• CISA, NSA, FBI warn Chinese AI firms of industrial‑scale knowledge distillation
• Companies like DeepSeek, Moonshot, Alibaba allegedly extracted billions of tokens from US frontier models
• Advisory urges detection of malicious prompts, deceptive responses to distillation, and cross‑provider intelligence sharing

Chinese AI companies’ core development strategy is to steal proprietary functionalities and capabilities from their US counterparts, law enforcement agencies have warned.

The US Cybersecurity and Infrastructure Security Agency (CISA) has published a new security advisory, drafted jointly with the National Security Agency (NSA) and the Federal Bureau of Investigation (FBI), warning American AI companies about an ongoing “aggressive, malicious, and targeted distillation activities at an industrial scale,” and sharing recommended mitigation steps.

Knowledge distillation

IBM defines knowledge distillation as a “machine learning technique that aims to transfer the learnings of a large pre-trained model, the ‘teacher model,’ to a smaller ‘student model’.” It is used in deep learning as a form of model compression and knowledge transfer, it added, particularly for massive deep neural networks.

So, knowledge distillation is not illegal or malicious, per se. Its goal is to train a more compact model to mimic a larger, more complex one. In the security advisory, the agencies stress it is “recognized as a legitimate and useful technique in AI research,” but add that China-based AI companies are using it in ill will.

In other words, the agencies claim that instead of spending months and millions developing new capabilities for their models, the Chinese are simply sending huge numbers of carefully designed questions to US models and extracting the answers.

Which companies are engaged in knowledge distillation?

Apparently, all companies worth anything. DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI all allegedly “extracted billions of tokens across millions of exchanges/requests from US frontier AI models, including variants of Claude, GPT, Gemini, and Grok, since at least late 2024.” CISA also stressed that this was likely done with the awareness of the Chinese government. It hasn’t outright said, “with its blessing”, although it could be read between the lines.

The advisory shares a thorough list of all the models that were being trained, as well as all the models being taken advantage of.

On the Chinese side, they include DeepSeek R1 and V3 models, Moonshot’s Kimi-K2 and Kimi-K3 models, and MiniMax’s M2 model. On the US side, they start with earlier models such as GPT-4, Claude 3.7, and Gemini 2.5 Flash Preview, all the way to Claude Fable 5, GPT-5, and similar.

When done in good faith, knowledge distillation is not illegal. However, the report says the companies routed the requests through multiple accounts, different API access points, multiple cloud providers, third-party AI aggregators, proxy services and “transfer stations”, as well as premium subscriptions shared between developers, all in an attempt to work around defenders trying to disrupt the process.

“This represents systematic extraction of proprietary functionalities and capabilities threatening U.S. technological leadership. Addressing industrial-scale distillation merits a coordinated response across the AI ecosystem, including effective information-sharing, spanning the U.S. Government, private industry, and allied nations,” the agencies concluded.

What US companies should be doing

To defend their intellectual property (and thus remain ahead of Chinese competing models) US AI companies should implement comprehensive detection and mitigation, the agencies said. That means hunting for anomalous and malicious prompts, accounts, networks, and behaviors. Furthermore, they should monitor subscription-to-usage ratios, immediate maximum usage from new accounts, and enterprise-scale throughput patterns.

The second step is to “deploy targeted response changes”: “Subtly alter responses for suspected malicious distillation attempts to attenuate the payoffs to companies conducting industrial-scale distillation campaigns.” In other words, AI companies should make sure their products lie when they spot they were being distilled for knowledge.

Finally, US AI firms should set up cross-organization intelligence sharing, correlating activity across model providers, cloud platforms, and API aggregators.

• Windows 11's latest update has arrived
• The September update brings in the ability to move the taskbar
• There are also new options for resizing the Start menu, and a really useful tweak for Windows 11's search function

Windows 11's latest update has arrived, and it packs some important new features for the interface of the desktop OS.

Bleeping Computer flagged all the additions in the September 2026 update for Windows 11, and there are three major highlights, which I'll pick out here, before providing a general roundup of some of the other tweaks that Microsoft has brought in this month.

As ever, some of these features are being rolled out in a phased manner, so even if you do install the September update today, you may still have to wait a while for certain pieces of functionality to make their way over to your PC.

1. A movable taskbar

Thanks to the September update you'll finally be able to move Windows 11's taskbar away from the bottom of the screen, to the top instead, or the sides if you prefer (an option that people with an ultra-wide monitor often want to use, as it suits that aspect ratio much better).

This is an ability which has always been in Windows 10, but was dropped for Windows 11 because porting it over was a thornier issue than you might think (or so Microsoft told us).

Finally, however, Microsoft has got its act together and the taskbar can now be repositioned in Windows 11 – although I've a feeling this will be one of the features on a slower rollout. Hopefully I'll be wrong on that score and you'll get this ability promptly if you've been keenly awaiting it for the last five years.

It's also worth noting that there's another option introduced here which can make the taskbar smaller, so it takes up less screen real-estate on devices with small displays.

2. The Start menu can now be resized

Want a more compact Start menu? Your wish is Microsoft's command, as this choice has now been introduced to the Settings app for the Start menu. You can elect to have a standard (large) menu, or a small one, rather than leaving it at the default 'automatic' setting whereby Windows 11 chooses the size itself based on your device. The problem with leaving the OS to decide is that sometimes you get the bigger menu on a laptop screen, where it pretty much eats the whole desktop – and so in these scenarios you can now manually choose the more compact Start menu.

With options to remove sections of the Start menu coming on top of this, you can now trim this part of the interface down so it's truly minimal. This choice will be more important than the movable taskbar for many folks – myself included – and it's great to see it now being rolled out.

3. Windows 11 search improvements

Another notable boon with the September update is that there are a few changes for Windows 11's core search functionality, and the most important is a new option that lets you turn off web results in search.

When you're searching for a file on your local drive, those web results often get in the way, so it'll be a relief for many to be able to switch them off. As well as web results (which open in Edge, with searches in Bing, of course), you can also turn off Microsoft Store suggestions. Essentially this is a general decluttering of Windows 11 search which is long overdue, frankly.

Other features in Windows 11's September Update

There's a performance boost for File Explorer in that the Home page now loads faster, and switching between virtual desktops in Windows 11 is now snappier, too.

Microsoft has made some reliability tweaks as well, including ensuring that the app history information in Task Manager is correct, and also that interacting with the Display panel within Settings is now more stable.

Furthermore, Microsoft informs us that there are some design tweaks here: "This update introduces updated progress indicators across Windows, providing a more consistent and modern experience during startup, sign-in, restart, shutdown, and update installation."

It's also worth noting that the weird mouse bug that affected the preview version of this September update (the optional update released at the end of August) has been resolved.

There's a fair bit happening here, and as one Redditor put it: "What's left for the 26H2 [update] then?"

Well, not a great deal in truth, and if you've been following along with Microsoft's annual updates, you may recall that 26H2 is going to be a very minor upgrade that doesn't do a lot. Indeed, some folks are wondering why Microsoft didn't save these juicy new interface features for 26H2, given that it's out next month.

The reason is likely to be because Microsoft wants to ensure that 26H2 runs as smoothly as possible (with no bigger changes involved). Although to be fair, as noted, due to the rollout process, a lot of folks won't be getting the new Start menu options and taskbar repositioning until October (or possibly later) anyway.

• Steam achievements of upcoming and unannounced games have leaked
• The achievements include spoilers for games like Control Resonant, Kingdom Hearts, and Persona 6
• Valve hasn't commented on the achievements or recent prototype leak on Steam

Steam achievements for both upcoming and unannounced games may have been leaked by Valve and spotted on the third-party site Exophase.

As reported by PC Gamer, the leak includes nearly 90 games, including Control Resonant, Kingdom Hearts 4, Gears of War E-Day, Tomb Raider: Legacy of Atlantis, and Persona 6.

The leaked achievements are listed for each title on Exophase, including spoilers for major plot points, character reveals, and even weapon unlocks (notably for Kingdom Hearts 4), despite missing full descriptions. It's effectively created a minefield of spoilers to avoid, which is made worse since the list includes games that don't even have a release date.

It's not exactly clear how this leak occurred on Valve's end, but it doesn't appear to be a breach of the Steam platform. Instead, it may very well be an issue with Valve's API exposure, at least according to Exophase owner Mike Bendel, who claims it's a "possible screw-up on Valve's end", which makes this the second slip-up in just a few weeks.

Recently, around 12TB to 13TB of early prototypes, unreleased titles, and scrapped builds of games between 2003 and 2013 were leaked from Steam, including games such as GTA 5, The Binding of Isaac, and even some of Valve's very own games like Left 4 Dead.

It's possibly the worst spell of game leaks for publishers launching games on PC platforms like Steam, especially with the leak of builds for games like Death Stranding 2: On the Beach and Forza Horizon 6 before launch.

There's clearly a major security issue at hand with Steam, and until it's addressed, game leaks seem inevitable. Game achievements, while potentially spoiler-filled, are minor in comparison to the very recent game prototype leak.

Valve hasn't made an official statement on the Steam prototype or achievements leaks, but with its impact on both publishers and consumers, it wouldn't be surprising to see both cases addressed soon.

• Check Point Research exposed coerced insider flaw in ChatGPT’s agent architecture
• Containers shared metadata via internal service, enabling cross‑account prompt injection and data theft
• OpenAI closed the path, but CPR warns similar risks may exist in other AI platforms

ChatGPT’s AI agents were allowed to pull sensitive data from one account shared with an entirely different account because, colloquially speaking, all agents used to walk down the same hallways, experts have warned.

A new report from security experts Check Point Research (CPR) dubbed the flaw “coerced insider”, since it revolves around persuading the agent instead of abusing a vulnerability.

Coerced insider

When an AI agent is given a task that needs code execution, it handles that task in an isolated container which also sometimes needs to install software. To enable that, without giving containers direct internet access (which would be too risky), OpenAI routes those packages through an internal JFrog Artifactory instance. As a separate security contingency, containers from different accounts cannot talk between themselves.

However - they can reach the same internal service (our proverbial hallways), which exposes an item management feature that lets the containers attach text or binary properties to a repository item. As a result, any container can read back the properties written by any other container.

“Check Point Research confirmed the isolation gap directly: a property written from one account’s container was fully readable from a different account’s container moments later, with data too large for one property simply split into chunks and reassembled on the other end,” the researchers explained.

“The package delivery metadata effectively became a shared clipboard between containers that were supposed to be walled off from one another.”

From there, the exploit turns into your usual, off-the-shelf prompt injection. The only difference is that the malicious prompt is not delivered directly to the victim, but rather left in the hallways, and the results are not shared with the attackers directly, but rather left in those same proverbial hallways, too.

The attacker then delivers a prompt or a shared conversation that instructs the agent to check the same storage during its next ordinary reply. The agent checks, sees the malicious instructions, executes them, all the while replying to the victim’s question in the usual manner. The victim is oblivious to the fact that data theft is taking place in the background.

What kind of information can be stolen?

But this is just half of the equation. How destructive this attack ends up being still depends on the amount of data being shared with the victim agent.

The bare minimum is the information shared while chatting to the agent. It then grows with every connected app: Gmail, Google Drive, Microsoft Teams, GitHub, and similar. “In Check Point Research’s demonstration, ChatGPT retrieved the victim’s email data through their connected Gmail account and delivered it to the attacker’s session, all within a single ordinary turn,” CPR stressed.

The good news is that you’ll likely never be exposed this way, at least not via ChatGPT. CPR says it disclosed the findings to OpenAI, who then confirmed that the specific internal Artifactory instance identified in the research has been commissioned. In other words, the hallways attack path has been closed.

The bad news is that this doesn’t automatically mean everyone’s safe. This particular path might be closed, but the architectural pattern behind the flaw could be present in other platforms, CPR warns.

“Any AI assistant that operates inside an organization’s trust boundary, holding credentials, running code, and reaching connected services, can become what Check Point Research calls a coerced insider,” the report states. “The model itself does not need to be malicious. It only needs to be persuaded, through text it was never meant to trust, to use access that was granted for entirely legitimate reasons.”

Going forward, businesses are advised to learn which AI tools their employees are using, and what those tools are connected to. Then, they should govern what AI tools and agents are allowed to do, treating all of their actions (not just output) as something that needs to be monitored.

• Chrome will get new updates every two weeks to minimize real-world attacks
• Smaller, incremental changes should also make it easier to track any issues
• Other major browsers are also shifting to two-weekly release cycles

Google has confirmed that Chrome has officially moved from a four-week Stable release cycle to a two-week one, with effect from September 8 2026 with the launch of Chrome 153.

Besides adding new features, the main objective is for Google to give us performance and security fixes more promptly in an era of increased complexity and heightened vulnerabilities.

And it's exactly those security concerns that pushed Google to want to double Chrome's update frequency in the first lace, with the company now having to deal with a higher volume of patches than ever before.

Chrome will get updates every two weeks

Together with a higher volume of attacks in general, Google has also benefitted from AI-powered vulnerability discovery tools, giving developers more work to do than before. "With automated AI discovery tools and community bug reports generating higher patch volume, shorter release cycles make managing security fixes significantly simpler," the company wrote.

Crucially, the faster cycle reduces the time between a fix landing in Chrome's public codebase and it actually reaching end users, making it less likely for a bug to be exploited in the wild.

Chrome has been adhering to a four-week cycle since 2021, but the world is a very different place in the space of just half a decade.

With the higher pace of releases, Google also anticipates a smaller scope of changes, which could actually be a good thing because it could be easier for developers to identify what went wrong in the event of any issues.

Desktop, Android and iOS versions of Chrome will all be impacted by the change, with Chrome 154 already slated for a September 22 release.

More broadly, Google says Chrome isn't the only browser getting more frequent updates. Microsoft, Mozilla and Brave are also making similar changes, and they're all undergoing those changes right now.

The Lenovo ThinkPad T1g Gen 8 is a powerhouse and a semi-portable shell. It takes on the power of the beloved X1 Extreme, pairing an ultra 9 processor with quick memory, Thunderbolt 5, and decent storage. It's designed for engineers, creatives, and other power users who need a machine that can do it all while still having that hint of portability.

I think of this quite like the 16-inch MacBook Pro. It's the bigger choice in the line-up, but you would get it because you want the power and the ability, not necessarily the portability. The people who would get this laptop are the people who need the ports as well.

That's one of the reasons why I'm thrilled to see USB-A still, though it is just one, which is all that I would want. USB-C, Thunderbolt, an SD card reader, and an HDMI port. It honestly has every port I wish my MacBook Pro had, even as a guy who loves the MacBook Pro.

Lenovo ThinkPad T1g Gen 8: Price and availability

The Lenovo ThinkPad T1g Gen 8 is available from Lenovo in the US here, and in the UK here. Prices start at $3,632 / £5,0145.

My tested version of this laptop has an Intel Core i9-285H, an IPX5070 with 8 GB, 32 GB of RAM, and a 1 TB SSD. It's pretty hefty, and it does the job, that's for sure. The fact that it has a dedicated GPU shows that this thing is meant to work. The screen is also WQUXGA (3840x2400) with an 800-nit IPS panel.

You can fully inspect this thing out with a loaded Ultra 9 5070 with 64 GB and 4 TB of SSD. That will run you just over $4,000. My unit is not fully spec'd. It was pretty close and comes in at about $3,400 to $3,700, depending on how I look at it. If you get a base level with an entry point of an Intel Ultra Core 7 RTX 5060 and a terabyte of SSD, you can get it for just under $1,700 at $1,688.

So, much like most of Lenovo's line-up, you can expect this thing to go up and down the price chain however far you want. What's important to recognize is that they have laptops all across the spectrum for what you're wanting.

Lenovo ThinkPad T1g Gen 8: Unboxing and First Impressions

Right off the bat, this is a super sharp machine. I'm a big fan of Lenovo laptops for how they always look uniform yet still have a little taste of differences.

When it comes to being uniform, it still has the matte black that I love, the touchpoint, a generous trackpad, a very comfortable keyboard, a great screen, a physical shutter on the camera, spectacular ports, and all-around really standard and clean branding.

The things that are different, though, are that, unlike a lot of the other models that I've tested, this doesn't have a left and right-click button at the top of the trackpad that's meant to be used with touchpoint.

It does still have a little bump, though, so that if you know that it's there, it's still accessible. I tested it, and the right-click still works just fine. It's just not a physical button; it's built into the touchpad.

Outside of that, this still looks super sharp. While it is bigger than some of the other models, it's by no means too cumbersome to carry. I would happily carry this around every day in my backpack, and it fits even at 16 inches in most standard-size or slightly bigger backpacks. It's a pretty tight fit in something like a Bellroy Daily Pack, but in my beloved Nomadic or TomToc bags, this fits without any problem.

In the box comes the standard charger and always great packaging to make sure that the laptop stays safe while in transit or in the store. Admittedly, I rarely use the chargers that come with these devices personally, but that's because I usually opt for more efficient and more useful chargers from Anker, Ugreen, or even Nomad.

For something this size, though, I'll probably continue to use one of my bigger Anker chargers that have a few ports, phenomenal output, and even Bluetooth capabilities to give me readouts. I can see where my power is going for each port on the plug.

Lenovo ThinkPad T1 Gen 8: Design & Build Quality

As previously mentioned, this is an absolutely spectacular build device. If you're more familiar with Apple products, this does feel quite a bit like the MacBook Pro. I feel bad constantly comparing it to that, but the reality is that the MacBook Pro is a little more distinguishable and more known in the popular field.

What's unlike the MacBook Pro, though, is that this also features a trackpoint, a privacy shutter, human presence detection, upgradable memory, and that USB-A port that I wish my MacBook Pro had.

It's no secret that this is a big machine. It's a 16-inch powerhouse, so don't expect it to be as light as a feather or as light as some of Lenovo's carbon models. That doesn't mean that it's wildly uncomfortable either.

Yes, it's a big laptop, but for its size, it's so barely portable and relatively thin and light. Especially when you consider that you can get this spec'd out with a tandem OLED 120 Hz screen, massive amounts of storage, 64 GB of RAM, and a dedicated graphics card. That's pretty insane all around.

