect remotely via Bluetooth to the device inside the vehicle, and make it unlock car doors.”

KARR has told media outlets that only vehicles installed “with certain Bluetooth-related components” are affected, and the company has issued a firmware update.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1645) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1645) — hint #2 — repeated letters

Quordle today (game #1645) — hint #3 — uncommon letters

Quordle today (game #1645) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1645) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1645) — the answers

The answers to today's Quordle, game #1645, are…

• TAFFY
• FIGHT
• GUILD
• WAGER

I don’t think I have ever played such a strategic game of Quordle.

Usually I just go for whatever word seems the most gettable. But in this game, with numerous possibilities for a word ending I-G-H-T, I held back in the hope that another word would give me that crucial fifth letter. And it did.

Daily Sequence today (game #1645) — the answers

The answers to today's Quordle Daily Sequence, game #1645, are…

• CREED
• ROGUE
• POOCH
• GRIPE

Quordle answers: The past 20

• Quordle #1644, Sunday, 26 July: STOMP, LIMIT, FUNKY, STEAD
• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE
• Quordle #1627, Thursday, 9 July: CRUMP, PHONE, SHINY, STONY
• Quordle #1626, Wednesday, 8 July: GHOST, TREND, EXALT, ALONG
• Quordle #1625, Tuesday, 7 July: ARRAY, SUITE, KIOSK, BOULE

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #876) - hint #1 - today's theme

NYT Strands today (game #876) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• BRINK
• CHART
• TIME
• STANK
• TICK
• PLAIT

NYT Strands today (game #876) - hint #3 - spangram letters

NYT Strands today (game #876) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #876) - the answers

The answers to today's Strands, game #876, are…

• PLATFORM
• TRACK
• TICKET
• COUNTER
• KIOSK
• BENCH
• SPANGRAM: TRAINSTATION

• My rating: Easy
• My score: Perfect

Another Spangram First for me today, although it did come in two parts as I saw “station” before making the connection for TRAINSTATION.

From here it was a case of collecting the more obvious railway-related words — PLATFORM, TRACK, TICKET — before connecting the less obvious like KIOSK.

A nice, easygoing start to the week.

Yesterday's NYT Strands answers (Sunday, July 26, game #875)

• GURU
• MAVEN
• PUNDIT
• EXPERT
• AUTHORITY
• SPECIALIST
• SPANGRAM: BIGBRAIN

• Accomplish AI showed Claude Cowork could escape a VM sandbox via Linux zero‑day CVE‑2026‑46331
• Agent accessed host Mac files, risking exfiltration of SSH keys, cloud credentials, and more
• Anthropic shifted Cowork to default cloud execution; local users must harden configs to mitigate exposure

Recent news of a ChatGPT agent escaping the sandbox and attacking services on the internet raised quite a few eyebrows, but it seems it’s not the only one capable of running wild. Security researchers Accomplish AI are saying they achieved similar results with Anthropic’s Claude Cowork.

In a new report, the researchers said they ran a local session in a Mac-hosted virtual Linux machine and then observed as the agent broke free of the VM and started reading and writing files on the underlying system.

“We connected a folder to a fresh Claude Cowork session, sent one short message, and watched the agent escape the sandbox,” Oren Yomtov, principal security researcher at Accomplish AI, told The Hacker News. “From inside the VM, it reached the host Mac and read and wrote files all over it, far outside the folder we'd connected, with no permission prompt anywhere.”

Defaulting to cloud execution

This means that, in theory, the agent can be used to access or exfiltrate anything that’s stored on the Mac’s user account, including SSH keys, cloud credentials, and more. To break out of the sandbox, the agent exploited CVE-2026-46331 ("pedit COW"), a Linux kernel privilege-escalation vulnerability. This flaw, fixed in mid-June this year, was given a severity score of 7.8/10 (high).

Accomplish AI disclosed these findings with Anthropic, which allegedly acknowledged them but did not issue a direct fix. However, the version of Claude Cowork that was released afterwards defaults to cloud execution which, the publication claims, addresses the issue. Still, users who opt to run the agent locally rather than in the cloud will remain exposed.

Mitigations are possible, though. Users should disable unprivileged user namespaces, grant/revoke seccopm permissions, stop modules autoloading, and restrict sharing of the whole host into the VM.

"Scope it to the folders that were actually connected instead of all of /, or at least mount it read-only, and run coworkd with ProtectSystem=strict in its own mount namespace so it isn't re-execing binaries a session user can poison," Accomplish AI explained. "Then even a full guest-root has nothing to land on, the last two steps of the chain have nowhere to go."

• Proofpoint reports Russian TA488 exploited Zimbra zero‑day CVE‑2025‑66376 in espionage campaigns
• “Half‑click exploit” let attackers compromise systems when victims merely viewed malicious emails
• Targets included NATO, Ukrainian government, and defense entities; group vanished after Feb 2026 exposure

Russian state-sponsored cybercriminals have been abusing a zero-day vulnerability in the Zimbra email and collaboration platform to conduct espionage against western targets - primarily military and government agencies, experts have warned.

Cybersecurity researchers Proofpoint claim the campaign has been ongoing for at least a year, possibly longer, describing it as a “half-click exploit”, because the victims don’t even need to do anything specific in order to get infected.

Usually, when an attack is done via email, the victim is required to at least download a file or click a link. In this case, a cross-site scripting (XSS) vulnerability in the Zimbra web-based email service allowed the Russians to infiltrate the computers as soon as the victim views the email, nothing more.

Targeting NATO and Ukraine

The vulnerability in question is now tracked as CVE-2025-66376. It was assigned a severity score of 7.2/10 (high), and was patched in November 2025. However, the threat actors have been leveraging it long before Zimbra patched it up.

Proofpoint says numerous groups were observed, throughout the years, abusing this flaw. This time around, though, the group in question is tracked as TA488, also known as Laundry Bear or Void Blizzard.

“After successful exploitation, TA488 established persistent access to the systems and exfiltrated emails from the targeted users,” Proofpoint’s report reads. Besides emails, the crooks hunted for passwords, email directories, two-factor authentication tokens, and more. The group has been “consistently” targeting NATO and Ukrainian government organizations, alongside entities in the defense industrial base,

The group seems to be defunct now, since the researchers could not find any activity post February 2026. At that time, security researchers Seqrite disclosed a detailed breakdown of the group’s infrastructure and modus operandi, resulting in TA488 burning down months-old setups and vanishing.

Cherry XTRFY K63W Pro Compact Ultra-Wideband: One-minute review

The Cherry XTRFY K63W Pro Compact Ultra-Wideband is a small gaming keyboard with a few surprises in store.

True to its name, it certainly doesn’t take up much room on your desk. It’s also pleasingly light, which means it’s easy to move around. Despite this and the plastic construction, the build quality seems high.

There are some unique features to the design of the K63W Pro. One is the prominent springiness of the gasket-mounted layout, which is a little strange at first, but ultimately it’s not an issue and the keys still feel just as solid as those in the best gaming keyboards.

Another is the arrow keys. Not only are they much larger than most, but each of the four directions has a second binding to include right control, right shift, menu, and Fn inputs. There’s a shortcut for toggling between the two sets of bindings, as well as activating both at the same time, with the input triggered determined by whether a key is pressed or held.

There’s also an option to select these modes in Cherry’s companion software. This software has other customizations, but not many. The remapping options are especially disappointing, thanks to their very awkward setup and limited options. There’s barely any performance tweaks here, either.

Thankfully, the K63W Pro is a capable performer as it is. The keys travel further than you might expect given their low profile, but they’re still just about snappy enough for fast gaming and typing. The ergonomic slant of the keycaps, as well as the generous spacing between them, make them easy to use, while the aforementioned thinness of the chassis makes for a comfortable experience, even without a wrist rest.

Cherry makes much of the K63W Pro’s Ultra-Wideband (UWB) wireless technology, which is designed to prevent potential interference. However, I can’t say I noticed an improvement over other wireless keyboards, and the tech isn’t worth the impracticality that comes with the incongruously large wireless puck. It’s also a shame there’s no Bluetooth support.

The K63W Pro is reasonably expensive for a compact keyboard, although the quality and interesting layout help its case in this regard. The performance is good and it's comfortable to use, but I’m not sure every gamer is going to get along with its unique features.

Cherry XTRFY K63W Pro Compact Ultra-Wideband review: Price and availability

• $169.99 (about £150 / AU$240)
• Available now
• Expensive for a small board

The Cherry XTRFY K63W Pro Compact Ultra-Wideband costs $169.99 (about £150 / AU$240) and is available now. It comes with a USB cable and the UWB USB receiver.

This is a reasonably high price for a 70% keyboard, especially one that lacks Bluetooth support and input customizations. However, there are certainly more expensive mechanical boards out there, such as the Razer BlackWidow V4 Pro 75. I loved the performance of that board when I reviewed it, and it has a much better selection of input customizations than the K63W Pro.

If you want something more budget-friendly, consider the Monsgeek FUN60 Ultra. This keyboard has analog switches with a heap of performance-related features and tweaks at their disposal. They also feel just as good as mechanical switches in my view.

• Value score: 3.5

Cherry XTRFY K63W Pro Compact Ultra-Wideband review: Specs

Cherry XTRFY K63W Pro Compact Ultra-Wideband review: Design and features

• Thin and light
• Springboard-like
• Limited input customizations

There's nothing particularly exciting about the way the K63W Pro looks. It keeps things basic, although the rounded edges are a nice touch, helping to relieve its austerity a little.

True to its name, the K63W Pro is indeed compact. In addition to its truncated width, it’s also quite thin, making it comfortable to use even without a wrist rest — which is just as well, since it doesn’t come with one.

Despite its plastic construction, the K63W Pro feels sturdy and built to a high standard. Rather unique is the prominent flex of the keyboard plate. This can be pushed down quite a way when pressing a key, which is a little disconcerting at first, but it still feels perfectly stable and it rebounds fully. I wasn’t concerned about its durability, either.

The keycaps feel premium, too. They’re pleasingly textured and solid with little play. On top of this, the bright RGB backlighting shines through them very well, and the main legends are large and clear, although those for the Fn shortcuts on the function keys are a little too small.

You get more keys on the K63W Pro than you might think, including some navigation ones such as delete and insert. However, it’s odd there’s a blank key in the top-right corner; a missed opportunity to squeeze in another, perhaps, such as a Home key.

There are quite a few useful Fn shortcuts on the function row, including those for adjusting volume and one for opening your default browser, which are all welcome. However, a few remained a mystery to me. Two look like they adjust some sort of performance-related parameter, but I didn’t notice any action when I pressed them. There’s also one on F9 with Cherry’s logo on it that opens the Windows Run box and enters some kind of address, but again nothing happened when I pressed it. The text was too long and disappeared too quickly for me to read it, but my only guess is that it’s supposed to open some kind of Cherry software.

The most interesting aspect of the K63W Pro’s layout is the Mod Tap arrow keys. These are larger than your typical set since they have secondary bindings, with control, shift, menu, and Fn inputs mapped to each direction. Pressing Fn+M (there’s another Fn key mapped to the insert key) will cycle between three different modes: one enables the usual arrow key inputs, one enables the secondary bindings, and one enables both sets at the same time, with taps triggering arrow directions and holds triggering the secondary functions. The M key lights up a different color depending on which mode is active.

