• OpenAI Chief Scientist Jakub Pachocki suggests AI development is at a junction
• He advocates not just for slowing AI development, but keeping people in the loop, and the technology controllable
• Pachocki also states that international coordination from governments on future AI development is needed

OpenAI is taking the post-Hugging Face fallout very seriously. Just days after the release of GPT-6 Astra, Chief Scientist Jakub Pachocki believes that development into artificial intelligence should be slowed across the board. Not just by OpenAI, but by every company across the AI industry.

Writing on the OpenAI website, Pachocki said AIs “present clear new dangers” for computer security, and that "no one is prepared for the consequences of a continued rapid rise in machine intelligence."

Referring to OpenAI’s plan to develop an automated research assistant, and its progress with recursive self-improvement (where AI develops its next iteration), Pachocki suggests that now is the time to slow AI development and make the right choices for what happens next.

Understanding machine intelligence

The timing of the blog is surprising, given its proximity to the recent release of OpenAI's business-focused GPT-6 Astra. Pachocki’s notion of slowing research into AI is based around understanding – or rather, a lack of it. He states how “we now find ourselves at the moment in history of computing where machine intelligence is starting to exceed that of humans in transformative ways,” and that “study of deep learning-based AI is largely an experimental science.”

His argument is a strong one, which digs into the history of OpenAI as an AI developer and its early understanding of machine intelligence requiring increased computational power. This was required to accelerate research, and while various new algorithms have been developed that enhanced AI, the drive towards more power has continued.

While there is no discussion over the concerns of energy, cooling, and data center opposition, Pachocki’s article does accommodate the possibility of losing control of AI. “I am concerned no one is prepared for the consequences of a continued rapid rise in machine intelligence.”

Conscious choice

Does hitting the brakes solve the various problems that AI is facing? OpenAI’s Chief Scientist hopes it will, and enable the industry to consider just what it is offering to the world. Rather than accelerating research into deep learning, Pachocki’s view is that development into AI should be slowed.

He notes that “The main levers we have are either steering the process to strengthen alignment and monitoring alongside the AI and find ways to keep people in the loop; or coordinating to slow down future development as needed to build confidence in these measures.”

However, OpenAI’s Jakub Pachocki conclusion is that the best way to proceed is to employ a combination of these options. But will the rest of the industry work to a reduced pace in order to fully appreciate the scale of AI’s potential, the risks it represents, and deliver the power it offers to everyone who needs it?

It doesn’t seem incredibly likely.

• Asus is the latest company to get sales approval across its consumer routers
• Netgear got a head start with much earlier approval granted
• TP-Link is still waiting for Conditional Approval

While many consumer routers have been blocked from receiving FCC approval since March due to them being produced outside of the US, Asus has finally secured regulatory clearance across a large number of its routers.

Virtually all of its consumer and small business networking range can now be sold again in the US, including the RT series, its gaming routers, the ZenWiFi mesh systems, 5G MiFi devices and more.

But it's not without its limitations – the FCC has essentially given Asus an 18-month window to see its products in the US, spanning September 9, 2026 through March 6, 2028.

FCC issues new permits for router sales

In a strike of good luck for Asus, the regulatory clearance also means that Asus should be able to launch its upcoming Wi-Fi 8 hardware.

And Asus isn't alone in gaining approval – Netgear, Amazon's Eero, Adtran, Nokia, Calix, Zyxel and others also have permission to sell their routers within the US, with Netgear becoming one of the first big brands to get clearance back in April, giving it a head start over Asus.

However, TP-Link is still waiting for approval and, subsequently, cannot sell new routers in the US at the moment. Crucially, existing products that have already received FCC approval can still be sold, but TP-Link is currently banned from introducing new products for the US market.

New and upcoming Wi-Fi 8 models, for example, are out of the question, putting it at a competitive disadvantage to rival companies.

In order to get Conditional Approval, TP-Link would need to prove things like corporate ownership, board members, IP ownership, router designs, firmware updates and more.

But this isn't TP-Link's first run-in with the US government. In late 2024 and 2025, US authorities opened an investigation into its historic links with China. Texas even sued the company in early 2026 on similar grounds.

TP-Link has contested these allegations by asserting that the California-headquartered TP-Link Systems is a separate entity to China's TP-Link Technologies, and that all US-bound networking equipment has been manufactured in Vietnam since 2018.

"TP-Link stands behind the security, quality, and performance of its networking products and fully complies with all US regulatory requirements," the company wrote in April 2026.

• FinCEN warns US banks of industrial‑scale scam centers in Southeast Asia stealing billions
• Victims coerced into crypto “investments,” later re‑scammed with fake recovery fees
• Laundered via digital assets, mixers, shell firms, and Chinese underground banking networks

American financial institutions need to be more vigilant when it comes to identifying and preventing money scams, especially those perpetrated by industrial-scale scam centers in Southeast Asia.

This was the warning issued by the US Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) alongside a long list of red flags these institutions can monitor in order to stay safe.

Large, dangerous crime rings

The scams are not done by small groups of teenagers, tricking the elderly from the depths of their parents’ basement, but are often large, well-organized crime machines responsible for billions of dollars in damages, around the world, every year.

In 2025 alone, US victims lost more than $7.2 billion to these scams, the warning said, and between September 2023 and December 2025, nearly $13 billion was stolen from Americans.

The criminal organizations are primarily located in Cambodia, Burma, and Laos. They trafficked hundreds of thousands of people to various centers around the countries, taking their passports and forcing them into participating in online fraud. Those that don’t meet certain quotas are often beaten - and some victims were liberated after their families paid ransom demands, while others ended up being coerced into commercial sex work.

To make matters worse, they are resilient to law enforcement activities because some of them are either endorsed, or outright operated by, local corrupt officials.

FinCEN says the criminals are engaged in all sorts of fraudulent activity, but stressed that investment fraud is, by far, the most popular one. The scammers would reach out to their victim either pretending to be a romantic interest, or a financial advisor. Sometimes, they would even begin the conversation by saying they mistyped a phone number.

After extensively communicating with their victim for a while, they try to persuade them into making an “investment”, often using cryptocurrencies, and promising unrealistically high returns. This is also, FinCEN stresses, is when the scams can most easily be identified:

“Most digital asset payments by victims to scam center operators originate from money services businesses (MSBs) offering digital asset services, includingdigital asset kiosks, according to FinCEN analysis and law enforcement information. Based on FinCEN’s analysis of BSA reporting, scammers often instruct their victims to open accounts withMSBs offeringdigital asset services to purchase specific types of digital assets. Then, the victim is told to send these funds toa digital asset address controlled by the scammers.”

But defrauding victims out of their hard-earned money is not where the scam ends. Instead, the criminals continue, this time abusing the emotional distress to cause even more harm. They pose as law enforcement, financial institutions, or even FinCEN itself, stating that they’re investigating (or that they have confiscated the stolen funds) and that the victims should pay a certain fee to have their funds returned to them.

In some cases, the fraudsters pose as investment advisors, telling the victims to take out their money, buy gold and silver bars, and hand them over to a courier for “safe keeping”.

The full list of red flags can be found on this link, and FinCEN stresses that the circumstances around each individual case should be carefully considered, since no single red flag is “determinative of illicit or other suspicious activity.”

The circumstances include a customer’s historical financial activity, whether the transactions are in line with prevailing business practices, and whether the customer exhibits multiple related red flags.

Laundering the proceeds

Stealing the money is only half of the work, though. It still needs to be laundered and reintroduced into the legitimate financial system, and to do that, scam center operators rely on professional money launderers and Chinese money laundering networks.

FinCEN describes a three-stage process, in which the criminals first extract payments in digital assets using bank accounts, money mules, shell companies, or fraudulent money services businesses.

Next, during on-chain laundering, they obfuscate the origins of the stolen money by rapidly moving it across addresses, using mixers, and swapping tokens across blockchains. The last step is to integrate the funds into the traditional financial system via money mules, stablecoin transfers to offshore exchanges, and Chinese underground banking networks.

“Running a small business is ridiculously easy” – nobody, ever.

There is no denying that running a small business requires a specialist skills and approaching problem-solving like a competitive sport. With many small business owners working on their own, at least in the beginning, this adverse environment can feel lonely.

Sometimes, even the most motivated founder needs a nudge in the direction of progress. So, I’ve listed five quotes I’ve often read back to myself over the last 10+ years of small business ownership. I hope that you also find some spark of inspiration in these words.

Mark Twain on getting started

Key takeaway: Stop waiting for the perfect time.

We’ve all been there: we have a great business idea, but the time isn’t right. The same excuses circulate in our heads. Not enough money, the market isn’t ready, where will I find the time…what if I fail?

This quote from Mark Twain reminds us that action always precedes progress. If you knew you needed to fail 100 times before you succeed, wouldn’t you want to start failing as soon as possible? The best time is right now.

Bill Gates on unhappy customers

Key takeaway: Feedback isn't an attack; it's valuable R&D.

Small business owners can easily obsess over keeping customers happy. After all, losing just one customer can significantly affect business success. Here, Bill Gates reminds us that an unhappy customer actually presents an opportunity. Happy customers rarely offer honest feedback on where your business falls short, but an unhappy customer certainly will.

Taking the time to listen to an unsatisfied customer not only offers valuable business insight, but can help them feel valued, often turning them from unhappy to fiercely loyal to your business.

Winston Churchill on failure

Key takeaway: Whether you are on a high or a low, remember it will pass.

Whether you are a fan of Winston Churchill or not, few will deny the power of this quote.

It reminds us that whatever is happening in business right now doesn't really matter, as long as we continue. Failures will come and go, but so will successes. So, enjoy successes while they last and rest easy knowing failures are temporary.

Larry Page on delighting customers

Key takeaway: Overdelivering is a powerful retention strategy.

The majority of businesses overpromise to get customers through the door, then underdeliver where possible to lower costs. You can set yourself apart by taking the opposite approach.

Sure, this makes customer acquisition a little harder, but it sure makes customer retention a lot easier.

Reid Hoffman on launching your business

Key takeaway: Speed beats perfection.

Small businesses have one huge advantage over business behemoths: agility. Where big businesses spend millions testing behind closed doors, small businesses can launch lightweight and gather real feedback from real customers to improve future iterations.

• Zimperium uncovers Mantax Otax, Android malware merging infostealer, RAT, backdoor, and ransomware
• Distributed via APKs on third‑party stores, social media, and phishing; older Android versions most at risk
• Steals extensive data, enables remote monitoring, then encrypts files with AES and demands ransom

When threat actors target people’s devices, they usually infect it with one of many malware strains: an infostealer, a remote access trojan, a backdoor, or a ransomware encryptor.

Rarely do we see all of these functionalities merged into a single entity, and even rarer - to have it target Android mobile devices - yet, security researchers Zimperium discovered just that.

Mantax Otax

The security outfit published an in-depth report on Mantax Otax, a unique strain of malware circulating in the wild. It is apparently developed by an Indonesian threat actor, targeting victims in the country, but we don’t know exactly how many people are infected, or if this campaign is aimed primarily at business users, or individuals in general.

The malware is being distributed as a standalone APK, meaning it can be found on third-party app stores, Telegram channels, forums, and across social media. There are no traces of Mantax Otax on any of the official app repositories, including the Google Play Store, or Samsung’s Galaxy Store. Zimperium also speculates that it is likely being distributed via phishing emails.

Mantax Otax primarily targets users sporting older Android phones. Versions 9 and older are most at risk, since on these devices the attackers can make use of all of the malware’s features. Android 10 and newer models do get some protection:

“Conversely, on modern devices running Android 10 and above, the malware’s efficacy is severely hindered by native OS defenses, specifically Scoped Storage restrictions,” the researchers explained. “Due to these sandboxing rules, the ransomware is constrained to scanning only the application's localized external files directory, which drastically mitigates the blast radius and reduces the volume of accessible user files.”

Newer devices, as well as users of Zimperium’s Mobile Threat Defense (MTD) and Runtime Application Protection (zDefend) are said to be protected on a software level.

Another important caveat is the permissions. As is usual on Android devices, most malware won’t work unless the user grants an extensive set of permissions beforehand. In this case, Mantax Otax first asks for admin privileges, after which it grants itself an extensive list of capabilities, from accessing SMS messages, to contacts, audio, and images.

It then requests accessibility permissions, fully taking over the compromised device.

Malicious capabilities

Mantax Otax is said to be quite capable. It steals browser history, contacts, call logs, SMS messages, notifications, files, gallery media, Google account information, device specifications, location data, and application inventories. It can also pull WhatsApp information such as messages and profiles, and on Telegram it can also pull lock-screen PINs.

Infostealing features aside, it also serves as a remote monitoring tool, grabbing screenshots, recording the screen, or livestreaming it directly to the attackers. It can take photos using both the front and rear cameras, although Zimperium did not mention any microphone-recording capabilities.

Finally, once all of the data has been harvested, it encrypts user files with AES, deletes the originals, and appends a .enc extension. Victims are then shown a chat interface where they can communicate with the attackers directly and negotiate a ransom payment in exchange for getting their device back.

The tool seems to be in continuous development. Zimperium found two separate versions, one being an “evolution” of the other: “Notably, it has modified its network traffic behavior to utilize WebSockets and introduced a set of new commands,” the researchers said.

There is a reason why ransomware operators prefer targeting businesses instead of individuals. Although the latter has not disappeared entirely from the victim list, businesses stand to lose a lot more from disrupted operations and, as such, are targeted more frequently. Unfortunately, we don’t know what kind of app Mantax Otax is spoofing, therefore it is difficult to assess who the targets are.

• Amazon and OpenAI partner up to enable more brands to buy adds in ChatGPT
• US brands can join a pilot to buy ads directly via Amazon
• Cost per click and per 1k impressions are options

Amazon has announced a new partnership between its Ads business and OpenAI, allowing advertisers to buy ads within ChatGPT.

Initially launching as a pilot in the US, the move would mean that brands can buy ChatGPT ads from Amazon DSP instead of having to deal with OpenAI itself, making it more accessible to brands that already use Amazon's platform.

The company noted that conversational advertising represents one of the fastest-growing opportunities for brands to reach consumers where they spend more and more time, and compared with other channels, it remains much more untapped.

US brands can now buy ChatGPT ad spaces via Amazon

Crucially, Amazon wanted that it does not control which ChatGPT conversations receive an ad, but rather it helps campaign setup and optimization. In other words, Amazon works as an intermediary to handle negotiating ad spaces with OpenAI.

Both text and image ads can be displayed underneath the chatbot's answer, with OpenAI set to display a clear sponsored ad label in order to keep a clear distinction between meaningful output and advertised content.

Amazon is also offering two payment types for its ChatGPT-bound ads – cost per click and cost per thousand impressions.

"Through our collaboration with Amazon Ads and ChatGPT Ads, we can leverage deep consumer insights to inform how and when Delta Vacations appear within ChatGPT Ads experiences to create new opportunities for travellers to engage and discover vacation possibilities," Delta Vacations President Katrin Koenig explained as one of the platform's early customers and users.

While OpenAI has its own, much smaller advertising program, partnering with Amazon gives it access to a huge pool of established advertisers already using Amazon. As the third-largest digital advertising business (per Marketing Dive) with an annual advertising revenue of around $70 billion, even a small proportion of this could mark a major boost for the ChatGPT maker.

If you've worked in cybersecurity for as long as I have, then you'll know there are a couple of things you can count on. First, the threats that are out there never stop evolving. And second, sooner or later, you're going to be in the bullseye.

What makes life so much harder today is that AI and other automated tools have dramatically narrowed the gap between vulnerability discovery and the time it takes to exploit them.

And when this can now be measured in minutes – seconds, even – you know you have a problem. This fundamental change in the way adversaries operate means we no longer have the luxury of time to understand an attack, assess the risk and decide what to do next.

Which means we have to be better prepared and have resiliency for whatever is thrown at us.

Visibility is key

For me, that starts with accepting a simple reality: you cannot defend what you cannot see. And it’s why visibility is one of the most important capabilities an organization can develop.

After all, if you understand what exists within your environment – how those systems interact and what normal looks like – then you're in a much stronger position to identify unusual behavior before it develops into something more serious.

Observability, on the other hand, takes that visibility to the next level. It provides the context security teams need to make informed decisions quickly, especially when time is working against them.

In other words, visibility tells you what is happening, while observability helps you understand why it's happening.

And that’s crucial. Today's organizations operate across on-premises infrastructure, cloud environments, networks, and an increasing number of connected technologies.

As those environments become more distributed, understanding what's happening across them becomes significantly harder.

Without that visibility, it's difficult to understand where your risks are, how systems interact, or where an attacker may be able to exploit a weakness.

Think like a hacker

Which leads me neatly onto my next point. Throughout my career, including my time working in offensive cyber operations in the intelligence community, I've found that the most effective way to understand risk is to think like the adversary.

I start by asking how someone would attack an organization and then work backwards to identify and close gaps.

That’s because attackers don't see organizations in the way that you or I might do. They’re always on the hunt for a toehold in. They look for weaknesses in people, processes and technologies.

They look for the easiest route first to achieve their objective. And then they exploit that weakness.

And it’s an approach I would urge all security leaders to adopt if they want to stay one step ahead.

That means continuously asking where an attacker would start, how they would move through the organization and what controls would slow them down or stop them altogether.

But for this to work, it also requires organizations to design resilience into the way they operate. And that’s something we’ve embedded across our organization.

For instance, we have internal and external teams that conduct continuous product, enterprise, spear-phishing and physical penetration testing.

For us, it's about educating the team across the business to ensure they remain vigilant. But it’s also about inoculating people so that when they see something suspicious online, they have that instinct that something might be wrong and they report it.

We also want to make it easy for people to report events so we can analyze them quickly and better understand the targeting.

Secure by design

We’ve also invested heavily in Secure by Design to ensure that all the products we deliver to customers are as secure as humanly possible. In practice, it means being able to trace every piece of code back to its source and verify its integrity throughout the development process.

It's similar to maintaining a chain of custody for evidence. We want to know exactly where software components come from, how they're verified and how they're protected throughout the entire build process.

More broadly, Secure by Design is increasingly being adopted across our industry as organizations recognize the importance of software integrity, traceability and transparency throughout the development lifecycle.

This is important because, as I said at the beginning, there are two certainties in cybersecurity: threats will continue to evolve, and organizations will continue to be targeted. Businesses across the world must adapt quickly to the grim reality that a cybersecurity incident isn’t a matter of if, but a matter of when. And AI is supercharging the pace at which all this is happening and broadening the blast radius of any attack.

That’s why you need to understand your environment well enough to reduce unnecessary risk, detect malicious activity quickly and limit the blast radius when something does happen. Pair that with a clearly defined and tested plan for recovery and that's what robust cyber resilience looks like in practice.

We've featured the best endpoint protection software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Defense is operating in an environment where the pace of change continues to increase. Adversaries are adapting quickly and technology development cycles are becoming shorter. The boundaries between physical and digital operations are also becoming harder to define, while military commanders have more information available to them than ever before.

This changes how operational advantage is achieved. The performance of an individual platform or system remains important, but so does its ability to work effectively within the wider operational environment. Information needs to move securely to where it is needed, supporting decisions and action across different domains.

As new technologies are introduced, integration will become an increasingly important part of defense capability. The challenge is making sure innovation can be put to practical use alongside the systems and infrastructure already supporting operations.

Connecting technology across defence

Conversations around defense innovation often focus on AI, autonomous systems, advanced sensors, cyber capability and space assets. Each has a significant role to play, but none operates in isolation.

Information gathered by one system may need to be shared across multiple domains before it supports an operational decision. Networks, data, command systems and people all contribute to that process. The value of any individual technology is linked to how effectively it connects with the wider operational environment.

This principle also applies to the infrastructure supporting military operations. Communications networks, operational facilities and digital systems all contribute to creating an environment where information can move securely and reliably. As these environments evolve, resilience and security must be designed from the outset though approaches such as secure-by-design and zero-trust principles.

Strengthening the foundations of operational capability

AI has become one of the defining topics in defense. Its ability to process information and support decision-making has significant potential, but those capabilities depend on the quality of the data available and the resilience of the infrastructure that carries it.

Reliable communications, trusted data and secure networks remain fundamental to operational effectiveness. If those foundations are unavailable or compromised, the benefits of advanced technologies are reduced.

Therefore, creating decision advantage is not simply a technology challenge. It is an infrastructure and digital challenge and increasingly, a collaboration challenge.

For organizations supporting critical infrastructure, this has become an increasingly familiar challenge. Communications, operational technology, and digital infrastructure must work together to create environments where reliability cannot be compromised.