Lenovo ThinkPad T1g Gen 8: In use

I've had this laptop in rotation for my team and myself for the last 163 days as I write this paragraph. Throughout the time, I've used it for virtual meetings, projects in Notion, a lot of writing, and emails.

I'm taking over the world one AI at a time, trying to teach myself things through Claude and GPT. I've taught myself how to code. I've done a lot of website work. I've sent a lot of Slack messages and even watched a fair number of tutorials on YouTube.

While working on project management, this executive screen fits a good amount of data, especially with the higher resolution. I can fit quite a bit on this screen. When it comes to basic photo editing, the screen is still pretty sharp and fairly color accurate. It may not be the best photo editing laptop I've ever used, but for most this would be just fine.

This machine is powerful enough that I can jump in and run quite a bit of my workload on it without even feeling like it's slowing down at all. I've done a ton of work building out Notion workers utilizing this laptop specifically.

I've done a lot of work in VS Code, GPT, Claude, and Notion, running some pretty heavy workflows to get the sinks working the way I wanted them to. It all happened without any problems on this machine, thanks to its robust processor, RAM, and storage.

Beyond that, typing has been an absolute dream on this. I have always said, and probably will continue to say, that Lenovo laptops, specifically the ThinkPad variant, have some of the best keyboards on the market, perhaps ever. Even throughout all their changes over the years, they continue to have a spectacular keyboard.

The best way I can describe this laptop is that it is for people who need a professional machine for workloads to match. These people aren't the ones that are just working on documents or emails or quick office tasks like that.

It's the people who need to be able to jump into any kind of work at any time. They're using a ton of processing power, and they need a lot of ports. They're the most likely to be more tech-savvy individuals who bounce in and out of what they do.

Lenovo ThinkPad T1g Gen 8: Final verdict

All in all, this laptop has been wonderful to use. I have most appreciated the parts and the reliability of this machine. Being able to plug in any device I may need without having to carry a dongle is peace of mind that I do not take for granted.

Also, having enough headroom in your powertrain to take care of all the projects in one's own busy days is a superpower that many would appreciate.

If you're the generalist or the specialist of many, if you're into systems, IT, or you're just the kind of guy who always has a thousand projects he's juggling, then this is absolutely a laptop you should consider.

For most people, this would be overkill for them. In my technical world, people I work with would absolutely benefit from this kind of machine. It has the power to run bigger programs and the storage to manage data if that's part of what they're doing.

It has ports to jump in and out of whatever they are solving, and it's portable enough to carry around from place to place (even though they're not going want to walk around holding this in their hand anytime soon). It's possible, but it's just not comfortable.

It's sharp, it's sleek, it's powerful, and it has ports. It's expandable all around. Lenovo nailed it with this laptop.

For more top picks, see our guide to the best business laptops we've tested.

• Kinryū Labs found misconfigured APIS database in Vietnam exposing 220M passenger and crew records
• Data included PII, travel details, seat assignments, and baggage references from 2017–2026
• Archive locked and there is no evidence yet of dark web sale

Millions of travellers have had their sensitive information exposed on the internet, thanks to a “series of misconfigurations” discovered in a cloud database, experts have warned.

In early June 2026, security researchers from Kinryū Labs discovered an Elasticsearch cluster which, although inaccessible from the open internet, allowed access through an alternate route - a cloud-based path. Once inside that route, the researchers discovered that the cluster accepted default credentials, granting access to an archive with 29 indices, weighing roughly 107GB.

The archive was apparently generated by an Advance Passenger Information System (APIS), a system airlines use to collect and send passenger and crew information to country authorities before flight arrival or departure. Usually, the system collects people’s names, birth dates, nationalities, passport and travel document numbers, and flight details, which are then used for border control, immigration, and similar cases. In this case, however, it also contained people’s sex, document expiration dates, issuing countries, airlines, departure, destination and transit airports, seat assignments, baggage reference, and more.

It is not known who operated the APIS, or who owns and runs the database. All the researchers managed to find is that it was hosted in Viettel-assigned IP space in Hanoi, Vietnam’s capital.

Who was affected?

Of the 29 discovered indices, two were rather large: one contained 210,318, 069 passenger records, while another 10,465,631 crew records. In total, 220 million records, created between January 2017 and April 2026, from people who traveled to, from, or through Vietnam during that period.

The records don’t correspond to individuals, however. If a person travelled multiple times, they will show up in the archive multiple times. Canadians, Chinese, Korean, and New Zealandian nationals are among the ones whose information was exposed. The database is not limited to a specific airline, either - various airlines in Asia-Pacific, Europe, and Middle East regions were mentioned in the researchers’ report.

Since the researchers could not attribute the database to a specific entity, they reported it to the Vietnamese authorities, different airlines mentioned in the archives, and the country’s CERT (Computer Emergency Response Team), on June 3. The archive was locked down a week later, on June 8. According to BleepingComputer, it was the Singapore Airlines’ security team that took the lead on remediation efforts, telling the researchers they “engaged the relevant parties” and have “taken steps to contain the issue.”

Without a proper audit of the logs, and a full-blown forensic investigation, it is impossible to tell if any threat actors reached the database before the researchers, or if they exfiltrated and used the data found inside in identity theft, wire fraud, or other scams. What’s (somewhat) comforting is that there is no evidence of such activities on the dark web, and no hacking groups have made such claims. No one is selling the archive on the dark web, either.

Number one causes of data spills

Misconfigured databases remain one of the key causes of data leaks. Most businesses generate some type of data on their employees, partners, clients, or customers, and store it in the cloud for easy access and actionable insights. However, some businesses don’t understand the shared responsibility model of cloud security or are simply reckless and sloppy when it comes to securing their cloud-stored data. Others, according to Cassius Edison, COO of Closed Door Security, have a problem with visibility of their IT real estate:

“The range of technology now used and managed by firms globally has made misconfigurations an increasingly persistent problem,” Edison explained. “Many organizations fail to maintain full visibility of their IT real estate and fail to perform proper audits of their systems, which inevitably leads to oversights in security and monitoring.”

For Edison, tackling misconfigurations internally can be difficult, “especially at large companies where teams work independently across a range of systems,” and advises organizations to bring in independent pentesters and security auditors.

Some of the biggest data leaks in the world came not from hackers breaking into locked-down systems, but from businesses inadvertently exposing their customers.

In 2026 alone, we’ve seen more than 670 million identity records exposed by Infutor, a data-driven consumer identity management company, as well as more than three billion records exposed through a misconfigured MongoDB database managed by global identity verification services, IDMerit.

Via BleepingComputer

• Japanese retailer warns of further GPU price hikes
• The retailer doesn't specify which GPUs will see increases
• Consumers are urged to buy now, but GPUs are already overpriced and unaffordable in many cases

The PC hardware market is still in disarray, with RAM shortages impacting almost every component, and unfortunately, matters could get even worse for GPU hunters.

As reported by VideoCardz, Japanese retailer Applied has warned consumers about potential price hikes for GPUs (yet again). It's unclear which GPU models this might apply to, but the retailer urges PC owners looking to upgrade their GPUs to buy as soon as possible.

VideoCardz also highlights that Japanese retailers only recently adjusted GPU prices upwards. In August, stores in Akihabara warned that pricing would be around 20% to 30% higher than usual.

Considering the recent rumblings of price hikes from Nvidia's board partners, it's fair to suggest that these increases will likely apply to other regions outside of Japan (assuming there's anything in these rumors).

If it wasn't exactly clear already, these price hikes are caused by the RAM crisis which is affecting all manner of PC components. Graphics cards are hit due to the rising cost of the video RAM on board.

Panic buying still isn't the best solution

PC owners are now hard-pressed to find affordable hardware upgrades, and it's been that way since the start of 2026. The RAM crisis is showing zero signs of slowing down, too, especially with reports from Samsung and industry analysts suggesting that the memory shortage will last past 2027 or beyond that, even.

Despite that, I still don't think it's the best idea to panic buy now when it comes to a GPU. Many Nvidia GeForce or AMD Radeon third-party GPUs are either unaffordable or overpriced at various major retailers. Prime examples of the former are the RTX 5080 at $1,699 at Best Buy in the US currently, while the RTX 5060 remains overpriced between $450 and $500, despite its $299 MSRP.

The same goes for AMD's Radeon RX 9070 XT, which has a $599 MSRP but can now cost up to $929 (specifically the Gigabyte overclocked model). The Radeon RX 9060 XT (16GB) also sits at least $200 to $300 above its MSRP, and the list goes on (in the US and elsewhere).

Simply put, buying a new GPU doesn't seem worth it unless you're a gamer looking to dive into the PC ecosystem for the first time. That's a harsh reality to accept, but panic buying might do more harm than good by increasing demand (which could lead to further short-term price hikes).

• Liquid Network hack exploited a bug in SideSwap, releasing 3,998 BTC (~$313M) to attackers
• Hackers claimed “white‑hat” intent, returning 3,400 BTC after fixes, leaving 598 BTC missing
• Network remains paused as Blockstream and Federation patch vulnerabilities and prepare safe restart

The latest twist in the Liquid Network Bitcoin hack is worthy of a short movie, if not a full-length feature film.

Apparently, the hackers are actually the good guys, who stole the money to “keep it safe” until a vulnerability in the protocol had been fully resolved. They promised to return the funds afterwards.

What is Liquid Network?

Liquid Network was designed to solve a specific problem on the Bitcoin blockchain - being rather slow. The transactions on the network are recorded in a “block”, which is added to the chain roughly once every 10 minutes. Also, each block can only hold a limited number of transactions, which means the network can handle a smaller number of transactions per second, compared to conventional payment systems. Transactions that don’t make it into a specific block then need to wait for the next one, thus extending the confirmation time.

To solve that problem, Liquid Network was built. It runs its own Bitcoin reserve and its own blockchain, also known as a “sidechain”. When a person wants to use Liquid Network to send money quickly, they first convert their Bitcoin into Liquid Bitcoin, or L-BTC. They can then send it to another person much faster than a regular Bitcoin transaction. The recipient can keep the money on Liquid or convert it back to regular Bitcoin and move it to the Bitcoin network.

This way, Liquid provides a faster network without requiring every transaction to happen directly on the Bitcoin blockchain.

Besides speeding up Bitcoin transactions, Liquid Network also allows users (companies and other entities) to create and trade other digital assets, including tokenized securities, or stablecoins.

The project was built by Blockstream, a Bitcoin-focused technology company founded in 2014. It is run by the Liquid Federation, a group of more than 80 member companies, including exchanges, infrastructure companies, and financial institutions. A smaller group of members (15 to be exact) operate the network’s “functionaries” (servers that keep the network running), while the wider group has a governance role. Members vote on three boards (Technology, Membership, Oversight), handling ideas such as technical direction, internal rules, memberships, and more.

What happened to it?

In early September 2026, still unidentified actors managed to generate around 4,000 L-BTC, without putting in the corresponding 4,000 BTC into Liquid. As soon as they did it, they sent the L-BTC through SideSwap, a legitimate service that is used to convert L-BTC back to Bitcoin and vice-versa. The system apparently regarded the withdrawal as legitimate because, as was later determined, a bug prevented SideSwap from distinguishing between “real” and “fake” L-BTC, and treated them all the same.

As a result, the Liquid Federation ended up releasing 3,998 real BTC (more than $313 million at press time) to the attackers. As soon as the operators realized what had happened, they halted new transactions and warned about possible disruptions until the service was restored.

Then came the movie twist: the hacker started communicating with network maintainers through on-chain Bitcoin transactions, promising to return the funds when the vulnerability is fully resolved:

“Please fix the bug first. The chain is under risk at latest commit right now. Make sure every node is patched. Then we will transfer the money back safely after confirming the fix,” one of the messages read.

Earlier today, Coindesk reported that the hackers partially kept their promise, returning 3,400 of the 4,000 BTC drained, which suggests that the flaw was remedied. The remaining 598 BTC, worth approximately $47 million, is currently unaccounted for.

“3,400 BTC of the roughly 4,000 BTC withdrawn on September 6 has been returned to the Liquid Federation wallet. The return followed confirmation from Blockstream that the affected bridge nodes have been patched,” wrote Samson Mow, former chief strategy officer at Blockstream, on X. “Approximately 598 BTC remains outstanding, and Blockstream continues to engage with the white-hat hackers.”

He added that the network remains paused while Blockstream and Federation members make additional fixes and security improvements, resolve the chain split, and prepare for a safe restart.

“Liquid wallets and services will continue to be affected during this time. No user action is needed, and please do not send Bitcoin to Liquid peg-in addresses until we confirm the network has restarted,” he added.

• Microsoft 365 users targeted by phishing campaigns using BigBear 2.0 and AiTM proxies
• Attackers impersonate IT staff via calls, Teams, and email to steal credentials and bypass MFA
• CloudSEK tracked 5,000+ stolen records; Arctic Wolf urges phishing‑resistant MFA and conditional access

Microsoft 365 users are facing a barrage of cyberattacks all aimed at a single goal - to try and expose credentials which can later be used against employers in data theft attacks.

Different groups conduct their raids and bypass multi-factor authentication (MFA) protection to access victim accounts - CloudSEK, for example, said that some groups are using BigBear 2.0, a new phishing-as-a-service (PhaaS) framework that allows crooks to intercept passwords and authenticated session cookies.

Arctic Wolf, on the other hand, focused on a single threat actor, which it dubbed PREY-0058. This group, despite significant overlaps with other collectives in terms of techniques, technologies, and procedures, is not a rebrand of older organizations. Instead, the researchers believe the lines between the groups are blurred and that there is a large group of affiliates, splinter crews, and other cohorts using the same phishing infrastructure and thus often confuse defenders and analysts.

Similar methods, similar results

The attack methodology is similar across the spectrum. Crooks would call their victims on the phone or approach them via Teams and email. They would introduce themselves as members of the IT help desk sent to sort out a specific problem or issue.

Then, they would either convince the victim to grant remote access, or to open a spoofed Microsoft 365 login page and enter their credentials there. In both cases, the goal is the same - to get the victim to type in their username, password, and 2FA code, on a fake site built by BigBear 2.0 or a similar phishing framework. This framework, using an attacker-in-the-middle (AiTM) proxy between the victim and legitimate Microsoft infrastructure, harvests credentials, MFA codes, and session cookies, and replays them through an API essentially hijacking a legitimate authentication session.

Once they gain access, the attackers can do all sorts of things, but they are mostly focused on exfiltrating sensitive data from Outlook, Teams, SharePoint, and OneDrive. Deploying ransomware is rarely seen.

The campaign CloudSEK has been tracking has been rather successful, the researchers argue, saying BigBear 2.0 was used to exfiltrate more than 5,000 credential records, “including 474 complete MFA-bypassed authentications, 1,032 plaintext passwords, and 4,148 session cookies - affecting 3,331 unique victim IPs across 40+ countries with the operation still active at the time of writing.”

“The multi-user PhaaS panel is leased to at least five affiliate operators identified through live Telegram exfiltration bots, each receiving stolen credentials in real time.”

Speaking to BleepingComputer, CloudSEK says the campaign targeted 461 organizations, out of which 258 have had at least one set of credentials compromised.

Defending with phishing-resistant MFA

Arctic Wolf’s researchers stressed that the attackers are focused primarily on US-based businesses: construction and engineering, healthcare and pharmaceuticals, real estate and property management, finance, and professional services, The Hacker News reported. The researchers advise organizations to implement Conditional Access policies, deploy phishing-resistant MFA, and restrict the scope of data users can access via SharePoint. Obviously, employee education on the dangers of phishing cannot be understated.

"Defenders can disrupt this activity by detecting anomalous residential-proxy token replay, SharePoint discovery and bulk access, mailbox harvesting, and newly registered authentication-themed lure infrastructure," Arctic Wolf said.

Phishing-resistant MFA is multi-factor authentication designed so that an attacker cannot trick a person into handing over authorization code, either via a message, or through a fake login page.

These include products such as passkeys, YubiKeys security keys, and authentication methods based on FIDO2/WebAuthn. Since phishing-resistant MFA cryptographically ties the authentication to the legitimate website, the authentication cannot simply be forwarded to an attacker.

Alienware AW3926QW: One-minute review

For serious PC gamers, few monitors have been more hotly anticipated than this epic 39-inch ultrawide beast. The Alienware AW3926QW combines LG's latest OLED panel tech with 5K2K native resolution on an incredible scale. The want is strong for this one.

But even those impressive highlights don't quite capture why the Alienware AW3926QW is such a hot item. There's more to it than that. Firstly, not only does it pack LG's new Tandem WOLED panel technology, it adds a further twist by offering RGB-stripe subpixels.

That probably seems like an arcane detail. But it has a broad impact on image quality, and not necessarily always for the better. Then there's the price. At $1,099 in the US and £999 in the UK, this is hardly a budget gaming monitor.

However, next to its closest rival and the only other 39-inch 5K2K OLED currently available, LG's own $1,799 UltraGear Evo GX9 39GX950B, it's massively cheaper and yet arguably more appealing. Of course, even on paper, the Alienware AW3926QW isn't perfect.

Its most obvious shortcoming is the mere 165 Hz refresh rate. Given that 32-inch 4K OLED panels with 240 Hz refresh are widely available, the step back to 165 Hz is a notable downgrade.

The pushback on that objection, however, is twofold. First, the 5K2K resolution translates into 5,120 by 2,160 pixels and therefore one heck of a lot of GPU load. In other words, the idea that you're going to be pushing 240fps-plus to this monitor in the latest and most demanding games is a bit fanciful. Most of the time, 165 Hz will be plenty.

Moreover, this isn't the kind of display anyone would buy specifically for high-frame rate esports gaming. It's wrong in all kinds of ways. But even then, Alienware has included a number of lower-resolution dual-mode resolution options with 330 Hz refresh. So, if you absolutely insist on esporting on this huge panel, well, it will accommodate that use case.