You can also switch between these modes using the Cherry Utility. This desktop app also features other customizations, although their dearth is disappointing. It has perhaps the worst rebinding mode I've ever seen in peripheral software, requiring you to click a ‘create’ button for every key you want to rebind, in order to bring up the option to rebind it. The layout graph doesn’t display your remapped bindings, which is another baffling oversight, and you can’t alter the Fn layer of shortcuts. There aren’t many performance-related settings here, either; you can adjust the polling rate for both wired and wireless modes, and there’s a SOCD mode with three basic settings, but that’s all you get.

Rather than your typical USB dongle, the K63W Pro comes with a block-shaped puck that requires a USB cable (also included) to connect to your device. This is what facilitates the UWB connectivity, which Cherry claims reduces interference compared to standard wireless connections. It looks sleek, but it’s quite large and takes up more space than I’m happy with, especially when you factor in the trailing cable.

• Design & features score: 3.5 / 5

Cherry XTRFY K63W Pro Compact Ultra-Wideband review: Performance

• Relatively heavy keys
• Great space bar
• Unnecessary Ultra-Wideband connectivity

I mostly enjoyed my time using the K63W Pro. The keys feel well lubed and reasonably damped, although it still verges on the side of clicky than thocky, which, depending on your preferences, is either a good thing or a bad thing. Personally, I liked the feedback they provided.

I was also fond of the low-profile keycaps, which seem to slant slightly towards the user. This helped me hit keys flush, making up for the somewhat limiting tilt angle of the board, even with the two-stage feet out. This was especially noticeable with the space bar, a key I often hit on its edge but not here. It also feels slightly more damped than the other keys, while still being easy to press, a combination that makes it very satisfying to hammer away at.

The switches themselves are also low profile (specifically, they’re Cherry’s MX Low Profile 2.0). However, they have surprisingly deep travel, which makes them more satisfying than they otherwise would be. Despite this, their actuation point is relatively shallow, which meant I could still type with a reasonably light touch. They strike just the right balance between being snappy and forgiving of minor mispresses.

Tying accuracy is also aided by the large size of the keycaps, as well as their wide spacing. While this made reaching certain keys a little difficult when touch typing, it made gaming in the WASD position quite comfortable and secure. I could also reach the peripheral keys easily from here, including the space bar, thanks to its aforementioned slant and low profile.

In my experience, the Mod Tap feature works reasonably well, achieving Cherry’s aim of reducing side bulk without sacrificing inputs. However, you have to hold an arrow key for a long time to activate its secondary binding. I found this particularly frustrating when typing, as I required quick and regular access to the right shift key, but I often didn’t hold the Up arrow key long enough to access it. It’s also disappointing that you can’t alter the hold time.

Although Cherry makes bold claims about the UWB wireless connectivity, I can't say I noticed any performance gains over other wireless keyboards I’ve tested. Such models have greatly improved in recent years, to the point where regular-sized USB dongles perform pretty much flawlessly. And if you are an elite player concerned about lags and dropouts, you’ll probably opt for a wired connection anyway. All this is to say that the UWB tech and the outsized puck are ultimately overkill for many. What’s more, the K63W Pro doesn’t have Bluetooth support, as lots of other premium wireless keyboards feature.

• Performance score: 4 / 5

Should I buy the Cherry XTRFY K63W Pro Compact Ultra-Wideband?

Scorecard

Buy it if…

Don't buy it if…

Cherry XTRFY K63W Pro Compact Ultra-Wideband review: Also consider

How I tested the Cherry XTRFY K63W Pro Compact Ultra-Wideband

• Tested for a few days
• Used for a variety of tasks
• Plentiful gaming keyboard experience

I used the K63W Pro for a few days, during which time I used it for working, general browsing, and of course, gaming. I used it in both wired and wireless modes.

I played games such as 007 First Light and Counter-Strike 2, which are good tests for the speed and accuracy of key inputs.

I’ve been PC gaming for over a decade, and have used numerous keyboards in that time. I’ve also reviewed a large number of them, ranging widely in their form factors, switches types, feature sets, and price points.

• First reviewed: July 2026
• Read more about how we test

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1644) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1644) — hint #2 — repeated letters

Quordle today (game #1644) — hint #3 — uncommon letters

Quordle today (game #1644) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1644) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1644) — the answers

The answers to today's Quordle, game #1644, are…

• STOMP
• LIMIT
• FUNKY
• STEAD

My major triumph this round was getting LIMIT.

I was given a head start with one of the "I"s in the correct position, but the clincher was guessing that there must be two of them.

From here on in it was a rare stress-free game.

Daily Sequence today (game #1644) — the answers

The answers to today's Quordle Daily Sequence, game #1644, are…

• FROWN
• SMOKE
• SPACE
• NINJA

Quordle answers: The past 20

• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE
• Quordle #1627, Thursday, 9 July: CRUMP, PHONE, SHINY, STONY
• Quordle #1626, Wednesday, 8 July: GHOST, TREND, EXALT, ALONG
• Quordle #1625, Tuesday, 7 July: ARRAY, SUITE, KIOSK, BOULE
• Quordle #1624, Monday, 6 July: TRAWL, SPICE, PIANO, SHARK

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #875) - hint #1 - today's theme

NYT Strands today (game #875) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• BUGS
• CITY
• SPITE
• THING
• BRAIL
• HAVER

NYT Strands today (game #875) - hint #3 - spangram letters

NYT Strands today (game #875) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #875) - the answers

The answers to today's Strands, game #875, are…

• GURU
• MAVEN
• PUNDIT
• EXPERT
• AUTHORITY
• SPECIALIST
• SPANGRAM: BIGBRAIN

• My rating: Easy
• My score: Perfect

This was one of those games that felt like it was going to be difficult but ended up being easy.

That said, it did take me a while to find my first word — but with GURU snagged, the rest all seemed to fall into place.

If I was being fussy, based on my recent World Cup viewing, I wouldn’t include PUNDIT on this list; although this is indeed someone who proffers their opinion, it is often loosely based on any actual fact. Although, that said, coming from a position where you consider yourself “all-knowing” or in possession of a BIGBRAIN seems to help anyone feel as if they are an EXPERT.

Yesterday's NYT Strands answers (Saturday, July 25, game #874)

• GOWN
• TUNIC
• PINAFORE
• KIMONO
• DIRNDL
• MUUMUU
• SPANGRAM: YOUWEARITWELL

• Researchers show Gatekeeper can be bypassed by replacing a previously run legitimate macOS app with malware
• Attack requires prior user‑level code execution, then swaps in a malicious app that Gatekeeper won’t re‑verify
• Apple dismissed the issue, saying locally rebuilt bundles fall outside Gatekeeper’s scope, leaving risk to social engineering

A pair of researchers claims to have found a way around Gatekeeper, a built-in macOS security feature that helps protect users from running malicious or untrusted software. However Apple doesn’t really see it that way and has seemingly decided not to pursue the issue further.

Gatekeeper’s modus operandi is rather simple - when a user downloads an app from outside the App Store, it verifies the product comes from an identified developer and is notarized by Apple. If it can’t verify it - it won’t allow it to run on the machine.

Now, security researchers Talal Haj Barky and Tommy Mysk claim that, as long as a legitimate app was run at least once on a macOS device, it can be replaced with a malicious version, and Gatekeeper won’t even blink its virtual eye.

Locally built

That also means the attack is not that straightforward to pull off. The threat actor needs to have a way to execute user-level code (for example, a malicious app, a compromised software package installed through a package manager, or a prompt injection attack that tricks an AI agent).

Once that is obtained, they can archive a legitimate app, remove the original, then replace it with malware, and Gatekeeper will not try to re-authorize it. That malicious version can then trick the victim into compromising the device even further, since a certain level of trust was already established.

After reporting the issue to Apple, the company apparently just closed it.

"Apple doesn't consider this attack to be 'modifying' the signed executable," Mysk said. "Instead, Apple says that by archiving/restoring the app bundle, the proof-of-concept code overwrites the entire app bundle, making it locally built. Locally built app bundles are not covered by macOS guards. And this is why access to Keychain or TCC protected directories require system authorization prompts. And for users to accept those is a matter of social engineering attacks that Apple considers out of scope."

Via The Register

Valve Steam Machine: Two-minute review

It's finally happening! Valve's long-awaited Steam Machine has landed at last, promising to bring gaming-PC-level performance to an ultra-compact console-style device ideal for couch gamers who want to dip their toes into PC gaming for the first time. This is Valve's second run at the console-style PC market, and the gaming giant seems a lot more committed this time around.

And... well, I'm not entirely underwhelmed by it, but it's also not overwhelmingly impressive. I guess you could say I'm distinctly whelmed by the Steam Machine; it's a lovingly crafted piece of hardware that arguably achieves what it sets out to do, but falls down in two extremely important areas.

As you might have already guessed, those areas are performance and pricing. At the default 1080p resolution, it's a capable little machine that should be able to give you a good gaming experience with minimal fuss, but anyone expecting beefy 4K performance on par with the existing slate of top-tier home consoles is going to be disappointed.

Of course, this boils down to what sort of games you want to play. If you've got a 4K TV in your living room and want a compact PC specifically so you can enjoy older games, or the sort of indie game experiences that aren't so freely available on consoles – I'm talking the low-budget viral titles that so frequently dominate TikTok and Instagram Reels – then the Steam Machine might actually be an excellent choice.

Another key aspect of Valve's new console-PC hybrid is SteamOS, the recently updated operating system designed to provide a more console-like experience than conventional platforms like Windows and macOS. It's already available for anyone to put on their own PC, and of course powers Valve's own Steam Deck handheld. In a break from tradition for PC reviews, I've added an extra section to this review to specifically discuss SteamOS, but for now all I'll say is that it gets the job done well.

Moving on to pricing, it's painfully clear that the ongoing RAM crisis has taken a toll on the Steam Machine's value proposition. Starting at $1,049 / £879 / AU$1,609, it's a fair bit more costly than the PS5 Pro, which my esteemed colleague Rob Dwiar already noted was "too expensive" for the average gamer in his review here on TechRadar - and that was before Sony hiked the price of its home consoles earlier this year.

Considering that the Steam Machine was widely expected to represent an accessible path into the world of PC gaming for those who have previously not ventured beyond the confines of the console market, that price tag is sure to upset some gamers who were eagerly awaiting Valve's return to the console market. Hell, you might even be better off building your own Steam Machine killer.

But it's important to remember that the Steam Machine was probably never going to live up to the price-to-performance ratio of modern home consoles like the PS5 and Xbox Series X, even though it is ostensibly using newer, better hardware. This is due to the game development process and how developers implement platform optimization; if you're making a game for PS5, you're just making a game for PS5. You'll have to take the Pro model's specs into account now too, but at the end of the day you only need to optimize your game's performance for a specific set of hardware components with clearly defined limitations.

On the other hand, optimizing a game for PC means optimizing it for the uncountable millions of possible hardware configurations that exist across pre-built and custom gaming PCs, plus every gaming laptop on the market, plus handheld gaming PCs, and now plus the Steam Machine. It's a wildly different ballgame, and while some developers might skimp on good PC optimization, it's borderline impossible to get a game running consistently well on PC versus a specific console.

Does this entirely excuse the lackluster bang for your buck the Steam Machine offers? No, probably not. It's a mitigating factor that I have taken into account for this review – but quite frankly, I think Valve's second attempt at bringing PC gaming to the masses has slightly missed the mark.

Valve Steam Machine review: Price & availability

• Starts at $1,049 / £879 / AU$1,609
• Available now in the US, UK, and Australia
• Steam Controller can be added as a bundle

As I mentioned already, the Steam Machine starts at a rather steep $1,049 / £879 / AU$1,609, which gets you the standard configuration with no controller and 512GB of high-speed SSD storage. The actual performance spec doesn't change if you upgrade to the 2TB SSD model for $1,349 / £1,149 / AU$2,109, so you're essentially just paying for the extra storage – and even by current component pricing standards, that's an expensive upgrade.