Keeping people at the heart of automation

Automation is attracting considerable attention across defense as organizations are looking to improve efficiency and increase operational tempo. However, automation should never be viewed as an end.

Its greatest value often comes from reducing routine activity rather than replacing people. Predictive maintenance, autonomous monitoring, automated network management and logistics optimization all help reduce the time spent on repetitive tasks, allowing highly trained personnel to focus on areas where experience and judgement remain essential.

The most effective technologies do not replace human capability - they amplify it.

The infrastructure supporting multi-domain operations

As operations become increasingly integrated across land, sea, air, cyber and space, infrastructure is taking on greater strategic importance. Communications, transport, energy, and digital systems all contribute to operational capability, showing how infrastructure and technology are becoming increasingly interdependent.

The movement of people, information, energy, and capability all contribute to operational readiness. Reliable infrastructure enables those elements to function as a single system, ensuring capability can be delivered when and where it is needed.

One example can be seen in the Falkland Islands, where runway infrastructure forms part of maintaining long-term strategic capability and readiness. It illustrates how infrastructure and operational capability are becoming increasingly interconnected.

Bringing innovation into operational use

The UK benefits from an established community of innovators, with government, industry, academia, SMEs and the Armed Forces all contributing to the development of new ideas and technologies. The opportunity now is to ensure those innovations can be adopted enough to meet operational needs.

Collaboration is still a critical part of this process. Bringing together different perspectives helps ensure technology is developed with practical application in mind and can be integrated more effectively into future capability.

Delivering the next phase of defense capability

Much of the technology required to support future defense operations already exists. The focus now needs to be on how quickly it can be integrated and put to operational use, giving the Armed Forces the advantage they need as threats and operating environments continue to change. That requires stronger connections across networks, data, platforms, people and infrastructure.

Collaboration between government, industry, academia, SMEs and the Armed Forces will remain central to moving capability from development into deployment. Technologies also need a clearer and faster route beyond demonstrations and pilots, so useful capability reaches operators when it is needed.

The organizations that succeed will be those able to bring people and technology together across the wider defense environment. Doing that securely, reliably and at pace will determine how effectively innovation translates into operational advantage.

We've featured the best AI tool.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Meta wants to upgrade ex-managers back to managers
• 7,000 workers were moved into the Applied AI org earlier this year
• Company's CTO admitted previous workforce changes were "atrocious"

Meta has reportedly partially reversed its decision to push for flatter, manager-light teams by asking some employees in its Applied AI business to move from individual contributor roles back into managerial positions.

New Business Insider reporting suggests Meta is asking certain workers to volunteer themselves as managers rather than forcing them into it, but without the company sharing comment on the matter, it's unclear how workers who refuse may be impacted.

As for the business itself, it's a pretty new one that was established this year, with around 7,000 employees shifted under the Applied AI umbrella.

Meta wanted fewer managers, now it wants more

Some of the workers who were previously assigned as managers were reassigned as individual contributors when they joined the Applied AI org, with Business Insider previously reporting how many workers felt they'd effectively been "drafted" into the business, highlighting ongoing friction internally.

The manager-light stance comes from CEO Mark Zuckerberg's 'Year of Efficiency' announcement in 2023, when he argued that a flatter organization could be more nimble and better poised for change.

With the company as a whole now on track to spend over $130 billion this year on AI chips and infrastructure, it's possible that a growing Applied AI organization could be behind the need for more traditional management.

Still, Zuckerberg's efficiency-driven, manager-light program seems to remain in force across other areas of the business, with this push for new managers looking to only be affecting Applied AI.

Separately, CTO Andrew Bosworth previously admitted that Meta's rollout of its new AI division was "atrocious" (via Wired), promising better communication for future changes.

"We shook up the management structure that was providing you stability while rapid changes in strategy, including the boom/bust cycle of hiring, left entire teams in the lurch," he admitted.

AI has rewritten the enterprise data playbook. Workflows no longer just create temporary operational data, but vast amounts of high-value assets, from LLM training datasets and model outputs to logs, metadata and archived knowledge that may need to be preserved for years.

As enterprise tech leaders seek to scale infrastructure to meet these demands, storage requirements are undergoing a fundamental shift. Capacity and performance remain critical, but data security has become equally important. Today, long-term data integrity and absolute cyber resilience carry equal weight.

Protecting this data, however, is no longer just about defeating today’s threat vectors. It requires preparing storage infrastructure for a significant shift: the arrival of quantum computing.

Data is a long-term strategic asset, not a short-lived trend

AI is accelerating data growth, but it can also extend the useful life of information. Data recorded today will be harvested for compliance, advanced analytics and model retraining for years to come.

To manage this economically, enterprise architectures rely heavily on high-capacity HDDs. While flash technologies dominate performance-critical hot tiers, HDDs remain the undisputed backbone of large-scale storage, providing the capacity, economics and longevity needed to archive data at scale.

As a result, organizations must consider how to protect not only today's data, but also its future value. After all, if the underlying infrastructure is compromised down the road, the very assets driving future AI innovations become the biggest operational and regulatory liability.

Harvest now, decrypt later

Current encryption technologies remain effective against conventional threats. However, quantum computing is expected to challenge some of the cryptographic methods used for authentication and key exchange.

This has led to concerns around “harvest now, decrypt later” attacks, where encrypted data is collected today with the expectation that future quantum capabilities could potentially decrypt it later.

For organizations storing sensitive intellectual property, research data or AI training datasets, this means security decisions made today could have implications for years to come.

Preparing for that future requires action from security leaders and IT directors now.

Security must be built into the infrastructure

Security is often viewed through the lens of data encryption, and with good reason. Self-encrypting drives (SEDs) provide always-on, hardware-based AES-256 encryption that helps protect data at rest without impacting performance.

But protecting data alone is no longer enough.

Storage devices themselves must be trusted. Firmware, authentication mechanisms, provisioning processes and diagnostic tools all play a role in ensuring a drive operates securely throughout its lifecycle.

If attackers compromise a device's firmware or trust architecture, broader security controls can be undermined regardless of how data is encrypted elsewhere in the system. This makes storage security a critical component of overall cyber resilience.

Implementing quantum-resistant defenses in storage

To counter these emerging attack vectors, the storage industry is actively embedding post-quantum cryptography into hardware architecture of enterprise hard drives. Rather than focusing solely on protecting data, the objective is to protect the trust architecture that underpins the drive itself.

Post quantum cryptography (PQC) technologies are being incorporated into areas such as secure key establishment, firmware authentication, secure provisioning, and trusted diagnostics. These capabilities are designed in alignment with established NIST post-quantum standards and are implemented using hybrid approaches that combine classical cryptography with quantum-resistant algorithms.

In practical terms, this means that the mechanisms responsible for establishing trust, validating firmware integrity and protecting administrative functions can remain resilient against both conventional and future quantum-enabled attacks. With the operational service life of HDDs often spanning 5 years (or more), implementing PQC today helps protect against quantum-based threats that may not materialize for several years, but that we know are coming.

Importantly, HDDs have long incorporated security controls to defend against today's threats. PQC does not replace these protections; it enhances them by adding an additional layer of resilience against emerging attack vectors.

Trust in the AI era

For many years, storage innovation was primarily defined by increases in capacity. Today, the expectations placed on infrastructure are much broader.

Organizations seek storage platforms that can scale with AI-driven data growth, deliver reliable performance, preserve integrity over long retention periods and withstand an increasingly complex threat environment.

PQC represents an important step in that evolution. By extending protection beyond data encryption and into the trust mechanisms that underpin storage devices themselves, PQC-enabled HDDs help organizations prepare for the security challenges of tomorrow while protecting the data they manage today.

As AI continues to elevate the strategic value of enterprise data, security can no longer be a short-term, reactive consideration. Trust must be engineered directly into the hardware layer and built to outlast the threats of today, tomorrow and the quantum era ahead of us.

We've featured the best SSD.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• OpenAI for Financial Services comes with built-in premium datasets
• Third-party subscription sharing is also in the works
• GPT-6 promises 100% on the 256-512K Long Context benchmark

OpenAI has lifted the wraps off ChatGPT for Financial Services, its latest industry-specific version of ChatGPT Work designed to give sector professionals access to relevant reasoning and models.

The company warned that analysts regularly spend too much time finding data, checking figures, building models and turning complex analysis into presentation-friendly reports – all things it hopes to be able to tackle with this iteration of ChatGPT Work.

Core to this new product is, of course, GPT-6 Astra, but OpenAI also worked with investment experts from Morgan Stanley and Evercore to guide its development.

ChatGPT for Financial Services

With the launch of ChatGPT for Financial Services, OpenAI has built premium datasets from the likes of Daloopa, PitchBook and LSEG News directly into the tool, so users won't need to negotiate their own external datasets. By hosting and indexing that data itself, OpenAI can ultimately improve performance and latency for end users.

OpenAI also promises to be working with S&P Capital IQ, LSEG, MSCI, Dow Jones Factiva and Moody’s so that users can access their subscription benefits directly through their ChatGPT login to reduce the friction further.

All of this with the benefits of OpenAI's latest frontier model, Astra, which sees marked improvements across the board. The jumps from 91.5% to 100% at 256K-512K and from 73.8% to 96.3% at 512K-1M are especially noteworthy on the Long Context MRCR benchmarks when compared with GPT-5.6 Sol, because finance work often requires handling long documents like annual reports and filings.

The company also advertises a 100% score for the ExploitBench cybersecurity benchmark, which should come as welcome news to this highly-regulated industry.

Only eligible financial institutions will gain access to the tool for now, and they must contact OpenAI for options.

"ChatGPT for Financial Services is one way we serve customers across the industry, but we recognize that it will require a range of solutions to address the needs of the finance industry," the company said in its launch blog post.

"OpenAI has a long history of collaborating with innovators to unlock novel AI solutions. Financial services firms and developers can use our API to build specialized applications for the needs they understand best. OpenAI brings frontier models and the capabilities to put them to work. Financial institutions, data providers, and software partners bring specialized expertise, trusted information, and customer relationships."

The vast majority of enterprise leaders are bullish about how ready their organizations are for AI-generated code. However, once that code reaches production, this confidence wavers as incidents arise. This pattern shows up across multiple independent studies in this year alone.

For instance, data published in April 2026 found that monthly production incidents climbed by almost 58% as AI coding tools scaled across engineering teams. A similar study from June found that the same volume of code changes is now producing more than three times the production incidents it did before AI coding tools were introduced en masse.

These findings are echoed in the 2026 State of Code Abundance Report, which surveyed more than 200 enterprise technology leaders and found that 92% expressed confidence in the production readiness of AI-generated code and rated their own AI-code readiness at an average of 84 out of 100.

Yet, the same study found that 81% reported an increase in production issues tied to AI-generated code - indicating a significant gap between confidence and control. While 93% say they have a formal process for reviewing and releasing AI-generated code into production, only 56% report that those processes are always enforced.

Furthermore, 86% of the same respondents report full or high visibility into AI-generated code, signaling a major contradiction - high visibility and rising incidents cannot both be describing the same pipeline.

Understanding the visibility gap

This is a familiar phenomenon in business, where confidence tends to be highest in areas where organizations have the least ability to measure their own performance. These enterprises aren't lying about their trust in AI-generated code, they believe it is production ready. The issue is that belief has out-grown the instrumentation needed to verify it.

We need to remember that AI coding tools are, by most measures, doing exactly what they were built to do: allowing more code to be produced faster and shifting engineering effort from writing code to deciding what should ship. Prior to this, the amount of code an organization could produce was largely tied to the size of its development team, incurring significant constraints for many.

In the agentic era, this barrier has effectively disappeared. What hasn't been adjusted is understanding what that code does once it's live, who wrote it, why it changed, and what broke when it did. Most organizations could stay on top of this governance while code was being written at human speed, but the challenge now is keeping up with the pace of agentic coding.

AI has widened a visibility gap that already existed, at a pace most governance structures were never designed to keep up with. For enterprise leaders right now, the natural instinct is to estimate how much faster AI can make their teams. This thinking leads many organizations to fall into the trap of prioritizing speed over quality, which leads to more errors when code is deployed - causing the process to slow dramatically.

The importance of code governance

Before investing heavily in AI coding tools, the best thing to establish is an idea of how much of your current pipeline you can actually see, measure and attribute. As only 12% of organizations have a dedicated team for governing AI-generated code, the vast majority of enterprises adopting these tools are doing so without a designated owner for the risk they're taking on.

This means that when something goes wrong, there's frequently no clean way to trace it back to a decision, model, or person accountable for the outcome.

This is the part of the pipeline that doesn't get enough attention, because it's less exciting than the productivity headlines. However, it's the part that will determine which organizations actually reap the benefits of agentic coding and which ones spend their time and resources cleaning up after it.

There’s a temptation, which is understandable given the competitive pressure, to treat AI-driven code generation as a race: whoever ships the most, fastest, wins. This is the wrong way to think about it, and the winners will actually be the ones that pause and strengthen their governance before they accelerate.

Control vs playing catch-up

The organizations that will benefit from this shift are the ones building measurement, attribution and oversight into their pipelines ahead of time. That means treating governance as infrastructure rather than paperwork and being able to answer, at any point, which parts of their codebase were AI-generated, who reviewed them, and what production behavior they're responsible for.

Furthermore, budget owners must be able to say what they're actually spending on AI-assisted development, rather than estimating.

None of this slows delivery down in the long term, and if anything, it's what allows delivery to keep accelerating without the incident curve growing alongside it. The gap between how confident enterprises feel about AI-generated code and how much of it they can actually see isn't going to close on its own. It will close because leadership teams decide to build the visibility first.

The organizations that do that now, while the rest of the industry is still counting lines of code shipped, are the ones that will still be standing when the next wave of AI-driven development arrives.

We've featured the best laptop for programming.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Nearly two-thirds of AI users aged 18-28 want clearer instructions from their bosses
• Nearly half of the same cohort have difficulty explaining work completed with the help of AI
• The figures could indicate a brand new challenge to management

“Tell me exactly what you want me to do” – that seems to be the message from older millennial and younger Gen Z workers, who have expressed a need for highly specific instructions from their bosses.

Research has found that 62% of the 18-28 age group who regularly use AI want their bosses to give them the same sort of clear steps and parameters as one might give an LLM chatbot.

While a cohort of workers who are attentive to the needs of the business might sound good, deeper investigation may prompt you to think again. The study by Use.AI implies a deeper-seated issue that points to a management challenge unlike anything seen before on this scale.

Detailed steps

Use.AI surveyed 11,742 adults based in United States, the United Kingdom, Canada, the European Union, Australia and Latin America, finding 62% of the 18-28 age group familiar with the AI use are accompanied by 41% of those aged 40 and older who also want more detail about tasks from their line managers.

Why do younger users need clearer, more detailed steps? It could be a simple matter of judgement, with the 18-28 age group requiring more experience in making their own decisions. But with the presence of AI in their working lives, could they be fearful of being replaced?

The report also explores a slightly different dimension. Within the 18-28 age group, 44% say they have had difficulty to explain work created with AI assistance. This raises a key concern: does the employee even know what their tasks are supposed to achieve? For that matter, does the business?

Sound judgement

AI has changed businesses considerably, and made an impact that doesn’t only improve productivity. As Ihor Herasymov, Co-Founder & CEO of Use.AI, observes, “AI is exposing which parts of work were never really about producing the answer. When a model can generate the output in seconds, the value of some tasks shifts to whether the person can make a sound judgment and stand behind it.”

Other results from the survey support this. With 57% of the 18-28 age group of regular AI users stating that they are less likely to memorize information that can be collected via AI, and 53% of the same group frustrated by “ordinary” tasks that could be completed by a chatbot, a whole new workplace dynamic is being quietly established.

Herasymov concludes, “Managers now have to be much clearer about whether they need the result or whether the task itself is meant to develop the employee.”

• Boeing receives $12.68 million investment to update the MQ-25's RF blanker, encrypted storage, and mission computer security, running through November 2029
• The change is a recent one: the Navy's April 2026 acquisition report lists refueling as the MQ-25's primary mission and intelligence, surveillance, and reconnaissance (ISR) as secondary, with no electronic warfare requirement and only two key performance parameters
• An RF blanker is electromagnetic compatibility hardware that stops an aircraft's own transmitters from deafening its receivers, allowing it to conduct EW more effectively

A single line buried in a recent US Department of War contract announcement is being read across multiple channels as the Navy's first carrier-based drone acquiring multiple electronic warfare upgrades.

The details, however, seem to focus on the defensive side of the spectrum and include a Radio Frequency Blanker Unit and an updated Encrypted Mass Storage System carrying an embedded Data Transfer System.

The modification also provides an option for deficiency analysis and corrections, supporting security assessments of the aircraft's Mission Management System Computer.

Why do these upgrades matter?

The most important upgrade for the MQ-25 Stingray, arguably, is its RF Blanker. An RF blanker is electromagnetic compatibility equipment. When an aircraft carries several transmitters and sensitive receivers within a few meters of each other, a transmitter firing at full power can deafen or damage a nearby receiver operating in an overlapping band.

A blanker fixes that by taking a blanking request from each transmitter and issuing a suppression pulse to the affected receivers for the duration of the transmission, as GE Aerospace describes. For a drone that could also house sophisticated EW capabilities in the future, this is essentially a prerequisite.

The Navy's Modernized Selected Acquisition Report dated April 21, 2026, offers a relatively narrow scope for the drone for now; however, it states that the MQ-25 conducts aerial refueling as its primary mission and provides Intelligence, Surveillance, and Reconnaissance capability as a secondary mission.

It is fairly possible that the upgrades are purely defensive, to prevent rogue players from accessing the drone or knocking it offline with relative ease. In its current capacity, the MQ-25 serves as an unmanned aerial refueling drone for the US Navy, offering capabilities including the ability to carry roughly 14,000 to 16,000 pounds of fuel at a combat radius of 500 nautical miles.

This could change even as the US continues hardening its EW offerings and prepares for potential hostile actors to have the same capabilities it currently harbors. For now, the $12 million invested in what is a $19 billion program is essentially a rounding error at the end of the day.

This sudden investment may signal more to come: Boeing has already pitched a land-based MQ-25 variant with external pylons and marketing language about ISR, electronic warfare, and airborne early warning roles, though the aircraft has no customer yet.

• The US Army has moved TITAN from prototypes into production
• Palantir received $127 million under the latest TITAN contract award
• Anduril secured $65 million for TITAN hardware and integration work

The US Army has shifted its Tactical Intelligence Targeting Access Node (TITAN) program from prototype status into full production this week.

Palantir Technologies and Anduril Industries together received a combined $192 million award covering the next production phase.

The Army first selected Palantir back in 2024 to serve as lead contractor for developing this next-generation targeting system for ground forces.

Contract splits work between two defense firms

TITAN was built to streamline how soldiers collect and process data when locating and striking distant targets on the battlefield.

Palantir secured $127 million of the total award and will oversee TITAN's production alongside several supporting partners in the effort.

Those partners include L3 Harris Technologies, Sierra Nevada Corporation, Strategic Technology Consulting and World Wide Technology, each contributing specialized capabilities to the program.

Anduril received the remaining $65 million and will build the hardened, vehicle-mounted units required for field deployment.

Anduril's portion also covers integrating power systems and thermal management components, so TITAN functions reliably in harsh operating conditions.

The program includes two distinct configurations built for different vehicle platforms and mission requirements across Army units.

An advanced version will mount on tactical trucks and can pull data directly from orbital sensor networks overhead.

A simpler basic version is intended for the Joint Light Tactical Vehicle, giving smaller units similar targeting capability.

Under the current award, contractors must deliver four advanced units and four basic units within eighteen months.

Production ramp builds on existing prototype fleet

These newly ordered units will supplement nine prototype systems the Army already operates and uses in current exercises.

Army officials have indicated they plan to issue further production contracts for TITAN sometime during fiscal year 2027.

The move from prototype to production status marks a milestone for a program meant to modernize how ground troops gather targeting information.

TITAN forms a central piece of the Army's broader push to overhaul aging ground systems across its combat formations.

By linking space-based sensors with vehicle-mounted terminals, the system aims to shorten the time between spotting a target and engaging it.

Whether that translates into a meaningfully faster targeting cycle in real combat conditions remains to be tested at scale.

The involvement of five separate companies alongside Palantir and Anduril suggests the Army is spreading technical risk across multiple vendors.

That approach could either strengthen the program's resilience or complicate coordination as production accelerates toward the 2027 follow-on orders.

For now, the contract signals steady progress rather than a dramatic leap forward for the broader modernization effort.