More likely, however, people will be considering this panel for all-round gaming and daily computing tasks. And in that context, the promise of a huge OLED panel that actually offers decent pixel density thanks to that 5K2K resolution is an absolutely tantalising proposition. This Alienware definitely looks set to take its place among both the best gaming monitors and the best ultrawide monitors in 2026.

Alienware AW3926QW: Price & availability

• How much does it cost? $1,099 / £999 / AU$1,999
• When is it available? Available now
• Where can you get it? Available in the US, UK, and Australia

$1,099 is hardly the stuff of budget gaming. But it's still a very, very punchy price for this class of gaming monitor. The only comparable 39-inch 5K2K OLED monitor is the LG UltraGear Evo GX9 39GX950B. But that has an MSRP of $1,799.

What's more, despite the lower price, you get a glossy screen coating where the LG is matte, plus RGB-stripe pixels, albeit that comes with slightly lower brightness. Of course, if you shop around, you can grab a 32-inch 4K OLED for about half the price of this Alienware ultrawide monster.

So, even at this relatively discounted price compared with the closest competition, you're still paying quite the premium versus a "conventional" 32-inch 4K model. Still, given how cutting edge this display is, Alienware has done a solid on the pricing. It's very impressive.

• Value: 4 / 5

Alienware AW3926QW: Specs

Alienware AW3926QW: Design and features

• Good connectivity
• Glossy anti-glare coating
• Sensible 1500R curve

While the huge OLED panel is obviously the star of the show, the support act of features and design do matter. Alienware's latest visual language has ditched the Storm Trooper vibe of its earlier gaming displays comprising white glossy plastic and Sci-Fi lines in favour of organic, rounded shapes and dark blue, lightly textured plastic.

The new look is definitely less distinctive. But the chassis is well enough put together, and at least the minimalist look and slim bezels mean this monitor is unlikely to date quickly. For the record, the stand supports height, tilt, and swivel adjustment, plus a few degrees of pivot, the latter intended to allow for making the screen level as opposed to supporting portrait mode, which wouldn't be practical with such a large ultrawide panel.

Speaking of which, this is a huge monitor, and you'll need decent desk space to accommodate it. But the ergonomics are helped by the relatively gentle 1500R panel curvature.

Just what makes for the ideal curve is subjective, of course. But at least some curve on an ultrawide display of this size does help with both immersion and maintaining reasonable viewing angles at the extremities of the panel. But you can go too far with extreme curvature, too, something this monitor certainly avoids.

The glossy anti-glare coating is another feature that comes down to personal preference. The advantage is boosted contrast and clarity, the downside added reflectivity. On balance, it's probably a net win for this kind of OLED monitor due to the incredible HDR visuals it enhances.

Connectivity is another strong point. Along with the usual HDMI and DisplayPort interfaces, you get USB-C with 90W of power delivery and a KVM switch. There's also a USB hub with both USB-A and USB-C sockets, an example of each is located conveniently on the lower bezel.

Finally, it's worth noting that Alienware provides a full suite of burn-in mitigation features, like pixel cleaning. There's also a reassuring three-year warranty which includes burn-in cover.

• Design: 4.5 / 5

Alienware AW3926QW: Performance

• Glorious HDR visuals
• RGB-stripe precision plus decent brightness
• "Only" 165Hz

The OLED gaming monitor market has gotten pretty complicated of late, what with all the different panel technologies on offer. The Alienware AW3926QW is absolutely a case in point. It combines LG's latest Tandem WOLED panel generation with a new RGB-stripe subpixel structure in a huge 39-inch 5K2K package.

The immediate upshot is an OLED gaming monitor that combines an epic viewing vista with pixel density on-par with a 32-inch 4K monitor. That's an incredible combination of sheer scale and image detail, the likes of which are only matched by the aforementioned LG UltraGear Evo GX9 39GX950B. The 5K2K native resolution also makes this a pretty fabulous monitor for day-to-day computing. Text is crisp and clear, and there's oodles of desktop space.

However, it's that RGB-stripe subpixel structure, plus the gloss anti-glare coating, that separates this Alienware from that LG. So, how do the two compare? On paper, the LG is rated at 335 nits full-screen brightness and 1,500 nits peak HDR, while this Alienware tops out at 300 nits and 1,300 nits, respectively.

That's because the LG model uses a panel with an additional white subpixel in an RGWB configuration to boost brightness, where this Alienware has a pure RGB — or red, green and blue — subpixel structure. The thing is, that added white subpixel on the LG model isn't as effective at boosting color brightness as it is at boosting pure white brightness. So, in the real world, this Alienware feels pretty much just as punchy.

Even better, because of the pure RGB feature, if anything, colors are richer and more vibrant. Add in the glossy panel coating, and the results are a little short of spectacular. The HDR performance in games like Cyberpunk 2077 is incredibly impactful. Indeed, the punchy colors are closer to Samsung's QD-OLED tech than an RGWB LG panel.

Even better, you don't have to put up with downsides of QD-OLED, including its characteristic purple tint in bright ambient light. For pure visual theatre and immersion, this is probably the most impressive gaming monitor currently on the market.

It is not, however, perfect. In extremis, full-screen brightness is a limitation. As with all current OLED monitors, this display can only hit its peak 1,300 nits performance over a very small section of the panel. As you light up more and more of the panel, the maximum available brightness tails off.

So, in some outdoor scenes in games, let's say under the desert sun in Cyberpunk 2077, the results can be just a touch underwhelming. That's the one scenario where a traditional LCD monitor, and particularly one with mini-LED backlighting, can be more impressive thanks to far superior full-screen brightness.

While we're talking brightness, this Alienware suffers from another slight issue. Likely due to an anti-burn-in feature called Convex Power Control, the edges of the panel can dim slightly during gameplay. It's not a super-obvious problem, but once you notice it, it can detract a little from the overall impact of the display. Unfortunately, you can't toggle the feature off for now. Hopefully that will change in a future firmware update.

It's also true that the 165Hz refresh is modest by current gaming monitor standards, especially at this price point. How much of a limitation that really is in practice, well, it depends on what games you play. With the latest, most graphically demanding titles, it's not much of a limitation if you want to use the highest visual settings. It's not like you're going to hit 300fps at 5,120 by 2,160 pixels with all the eye candy switched on.

Of course, if you're playing, say, Counter-Strike 2 competitively, you're going to want a lot more than 165Hz. This monitor can actually deliver 330Hz running at one of its lower "dual-mode" resolutions that use pixel doubling to achieve alternative pseudo-native resolutions.

What's more, thanks to the incredible response performance of all OLED panels 330Hz plus 0.03ms response makes for excellent motion clarity. But like all dual-mode monitors, overall image quality and sharpness does take quite a hit. And, anyway, if you're really serious about esports, you're almost certainly not shopping 39-inch ultrawide panels.

Ultimately, then, our only significant reservation is the edge dimming that can happen during gaming. It's a bit of a pity because in pretty much every other regard, this is one of, if not the, most spectacular and enjoyable gaming monitors out there right now.

• Performance: 4.5 / 5

Should you buy the Alienware AW3926QW?

Buy the Alienware AW3926QW if...

Don't buy it if...

Also Consider

How I tested the Alienware AW3926QW

I used the Alienware AW3926QW for literally everything for two weeks. As well as running it through pretty much my whole steam library, it was also my daily driver for all kinds of computing tasks and also doubled as my movie watching panel.

I was looking out for how it compares with both LG-based monitors with RGWB-spec Tandem OLED panels and competition displays with Samsung's QD-OLED tech. It was fascinating to discover how it performs in terms of brightness compared to those alternatives and also what impact the RGB-stripe subpixel tech has.

Using it as a daily driver for work and web browsing was almost as interesting as the gaming larks. This is such a large, high-resolution display, it was all a real treat.

I also investigated all of the concerns that early adopters of this monitor have been dicsussing, including including green tinting, adaptive refresh flicker and so-called "vignette dimming." I found only the latter was much of a problem and even then it probably isn't a deal breaker.

• Originally reviewed in August 2026

• The Bing Wallpaper app is serving an ad in Windows 11
• The advert is for a Harry Potter and Fantastic Beasts movie collection
• There's a rebellion against this blatant advertising, with a significant number of users saying they've immediately removed Microsoft's wallpaper app

Some Windows 11 users who've installed the Bing Wallpaper app have been treated to an unpleasantly in-your-face advert for Harry Potter.

To be precise, it's an ad for a collection of 11 Harry Potter and Fantastic Beasts movies, and, as Windows Latest reports, this appears as a full-page promotional image that becomes your desktop background.

This isn't happening for every Bing Wallpaper user, and it appears to be a regional rollout; but based on the plentiful Reddit feedback of the negative variety, it's being piped to quite a number of PCs.

For the uninitiated, Bing Wallpaper is an app that serves up daily wallpapers to those who've installed the software — and note that it isn't installed by default; this is something you have to elect to have on your Windows 11 PC.

Nevertheless, it's an over-the-top move by Microsoft to shovel something like this onto the desktops of those who've chosen Bing to pick their backgrounds.

As one annoyed Redditor says, filing the Harry Potter wallpaper under the 'unskippable ad' category in the 'Mildly Infuriating' subreddit: "I had it [Bing Wallpaper] installed since up until this point it was a fairly harmless program that gave a variety of animals, environments or pattern backgrounds that rotate daily. Wtf?"

Replying, another Redditor observes: "Free software from a trillion dollar company means you are the product." Some folks responded to that to say that Windows 11 isn't free, but this Redditor isn't talking about the OS itself, but rather the Bing Wallpaper app, which is a free add-on for Windows, of course.

Analysis: Bing begone

Windows Latest notes that the terms and conditions of the Bing Wallpaper app allow for "promotional offers" from Microsoft, but what's happening here goes well beyond that. Frankly, this isn't acceptable in any way — and Microsoft really should know better than to serve a blatant advert in this manner.

I'd say I was shocked, but ads have always been a problem in Windows 11. On top of that, about a year ago Bing Wallpaper was used to perform another underhand trick with desktops that made me cringe. In that case, an accidental click on the Windows 11 background fired up a Bing search (yes, really), and I called this "a new low" for Microsoft at the time.

This, however, represents Microsoft plumbing fresh depths. A notable number of those complaining on Reddit have said that they've immediately uninstalled Bing Wallpaper due to this incident (generally with a sprinkling of added curse words).

One of the politer comments notes: "Honestly if they cut out text and just left the base [image] with the option to right click to get more info and it took the user there it would be passable. But current state just time to remove Bing Wallpaper."

This is very much representative of Microsoft's different departments not talking to each other. On the one hand, there's a big drive to fix Windows 11 and try to please users with all sorts of nifty changes and long-awaited features. On the other, the Bing Wallpaper team thinks it's fine to deploy what might be the worst example of advertising I've ever seen in the Windows ecosystem — and there's quite some competition for that accolade, sadly.

At any rate, I assume this won't be happening again, Microsoft, given the reaction here… right?

The first Wi-Fi 8 routers were launched by TP-Link at IFA 2026 last week with the devices set to hit the shelves later this year. So, when that happens, is it a good idea to immediately jump on board with this new more performant wireless standard?

Not exactly. There's a bit to unpack here about exactly how Wi-Fi 8 improves on Wi-Fi 7 — it's not any faster in terms of raw performance, in case you weren't aware — as well as when routers and devices that support the new standard will arrive.

All of this will factor in to the decision you'll make about when to upgrade to Wi-Fi 8 in your home. In this article, we'll look at what Wi-Fi 8 offers over and above Wi-Fi 7, and then examine considerations around the upgrade timeline, and when you might want to make a move to benefit from cutting-edge Wi-Fi.

How is Wi-Fi 8 better than Wi-Fi 7?

Wi-Fi 8 doesn't move the needle in terms of raw speed over Wi-Fi 7 — the latter is already beefy in that respect anyway — and instead aims to boost overall wireless performance in different ways.

Wi-Fi 8 seeks to improve the overall stability and reliability of the wireless connection, so you get a smoother and faster experience when you're further away from the router — and it's particularly focused on helping boost speeds at the very edge of the network's signal.

Another key point with Wi-Fi 8 is that it's built to cope with more devices and keep speeds up, as well as dealing with interference better. So, in signal-dense environments, where there are lots of devices competing for bandwidth, all this traffic will be better directed and managed to ensure better performance.

That'll obviously help with larger households where everyone has multiple devices, but it's going to be particularly important for places like apartments or office buildings where there can be a lot of competition from multiple routers and a whole host of devices all packed into a relatively small area.

TP-Link — which unveiled both a traditional Wi-Fi 8 router, the Archer 8 Ultra, and a mesh Wi-Fi system, the Deco 8 Ultra, at IFA 2026 — revealed some clever tricks for these cutting-edge pieces of hardware. They use Dynamic Sub-band Operation (DSO) and Non-Primary Channel Access (NPCA) tech to portion out only the bandwidth any given device needs — so tiny smart home devices, for example, only get the small chunk that they require, leaving more bandwidth to be usable for other hardware. In short, the traffic from all devices is managed in a much smarter manner, and situations where performance gets congested with Wi-Fi 7 are avoided with Wi-Fi 8.

The end result is a considerable leap in performance of wireless devices, even though the core speed and throughput spec of Wi-Fi 8 remains the same as its predecessor. This is particularly evident in environments with lots of competing devices, or when you're at the outer limits of the wireless signal.

When will Wi-Fi 8 routers go on sale — and should I buy one straight away?

As mentioned, TP-Link's initial models are on sale later in 2026, and pre-orders will go live in some regions from the start of October. Asus Wi-Fi 8 routers are also expected to arrive later this year.

In theory, then, you could grab yourself a Wi-Fi 8 router in a couple of months and be up-and-running with the latest wireless standard — but should you?

Here's the thing about being an early adopter of a new Wi-Fi standard: you must remember that when the first routers come out, they're based on a draft version, not the finalized wireless standard. In other words, it's still very early days for Wi-Fi 8 (although when it is finalized, likely in mid-2027, existing routers will be updated appropriately, of course).

So, while you can have a Wi-Fi 8 router later this year, you won't be able to buy any devices which are compatible with the standard. Naturally, both the client device and the router must support the new standard to benefit from its features, and smartphones and laptops that are Wi-Fi 8 capable aren't arriving until next year.

And even then, they will only be available in small numbers, and these will be premium cutting-edge (expensive) devices, as you might expect.

Is it pointless to buy a Wi-Fi 8 router when they first come out?

While you won't get the immediate full benefit of Wi-Fi 8 until you have the supporting devices to go with the router, it's not completely pointless to be an early adopter of something like the TP-Link Archer 8 Ultra. It's backwards compatible with all devices supporting earlier Wi-Fi standards, of course, and that hardware will still get the benefit of some of the Archer's traffic management tricks.

That said, until Wi-Fi 8 laptops, tablets and phones arrive in greater numbers, you're not realistically going to get much mileage out of your shiny new Wi-Fi 8 router. You will, of course, be future-proofed and ready for next year's devices, but the problem is that buying a Wi-Fi 8 router at launch means you'll pay a premium and a high price for the privilege.

This cutting-edge hardware is always expensive when it first comes onto the scene, so on balance, it's much better to wait until the market fills out, and more Wi-Fi 8 hardware — routers and consumer devices — is available, before you pull the trigger on a purchase. Your wallet will be happier if you're patient.

Rest assured, though, that the future of wireless is almost here, and Wi-Fi 8 promises to make a big difference when it fully kicks in.

• AI data centers currently use a huge amount of energy
• Scientists have found a way to cut that energy bill by "orders of magnitude"
• It involves using "ultrafast magnetic-field pulses" in RAM and storage

It’s no secret that the current artificial intelligence (AI) boom is leading to record levels of energy consumption — all that computing power needs to be fueled somehow — and it’s causing much controversy among the communities that are impacted whenever a new data center lays down its roots in their neighborhoods.

Now, though, scientists think they’ve come across a way that could radically slash the energy requirements of memory and storage, with potentially massive consequences for the future of the computing and AI industries.

In a paper published in the Advanced Materials journal (via a press release in Science Daily), researchers at the University of Edinburgh in Scotland wrote that the breakthrough would fundamentally affect the way magnetic memory operates. Right now, switching its state allows magnetic memory to control digital information, but the current methods of doing so can be costly in terms of energy.

Instead of using standard energy switching techniques, the researchers discovered an alternative that harnessed ultrafast magnetic field pulses that consumed far less energy. In fact, the paper claimed that the authors’ approach could cut energy usage by “up to two orders of magnitude” — in other words, a cut of around 100x, which is a significant reduction.

The data centers of the future

The AI revolution is only a few years old, but data center energy consumption has already become a significant issue. As the authors of the research paper put it, “Without significant improvements in efficiency, [information and communication technologies] could eventually represent a sizable share of worldwide electricity consumption and carbon emissions.” AI is playing a large role in that trend thanks to both its voracious appetite for component production and the sizable emissions it produces.

While the paper focused on magnetic memory, its theories could be applied to other fields, the authors believe. As study writer Dr. Elton J.G. Santos put it, “The same framework can be adapted to electrical currents and even ultrafast laser pulses, which are among the most cutting-edge technologies for future data storage. That means the ideas developed here could have applications far beyond the systems we studied.”

Although the research is still in the realm of theory, the paper’s authors proposed a number of practical steps that could help others build prototypes and conduct experiments.

That said, don’t expect monumental changes any time soon. There is still a long road ahead before these ideas get put into practice, if they ever do. But given the promising results of the scientists’ work, there is hope that the data centers of the future could be far less energy-intensive than those of today.

• Wordfence discloses two critical flaws in Elementor Pro and Super Forms
• Bugs allow unauthenticated arbitrary file uploads, enabling remote code execution; both patched recently
• Exploitation attempts already exceed 440,000

More than six million WordPress users are at risk of website takeover, researchers have claimed after discovering two major vulnerabilities being exploited in the wild.

Security researchers Wordfence disclosed finding two flaws, one in Elementor Pro, and one in Super Forms - two popular WordPress plugins.