Whether you pick the 512GB or 2TB model – and despite the price, I'd definitely recommend the latter if you play triple-A PC games, since install sizes have become frighteningly bloated as of late – you get the same semi-custom AMD Zen 4 CPU and discrete AMD RDNA 3 GPU, along with 16GB of RAM and a separate 8GB of GDDR6 VRAM.

Both models can also be bundled with Valve's Steam Controller (which also comes with a charging 'puck' and USB cable), which adds $79 / £59 / AU$119 to the base price of either model. This is actually a pretty decent add-on, since the Steam Controller is a genuinely good gamepad and normally costs $99 / £85 / AU$149 direct from Valve if you buy it separately. Unless you already own one of the best PC controllers, I'd strongly recommend getting the bundle.

It's also worth noting that pre-orders for the Steam Machine sold out almost immediately, so if you want to get your hands on one, you'll have to sign up for the waitlist directly through Steam.

• Value: 2.5 / 5

Valve Steam Deck review: Specs

Valve Steam Machine review: Design

• Compact, cubic design
• Tidy internals and front lightbar
• Somewhat limited port selection compared to most PCs

For a product that I found a little disappointing overall, I have to say that I have very little to criticize when it comes to the physical design of the Steam Machine.

Simply put, it looks great. The whole unit is a neat black cube of matte metal measuring roughly six inches along each edge and weighing a little under six pounds, with a thin indentation near the base on the front side, inside which nestles a bright LED lightbar. Beneath this, there's a power button with an additional LED (which stays illuminated while the Steam Machine is in sleep mode) along with two USB-A ports and a microSD card slot for easily adding extra storage. The cube sits atop four small rubber feet, which feel quite durable.

The 17-LED lightbar is more than just a simple power indicator, which I quite like. If your Steam Machine is downloading a game, it 'fills' from left to right to indicate the download's progress, and you can customize it with extra colors and functions in SteamOS too.

It's significantly smaller than any current-gen home console and the vast majority of pre-built gaming PCs, and certainly a lot smaller than any custom desktop PC the average system-builder could assemble - you'd need to be seriously confident with graphics card disassembly and custom cooling to even get close to something this small.

In fact, it's immediately reminiscent of the Nintendo GameCube I treasured in my teenage years, though I promise I haven't let nostalgia cloud my opinion here. The closest you're likely to get to this sort of compact gaming PC now is probably the Asus ROG NUC that I personally reviewed last year - and while that offers far superior performance, it's also so eye-wateringly expensive that it makes the Steam Machine look cheap.

The front panel is removable and can be easily swapped out with magnetic faceplates. If you spring for the 2TB model, you get two of these included: a red felt fabric one and a rather nice wood-effect one that matches my TV stand perfectly... it looks right at home there, actually. Wink wink, nudge nudge, Valve.

The power supply is (somehow) built into the breathtakingly compact chassis, meaning there's no chunky adapter brick here either - just a regular cable with a two-pin power connector. This is included in the box, along with an HDMI cable (though the rear I/O also features a DisplayPort 1.4 output, which may be preferable if you're connecting it to a desktop monitor rather than a TV).

That rear I/O is where you'll find the rest of the ports: the aforementioned HDMI and DisplayPort, along with an RJ-45 Ethernet port, two USB-As, and one USB-C. I'll confess that as a fan of physical connectivity, I find this port selection a little lacking, but it's realistically going to be plenty for the target audience of the Steam Machine. It might be less than a fully-fledged desktop PC, but it's comparable to any modern home console. Wireless connectivity uses Wi-Fi 6E and Bluetooth 5.3 – I would've liked to see Wi-Fi 7 here, but it's not a dealbreaker.

The internals are very tidy, with a large air intake grille behind the magnetic faceplate behind which sits the mainboard. A single large upright fan draws air through and out of the rear exhaust. This is (surprisingly) an upgradable system, though it's more along the lines of a gaming laptop than the average desktop PC; you can swap out the M.2 SSD and the RAM, but that's it.

Lastly, I'll briefly touch on the new Steam Controller. We reviewed it separately here, so I won't go into too much detail, but it's certainly good (if overpriced, like the Steam Machine itself). Pairing the pad and the 'puck' that doubles as a wireless transmitter and charging dock is a seamless process, and the controller itself feels good to use in games. The lack of an audio jack, as seen on other mainline console controllers, is a bit of a shame, however.

I have to admit that I really, genuinely love the design of the Steam Machine. My only real criticism here (and the only thing stopping me from giving it a perfect score in this section) is that it only has one single USB-C port, and it's on the rear. This is a minor gripe, though; for the most part, this is a very well-designed piece of hardware.

• Design: 4.5 / 5

Valve Steam Machine review: Performance

• Strong gaming performance at 1080p
• Cracks start to show at 1440p; falls apart completely at 4K
• Runs quietly and doesn't get too hot

Benchmarking the Steam Machine was... interesting, to say the least. I had hoped to mostly stick to our usual suite of tests used for benchmarking the best gaming PCs and best gaming laptops, but the vast majority of those systems are running on Windows 10 or 11. SteamOS, while a very solid platform these days, simply doesn't have the same degree of flexibility as Microsoft's flagship operating system.

For starters, the Steam Machine locks itself to a maximum framerate based on the refresh rate of the monitor it's connected to, which meant I had to seek out a different high-refresh-rate display to get accurate results. Notably, the Steam Deck does something similar with its built-in 60/90Hz screen, so I suspect that this is a SteamOS quirk rather than any hardware-imposed limitation, but I wasn't able to find any way to disable it.

Then I got to the compatibility issues. Half the tests we usually run (most pertinently Geekbench and 3DMark) simply can't be installed and run natively in SteamOS's default Big Picture Mode, so I had to cut down my testing selection fairly significantly. To compensate (and to provide a better idea of how well the Steam Machine can actually handle gaming), I expanded my gaming tests to include more graphical configurations than usual.

Furthermore, you have to dig into the settings of SteamOS itself to uncap the resolution, which is set to FHD 1080p by default. Eagle-eyed gamers clocked prior to the Steam Machine's release that Valve had quietly lowered expectations by adjusting the language used in the product's store page from "4K gaming at 60 FPS" to "Up to 4K gaming with FSR", crushing hopes that it would be a true competitor to the likes of the PS5 Pro. Clearly, 1080p is the ideal target, which will no doubt be a disappointment for some potential customers.

Anyway, let's talk about the actual performance. At 1080p with graphical settings maxed out, the Steam Machine can handle almost anything you throw at it; the discrete semi-custom AMD RDNA 3 GPU inside this little black box was able to crack 60fps in most games I tested at FHD resolution (sometimes requiring the use of AMD's FSR upscaling tech, though this had virtually zero impact on visual fidelity), with the exception of titles that use ray tracing.

With ray tracing turned off, you'll be fine; turn it on, and you can expect framerates to tank even if you also switch on FSR. Cyberpunk 2077 looked and played great at 1080p Ultra settings with no upscaling, but switching to the Ray Tracing Ultra preset (with AMD FSR 3 set to Balanced) saw my average framerate drop to a little over 30 in the built-in benchmark, while actual in-game performance was even choppier.

Annoyingly, some games don't seem to properly support the most recent version of FSR on SteamOS; while I've been able to use it in games like Civilization VII and Shadow of the Tomb Raider while testing Windows-based gaming laptops and PCs, FSR 3 was conspicuously absent from the settings menu of both games on the Steam Machine - Civilization would only let me select FSR 1, while Shadow had no upscaling options available at all.

Once I started to crank things up to 1440p and 4K resolution, though, the cracks started to show. Older titles (and 2D games, like my current obsession, Slay the Spire 2) largely run fine at higher resolutions - but unfortunately, I could probably say the same about any home console and plenty of cheaper desktop PCs.

Modern triple-A games start to struggle a little at 1440p, but remain playable provided you're willing to tone down the settings a bit. I've only included the full suite of 1080p and 4K results in the results box above, but to give you a few quick examples: Cyberpunk 2077 remained playable with an average framerate of 68fps at 1440p Ultra with FSR 3 set to balanced (no ray tracing), while Total War: Warhammer III dropped to 45fps at Ultra - but could be salvaged to a stable 63fps with the Medium graphical preset.

At 4K, don't expect to be playing the latest hit games at high framerates; at least, not without some very significant graphical tweaks. The now eight-year-old Shadow of the Tomb Raider was the only game I tested that made it above 60fps at 4K resolution, and that was with the graphical settings turned down significantly.

As for more demanding titles, just don't bother. Total War: Warhammer III barely made it above a 30fps average at Low settings, with frequent drops into sub-30 territory, while Cyberpunk 2077 gave abysmal benchmarking at anything above the lowest possible graphical settings, even with FSR upscaling turned on, and struggled heavily to maintain a consistent framerate during actual gameplay. Turning on FSR frame generation did technically give a stable 30fps at 4K Ultra, but with the added issue of some visual tearing and artifacting, especially during busy scenes.

I also experienced a small number of crashes during my testing process, specifically in Total War: Warhammer III and Marathon. It's possible that these were merely down to game instability rather than any specific fault with the Steam Machine or SteamOS (I've personally had Marathon crash at least once on my Windows 10 gaming desktop), so I won't mark it down for this, but I've opted to include it for the sake of comprehensiveness.

Lastly, I'd like to briefly discuss the thermal performance of the Steam Machine, which is a shining beacon amidst the otherwise fairly underwhelming overall performance. The large cooling fan at the rear of this little cube was whisper-quiet throughout all my testing, and the casing barely got more than a little warm. Whatever thermal wizardry Valve pulled off here, it clearly works.

• Performance: 3 / 5

Valve Steam Machine review: SteamOS

• SteamOS 3 is a very solid operating system
• Accessible for newcomers, but still packs advanced features
• Optional Linux desktop mode

A bonus section appears! Yes, I'm going to take a moment here to discuss SteamOS, since it's arguably the linchpin of the Steam Machine's whole 'console rival' mission statement. Does it really make PC gaming more accessible? I'm pleased to say yes, it certainly does.

An Arch Linux-based operating system, SteamOS is now in its third main iteration, and it's improved greatly from its humble beginnings as the full-screen version of the Steam desktop app. It's easy to set up and offers a pleasingly straightforward interface that even a gaming rookie should be able to navigate, while also packing the full suite of settings found in the Windows desktop version of Steam.

One nifty feature is the optional Linux desktop mode. It's quite effective, if basic, letting you install Linux-compatible programs like LibreOffice and the Firefox browser. It's neat, but it's a feature that will likely only be used by a small subset of buyers since it doesn't really offer anything for pure gaming users.

Naturally, you can connect a keyboard and mouse as well as a controller, which is useful for games where typing is necessary, but it turned out to be even more vital. I wasn't actually able to complete the SteamOS setup without first connecting a mouse to select the system language, and when playing some other games after my initial benchmarking process, I found that I couldn't complete the initial setup for Forza Horizon 5 using just the Steam Controller, which was annoying.

As effective as SteamOS is, compatibility issues are an inevitability when dealing with a Linux-based system. While the vast majority of games on Steam are fully compatible, there will be specific outliers, and there are plenty of non-gaming programs that aren't available. And of course, you can't play games from other storefronts like Epic and GOG, unless you decide to go the whole hog and install Windows 11 on it instead - which is an option!