The scale of future procurement will depend on Army requirements, funding decisions, and how the systems perform during operational evaluation.

Via Defense News

• The US Navy approved Rolls Royce engines for autonomous surface vessels
• The certified engines can support missions lasting up to 30 days
• Series 4000 engines completed two separate 720-hour durability trials

The US Navy has approved Rolls-Royce marine engines for unmanned vessels capable of operating for periods reaching 30 days without crews onboard.

The certification covers mtu Series 4000 and Series 2000 engines following tests examining their suitability for extended autonomous naval missions.

The approval comes as the Navy expands its use of unmanned surface vessels for missions where keeping sailors away from danger remains important.

Rolls Royce engines clear tests for autonomous vessels

The Series 4000 completed two separate 720-hour durability assessments before receiving approval for propulsion and onboard electricity generation duties.

That engine can deliver as much as 4,300 kilowatts for propulsion while providing up to 3,000 kilowatts through its electrical generation system.

The smaller Series 2000 gained approval after component checks and operational trials, allowing it to provide propulsion output reaching 1,939 kilowatts.

Both engine families can now support Navy vessels designed for lengthy missions without requiring people aboard for routine maintenance or repairs.

The certification followed requirements established through the National Defense Authorization Act, which sets conditions governing equipment used within autonomous military platforms.

The Navy has already begun deploying unmanned boats, including Sea Hunter vessels fitted with twin mtu 12V 2000 engines supplied by Rolls Royce.

That deployment gives the newly approved engines a direct connection with the Navy's growing fleet of vessels designed for remote operations.

The company says its propulsion systems have supported naval operations for decades, while newer autonomous missions create different demands for endurance.

“For decades, mtu engines have been trusted to provide reliable, mission ready power for our crews at sea,” said Scott Hanson, vice president of governmental sales at Rolls Royce Power Systems North America.

Longer missions create new demands for naval engines

The ability to keep a vessel operating for 30 days without onboard personnel changes how the Navy can use unmanned surface craft.

Such vessels can remain at sea for extended periods while avoiding the accommodation, support, and immediate safety requirements associated with crewed naval platforms.

Rolls-Royce said the certification gives the Navy additional options as unmanned vessels become part of its wider fleet plans.

The company also supplies propulsion equipment for several unmanned aircraft, including the MQ 4C Triton and MQ 25A Stingray platforms.

Its portfolio also includes engines used by the United States Air Force's RQ 4 Global Hawk unmanned aircraft.

The latest approval therefore extends an existing relationship between Rolls Royce and American military programmes into autonomous maritime operations.

The certification does not mean every unmanned vessel using these engines will automatically achieve 30-day endurance during actual missions.

Actual operating duration can vary according to vessel design, speed, weather, payload, fuel capacity, mission demands, and maintenance requirements.

For the Navy, the immediate significance lies in having certified propulsion options for vessels expected to spend longer periods operating without crews.

As more unmanned boats enter service, engine reliability will remain important because failures far from support facilities can impede mission success.

Via The Drone Front

• Ukraine has started European production of its BARS jet-powered strike drone
• The latest BARS configuration reportedly has a 1,000 kilometers range
• BARS can now carry warheads weighing up to 60 kilograms

Ukraine has begun production of its BARS jet-powered strike drone in Europe, and the latest version has a range of 1,000 kilometers.

Production commenced in early September, intending to support higher output as developers continue to modify the drone for different mission needs.

This is a joint effort between Ukraine and Germany, with the first completed drones expected to reach Ukraine's Defense Forces from October 10 2026.

BARS enters European production with longer reach

The arrangement followed an agreement signed July 8 by Ukrainian Foreign Minister Andrii Sybiha and German Defense Minister Boris Pistorius.

Germany is financing the first production stage, while completed systems are intended for use by Ukraine's armed forces.

Engine availability remains a key limitation, since turbojet deliveries currently determine how quickly additional aircraft can leave production.

The BARS jet-powered strike drone can travel above 700 kilometers per hour while carrying a substantial warhead.

However, with several modifications and upgrades, the newest configuration can reportedly travel 1,000 kilometers.

Its maximum warhead weight has also increased substantially, rising from 22.5 kilograms on earlier models to 60 kilograms.

Its design allows developers to alter fuel storage and payload capacity based on the distance required for a particular mission.

Longer missions can use additional internal space for fuel, while shorter flights can devote more room to carrying additional weight.

Developers keep changing the drone and its guidance

BARS has reportedly gone through more than 40 design changes and upgrades since the prototype was developed.

The platform is divided into DeepStrike, MiddleStrike and FrontStrike configurations, covering different mission ranges and operational requirements.

The developer says artificial intelligence now contributes to several stages of the program, including engineering work and the drone's final guidance system.

“We use the tools that AI technologies provide us today, and we do not shy away from them at any level—from development and solving engineering problems to implementing machine vision in our target-guidance systems,” said the BARS developer.

During the final part of its flight, the operator can continue controlling the drone or transfer control to optical guidance.

This expansion of BARS production is a strategically sound move for Ukraine because German financing and supply chain ease pressure on Kyiv's defense budget.

Producing BARS in Europe also shields manufacturing from Russian strikes that have repeatedly targeted Ukrainian defense facilities.

For Germany, this partnership signals a deepening commitment to Ukraine's long-term defense industrial base rather than merely short-term arms transfers.

It strengthens bilateral ties and proves that European backing can translate into real, sustained battlefield capability.

Such a longer-range, heavier-payload drone with AI-assisted guidance raises Moscow's defensive costs by threatening targets deeper behind the front line.

This forces Russian air defenses to stretch across a wider geography, while the joint-production model may set a template for future allied co-production deals.

Via United24media

Elon Musk has been at the heart of promoting various companies throughout the 21st century, with two of his most prominent companies anchored in the notion of mass production. In the case of his infamous clunky and angular Tesla Cybertruck, he encountered several difficulties in bringing the prototype to market.

Planting the seed

Musk was speaking about the rigors of bringing the Cybertruck to life during an appearance on the Joe Rogan podcast.

Rogan asked how far away Musk was from delivering the vehicle to people, with Musk revealing at the time that the timing was about a month away.

But the prototype was initially unveiled in November 2019. Explaining the delay, the Tesla CEO hinted that the process of manufacturing the vehicle proved much harder than expected given the need for consistency in producing each model.

Rinse and repeat

There's an element of common sense in buying into the idea that making a prototype is much easier than mass-producing a finished version of that product.

Not only is there a much lower tolerance for error, but establishing the supply chain for materials, components, and resources is far more complex. Then there's the economics of it all – ensuring that the cost to produce one vehicle can, at least, be recouped by a customer should there even be a willingness to pay for it.

It's reminiscent of the "production hell" phrasing that Musk has also frequently deployed through the years – especially during a manufacturing crisis between 2017 and 2018. During this time, the Tesla production line became a futuristic and automated process known as the "alien dreadnought" – but this robotic network eventually slowed down manufacturing and prevented Tesla vehicles from being ready on time.

• AMD is putting data center-class AI hardware inside a desktop workstation
• The Halo Station combines 96 CPU cores with four powerful AI accelerators
• Up to 2.6TB of memory gives enormous AI models more local headroom

AMD's Threadripper Halo Station could become one of the most extreme desktop workstations ever built for demanding artificial intelligence workloads.

The device combines a 96-core processor with AMD Instinct accelerators and a huge memory pool designed for large local models.

Unlike conventional workstations, AMD is building this system around data center-class computing hardware inside a single deskside machine.

AMD packs data center hardware into a desktop

At the heart of the Halo Station is the Ryzen Threadripper PRO 9995WX, based on AMD's Zen 5 architecture and carrying 192 threads.

AMD lists up to 2TB of RDIMM system memory, while the accelerator side can add as much as 576GB of HBM3e memory.

Together, the system's CPU and accelerator memory can reach 2.6TB, giving large AI models far more room to run locally.

AMD also claims up to 16.4TB/s of combined memory bandwidth, giving large datasets rapid access to both system and accelerator memory.

The accelerator configuration can use four Instinct MI350P units, with each device carrying 144GB of HBM3e memory and 4TB/s bandwidth.

That design gives the machine a far larger high-speed memory pool than typical professional desktops built around a single graphics card.

AMD compares the system with Nvidia's DGX Station, whose GB300 platform offers 748GB of coherent memory across its CPU and GPU resources.

The comparison shows why AMD is focusing heavily on memory capacity, rather than treating processor core count as the main selling point.

A machine with this much memory can keep larger models and datasets close to the compute hardware instead of constantly shifting them elsewhere.

Halo Station is built for local AI work

AMD says the workstation is intended for researchers, model developers, engineers, creators, and organizations that need intensive workloads handled locally.

Its main role is running, training, and fine-tuning large AI models that would normally require access to expensive remote computing infrastructure.

The system can handle frontier-class models while supporting hundreds of AI agents operating within the same local environment.

That capability makes it useful for development tasks where repeated cloud transfers create delays, added costs, or data control concerns.

AMD also says the design allows sensitive data and intellectual property to remain on premises instead of moving through external cloud services.

The company unveiled a prototype at IFA 2026, with commercial availability planned for 2027.

AMD senior vice president Jack Huynh described the device as “the most powerful workstation in the world,” emphasizing its unusual computing scale.

Industry estimates suggest fully equipped systems could cost around $150,000, although AMD has not announced an official retail price.

Rack-mounted systems can cost far more than desktop workstations, so the Halo Station is not necessarily the world's most expensive computer.

The estimated price reflects the cost of combining a high-end CPU with multiple AI accelerators and several terabytes of memory.

• Samsung's new portable SSD combines 8TB capacity with 4,000 MB/s reads
• The 8TB P9 offers ample storage for massive media libraries
• Samsung's fastest portable storage arrives with an unusually high price

Samsung's 8TB P9 portable drive has appeared on an ecommerce platform for $2,879.99, making it an unusually costly option for portable storage.

B&H Photo lists the drive alongside 1TB, 2TB, and 4TB versions, priced at $2,520, $2,160, and $1,440, respectively.

The pricing makes the 8TB model cheaper per terabyte than its smaller counterparts, despite its unusually high overall purchase cost.

USB4 performance comes with 8 TB capacity

The P9 connects through USB-C and supports USB4 at 40 Gb/s, giving it enough bandwidth for the listed transfer speeds.

Sequential read performance can reach 4,000 MB/s, while sequential writes can reach 3,800 MB/s under suitable operating conditions.

Samsung says the drive is intended for professional creators handling large RAW photo collections and high-resolution video files, as the 8TB capacity can also support 12K video recording and direct capture when connected equipment supports those functions.

This portable SSD draws power through the host connection, so users do not need a separate power supply for normal operation.

Samsung claims the drive is protected against drops and can survive falls from up to 6.5 feet, approximately two meters.

Thermal controls are also designed to manage heat during demanding workloads, while the enclosure also resists vibration.

The enclosure measures 3.54 x 2.56 x 0.33 inches, making it roughly comparable in length and width to a typical smartphone.

It weighs just 3.39 ounces, or 96.11 grams, so the drive adds little weight to a portable work kit.

With 8TB available, the Samsung P9 can also reduce the need to carry multiple drives when handling large media files.

Security and device support are added to the package

The P9 uses AES 256-bit hardware encryption and password protection, which can help keep stored files inaccessible to people without the required credentials.

Samsung Magician Software also lets users manage the drive's password protection, giving them another way to control access to stored data.

The drive works with Windows, Mac, iOS, Android, game consoles and tablets, so users can connect it to many types of devices.

It also works with USB 3.2 Gen 2x2 at 20 Gb/s and earlier USB standards, although those connections cannot deliver the drive's full USB4 speeds.

Samsung says sustained write performance can support demanding tasks such as recording content directly to the SSD and editing files stored on it.

That could be useful for users who need to record or work with large files without first moving them to another storage device.

However, B&H currently lists the 8TB model as unavailable while offering customers the option to request an availability alert.

Anyone who submits that request should receive a notification when the drive becomes available, with shipping details then provided through the retailer.

• OpenAI is developing a tool that can perform “well-defined research tasks”
• Described as a “research intern” the project met its aim to achieve automation by September 2026, ahead of a fully automated AI researcher operational by March 2028
• The company believes that automated research can “enhance human welfare” and make other contributions

OpenAI has confirmed its project to build a fully automated AI researcher is on schedule, hitting its September 2026 target of developing a "research intern". Capable of performing research tasks commissioned by a human, the "intern" is the main milestone in the completion of the fully automated system, which OpenAI aims to reveal in March 2028.

The research intern is capable of carrying out tasks that would take several days if completed by a human researcher.

OpenAI has justified the development of the automated AI researcher by citing the reduced cost of AI, and in defending critical infrastructure against capable AI threats. These are observations it may not have published had the Hugging Face incident not occurred.

Automated research?

During an October 2025 livestream, OpenAI CEO Sam Altman announced the development of an automated AI researcher, and its intended milestone and target. "We think it is plausible,” he said, “that by September of next year, we have an intern-level AI research assistant and that by March 2028, we have a legitimate AI researcher."

Specifically describing the current stage of the project’s development, OpenAI explained its definition of ‘research intern’ as "a system that can carry out well-defined research tasks under human direction, including tasks that would take a skilled researcher a few days.”

The post continues: “AI research is a complex process with many potential bottlenecks […] agentic tools are meaningfully accelerating research progress.”

While this particular intern won’t be able to make coffee or find a box of paperclips, its automated research ability will presumably unlock those tasks for others to complete – such as the human commissioning the research.

Recursive self-improvement

The ChatGPT company clearly expects to hit its March 2028 target for the release of the publicly available automated AI researcher, but it also seems to have learned some important lessons. It argues against the use of recursive self-improvement (RSI) in developing automated research capabilities, noting that achieving that safely is not something that is currently achievable.

OpenAI’s post underlines its continued response to the Hugging Face incident, introducing safety steps at an earlier stage of product development. The update also explains how coding agents are used for development at the company, and confirms recent revisions to monitoring standards.

Noting that “Agent-powered AI research is still new, and we are still learning how to measure it,” OpenAI’s “intern” could herald some some considerable changes to the completion of research, when it the automated AI research tool is finally completed.

Allow me to introduce the new Philips 34B2U5900C. On paper, it's pretty much the ultimate non-OLED 34-inch 5K2K ultrawide productivity monitor for PCs and Macs.

If that sounds like a rather convoluted classification that amounts to faint praise, it's not meant to be. OLED monitors certainly have some clear advantages. But you simply can't get one that matches this Philips' core specification of 34-inch ultrawide with a 5K2K resolution.

That's important, because this display offers a level of pixel density and therefore text and image sharpness and clarity that no current 34-inch ultrawide OLED monitor can match.

What's more, even up against the traditional LCD competition, the Philips 34B2U5900C looks pretty special. The full 5,120 by 2,160 native resolution is supported at 120Hz refresh and there's even a 2,560 by 1,080 alt-mode resolution at 240Hz.

Intriguingly, this is a VA panel as opposed to the IPS type you might have expected from a 5K2K model, which is why the contrast is quoted at an impressive (for an LCD monitor) 3,000:1. Notably, the full 5K2K at 120Hz is supported over all three video inputs: DisplayPort, HDMI and USB-C. While we're talking connectivity, it's positively comprehensive, with dual HDMI to accompany the aforementioned DisplayPort and USB-C and the latter providing an outstanding 140W thanks to supporting USB-C Power Delivery version 3.1.

A KVM switch likewise means this monitor is perfect for sharing across two machines, perhaps a PC and a Mac or a laptop and a desktop. There's plenty more in the huge feature set, including sensors for both light and user proximity, the former designed to adjust the screen's brightness to suit ambient conditions, the latter allowing this monitor to dim when you step away from your desk.

For the record, this is a DisplayHDR 400 certified panel, which means it's on the very lowest rung for HDR support and capability and doesn't offer local dimming, let alone the per-pixel lighting control of an OLED panel. But, again, this class of 5K2K panel simply isn't available with OLED technology. On paper, the Philips 34B2U5900C looks set to feature strongly among the best business monitors you can get.

Philips 34B2U5900C: Design and features

• Slightly dated design
• Fantastic feature set
• USB-C with 140W power delivery

Immediate impressions of the Philips 34B2U5900C are of a slightly clunky, dated old thing with a particularly thick lower bezel. An ultra-slim OLED it most clearly is not.

But it's well put together and exceptionally ergonomic. The latter attribute is thanks to the combination of a base that swivels through fully 360 degrees and clearly labelled and easily accessible ports on the rear. If you're fed up with battling with hard-to-access monitor ports, you'll love the Philips 34B2U5900C.

Speaking of connectivity, along with the dual HDMI ports, there's a DisplayPort socket and USB-C. The latter supports the latest PD 3.1 spec and so can deliver fully 140W of power delivery to an attached laptop. That's well up on the 96W of previous generations of USB-C single-cable connectivity and means that you use a single cable to drive this display and fully power many high-spec desktop replacement portables.

There's also a KVM switch, which makes it simple to share this monitor and, say, an attached keyboard and mouse combo, across two computing devices. The inclusion of an ethernet port means you can share networking across the devices, too. What's more, there's a multiview option allowing both machines to display on the monitor at the same time. Nice. Rounding out the connectivity is a three-port USB hub on the left bezel, with two USB-A ports and a single USB-C, plus a headphone jack.

Along with a light sensor that enables the 34B2U5900C to adjust its brightness according to ambient conditions and a proximity sensor that dims the brightness when you step away from your desk, perhaps the most unusual feature in a productivity context is the dual resolution mode. By default, the 34-inch panel runs natively at 5,120 by 2,160 pixels at 120Hz. That alone is pretty impressive for a productivity monitor with such a high resolution.

But Philips has also fitted this monitor out with a secondary dual-mode using pixel doubling to enable a resolution of 2,560 by 1,080 at 240Hz. It's the sort of feature that you'd expect on a gaming monitor. Exactly what the use case is for productivity, content creation or day-to-day computing isn't clear. But it hardly counts as a demerit to find it included.

Finally, color coverage of 95% of the DCI-P3 gamut is reasonable, but not really the stuff of professional content creation. That said, the 34B2U5900C is at least Calman Ready for rapid automated calibration using a colorimeter.

Philips 34B2U5900C: Performance

• Super sharp image quality
• 120Hz at native resolution
• Surprisingly good response

The central appeal of the Philips 34B2U5900C is its 5K2K resolution. On this 34-inch ultrawide panel, that native resolution of 5,120 b 2,160 pixels works out to a pixel density of 163DPI.

That's exactly the same as a 27-inch 4K monitor and, indeed, this ultrawide 5K2K format is essentially a 16:9 4K 27 incher taken out to the 21:9 aspect. Add in a gentle 1500R curve, and you have a fantastic combination of widescreen ergonomics for multitasking and media immersion, plus super-sharp image quality and excellent text quality.

That applies to both Windows and MacOS operating. What's more, among the comprehensive selection of color spaces in the 34B2U5900C's OSD menu are both sRGB and Display-P3. So, you have immediate presets to suit the native color spaces of both operating systems.

This panel looks particularly good with MacOS. The pixel density isn't quite Retina class. But the font quality is still excellent and the ultrawide proportions allow for running as many as three application or browser windows side-by-side, a use case that obviously applies to Windows, too.

It's something of a surprise to find Philips using VA panel technology for this new 5K2K display. IPS is more typical. But this is one of the best VA screens we've seen for a long time. First, you get excellent inherent contrast for an LCD panel at 3,000:1. So, there's noticeably less light bleed than a similar IPS panel.

Even better, despite VA's reputation for poor pixel response, Philips has included three levels of configurable overdrive, the middle setting of which delivers very, very good response for this type of monitor. Motion clarity is very much in line with the 2ms quoted response performance and, in subjective terms, you're giving nothing away to the IPS competition, albeit OLED panel tech is nearly a full order of magnitude faster.

Speaking of speed, the 120Hz refresh rate is a very welcome feature. This isn't a gaming monitor and triple-digit refresh rates are not really a particular requirement for most productivity or content creation workflows. But 120Hz still makes for slicker and more responsive day-to-day computing.

The 240Hz 1080p dual-mode of more questionable utility outside of gaming. Enabling it makes for clearly compromised clarity, that's for sure. But it's there for the occasional fast-paced gaming session, if that's your thing on the side.

If you're looking for limitations, there are two obvious if hardly debilitating weaknesses. First, HDR support is capped at the entry-level DisplayHDR 400 tier. That means a peak brightness of 400 nits and no local dimming. So, this isn't a true HDR display. But then even LCD monitors with mini-LED dimming struggle to deliver a consistent HDR performance. You need OLED and perfect per-pixel lighting for that.