Elementor Pro is a commercial plugin that allows users to build websites using drag-and-drop elements instead of code. With it, they can add advanced widgets, templates, different forms, popups, and more. It is quite a popular solution with more than six million websites actively using it.

Two bugs, hundreds of thousands of attacks

According to Wordfence, up until recently, it was vulnerable to an “unrestricted file type upload” bug in all versions up to, and including, 4.2.1. “This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible,” the researchers explained. “This requires that the targeted site has published a page containing an Elementor Pro Form widget with at least one non-required File Upload field.”

The bug is tracked as CVE-2026-32475, carries a severity score of 9.8/10 (critical), and was patched in mid-August 2026. So far, Wordfence alone blocked more than 190,000 exploit attempts.

At roughly the same time, the researchers also reported finding a flaw in Super Forms, a form builder plugin that lets users create and manage forms using a drag-and-drop interface. This plugin, with some 13,000 active installations, contained a bug that allowed arbitrary file upload in all versions up to, and including, 6.3.313.

“This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible,” the researchers explained.

This one is tracked as CVE-2026-14894, also carries a severity score of 9.8/10 (critical) and it, too, was patched a few weeks ago. For this flaw, Wordfence observed more than 250,000 exploitation attempts meaning that cumulatively, these two resulted in 440,000 attacks already.

Given the widespread adoption of these plugins, and the fact that the flaws are being actively leveraged, users are advised to apply the fixes without delay.

Via The Hacker News

• G7 urges governments and organizations to begin transitioning to quantum‑resistant encryption
• Warning highlights risk from future quantum computers able to break current standards like AES
• Guidance: inventory cryptographic assets, prioritize critical systems, and adopt phased PQC strategies

The G7, a collection of some of the world’s most powerful economies, is urging organizations to adopt quantum-resistant encryption as soon as possible and minimize the risk of losing sensitive data to technologically advanced threat actors.

Virtually every industry in the world today relies on encryption (the process of converting readable data into scrambled, unreadable data so that only someone with the correct key can decode and access it) to protect sensitive information. Banks, telecommunications providers, defense organizations, and practically everyone else are using some form of encryption - most probably AES (Advanced Encryption Standard).

Decrypting the protected data without the encryption key is considered almost impossible, since the computational effort necessary to pull it off would simply be too large. However, since quantum computers work on a fundamentally different principle, it is believed that once they are mature enough, they will be able to “crack” today’s encryption standards.

G7's advice

Now, the G7 has urged government and organizations to remain ahead of the curve by deploying “quantum-resistant encryption”:

“To protect themselves from the threat brought by CRQCs (cryptographically relevant quantum computers), organizations should begin planning their PQC transition now and should aim to complete their transitions within any the timelines set out by their national cybersecurity authorities,” the warning reads.

“In addition to quantum-related risks, organizations that delay their PQC transition may lose competitive advantage or may be excluded from contracting opportunities, including public procurement.”

The G7 advises governments and organizations to take a number of steps, including identifying critical systems and prioritizing them. They should adopt a phased and risk-based strategy, start their transition early, and inventory their cryptographic assets. They should also map their dependencies and develop a transition plan.

“To limit transition-related costs, they should opt to purchase products that integrate PQC and replace their systems with quantum-safe ones as part of their standard renewal schedule. As such, starting the transition early could result in lower migration costs overall. Planning and conducting their PQC transition properly would enable organizations to prevent insecure implementations and avoid increased exposure to conventional cyber threats.”

• US military branches disable ad tracking on government‑issued devices after warning
• Location data from personal devices still poses risks; past data remains for sale
• Senators urge DoD inspector general to review policies and stop servicemember data exposure

More than 20 years ago, Jason Bourne was smashing mobile phones to prevent being tracked by his adversaries - and the US Department of Defense (DoD) has realized it should probably do something similar.

In May 2026, Senator Ron Wyden mailed the DoD (among others), informing the agency that foreign powers were using commercial location data to target US troops - and now, Wyden has shared the responses he received from the US Army, Air Force, Navy, Marine Corps, and Special Operations Command, all of which have disabled advertising tracking across their government-issued devices, including Apple and Android smartphones, and Windows computers.

Some branches did it earlier this year, while the Air Force allegedly concluded the efforts in July 2026 - and while Wyden praised the move, he also suggested it is not enough, and that further steps must be taken in order to protect US troops stationed abroad.

Evaluating the leaked files

“We commend these service branches for implementing this cybersecurity defensive best practice on government devices,” Wyden and Senator Pat Harrigan wrote. “However, recent reports regarding the continued availability of commercial location data originating from DoD facilities raise troubling questions.”

Apparently, despite disabling these features and placing the troops out of reach of data brokers and similar commercial entities, the data that was gathered earlier remains available for sale, which still presents a risk.

“The members suggested data could continue to be available for several reasons, including that commercial data available originates from personal devices, not government phones, that are carried by servicemembers and government contractors,” a report on Wyden’s website reads.

“Wyden and Harrigan called on the DOD inspector general to examine commercial location data that DOD and other government agencies have already purchased to determine why existing policies have not prevented servicemembers location data from being sold online, and to recommend policy changes to better protect US personnel.”

Via TechCrunch

• Rhysida ransomware group breached Berlin’s state government, stealing 1.44 million files weighing in at around 5.8TB
• Attackers demanded 30 BTC (~$2.3M); Berlin refused, leading to full leak online
• Leaked data reportedly includes water supply info, staff records, and emergency plans

A cybercriminal group known as Rhysida allegedly broke into the network of Berlin's state government and exfiltrated 1.44 million files. They then tried to extort the government entity for money and when that failed, they leaked it all into the dark web.

According to multiple sources, the group first claimed responsibility for the attack on an underground forum, where it shared a small sample of the stolen files and demanded Berlin pay 30 bitcoin (around $2.3 million) in exchange for deleting the files.

Berlin recognized the attack in a press release, and said it would not be negotiating with the attackers, and instead launched a full-scale investigation into the incident, which it described as an “extremely serious crime and an attack on the state of Berlin.”

Evaluating the leaked files

A few days later, Rhysida decided to leak it all online - and Berlin is now reviewing the leaked files and is assessing the damage:

“After the publication of the stolen data from the Berlin administration, these files are being evaluated at full speed,” a press release, published on the Berlin.de website (machine-translated), reads.

“An additional steering unit has been set up in the Senate Chancellery under the leadership of the Chief Digital Officer (CDO), Florian Hauer, which coordinates the review, examination and evaluation of the leaked data and supports the two Senate administrations concerned in informing and advising the affected citizens and companies.”

According to German public broadcaster Tagesschau, the archive counts 1.44 million files and totals 5.8 terabytes. At the same time, the Chaos Computer Club (Germany's largest and best-known hacker organization) claims the archive contains sensitive data on the city’s water supply, personal data of admin staff, various employment references, and emergency plans.

Via Reuters

• Microsoft is working to speed up boot times
• Over at IFA 2026 a Microsoft executive said that 'we've made significant gains' with startup speeds and more
• The exec also underlined Microsoft's commitment to get Windows 11 running more smoothly on 8GB PCs

Microsoft is readying a major boost to the performance of Windows 11 that should speed up boot times.

Windows Latest reports that at IFA 2026 last week a Microsoft exec confirmed improvements to boot speeds are inbound.

This was Mark Linton, who is VP of Windows & Devices at Microsoft, who told the tech site: "We've made significant gains on things like boot time, Windows Hello responsiveness."

Windows Hello is the secure login that's offered with Windows 11 – often facilitated via an infrared-supporting webcam and facial recognition – and that happening more swiftly, alongside a faster boot time, should mean you arrive at the desktop in a far more timely manner.

This work isn't in testing just yet, we're told, but Microsoft is still tinkering with ramping up boot performance in internal builds.

Analysis: performance promises are underlined

The use of the word 'significant' is promising, and Windows Latest talks about getting to the lock screen 'almost immediately'. In fairness, Windows 11 already boots nippily (on my PC certainly), so we could be looking at effectively booting in the blink of an eye – fingers crossed.

As noted, this isn't even in preview builds of Windows 11 yet, but it should be here before too long. It's part of a larger effort and Microsoft's broad promise to make Windows 11 faster in general, ensuring that menus perform more responsively, and that apps load more swiftly (the latter is already rolling out in the form of a CPU boosting feature known as 'Low Latency Profile').

This performance boosting work is all the more important considering that 8GB laptops are making a resurgence – thanks to the RAM crisis pushing up notebook prices – and so Microsoft is also working to ensure that Windows 11 is more performant with that lesser memory configuration. Speaking of which, Windows Latest said that Microsoft also underlined its commitment to make sure that the desktop OS will run better on 8GB over at IFA 2026.

Linton said of Windows 11 that: "We're continuing to improve on the fundamentals," adding that: "We're optimizing so that 8 gig of RAM runs great on machines as well."

However, the exec didn't provide any estimates of what kind of performance jump might be expected – although that's hardly surprising at this early stage of the game.

• Microsoft reports phishing campaign using ASCII smuggling to bypass spam filters
• Attackers insert invisible characters into keywords, tricking filters and AI agents
• Defenders should normalize Unicode tags and flag unexpected invisible code points as suspicious

Cybercriminals are using the “ASCII smuggling” technique to make sure phishing emails pass security filters and land in people’s inboxes, experts have warned.

ASCII is a character encoding standard that turns characters and words humans can read into numeric values that computers can understand. It can also be used to create characters that aren’t even displayed on the screen (essentially “invisible” ones) but can still be read by the machine.

In a new report, security researchers from Microsoft found crooks are abusing this fact to distribute phishing emails. Most email providers offer solutions that filter out spam emails. These filters look for certain keywords and phrases, such as “funding”, “credit”, “loan”, and similar, and automatically send such emails to the spam folder.

Ongoing campaign

By adding a set of invisible characters in the middle of these keywords, the attackers can break them apart and thus “confuse” the filters.

While the human sees the word “funding” in their email, the security solution is seeing something like “fun[a long string of characters]ding”. This technique has been adopted from prompt injection attacks, where crooks would use ASCII smuggling to deliver malicious and invisible prompts in the emails.

Therefore, when a victim asks their AI agent to summarize the email, it ends up working on a prompt that could be anything from extracting sensitive data, to deploying malware.

Microsoft is saying the campaign has been ongoing for months, and while it peaked in February 2026 with more than 2.3 million emails every day, and has been in decline ever since, it remains active to this day. In early February, Microsoft observed a cluster of almost 150 sender domains, all themed around finance. These domains accounted for almost all (96%) of all the spam emails Defender for Office 365 flagged under ASCII smuggling.

Defending sounds relatively simple, though. IT teams should normalize Unicode tag characters and other invisible code points before applying any keyword detection. They should also consider all unexpected tag-block characters as suspicious.

Via BleepingComputer

You probably have tens, if not hundreds of passwords floating around across all the online accounts you use every week. In fact, the average person has over 150 passwords. It's not easy to remember them all, making it more attractive to keep them simple and similar - but that can lead to a serious chain of account theft.

That's why password managers like Keeper exist. They generate strong passwords and store them passwords in a secured vault to keep them safe from hackers and prying eyes. They even autofill your credentials to make logging in to your account faster and easier.

Keeper has cut prices on its personal, family, and business starter plans by up to 50%. Keeper regularly scores highly in our reviews, and includes great features across Personal, Family, and Business plans.

Why we recommend Keeper

Our Keeper review highlights the platform's zero knowledge architecture and device level encryption that helps keep your password vault secured against unwanted intrusions.

Where Keeper really shone was in our usability and convenience testing. We loved how Keeper uses biometric security to access your vault, rather than requiring a master password with each log in. By using a facial scan or fingerprint to verify that its actually you accessing your vault, it adds a fast but secure method of verification to ensure its you, and not a nefarious actor.

For households, the Family Plan includes five private vaults, allowing you to quickly share Wi-Fi or streaming passwords using Keeper's shared vaults.

The Business Starter plan covers 5 users, covering an unlimited devices, shared team folders, user activity reporting for IT admins, and a free Family Plan for every team member.

These discounts apply to the first year only, so the value is highest for new customers or anyone switching from a monthly plan. After that, pricing goes back to standard rates.

• More mods are out for DLSS 5
• They allow for the tech to be easily used with many more PC games
• One of these mods also alters the way in which DLSS 5 is applied to improve performance considerably — at a cost

As you've no doubt seen, modders have been having a field day messing about with Nvidia's DLSS 5, and the latest experiments include a trick to boost performance in a big way, and a method of easily running the tech in a lot more games.

Let's start with the latter, which as TweakTown reports is the DLSS 5 Swapper app which appeared on GitHub courtesy of developer Rakan Alkhaldi.

This takes the pain out of having to manually fudge DLSS 5 to work in unsupported games by automating the process, adding all the required files in the blink of an eye. You just drag and drop the game folder into the app, and it takes care of everything from there.

Swapper can even detect games on the PC it's installed on which can have DLSS 5 modded in. Not every game is supported, of course, but plenty are — and any given title doesn't necessarily have to have DLSS support at all, in any form (this is achieved via another community mod called DLSS 5 Feeder which is included with Swapper).

A similar tool, DLSS 5 Autopilot, published by 'Kizzuwatnaa' and also on Github, offers one-click DLSS 5 setup (via Feeder) along with an additional trick in the form of the 'neural upstream' add-on (from 'matiasLombo'). This runs the neural rendering (AI) process before the DLSS upscaling happens.

Normally, the AI polishing that DLSS 5 applies is performed as the last step of the rendering process to the upscaled final frame, but if you choose this option with Autopilot, it's happening earlier in the chain of events.

Based on experiments detailed on Reddit (posted by ToxicFatee), this makes a major difference to performance. The Redditor has an RTX 4080, and ran Assassin's Creed Shadows at 4K which went from 63 frames per second (fps) to 31fps with DLSS 5, but it was around 50fps with the neural upstream take on DLSS 5. That's a 20% loss, and a far more palatable hit on the frame rate rather than it being cut in half.

Others have aired similar results on Reddit, and there's plenty of excitement about what's being achieved with this mod (and the automated implementation of DLSS 5 across all manner of games). As one Redditor put it: "Absolutely amazing time to be a PC gamer."

Analysis: tread carefully with unofficial mods

All these latest developments with modding are great to see, but for me, it ends at just seeing this progress. By which I mean I wouldn't advise jumping in and installing these kinds of mods – as wonderful as they seem – and I'm content to merely observe, and see the frame rates and visual results, that others are getting. And we aren't short of these observations of late.

Why do I take that view? Well, for starters, I'm not keen on installing third-party software from unknown sources as a rule, because of the concerns around security that this involves. Granted, these are open-source tools (so can be checked over), and I'm sure they're on the proverbial level; but nevertheless, I'd still rather be careful around the risks of viruses and the like.

The second note of caution here pertains to the idea of messing with the rendering pipeline in terms of having DLSS 5 applied earlier in the process (with the Autopilot mod). This will likely involve image degradation or artifacts to some extent — or generally messing with the graphics more than Team Green intended — and I'm sure if this really was a genuinely better way of doing things, Nvidia would've used this route itself. As per observations on Reddit, there does appear to be a quality trade-off for the improved performance here.

All that said, perhaps there will be some kind of official option along these 'performance or quality' lines in the future, as some gamers are already hoping. However, DLSS 5 is, for now, officially designed to work with just one supported title, NBA 2K27, and it does an excellent job with that basketball game.

Following the leak of the tech and a raft of unofficial mods, this week saw Nvidia's official launch of DLSS 5, with the company showing it off in NBA 2K27 at Gamescom 2026 and providing some further illuminating details.

Before, after Nvidia's initial DLSS 5 reveal in March, I was skeptical on some points, but I wasn't tearing holes in the idea like some gamers were. However, this week, we've seen a rapid shift in opinions and the general online sentiment around DLSS 5 — and I'm a good deal more excited about this AI trickery myself.

Indeed, I think there are a number of reasons to be hopeful that DLSS 5 could prove to be a compelling step forward for PC gaming, from Nvidia's clarification on support for GPUs, through to what modders have shown that the tech can achieve since it was leaked — some of which is truly eye-opening.

Here are my five reasons why Nvidia's incoming neural rendering model could turn out to be a very literal game-changer.

1. Nvidia has clarified that DLSS 5 won't just be for RTX 5000 GPUs

While DLSS 5 is currently only supported by RTX 5000 graphics cards — the tech went live this week in NBA 2K27 — Nvidia has confirmed that it will come to older GeForce GPUs. Indeed, we won't have to wait that long before wider support is ushered in, which is good news.

VideoCardz spotted an update from an Nvidia rep on Reddit which stated: "Our current focus is on optimizing performance for the GeForce RTX 50 Series with model updates expected later this fall. Once RTX 50 Series performance is more fully tuned, we plan to work on expanding official support to the GeForce RTX 40 Series."

So, we could be looking at early 2027 for work to begin on bringing DLSS 5 to RTX 4000 models — and possibly previous generations of GPUs will be in line for the same treatment. Modders have already got the tech working on RTX 3000 and 2000 models, after all — although the performance levels could well be the sticking point here.

At any rate, this puts paid to fears that DLSS 5 could remain locked to just the latest Nvidia RTX 5000 graphics cards.

2. Continual optimization should improve performance a good deal

I just touched on performance, and this is the area which has proved to be the biggest downer with the mentioned unofficial experiments that have been conducted with DLSS 5.

As Tom's Hardware observes, the performance hit with DLSS 5 is a nasty one, and it's generally causing a 40% to 50% drop in frame rates. In some reports, it's less than this (more like 30%), and what we have to remember is that all these unofficial figures are based on a pre-release version of DLSS 5 being fudged into play by modders.

The final version of DLSS 5 will likely provide better performance, and in any case, optimization is going to be high on Nvidia's list of priorities. I'd be surprised if there weren't major strides taken in this department as 2027 rolls around and more games are supported.

3. Experimental results with DLSS 5 are pretty incredible

Those modders playing with the leaked version of DLSS 5 have clearly shown us that this tech can be used to produce seriously impressive results. Of course, on the official front, the demo of NBA 2K27 at Gamescom 2026 proved the case that this AI-powered graphics uplift can work wonders, too.