Should I buy the Valve Steam Machine?

Valve Steam Machine: Scorecard

Buy the Valve Steam Machine if…

Don't buy it if…

Valve Steam Machine review: Also consider

How I tested the Valve Steam Machine

• Ran multiple PC game benchmarks
• Connected to my TV to use for 'couch gaming'
• 8+ years of experience reviewing dozens of laptops and PCs

My review process for the Steam Machine was a little different from how I'd usually approach a gaming PC or laptop review, due largely to SteamOS's Big Picture Mode not supporting our non-gaming tests.

Still, I ran the Machine through all the usual gaming tests, then took it downstairs to my living room and set it up on my TV stand to use it for some good old-fashioned couch gaming. As someone who was raised on Nintendo consoles but made the jump to PC gaming in my teens, I was keen to get the full intended experience out of the Steam Machine.

In addition to our usual game tests, I played a bunch of other games over a full weekend spent rigorously testing (read: having lots of fun with) the Steam Machine. These included Marathon, Warframe, Ratchet & Clank: Rift Apart, and the frighteningly addictive Slay the Spire 2.

I've been testing and reviewing computer hardware for almost a decade, and I've been a gamer for much longer than that. Before joining the TechRadar team, I worked at the PC-building hobbyist magazine Maximum PC, so you can trust that I'm putting every ounce of knowledge and experience at my disposal into bringing you high-quality, insightful, and non-biased reviews.

• First reviewed: July 2026
• Read more about how we test

• Recorded Future found an Iran-linked group spreading spyware
• The malware is delivered through fake VPN and media player apps
• Researchers assess that most targets are Iranian users

A new report from Recorded Future's Insikt Group describes a campaign that inverts the whole point of a privacy tool: fake VPN apps built specifically to spy on the people who install them.

Researchers have linked fresh infrastructure to an Iran-nexus threat cluster they track as TAG-182, which is using fake VPN and media player downloads to allegedly deliver a surveillance tool called MarkiRAT. The group is "highly likely" to be targeting Iranians living inside and outside the country, the report says.

It's a blunt reminder that choosing one of the best VPN services is a lot more secure than downloading free, unvetted tools.

Fake apps, real surveillance

Insikt Group identified a cluster of attacker-controlled domains allegedly used to stage downloads of applications that appear nowhere on Google Play or Apple's App Store.

Two names stand out: Pis2ray VPN and a media player branded YESHICA, which was quietly renamed YESHICA YEPlayer in March 2026 after researchers publicly exposed the original.

According to researchers, if you download and run one of these files, you get MarkiRAT, a remote access Trojan. In plain terms, that is software that hands control of your device to somebody else.

Analysts have documented it capturing screenshots and uploading them to attacker-run servers, while disguising itself under believable process names.

It also abuses BITS, the background service Windows uses to fetch updates, to pull down further files. Because that activity looks like ordinary system housekeeping rather than an attack, it tends to slip past routine cleanup.

MarkiRAT is not new. It has previously been used by Ferocious Kitten, a group Kaspersky documented conducting years of covert surveillance against activists inside Iran.

Recorded Future stops short of attributing TAG-182 to any specific Iranian agency, but places it within a broader ecosystem of state-aligned surveillance groups.

Why a fake VPN makes such an effective lure

Distribution runs largely through social media. Insikt Group found Instagram posts promoting Pis2ray VPN in the weeks following street protests in Iran in late 2025, and again around the country's prolonged internet shutdown, which ended with partial restoration of access on 26 May 2026.

The people most desperate for a virtual private network (VPN) in a censored country are exactly the people most likely to install one from a social media link, because the official stores are often the very thing they cannot reach.

Recorded Future considers it almost certain that most targets are located in Iran or tied to anti-government movements in Europe and North America. TechRadar has covered previous Iran-linked fake VPN campaigns, and this one seems to follow the same pattern with better infrastructure.

How to stay safe

Most readers will never be targeted by a state actor, but the underlying lesson travels.

Install VPN apps only from official stores, and check that the provider has a real, verifiable presence outside the app listing.

Treat any VPN promoted through an Instagram post, a Telegram channel, or a direct message as suspect, however polished it looks.

Star ratings are a weak signal, since fake reviews are cheap.

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #874) - hint #1 - today's theme

NYT Strands today (game #874) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• WORM
• RINK
• RIDE
• PAIN
• MUTE
• LUMP

NYT Strands today (game #874) - hint #3 - spangram letters

NYT Strands today (game #874) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #874) - the answers

The answers to today's Strands, game #874, are…

• GOWN
• TUNIC
• PINAFORE
• KIMONO
• DIRNDL
• MUUMUU
• SPANGRAM: YOUWEARITWELL

• My rating: Hard
• My score: 1 hint

THis was a game that started off easy and ended baffling.

After collecting the obvious pieces of clothing in GOWN, TUNIC, and PINAFORE, what remained on the board was a letter soup with no obvious words at all. After piecing together the spangram I did see KIMONO, but then drew a blank.

I needed a hint to get DIRNDL — the name for an Alpine dress — which left me MUUMUU, another garment I had not previously heard of but now know, thanks to Wikipedia, is a loose dress of Hawaiian origin.

Yesterday's NYT Strands answers (Friday, July 24, game #873)

• EXTRA
• SURPLUS
• EXCESS
• LEFTOVER
• SPARE
• UNUSED
• SPANGRAM: ANDTHENSOME

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1643) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1643) — hint #2 — repeated letters

Quordle today (game #1643) — hint #3 — uncommon letters

Quordle today (game #1643) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1643) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1643) — the answers

The answers to today's Quordle, game #1643, are…

• SALON
• SHEEN
• BURST
• GOURD

A nice and easy game (for me at least) to start the weekend.

My starter words paid huge dividends, giving me two straightforward anagrams to solve and making significant headstarts with SALON and GOURD. Happy days.

Daily Sequence today (game #1643) — the answers

The answers to today's Quordle Daily Sequence, game #1643, are…

• ETHOS
• DRIVE
• TALON
• PIZZA

Quordle answers: The past 20

• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE
• Quordle #1627, Thursday, 9 July: CRUMP, PHONE, SHINY, STONY
• Quordle #1626, Wednesday, 8 July: GHOST, TREND, EXALT, ALONG
• Quordle #1625, Tuesday, 7 July: ARRAY, SUITE, KIOSK, BOULE
• Quordle #1624, Monday, 6 July: TRAWL, SPICE, PIANO, SHARK
• Quordle #1623, Sunday, 5 July: PINEY, SWOON, TITLE, PINTO

• A new option for the Copilot key has been spotted in testing
• Windows 11 users are getting the ability to remap it to 'Do nothing'
• This comes on top of work already underway to redefine the key to Right Ctrl or the context menu

Microsoft's latest revolutionary idea for Windows 11 is to have a key on your keyboard which can be remapped to do absolutely nothing.

Windows Latest noticed the latest twist in the tale of the Copilot key, as highlighted by regular leaker PhantomOfEarth on X, who spotted the development hidden in a recent Windows 11 preview build.

In the choices to customize the Copilot key – which, by default, summons Windows 11's Copilot AI (of course) – there's a new option to simply 'Do nothing'.

Yes, that's correct – you can change the key to simply be a pointless piece of plastic that does precisely zip. (Or at least you'll be able to in testing, when this ability comes into play, that is, although some Windows 11 testers have reportedly seen it live in preview already).

As you may have seen earlier this year, Microsoft is working on bringing fresh options to the Copilot key that include customizing it to invoke the context (right-click) menu, and to turn it back into Right Ctrl (which was the key that the Copilot button replaced on Copilot+ laptops and some keyboards).

Analysis: do nothing, be happy

What's the point of a key that does nothing? Good question. Maybe it's the keyboard equivalent of a stress ball – you can hammer on that key as much as you want when you're really annoyed, and it won't splurge a load of characters into the document you're working on as you exorcise your frustrated demons.

Okay, so maybe not, but perhaps the idea is that this is aimed at people who really hate the Copilot key, but haven't decided what they might want to remap it to. So, they can go ahead and elect for the key to do nothing if it's accidentally hit, while they figure out what they might want to redefine in its place. That's stretching things, admittedly, but it's the best guess I have.

At any rate, it's a harmless enough option, although it feels inescapably odd to have a 'blank' key on your keyboard. How far we've fallen since the Copilot key was first revealed and trumpeted by Microsoft as the biggest thing to happen to keyboards in 30 years since the Windows key was introduced. And indeed more recently, Microsoft promoted the Copilot key as the "button you can press to fix everything", so there's some irony that it could soon (optionally) become the button you can press to fix 'nothing' in a very literal sense.

Don't forget that you don't have to wait for Microsoft's Copilot key remapping functions to arrive in the release version of Windows 11. You can use the Keyboard Manager in PowerToys to do this instead, although it'll be far neater to have these options in Windows 11's settings, of course.

Razer Kiyo V2 webcam: Two-minute review

Razer is a household name in the webcam space, with its Kiyo brand being one of the most popular choices for streamers and PC gamers. The latest Kiyo V2 is another sterling example of Razer's commitment to premium build quality and high-end components, and for the most part, it's a great product.

Delivering either 4K recording at 30 frames per second or 1080p at 60, the Kiyo V2 captures quality video with a high degree of customization via the Razer Synapse software. It's fairly pricey (don't expect to see it on our list of the best cheap webcams), but for a 4K webcam with this sort of build quality and feature set, it's actually quite competitively priced.

Coming in black, white, and pink colorways (mine is the pink 'Quartz' model), the Razer Kiyo V2 is an extremely well-constructed product. It's durable and pleasingly tactile. The base can be extended and rotated to capture the perfect angle, and it easily clasps onto any monitor; I tested it both with the two monitors in my home desktop setup and my laptop, and it snapped into place with no issues. It's a little heavy, however, so laptops with flimsier display hinges might struggle.

The design is a departure from previous Razer webcams, which typically opted for a singular large casing surrounding the lens construction. Instead, it's a smaller lens housing with an oblong body, immediately reminiscent of the Logitech MX Brio 705.

Not everything has been abandoned with this new design, however. The lens housing, like previous Kiyo models, includes a pleasingly tactile rim that can be twisted to close the built-in physical privacy shutter. I'm always a fan of privacy solutions like this, though given the large size of the glass lens face, it would've been nice to see a lens cap included to keep it dust- and scratch-free.

It would potentially be nice if the webcam could be detached from the attached mount in order to fit it to a different mount; many content creators will have their own video setups and may want to use their own camera stands. However, the mount does have a threaded screw connector on the base, letting you fit it atop most industry-standard camera mounts.

In terms of video quality, it's great. 4K video is sharp and colorful, and even zoomed in, I found I looked perfectly detailed in the footage I recorded. Color reproduction is great, and the camera performed well in a range of light conditions. Low-light performance resulted in some mild oversaturation, but I've seen worse performance in more expensive cameras. It also supports HDR, though only at 30fps even at lower resolutions.

The autofocus works well, but I found it was a little slow to adjust if I quickly moved closer or further from the camera. Having tested quite a few webcams in my time, I feel that a webcam in this price range should be a bit snappier to focus.

That big lens means that the default field of view is huge. A 93-degree FOV means that the Kiyo V2 is liable to capture not just yourself but the entire room you're in, but thankfully it's easy enough to tweak this via the zoom and crop tools in Razer's Synapse software.

On the topic of Synapse, it's still a frankly rather clunky piece of software, but for webcam users who want granular control over their hardware, it does a solid job. In addition to zoom and crop tools, you can also manually tweak the autofocus, auto exposure, and color balance.