The other marginal shortcoming is color coverage. You'll do better than 95% of the DCI-P3 gamut this monitor offers with an IPS panel. So, if maximising color accuracy for pro content creation workflows is critical, you may find the 34B2U5900C slightly wanting.

Philips 34B2U5900C: Final verdict

If you're looking for a fantastic all-rounder that combines crisp image quality with ultrawide multitasking ergonomics, great connectivity and even some surprising speed, look no further than the new Philips 34B2U5900C. It ticks so many boxes.

The 5K2K resolution on the 34-inch ultrawide panel is the main attraction. And certainly makes for both super sharp visuals and lots of desktop elbow room. In this application, the VA panel tech works really nicely too, delivering excellent contrast for an LCD monitor. Add the 120Hz refresh at 5K2K native and surprisingly nippy pixel speed and you have a very quick and slick productivity monitor, to boot.

Then there's the excellent connectivity. The highlight is the USB-C interface with 140W capability thanks to Power Delivery 3.1 support. It means you can keep a very powerful desktop replacement laptop fully juiced, which isn't something the previous USB-C PD standards could achieve.

All told, this is comfortably one of the best monitors of 2026. It absolutely nails its high-DPI productivity brief and adds a surprising turn of speed that makes it a versatile display, even if gaming isn't exactly central to its all-business remit.

For more displays, we've tested the best monitors and the best 5K and 8K monitors.

• 153 million US driving licences have been leaked on a Russian cybercrime platform
• Among those apaprently discovered in the stolen data is US Secretary of Defense Pete Hegseth
• The FBI is now investigating the leak, which has been traced to an identity verification company

A data leak of 153 million US drivers licenses is said to have been shared on a Russian cybercrime forum, with US Secretary of Defense Pete Hegseth among those leaked prompting an FBI investigation.

Security researcher Brian Krebs identified the leak – which included his own data – as originating from a hack of an identity verification service. Louisiana-based IDScan provided ID verification for various well-known companies, including FedEx and Hertz car hire.

The data was shared on a Russian forum called Exploit, a long-established online community of cybercriminals. Following news of the leak, the identity theft service “Nexus” has apparently scrubbed its existence from the Dark Web.

Driving licenses and more

It wasn’t just US driving licenses that were found in the archive of recently-collected personal data. Krebs’ investigation found that Nexus claimed other types of data, and found a further 1.1 million driving licenses from Canada.

Other identity documentation alleged to be in the leak include 10 million identification cards, three million travel documents and international IDs, and 579,000 medical cards. The data was available to browse, notes Krebs, with Nexus providing details: “Records are available to preview before purchase with pertinent information redacted. Customer photos are displayed if available.”

The leak has a personal dimension for Krebs. Not only was his driving license in the collection, so was that of his mother. It has proved to be a useful coincidence, one that has enabled the security and privacy researcher to establish how the data was sourced by Nexus.

Both licenses were used for a car hire, which Krebs traced to Hertz. Others affected by the leak had also used the service, which has used New Orleans-based IDscan for identity verification.

The company, which claims to perform 21 million verifications a month, is yet to issue a statement on the matter. Its marketing and operations leader, Jillian Kossman, told the journalist: “At this point I’m not able to share any additional information, but the updates you have provided have been welcome, and helpful to our team’s investigation.”

Where is the data?

Krebs reports that he was alerted to the data on August 31, 2026, little over a week ago. Regular checking noted that the data was still being added to, increasing by “nearly 400,000” records prior to publishing his investigation on September 1.

Since then, however, it seems that Nexus has vanished, along with the data. But how widely was the data downloaded before that happened? While the FBI investigates, it falls on the American and Canadian public to be extra vigilant and wary of identity fraud.

• Huntress warns fake GTA 6 ISOs spreading malware ahead of official Nov 19, 2026 release
• Packages deliver RATs, infostealers, and Chaos ransomware disguised as game installers
• Users urged to avoid pirated downloads; infected systems should be reimaged and credentials reset

Grand Theft Auto 6 (GTA 6), one of the most anticipated computer games of all time, is due to launch on November 19, 2026 - so everything found online before that is almost certainly malware.

This is the warning sent out by security researchers Huntress, which said it recently saw one variant deploying all sorts of filth, from remote access trojans (RAT), across infostealers, to full-blown ransomware encryptors.

The story behind GTA 6

GTA 6 is a third-person action-adventure and open-world gam developed by Rockstar Games, which egan preliminary work more than a decade ago, and has allegedly spent more than a billion dollars during that decade and a half, which would make it, by far, the most expensive game ever developed.

It is also a sequel to GTA 5, a game that was sold in more than 230 million copies around the world, which made it one of the most popular games of all time.

In late August 2026, someone going by the alias LEEK claimed to have obtained a working, playable build of the game, roughly six months before the official release. They posted numerous screenshots and videos of them playing the game, even writing their nickname onto a wall, using a rifle to prove the authenticity. Truth be told, even without this, people would have still probably searched for, and downloaded, fake installers. This only made the problem worse.

And a major problem, it definitely is. Huntress is now saying it is seeing websites ranking relatively high (through SEO poisoning), offering for download an ISO of the game. Similar ISOs are circulating around different gaming forums, torrenting sites, and social media channels.

An ISO file is a digital copy of an entire disc, such as a CD, DVD, or Blu-ray, stored as one file. Users can download an ISO (which can weigh tens or hundreds of gigabytes), mount it into a virtual drive, and the computer will treat it like a physical disc.

Huntress found some ISOs weighing more than 100GB which was done just to make it seem authentic - the actual malware was “a factor smaller”. The ISOs they analyzed contained multiple variants, including NJRAT and CDRAT (two remote access trojans), Mercurial Grabber (an infostealer grabbing Roblox Studio cookies, Minecraft session data, Discord tokens, Chrome passwords and cookies, system information, IP addresses, and geolocation, Windows product keys, and screenshots), and Chaos Ransomware. The package also contained a legitimate, regular browser - “Just for kicks,” apparently.

A plausible failure

During the “game” installation, the installer displays a message in Russian, saying the product is unlicensed and that there is a good chance it won’t run. If that happens, the user is told to reach out to a specific Gmail address to receive an “updated crack”. After the installation completes, the victim will get that exact popup, saying “License not found”. All of this is just a smoke screen, to make the victim not suspicious as to why the “game” won’t run.

There is no way of telling how many people fell for the ruse and installed malware on their devices. Huntress says that generally speaking, trying to download cracked and pirated software is a bad idea, which is even worse if the game in question has not yet been released.

“This is fertile ground for scams and threat actors attempting to take advantage of the impatient and overeager,” the researchers said.

The good news is that all of the malware being distributed there is not new. Some of the variants contained in the ISOs are several years old, meaning most antivirus programs, such as Windows Defender for example, can easily detect it and stop it from compromising the system.

Those that do end up infected should disconnect the machine from the internet, reset all passwords, enable 2FA wherever possible, and do a complete reimage of the compromised system.

• Microsoft worries developers are submitting a higher volume of extensions due to AI
• It's already made some review changes, but the Edge team has had to make further changes
• Edge extensions will also be reassessed every 15 days to prove quality

Microsoft's Edge team has warned that vibe coding has contributed to a sharp rise in extension submissions for the browser simply because developers can build and tweak their extensions far more quickly.

While the company largely sees this as a positive for the Edge ecosystem, which has always struggled against the likes of Chrome, it also worries about the additional pressure its own developers now face.

Even though the team introduced an "expedited review process" in 2025, its "review pipeline has experienced additional strain" and review times are suboptimal.

Edge has seen a huge rise in AI-generated extension submissions

As a result of this additional stress, the company says it's streamlined how extension submissions move through the review pipeline in order to reduce the amount of time developers wait for approval, but crucially, the changes do not reduce the number of checks or reduce the standards.

One of the changes include the addition of automated systems to identify known policy violations and security issues.

"Our objective is to make Edge the easiest place to build, publish, and grow an extension," Microsoft wrote, but the company clearly knows Edge falls short of Chrome in terms of outright user adoption.

Per the latest Statcounter figures, Chrome accounts for 71% of all desktop browsing sessions, with Edge in a distant second place with an 11% market share.

At the same time, Microsoft is also making changes to its Featured badge, which assesses extensions across "more than 60 quality signals." The increasingly automated system will now re-check extensions every 15 days – "With this more frequent cadence, high-quality extensions can earn recognition sooner, and developers receive faster feedback on their investments in quality," the company added.

• Meta launches Muse personal AI agent - and seemingly takes social media accounts too
• British rock icons Muse seemingly shifted to @Museband
• However changeover seems not to apply to older tweets

After Meta recently launched Muse, its new "personal AI agent", the company has apparently already run into difficulties securing the social media handles for its new project.

Both the Instagram and Threads handle for @Muse previously belonged to iconic British rock trio Muse, but now appear to be under the control of Meta.

The former has apparently been shunted out to @Museband, despite having been around a lot longer than Meta's latest misguided AI boondoggle - with the move alarming fans and industry observers around the world.

Just a load of Hysteria?

One of Britain's most successful rock exports, Muse (the band) trademarked its name in 1999, and had used the @muse account on Instagram and on X for many years.

However The Independent noticed that in July 2026, this changed, with Meta's platform taking over on both websites. This has caused some unfortunate cross-referencing for some user's tweets, causing Meta executives (including Mark Zuckerberg himself) to apparently hail the performance of @Museband as "the best AI agent I've tried".

Muse are well known for their dramatic performances and musical innovation, but the band has also hit out against the creeping influence of technology in the modern world, including how it might be used for government surveillance or warfare purposes.

Neither the band or Meta have responded to press inquiries, and all accounts seem to still be in place.

Of course, there might only be a limited number of words and names available for new projects and products, especially with terms as historic and iconic as Muse (which dates back to Ancient Greece), but Meta's move does raise concerns about the ability of powerful organizations to dominate and commandeer entities such as usernames.

Engadget points out that the @Meta Instagram handle had been used by an independent motorcycle magazine of the same name since 20214, before Zuckerberg's company acquired it, forcing the former to change its name. And when Meta launched its Threads network in 2023, the @threads handle on Instagram quietly changed from a small fashion retailer called American Threads to Meta's control a month later.

If Meta is able to kick off one of the most famous bands of the last few decades in favor of what will likely be a short-lived misadventure, where will it all end?

In 2025, Black Friday and Cyber Monday (BFCM) sales reached an estimated $11.8B and $14.25B, respectively, making them two of the most profitable shopping days in history. Now, with the 2026 BFCM period just around the corner, small online businesses are starting to think of ways to make the most of this potentially lucrative period.

I’ve run several successful online stores over the last ten years, several of which have relied heavily on BFCM sales to drive a significant proportion of annual turnover. Below, I run through six tried-and-tested methods to drive bigger profits during the peak trading season.

Prepare marketing materials

Preparing marketing materials well ahead of the BFCM period is essential to sales success. Most businesses will be much busier than usual during this period; that means more picking, packing, and sending orders, more customer enquiries to deal with, and more time spent on stock management.

Don’t make your life harder by having to spend hours creating marketing materials amongst the chaos. Planning your key discounts and offers early means you can create BFCM marketing assets well ahead of the rush.

Create product bundles

With big savings come big opportunities to upsell customers. This works well during the BFCM period for two reasons.

Firstly, many people are searching for gifts during this period. If you can offer gift hunters a bundle of products within their budget, it can save them time looking elsewhere. By setting bundles into cost categories, you can also make it easy for people working to a specific budget. This is a simple way to capitalise on making people's lives easier.

Bundling products can be especially powerful for existing customers or those who have spent some time considering buying from you. Offering several products at a similar price to an individual product someone has purchased before can make people feel like they are getting a great deal. This can also be a smart way to convince people to try new products that they may not have considered before.

Steal this idea

Create product bundles exclusively for the BFCM period. Categorise them based on price, for example, bundles under $20, under $50, and under $100. Ensure these bundles are visible on your website when people are browsing and push them via your social media.

Run flash sales

Running one continuous sale over the BFCM period can generate good results, but smart online store owners know that they can tap into the buzz surrounding this period by running flash sales.

This approach can also help you sell specific items that generate more profit or are at the end of their line.

Steal this idea

Offer a flat discount site-wide running from Black Friday morning to Cyber Monday evening. Then offer a one-hour-long flash sale on specific products for an increased discount during peak trading. Use your social media and other marketing channels to tease the upcoming sale and notify people when it starts.

Incentivize bigger orders

One of the hardest things about the BFCM period is getting people to visit your website at a time when all of your competitors are trying hard to do the same. Most small businesses focus entirely on getting that click, but fail to maximise the amount of profit they make from each visitor.

If you’ve done the hard work of getting someone interested in visiting your online store, incentivizing larger orders can be a smart way to increase the Average Order Value (AOV).

Steal this idea

Incentivize larger order values by using a tiered discount system, such as 10% off orders under $20, 15% off orders over $20, and 20% off orders over $50. You may also want to test offering a free gift with orders over a certain value or provide as an alternative to larger discounts.

Team up with other businesses

Competing with business behemoths like Amazon can feel like an impossible task for small businesses, but there are countless individuals out there who would rather spend their hard-earned money with you.

During the BFCM period, it can be a smart move to team up with other small businesses in your area, tapping into each other's audience to reach more people who want to buy from small, independent businesses.

Steal this idea

Team up with another local business that shares your target audience but doesn’t compete directly with you. Develop a strategy for shared promotion, such as joint social media posts or even bundled products from both businesses.

Give out VIP early access

We’ve all been there, we see something we want to buy, we wait patiently to see if it goes on sale on Black Friday, only to find it sold out in the first few hours of the sale.

Solving this issue not only drives loyalty, but can increase sales.

Steal this idea

Create a dedicated mailing list for early access to your BFCM sales and promote it between now and Black Friday.

Then, set up a hidden page so your products can be purchased at the discounted rate before they go live on the rest of the website. Send out an email anywhere from 2 to 24 hours before your sitewide sale goes live, giving list members early access via a link to the page.

Making the most of Black Friday and Cyber Monday

The BFCM period can make a huge difference to any small business. However, failing to prepare for it can lead to stress, confusion, and a lot of money being left on the table.

Taking time to plan your strategy ahead of BFCM will have a huge impact on your ability to make the most of this potentially lucrative period. This guide is a great starting point; use your experience and unique understanding of your niche to pick the methods that will work the best for you.

• Proofpoint detailed BlueMoon, an exploit kit chaining two Chromium flaws and one Windows bug
• Four groups, including China‑aligned TA412, used it loudly against NGOs, aerospace, and manufacturing targets
• Exploits were “patch‑gap” zero‑days; all flaws now patched

Four hacking groups, including some tied to the Chinese government, were seen using the exact same exploit kit in a span of a week, suggesting a certain “fear of missing out” among the criminals, experts have warned.

Security researchers Proofpoint have detailed BlueMoon, an exploit kit that leverages three vulnerabilities: two in Chromium, and one in older versions of Windows: Windows 10 (October 2018 Update), Windows Server 2019, Windows 10 2004, WIndows Server 2022, and the initial release of Windows 11.

The kit was first seen being used on August 28 2026, by a threat actor tracked as TA412, a China-aligned state-sponsored threat actor that was observed in the past targeting businesses using Microsoft SharePoint. TA412, also known as Violet Typhoon, used BlueMoon to “repeatedly target a small number of non-governmental organizations (NGOs), mining companies, and physical commodity trading firms in the United States.”

Soon after that, three others were spotted: UNK_LateNight, another China-aligned espionage group which targeted multiple US aerospace companies, UNK_DoubleCheck, a group going after a Vietnamese manufacturing entity, and UNK_QuietRacket, a threat actor taking aim at organizations across Singapore and Indonesia.

What all of these groups have in common is the fact that they did not try particularly hard to hide their activity. This is rather unusual, since a stealthy approach usually guarantees that a vulnerability can be exploited for longer.

Front running the Chromium supply chain train

BlueMoon takes advantage of three flaws, two in Chromium and one in older Windows variants. The Chromium vulnerabilities were found in V8, the JavaScript engine that the browsers use to allow applications to run efficiently. The first one is a “type confusion bug”, tracked as CVE-2026-85046, and assigned a severity score of 8.8/10 (high). The latter is a “sandbox escape” flaw, for which Google did not assign a CVE or a severity score.

The Windows bug, on the other hand, is tracked as CVE-2026-85880, and was given a severity score of 7.8/10 (high). It is described as a “heap-based buffer overflow” vulnerability in Windows Advanced Local Procedure Call, allowing malicious actors who can already execute code inside a low-privilege AppContainer to escape the sandbox and elevate privileges to SYSTEM. No additional user interaction is required.

Proofpoint has a theory as to why the crooks decided to be loud, instead of flying under the radar. Apparently, there is a very short window of opportunity between Google patching a Chromium vulnerability, and it being deployed to a browser such as Edge, or Brave, This window of opportunity also allows crooks to see how Google fixed a flaw, reverse-engineer it, and deploy an exploit before the browser is patched. This would mean that there is no time to be stealthy.

No time to hide

“Both V8 vulnerabilities were ‘patch-gap’ zero-days at the time of the observed activity,” Proofpoint said. “In other words, while they were known vulnerabilities already fixed in public upstream Chromium source code, they remained unpatched in the latest stable releases of Chrome and Chromium-based browsers available to the public. It is likely that the exploit kit developer used these publicly available Chromium patches to weaponize the browser exploit chain.”

Another important factor is Artificial Intelligence. It would seem that AI has made flaw detection significantly faster, reducing the barrier to entry and making threat actors move more loudly.

“A fully weaponized Chrome exploit chain has historically been a high-value, rare capability. BlueMoon was developed, deployed rapidly, and shared across multiple threat actors within days in a manner that had high detection signals. This may reflect a reduced cost and barrier to entry for this class of capability, as AI agents increasingly enable threat actor exploit development,” Proofpoint stressed.

All three flaws have since been patched, so make sure you’re running the latest version of both the OS and the Chromium browser.

Via Ars Technica

The internet is littered with hundreds of parental control apps that claim to give you complete visibility into your child’s online activities. However, in doing so, many of these apps invade your children’s private space and blur the lines into surveillance.

This is where HeyPolo stands out. Launched by the team behind Surfshark VPN, HeyPolo is a separate product that takes a consent-based approach to location sharing. It allows you to see the approximate or real-time location of your loved ones at any point.

The best part is that users can control who they share their information with, what information they share, and for how long. HeyPolo also says it will never sell, monetize or exploit users' location data, with location data encrypted while in transit.

If you’re looking for a lightweight, easy-to-use, and inclusive location-tracking application, HeyPolo might just be the right pick. Read on as we explore its various features and pricing, and compare it with the best parental control apps so that you can make an informed decision.

HeyPolo review: Plans and pricing

HeyPolo offers one of the simplest parental control pricing plans we've seen. The monthly plan costs $5.99/month, while the annual one is just $1.99/month. The only difference between the two plans is the duration of the subscription. Everything else is the same, meaning both plans come with everything HeyPolo has to offer.

One good thing is that a single plan covers your entire family, with unlimited devices and no per-person pricing. Exactly what Surfshark VPN is known for, too. You also get a 30-day money-back guarantee, which means that if you don't like how HeyPolo works, you can get a refund.

Next, although HeyPolo’s website says that it doesn't offer any free trial, that's not entirely true. Sure, if you purchase through the website, you don't get a free trial. But if you download the app on your iOS or Android device and purchase a subscription through the Apple App Store or Google Play Store, you do get the option of a 3-day or 7-day free trial.

HeyPolo review: Features

First up, there’s real-time location sharing, where you can view your contacts’ location details, which are updated every five seconds. Users can choose whether to share their exact location or a general area, giving them better privacy control.

Location sharing can either be left on indefinitely or for a specific time period. Users can also set arrival and departure alerts for specific places, such as school, work, or home.

There’s also an SOS emergency alert, where any family member can send an instant SOS alert that notifies the recipient of their real-time location. This could come in handy for elderly people living alone, children travelling solo at night, a car breakdown, or any other emergency situation.

You can also set up low-battery alerts, alongside location and emergency alerts, so you can know when a family member's phone is running low on power.

Similarly, there’s group location sharing, which allows users to share their location with several people at once within specific groups or circles.

What stands out is that while most location-sharing apps only allow the person who created the group to control it, HeyPolo gives every member a certain degree of control over what they share. Each plan comes with unlimited groups, and everyone can join for free. One person can belong to multiple groups simultaneously, each with different sharing settings.