That said, the benefits of DLSS 5 are situational to an extent, and it's not a silver bullet for making all graphics better. It really shines in certain use cases, though. For example, even if you don't want the main character models in a game to have the tech applied because you hate that idea, it can still make a huge difference to background details, and the likes of the faces of NPCs in the lurking atmospheric crowds which are the backdrop for open world games.

As one Redditor points out: "NPC crowd faces are one of the best use cases for it [DLSS 5]. It sometimes takes you out of the game when you're talking to a character model that's clearly been hand crafted with a lot of effort, and as you said then there's some janky smooth skinned ghoul walking by you lol. Watching an LTT [Linus Tech Tips] vid where they showed the difference in random NPCs was actually super impressive."

DLSS 5 can also transform lighting and shadows to make graphics look far more realistic, including character models — some of the results shared by modders in a megathread on Reddit make that crystal clear. I was blown away by some of these examples, frankly. When it works, DLSS 5 works really well — although it doesn't always come off.

That said, some of the wonkier examples that have been aired are down to modders being daft with the sliders and options on offer, which brings me onto my next point.

4. Tuning options are key for DLSS 5

As noted, some of the more stomach-churning moments from the various modders messing around with DLSS 5 have come from those folks ramping up the intensity of the sliders — sometimes intentionally just to provoke an anti-AI reaction.

There's a decent level of granular control over various aspects of what DLSS 5 does (including intensity, tone, and structure), and when a game developer properly tunes the tech for their particular release, the effect is going to be more subtle, appropriate, and in line with the overall art direction. (Well, hopefully — you'd assume this will be the case, anyway).

Used judiciously, it's clear enough that DLSS 5 can really enhance the visuals of a game — modders have proved that in some cases, and NBA 2K27 is a great official example of how this works, too.

Yes, it is very possible to get 'uncanny valley' kind of effects with character models if you're extravagantly flinging sliders up towards their maximum limits — and not every game's art or graphics style suits DLSS 5, by any means. But we come back to the last point — when it works, it really does work.

5. DLSS 5 will probably age like a fine wine (ahem)

My final point is a simple — but important — one. And okay, I've said this before, but I think it bears repeating. Rewind time back to when Nvidia revealed the original DLSS, the very first take on this tech that was purely about upscaling, and it had some quite pronounced flaws. Problems like blurriness, ghosting and artifacts proved a blight on the upscaled graphics, but these were issues that Nvidia resolved with the next iteration of the tech.

I'd expect there will be examples of DLSS 5 which show the visuals going off the rails in a similar kind of way, although it already looks off to a far better start than DLSS 1. The point being that whatever we think now, at launch, may change quite drastically in a year or two, and there's a genuine potential for DLSS 5 to be revolutionary in polishing up gaming graphics — albeit that caveats around its misuse and situational nature aren't going to go away.

Gaming on the go has reached fresh heights over the years, with slim laptops and compact handhelds delivering great performance. AMD and Intel have spearheaded the charge with their mobile processors, but a new player is in town.

Nvidia revealed its RTX Spark at Computex in May, an ARM-based superchip designed for Windows on ARM laptops, with AI capabilities and obvious strong suits for creators – but also gamers, too, with a powerful integrated RTX GPU. It's designed for slim laptops and compact PCs, keeping workspaces less cluttered and making creation alongside gaming much easier when travelling.

I was lucky enough to go hands-on with an RTX Spark laptop at Gamescom 2026, specifically the HP OmniBook Ultra 16, which was running Borderlands 4. Gearbox Interactive's latest entry in the franchise was notorious for its rough performance at launch.

It has significantly improved since then, and the OmniBook Ultra 16 was running the game at an incredible frame rate, one I could tell was above 60 frames per second, with the help of Nvidia's Frame Generation x2.

The mention of Frame Generation may throw some off; after all, it's been frowned upon for a long time with the 'fake frames' nickname (a criticism I disagree with). However, the input delay and overall latency weren't an issue for me on this RTX Spark system.

I didn't get the chance to put the system through its paces other than playing that particular game, but it's worth noting that the other RTX Spark laptops at Nvidia's booth were running games like 007 First Light and Arc Raiders, both of which ran at smooth, solid frame rates.

If it wasn't clear already, I think RTX Spark is great for laptops and compact PCs, and my only concern is the price. I'm hoping for something that isn't too expensive, but that's probably wishful thinking due to the nature of these devices and the ongoing RAM crisis. However, it would be a shame if RTX Spark laptops don't blossom as a result of memory shortages.

Handheld manufacturers could use RTX Spark

Speaking with Nvidia's staff at Gamescom, I asked if the RTX Spark was intended to be used with handheld gaming PCs, and it was made clear that Team Green is completely open to any handheld manufacturer reaching out to use the superchip.

Handheld territory isn't exactly foreign to Nvidia either. The Nintendo Switch 2 uses the Tegra T239 processor, with access to DLSS across multiple games — and the upscaling technology does wonders for image quality and performance.

While AMD and Intel's processors continue to provide fantastic performance on most handheld gaming PCs, especially with Intel's new G3 Extreme CPU, I told Nvidia that DLSS on something like a Legion Go or MSI Claw would be untouchable.

Of course, performance has to be balanced with battery life and power usage, as well as pricing, and I'm very aware that this could be a tricky equation to deal with.

If the RTX Spark (or any similar chip in Nvidia's plans going forward) could be the engine of a handheld gaming PC, using more aggressive upscaling wouldn't be something to avoid in terms of any easy win to boost performance. DLSS Super Resolution is great at maintaining sharp image quality, and it would work even better on the smaller screen of a handheld.

Will this ever happen, though? That's down to the manufacturers of these devices.

OpenAI has unveiled a much anticipated AI model which the firm has dubbed ‘GPT-6 Astra’. While the model has improved significantly across benchmark testing and brings a host of new business features, there is still a dark cloud looming over the new model.

Off the back of OpenAI’s accidental hack of Hugging Face and the company’s subsequent efforts to improve how AI agents behave and interact, numerous cybersecurity experts have raised concerns about the model’s new ‘recurrent depth’ reasoning capabilities.

This new reasoning architecture allows the model to consider a problem multiple times before taking an action, compared to the standard chain-of-thought reasoning used in previous models.

Why the concern about recurrent depth reasoning?

This new level of reasoning apparently offers improved performance. OpenAI also says it has fixed its models' abilities to circumvent boundaries when performing tests by monitoring the models reasoning and ensuring the model stays aligned within the scope of its task.

During Astra’s launch event, OpenAI chief scientist Jakub Pachocki said: “We will not accept degradation in our ability to monitor model alignment beyond a certain level. We will withhold scaling until we can regain enough confidence.”

But numerous experts believe that the lessons of the Hugging Face incident have not yet been learned, and the model has been released without adequate testing on Astra’s reasoning and monitoring.

After all, no one thought one of OpenAI’s models could set up a hidden internet-connected messaging board that allowed AI agents to influence each other's behavior.

But with Astra being released into the real world, the lessons may have to be learned on the fly.

Expert perspectives on OpenAI Astra release

• James Blake, VP of Global Cyber Resiliency Strategy at Cohesity:

The launch of Astra is raising questions again around the safety of Frontier AI. Instead of simply asking whether a model is "safe", organisations now need to ask whether it remains safe across millions of different situations, prompts and interactions. Cyber resilience has traditionally assumed that systems and threat actors behave deterministically. AI systems don’t.

Advanced models can and will continue to exhibit behaviours that emerge from their optimisation process rather than from explicit programming. We have to move beyond thinking about AI as just another software tool and find ways to ensure these systems remain observable, auditable and governable throughout their lifecycle.

The most important question we’ll need to answer in future is one of liability. Suppose an AI system autonomously develops a strategy that causes financial loss, leaks confidential information or violates regulation. Who is responsible? The developer that trained the model? The cloud provider operating the infrastructure? Currently the answer is surprisingly unclear. It’s not just about what AI can do: it’s about who is accountable when it does something nobody expected.

• Oleksandr Yaremchuk, Co-Founder & CTO at Manifold Security:

OpenAI is calling Astra its most aligned model yet, even as its chief scientist admits monitorability is getting harder as models get more capable. Evidently, Astra hides its reasoning in the majority of tested cases, and some successful attacks left no reasoning trace at all. That's the tool many organisations still use, including the labs themselves, for auditing what an agent is doing, and it's getting less reliable with every release.

That matters because Astra isn't staying inside OpenAI's test environment. It's going to run as an agent on employee laptops and in the browser, holding real credentials, inside companies that have no way to watch what it does once it's there. A model that explains itself less isn't more aligned, it's just harder to catch when it goes wrong.

Labs can keep debating what these models say or refuse to say. Security teams need to stop relying on that and start monitoring what agents actually do at runtime, with the ability to shut one down mid-action. That's the only oversight left that still works once the reasoning goes quiet.

• Kristin Lowery, Field CISO at Optiv:

For boards and executive leaders, the emergence of OpenAI’s Astra model highlights a broader reality: AI is no longer just a productivity issue; it is a risk management issue.

Just as organizations established governance for cloud adoption and digital transformation, they now need clear policies, strong oversight, and accountability for AI use.

The question is not whether AI will become more capable — it will. The real challenge is whether organizations can strengthen their governance, security controls, and workforce readiness quickly enough to keep pace.

• Patricia Titus, Field CISO at Abnormal AI:

OpenAI crossing this threshold deserves attention. Credit where it's due, they're handling it responsibly by restricting Astra's advanced cyber capability to a small coalition rather than releasing it broadly.But this isn't one company's problem to contain.

Once a model can find and exploit unknown flaws without a human in the loop, that capability doesn't stay exclusive for long. Open-weight and modified models typically trail the frontier by only months, and that's the reality defenders have to plan around now.

Static, signature-based defences were built for attacks that repeat. They weren't built for an adversary that generates a new one every time. Defenders need the same shift, systems that learn what normal looks like for every identity, human, machine, or AI agent, and flag and contain the moment something deviates, at machine speed.

The window to build that is open now. It won't stay that way once this capability is common instead of rare.

• Raghu Nandakumara, VP of Industry Strategy at Illumio:

With the Astra announcement, OpenAI is doubling down on monitoring the model's own behaviour – a response to the model "breakouts" seen over the past few months.

When Anthropic announced Claude Mythos Preview, the core concern was the model falling into the wrong hands. OpenAI's answer goes further adding guardrails around the model's own reasoning and actions, regardless of the user's intent. The goal is to catch a model going rogue mid-task, not just stop it being misused at the outset.

The rest of this announcement can be summarised as ‘we have a new frontier model, and it’s more capable than the last one’.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz: One-minute review

The Huntsman line has long been a distinguished marque in the gaming keyboard world, and now this new analog addition seeks to add Hall Effect technology to the formula.

It looks like a high-performing machine. The all-black colorway might be a little drab, but the floating keycaps and subtly brushed metal faceplate add touches of class. The bright RGB backlighting also helps to sell its gaming prowess.

What’s more, it’s built exceptionally well, putting it on a par with the best gaming keyboards. That faceplate feels incredibly smooth and solid, while the keycaps are planted and have a great-feeling texture. At the same time, the V3 HE is also very light and compact — doubly impressive when you consider it includes quite a few navigation keys.

Razer’s Synapse software can be used to customize the inputs of the V3 HE. You’ll find plenty of analog adjustments here, and there’s even a handy visualizer to display key travel in real time, although this isn’t available for every analog setting. The software is easy to use and I didn’t experience any major issues during my time with it.

Once you’ve dialled in your preferred settings, gaming with the V3 HE is a joy. The keys are very tactile and provide plenty of feedback without feeling heavy. However, due to the height of the keycaps and the lack of wrist support, I found typing quite uncomfortable.

This is perhaps the major drawback of the V3 HE, along with its price, which is quite high for a keyboard lacking wireless connectivity. However, its gaming performance and build quality are to be admired, and might just make it worth the outlay.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Price and availability

• $139.99 / £139.99 / AU$229.95
• Preorders available now
• Expensive for a wired keyboard

The Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz costs $139.99 / £139.99 / AU$229.95 and will be available later this year, but you can preorder it now. A mini 65% variant will also be available for $20 / £20 / AU$30 less.

It's undeniably expensive for a wired gaming keyboard. However, it’s still cheaper than some of its rivals, such as the SteelSeries Apex Pro TKL, another fantastic analog keyboard. This is easily one of the best analog keyboards I’ve tested. It also features an integrated OLED screen for a visually appealing way to access various settings and adjustments, and it can display certain in-game information as well.

If you’re looking for a decidedly more budget-friendly analog keyboard, you can’t do much better than the MonsGeek FUN60 Ultra. Not only is this much cheaper than the Huntsman, but it also performs very admirably and has multiple wireless connectivity modes to boot.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Specs

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Design and features

• Great build quality
• Bright RGB lighting
• Copious customization options

In line with Razer’s other products, the V3 HE looks like a premium product. I especially liked the floating keycaps and the brushed metal faceplate, which add elements of sophistication. The all-black colorway is a little austere, but the bright and customizable RGB backlighting does well to liven things up, especially since those aforementioned floating keycaps increase the illumination.

Equal to its appearance is the build quality of the V3 HE. Despite the plastic material, the chassis is incredibly solid, while that faceplate feels lusciously smooth. The double-shot PBT keycaps have a gratifying texture to them as well, and are as planted and as stable as you could wish for.

Another nice touch is the recessed USB port. This encloses the jack completely, adding security and creating a neater look. The included cable should prove long enough to accommodate most setups, and what’s more it’s braided, which is more common on the best gaming mice. This improves flexibility, although it’s thicker and seems more durable than those on said mice.

Despite the strong build, the V3 HE is also very light, which pleasantly surprised me. It’s also quite compact, yet still features some useful keys for navigation. And there are plenty of Fn shortcuts dotted around, including those for tweaking certain aspects of the V3 HE, such as the RGB, actuation point (between 0.1mm and 4mm), and Rapid Trigger sensitivity. Thankfully, these shortcuts are also labelled.

For further customizations, you’ll need to download Razer’s Synapse peripheral software. Alongside those mentioned above, you can adjust the Rapid Trigger sensitivity of upstrokes and downstrokes independently, map up to four inputs to a single key, select up to four keys to have a secondary function on their release, and decide which key takes priority when two are pressed at the same time (with numerous options to choose from). There are also a few pre-made profiles catering to certain game types and scenarios, as well as a remapping suite with a large selection of assignments at your disposal, including gamepad buttons, sticks, and triggers.

I was glad to see the inclusion of a visualizer that shows the travel of your presses in real time by filling up a bar. This bar is also marked with your currently set actuation point in millimeters, so you can see when you’ve passed it. It’s a shame there’s no visualizer for the Rapid Trigger function, given this can be a little tricky to comprehend. For the most part, though, Synapse is clearly laid out and easy to use.

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Performance

• Snappy and tactile
• Comfortable and secure when gaming
• Hard to type with

As with most Razer keyboards, the performance of the V3 HE is exemplary. The analog switches have plenty of tactility, being easy to press yet providing just enough resistance to allow for controlled presses; relative to other analog keyboards, I found it easy to hit certain actuation points. They also have a wonderfully springy response, which makes them feel snappy. But they’re quite clicky, too, with just enough dampening to prevent them feeling harsh.

The keycaps themselves are a boon when gaming, too. Their aforementioned texture not only feels great but should also help to prevent slips when things get sweaty. Prominent indentations improve finger security further, as well as helping you to avoid hitting the wrong key.

However, I found them less amenable to typing. Their sheer height means that even though the base of the V3 HE is reasonably thin, I still found myself having to angle my wrists upwards to an uncomfortable degree. I wish a wrist rest was included in the box like other Razer models, especially as Razer’s are some of the best in class thanks to their exceedingly plush padding.

Should I buy the Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz?

Scorecard

Buy it if…

Don't buy it if…

Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz review: Also consider

How I tested the Razer Huntsman V3 HE Magnetic Tenkeyless 8KHz

• Tested for a few days
• Used for a variety of tasks
• Lots of gaming keyboard experience

I tested the Huntsman V3 HE for a few days, using it for gaming, working, and general browsing. I used it with two different Windows 11 PCs.

I played games such as Counter-Strike 2, which offers a stern test for peripherals given its emphasis on quick and precise inputs. I also played S.T.A.L.K.E.R. 2: Heart of Chornobyl, which requires a broader use of the layout, so I could test how easy it was to use keys outside of those within the immediate vicinity of the WASD position.

I’ve been PC gaming for over a decade, and have used many different keyboards in that time. I’ve also reviewed a large number of them with various switch types, form factors, and price points.

• First reviewed: September 2026
• Read more about how we test

• Google released Chrome 152.0.7977.82/.83 for Windows, Mac, and Linux
• Patch fixes 12 flaws, including zero‑day CVE‑2026‑85046 (type confusion in V8)
• Sixth Chrome zero‑day this year; Chromium browsers also affected, update urged immediately

Google has released a new version of its Chrome browser for Windows, Mac, and Linux, fixing a dozen of vulnerabilities. Among them is a high-severity flaw that is being actively exploited in the wild.

In a security advisory published on the Google blog on September 3, the search engine company said Chrome’s newest version is now 152.0.7977.82/.83 for Windows and Mac, and 152.0.7977.82 for Linux.

Rollout is expected to be gradual, so make sure to check if you already received it. Most of the time the update is automatic and instant and if you’re not certain, tap the three vertical dots in the top-right corner of the browser and choose Help. Navigate to About Google Chrome and there you will find the version number.

Running malicious code remotely

This patch fixes a total of 12 vulnerabilities, most of which are graded as high severity. Among them is a “type confusion in V8” bug, discovered by security researcher Salvatore Gulizia.

For his effort, Gulizia was awarded $1,000. Apparently, this bug is being actively leveraged in real-life attacks, although Google (as usual) decided not to share the juicy details until the majority of browsers are protected.