The Kiyo V2's software-side feature set also includes a selection of AI-powered tools, which are covered prominently in the marketing material for the webcam. These include dynamic light correction and noise reduction, but these features already existed in Synapse, and to be honest, I'm not entirely clear on what AI brings to the table here.

Look, Razer: I get it. I'm sure there's tremendous pressure from your shareholders to make everything AI-powered, because it's the buzzword du jour. But anyone who actually wants AI in their webcam (for whatever inane reason) likely isn't going to be better served by the Kiyo V2 than any other cutting-edge 'AI' webcam, like the Obsbot Tiny SE.

One element that does actually benefit from the involvement of machine learning is the auto-framing feature, which uses AI-powered head-tracking to keep you in the center of the frame even if you move around. However, since the Kiyo V2 lacks a mechanized gimbal, it can't alter the frame while fully zoomed out and can only track you so far; it can keep you in center frame if you move by a foot or two, but it won't follow you around a room.

On the bright side, you don't actually have to use Synapse and the AI features at all. The Kiyo V2 works great straight out of the box; just plug in the bundled cable, and you're off to the races, assuming you're happy with the default wide-angle FOV.

Now, for the only real problem I have with the Razer Kiyo V2. It comes with a USB-C to USB-C cable in the box (the one with my review unit is pink, like the webcam itself), and as far as I can tell, you have to use this cable to access the full 4K functionality of the camera.

Considering that the cable is USB-C-exclusive, you'll need a free USB-C 3.0 port to make full use of the Kiyo V2. I tested it out with a USB-C to USB-A adapter, as well as using one of my own USB-C cables; no dice. It's frustrating, because USB-C ports can be in short supply for users connecting multiple peripherals, and the bundled cable is a bit short and inflexible.

Lastly, the built-in microphone is... fine, I guess. It's good enough for video calls, but anyone aiming to produce professional-level video content should definitely use a proper standalone microphone.

It's fair to say that the Razer Kiyo V2 deserves a spot among the best webcams on the market. There are a few niggling issues, but nothing that should ruin the experience for a gamer who wants a high-end webcam. For hardcore content creators, it remains a sound choice, but you should be aware of the downsides.

Razer Kiyo V2 webcam: Price & availability

• How much does it cost? $149.99 / £149.99 / AU$279.95
• When is it available? Available now
• Where can you get it? The US, UK, and Australia

At $149.99 / £149.99 / AU$279.95, the Razer Kiyo V2 is significantly cheaper than the brand's own older Kiyo Pro webcam. If you're looking for a high-quality 4K cam, it's not an unreasonable price.

Sure, you could easily get a cheaper 4K webcam, but you'll need to risk it on a less established brand, and you almost certainly won't be getting the same rich feature set seen in the Kiyo V2. Similarly effective models from other premium brands like Logitech and Elgato will cost a comparable amount, so I'm pleased to say that despite its reputation for pricey hardware, Razer got the price right this time around.

Razer Kiyo V2 webcam: Specs

Should you buy the Razer Kiyo V2 webcam?

Buy it if...

Don't buy it if...

Razer Kiyo V2 webcam: Also consider

How I tested the Razer Kiyo V2 webcam

• Tested the webcam in video calls and recording
• Compared image quality to other webcams
• 8+ years of experience reviewing computer hardware

I replaced my usual webcam (the Insta360 Link 2 4K) with the Razer Kiyo V2 for two weeks, using it for all my normal video calls during the workday. I also tested it in various different lighting conditions by recording video separately and comparing the clips side by side. Naturally, I installed (well, reinstalled) Razer Synapse to properly test out all the software-side features as well.

I've been testing and reviewing PC hardware for more than eight years, starting at the PC-building hobbyist magazine Maximum PC before making the leap to TechRadar's computing team. I put all of my knowledge and experience behind each and every one of my product reviews, so you can be assured that you're getting an informed and bias-free judgement.

Read more about how we test

• First reviewed July 2026

• Huntress spots malicious Claude Artifact spoofing Claude Desktop, spreading SectopRAT malware
• Victims were redirected via Bing ads, infecting at least 29 organizations between July 21–22, 2026
• Claude removed the artifact after 7,000+ views; malvertising risks persist despite disclaimers on artifacts

At least 29 organizations have been infected with a Remote Access Trojan (RAT) after mistaking a public Claude Artifact for a legitimate Claude page.

A Claude Artifact is an interactive document, or piece of code, that the AI generates and then hosts on the Claude platform. It can then be shared with other people as an example, or proof of concept, for different solutions. The link to an artifact usually looks something like this:

claude[.]ai/public/artifacts/ca466f1f-21c0-42af-b329-8f1c7534a891

Claude Artifacts are often used for phishing and other forms of scams, and we’ve seen it in ClickFix attacks in the past. Claude responded by adding a disclaimer to every artifact, stating that the content is user-generated and thus unverified.

In this particular case, a malicious artifact was created to spoof the download page for Claude Desktop. Victims would get redirected to an attacker-controlled domain, where instead of the Claude app, they’d download SectopRAT, a remote access trojan capable of stealing credit card data, personal information, files, passwords, and more.

Promoting the scam

The artifact was then promoted on Bing, showing up at the very top of search results to people searching for “Claude Desktop App”.

For years, the cybersecurity community has warned about malvertising, urging users to double-check the domain before clicking on any links, even promoted ones. However, the problem here is that the ad takes the victims to the legitimate Claude domain, making scrutiny that much harder.

The campaign was spotted by security researchers Huntress, who said that between July 21 and July 22, 2026, their SOC “lit up with a swathe of unusual executable installs, Defender exclusions, and anomalous persistence across 29 organizations, all coming from ClaudeDesktop.exe.”

Claude has since removed the malicious artifact, but not before it raked up more than 7,000 views. It is possible that other organizations, outside Huntress’ field of view, also fell victim to this scam.

• A recent report suggests Nvidia has informed its partners of GDDR6 and GDDR7 memory kit price increases
• This means retailers may increase the prices for RTX GPUs using GDDR6 and GDDR7 memory
• The potential price hike and one user's dual-GPU setup both highlight the importance of hardware preservation

The RAM crisis continues to impact PC manufacturers, with rising memory prices and shortages — ultimately leading to increased retail prices for consumers — and the trend may be set to continue with Nvidia.

According to a report on Benchlife, Nvidia is rumored to be planning an increase for prices of its GDDR6 and GDDR7 memory kits for RTX GPUs, and has informed AIB (Add-In Board) partners such as Asus, MSI, and Gigabyte, who make their own versions of Nvidia's GPUs. Unsurprisingly, the price increase for these memory kits is cited as a result of the ongoing RAM crisis.

While RTX GPU price hikes aren't guaranteed for consumers, because this will directly impact AIB partners who manufacture the GPUs, eventual retailer price increases are unfortunately likely. It's a trend we've seen with recent PC hardware.

Notably, Valve's Steam Machine was initially supposed to cost less than its eventual $1,049 / £879 / AU$1,609 price tag, which could now also be at risk of a price increase, based on hints from a Steam Machine engineer (as reported by Bloomberg). New handheld gaming PCs are also now often launching for more than $1,000, and the price of RAM and storage certainly plays a part.

Consumer struggles

The RAM crisis is a sad state of affairs for consumers and underlines the importance of PC hardware preservation. GPUs aren't cheap by any means, especially with recent suggestions that AMD would also be increasing prices of memory kits for its own AIB partners.

We've also recently seen the return of the RTX 3060, due to Nvidia's attempt to help consumers with more options amid a rough PC hardware market. However, if these price hike reports are legitimate, the RTX 3060 will likely be subject to higher prices at retailers.

That's exactly why GPU setups like one Reddit user's RTX 3090 and RTX 3050 dual-GPU rig matter now more than ever. In this case, the RTX 3050 is responsible for allowing frame generation via Lossless Scaling to function.

My dual GPU Setup from r/losslessscaling

A game then utilizes the RTX 3090's power for high-quality visuals and performance, with the two GPUs teaming up. The user states it resulted in 144fps at a 4K resolution over the initial 71fps without frame generation.

Frankly, a dual-GPU setup isn't exactly common, nor is it actually recommended for gaming, since modern games are only designed for single-GPU rendering (even though the frame generation use case is noteworthy).

Users would also need a beefier power supply, depending on the GPUs used, and likely a new motherboard with another compatible PCIe lane.

However, what I feel is more important here is that's it's a great example of why hardware preservation is so important, serving as backup in case GPUs melt or end up faulty, or for experiments like the one I've outlined above. With no end of the RAM crisis in sight, repurposing older hardware might be one way through this.

• Microsoft has contacted LG regarding a McAfee pop-up served via the monitor maker's app (which in turn is installed by Windows Update)
• As an 'immediate next step' LG has disabled this pop-up
• However, there are still issues to address around the automatic installation of the LG monitor app, and the way Windows Update itself operates with third-party software

Microsoft has fixed a controversial situation whereby Windows 11 users with LG monitors were being hit by a pop-up for McAfee antivirus, and that advert has now been banished from the OS — but there's still more that Microsoft needs to do here.

Windows Latest noticed that Pavan Davuluri, who is head of Windows at Microsoft, flagged up what's happened on X.

In response to a nudge from Epic's Tim Sweeney on the matter, Davuluri said: "We've connected with the team at LG and as an immediate next step, they have agreed to disable the McAfee pop-up from their app. We appreciate LG working with us toward a shared goal of a better experience for our mutual customers. We will keep improving here with our ecosystem partners."

In case you missed this story from earlier in the week, Windows 11 users with an LG display are reportedly getting an LG monitor app (from the Microsoft Store) automatically installed on their PCs via Windows Update simply after hooking up the monitor.

The real kicker was that following this, the mentioned McAfee pop-up (pushing a trial for the antivirus) was repeatedly bothering those users, with the ad delivered via the LG monitor app. So, what Microsoft is telling us here is that as an immediate first step, that McAfee pop-up is no longer part of LG's Windows app, and won't be darkening the desktops of any LG monitor owners any longer.

The (pop-up-less) monitor app is presumably still being piped through by Windows Update, though, and hopefully the next step for Microsoft will be to address this.

Analysis: software giants in glass houses?

Windows Update really shouldn't be installing any third-party software without the user's permission, that much is clear (or first-party for that matter). It's fine to flag available updates, wherever they come from or whatever hardware they may be for, but highlighting them is one thing, and going ahead with an auto-installation is another.

Okay, so LG has agreed to disable this pop-up, and it's good that this has happened swiftly, as it was, of course, a huge annoyance. Indeed, it's very worrying that this could happen at all, really (and in case you missed it, LG's TVs have also come under fire this week).

LG had already addressed this controversy with a rather lengthy statement that read: "LG Electronics reiterates that McAfee is not installed automatically and is never installed without the user's explicit consent. The LG Monitor App Installer is distributed through Microsoft's official Windows distribution process, which included McAfee as an option.

"McAfee will be installed only if a user actively chooses to proceed with the installation and provides consent. Under no circumstances is McAfee installed automatically or without user authorization. The LG Monitor App Installer does not access, collect, or transmit any customer personal data."

What this appears to be saying is that McAfee's actual antivirus app isn't installed without consent. It's not denying that the McAfee pop-up appeared without consent, or that the LG Monitor app is installed in the background in Windows without the user's knowledge. It only notes that the LG Monitor app is "distributed through Microsoft's official Windows distribution process", as if that makes everything okay, or somehow not LG's fault.