You can choose between three different levels of location sharing: Exact Location, which shows your live location; General Area, which shows the neighborhood you're in; and Private Mode, which turns off location sharing completely. You can also choose to share your location for a one-time period or during repeating periods, rather than having it constantly enabled.

So, you’ll get a notification every time your child reaches school or leaves it. The same goes for workplaces too. You can also share trips with people in your group. This shows where you travelled, when you travelled, your route on a map, and the length of the trip.

Lastly, HeyPolo saves detailed location history, allowing you to check where you or any member of your group has been, including past routes. However, this history is stored for only seven days, after which it is automatically deleted.

HeyPolo review: Interface and in-use

HeyPolo is very easy to install. Simply download the application from the Google Play Store or iOS App Store, and you’re good to go. You only need to set up a profile, purchase a subscription, and then invite the family members or friends whose locations you want to track.

People can be invited either by sharing a link or using the short code displayed on the screen. Note that only one person in the group needs an active subscription; everyone else can join for free.

An important caveat worth mentioning is that you won’t be able to move ahead with the app until you opt for a free trial or purchase a subscription, which means there is no demo mode offered by HeyPolo.

However, once you’re inside, you’ll see an interface with a live map showing everyone in your group as icons. Each icon is labelled with a status such as “Active”, “Arrived Home”, “In Private Mode”, or “Left Work”. People who are on the move will have a tag such as “On the Move (47 mph)”, showing their current speed.

We also like how the reviews for the HeyPolo apps have been overwhelmingly positive. The app is rated 4.35 stars on Google Play and a whopping 4.9 on the App Store. Most users describe the setup as uncomplicated, and the application itself is minimal and low-clutter, which is consistent with HeyPolo’s positioning as a lightweight, consent-first alternative to surveillance-heavy family trackers.

HeyPolo review: Support

HeyPolo has one of the fastest support services we've seen across the industry. There are two ways to reach customer support: email and live chat.

We tried out the live chat function by clicking on the small chat icon at the bottom right of the screen. To our surprise, it wasn’t an automated AI chatbot where you have to fight through several menus before getting an answer.

A live human agent was there to help us almost immediately, and resolving any queries was as easy as typing them out and asking whatever we needed. Overall, the chat was very swift, and we got straightforward, to-the-point answers to our questions.

Just keep in mind that live chat support is available from 9am to 5pm CDT. But there’s a good collection of FAQs, blogs, and articles on the website should you need help with common queries outside these hours.

HeyPolo review: The competition

HeyPolo is very good at what it does – tracking the real-time location of your family members. However, it's pretty limited in functionality and does not extend to other parental control features. If that’s what you’re looking for, here are a few alternatives you can consider.

mSpy is one of the best keyloggers in the industry, offering extensive insights into your child’s device and allowing you to see every word they type on their devices.

It also comes with robust location tracking, just like HeyPolo. You can monitor various social media platforms such as Instagram, Snapchat, WhatsApp, and even TikTok, and block certain apps on your child’s phone that you do not approve of. There’s also a screen-recording function that captures the child’s phone activity at set intervals.

That said, mSpy is a bit intrusive and does not follow the same consent philosophy as HeyPolo. Not to mention, it can also be pretty expensive, costing $11.19 per month on the annual plan.

Life360 is perhaps the closest substitute to HeyPolo, offering similar location-sharing features. However, it comes with better ancillary features than HeyPolo, such as 24/7 roadside assistance, crash detection, emergency dispatch, and free towing for up to 50 miles.

You also get $1 million in reimbursement for stolen funds, medical assistance, stolen phone protection, and more, depending on the plan you choose.

Life360 also offers a 7-day free trial, allowing you to check out the application and see if it suits your needs. That said, it's again a bit expensive, with its Silver plan priced at $9.99 per month.

HeyPolo review: Final verdict

HeyPolo is a straightforward, no-nonsense location-tracking application that helps you know the exact location of your loved ones at any moment.

It's ideal for families that believe in complete transparency. HeyPolo allows members to choose what data they share, with whom, and for how long, giving them greater control over their privacy. Users can see real-time locations updated every five seconds, as well as location history going back up to seven days.

You also get a 3-day or 7-day free trial when you purchase a subscription on the mobile apps. Along with this, the subscription is very affordable, at just $1.99/month.

That said, HeyPolo isn’t a full-fledged child monitoring app and is limited to location tracking. If you need other features like social media tracking or screen-time management, mSpy can be a good alternative.

• We've also featured the best parental control software

If you’re looking for a comprehensive online security suite for your family that also includes parental controls, Bitdefender is one of the best options right now. It's a well-known security provider offering an award-winning antivirus program, along with a password manager, VPN, and identity theft protection.

But does its parental control offering, which is bundled with its Family plans and not available via a standalone subscription or even a dedicated app, compete against the best parental control apps?

Read on as we dissect the various parental control features it offers, what they cost, how easy the dashboard is to use every day, and what the top competitors offer.

Bitdefender parental control review: Plans and pricing

Bitdefender no longer offers its parental control features as a standalone subscription. You’d have to get one of its four family plans. But note that its entire suite of parental control features is available with each of these four plans.

The Total Security Family plan starts at $79.99 for the first year and covers up to 25 devices across five family members. At this price, the cost boils down to around $16 per member per year, which is more affordable than many other parental control applications. Not to forget that, for the price, you also get 24/7 real-time antivirus protection for up to 25 devices, as well as a password manager.

Next is the Premium Security Plan, which costs $99.99 for the first year and also comes with scam protection, AI-based scam protection, and a VPN with 4,000+ servers in 50+ countries. The Ultimate Security Family Plan and the Ultimate Security Plus Family Plan cost $119.99 and $199.99 for the first year, respectively.

The former comes with dark web monitoring and identity theft protection features such as an identity protection score and real-time breach notifications, while the latter also includes $2 million in identity theft insurance, three-bureau credit monitoring, and other bank, credit card, and investment alerts.

Bitdefender parental control review: Features

One of the standout Bitdefender parental control features is the ability to set screen-time schedules for your children, who would only be able to access their devices during the allowed time intervals.

Along with this, Bitdefender also offers several preset routines: Focus Time, Family Time, and Bedtime, which you can customize as per your child’s daily activity and schedule.

There’s also a pretty handy internet time management feature, which allows you to control how much time your child spends on the internet during a day. A nice addition is the ability to reward extra screen time for your children for responsible online use.

In addition to internet scheduling, parents can also choose to cut off internet access directly on their child’s device using Bitdefender’s Stop Internet feature.

Bitdefender also offers predefined age-appropriate filtering categories to help you filter out inappropriate content such as porn, betting, or online gaming for your children. As with screen time, you can also fine-tune these filters to better suit your child’s day-to-day use.

Apart from category-level filtering, parents can also allowlist or blocklist specific URLs individually, in case you want to go beyond the category selection.

Parents can set up to five child profiles, each with the child’s name, photo, and birth date. Bitdefender automatically applies age-appropriate filtering as soon as the profile is created, which parents can then edit as per their needs.

Along with this, there’s also location tracking, which helps you know where your child is on an interactive map at all times.

Lastly, there’s Safe Search, which lets you remove explicit and harmful results from search engines, as well as YouTube restrictions, which ensure your child only views age-appropriate videos on the platform.

However, note that content filtering and safe browsing require an active VPN connection to function, as per Bitdefender’s listing on the Google Play Store.

Bitdefender parental control review: Interface and in-use

Bitdefender parental control works across Android, Windows, iOS, and macOS. That said, Windows and Android get full, unrestricted enforcement of every feature, whereas macOS and iOS are noticeably more limited, largely due to Apple’s own platform restrictions.

For instance, iOS content filtering runs through Apple’s Screen Time and not Bitdefender’s own engine. Parents have to create a child account through Apple ID, then Bitdefender’s app hooks into Apple’s Screen Time restrictions rather than doing its own independent content filtering.

However, the setup is pretty simple. You just have to download the app on your child’s own device. Unlike other parental control applications, you can’t download the app on your child’s phone remotely – you’ll need physical access to the device to do so.

One thing worth noticing is that, after the 2025 overhaul, parental control is no longer configured within the Bitdefender Central mobile app, but from the Bitdefender Central web dashboard, which can still be accessed through the mobile application.

Once you’re on this dashboard, day-to-day use is genuinely easy. Bitdefender’s Activity Dashboard is filled with several graphs and charts, which allow you to check your child’s phone activity at just a glance.

For example, there’s a bar chart showing their daily internet time over the past few days, as well as a pie chart showing their current day’s internet usage along with their remaining time. The dashboard also gives parents visibility into what’s actually being blocked and when.

The Prevented Content Access panel is a running log of every link blocked on the child’s device over the past 7 or 30 days. This allows you to see whether your filtering settings are actually able to catch anything, or whether your child is repeatedly trying to search for restricted websites on their device.

Bitdefender parental control review: Support

Bitdefender offers one of the most extensive support options we’ve seen across the industry. For starters, there are hundreds of articles, blogs, and how-to explainers on its website, neatly categorized based on different products.

If that doesn’t solve your problem, you can contact Bitdefender support using 24/7 live chat, phone, or email. However, to do so, you’ll first have to go through a few selections, such as the exact help you need, the type of issue you’re facing, and the product you need help with.

The support section features various phone numbers for different regions. The email support requires you to enter your own email address along with the problem you’re facing and doesn’t hand out direct email addresses to the consumer.

Beyond all this, Bitdefender also has an active expert community where you can get answers and solutions from other users across the world. Overall, Bitdefender’s support infrastructure is pretty solid, and you’ll never be left wanting for answers.

Bitdefender parental control review: The competition

Bitdefender is billed as a complete security suite and not a standalone parental control app, which is why it does lack a few advanced, dedicated parental control features.

For instance, Parentaler offers social media monitoring, allowing you to view your child’s WhatsApp, Instagram, Telegram, Facebook, Snapchat, and TikTok accounts, and see what they’re posting or with whom they’re chatting.

There’s also text and call monitoring with Parentaler, allowing you to read your child’s incoming and outgoing texts, including deleted messages. We also like its keyword alert function, where you can get instant notifications if your child uses certain controversial words or slang in their conversations.

Another notable feature missing from Bitdefender is geofencing. While it allows you to check your child’s location, it doesn’t offer alerts based on allowed or restricted zones on a map.

If you’re looking for a more comprehensive all-in-one package, Aura is another strong option. It combines parental controls with identity protection, antivirus, VPN, and a password manager, making it more of a complete digital security solution than a standalone parental control app.

If you still need a standalone parental control app but need something more affordable, try Google Family Link, which is entirely free to use and offers comparable features such as screen-time management and content filtering.

Or, you could try FamilyTime, starting at just $2.41 per single device per month. In addition to screen-time scheduling and internet schedules, you can also block apps or games on a child’s device that you don’t approve of.

It also comes with an SOS panic button that your child can use during an emergency. It’s also a great choice for households with several children, thanks to its affordable family plans that can cover up to five devices.

Bitdefender parental control review: Final verdict

Bitdefender’s family packages are ideal for parents looking for all-round security protection for their children rather than a dedicated, comprehensive parental control app.

But there’s still lots to like. You get robust screen-time management and internet-time management features, along with predefined age-appropriate filtering categories and location tracking. That’s all in combination with an antivirus with real-time protection, a password manager, an unlimited VPN, and identity theft protection, depending on the plan you choose.

The pricing is pretty affordable too, with the monthly cost working out to around $1.33 per member on the entry-level plan. However, if you’re looking for more advanced features, such as social media monitoring, keyword alerts, or geofencing, options like Parentaler or mSpy are more suitable.

• We've also featured the best parental control software

Parental control applications help you keep tabs on and manage screen time for your children effectively. However, the market is flooded with thousands of applications, and picking the best parental control app for your specific needs can be quite a challenge.

This is why we’ve dug deep and conducted a comprehensive review of Parentaler – one of the most popular child monitoring applications today.

Along with extensive social media monitoring, the application allows parents to monitor their child’s texts across various platforms, track their location using GPS, and filter the kind of content they can view online.

But is Parentaler the right choice for your? Read on as we analyze its best features, pricing, and user experience, while also comparing it with the best in the industry.

Parentaler review: Plans and pricing

We’re not a fan of how Parentaler’s pricing isn’t prominently displayed on its website. You’ll have to answer a series of questions before you can find out how much it costs.

We’ve done some digging to find out that its monthly plan costs $42.69, whereas the quarterly plan comes at $24.40 per month. However, its most affordable plan is the annual package, costing $10.17 per month, billed annually at $121.99.

The good thing is that there aren’t any plans to choose from, other than the subscription length. All the three packages offer the same set of features, which is everything Parentaler has to offer. This is the kind of simplicity we also lauded in HeyPolo – Surfshark VPN’s own parental control app.

What we also didn’t quite like about Parentaler is that it doesn’t offer a free trial or even a demo, which means you’ll have to buy a plan to see how it works for you. That said, the company does provide a 14-day refund policy, so if the app doesn’t meet your expectations, you can claim a full refund.

Parentaler review: Features

Parentaler offers three main categories of functions with its child monitoring app: text and call monitoring, location monitoring, and content filtering. Let’s dive into each of them.

Parentaler allows you to monitor various platforms such as WhatsApp, Facebook, Instagram, Snapchat, Telegram, Viber, Kik, and TikTok. Parents can also view messages their child sends and receives, calls made, links shared, and any media they might have sent or received.

Besides this, Parentaler also lets you keep an eye on the kind of content your children are sharing on a particular social media platform, say Instagram or TikTok, and this includes keeping you aware of their posts, stories, and more.

Its SMS and text monitoring is also pretty robust and works with iMessage on iPhone, allowing you to see both incoming and outgoing texts, including deleted messages. Of course, you can also monitor call logs on both platforms, including a list of contacts.

Text monitoring also covers all major social media platforms. One caveat worth noting is that instant-message tracking, such as Facebook, WhatsApp, Viber, and Skype, along with Gmail and Wi-Fi network monitoring only works on Android if it’s rooted. That’s a bit of a bummer, in our opinion.

Next up is its GPS tracking technology, which allows you to check your child’s location right from the app’s dashboard on your device. You can even view detailed information such as the address, timestamps, and coordinates.

Parents can also mark allowed and restricted zones on a map directly from the Parentaler app and get instant alerts if their child enters or leaves these geofenced areas. You can also set screen-time limits with Parentaler, designating time limits for certain apps such as social media or games.

On the flip side, you can also schedule downtime, during which your child can only use certain apps. For instance, you can set up downtime during school hours where only learning apps might be accessible to your kids.

Along with this, there’s a dedicated Focus Mode on Android, which can pause distracting apps at preset times. You can also view detailed time reports to see where your child is spending most of their time.

Parentaler also offers handy content-filtering options, allowing you to block content relating to specific topics such as adult websites, social media, or any other objectionable content you don’t want your child to access.

The app allows you to view your child’s detailed browser history, helping you understand the kind of content they’re viewing online.

Additionally, parents can set up various keyword alerts, which might include commonly used slang or objectionable words. If your child ends up using them in their conversations, you’ll be able to view the alerts on the application’s dashboard.

Parentaler review: Interface and in-use

Parentaler works for Android, iPhone, and iPad, all of which come with a central dashboard accessible from any device or browser.

Parentaler’s compatibility policy page says that you don’t need physical access to the iPhone device to install the application if you already have the iCloud credentials and two-factor authentication hasn’t been activated.

However, if two-factor authentication is enabled or iCloud backup is disabled, you’ll need physical access to install the app on the target device. With Android, you’ll compulsorily need physical access for app installation.

Once the application is up and running, you’re greeted with an intuitive dashboard that lays out everything from call logs, social media monitoring, text messages, web history, and your child’s location on a single page. You can access various settings from the same dashboard and fine-tune them according to your requirements.

Overall, the platform is indeed very easy to use, with no major quirks or learning curve. That is, once you’ve successfully gotten past the installation hurdle.

Parentaler review: Support

Parentaler’s support options were honestly disappointing. We could only locate a “Contact Us” form on its website, where you need to enter your name, email, question, and message, and then wait for a response from Parentaler’s team.

Noticeably, the company’s marketing copy says that a 24/7 live chat option is available in various languages. However, we couldn’t locate any live chat button while navigating through its website.

It might be possible that you get a live chat option after you’ve purchased a plan, but the lack of proper support before committing to a purchase could be a major drawback for some parents. There’s no phone or dedicated email support either.

Parentaler review: The competition

While Parentaler is a solid parental monitoring and parental control app, there are a few features it lacks.

For instance, mSpy offers features like an anti-installation alert, where if your child uninstalls the parental monitoring app, you’ll get an instant notification. mSpy also offers remote camera and microphone access, allowing you to micromanage your child’s phone usage.

That means mSpy is great for anyone who needs a higher degree of control over what their child uses their devices for. It’s also one of the few parental control apps to offer extensive keylogging features, allowing you to see every word typed on your child’s device.

Another major shortcoming with Parentaler is that it doesn’t offer family plans. Even its annual plan, which costs around $121.99 per year, covers only a single device. This means that if you have more than one child to cover, you’ll have to buy separate subscriptions, which can quickly become expensive.

In comparison, Bitdefender offers value-for-money family plans, which start at just $79.99 for the first year, covering five accounts and 25 devices. Along with parental control features such as content filtering, internet time limits, GPS location tracking, and activity reports, you also get extra online protection tools, such as an award-winning antivirus, password manager, VPN, and decent identity protection features.

Parentaler review: Final verdict

Overall, we found Parentaler to be a decent parental control app for monitoring your children. It covers all the major bases when it comes to features, along with comprehensive text and call monitoring across various social media apps. You can also view extensive call logs and contact details on your child’s phone.

Its GPS tracking is also pretty well done, allowing you to set predefined geofencing limits. There are robust content-filtering options, so parents can keep a check on what their child views online.

That said, Parentaler doesn’t offer any family plans. While its annual plan is very reasonable at $121.99, this can quickly become expensive for households with multiple children.

It also misses out on certain features, such as remote camera or microphone access. Additionally, it doesn’t offer great support options, with only a Contact Us form available on its website. If you’re looking for more affordable or multi-device plans, Bitdefender and Mobicip can be good alternatives.

• We've also featured the best parental control software

• Huntress warns of phishing campaign abusing Adobe branding with browser‑in‑the‑browser trick
• Victims lured into fake update pages, unknowingly installing rogue ScreenConnect clients
• Attackers gain persistent remote access; defenders urged to restrict RMM installs and monitor IoCs

Security researchers Huntress have warned of an ongoing phishing campaign that abuses Adobe’s brand while deploying clever browser-in-the-browser (BitB) techniques to trick the victims.

The goal is to deliver rogue ScreenConnect clients which would grant the attackers persistent access to target devices.

In its report, Huntress says it could not find the lure itself and thus could not report what the scam looks like. However, it saw the victims clicking on a link in the email and then being redirected to a typosquatted domain https[://]adoube[.]vu that spoofs an Adobe landing page.

We heard you like browsers…

This is where we get to the scam’s unique twist. Usually, phishing lures would simply redirect victims to a malicious website which could be identified simply by looking at the address bar. If the domain differs from the legitimate one, the scam falls apart. To work around that problem, scammers came with a solution called “browser in the browser”.

Using either HTML, CSS, or JavaScript, the crooks would create an entire fake browser window, including the address bar, URL, padlock icon, and more, inside the actual webpage content itself. Therefore, if the victim isn’t all too careful, they might look at the fake address bar, see a legitimate URL, and believe they are visiting the correct website.

In this fake browser window, the fraudsters display a blurred .PDF document. Overlaid is a message saying the documents are “secured” and created with “the latest version of Adobe.” The only way to read them, the message continues, is to “update or download Adobe PDF Reader.” Expectedly, there is a big “View Files” button just under the notification, leading to a different, equally fake BitB page, showing the download progress. In the background, something gets downloaded.

Victims might think they’re getting a PDF reader, while in reality they’re getting a rogue version of ScreenConnect.

Poisoned ScreenConnect instances

On its own, ScreenConnect is not malware, or dangerous in any other way. It is a legitimate remote access and support software, similar to TeamViewer, AnyDesk, or Remote Desktop, allowing IT professionals remotely connect to and control computers and other devices. These variants, however, are tainted to enable threat actors to obtain persistent remote access to their targets’ endpoints, Huntress explained.

“The first initial remote client installed was the rogue ScreenConnect Client configured to communicate with instance-uxh86b-relay[.]screenconnect[.]com. The attacker used a legitimate ScreenConnect Trial Relay domain to further avoid detection,” the researchers said. “This initial malicious ScreenConnect Client used the native Windows command shell and curl to retrieve and install a second malicious ScreenConnect Client configured to communicate with attacker-controlled IP. Both clients established service-based persistence for continued remote access.”