The vulnerability is tracked as CVE-2026-85046. On the National Vulnerability Database (NVD), it is described as a “type confusion in V8 in Google Chrome [that allows] a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.”

V8 is Chrome’s JavaScript engine which allows web apps and interactive websites to run in the browser. Those interested in the technical breakdown of the vulnerability can find it on Guzlia’s blog.

You can find the full list of fixed vulnerabilities on this link.

This is the sixth zero-day Google fixed in Chrome since the start of the year. It also affects other browsers built on Chromium, so if you’re running Edge, Brave, Opera, or Vivaldi, make sure to update to the latest version as soon as possible.

Via The Hacker News

• OpenAI rolled out GPT‑6 Astra, its most advanced AI, with “critical” cyber capabilities
• Astra can autonomously find and exploit unknown flaws; release limited to vetted Daybreak participants
• Staggered rollout sparked user frustration; Altman apologized, promising broader access soon

OpenAI has begun rolling out GPT-6 Astra, its latest and most capable artificial intelligence model.

In an announcement published on its website, OpenAI said Astra represents a “significant step up in cyber capabilities”, meeting the company’s “Critical” threshold.

This threshold, the company explained, means that under the right circumstances, the tool can find “previously unknown security flaws and develop new ways to exploit them across many well-protected systems without a person guiding each step.”

Apologies for a messy rollout

OpenAI also said Astra improves on functions such as computer use, software engineering, and science, and that it should be better at staying oriented, compared to previous versions.

Just like many of the previous models, Astra’s release has been marred with controversy. Roughly a month ago, OpenAI said the model’s “critical” cybersecurity capabilities prompted it to pause some internal development and trigger safety protocols.

In response to early findings, the company scaled up certain security controls and even paused activities that do not meet its newly established security requirements.

It now decided it was time to release the model, but still not to the general public. Instead, it opted for a staggered release, giving it first to a limited group of companies participating in the Daybreak program, a cybersecurity initiative that gives vetted organizations (cybersecurity and otherwise) specialized AI tools for vulnerability research and threat detection.

This did not sit well with many ChatGPT users, especially those paying a monthly subscription. As The Verge reported, CEO Sam Altman was apologizing, mere hours after launch, for the “messy rollout” of Astra.

Initially, all Plus, Pro, Business, and Enterprise users were supposed to gain access to Astra, as well as those accessing through OpenAI API, Microsoft Azure, and AWS Bedrock.

“We are working towards getting Astra in everyone’s hands as quickly as we can,” Altman said on X. “I know it is frustrating and I appreciate the patience. It should be quick.”

Via CNBC

• The Lexar Muse SSD gets as thin as 1mm (0.04 inches)
• It comes with a proprietary connection mechanism
• 512GB and 1TB storage models of the drive will be available

Every year at the IFA tech expo, there are claims of gadgets being lighter, thinner, faster, and smarter than ever before — but amid the usual crop of claims we've seen in 2026, the Lexar Muse particularly stands out.

This is officially the thinnest portable SSD on the market, measuring a mere 1mm (0.04 inches) at its thinnest points around the edges, and a not-exactly-chunky 3.8mm (0.15 inches) at its thickest point in the middle.

It's not unlike a credit card in terms of its looks and dimensions, and Lexar seems particularly keen to promote the idea of it being used strapped to the back of a MagSafe iPhone to provide some additional storage space on the go.

The unibody metal enclosure around the drive has been formed from a single piece of metal to minimize gaps and seams, while some space saving has gone on inside with custom PCB architecture and high-density NAND stacking.

Speeds and storage

What's a little unusual here is the connectivity, which has to happen via the magnetic pogo-in connector on the back of the drive — there's no traditional USB-C port that you can plug an existing cable into.

You do get a bespoke cable included with the drive, as well as a carry case for easily attaching the drive to the back of something like an iPhone. However, the magnetic connection might not be the most robust.

The Lexar Muse offers some respectable read and write speeds of up to 1,050MB/s and 1,000MB/s respectively (so good enough for 4K 120fps Pro Res video on an iPhone), and there are going to be 512GB and 1TB models available.

As is often the case at IFA, there's no word on pricing yet, but you can expect the Lexar Muse to hit shelves before the end of the year. If you prioritize thinness and lightness over everything else, it may be worth checking out.

• RayNeo launched the GT Max glasses at IFA 2026
• They cost $429 / £399
• They boast Dolby Vision, and new optic engine prisms

Since publishing my review of them, I’ve had one pair of XR glasses at the top of my list: the Xreal One Pro. RayNeo has always been a close second, but here at IFA 2026 they may have just snatched the crown.

That’s thanks to the newly unveiled RayNeo GT Max specs, which boast improved audio and visual performance compared to anything RayNeo has made before. Best of all, the upgrades won’t break the bank at just $429 / £399 (not sold directly in Australia) — notably cheaper than the $599 / £579 Xreals.

Let’s start with audio. The big change is the GT Max houses larger drivers than ever before. This leads to richer and more impactful bass and midtones than I’ve ever seen from previous display glasses, and the audio was already solid on RayNeo’s specs.

The hardware has been tuned by Bang and Olufsen, whose expertise has optimized the EQ with the promise that we’ll get the best performance possible out of RayNeo’s tech.

This can be enhanced further by sound tubes, which direct the sound more directly into your ear, though they’re a paid add-on.

The biggest changes come to visuals, however.

The most obvious is the new optic engine prism, which reflects the microOLED screens into your eyes. They’re now the flatter shape debuted by Xreal in its One Pros, which has two advantages.

First, the design plus anti-reflective coating has greatly reduced the impact of reflections disrupting your vision as you watch your show, film, game, or whatever you’re viewing. Secondly, it allows for a larger 57-degree field of view, meaning the virtual image can be much larger and more immersive.

This upgrade was easily the best the Xreal One Pro has boasted, and the main reason it topped my list for so long. This prism’s arrival on rayNeo specs is greatly appreciated.

The other visual enhancement of the GT Max glasses is that they’re the first XR glasses to support Dolby Vision — a codec that enables great color clarity and contrast. You’ll need to view Dolby Vision content to take advantage of it, but when you do, it’ll make the content look better than it has before.

Better, but not bank breaking

Normally, major upgrades like this would lead to a serious price hike. Sure, they’re pricier than RayNeo’s more budget-friendly specs, but at $429 / £399, the GT Max is decidedly mid-range.

In contrast, the Xreal One Pros will set you back $599 / £579. There are still some reasons to opt for the specs, most notably Xreal’s 3Difying tech, which makes any flat images stereoscopic — including games and movies — but this RayNeo launch makes the full-price One Pros look less appealing.

Of course, my full thoughts will have to wait until I can review the RayNeo specs properly, but the GT Max are ones to watch if you want excellence at a more affordable price, and they’re at the top of my list for specs to check back in on during Black Friday (where sales, even on newer RayNeo tech, are sure to land).

Following the aftermath of the Manchester Airports Group cyberattack - where hackers made off with the data of 8.7 million people - the hackers have now posted the entire database for sale on the dark web.

The group behind the attack, FulcrumSec, attempted to get Manchester Airports Group (MAG) to pay for the security of the database, promising that it wouldn’t be released if the company paid a settlement. But as all companies should do when faced with extortion, MAG didn’t play ball.

Now FulcrumSec wants to try and maximise the damage of the cyberattack, and has listed the database containing email addresses, phone numbers, vehicle registrations and postcodes online in the hopes a fellow hacking group will find value in the data.

What happens when extortion fails, and why didn’t MAG pay?

In the past, when companies faced ransomware attacks or data breaches, they would sometimes quietly pay the hackers for their silence.

Companies feared serious reputational harm and loss of business would cost more in the long run than the perpetrators were asking for. But this created an incentive for hackers to carry out more attacks.

After all, if companies aren’t kicking up a fuss about being hacked or reporting the attack to the authorities, hacking groups can launch more attacks on other companies that are completely unaware of their tactics.

In order to counter this, authorities and cyber experts from around the world issued guidance that under no circumstances should companies pay for the safe return of their data. By removing the incentive from ransomware attacks and data breaches, the hope is that hackers will get bored or not see enough ROI, and therefore stop.

But the 500GB database of data on over 8.7 million people is ripe pickings for other cybercriminals looking to launch highly specific phishing attacks or scam campaigns. While FulcrumSec may not make any money from the attack, they can seriously enhance the damage of the attack by offering the data for free for others to use.

A successful scam or phishing attack can steal banking and financial details, allowing other groups to steal even more money off the back of the attack.

Expert perspectives on MAG extortion and customer data

• Dray Agha, senior manager of security operations at Huntress:

While Manchester Airports Group followed official guidance by refusing to pay the ransom, the release of 8.7 million records creates an immediate risk for passengers.

We expect other criminals to use this freely available database of vehicle registrations, postcodes and contact details to craft highly convincing phishing attacks.

Anyone who has used parking, lounges or Wi-Fi at these airports must treat unexpected messages about their travel with extreme caution.

• Muhammad Yahya Patel, vCISO and cybersecurity advisor for EMEA at Huntress

The "free release" model is deliberately designed to maximise harm and reputational damage as a warning to the next target.

Publishing almost nine million records for free isn't just punishment for MAG it's a marketing campaign aimed at every other organisation watching.

Pay up, or your customers' data gets handed to every fraudster and scammer on the internet at no cost. Refusing to pay a ransom is the right call. But nearly nine million people are now paying a different price for a decision that was never theirs to make.

• Danny Jenkins, Co Founder & CEO at ThreatLocker

Unfortunately, once data is made public, it can’t be hidden again. The most important thing consumers can do is focus on basic cyber hygiene. Use a unique password for every website, learn how to identify phishing scams, and monitor your credit report.

Be highly suspicious of emails that create a sense of urgency, offer something that seems too good to be true, or ask you to reset your password.

When in doubt, look up the phone number for the alleged sender yourself, rather than using a number provided in the email, and call to confirm whether the communication is genuine.

• Brian Higgins, security specialist at Comparitech:

Whilst the airports breached in this attack don't appear to have had any financial data compromised the risk to affected or associated customers is very real. With so much other information freely available in the wild it is vital that airport users stay highly vigilant for some time to come.

Any and all unsolicited contact; whether online, by telephone or even home visit approaches, should be viewed as suspicious. Never engage until you've taken time to check credentials/veracity etc.

Research advice from trusted sources like the NCA or Information Commissioner and share it with your family and friends. Look for ways to increase digital and physical security like two factor authentication on Apps and devices or Smart Home tech.

When this breach was first reported by the Manchester Evening News the comments were quite telling. Affected parties were quick to identify potential vulnerabilities over and above the breach of financial and banking details.

Home addresses, vehicle registrations and time spent away from home all add up to some excellent opportunities for criminal exploitation, not to mention the usual follow-up phishing campaigns common in this type of incident.

As AI makes data aggregation swift and easy consumers are waking up to the fact that criminals can monetise successful breaches in increasingly inventive ways. It’s no longer enough for data owning organisations to advise post-attack vigilance and turn to their backups.

Victim communities rightly expect better protected networks and systems over and above established norms. As the marketplace grows less fearful and more angry when breaches are made public we may see more emphasis on cyber crime prevention which can only be a good thing.

• Denis Calderone, CTO at Suzu Labs:

The 8.7 million number is attention-grabbing, but it deserves some context. MAG has confirmed that the vast majority of those records are email addresses collected through airport WiFi sign-ups.

A much smaller subset includes phone numbers, vehicle registrations, and postcodes from customers who actually completed parking or lounge bookings.

No payment data, no passwords, no passport information. So despite this affecting airports, which is obviously a sensitive subject, the actual data sensitivity for most affected individuals is relatively low.

What's more interesting to us from a technical standpoint is the attack path. MAG told The Register that attackers compromised one of their internal systems and then went on to steal files from a database hosted by a third party. That's a pivot upstream into a data provider, not downstream into operational systems.

What remains unclear is whether the data was exfiltrated directly from that third-party environment or whether it was pulled back through MAG's network first. That distinction matters for understanding where detection controls failed and who was responsible for monitoring the egress.

The UK's Civil Aviation Authority has a Cyber Assessment Framework for Aviation, developed with the NCSC, that mandates strict separation between IT systems and operational technology.

We don't know whether MAG was formally operating under that framework at the time of this incident, but I would be very interested to find out. Because the segmentation appears to have held here. Flight operations, baggage handling, terminal systems, etc., all were unaffected.

The lateral movement went upstream toward a data provider, not downstream toward the systems that keep planes in the air.

• Seemant Sehgal, CEO and Founder at BreachLock:

This data was initially collected because passengers needed a login, and somewhere along the way, the sensitivity of what was accumulating in that database stopped getting the same scrutiny as the network itself.

Vehicle registration details, postcodes, and contact information across three major airports are a profiling dataset, and whoever held it for ransom understood its value better than the organization storing it did.

Here at IFA 2026 I finally got to try the Xreal Aura glasses. They’re the tech you’d get if my Xreal One Pro and Samsung Galaxy XR had a baby, and their Fall 2026 release date can’t come soon enough.

While they can basically do everything an Android XR headset can do (more on that in a moment) the Xreal Aura is importantly a pair of smart glasses, with the lightness and comfort advantages you’d expect of that compared to a bulkier VR wearable.

They do boast some serious tech, despite the light weight. Including see-through 2K displays boasting a 70-degree field-of-view — up from the the 1,080p screens you’ll find from similar smart specs to come before — plus speakers tuned by Bose, a microphone for capturing what you say, and cameras that facilitate hand-tracking and tools like Circle to Search (which lets you Google search things you can see, by drawing a circle around it with your hand).

However the specs don’t include a battery or any processing power. This is instead housed in an external compute puck that also doubles as a track pad — scroll your finger across the surface and you’ll move a digital cursor you can use to interact with apps alongside hand-tracking controls.

This is how the glasses are able to be so comfortable, while still being incredibly capable.

One the Android XR side of things, these specs can — just like the Galaxy XR — access the Google Play Store to download dedicated XR and flat apps, let you enjoy content from your favorite streaming service on a giant virtual screen, engage with Gemini across your apps for assistance with a variety of tasks, and boot up Google Docs if you’re looking to be productive.

You can do these tasks all at the same time too, arranging virtual windows in the space in front of you.

With a USB-C Cable and compatible device — which includes most phones, laptops, tablets, and several consoles and handhelds — you can connect it to the glasses (via the puck) to have its screen appear as a window in front of you too.

In my demo I was watching the latest GTA 6 trailer while playing Hades on a Steam Deck. The windows appeared side-by-side in front of me, and I had Gemini watching me game so it could offer coaching (I’ve played plenty of Hades before so didn’t need the help, though the advice I was offered did seem decent).

When will it land?

It’s all very impressive and I cannot wait for these specs to be in my hand for a full-on review.

Speaking of, unfortunately Xreal hasn’t confirmed a release date or price for Aura. However its official website says it’ll be landing sometime this fall (Northern Hemisphere, so that’s September, October or November) and will cost no more than $1,500.

I hope the price will be as low as possible (even sub $1,000), though Xreal’s promise would still make it cheaper than a Galaxy XR headset, and there’s only so cheap we can expect XR tech to get — especially with the ongoing RAM crisis.

• Cisco patched eight IOS XR flaws, including three critical (CVE‑2026‑20274, CVE‑2026‑20279, CVE‑2026‑20212)
• Vulnerabilities allow unauthenticated exploitation, improper access control, and crafted input execution
• No abuse reported; patches urged, with iACL workarounds for Nexus 9000 devices using Silicon One ASIC

Cisco patched eight vulnerabilities affecting its IOS XR operating system, including three critical-severity ones. It urged its customers to apply the patches as soon as possible, even though it stressed that there is no evidence any of these were abused in the wild.

The company detailed its findings in two advisories published on the same day - September 2.

In the first one, it disclosed seven vulnerabilities, including two critical-severity ones: CVE-2026-20274 and CVE-2026-20279. Both carry a severity rating of 9.8/10 (critical). The former is an improper control of a resource during its lifetime flaw - a network-based, low complexity, vulnerability that requires no authentication or user interaction to be exploited. The latter is described as an improper access control vulnerability that can lead to the same consequences.

Fixes and mitigations

These flaws, along with five others, affect all releases of Cisco IOS XR Software, including Cisco IOS XR7 (LNT) Software, regardless of device configuration, the company explained. There are no available workarounds, and installing the provided patch is the only way to mitigate the risk.

The third flaw, disclosed in a separate advisory, is tracked as CVE-2026-20212. Successfully exploiting this one allows attackers to connect to an affected device and send crafted input that could be executed as code, without root privileges. “The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload,” Cisco explained.

This bug affects Cisco Nexus 9000 Series Switches if they include a Silicon One ASIC, the company stressed. A possible workaround is to use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. There is also the option of iACLs only being used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211.

Via The Register

• Alienware introduces two new monitors to expand its QD-OLED lineup
• The AW3226Q is a new 4K tandem OLED RGB stripe gaming monitor available this fall
• Alienware also has a new esports QD-OLED monitor with a 560Hz refresh rate

The gaming monitor market is heating up with new competition from Alienware, specifically via the new AW3926QW 5K2K ultrawide. However, it's not resting on its laurels.

As reported by Wccftech, Alienware has announced two new gaming monitors, further expanding its QD-OLED lineup: the AW3226Q is a new 32-inch 4K RGB stripe tandem OLED monitor that uses the same technology found in Alienware's flagship 5K2K display. For esports players, the AW2527HX is a 560Hz QD-OLED with great motion clarity and response time.

The highlight among both is clearly the AW3226Q 4K display, which is effectively the closest gamers can get to Alienware's flagship display. The new 4K display also uses the same RGB stripe layout, significantly improving text readability. The only major difference is 5K2K resolution on the AW3926QW, with 33% more pixels than 4K due to its ultrawide aspect ratio.

The AW3226Q will also feature 1,000 nits of peak brightness, alongside DisplayHDR True Black 400 and Dolby Vision. Having used the latter on the Alienware AW3426DW I reviewed, it's one of the standout benefits for consistent brightness levels and minimizing the brightness dimming issues that occur on OLED displays (which is also addressed by the tandem OLED layers).