It is, of course, Microsoft's fault as well – both parties need to take responsibility, and fix not just the McAfee pop-up appearing, but the LG Monitor app being automatically installed simply when a monitor is connected to a Windows 11 PC. (Which is reportedly the case, I should add – I haven't experienced this myself, as I don't have an LG display, but a whole heap of feedback is present suggesting it's exactly what happens).

In short, the immediate disabling of the McAfee trial pop-up is a start, but we need a swift follow-up addressing the LG app itself and how that's dealt with in Windows 11. And more broadly, how third-party apps in general interact with Windows Update, because as already noted, this situation should never have been allowed to happen in the first place (no matter what LG, or any other hardware partner, is doing with their apps).

Furthermore, there's no shortage of people on Reddit noting that Microsoft has been keen enough to act here, but not so keen on curbing its own advertising-related excesses in Windows 11.

As one Redditor says of Microsoft: "Now all they need to do is crack down on their own bloatware…"

Although to be fair to Microsoft, it is acting to rein in some of the upselling and promotional noise that Windows 11 has come to be associated with. More work needs to be done on this front, though, for sure.

• Zenity Labs found AgentForger, a flaw in OpenAI’s ChatGPT Agent Builder
• Malicious links could instantly deploy rogue agents that exfiltrate sensitive data without user prompts
• OpenAI patched the issue by removing the risky URL parameter; no abuse detected

AI agents are handy for answering customer emails, or tracking reports for newly released security vulnerabilities. But what if they go rogue and turn on the very enterprise they’re supposed to support?

Security researchers from Zenity Labs have found a way for cybercriminals to trick people into deploying such agents into their own tech stack. Since all it takes is a single click, the disruptive potential of these attacks is arguably significantly bigger than anything else a phishing attack could do.

The flaw was discovered in OpenAI’s ChatGPT Agent Builder, a feature that lets users create custom AI agents. The researchers dubbed it “AgentForger", explaining that the issue stems from an overly permissive parameter in the tool, which allowed anyone to create ChatGPT links that include virtually any instructions.

Agent trust failure

As soon as the victim clicks on the link, they send the instructions to Agent Builder which acts on them immediately - without prompting or otherwise notifying the victim.

In theory, a single phishing email could trick a person into deploying a malicious agent that exfiltrates sensitive data or does anything else that company’s AI agents are permitted to do. To make matters worse, the AI agent would persist on the infrastructure indefinitely, doing the attackers’ bidding until caught.

“This is an agent trust failure, and existing security controls were never built to see it,” commented Michael Bargury, co-founder and CTO of Zenity.

The researchers disclosed their findings with OpenAI in early June 2026, and the company came back with a fix a few days later.

The bug was solved by removing the URL parameter that originally enabled the attack, it was explained. There is no evidence that it was previously discovered, or abused, by malicious actors.

• Proofpoint 2026 AI‑Era Ransomware Report found 54% of victims paid attackers despite warnings
• 37% faced repeat extortion after paying; 2% paid but never regained access to files
• Experts urge prevention: phishing awareness, offline backups, and AI‑powered endpoint protection

Security researchers Proofpoint have seemingly proved once again that paying ransomware actors does not guarantee they’ll walk away for good - in fact, they’ve proven that in many cases, they’ll simply come back for more because they know they can get paid.

The company's “2026 AI-Era Ransomware Report”, based on a survey of almost 1,000 security professionals across 12 markets, found globally, more than half (54%) of affected organizations paid their attackers to regain access to locked files and prevent them from sharing stolen documents on the dark web.

This is despite repeated pleas by law enforcement and the cybersecurity industry not to engage with the attackers and not to, under any circumstances, pay the ransom demand. Proofpoint argues that the real-world pressure organizations suffer when faced with disruptions is, in many instances, simply too big to tolerate.

Asking for a second payment

The logic behind the “don’t pay” argument is simple - by paying, the victims are motivating the attackers to do more damage, and are funding future attacks. At the same time, there is no guarantee that the decryption keys will work, that the attackers will really delete the files they had stolen, and that they won’t strike again in a few weeks.

This final argument has now been proven. While around half (56%) of victims paid one ransom and regained access, more than a third (37%) faced a second extortion demand soon after paying. Another 2% paid and never regained access at all.

Instead of paying the ransom demand, the industry suggests businesses protect their premises by educating their employees on the dangers of phishing, keeping updated backups in offline storage, and running (if possible, AI-powered) endpoint detection and protection services across the entire tech stack.

Via TechCrunch

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #873) - hint #1 - today's theme

NYT Strands today (game #873) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• SOFTEN
• NEXUS
• STORE
• VOTES
• MOTHER
• FONT

NYT Strands today (game #873) - hint #3 - spangram letters

NYT Strands today (game #873) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #873) - the answers

The answers to today's Strands, game #873, are…

• EXTRA
• SURPLUS
• EXCESS
• LEFTOVER
• SPARE
• UNUSED
• SPANGRAM: ANDTHENSOME

• My rating: Hard
• My score: 2 hints

“There’s more where that came from” can be a threat of further punishment or a promise of more enjoyment, depending on the circumstance.

However, this train of thought got me nowhere and it wasn’t until a hint gave me EXTRA that I understood that we were looking for words that were synonyms of “supplementary” — as in there’s more where that came from, whether you need it or not.

I have a friend who runs a company called EXCESS, so not seeing that was embarrassing, while the spangram also eluded me. Not my finest of games.

Yesterday's NYT Strands answers (Thursday, July 23, game #872)

• ADMIRAL
• LIEUTENANT
• COMMANDER
• ENSIGN
• RECRUIT
• SPANGRAM: NAVYRANKS

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1642) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1642) — hint #2 — repeated letters

Quordle today (game #1642) — hint #3 — uncommon letters

Quordle today (game #1642) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1642) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1642) — the answers

The answers to today's Quordle, game #1642, are…

• DOLLY
• EDIFY
• LAGER
• PRANK

This was another game where I felt very attuned with Quordle and got home with a few compromised guesses.

For LAGER I wanted to guess “large” but the position of the letter E ruled that out, while for PRANK my first thought was “crank” but the C had already been used.

Daily Sequence today (game #1642) — the answers

The answers to today's Quordle Daily Sequence, game #1642, are…

• SHRUB
• SCRUB
• MERGE
• GIANT

Quordle answers: The past 20

• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX
• Quordle #1634, Thursday, 16 July: IGLOO, PLAIT, YEAST, AROMA
• Quordle #1633, Wednesday, 15 July: PROXY, BRICK, BROTH, SURGE
• Quordle #1632, Tuesday, 14 July: EBONY, AVOID, RODEO, CUTIE
• Quordle #1631, Monday, 13 July: VOICE, BISON, BURNT, BUILT
• Quordle #1630, Sunday, 12 July: STAIN, BINGO, LARVA, DICEY
• Quordle #1629, Saturday, 11 July: WORTH, PRONG, DINGO, DRUID
• Quordle #1628, Friday, 10 July: GREET, STEAK, DUSKY, HAUTE
• Quordle #1627, Thursday, 9 July: CRUMP, PHONE, SHINY, STONY
• Quordle #1626, Wednesday, 8 July: GHOST, TREND, EXALT, ALONG
• Quordle #1625, Tuesday, 7 July: ARRAY, SUITE, KIOSK, BOULE
• Quordle #1624, Monday, 6 July: TRAWL, SPICE, PIANO, SHARK
• Quordle #1623, Sunday, 5 July: PINEY, SWOON, TITLE, PINTO
• Quordle #1622, Saturday, 4 July: ARGUE, MOTEL, OPERA, TRUCE

• JFrog found Newtonsoftt.Json.Net, a trojan NuGet package mimicking the popular Newtonsoft.Json library
• Malware specifically targeted Digitain’s crash‑game backend, rigging outcomes with insider knowledge of its codebase
• Issue was quickly fixed but attackers remain unidentified

Security researchers JFrog have discovered a unique trojan targeting one specific company, while letting everyone else who’s infected walk away unharmed.

Named Newtonsoftt.Json.Net, the trojan is a typosquatted NuGet package variant of the hugely popular JSON library called Newtonsoft.Json. The legitimate package is one of the most-used code libraries in the .NET programming world, needed by almost every project in existence. It is a small piece of software that helps .NET applications read, understand, and exchange data between different systems.

According to JFrog, someone published an almost identical package, copied the real author’s name, license, and made it work as intended. For almost anyone who installed it, it worked entirely normal. However, for developers working on Digitain’s crash-game backend, it’s a whole different story.

Rigging the games

Digitain is an Armenian software company providing online sports betting and gaming software platforms to gambling companies around the world.

On the infected machine running Digitain’s real crash-game code, the malware swaps in a rigged number instead of a fair one, using a formula based on the date and time.

What this means is that the results of the gambling game are rigged, allowing the attackers to know, in advance, which rounds are manipulated and place their bets accordingly.

The malware also sets up a private confirmation channel to report back for every rigged round, allowing the attackers to know if the cheat code still works or not.

JFrog did not identify the attackers, but they did stress that it was most likely an insider.

Apparently, only someone with inside knowledge of Digitain’s codebase (for example a current or former employee, or a contractor) could have built such an exploit, since it required knowledge of the exact internal function name inside Digitain’s game engine that decides the crash-game outcome.

The researchers reached out to Digitain on July 7 2026 and were notified, two days later, that the issue had already been escalated to the team and, in the meantime, fixed.

Keychron K2 Ultra 8K: One-minute review

The K2 Ultra 8K is a wireless mechanical keyboard that aims to compete with the big names in the space.

It adopts a fairly basic design, harking back to keyboards of yore with its chunky chassis and tall keycaps. This substantial form is complimented by a reassuring weight that keeps the unit in place, without being too heavy to move around when needed.

The aluminum frame is also welcome thanks to its pleasingly solidity, although its texture isn’t the most alluring. The keycaps are of a better quality, though, since they’re Double Shot PBT, which often adorns the best gaming keyboards. Their opaque lettering means the backlighting fails to shine through them, which is an oversight committed by many Keychron keyboards.

To customize the inputs of the K2 Ultra 8K, you can use Keychron’s Web App. There are plenty of remapping options here, with numerous system and media commands available. There’s also a SOCD feature with a few different modes to choose from. You can also adjust the bounce time of both down and up strokes.

My review unit came with Red switches, which performed quite well. They were slightly lubed and well-damped, while still retaining a certain snappiness. However, I found their actuation a little too deep, which did result in some of my presses failing to register. Also, the sheer thickness of the keyboard did cause my wrists to ache after a while.

Using the WASD position when gaming was a little more comfortable than a typing position, and the generous spacing of the keys made navigating them quite easy. The quick rebound of the keys was also something I appreciated, and helped to make up somewhat for that aforementioned deep actuation point. Both wireless connectivity options worked well, and hot-swapping between devices was easy, thanks to the switch on the side of the unit.

The K2 Ultra 8K is competitively priced for a wireless mechanical keyboard with hot-swappable hardware. It can’t match the sheer performance and premium designs of its more notable rivals, such as the Razer BlackWidow V4 Pro 75% and the HyperX Origins 2 1800, but considering all that it offers, the K2 Ultra 8K is good value.

Keychron K2 Ultra 8K review: Price and availability

• $119.99 (about £90 / AU$170)
• Available now with various switch types
• Reasonable for a wireless gaming keyboard

The K2 Ultra 8K costs $119.99 (about £90 / AU$170) and is available now. Three stock switches are available to choose from: Red, Brown, or Banana.