After installation, the attackers used the second ScreenConnect session to run HideCursor.exe, an executable, as the name suggests, that helps the attackers hide their mouse activity.

Huntress’ researchers don’t know what the endgame is, since the threat actors were spotted and shut down in this stage of the attack. The researchers also did not share the details about the target, such as the size of the organization, or the industry it operates in. Therefore, it is impossible to even speculate on the nature of the attack and if the threat actors aimed to install ransomware.

Still, the researchers stressed the importance of training employees to “treat unexpected software update prompts and file-viewing pages with caution”, and to make sure they know how to verify downloads through trusted channels. IT teams should also restrict who can install remote-management tools, maintain an approved inventory of RMM software, and alert on new or unapproved ScreenConnect clients, unusual relay connections, and executables launched from the user Downloads folders.

Finally, businesses should monitor for Indicators of Compromise (IoC) listed on this page.

Whether it’s helping your kids improve their cyber hygiene, restricting internet access for discipline or productivity purposes, or simply keeping a watchful eye on their internet activities, a parental control app has become a much-needed defense against today’s worsening digital threat landscape.

FamilyTime is one such popular child monitoring application that gives you a granular view of the applications and websites your child visits and allows you to manage their screen time with active limits.

In this review, we’ve taken a deep dive into FamilyTime Premium’s best features, plans, user experience, and customer support to help you decide if it’s the right choice for you. Read till the end because we also compare it with some of the best in the business.

FamilyTime review: Plans and pricing

FamilyTime Premium offers a pretty straightforward pricing structure. There are three plans for you to choose from: My Family, My Family 3, and My Family 5. While the first plan covers only one device, the other two cover three and five devices, respectively.

The single-device plan costs $2.41 per month, billed at $29 annually. My Family 3 costs $4.08 per month, billed at $49 annually, while My Family 5 costs $5.75 per month, billed at $69 annually.

The good news is that there are no feature differences between the three plans – the only difference is the number of devices they cover. This means you get everything FamilyTime Premium has to offer, even with the basic $2.41 plan.

Before you commit to a paid plan, you can try FamilyTime Premium’s 3-day free trial, where you can test various features to see how they work.

However, note that the free trial isn’t particularly extensive and lacks certain features, especially social media monitoring on platforms such as WhatsApp, Instagram, TikTok, Twitch, and Signal. Similarly, you can’t read your child’s text messages or view their calls during the free trial.

That said, it’s still one of the most comprehensive free trials we’ve seen, even if it’s for a very limited time. That makes it worth trying if you’re considering FamilyTime and want to explore its features to understand whether it’s right for you.

FamilyTime review: Features

FamilyTime Premium offers a slew of features to help you manage your child’s screen time and phone usage. One of the best is its Balance feature, which gives parents a great degree of control over how much time their child spends on their device.

For starters, parents can define daily usage limits along with individual app limits. There’s also Screen Schedule, which lets you schedule limited screen time for your child during different parts of the day.

Next, the Scheduled Internet feature offers a finer level of control, letting you block internet access on your child’s device for a specific period. They’ll still be able to use non-internet apps.

What we liked the most, though, is its Time Bank function, which allows a child to carry forward their unused daily allowance. For instance, if you’ve allowed five hours of screen time during weekdays and your child uses their phone for only three hours on a particular day, they can carry the remaining two hours forward for later use.

Lastly, there’s Family Pause, which can immediately lock your child’s device in case of an emergency. In addition to extensive screen-time controls, FamilyTime also offers several safety features. For example, you can outright block apps or games that you don’t approve of on your child’s device, or block inappropriate and age-sensitive websites.

On the flip side, you can choose to allow your child to access only approved applications and games and enable search filters to block explicit websites, videos, and images.

There’s also a handy SOS Panic Button that your child can use during an emergency. When they activate it, parents receive an immediate SOS alert notifying them that their child needs help.

FamilyTime also offers a pretty nifty PickMeUp Request feature, which sends real-time reminders and lets you plan your child’s pickup on a day-to-day basis.

On top of this, FamilyTime offers several visibility features, giving you granular insights into your child’s phone activity. For instance, you can view all the contacts on your child’s device, read their text messages, and access their call logs.

Moreover, you can check the list of installed apps, view your child’s web history, and even monitor their social media activity on platforms such as WhatsApp, Instagram, TikTok, Twitch, and Signal.

Lastly, there are location-tracking features as well, which can help you locate all your family members on a live map at a glance. You can also define specific areas on the map and receive instant alerts whenever your child enters or leaves a designated zone.

FamilyTime review: Interface and in-use

FamilyTime works on both Android and iOS. Unlike some other apps that claim they can be installed remotely using iCloud credentials, FamilyTime Premium makes no such claim.

Parents will need physical access to their child’s device to download the FamilyTime Junior app, while installing the FamilyTime Dashboard app on their own device. Once that’s done, the two applications are linked by scanning a QR code.

On Android, parents will need to grant several permissions, such as overlay access and device administrator rights, and allow installations from unknown sources for all the application’s features to work.

Parents will also need to set a four-digit PIN during installation to prevent the child from removing or disabling the FamilyTime Junior app.

A good thing about the platform is that it gives children greater visibility into their own limits, allowing them to check their remaining screen time, send SOS alerts, review their Time Bank balance, and see which applications are blocked.

The dashboard itself is very intuitive and easy to use. The layout is clean and simple, and parents can quickly navigate through the various features with just a few clicks. You’ll also appreciate that the setup tutorial is very detailed. That said, the installation process won’t take more than a few minutes.

As with any child monitoring application, users might encounter occasional inconsistencies in FamilyTime’s performance, especially on iOS devices, which operate within a more closed ecosystem. That said, both applications generally work well and don’t come with a steep learning curve.

FamilyTime review: Support

FamilyTime Premium has done well when it comes to customer support. For starters, you can access 24/7 live chat through the website even before making a purchase. That lets you iron out any concerns or queries you might have. This was, in fact, one of our gripes with Parentaler, which didn’t offer live chat, at least not before purchasing a plan.

Once you’ve subscribed to a FamilyTime plan, you also get access to 24/7 Premium in-app live chat as well as 24/7 email support, which should be more than enough for most queries or issues you might have.

There’s also a rich collection of how-to articles and FAQs that provide answers to commonly asked questions. We also like that there’s a detailed collection of step-by-step installation guides and walkthrough articles covering various core functionalities of the platform.

FamilyTime review: The competition

mSpy offers more advanced features, such as keylogging, which helps you view every keystroke your child types on their device, including deleted messages and typed URLs. There’s also a keyword alerts function that can notify you whenever specific keywords are typed, which isn’t typically possible with a standard keylogger.

Furthermore, mSpy offers broader monitoring coverage across several social media platforms, including Snapchat, Tinder, Facebook Messenger, and Viber. There’s also AI chatbot monitoring, which lets you see what your child types into chatbots such as Gemini or ChatGPT.

That said, mSpy is pretty costly, starting at $11.67 per month per device on the annual plan. This can become very expensive very fast if you have a household with multiple children.

Qustodio is another strong alternative, particularly if you want a more traditional parental control app with extensive monitoring and filtering tools. It offers screen-time limits, app and website blocking, location tracking, and social media monitoring, while also supporting a wide range of platforms including Windows, Mac, Android, iOS, Chromebook, and Kindle.

If you'd like alternatives that, like FamilyTime, take a more inclusive approach, you can check out applications like Bark or HeyPolo.

Bark, for example, explicitly addresses children during setup to explain that the goal is safety, not spying. It also uses an AI alert system to flag genuine risks such as predators, cyberbullying, or self-harm, rather than handing parents a full transcript of everyday conversations for them to go through.

FamilyTime review: Final verdict

We’d recommend FamilyTime Premium for several very good reasons. For starters, it’s one of the most inexpensive parental control applications out there, with plans starting as low as $2.41 per month for a single device. Even its multi-device plans are pretty affordable, starting at just $4.08 per month.

Next, the platform offers a relatively transparent Junior app for your child’s device, where they can view their own screen time, check blocked apps, and send SOS alerts when needed. This is in stark contrast to the closed monitoring environment offered by apps such as mSpy.

You also get 30-day activity reports, location tracking and geofencing, social media monitoring, and a free trial with nearly all the available features. However, if you need even more features, such as keylogging, keyword alerts, or remote camera access, consider splurging on mSpy.

• We've also featured the best parental control software

• Bitdefender finds Google Play Early Access platform could give malicious apps an easy breeding ground
• User reviews and ratings are not publicly displayed, removing the ability for users to evaluate if an app is legitimate
• Games, casinos, and utility apps are being loaded with malicious packages and downloaded thousands of times

Google has unveiled an Early Access program for the Play Store, allowing developers to list early-access apps for testing and feedback.

While great for smaller apps looking to weed out any wrinkles in their apps, Early Access also offers a lucrative way for malicious actors to lure users into downloading apps that look legitimate, but can hide malicious packages inside.

However, new research from Bitdefender notes the fact that the Early Access program hides public reviews and ratings could lead to an app ecosystem filled with scams, fake casinos, and malware-laden packages masquerading as legitimate software.

Early Access is filled with dangerous apps

When looking for apps on the normal Play Store, one of the first things users are greeted with is an app’s rating. For fake or malicious apps, users can quickly evaluate whether or not to download the app thanks to the star rating and user reviews. While there is the potential for nefarious developers to fake reviews and ratings there is at least some ability to check if an app is legitimate.

But the Early Access system does away with public user ratings and reviews entirely. There is effectively no way for users who fall victim to a fake app to publicly warn other users not to download the app.

Add to this equation that ability for developers to show off their apps through sponsored Facebook and TikTok videos, offering outrageous rewards or using deepfakes of celebrities to entice users to install their apps.

This is especially true for fake gambling apps. Bitdefender has spotted numerous adverts for casino apps using deepfakes of well known celebrities such as Cristiano Ronaldo, Jason Statham, and Andrew Tate. These apps actively push users into the Google Play Early Access store, or direct to the apps website.

Other listings mimic well-known apps, adding financial incentives for downloading such as doubling the money you invest every time you complete a task or overcome an obstacle. Other apps take advantage of the hype for upcoming game releases, such as Grand Theft Auto V and VI. These apps often use screenshots from the actual games in order to appear legitimate.

When detected as illegitimate, these scam apps will often be deleted before being replaced by exact copies that perform the same malicious functions. Some illegitimate apps have been downloaded thousands of times, Bitdefender said, but many remain available on the Google Play Early Access store.

But the scam apps aren’t limited to games and casino apps. Bitdefender also saw numerous apps offering utility functions such as QR code scanners or PDF readers. In some circumstances, the exact same apps were listed multiple times by different developers - likely to expand the reach and maximize the number of downloads.

Bitdefender notes that Google Play’s reputation relies on users being able to trust the apps they are downloading, but the Early Access program removes almost every way users can detect a malicious app before installing.

• Matt Mullenweg accuses Automattic board of conspiring against him
• Former CEO is now in a period of paid leave
• His role at WordPress.org is currently unaffected

Automattic CEO and founder Matt Mullenweg has been placed on a paid leave of absence by the company's board, but while this is currently being seen as a temporary measure, Automattic has not publicly stated how long the leave will last.

The reason for the board's decision remains unclear, but TechCrunch reports that some employees were "ecstatic" or "relieved" at the decision.

However, Mullenweg is clearly unhappy with the decision, alleging that the board gave him 50 minutes' notice before the meeting and insufficient time to seek legal counsel.

Automattic CEO Matt Mullenweg on paid absence

Mullenweg remains a member of Automattic's board, but claimed in a company-wide Slack message seen by TechCrunch that CFO Mark Davies had "conspired" with board members Ann Dunwoody, Toni Schneider and Sue Decker to remove him temporarily. Mullenweg, a board member, voted against the change but was, of course, outvoted. Davies has been appointed interim CEO in the meantime.

"I won’t be able to make the [meeting] tomorrow. @Mark Davies has conspired with @Ann Dunwoody, @Toni, and @Sue Decker behind my back and they voted to put me on a paid leave of absence," he said.

"Matt remains the leader of the WordPress project and I remain Executive Director of WordPress. Our teams, priorities, and work continue as planned," WordPress.org executive director Mary Hubbard wrote. WordPress.com (an Automattic product) runs on WordPress.org.

While the reasons have not been publicly shared, Mullenweg hasn't been short of the odd high-profile incident in recent years. He accused WP Engine of profiting from the WordPress ecosystem, which resulted in WP Engine suing Automattic and Mullenweg.

He also offered insiders who disagreed with his direction an exit package worth either six months' pay or $30,000, mounting internal tensions.

"Matt Mullenweg is currently on leave from Automattic," a company spokesperson told us in a statement. "Mark Davies, Automattic’s CFO, will lead the company as interim CEO. The Board has full confidence in Mark's leadership and in the team's ability to execute against the company's priorities."

• New Incogni research has found that the privacy preferences of Americans don't really align with what they say
• Many of those with 'nothing to hide' will happily snoop on the phones of their family members and partners
• But those same people tend to get twitchy when handing over their phone to strangers, or their data to the government

A new survey by Incogni has found almost half of Americans say they have ‘nothing to hide’ when it comes to their privacy, but almost immediately change their perspective when it comes to strangers looking at their phone - or sharing their private messages with the federal government.

Even when offered substantial sums of money, many of those with nothing to hide still wouldn’t hand over their devices, and their personal habits such as covering cameras or installing privacy screens show a level of contradiction in what they say, and how they behave.

Of those surveyed as part of Incogni’s research, Gen Z were the most likely to say they had nothing to hide at 57%, whereas just 26% of Baby Boomers offered the same response.

Americans don't want strangers or the government accessing their phones

As it turns out, those who fell into the 45% of respondents who said they had nothing to hide were more likely to snoop on other people's devices. In fact, when polled on whether they looked at other people’s devices in public, people with nothing to hide were double as likely (42%) to snoop compared to their something to hide counterparts (27%).

Those with nothing to hide were also more likely to look through the phones of their partners and family members without permission. In fact, 41% who fell into this category admitted to snooping on their partners phones, and 35% had looked through their family members' phones.

Despite claiming to have nothing to hide, 39% still covered their cameras with tape, stickers, or sliding covers - especially those of Gen Z. Over a quarter of respondents also said that they deliberately obscure their personal information when signing up to online services with fake names, false dates of birth, and masked emails.

But the most interesting data comes from paying for privacy. 41% of those who said they have nothing to hide would pay more for a product if it was better for their privacy. But when offered money in return for handing over their phone to a stranger, 60% of respondents refused any amount of money. 20% said it would take an amount of $1 million or more, and just 6% offered access for $100 or less.

When breaking these numbers down by group, 58% of those with nothing to hide would not let a stranger access their unlocked phone for any amount of money.

Even when offered three months of their salary, just 26% of respondents would hand over their SMS, chat-app, and email messages with law enforcement. This number drops to 25% with Big Tech companies, 24% for local government, and a staggering 21% for the federal government.

Incogni theorizes that those who said they have nothing to hide may be equating privacy with secretiveness and secretiveness with guilt. It may also be true that many people fail to see how their seemingly innocent data, such as an email address or phone number, should be kept private.

As numerous data breaches have shown, the leaking of such information can lead to phishing emails, scams, and general harassment or doxxing. Incogni says that people fail to see why this information should stay private, especially in an era when social media and the websites we use hoover up as much information as possible to be sold to advertisers and third-parties.

“The findings suggest that the “nothing to hide” argument may therefore say less about how much people actually value privacy than about how difficult it is to see the consequences of losing it,” the report concludes.

• IBM and NASA launch open source AI model to help further lunar research
• Researchers will be able to better analyze petabytes of Moon data from last five decades
• IBM and NASA also release dataset for public usage and analysis

IBM has launched a new open source AI model it hopes will help spur on NASA researchers in their push to get humanity back to the Moon.

The new NASA-IBM Lunar Foundation model, available on Hugging Face, will allow researchers to analyze decades of lunar observation data, and identify geological features that are critical to understand for NASA as it looks to build a sustained human presence on the Moon.

The model has been trained by IBM and NASA researchers on a huge, multimodal NASA dataset, which will also be released alongside the model, providing wider access to the latest advanced AI systems in a bid to push on wider progress in lunar exploration.

To the Moon (and beyond)

At its most obvious level, the model will allow a much easier way for researchers to study petabytes of data gathered on the Moon's surface for potentially hazardous locations such as ice deposits or craters.

Currently, scientists often rely on manual analysis or low-resolution, task-specific AI models, which can be not only computationally demanding, but also often lack the accuracy needed for detailed geographic analysis.

The new release will now mean that instead of needing to build a new AI model for every potential issue, scientists can now adapt a single foundation model to investigate a range of lunar geologic features.

The model has already proved useful, identifying craters and volcanic features far more accurately (see below) and significantly reducing errors in locating potential ice deposits.

IBM, which has worked with NASA for over five decades, including on the Apollo missions, believes the model could help future astronauts navigate safely and even find essential resources, as well as helping scientists better understand the Moon's geological history.

“Uncovering the mysteries of the Moon requires an ability to learn from an extraordinary volume of scientific data,” said Juan Bernabe-Moreno, Director of IBM Research Europe, UK and Ireland.

“The NASA-IBM Lunar Foundation Model gives scientists a foundation to explore the Moon at scale, connecting observations across instruments, revealing patterns that are difficult to see in isolation, and providing an open platform the global research community can build on.”

The release of the dataset will mark the first time a unified, publicly-available cache has been made available and ready for machine learning. It brings together over 30 spatially aligned layers from nine instruments across four missions, including tens of thousands of images and maps showing unique geophysical properties of the lunar surface from NASA’s Lunar Reconnaissance Orbiter (LRO) and NASA’s GRAIL mission.

Identifying lunar ice deposits could be particularly vital, as the presence of both water and oxygen will be crucial to establishing a human base on the Moon, and even creating rocket fuel for future Mars missions.

Scanning the Moon's volcanic features, known as Iregular Mare Patches, can allow scientists to better understand the Moon's volcanic history and thermal evolution, as well as helping identify potential sites for landing and other surface operations.

Finally, studying the Moon's craters can offer a wealth of information on its history, including the age of different terrains, their geology, and even the chemical composition of the early lunar interior - as well as again helping to identify safe landing sites without hazards such as steep slopes and boulders.

• Lenovo offers up Eva Longoria to help solve your SMB woes
• Desperate Housewives star is an entrepreneur and serial investor herself
• Users can submit questions now, with Longoria answering on her Instagram page

If you're looking for that extra bit of business support and advice, you might seek out a mentor, someone who's been there and done it all - but how about a well-known TV and film icon?

Lenovo has teamed up with Desperate Housewives star Eva Longoria, who both owns her own business, and has invested in companies involved in everything from food and beverages to media, to offer her unique advice on the issues affecting fellow entrepreneurs.

Entrants will be able to submit their burning questions to the star via a special phone number or through CallEvaNow.com, with Longoria providing assistance at a later date.

Call Eva

The "Call Eva" idea is part of Lenovo’s global Backing Every Business program, which looks to "connect entrepreneurs across the world who are facing similar business challenges, creating peer-to-peer relationships where they can exchange experiences, perspectives and practical advice".

Entrepreneurs in Brazil, France, India, Japan, Mexico, the United Kingdom and the United States will be able to take part, with Longoria selecting the most pressing to answer on her personal Instagram feed on September 16, 2026.

“One of the biggest lessons I’ve learned as an entrepreneur is that you don’t have to have all the answers yourself. Some of the best decisions start with asking someone you trust for insights, a fresh perspective or even just reassurance that you’re heading in the right direction,” Longoria said

“That’s what I love about Lenovo’s Backing Every Business initiative and now Call Eva. We’re giving entrepreneurs a place to bring the questions they’re really wrestling with, because chances are, another business owner has faced similar dilemmas. If something I’ve learned along the way can help someone better navigate a challenge, make a tough decision or take their next step with more confidence, that’s incredibly meaningful to me.”

“Technology can unlock enormous opportunities for small businesses, but technology alone doesn’t build a business. Entrepreneurs also need access to trusted advice, shared experiences and a community that understands the realities of building and growing a business,” said Emily Ketchen, Senior Vice President and Chief Marketing Officer, Intelligent Devices Group and International Markets, Lenovo.

“Backing Every Business brings those pieces together and Call Eva gives us a new avenue to extend that support while listening directly to entrepreneurs about the challenges they’re navigating. By understanding their questions, we can continue to find meaningful ways to help small businesses move forward and grow with confidence.”