It's increasingly clear that tandem OLED is quickly becoming the new standard for high-quality OLED displays, and using a four-stack tandem OLED layer should help boost and maintain high brightness levels.

Will it have an affordable price point?

Alienware surprised most consumers by announcing that its flagship 5K2K AW3926QW monitor would retail at $1,099 / £999 / AU$1,999.80. The competition from LG — two 5K2K displays — is significantly pricier, leaving many turning their attention to Alienware to experience higher-quality gaming via sharper images.

If Alienware's flagship monitor is anything to go by, the newly announced AW3226Q should be another affordable option for OLED hunters, and that's great news since OLED is arguably still the best display type for gaming.

There's no release date for the AW3226Q just yet — it's worth noting that Alienware's flagship monitor hasn't launched in all regions. However, gamers can expect this to hit the market in the coming months, with availability scheduled for this fall.

The AW2527HX QD-OLED, designed for esports, is set to launch in the first quarter of 2027, but there is no price confirmation.

IFA, Berlin's huge annual tech expo, is where some of the biggest tech firms unveil their latest innovations — and this year is one of the strongest we've seen in a long time for interesting new releases.

IFA is a great place to find fascinating new gadgets and devices, ranging from next-gen AR glasses to self-driving personal mobility vehicles, and from weird new kitchen appliances to armies of humanoid robots.

We've chosen the top products from those that were nominated for our IFA 2026 'Best in Show' awards to produce this list of our 25 winners, based on how innovative they are, how well they serve their intended use, and the degree to which we think they'll influence their area of the tech market.

There were many more products that we really liked, of course, but we had to be ruthless — here are our top picks from IFA 2026.

Anker Soundcore Sleep Earbuds 4 Pro

The best technology delivers real-world benefits, and what could be more beneficial than a good night's sleep? The Soundcore Sleep Earbuds 4 Pro use in-ear PPG optical sensors to monitor your heartrate, which is more accurate than other optical tracking methods thanks to the rich capillaries and stable position of your ear canal. That monitoring delivers data to the smart-screen, phone-free SleepHub charging case.

The Sleep Earbuds Pro feature passive isolation as well as 30dB active noise cancelling, and the case-based snore monitoring system detects and masks the sound of your partner snoring using its built-in sounds. Despite the addition of multiple new components the housing is thinner than previous generations, and even more comfortable for side sleepers.

Anker's BioSync dynamic audio system monitors relaxation in real time, dynamically adjusting the audio content and structure to help you find the most effective sleep sounds. Sleep earbuds are something that can truly improve your health and happiness by improving your sleep, and these look like a really smart upgrade.

Agibot A3

Agibot is doing some amazing things with humanoid robots, and the full-sized Agibot A3 combines multiple capabilities in a lightweight, extremely dynamic model: if you're assembling a robot dance troupe or planning a big exhibition, the A3's the bot to buy.

The A3 weighs just 55kg, has a power-to-weight ratio of 0.218kW/kg, and delivers up to 12kW of instant peak power, enabling it to somersault. Its battery runs for up to 10 hours and is hot-swappable in seconds, so it's great for applications where it needs to last all day. It'll happily fit in an SUV for travel, too.

In addition to voice and app control, the A3 delivers industry-first touch sensing that adds physical interaction to its controls. It also has a 360-degree multi-array mic system for accurate voice recognition, even in noisy environments.

One of the most exciting features of the A3 is its large-scale swarm co-ordination, which uses precise UWB positioning to enable performances by up to 100 individual robots. That makes it possible to create very complex, high-impact performances for big events, as well as enabling multiple units to work smartly in environments such as factories or warehouses. The awareness and the uptime make this a great new approach to robotics.

Hypershell X Ultra S

The Hypershell X Ultra S exoskeleton helped mountaineer Adriana Brownlee in -30C temperatures on Mount Everest, supported athlete Aurélien Fontenoy's 4,037km Route 66 journey while recovering from injury, and is currently being trialed by search and rescue organizations worldwide.

Before Hypershell, exoskeletons cost $100,000 and above; the same capabilities are now available to consumers for less than $2,000, in a device weighing under 2kg.

The X Ultra S is an end-to-end AI motion-control system that uses an AI model to transform raw sensor data directly into motor torque, enabling faster response, smoother adaptation, and more natural human-machine synchronization.

There are 12 active modes, including walking, cycling and running, and a new Gentle Assist mode for older adults and users with short or shuffling strides. Fitness Mode adds resistance, turning a walk into a workout.

But it's the price that won us over here — this could be a game changer for getting people with limited mobility out and doing more things that they love, from hiking to just visiting the local stores.

JMGO IRIS Ultra Max

The IRIS Ultra Max is one of the world’s first true 4K 120Hz flagship smart projectors, delivering native 4K (rather than pixel-shifted) at 120Hz from input to output, all from its very compact case.

The Ultra Max's dual iris system has 6+9 blades, the highest count in its class, which promises to improve stray light suppression by 11.34% for a more accurate picture, while delivering class-leading contrast, with a quoted ration of 10,000:1. The MALC 6.0 Triple-Laser Engine delivers an impressive 6,500 ISO lumens of brightness, making it more visible in more lighting conditions, and with a promised ability to recreate 110% of the BT.2020 color space, with an astounding color accuracy of delta-E of 0.7, meaning it's truly capable of pro-level color range and accuracy.

The IRIS Ultra Max also introduces an industry-first 3-in-1 Optical System that integrates 0.88–1.7:1 Optical Zoom, Four-Way Lens Shift (V ±130%, H ±53%), and an AI-Powered Gimbal (360° H, 150° V) into a unified projection architecture. This makes it more more flexible than traditional projectors to positioning, because it has so many different options for correcting its picture. It gives small home theater setups top-tier performance without compromise.

DJI Osmo Pocket 4P

Designed for vloggers and movie-makers alike, the Osmo Pocket 4P is the world’s first dual-lens pocket gimbal camera. It delivers cinema-grade imaging in a pocket-friendly form, and features DJI's Academy Award-winning Ronin stabilization.

The main lens is a wide-angle 20mm equivalent with an f/2.0 aperture, and a new 1-inch CMOS sensor that offers 17 stops of dynamic range and over one billion colors via DJI's new 10-bit D-Log 2 color profile.

That's supplemented with a 60mm medium-tele portrait lens, which gives you 3x optical zoom and up to 12x digital zoom. Its f/1.8 aperture is particularly good for creating bokeh effects by compressing the background and pulling it closer to the subject.

The Osmo Pocket 4P also features the latest version of DJI's ActiveTrack, which uses AI algorithms to maintain tracking lock at up to 12x zoom. It can actively track up to eight people, framing groups and centering anyone new who steps into the field of view.

RayNeo GT Max AR Glasses

The RayNeo GT Max AR Glasses are the world's first AR glasses to support Dolby Vision playback as part of creating a virtual cinema experience. They deliver up to 1,200 nits of perceived brightness, a 120Hz refresh rate, and real-time SDR to HDR conversion for super-clear images, too. Their optical system is 29% thinner and lighter than traditional designs, and delivers an industry-leading 59-degree field of view.

One of our favorite features is the adjustable virtual screen sizes, with a choice of 227 inches, 267 inches or 307 inches. That's clever: the tighter size is ideal for spreadsheets and productivity apps if you're using them as a display for a phone or laptop, while the larger sizes deliver immersive gaming and video.

Steady, Pinned and Follow modes enable you to anchor the screen or have it move with you, and 3DoF spatial tracking maintains the screen position without straining your eyes, and keeps subtitles, taskbars and image edges within the viewing area as you move. These look like the most advanced way to take a screen with you everywhere, and they could be indispensable for long flights.

TCL P80 Ultra

If you spend as much time on your phone as we do, you'll be blown away by the screen of the TCL P80 Ultra. It's the first phone to integrate NXTPAPER eye-comfort technology, with a 1.5K sharp AMOLED display for reflection-free reading even in bright sunlight, and a button that instantly turns your P80 Ultra into an e-reader with paper-like viewing.

The P80 Ultra has nano-etched anti-glare glass, eliminating surface reflections without reducing brightness. It also features circular polarized light technology, which changes the light output to more closely replicate the characteristics of natural light, and flicker-free dimming.

The camera's pretty special too. It's a 50MP 3x periscope telephoto lens with a 50MP 1/1.56-inch large-format sensor, capturing more light per pixel than smaller sensors and enabling 6x lossless zoom. Image stabilization eliminates motion blur in photos and video, and TCL's MuseFilm filters promise cinematic-quality images. But it's the groundbreaking display that really won us over — a lot of people will find it much kinder on the eyes.

Lenovo ThinkBook 14x Gen 2

Lenovo's ultra-light laptop makes even ultraportables look positively porky: at just 2.18lbs / 990g and just 12.9mm thick it's one of the lightest and thinnest laptops around, making it ideal for business travelers and students alike — especially if you opt for the backlit keyboard, which is really helpful in dimly lit rooms and airplanes.

Lenovo has somehow managed to give the ThinkBook 14x the super-thin treatment without sacrificing connectivity, so in addition to its Wi-Fi 7 it features two 10Gbps USB-C ports, two 5Gbps USB-A ports and an HDMI 2.1 port, so there's no need to haul a hub around with you. It also has a spare M.2 slot that enables you to expand its storage, which makes this a solid long-term investment.

The ThinkBook 14x Gen 2 is also one of the most customizable ultraportables, powered by Intel Core 7 (Series 3) processors and with display options including vivid OLED and touchscreen LCD. It's good-looking too, with a choice of metallic finishes including Luna Gray, Celestial White, Mystic Violet and Veil Blue.

EarFun Wave Pro X

EarFun's headphones consistently deliver premium performance without the premium price tag, and the Wave Pro X are the brand's best yet. They feature a patented dual-driver system that places a 40mm diamond-like carbon driver and a 10mm liquid crystal polymer driver on a precisely aligned axis, creating a more natural and detailed sound than you typically get from multi-driver designs.

The Wave Pro X feature an 8-mic AI system that continuously optimizes the hybrid ANC system, even in wired AUX mode, and the Qualcomm QCC3095 chipset delivers Bluetooth 6.0, aptX Lossless, LDAC, USB Audio and Auracast. Add AI translation and up to 90 hours of battery life to the mix and you've got a truly excellent pair of headphones — EarFun has been working on these for a long time, and even delayed them in order to get the tuning just right.

Urevo CyberPad 3

The CyberPad 3 is a home/office treadmill that's designed differently to traditional models. Its WalkFree Adaptive Speed Control uses pressure sensors built into the running board, which detect your stepping motion to automatically start and stop operation; when you're walking or running it takes data from the motor to calculate speed adjustments in real time.

Its multi-user support is smart too, capturing raw weight and stride-rate data to generate a structured user profile that's directly linked to the speed-control algorithm.

The support structure is made from Q235 steel with a side frame of die-cast aluminum, and it utilizes a redesigned transmission path to deliver an exceptionally compact construction: the ultra-slim body is under 11cm thick. Despite its small size it features a 15% incline-lift mechanism and a 42cm running belt, with its size based on analysis of human shoulder widths.

Plaud One

Plaud One is a wearable AI companion that combines three key features that are usually separate: wearable conversation capture, context that builds across day-to-day conversations, and AI that can analyze data and take appropriate action. It can capture online meetings, and face-to-face discussions and phone calls, and it has built-in eSIM and 4G LTE for phone-free operation.

What makes Plaud One different is that it understands context. Instead of treating each recording as a standalone transcript, it can retain context across multiple discussions — so a conversation from one meeting can be connected to a later conversation or call.

That understanding enables the Plaud Agent to help you take action, identifying next steps and completing tasks across tools such as Gmail, Google Calendar, Notion, and Slack.

Minisforum MS-S1 Max-P495

The MS-S1 Max-P495 delivers large-model AI computing from an exceptionally small footprint with a very high specification. It combines AMD Ryzen AI Max+ PRO 495 with up to 192GB of unified memory to run 128B+ LLMs locally, delivering up to 126 TOPS, and its unified memory architecture eliminates VRAM bottlenecks while also reducing latency.

That power is cooled by a high-performance thermal solution featuring a copper base, six heat pipes, dual fans and phase-change cooling, and it's encased in a fully scalable design, with a slide-out chassis for easy upgrading and a rack-ready form factor.

With 4x PCIe expansion, dual 10Gb Ethernet, dual 40Gbps USB4 v2, Wi-Fi 7, and a built-in 320W PSU, the MS-S1 Max-P495 delivers future-proof power for desktop systems and scalable AI clusters alike — it's a mind-blowing beast made to meet a new kind of research and development need.

XPPen Magic Pro 13

XPPen's Magic Pro 13 is a mobile drawing pad designed for creative pros, featuring an industry-first hardware-level drawing display mode that delivers low latency, native color output and higher bandwidth video transmission over a simple one-cable connection, giving you a paper-like experience with 16K pressure sensitivity and cursor hover support.

It's the first drawing pad in its category to come with dual-USB support, enabling you to benefit from a high-speed data connection while charging your Magic Pro 13.

The Magic Pro 13 features the new Shelf digital asset management system and XPPen's Canvas software, designed to deliver a simple and intuitive sketching experience for capturing ideas when inspiration strikes. And for creatives on the move it offers two thermal management modes, balancing performance and energy efficiency based on different creative scenarios.

Strutt ev1c

Strutt's ev1c reimagines the power chair with three major advancements: Strutt's evSense sensing array, a quad-drive drivetrain, and a modular, connected design.

eVSense uses two LiDARs, 10 time-of-flight sensors, six ultrasonics and two cameras to create 3D maps in real time, powering the Co-Pilot collision avoidance for people, pets, and edges, and the Auto-Pilot, which enables you to select on-screen destinations, or use LLM-powered voice commands such as "Take me to the kitchen" — basically it's a self-driving personal mobility vehicle.

The drivetrain features four-wheel independent suspension, ABS, active steering, and an integrated electronic stability program (ESP), safely managing 13-degree slopes, cobblestones and rough terrain without slippage or tipping. And when it's time to travel, it breaks down into five modules for easy trunk storage. It looks like a genuine move forward for this kind of mobility device.

xTool M2 Color Craft Laser

The xTool M2 is the first desktop machine to combine full-color CMYK printing, laser engraving and laser cutting into one enclosed Class 1 system, delivering a full print-then-cut workflow. Simply print your full-color design onto a piece of wood, leather or acrylic, and the xTool M2 Color Craft Laser cuts or engraves the exact contour with camera-guided precision. And there's a built-in air-assist pump, an industry first for a semiconductor laser, that keeps cut edges clean by reducing carbonization and yellowing.

Having these three capabilities in a single device is a huge power-up: instead of having to print on one machine and engrave or cut on another, you can turn your raw idea into a finished, professional-looking product in a single operation. It's ideal for stickers, labels, signage, personalized gifts, and small-batch products — you could start a whole business with this one device. And because it's an enclosed system, it's also very safe.

Perlegear AX1 Smart Adaptive Mount

The Perlegear AX1 Smart Adaptive Mount answers an interesting question: what if your TV mount was as smart as your TV? The AX1 is an AI-powered, motorized TV mount that can automatically adjust the height of your TV to different viewing positions, so for example you might have it low for solo TV watching, but raised for watching sports with friends, or for following an on-screen fitness app or motion-based game.

The AX1 is controllable via gesture commands, its mobile app, via remote control, or via Alexa, Google Assistant or Siri. It can distinguish between single- and multi-person viewing, with the latter calculating the best screen height for the group, and it's capable of moving a 200-pound / 90kg TV up to 15.7 inches / 400mm vertically, with real-time obstacle detection that stops and reverses the move if the path is blocked.

Speediance Gym Monster 3

The brilliantly named Gym Monster 3 delivers serious strength training for home workouts, combining the experience of a Smith machine, barbell, dumbbells, cable machine, rowing machine, pulley system, and squat rack into one streamlined setup with up to 200lbs / 90kg of intelligent digital resistance.

Twin 800W direct-drive motors deliver smooth, consistent resistance through every rep, and it's adjustable in one-pound / 0.45kg increments, so you can progress at your own pace, rather than make big jumps you might not be ready for.

The Gym Monster 3 is controlled via a clever Bluetooth Ring Control that enables you to make adjustments without stepping away or breaking your flow, and it features four dedicated training modes: Standard, Chain, Eccentric, and Fixed Speed. It also features a built-in AI coach that can guide you from your first session onwards.

Midea GreenApex Dishwasher

The humble dishwasher hasn't changed much since Josephine Cochrane's 1886 invention went electric in the late 1920s and gained spray arms in the 1950s. But the Midea GreenApex is very different from traditional grease-busters. It's a dual heat-pump system that uses a single coordinated heat pump platform to deliver washing, rapid drying, and dry storage in a single appliance.

The GreenApex is 50% more energy efficient than conventional dishwashers, delivers 30-minute rapid drying and 168 hours of dry storage without continued system operation, and offers gentle heat-pump drying at around 45°C, so you don't need to worry about high temperatures damaging more delicate items. It feels like a major leap forward for an appliance type that doesn't often have the phrase 'cutting-edge' associated with it.

Reolink OMVI 2i Ultra

The Reolink OMVI 2i Ultra Security Camera features an innovative, decoupled dual-lens tracking system in which the individual lenses operate fully independently of one another. Unlike in other dual-lens or hybrid zoom security cameras, the two lenses here are not mechanically linked, so the fixed 130-degree 4K wide-angle lens never moves, while the telephoto camera is free to rotate anywhere, including to cover areas outside the field of view of the main lens.

This means that when the 4K camera's on-device AI spots a person, vehicle or animal, it triggers the pan-tilt camera to lock onto and follow that subject even after they exit the wide camera's field of view — but you don't lose any recording from the wide camera's view during that time.

You can also use the wide-angle view to redirect the pan-tilt camera to a particular location by simply tapping that point in the live camera view, or have the wide camera and the pan-tilt camera monitoring two distinct locations, such as your driveway and a side gate.