This is a reasonable price for a hot-swappable, wireless mechanical keyboard with premium materials and numerous customizations available. Equivalent models from bigger brands are generally more expensive. Take the Razer BlackWidow V4 Pro 75%, which is an eyewatering $299 / £299 / AU$499. However, this is one of the best mechanical gaming keyboards I’ve ever tested, and it offers a wealth of customizations that put many others, including the K2 Ultra 8K, to shame.

Then there’s the HyperX Origins 2 1800, another superb mechanical keyboard, but one that’s only marginally more expensive than the K2 Ultra 8K. Again, I thought this performed better than the K2 Ultra 8K when I tested it, although its customizations aren’t as extensive. It’s also wired only, which diminishes its value somewhat relative to the K2 Ultra 8K.

• Value: 4.5 / 5

Keychron K2 Ultra 8K review: Specs

Keychron K2 Ultra 8K review: Design and features

• Very thick
• Solid aluminum frame
• Numerous customizations via web app

The K2 Ultra 8K has a somewhat retro design with some modern touches. The chunky chassis and squared off frame are certainly throwbacks to simpler time, but the keycaps are more contemporary affairs, thanks to their soft, rounded form.

With that thick body comes a considerable weight. This helps keep the K2 Ultra 8K planted, yet it’s not too heavy to make moving it around a chore when needed. It also contributes to the unit’s durability, as does the aluminum construction of the frame. This doesn’t feel quite as premium as others, owing to its slightly rough texture, but it’s welcome all the same. Better are the keycaps, since they’re Double Shot PBT, which is the gold standard in the keyboard world.

Somewhat unusually, the USB-C port is located on the left side of the K2 Ultra 8K rather than the rear. This may prove inconvenient for certain setups, but thankfully it’s positioned quite far back, so the difference isn’t that huge. Also, the provided USB cable has an L-shaped jack, so it doesn’t protrude outwards all that much, with the cable naturally running towards the likely location of your device.

There is some RGB backlighting on the K2 Ultra 8K, but like other Keychron keyboards, this is quite lackluster. It barely shines through the spaces between each keycap and since the keycap symbols are opaque, you still can’t make them out in a dark environment, which rather defeats the point of backlighting in the first place. Keychron does sell transparent keycaps, but this is an add-on you have to purchase separately rather than being a configurable substitute.

At least this lighting can be customized, either by using the dedicated key in the top-right corner or Keychron’s Web App. This app contains a lot of options for patterns and colors. It also features input customizations, with a wealth of rebinding options that includes various media and system shortcuts.

There aren’t any advanced performance-based features here, save for bounce time settings and an SOCD function. The former lets you set the press and reset times independently for keys. There are two sliders for this purpose with a range of 10-50ms, with millisecond increments. The latter lets you adjust key priority when two are pressed at the same time — you can set the first pressed key to take priority, a chosen key to always take priority, or both to cancel.

As web apps go, Keychron’s is fast and easy to use. I didn’t encounter any frustrating loading times and or major bugs. Still, I would’ve preferred a standalone app for the sake of convenience, saving you from having to load your browser every time.

• Design and features: 4 / 5

Keychron K2 Ultra 8K review: Performance

• Actuation too deep for effective typing
• Good key spacing and response for gaming
• Unit thickness can cause discomfort

My review unit came with Keychron’s Red switches, which felt a little heavier than I’m used to. They’re damped and lubed to a reasonable degree, though, which made their operation smooth, and I found the clicky impact at the end of a key’s travel quite satisfying.

I was less enamored with the actuation point. It felt like I had to press down quite far for inputs to register, which caused me issues when typing fast, as characters were often missed. Typing isn’t helped by the tall keycaps, either: as someone who usually prefers a low profile, my ability to glide around the board was limited.

What’s more, that aforementioned thickness of the chassis caused me some discomfort after a while, even with the feet folded out, as I had to angle my wrists a fair amount. The K2 Ultra 8K is crying out for a wrist rest, but alas it doesn’t come with one.

Thankfully, I found gaming in the WASD position less problematic. Despite the compact nature of the layout, the keys are still generously separated, while the ergonomic shape makes navigating them quite easy. They also rebound quickly, too, which somewhat makes up for that deep actuation point.

I didn’t have any issues when connecting the K2 Ultra 8K to my PCs wirelessly via the 2.4GHz USB dongle or via Bluetooth. Hot-switching between two devices was also easy and effective, thanks to the slider on the side of the unit.

• Performance: 3.5 / 5

Should I buy the Keychron K2 Ultra 8K?

Scorecard

Buy it if…

Don't buy it if…

Keychron K2 Ultra 8K review: Also consider

How I tested the Keychron K2 Ultra 8K

• Tested for a few days
• Used for a variety of tasks
• Plenty keyboard reviewing experience

I used the Keychron K2 Ultra 8K for a couple of days, during which time I used it for working, gaming, and general browsing. I connected to two different Windows 11 PCs, one via the 2.4GHz dongle and the other via Bluetooth. I also used it in wired mode with the supplied cable.

I played games such as 007 First Light and Counter-Strike 2, both of which are good tests for the responsiveness of key presses and the comfort of using the all-important WASD position.

I’ve been using keyboards for decades for all sorts of purposes, from working to gaming. I’ve also reviewed a large number of them, from budget offerings to high-performing, feature-filled extravagances.

• Read TechRadar’s reviews guarantee
• First reviewed: July 2026

• Amazon's gaming boss thinks ballooning hardware prices could push more hardcore gamers towards cloud streaming services
• He argued that the price of consoles increasing by 'six, seven times' would mean some gamers become 'priced out of the market'
• He thinks the RAM crisis, and rising prices, will not be 'going away anytime soon'

Amazon GM of gaming Jeff Gattis thinks the rising cost of consoles and PC components could push more hardcore gamers towards cloud streaming, via services such as Amazon's own Luna.

In a recent interview about the service, I asked whether Gattis anticipates cloud gaming becoming a more popular option for core players as traditional systems become much more expensive.

"Yeah. I wouldn't have said that 18 months ago, and I will say our business model is not really predicated on this this massive shift where everybody turns in their consoles and PCs and comes over to cloud" he said.

"But gosh, when you start to see the prices of the Steam Machine and the rumors of PlayStation and Xbox. As you get to $1,000, $1,500 hardware [...] you're going to see more people that are priced out of the market. They're going to consider other technologies".

Gattis, who previously led platform and subscriptions at Xbox, went on to share an anecdote to illustrate just how much prices have risen.

"I was telling somebody the other day that when I was back at Xbox a couple of years ago, we had our Series S console on discount [for a] holiday. I think it was about $199. To think in a span of two to three years we've gone from $200 to what's likely going to be six, seven times that price.

"I understand it's a it's a RAM crisis, it's worldwide, but I don't think that's going away anytime soon."

He was, however, careful to clarify that hardcore gamers moving to the cloud isn't a core part of Amazon's strategy: "It's not our strategy to accelerate that, but it's a nice tailwind if it does happen, and it's realistic to think that it might."

The comments come as Amazon rolls out a Fire TV update that gives Amazon Prime subscribers the ability to stream games like Fallout 4 or Fortnite from directly within Prime Video via Luna in a bid to get more eyes on the service.

• Apple is rumored to be planning to rent Macs, as well as iPhones and other devices, to consumers
• 'Apple Upgrade' will allow you to pay via a subscription (with financing handled by Klarna), and buy the device eventually if you wish
• This is seemingly Apple's way of sidestepping the RAM crisis and keeping Mac sales going, as we're also hearing about frightening memory price hikes from Framework

We're seeing the continued fallout from the RAM crisis, with Framework outlining plans to deal with massive increases in the cost of memory, while Apple is rumored to be about to unveil new way of selling you a Mac in order to cope with ever-higher sticker prices: it'll rent you the PC.

Let's start with Apple's apparent plan, which is detailed in a report from Bloomberg, in which Mark Gurman tells us that Apple is preparing to launch a device-leasing scheme for consumers in conjunction with Klarna (on the finance side).

We're told this will be announced on July 28 and it'll be called 'Apple Upgrade'. The sell (ahem) is that you can regularly upgrade your rented hardware, as well as avoiding taking a huge dent to your wallet with the sizeable outlay required to buy many Macs these days.

This won't just be for Macs, mind you, but also the iPhone, iPad and Apple Watch, with most models of all this hardware seemingly set to be included. It sounds like it might be a US-only initiative to begin with, but it could come to other regions later.

Apple Upgrade will seemingly work as a subscription over a 36-month term (or 24 months for iPhones and Apple Watches), although there'll be an option to pay off the device early and buy it outright (or upgrade to a newer model early). When the end of the subscription is reached, you can either return the Mac and upgrade to a newer model on a new financing agreement, or just keep it (with a final payment, naturally).

As mentioned, Klarna is apparently running the finance side, and applications for Apple Upgrade will be subject to a soft credit check.

This new scheme will supposedly take the place of the iPhone Upgrade Program and Apple's standard financing. The former offers a way to buy an Apple smartphone on monthly payments direct from the company (with 0% interest), but there's no Mac equivalent.

Gurman says of the Apple Upgrade scheme: "Apple plans to advertise the program as a way to have lower payments versus current financing programs." The leaker also clarifies that Apple Upgrade won't include AppleCare (unlike the iPhone Upgrade Program, which does).

Some of Apple's cheaper devices won't be eligible for this rental scheme, too, and that includes the MacBook Neo, as well as the Apple Watch SE, entry-level iPad, and iPhone 16.

As for the move with Framework laptops, this was revealed in a blog post that Tom's Hardware noticed. The notebook maker said that with its Framework Laptop 13 Pro: "We recently received a cost update from our LPCAMM2 [laptop memory] supplier that goes far beyond anything we had predicted and anything we're able to absorb without placing our ability to operate at real financial risk.

"Rather than the low-to-mid double digit percentage increase we had forecast from Q2 to Q3 on LPCAMM2 costs, we received prices that are more than double that of the prior inventory we had brought in."

Framework is doing its best to cope (in a commendably transparent way), and is adjusting existing pre-orders as is necessary. That means dropping some 64GB orders down to 32GB, charging the original 32GB price — and the same for 32GB orders going down to 16GB, maintaining the original price for the latter.

Pricing for the 32GB module hasn't quite doubled, but it's up 82% (with Framework absorbing some of the increase), and a 64GB module is up 88%. This means the latter nugget of RAM is now an eye-watering $1,600 in the US, and £1,600 in the UK (yes, nugget seems an increasingly appropriate term these days).

Analysis: own nothing, be happy

Unfortunately, July has brought us a clear picture of the RAM crisis getting worse. We've just been hearing about DDR5 memory seeing a notable uptick in pricing (after plateauing somewhat for a few months), and the boss of a big chip maker has informed us that things are going to get much worse, with 2027 set to be the 'worst year' in the RAM industry's history no less.

Framework's story of a doubling in laptop memory cost is a truly worrying hike on top of all this, and doubtless we can all still recall Apple's price hikes that arrived at the end of June. Particularly those of you who were mulling a Mac purchase, and are regretting not pulling the trigger before the increases were ushered in.

Seemingly Apple has a solution to the RAM crisis, though, but this rental plan hasn't gone down well online. Yes, you can imagine the reaction to this on social media – one Redditor observes that it's "one step closer to owning nothing" (as in 'own nothing and be happy') – but in fairness, this is still a rumor. Although given the details, and the apparent proximity of the launch, it sounds fairly cast-iron – but we shouldn't jump to conclusions.