Artificial intelligence is rapidly changing how software is designed, written and tested. Development teams can now use AI to generate code, produce test cases, identify likely defects and automate repetitive quality assurance (QA) tasks at a speed that would have seemed unrealistic only a few years ago.

That acceleration is valuable. But it also creates a new QA problem.

When the same class of technology is used both to create software and to decide whether that software is correct, organizations risk building a closed loop of confidence. An AI model may generate code based on a particular interpretation of a requirement, then generate tests based on the same interpretation. If the original assumption is wrong, both the code and the test can agree with each other while still failing the user.

AI, in other words, cannot be the sole judge of its own work.

This is not an argument against AI-assisted development. Errors, hallucinations and inconsistent outputs are expected features of a technology that is still maturing. The more important question is whether organizations have independent mechanisms capable of detecting those failures before they affect customers, employees or critical business processes.

Shared assumptions create shared blind spots

Traditional software assurance already recognizes the value of separation between development and testing. The people who build a system understand it deeply, but that familiarity can make it harder to challenge the assumptions on which it was built. Independent testers approach the same system from a different perspective, looking not only at what the software was intended to do but also at how it might fail.

The same principle applies to AI.

Models trained on similar data, prompted with the same requirements or operating within the same development environment may reproduce the same blind spots. A model generating a feature may overlook an ambiguous requirement, an unusual user journey or a device-specific edge case. A second model asked to test that feature may reinforce the omission rather than expose it.

This becomes particularly risky when AI-generated tests are treated as evidence of quality, simply because they run successfully. A passing test confirms only that the test’s conditions were met. It does not prove that those conditions were complete, independent or meaningful.

The result can be a technically consistent system that is practically wrong.

The most fundamental tension between generative AI and formal software assurance is repeatability. Modern AI coding agents are designed to generate and adapt. I.e. given an apparently identical objective, they may choose different steps, use different tools, interpret context differently and produce different code or tests.

This is not always because the system is learning during each run, it is also a consequence of probabilistic generation, changing context and evolving models. That variability can be highly useful when teams are exploring solutions, but it conflicts with the core discipline of QA. I.e. a controlled test must be capable of being re-run against the same version, in the same conditions, with defined expected results and evidence of a clear pass or failure.

Without that control, organizations may have AI activity rather than assurance, and outputs that look plausible, but cannot be reliably reproduced, measured, audited or defended.

Functional success is not user success

Many automated tests evaluate software through code-level signals. They check whether a service returns the expected response, whether a page contains a particular element, or whether a button can be located through an identifier or selector.

These checks are important, but they are not the same as validating the user experience. A test may confirm that a button exists even though it is hidden behind another element. It may verify that a field contains text without recognizing that the text is truncated, displayed in the wrong location or rendered in a way that makes it unreadable.

It may find a menu that is technically present but inaccessible on a smaller screen. It may confirm that a transaction completed while missing the fact that the confirmation shown to the user contains the wrong amount, account or status.

From the system’s perspective, the software may have behaved correctly. From the user’s perspective, it has failed.

This distinction matters because modern digital services increasingly depend on complex combinations of application code, browser behavior, operating systems, screen sizes, remote desktops, virtual environments and third-party components.

A change in any one of these layers can alter what appears on screen without necessarily causing a conventional functional test to fail. Testing must therefore examine not only what the underlying system reports, but what the user actually sees and can do.

Why visual validation matters

Visual user-interface validation provides an independent perspective because it tests the rendered outcome rather than relying solely on the application’s internal structure.

That independence is significant. Code-based tests often depend on knowledge of the system they are testing: object identifiers, document structures, accessibility labels, APIs or expected data responses. Visual validation can assess the final interface as presented to the user, including layout, positioning, content, state and usability across different environments.

Visual validation is not a separate phase of software assurance, nor a replacement for functional, integration, security, or performance testing. Instead, it applies across every assurance division wherever a user interface is designed, built, changed, or tested—from individual components and unit-level checks through integration, system testing, and user acceptance testing.

Functional testing confirms that an operation completed correctly; visual validation confirms that the result is displayed accurately, consistently, and remains usable. Reliable assurance requires both throughout the development lifecycle.

The need becomes more pronounced as AI generates a larger proportion of software changes. AI tools can produce code quickly, but speed increases the volume and frequency of change that quality teams must assess. Without an assurance layer focused on the rendered experience, defects can move through delivery pipelines faster than organizations can recognize them.

Visual validation acts as a check on the gap between technical execution and human experience.

Repeatability turns automation into evidence

AI is effective at generating ideas, scripts and possible test scenarios. Its outputs, however, can vary between runs. A model may interpret the same instruction differently depending on context, configuration or probabilistic variation. That flexibility can be useful during exploration, but it is not enough for formal assurance.

A test used to approve a software release must be repeatable. The same inputs should produce the same procedure, the same checkpoints and the same criteria for success or failure. Teams must be able to establish what was tested, when it was tested, which version of the application was involved and why the result was accepted.

AI is effective at generating ideas, scripts and possible test scenarios, but generative and agentic systems are not inherently deterministic controls. Their output can vary because of probabilistic generation, prompt and context changes, model updates, retrieval results and the decisions made as an agent selects tools and plans its next action. For software development, this flexibility can accelerate discovery. For formal assurance, it creates a material control problem.

A test used to approve a software release must be repeatable and auditable. The same application version, inputs and environment should produce the same defined procedure, checkpoints and success criteria, allowing teams to establish precisely what was tested, when it was tested, which version was involved and why the result was accepted.

Only then can passes and failures be measured over time, defects reproduced, and evidence relied upon in an audit or regulated setting.

This is the difference between using AI to accelerate test creation and allowing AI to become the test authority.

AI can help teams draft test cases, identify gaps and reduce the effort required to automate routine workflows. Once a test is adopted as part of an assurance process, however, it should become controlled, deterministic, traceable and auditable. Its expected results should be explicit. Changes should be reviewed. Failures should be reproducible. Evidence of passes and failures should be retained.

Without those controls, an organization may know that an AI system performed ‘some testing’ but be unable to demonstrate precisely what happened. That is a weak basis for operational confidence and an even weaker basis for accountability.

Regulated environments raise the stakes

The consequences of interface errors are not distributed evenly.

In a consumer application, a misaligned field or incorrect message may create frustration and lost revenue. In finance, healthcare, defense or government, a similar defect can influence a payment, clinical decision, operational instruction or public service. An interface that displays the wrong status, conceals a warning or presents outdated information can create consequences far beyond the screen itself.

Regulated organizations must also be able to explain and evidence their controls. It is not enough to claim that a system was tested. They may need to show that testing was consistent, that results were reviewed and that software behaved as expected in the environments where it was deployed.

AI-generated assurance that changes from one run to another makes that task harder. So does a testing strategy that concentrates on internal system responses while neglecting the final interface used by staff or customers.

Independent, repeatable visual validation can help provide a clearer chain of evidence. It shows not merely that an application returned the expected data, but that the right information appeared in the right place, in a usable form, at the point where a human decision or action was required.

This is particularly important when apparently minor presentation errors can alter behavior. A hidden warning, misplaced decimal point, incorrect unit or outdated status indicator may not prevent an application from functioning. It can still cause a user to take the wrong action.

In these environments, the interface is not simply a cosmetic layer. It is part of the operational control system.

Combining speed with control

The strongest approach is not to choose between AI and established quality disciplines. It is to assign each the role for which it is best suited.

AI can increase development speed, broaden test coverage and reduce the manual effort involved in producing automation. Independent validation can challenge the assumptions embedded in those outputs. Deterministic testing can convert useful AI-generated ideas into repeatable controls. Visual checks can confirm that technically successful software also works for the person in front of the screen.

This layered model allows organizations to benefit from AI without confusing productivity with proof.

It also recognizes that no single testing method can provide complete assurance. Code-level checks can confirm the behavior of individual components.

Integration tests can establish whether systems communicate correctly. Security testing can expose vulnerabilities. Performance testing can examine behavior under pressure. Visual validation, at all levels of UI development, can determine whether the final result remains accurate, accessible and usable.

The value comes from combining these methods, not asking one of them to stand in for all the others.

As AI becomes more deeply embedded in software delivery, assurance must become more independent rather than less. Organizations should assume that AI-generated software will sometimes be wrong, incomplete or unexpectedly inconsistent. The objective is not to eliminate every error at the point of creation. It is to make sure those errors are visible before they reach the user.

AI can help write the homework. It can even suggest how the homework should be checked. But the final mark must come from an assurance process that is independent, repeatable and accountable.

We've featured the best AI website builder.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• One in three workers laid off due to AI could need to be reemployed at a higher rate
• Context, judgment and meaning are irreplaceable human traits that AI can't bring
• Companies need to reinvest in AI – not just accept mediocre gains

Gartner has argued that the future of work is moving beyond simple AI automation – instead, it says that using AI to enhance human capability and redesigning how work gets done are far more critical for future business leaders.

Fundamental to Gartner's report is the importance of human workers and the preservation of human judgment and context, therefore the analysts warn that AI-induced layoffs could be costly in the long-term despite offering potential savings today.

In fact, the study warns that by as soon as 2029, one in three (30%) employees laid off because their jobs were replaced by AI will need to be rehired, and potentially at a higher cost to their future employers than had they just been kept on.

Gartner warns about AI layoffs and the importance of human workers

Ultimately, the analysts warn that treating AI primarily as a headcount-reduction mechanism could weaken future talent pipelines, remove institutional knowledge and expertise, reduce innovation ability, and create expensive recruitment challenges later.

First of the four upcoming trends predicted by the company is the human-AI relationship – companies are being urged to build stronger human-AI collaboration where AI and automation are largely seen as augmentation, not replacement.

It's also about a cultural change, because Gartner says workforces should adapt to AI, not just adopt it. Employees will need to learn continuously, adapt to changing roles and understand how to work effectively alongside AI.

Thirdly, human context, judgment and meaning should be protected, with Gartner increasingly worried that AI could inadvertently strip these away.

Finally, Gartner expects AI investments to be a continuous loop and not a single action – companies that reinvest will likely be the ones to see the best success.

"The competitive advantage will go to the CIOs and business executives who build an AI-shaped organization where AI value compounds by reshaping roles and allowing workflows to cross traditional boundaries, increasing velocity and reducing friction," VP Analyst Tori Paulman wrote.

For much of the AI boom, the infrastructure conversation has centered on compute: chips, servers and the increasingly large data centers needed to support them. But as AI moves from experimentation to deployment at scale, technology leaders face another infrastructure challenge that could be just as consequential: securing enough reliable power, quickly, to keep that compute running.

AI data centers are fundamentally different from traditional commercial and industrial power customers. They are larger, more concentrated and exceptionally time-sensitive, with near-zero tolerance for interruption. That makes energy availability more than an operating consideration. Increasingly, it can determine where AI infrastructure gets built, how quickly it comes online and whether organizations can turn enormous technology investments into business value.

Natural gas is emerging as a bridge fuel for AI's power challenge

For technology leaders, the key question isn't simply whether enough electricity can ultimately be generated. It's whether firm, dispatchable power can reach a data center when and where it's needed.

That's where natural gas is playing an increasingly important role. Given constraints on other non-intermittent power alternatives, gas can provide the around-the-clock generation needed to support large AI workloads. PwC's scenario analysis shows the potential scale: even in our most conservative scenario, AI-linked gas demand reaches 5.2 billion cubic feet per day (Bcf/d) by 2030, compared with roughly 1.6 Bcf/d today. By 2035, our scenarios put demand between 7.6 and 11.5 Bcf/d.

For data center developers and technology companies, however, those numbers tell only part of the story. Having enough gas in the system doesn't mean it can necessarily reach a data center on the required timeline. It must be produced, transported, stored and delivered at the right pressure through connected infrastructure. In other words, AI's power challenge is increasingly becoming a deliverability challenge.

The scarce resource may be time, not capital

Technology companies are committing tens of billions of dollars to AI infrastructure, but money can't quickly solve many of the constraints standing between a planned data center and an operational one.

Permitting, pipeline rights-of-way, grid interconnections, turbines, water and skilled labor can all extend development timelines. Developers are simultaneously competing for critical equipment and industrial capacity while navigating local zoning and water constraints. That changes the calculus around infrastructure.

In a market defined by speed to deployment, an existing pipeline, permitted corridor, storage asset or available generation capacity can be more valuable than a theoretically lower-cost alternative that takes years to develop. For technology leaders making decisions about AI capacity, site selection therefore needs to account for much more than land, connectivity and eventual power availability. The ability to secure reliable energy on the required timeline should be considered much earlier in the process.

Energy procurement is becoming a strategic capability

We're already seeing data center developers respond differently. Behind-the-meter generation, for example, can allow a campus to pair on-site or nearby gas generation with firm fuel supply rather than relying solely on the traditional grid interconnection process. PwC estimates that more than 30% of AI-related gas demand could be behind the meter by 2035.

Other models are emerging as well, including dedicated pipeline laterals paired with generation and more integrated arrangements connecting gas supply, transportation, storage, generation and data center load. The larger lesson for business and technology leaders isn't that every data center should pursue the same energy strategy.

It's that energy procurement can no longer be treated as a back-office function that happens after the technology and real estate decisions have been made. It is becoming a strategic capability.

Building AI infrastructure will require a broader ecosystem

This shift also changes who technology companies need around the table. The next generation of AI infrastructure will require greater coordination among hyperscalers and data center developers with utilities, natural gas providers and pipeline operators. Increasingly, these parties will need to solve for the entire path from energy supply to operational compute rather than solely optimizing their individual piece of the equation.

For technology executives, that makes partnership strategy increasingly important. Securing energy infrastructure earlier, understanding regional constraints and developing relationships across the power ecosystem can help reduce schedule risk before billions of dollars of compute are waiting for power.

AI may be a technology revolution, but scaling it is quickly becoming a physical infrastructure challenge. The organizations best positioned for the next phase will be those that treat energy as a strategic capability and recognize that natural gas can play a critical role in providing the reliable, dispatchable power needed to bring AI capacity online and keep it running.

In the race to scale AI, time to power may ultimately determine time to value.

We've featured the best AI chatbot for business.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Every new process, tool and approval layer carries a cost that rarely appears on a balance sheet.

Nearly 58% of professionals spend at least three hours weekly on admin, while over half find this side of work frustrating. Teams are busy and too much effort is being absorbed by the machinery around the work. Complexity can slow decision-making and make it more fragile. Speed switches off our quality critical thinking and pushes us to simply make a decision to stop the stress.

AI has made execution faster but has not necessarily meaningfully improved decision quality across the board, let alone consistently. If businesses are to make the most gains from their tech choices then they need to thoroughly reevaluate their processes and training. Basic AI use, particularly gen-AI, is not going to meaningfully grow the business versus those who take more care in tailor.

But… easier said than done. This is cognitively hard and so quite easy to neglect without even noticing. All the invisible, cultural ‘soft’ aspects of work aren’t always easily tracked and evaluated and may just be tick-boxed away if and when brought to mind. Keeping process improvement a focused aim and ensuring it evolves alongside new technologies like AI, and essential human requirements (think fulfilment, agency, flow) is not easy.

Getting it right will separate out high performers who never miss a trick from the average thinkers who scrape by.

Making big changes starts with small steps

"A journey of a thousand miles begins with a single step" is ancient wisdom echoed across many philosophies, cognitive behavioral therapy, and practical guides to business. And yet we need to be reminded of such basic principles again and again.

I’d recommend carefully cycling through the following on a regular cadence, looking at them with various departmental lenses and priorities that align with your industry, policies, customer contracts, and tech stacks. Small improvements done regularly stop drift away from best practices and organizational goals. For example:

Reducing admin. An absolute no-brainer to start with. No one likes admin, but it’s how we prove compliance and quality is taken seriously, though it’s not generally a value-add. Look at workflows as a process to be revisited at regular intervals and see what can be streamlined - while simultaneously ensuring the purpose and context of the process isn’t entirely hidden from those responsible for seeing the workflow through to completion.

Focus priorities. Do less, better, is a mantra for life. Many enterprises grow their offerings over time, but smart execs stay focused. AI tools should be used with that mindset such that all involved are uplifted to perform with excellence. There’s a place for doing everything across the board ‘X’ per cent better, but doing core delivery better by a factor is how a business delivers outperformance.

Consolidate information and reduce tool switching. This is the real bread and butter work of many a consultancy. A COO is well placed to work with the CIO and ensure that any changing data use is done smartly, without shadow AI or ad hoc workarounds that silo intelligence and ultimately make the business’ collective efforts harder for the benefit of one person or team.

Treat AI as an assistant, not a replacement. There’s definitely a cult of AI with highly inflated expectations delivering a lot of hype. AI is likely to become what they hope in time, but right now its use should be applied critically. Costs and performance are variable. Smart users are the other side of the AI ‘coin’.

With the right training in model use, prompt engineering, custom GPTs and skills, your people are given wings. Always remember though that anything can potentially happen: power cut, an API failure, a dependency removal. So if people can’t do their job without AI, then they are not in control.

Mounting hidden costs

These are the basics that many leaders build trust through clear guidance, establishing clear policies, providing regular training, sharing successful use cases, and defining where AI can add real value. But it’s rare for leaders to revisit the steps and go through a forensic process to ensure everything is still operating as intended as any part of the complex interplay changes.

With AI layered on top of data repositories, and IT infrastructure on or off premise in various types of cloud offering, businesses are dealing with a complexity that CIOs would not have dreamed of just five years ago. Staying on top of dependencies, sprawl, shadow IT, evolving models, agentic drift, and token costs, is all part and parcel of controlling costs, improving service and enhancing employee experience.

Costs of course encompass more than financial outgoings and risks. Particularly with AI-enhanced processes, the costs of time mismanagement or opportunity costs become more relevant. These pressures will encourage leaders to both research and experiment more with operations, increasingly pushing them to think more like consultants within their own businesses.

Build human intelligence too

Increasingly, I think of training as the biggest factor that will impact how AI ROI and optimal business outcomes are achieved. IT skills, systems thinking skills, the engineering mindset, and the whole spectrum of soft skills that holds together a complex organization. These are what will enhance domain expertise and allow teammates to live with the complexity of the modern business and not be fazed when it changes or aspects fail.

Employees more than ever need trained critical thinking skills to validate, evaluate and properly act on AI outputs. Producing pages and blindly trusting AI output is not going to end well, with AI slop positively counterproductive.

But underlying it all, it’s that awareness or mindfulness that will keep leaders checking and tweaking their processes to keep catching every scrap of breeze that the winds of tech and the economy send their way. AI is likely to punish the complacent as it propels the mindful to success in operational delivery.

We've featured the best online learning platform.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Verdant argues some figures are overestimated by as much as 4-5x
• Steel and vehicle manufacturing are more likely to support jobs
• Megawatt growth doesn't correlate with job growth

A new Verdant report has argued data centers are unlikely to create as many jobs as many companies and reports believe – its latest estimations put all currently planned UK data centers at 10,400 permanent operational jobs, compared with the 40,200 jobs that industry body techUK projects.

techUK also claims that current data centers that are already in operation already support 24,300 jobs – a figure that Verdant contests as being closer to 4,400.

Ultimately, Verdant criticizes other estimations including techUK's for using older figures based on smaller campuses, but as data centers grow and become increasingly automated, they require fewer staff.

Are data centers actually creating that many jobs?

In short, Verdant explains that increasing automation means compute capacity can expand without employment rising proportionally, so adding another megawatt of compute doesn't necessarily mean adding a fixed number of new workers. Therefore, its rough estimation of 1.2 jobs per MW for new developments isn't hugely representative of all facilities.

The report also expects employment density to decrease further as facilities get larger, comparing data centers unfavorably to steel plants, vehicle manufacturing plants, hospitals and schools.

"The briefing concludes that while data centres may offer other benefits, employment cannot credibly be the primary justification for continued rapid build-out," the company wrote, calling for a pause on construction and wider public discussion.

All of this, of course, against the backdrop of hyperscalers investing billions to grow their capacities, with each new campus and expansion promising hundreds or thousands of operational jobs and tens of thousands of related roles across the likes of construction.

The AI infrastructure discussion is typically framed around the cost of data centers, the power requirements, and the compute needed to train and run models, including GPUs and high-performance storage. That’s hardly surprising given the eye-watering investment numbers occupying the headlines.

The other key commodity, of course, is data to fuel those models. According to Stanford University’s 2025 AI Index Report, dataset sizes for training LLMs are doubling every eight months. In practical terms, as each model is built, some data will move quickly into curation and model-development environments, where fast access is essential.