A lot of how any rent-with-an-option-to-buy scheme will play out is going to depend on the pricing Apple (and Klarna) attaches, and the world out there on social media fears the worst. I don't blame the doubters, frankly, and particularly those who are worried that the final instalment to buy the Mac (or other Apple device) will be punishingly high. Generally speaking, this is, of course, the way these lease agreements tend to run, and the same will likely be true of the option to exercise an upgrade before the current lease is up.

What's interesting is that last week, I spilled my thoughts on how I was worried that Mac sales were going to flag, and how Apple's in a bit of a tricky situation in terms of combating this. Between MacBook holdouts, the continued RAM crisis, and cynicism around an apparent renewed focus on AI from Apple, the Mac waters are getting seriously choppy.

I didn't expect to have a (theoretical) answer so soon, and apparently now we know how Apple plans to keep Mac sales buoyant. The devil will be in the details of the Apple Upgrade scheme, assuming it happens, but the overriding online speculation for now remains that the terms of the rental plan will be more likely slanted in a hellish direction than a heavenly one.

• We just got a fresh info dump on Apple's incoming Macs from Bloomberg's Mark Gurman
• It includes the claim that the MacBook OLED may be on track for a debut later this year, and that it's now being tested with macOS 27.1
• The laptop would have the M5 Pro and Max chips, with a follow-up potentially arriving as early as the end of 2027 with the M7 Pro and Max

Apple will likely launch a whole load of new Macs over the next couple of years, and if you were wondering about the MacBook OLED, seemingly this laptop remains on target for a possible launch later this year.

Mark Gurman spilled a whole lot of info and updates in a Bloomberg report that details Apple's upcoming Mac overhauls, and how things stand right now (as ever, sprinkle seasoning on this liberally).

The model that many people are interested in is that MacBook OLED which will be a high-end effort in 14-inch and 16-inch sizes, sporting a touchscreen for the first time (not everyone's so keen on the latter, mind). They will pack the M5 Pro and M5 Max chips, not the M6.

Gurman says that this MacBook is currently being tested with macOS 27.1 by Apple, and that the device "remains on track for release between the end of this year and early next year". The leaker had previously asserted that we're looking at a late 2026 or early 2027 release (although there's a nuance here that I'll come back to shortly).

What about M6 MacBooks? We'll seemingly get a refresh of the low-end MacBook Pro 14-inch this year that packs the M6, and this will be the first launch to use the next-gen silicon. There will be new iMacs with the M6, too, all of which are supposedly arriving this fall (likely around October 2026, in other words, give or take a month).

The MacBook Air isn't being ignored, of course, and Gurman informs us that a refresh of this consumer lineup is coming in early 2027, with 13-inch and 15-inch models that "closely resemble the current version" — so don't expect much in the way of change.

Another MacBook Pro launch is, he says, planned for 2027 in the form of an entry-level 14-inch laptop with a new design that will be similar to the high-end OLED models, but this will have a major upgrade with the M7 (vanilla) chip.

Unsurprisingly, he adds that a refresh of the popular MacBook Neo is underway, which upgrades to an A19 Pro chip and offers more memory (new colors will be added, too).

Further down the line for MacBooks, there might be a more radical change coming for the MacBook Air, with an OLED take on the notebook that Gurman says could arrive in 2028, while a follow-up to the high-end MacBook OLED should debut between the end of 2027 and early 2028, with an upgrade from the M5 Pro and Max to the M7 Pro and Max.

Apple is also working on an iMac with OLED, Gurman believes, and we've heard about that before. (Much of this rumor dump is confirmation of previous speculation, it should be noted, with updates on timelines).

Gurman also tells us to expect refreshes in the realm of the Mac mini and Mac Studio. He claims the Mac mini is in testing with M5 Pro and M6 processors, while Apple looks to be going with the M5 Max and M5 Ultra for the Mac Studio. These would be trickier launches for Apple given the RAM crisis, and the need for beefier memory configurations causing additional headwinds for these particular Macs. Due to this, the launch timeframes for these purported products are, Gurman says, still up in the air.

Analysis: on track – but out of touch?

There's a lot in the pipeline, clearly, but the most interesting update here is that the high-end MacBook OLED is apparently still on target, and we could see it later this year – potentially in just a few months. Remember that not so long ago, Gurman appeared to waver on the idea of this touchscreen MacBook arriving in 2026 at all, but it seems that this is still very much in the cards (although not guaranteed, by any means).

This device is notably still missing a name, and the leaker isn't referring to it as the MacBook Ultra, as the broader rumor mill has been doing. That it packs the M5 Pro and M5 Max chips makes sense, because there will only be a vanilla version of the M6, according to what Gurman's heard on the grapevine before – Apple is apparently skipping swiftly over that generation to get to the M7 and more powerful AI capabilities therein. The follow-up to the high-end MacBook OLED will carry the Pro and Max chips from the M7 family, as noted.

In this report Gurman frames all these revamped Macs as Apple looking to "capitalize on demand for powerful laptops and desktops fueled by the artificial intelligence boom", underlining the recent emphasis the leaker has placed on how important AI is for Tim Cook's company now.

Predictably, this notion hasn't gone down well with some Mac fans, and the idea of a touchscreen on a MacBook (with that incoming OLED model) remains contentious, too, based on feedback from social media.

One Redditor puts it in particularly strong terms: "Touchscreen laptops are disgusting. I cannot fathom anyone actually using them. The ergonomics make no sense, the fingerprint factor is horrible, the OS is not built around touch the way tablets or phones are. Why are companies actively pursuing this technology in 2026?"

Another says: "Apple is entering 'the touchbar phase' again. Dark days lay ahead. I'll wait until they inevitably walk back whatever changes they make."

So, while people love the idea of an OLED, the fact that it's touch-capable is certainly dampening enthusiasm in some quarters, not forgetting that it'll add to the price tag, which is one of the other big fears about this laptop.

• Varonis Threat Labs uncovered Dolphin X, a powerful RAT with 329 features across 10 categories
• Its standout “AI Profiler” ranks victims by usage and sends summaries to attackers daily
• Malware is sold on the dark web via subscription tiers, starting at $80 per month

What if malware could talk to its operator and tell it which of the infected victims is worth paying attention to, and which not? A few years ago, this might have been science fiction but today, thanks to breakthroughs in Artificial Intelligence (AI), not only is it possible, it’s also already available on the black market.

Security researchers Varonis Threat Labs recently disclosed finding a rather revolutionary remote access trojan (RAT) called Dolphin X.

Even without advanced AI capabilities, the RAT is quite potent, acting as an infostealer, a Hidden Virtual Network Computing (HVNC), a DDoS botnet, or a loader. Just its infostealer capabilities are nothing short of impressive - it can target more than 300 applications to steal browser passwords, enterprise credentials, cryptocurrency wallet data, DevOps secrets, and different sensitive files, and it comes with 329 features split into 10 categories.

AI Profiler

However, the AI capability is the one that stunned the researchers. Called “AI Profiler”, the feature ranks victims by app usage, browsing history, and more, sending a daily summary to the attackers.

The malware is now being offered on the dark web, where other criminals can subscribe to one of three tiers. The basic tier costs $80 per month, while the top tier is around $230 per month. Lifetime subscription costs $1,140 for basic access, and goes up to $3,420 for the top tier.

"Dolphin X’s collection scope reaches well beyond browser passwords to SSH keys, cloud tokens, and DevOps credentials," Varonis said in its write-up. "On the wrong machine, a single infection could expose access to an entire production environment."

"Its use of AI is also interesting because it shows us how AI is being integrated into more cybercrime tooling."

• Guardio Labs found CVE‑2026‑48294 in Adobe Acrobat Chrome extension, enabling cross‑site data disclosure
• Attackers could steal WhatsApp Web chats if victims opened malicious landing pages with extension active
• Adobe patched the flaw in version 26.7.2.0; update recommended for 314M extension users

If you have Adobe Acrobat’s extension for Chrome, and you like chatting through WhatsApp Web, there is a potential security vulnerability you might want to address.

Security researchers from Guardio Labs discovered a “universal cross-site scripting (UXSS)-class cross-origin data disclosure vulnerability”, which is another way of saying that a website could use the flaw to read the contents of a different website, loaded in a separate tab.

The vulnerability was found in the Adobe Acrobat Chrome extension and is now tracked as CVE-2026-48294. It was given a severity score of 7.4/10 (high), and affects versions 26.5.2.2 and earlier. Guardio Labs dubbed it “HermeticReader” because of what it exploits.

"Insultingly ordinary" setup

The extension comes with different integrations, such as Google Drive or, in this case - WhatsApp Web. The WhatsApp integration component, internally known as "Hermes" is where the bug was found.

In theory, an attacker could create a new landing page and share it with the victim via email, instant messaging, SEO poisoning, or other methods. If the victim 1) has the vulnerable version of the Adobe Acrobat Chrome extension installed; 2) has WhatsApp loaded in a separate tab; and 3) opens the malicious landing page, it could trigger the extension’s vulnerable code path and allow the attackers to access everything the victim has on their WhatsApp.

Some sources argue that threat actors could use this vulnerability to pull one-time passcodes delivered via WhatsApp.

"The setup is almost insultingly ordinary: an attacker-controlled page, dressed to look like the kind of page you land on via search results, marketing emails, etc.," Guardio Labs wrote in its analysis.

"The visitor, who already has the Adobe Acrobat extension installed, opens that page. The page wakes up a dormant engine inside the extension, reaches directly into WhatsApp Web. Seconds later, the rendered WhatsApp Web view - the chat list, contact names, messages, the profile name, the text of whatever conversation is open - the whole WhatsApp in the attacker's hands."

Adobe has since publicly acknowledged the issue and thanked Guardio Labs’ researchers for their help. It has also fixed the problem in version 26.7.2.0 that’s currently available for download. The extension has more than 314 million users.

Via The Hacker News

• South Korean government discloses ten‑month cyberattack on the National Diplomatic Academy’s online education system
• Data stolen included user IDs, names, emails, and encrypted passwords of at least 6,000 individuals
• MFA shut down IT systems, deployed enhanced security, and delayed disclosure due to diplomatic sensitivity

Current and former employees of the South Korean Ministry of Foreign Affairs (MFA), as well as other government personnel, may have had their data siphoned out by cybercriminals in an attack that lasted for ten months.

The South Korean government has disclosed an attack against the online education system of its National Diplomatic Academy. The system, set up in 2022 by the country’s premier institution for educating and training diplomats, apparently contained a security vulnerability that unnamed threat actors managed to exploit.

In an announcement published on the official website of the South Korean government, both the details about the flaw, as well as about the attackers, were not disclosed.

Thousands are affected

However, it did note that the attack took place between April 2025 and February 2026. During these ten months, cybercriminals were able to steal user IDs, names, emails, as well as encrypted passwords of trainees in the National Diplomatic Academy Online Education System.

Unique identification information, sensitive information, mobile phone numbers, home addresses, and photos were not compromised, it said.

In response to the attack, MFA shut down its entire IT infrastructure and deployed “enhanced security measures”, without elaborating what these measures were. It urged all employees to remain vigilant of incoming emails, and to reach out if they receive anything “suspicious”.

While the official announcement lacks details, BleepingComputer reported that the attack impacted “at least 6,000 individuals, 350 of them being current government attachés dispatched abroad.” Citing an MFA spokesperson, the publication said the Ministry decided to disclose the incident with a five-month delay due to the “sensitive nature” of the attack, and the need to thoroughly analyze it before going public.

"We recognized this issue in February, but we announced it five months later because of the sensitivity of the matter regarding our diplomatic and security affairs, and the need for careful review and analysis," said South Korea Foreign Ministry's spokesperson Park Il.

Via BleepingComputer