Much of it, however, will wait longer while teams establish its relevance to a particular AI use case – not sitting idle, but held securely and ready to move quickly into curation, training and transformation pipelines when needed.

From a storage perspective, this raises a point that is easy to overlook: a dataset does not need the same performance at every stage of the AI pipeline. What matters is that it is ready when it is needed – not that it sits on always-on, high-performance infrastructure throughout, which at scale becomes unnecessarily expensive.

The question for infrastructure planners, then, is not whether AI needs fast storage, but where organizations should keep the very large datasets that will be required in future, before they are ready to be processed. That choice is a strategic one, not a housekeeping one.

The right capacity tier should keep data protected and readily recoverable into AI, training and transformation pipelines, puts performance only where the work is actually happening, and returns the difference to the budget.

Your data portfolio as strategic advantage

As every organization's mission is different, so too each will be at a different stage of the AI journey. Some have raced ahead with systems already in production, while many others continue to explore how the data they already hold could support AI initiatives – documents, images and video, operational records, information collected through connected systems; the list goes on.

This is why knowing your own data is fast becoming a competitive lever rather than an IT chore. Models are available to everyone, so proprietary data is your competitive advantage – if you can access it and use it at scale.

The organizations that will move fastest are the ones that already know what they hold, where it sits, and how quickly it can be put to work. Shortening the distance between a business question and the data that answers it is now a measure of how fast a company can execute and succeed.

So data is not simply an input to AI: it is what shapes the model. The more of an organization's own data it can bring to bear, the sharper and more specific the resulting tools become, which is why the working assumption should be that almost anything the business holds is potentially useful.

The conventional approach has been to hold large datasets in a disk-based data lake until they are needed for further processing. Yet as data sets grow ever larger, so too could cost. If every candidate dataset has to live on always-on, high-performance infrastructure, cost sets the ceiling on how much data an organization can afford to keep in play at all.

The challenge, then, is to keep everything available to workflows as needed, so that the deciding factor is the use case, not the storage bill.

Tale of the tape

The smart play therefore is not to spend more, but to stop overspending where there is a better way. And it turns out one of the strongest answers here is a technology that has never stopped innovating: tape. Most people still associate it with backup and long-term archive – a role it continues to play well – but successive LTO generations have transformed its capacity, throughput and security while the industry looked elsewhere.

The latest tape technology and systems now behave like any other tier in the stack, ready to stream data into fast storage when curation or training is ready for it. And tape’s economics get better as it grows. At the multi-petabyte scale AI programs now reach, cost per terabyte is a fraction of flash or even HDD infrastructure. Performance and capacity can also scale independently, adding more drives for throughput and more cartridges for capacity.

When considered with tape’s extraordinary energy efficiency, this storage technology emerges as a strategic capability to build into the data center, allowing an organization to keep its entire data estate in play, at a cost that scales predictably.

A safer place for valuable data

Cost of storage and operation often gets projects approved, yet protection is the one that keeps people up at night. Here, tape offers something the online tiers structurally cannot. Encryption is handled in hardware on the cartridge. Write-Once-Read-Many (WORM) media makes a dataset immutable in the physical sense, so that irreplaceable data cannot be rewritten.

And for the most valuable material, tape sets can leave the library altogether and be stored in a secure location or offsite – fully offline, fully air-gapped, and insulated from anything that happens to the production environment.

What counts now in building data and AI pipelines for your organization is ensuring data is ready to move into the right performance tier the moment it is needed. Data is the fuel for the models an organization builds, the decisions it makes, and how fast it can act on either.

Tape is what makes it affordable to keep all of that ‘data fuel’ at scale, protect what cannot be replaced, and put any of it to work on demand. Build it in now, and what you can do with your data is no longer limited by what you can afford to keep online, and instead becomes the means to get, and stay, ahead of your competition.

We've featured the best cloud storage.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Calif researchers found a zero‑click WeChat VoIP flaw enabling account takeover via calls
• “WeWorm” spreads through ringing calls; victims need not answer to be compromised
• Tencent patched in Android 8.0.77 and iOS 8.0.76; no exploitation seen in the wild

Security researchers have found a flaw in WeChat which allows malicious actors to take over people’s accounts on both Android and iOS devices - but what makes this flaw stand out is the fact that it’s a zero-click bug - victims need not do a thing to be compromised.

WeChat is a “super-app”, allegedly used by roughly 1.4 billion people, and is especially popular in China. It started as a communications app, letting users send messages, and make voice and video calls, and has evolved to function as a social network, allowing users to share photos and videos, as well as a payment app through which users can transfer money, pay for things, order food, book taxis, and even access government and business services.

Security researchers from Calif have now disclosed finding a ‘memory corruption’ issue in WeChat's VoIP stack. For now, they decided not to share the technical details, and to instead demonstrate the flaw “at an upcoming conference.” To that end, they built a worm called WeWorm, capable of taking over target WeChat accounts and spread through phone calls made via the app.

A phone call would suffice

In practice, it works remarkably simple: an attacker uses WeChat to call a person they have in their contacts list (this is a prerequisite). They can use both an Android and an iOS device, and can call anyone, regardless of the model or the OS they’re using. As soon as the phone starts ringing, WeWorm gets to work, “worming” its way into the victim’s device.

The victim does not even need to answer the phone - having it ring is enough. If they answer, they’ll hear nothing but silence, yet the worm will continue operating. If they decline the call, the attack stops, but this is hardly a mitigation - the attacker can simply call again while the victim is asleep (or otherwise away from their device).

Within a few seconds, the attacker will have access to the victim’s WeChat account, including their messages, contacts list, and virtually anything else found in the app. What makes this bug particularly worrisome on the surface is the fact that WeChat can be used to transfer money and pay for things, but WeChat Pay has additional authentication and risk controls designed to prevent that from happening.

The good news is that there is no evidence of this flaw being exploited in the wild. The bad news is that this is not the first zero-click flaw found in modern-day smartphones, and most likely will not be the last one.

Tencent's response

Calif said it responsibly disclosed its findings to WeChat’s parent company Tencent, who came back with a patch. Versions 8.0.77 for Android and 8.0.76 for iOS have apparently solved the problem, although

Tencent did not list any details in its patch notes, simply saying the version brought “bug fixes”, but in a statement shared with The Hacker News, it said the exploit has been “mitigated for all users”, and that it was applied server-side - users need not install anything, aside from the patch.

It’s also worth mentioning that WeChat has apps for HarmonyOS, Windows, Mac, and Linux. However, it would appear that Calif did not test those, and Tencent did not include them in its patch. The researchers did say that they would be looking into this same flaw in other products, too:

“This specific WeChat bug is one instance of the many unconventional attack surfaces that are present across many messaging apps,” they said. “We're conducting more of this research across other apps and attack surfaces, while working with app developers on attack surface reduction. This may take an industry-wide effort, since some of it depends on the platform owners. Once that work is further along, we'll share our progress, including the technical details of this WeChat bug.”

• A GAO report requested by Bernie Sanders lists Amazon among the top employers of Medicaid and SNAP recipients in every state that supplied employer data
• Amazon's capital expenditure guidance for 2026 has risen from $200 billion to $220 billion citing AI demand as a primary driver
• Amazon contests the findings, stating the rankings used do not account for the employer's workforce numbers

The Government Accountability Office (GAO) recently published a report claiming Amazon is among the largest employers of Americans who rely on food stamps and Medicaid.

The report, requested by US Senator Bernie Sanders, who is the ranking member of the Senate Health, Education, Labor and Pensions Committee, was released publicly on July 22 2026, a month after it was sent to the senator.

The study is not the first of its kind: the GAO published the same in October 2020 at the request of the same committee, though Amazon was far less dominant on the list at a cursory glance.

A report that paints a worrying trend, but fails to provide a complete picture

GAO collected employment records from 15 agencies across 11 states, all of them the same agencies that supplied the 2020 data, and asked for a snapshot of September 2025.

The office then estimated the 25 employers in each state with the most enrollees. The resulting document showed Amazon near the top of every list: It ranked second in five states for Medicaid enrollees, and second or third for SNAP recipients in six different states. Adding the state figures links the e-commerce giant's employee list to 11,338 Medicaid enrollees and 12,346 SNAP recipients.

The report does not, however, directly or indirectly address AI, data centers, or Amazon's Capex ambitions, or point to a particular trend as a snapshot of a single month of data, and it fails to draw a direct comparison with its 2020-based iteration.

It has drawn a sharp rebuke from Amazon, which saw its spokesperson, Rachael Lighty, tell The Washington Post that the company dealt in raw numbers rather than percentages, which was misleading, and CNN that eligibility "is based on total household income and family size, not individual wages or benefits," so an employer offering part-time work will naturally show more eligible staff.

This is something the GAO tends to accept, even in its own footnotes: a larger employer simply has more employees in play and is therefore more likely to be on that list, which is skewed against part-time individuals who are more likely recipients of those food assistance programs.

It does make for an interesting approach to the entire model, which Senator Sanders has pointed out shows "triple" the number on SNAP and Medicaid simply because Amazon's employment statistics have swung so wildly of late.

The e-commerce giant's global workforce went from about 798,000 at the end of 2019 to a peak of 1.61 million in 2021, and stood at 1,576,000 at the end of 2025, effectively doubling from when the report was originally published in 2020, potentially skewing results against itself due to a larger employee base.

The findings and the defense presented by Amazon, however, have not gone down well with certain quarters; Senator Sanders has called the trends "beyond unacceptable", stating that "American taxpayers should not be forced to subsidize the starvation wages of large corporations".

Much of Amazon's recent focus, including a significant increase in Capex spending, has been towards AI and AI-related infrastructure under its AWS arm. Amazon guided to about $200 billion of 2026 capital expenditure on its Q4 2025 call in February, up from $131.8 billion in 2025. On July 30, Andy Jassy raised that to $220 billion, blaming higher memory prices, and said Amazon would still not have enough capacity for the demand it is seeing.

AI data centers are increasingly a point of contention among AI juggernauts, hyperscalers, and less-eager locals bearing the brunt of higher water and power costs, even as availability becomes equally challenging.

For a company spending $220 billion on AI infrastructure this year and rolling out an $1 billion commitment in late 2025 to raise base pay for its US fulfillment and transportation workers, being at the top of multiple lists of states with workers being eligible for (and using) Medicaid and food assistance programs might not be great timing when there is increasing scrutiny of trillion-dollar corporations and their massive profit margins by consumers and jobseekers alike.

• The expanding market for data centers and associated renewable energy supplies has attracted the insurance industry
• Data centers alone could represent a $91 billion market
• A destroyed AI data center could cost $50 billion to replace

The cost of data centers continues to rise, with insurance now added to real estate, communications, energy, and environmental impact. Several reports indicate that not only is insurance a growing cost for big guns like OpenAI and Meta, it’s a market that looks set to expand alongside the increase in data centers.

A new report by the Swiss Re Institute indicates the insurance industry could collect $91 billion in premiums from AI data centers between now and 2030, with a further $111 billion from renewable energy installations linked to the data centers.

With a combined market of around $200 billion across a three year period, the AI boom could represent an accumulation of risk. The report highlights four interconnected factors that could affect multiple businesses if only one is disrupted.

The assurance of data centers

Reliance on new data centers isn’t all about the end product. Construction companies, physical supply chains, and technology and communications organizations all play their part in assembling an AI data center facility. Power stations – traditional or renewable – have similar requirements, and once both types of installation are brought online, their importance increases.

Gianfranco Lot, Swiss Re's chief underwriting officer for P&C Re, told Insurance Business Mag: "AI needs data centers, power grids, and increasingly complex infrastructure - and all of it needs insurance. That creates growth opportunities across multiple lines of business, but also significant risk concentrations. The deployment of capacity will depend on our ability to understand and manage those, and getting paid for the associated tail risk."

Estimates suggest a single AI data center can cost $50 billion to replace.

New market, new opportunities

Insurers are preparing to offer comprehensive support for the data center industry. Risk management firm Aon has released an analytics tool designed to help insurers measure and map exposures for data centers, and it appears the wider industry is exploring options to underwrite these installations.

Indeed, Aon has its own estimations, working on a figure of a $29 billion market by 2030. Meanwhile, other insurers and analysts are assembling databases and exploring opportunities to provide financial fallback to data centers.

Four factors (large assets, geographic clustering, supply-chain dependencies, and shared networks) can each interrupt several businesses within the sphere of the data centers, and the Swiss Re Institute report highlights the importance of insuring against disruption. This represents a previously unseen level of integration and interconnectivity between industries, something that seems to be informing the market estimates.

Ultimately, the insurance price will be factored into the usage costs, with AI token prices and other tariffs added to the bill for end users.

• AI data centers are pushing rural land prices far beyond farm values
• Local officials now face threats over decisions tied to data centers
• Farmers are receiving offers that can be extremely difficult to reject

US officials are facing threats and intense local opposition over artificial intelligence projects that are driving fierce competition for rural property and resources.

The conflict is intensifying, with developers seeking large tracts of land and residents raising concerns about electricity use, water demand, and rising property values.

In several communities, officials have faced intimidation after voting on projects, showing how contentious the expansion of AI infrastructure has become.

Threats intensify as communities resist development

In Michigan, township officials received death threats after supporting a major data center proposal involving Oracle and OpenAI.

An official said threatening messages became severe enough to make ordinary disagreements over development far more troubling.

“We’ve got a lot of recorded messages wishing us dead,” said Kelly Marion, township clerk in Saline Township, Michigan.

Officials elsewhere have faced similar pressure, with some councils delaying meetings or restricting public participation following threats linked to data center plans.

In Box Elder County, Utah, Commissioner Lee Perry said he and two colleagues received threats after approving resolutions concerning development.

The dispute has also reached Marshall, Michigan, where council members were warned about a death threat after approving restrictions on new projects.

Salix, Iowa, postponed a vote concerning development after threatening social media posts prompted authorities to investigate possible risks.

The incidents come amid hundreds of local measures restricting data center construction across different parts of the United States.

Rising land values fuel another fight

The conflict extends beyond security concerns. AI companies are now competing with farmers and other landowners for sites with suitable infrastructure.

According to commercial property firm Avison Young, data center land purchases reached roughly $6 billion during the first half of 2026.

That figure represents a 79% increase from the previous year, while data centers account for 27% of American development sites.

Some developers have offered prices far exceeding agricultural values, giving landowners strong financial incentives to sell their farms.

Texas Agriculture Commissioner Sid Miller said developers sometimes offered farmers outrageous prices for their farms.

“When [data centers] first started popping up, nobody really knew much about them,” Miller said.

“I found out real quick that they were taking up our very best farmland. ... And [developers] give sometimes 10 times the value, so it’s hard for farmers to turn that down.”

In Northern Virginia, some sites with reliable grid access have reportedly reached millions of dollars per acre amid strong demand.

The National Association of Home Builders has warned that data center developers can outbid housing companies because their financial limits differ significantly.

Meanwhile, residents fear large facilities could increase pressure on electricity networks, water supplies, roads, and other local services.

Analysts at investment banks have also warned that political opposition could become a risk for future data center expansion plans.

For communities near proposed sites, the unresolved question is whether economic gains can justify the costs associated with scarce land and resources.

Via CNBC

• Russia has launched 32 Rassvet satellites, though coverage remains limited
• Rassvet remains vastly smaller than Starlink’s expanding satellite constellation today
• Russia plans 156 satellite launches in 2026, 292 in 2027, 318 in 2028, and about 900 in 2035

Russia has launched 32 Rassvet communications satellites as Moscow works toward building a domestic network capable of competing with Starlink.

The current fleet, however, remains too small to provide continuous service, while reported orbital problems have raised further doubts about progress.

Russia still plans commercial operations from 2027, although reaching that stage depends on expanding the constellation and overcoming serious technical limitations.

Thirty-two satellites leave Russia far from continuous coverage

Ukraine's Defense Intelligence chief, Oleh Ivashchenko, said the existing constellation cannot yet deliver reliable communications across the areas Russia intends to serve.

“We know that today the Russians are trying to put satellites into orbit. But so far, there are not enough of them, and their effectiveness is low,” said Oleh Ivashchenko, chief of Ukraine’s Defense Intelligence.

Ivashchenko did not disclose the spacecraft’s orbital paths, operating frequency, or the Ukrainian regions where the system currently provides coverage.

However, he maintains that Rassvet remains far smaller than Starlink, which has more than 12,000 satellites in orbit and continues adding around 200 spacecraft each month.

The much smaller constellation means Rassvet cannot yet provide the same level of continuous coverage as Starlink.

Moscow has committed 102.8 billion rubles, or about $1.3 billion, to Rassvet as part of efforts to establish domestic broadband connectivity.

Russia plans to launch 156 satellites in 2026, followed by another 292 spacecraft by 2027, when authorities expect commercial operations to begin.

The programme ultimately aims for 318 satellites by 2028, while later plans envisage expanding the network from 250 spacecraft toward 900 by 2035.

Those figures reveal the scale of work remaining, since the existing fleet represents only a fraction of Russia's planned communications infrastructure.

Technical problems could make expansion considerably harder

Reports indicate that some Rassvet spacecraft faced difficulty gaining altitude, with certain satellites drifting downward after reaching orbit.

Defense Express reported on August 25 2026 that one Rassvet-3 communications satellite was lost, while two others faced possible atmospheric reentry.

Such incidents could complicate Russia's schedule because each failed spacecraft reduces the already limited constellation and creates additional pressure on future launches.

Building the planned network would require at least 18 Soyuz-2.1b missions, despite Russia currently carrying out only six to eight launches annually.

The launch requirement therefore creates another obstacle, especially if replacement spacecraft become necessary after further technical failures during orbital operations.

Rassvet could eventually provide communications links for unmanned aircraft and military units operating beyond the practical limits of conventional radio systems.

That possibility gained greater attention after Ukraine and SpaceX restricted unauthorized Starlink terminals reportedly used by Russian forces during February 2026.

“We are working on this. Russia’s ‘Rassvet svg’ must turn into a ‘zakat svg,’” said Oleh Ivashchenko, chief of Ukraine’s Defense Intelligence.

Russia continues developing Rassvet despite these setbacks, but the current constellation remains unable to provide continuous connectivity expected from a fully operating network.

Via United24media

• Thailand has frozen 166 data center projects pending new national rules
• Officials found major gaps in data on existing data centers
• Large data centers are putting new pressure on water supplies

Thailand has halted 166 data center projects while officials work on new rules for electricity, water, locations, safety, and economic returns.

The pause covers 49 facilities already being built and another 117 projects still waiting for approval from government agencies.

Officials say the review aims to keep attracting investment while ensuring data centers provide jobs, technology gains, and useful services for Thailand.

Thailand puts data center growth under review

The decision followed a recent meeting of the national data center policy board, which ordered four groups to draft standards within one month.

Four subcommittees will each examine a different area: economic benefits, infrastructure needs, site and location standards, and environmental protection.

The review comes after agencies found limited information about the country’s total data center activity, including facilities already running and projects awaiting approval.

Information from 16 government bodies showed that 35 data centers were operating, with 11 receiving investment support through Thailand’s Board of Investment.

Another 24 facilities gained approval through other routes, while several smaller centers were operated by financial institutions.

The government now wants one central system showing project locations, approval status, electricity sources, water supplies, planning rules, and other key details.

That system would allow agencies to examine the combined effects of multiple facilities instead of reviewing each project through separate approval channels.

Bangkok has also begun checking existing sites, with six projects seeking approval and each requiring between 9 MW and 23 MW of power.

Three received approval and began operations from 2022 through 2024, while the remaining applications will stay frozen until national standards are ready.

Water, power, and economic gains shape new rules

The planned rules will cover electricity demand, water use, site selection, construction safety, backup fuel storage, environmental effects, and distance from nearby buildings.

Officials are also reviewing whether facilities using more than 2 MW should face rules similar to those applied to industrial businesses.

Large centers need constant power and significant water for cooling, creating concerns about pressure on local networks and supplies.

The government also wants prices for water and electricity to account for direct and indirect costs linked to large facilities.

That approach is intended to prevent households and other businesses from carrying costs tied to data center resource use.

Future projects could face a competitive approval process that weighs employment, technology transfer, clean energy use, and lower greenhouse gas emissions.

Prime Minister Anutin Charnvirakul said data centers matter to Thailand’s economy, although the government lacked complete information about existing facilities and planned developments.

The government is now seeking full details on data centers so it can develop laws that will guide future investment decisions.

Rather than expanding server capacity without assessing their demand, Thailand wants to gain more value from incoming projects.

The pause does not signal an end to Thailand’s data center ambitions, since officials continue seeking investment while examining how growth should proceed.

Via The Nation