Navimow H510 Pro

The Navimow H510 Pro features four key innovations: precise edge finishing, zero-turn steering, adaptive mowing intelligence, and 3D modelling.

Rather than edging with a trimmer line, which can be noisy and cause minor damage, the H510 Pro has an extendable robot arm that performs zero-gap edging quietly and safely — it's the most interesting and smart version of this technology that we've seen.

The all-wheel-drive system protects your turf too, with a zero-steering system that avoids dragging the wheels across the grass during lateral turns. And the Adaptive Mowing Intelligence feature analyzes grass growth patterns to determine the optimal mowing frequency, using the 1/3 cutting rule to preserve lawn health.

With 3D terrain modeling rather than the industry-standard 2D, and a sensor array including infrared as well as LiDAR and vision for low-light reliability, and triple-sensor avoidance to protect wildlife, the H510 is a smart solution for even the most challenging lawns.

DJI Romo 2 Series

The Romo 2 Series is a robot vacuum that won't be defeated by obstacles such as deep rugs, sliding door tracks and other barriers. That's because it has robotic legs that can step over obstacles as high as 4cm, and double-step thresholds up to an impressive 8.5cm.

It also features a built-in LiDAR-guided ultra-wide-swing robotic arm to extend the mop's reach, and its powerful suction system features an automatically lowering plate that forms a semi-seal on carpet for better extraction of dust and allergens.

The Romo 2 Series also benefits from the tech of DJI's flagship drones, with a Structured Light-Speckle projector and dual fish-eye vision sensors for full 3D depth perception. It can detect items such as cables and training pads as thin as 2mm, and its AI can distinguish between debris and liquid, as well as deal with transparent obstacles such as glass doors and mirrors.

Acer Vero 16

With so many laptops sacrificing easy maintenance and repairability for super-skinny styling, the Acer Vero 16 is a breath of fresh air. While it doesn't skimp on style or power — it's highly portable, delivers up to 180 platform TOPS with an Intel Core Ultra X9 processor 388H, and can be configured with a stunning 16-inch 3K OLED display — it's made with longevity in mind.

A tool-free latch provides easy access to the Vero's innards, and the battery and SSD are replaceable, while the system is designed to support the next two generations of processors if you want to upgrade. Fully 70% of the chassis consists of a blend of PCR (post-consumer recycled) and bio-based oyster shell material, and it meets US military standards for toughness. This is a laptop that's built to last, in a way that's rare to see — and very welcome.

Asus ProArt GR1X

The Asus ProArt GR1X is tiny, measuring just 150 x 150 x 51mm. But there's nothing small about its specification. Designed for advanced content creation and local AI workflows, it delivers data center-class compute inside a mini PC, removing the need to run LLMs remotely while eliminating cloud latency, cost, and IP protection concerns for pro creators.

The ProArt GR1X features the groundbreaking Nvidia RTX Spark 'superchip', which means you get a 20-core Grace CPU and a 6,144-core Blackwell GPU, delivering up to one petaflop of FP4 AI inference performance. With up to 128GB of LPDDR5X unified memory at 9,400MHz, it enables you to run up to 120B-parameter LLMs locally, and render entire 3D scenes on-device in Windows 11.

That kind of power demands highly efficient cooling, and Asus has developed an advanced precision-cooling system that delivers 1.6x more efficient thermal coverage than standard compact systems. Asus also solved the challenge of metal-enclosure signal attenuation by embedding the Wi-Fi 7 antennas behind a glass-like signal-transparent material. It's quite the design coup, and an impressive showcase for Nvidia's new elite chip.

EcoFlow STREAM 5000 / STREAM AC 5000

The EcoFlow Stream series is a plug-and-play modular system for residential solar energy generation and storage that's designed to be renter- and apartment-friendly. It can add battery storage and smart power-management to existing solar PV installations, as well as being employed to create a new home system from scratch.

The Stream Series features EcoFlow's Oasis 3.0 home energy management system, which understands dynamic energy tariffs, keeps an eye on the weather forecast, and continuously analyzes your home energy needs to optimize generation, storage and consumption.

That means you can give the EcoBot AI agent instructions such as "I need my car charged by 7am tomorrow at the lowest possible cost" and it will implement the necessary steps, or have your energy schedules reconfigured automatically when you have visitors or other instances of increased demand.

From October the EcoFlow Stream series will also get a new feature: Local Mode, which gives you uninterrupted operation and local app control even if there are cloud or connectivity outages. It's a very powerful (no pun intended) system that's been designed with the real world in mind.

Tapo D260

The Tapo D260 wired/wireless security camera is a video doorbell that delivers all the benefits of high-spec security without the potential downsides: it stores facial recognition data locally to protect privacy, and no features are locked behind a subscription. It's advanced, yet totally cost-free once you buy it.

It has 4K resolution, a wide 180-degree field of view to cover the entire doorway, and delivers sharp detail in subjects up to 30 feet away.

The D260 features multiple intelligent detection and recognition features, including radar as well as the obligatory infrared motion sensor. These enable it to discount false alerts from things such as moving branches or passing headlights, while on-device AI can recognize people, packages, vehicles, and animals.

If you wish, you can opt in to build a library of family and friends using facial recognition, and there's even a voice changer to disguise your voice when speaking to unfamiliar callers. In a world where people are sick of subscriptions, this offers a great security upgrade without the monthly fee.

• OpenAI launched Daybreak for Frontline Defenders, offering $1B in credits for resource‑constrained security orgs
• Priority goes to essential services, governments, banks, nonprofits, and open‑source maintainers
• Initiative includes training, partnerships, and a water‑sector pilot with MS‑ISCA for local defenders

OpenAI is offering a billion dollars in credits to security organizations who want to use its Daybreak initiative but cannot afford it.

Daybreak is a cybersecurity program that provides vetted defenders with specialized AI tools and models. It was introduced in May this year, and later expanded into two tiers - Blue, and Red. Blue is the entry-level tier, providing a general-purpose model with custom-tailored safeguards. Red, on the other hand, offers a more purpose-trained cybersecurity model and almost no safeguards.

According to OpenAI, “thousands of defenders across 2,000 approved organizations and workspaces” already use Daybreak, including cybersecurity companies, defense organizations, and law enforcement agencies.

Who gets priority?

But these models cost money, and to make sure more businesses can access them, OpenAI announced, “Daybreak for Frontline Defenders”, a project where defenders can apply and receive credits for AI tokens. Even though the company announced it as a global initiative, it seems that US businesses will be the first to take advantage of it:

“OpenAI is committing $1 billion in subsidized Daybreak access to help resource-constrained cyber defenders, starting with the United States, put frontier AI to work, targeting it to be consumed over the next six months,” the company said in an announcement blog.

Businesses operating essential services such as water and wastewater systems, and electric grid operators, will get priority, OpenAI said. Then come state and local governments, community and regional banks, nonprofits, open-source maintainers, and then “other organizations with limited security resources.”

The subsidy is not just about using the models, though. OpenAI also said it will be increasing hands-on support for frontline defenders, training, and new partnerships.

On top of all that, OpenAI also announced a public sector, water-focused pilot with the Multi-State Information Sharing and Analysis Center (MS-ISCA) to train and support local, tribal, and territorial defenders.

“The pilot will pair Daybreak access with guided training and hands-on assistance for an initial group of public sector and water system defenders, helping them validate and prioritize findings, coordinate remediation, and develop a repeatable approach that can be expanded over time,” the announcement concluded.

Logitech G305 X Superlight: Review

The Logitech G305 X Superlight is a lightweight wireless gaming mouse. Logitech is no stranger to this category, but this addition to its G305 line aims to keep things relatively simple while including some surprisingly advanced features relative to its price point.

It has quite a basic appearance, with a lack of branding or any odd contours. There’s an RGB light strip that looks too small to be effective, but it manages to brighten up the G305 X Superlight to an impressive degree — especially the black model — thanks to its wealth of animation customizations.

The overall build quality is great, too, adhering to Logitech’s typically high standards. Despite how light the unit is (it weighs just 61g), it’s surprisingly solid, lacking any flimsiness or hollowness. The plastic body is smooth with just a hint of texture that feels tactile and just as premium as the best gaming mouse shells. Furthermore, all of its buttons and the scroll wheel are solidly planted without a hint of play.

To customize the inputs (as well as the aforementioned RGB lighting) of the G305 X Superlight, you’ll need to download Logitech’s G HUB software. In one section, you’ll find five configurable DPI sliders that you can set to a range between 100 and 44,000 — you can then cycle through these using the dedicated button on the G305 X Superlight, which is thankfully placed on top rather than underneath, making it easy to access. You can save your five settings as a custom preset or select from several provided by Logitech, catering to various game types and scenarios — something I haven’t seen much in peripheral software.

In another section, you can reassign all of the G305 X Superlight’s buttons. There are a large number of assignments available, ranging from a multitude of system and media commands to keyboard inputs and mouse adjustments. You’ll also find custom actions for Discord, Overwolf, OBS, and Streamlabs Desktop. What’s more, a second mapping layer is available via Logitech’s G-shift feature, which is accessed by holding down a button of your choosing.

However, there aren’t any performance-related tweaks for the G305 X Superlight; you can’t alter the lift-off distance or debounce times, nor can you enable motion sync or angle snapping, for example. About the only feature in this area is what Logitech calls BHOP mode. This is designed to prevent accidental knocks of the scroll wheel from registering by ignoring the first scroll event unless a second is performed within a certain time frame (adjustable between 100ms and 1000ms).

Such omissions didn’t spoil my time gaming with G305 X Superlight, though. Its low profile suited my grip style, and the rear hump was just about prominent enough to sit comfortably in my palm without being obstructive. Also, I could grip the mouse securely with my thumb and ring finger during lift-offs thanks to the sidewalls that narrow as they reach the bottom, making up for the lack of grip tape or embossing.

Maneuvering the G305 X Superlight is easy thanks to that aforementioned lightness, too. And despite the relatively small skates, swipes were smooth and frictionless on my mouse pad. This was the case even when I had the USB cable attached — a surprise given it isn’t braided as many gaming mice cables are. Although it created some noticeable drag, it’s still lighter and more malleable than your average rubber cable.

As for the mouse buttons, I appreciated the ergonomics of their downward slant and subtle indentations. Clicks are solid yet snappy, with a good amount of feedback and a surprisingly deep travel. This means spamming is relatively effortless while accidental taps are unlikely to register. The side buttons are easy to reach and actuate, too.

The scroll wheel is easy to flick thanks to its light notching, yet there’s still just enough feedback to make single scrolls easy to perform. However, there were a few occasions when scrolls triggered when I pressed the middle button. This button can also feel quite firm if you don’t hit it at precisely the right angle, which can make presses awkward, but with practice this became less of an issue.

I had no problems with the connectivity of the G305 X Superlight. It connected to my devices via both Bluetooth and the 2.4GHz dongle without a hitch, and hot-switching between them was quick and easy thanks to the selector button underneath. You’ll also find a handy slot here for storing the dongle.

It is a shame there’s no native 8KHz support, although most PC gamers probably won’t need it. Taking everything into consideration, though, the G305 X Superlight is a great value gaming mouse that offers high performance and has a pleasing amount of features at this price point.

Logitech G305 X Superlight review: Price & availability

• $79.99 / £69.99 / AU$149.95
• Available now in black or white
• Good price for a wireless gaming mouse

The Logitech G305 X Superlight costs $79.99 / £69.99 / AU$149.95 and is available now. Two colorways are available: black and white. A USB cable is included for charging and wired play, but it isn’t braided. There are also no spare skates or optional grip tape to adhere to the sidewalls or mouse buttons.

Nevertheless, the G305 X Superlight is well priced for a gaming wireless mouse that has two wireless modes. It also performs very well and has a generous number of input customizations, although it lacks performance-related adjustments. It’s much cheaper than the Razer Viper V4 Pro, even though that mouse has a similar number of input customizations and no additional Bluetooth support. However, we loved virtually every aspect of its performance when we tested it, and gamers may find its form more ergonomic.

If you’re looking for something even cheaper, the Cooler Master MM311 is one of the best value gaming mice around right now. We were impressed with its light and symmetrical design, as well as its fast performance. Again, it doesn’t feature Bluetooth support, and you also have to supply your battery, but it’s hard to complain too much about such omissions when it’s so cheap.

Should I buy the Logitech G305 X Superlight?

Buy it if…

Don't buy it if…

Logitech G305 X Superlight review: Also consider

How I tested the Logitech G305 X Superlight

• Tested for several days
• Used for gaming and other tasks
• Plentiful gaming mouse experience

I tested the G305 X Superlight for several days, and used it to play several games, including Counter-Strike 2, which is a great test for mice given it requires extremely fast and precise movements. I also used the mouse for general browsing and working.

I’ve been PC gaming for over a decade, so I’ve used plenty of mice in that time. I’ve also reviewed a large number of gaming mice before, including other Logitech models.

• Read more about how we test
• First reviewed: August 2026

• Anker has announced a new eufyMake fabric printer
• It can print straight on to fabrics or on to film surfaces
• We're still waiting on pricing and an exact on-sale date

The product announcements out of IFA 2026 continue apace, and we're very taken by the new eufyMake printer that was just unveiled by Anker. Described as a "personal fabric printer", it's capable of putting designs on a wide variety of materials.

It doesn't have a name or a price yet, and it's not arriving until the first quarter of next year (so either January, February, or March), but we are getting a 'first look' at IFA. It works with both light and dark fabrics, Anker says, with consistent results every time.

There's support for Direct-to-Garment (DTG) and Direct-to-Film (DTF) printing standards, so ink can be pushed right on the fabric itself or a film that's then placed on the fabric. The printer will work with a variety of special-effect films on top of materials too.

"Professional garment customization used to be locked inside expensive industrial machines," explains Anker in its marketing blurb. "Now, we're bringing that magic right to your desk with a printer designed specifically for fabric printing."

More updates

Anker is clearly targeting creators and those with small businesses or side hustles with this: it means you could get some branded goods up for sale without having to take your designs to a third-party printing service.

It doesn't look like you'll need a whole lot of space for it either: the press shots show it fitting comfortably on a table, and it's roughly in the range of a consumer 3D printer. There's a large dashboard on top too, for handling print settings.

More information should emerge soon, including how much this will set you back. At the same time, Anker says it's retiring the eufyMake branding alongside other sub-brands — everything will just be Anker from now on.

Anker has also announced updates for its UV Printer E1 model, the ultraviolet texture printer that was a crowdfunding hit last year. The E1 is getting bidirectional printing and faster print speeds via an over-the-air update, at no extra cost.

• A Japanese laptop maker has come up with an innovative stand
• It folds out from underneath the notebook to give the device some clearance off the surface below
• This improves cooling the processor by up to 3C / 5.4F, the maker claims, and it could be a trick that other manufacturers adopt

A PC maker in Japan has produced a laptop with a clever twist under the hood — well, under the chassis to be precise.

VideoCardz spotted Iiyama PC's 15-inch gaming laptop on sale at PC Kobo, a Japanese retailer. It has a small stand that folds out from beneath the body of the device, effectively propping up the Level 15FX167 notebook and raising it slightly (by what looks like just under an inch at the highest point).

That clearance allows for better cooling, with more air free to circulate underneath, and Iiyama PC claims that the stand "can lower the CPU operating temperature by up to 3C" compared to when the device is flat on a surface.

The specs of the Level 15FX167 include an Intel Core Ultra 9 Processor 185H, 16GB of RAM, and an Nvidia RTX 5060 GPU with a 1TB SSD.

Analysis: every degree counts

A difference of 5.4F / 3C might not sound like a whole lot, but it's a useful bit of extra thermal headroom when it comes to a gaming laptop. Remember that portable devices require all sorts of head-scratching in terms of the design of the cooling system, fans, vents, heatsinks and so forth. Every fraction of a degree that can be eked here or there all adds up to better performance ultimately.

As Iiyama PC points out, the tilted angle that the built-in stand provides is also ergonomically sound for a better typing experience, too.

Of course, the idea of an integrated stand is nothing new in the world of laptops, but this implementation is a novel one, as opposed to the traditional kickstand that you see on the likes of Microsoft's Surface devices.

It's one of those ideas that, when I first set eyes on it, I thought to myself, how has this not been done before? Then I had to check that it hadn't been done before, and indeed it hasn't, as far as I can tell. (Although the Asus Ergolift design is in a similar vein, but it's built directly into the notebook's hinge).

The question is, will other laptop makers take notice, and might we see this on devices outside of Japan eventually? Perhaps, and I'll be interested to see a review of this Iiyama PC notebook. My only concern is whether the stand might be a weak point in terms of the possibility of it breaking, so a reviewer should be able to give us a good idea of any fragility therein.

And in case you were wondering, yes, Iiyama is the same brand that makes the famous monitors, sitting under the same parent company.

• Microsoft warns of Teams‑based campaign where attackers impersonate IT staff
• Victims tricked into granting remote access, leading to malware, lateral movement, and ransomware
• Defenses: verify support contacts, train staff, harden Teams, and use Defender Safe Links/ZAP

Microsoft is warning about an ongoing hacking campaign that starts with a Teams message and ends with a ransomware infection and data theft.

In a new in-depth report published on the Microsoft blog, it was said that unnamed threat actors were reaching out to their targets at various enterprises via a Teams chat, while impersonating IT staff.

They were coercing their victims into granting remote access via screen sharing or remote monitoring and management tools and once received, used their access to install malware loaders and various other implants.

How to defend against Teams-borne phishing

The malware was just the first stage of the attack. Subsequent stages include host reconnaissance, security-product and virtualization discovery, and “periodic desktop screen capture”. In other words - mapping out the landscape and conducting espionage.

The crooks would then enumerate domain accounts, servers, and users, through native tools and Active Directory Service Interfaces (ADSI) queries and begin moving laterally.

The final step includes identifying and extracting valuable data, followed by a ransomware infection.

Microsoft does not name the perpetrators, and mostly refers to them as “threat actors”. It makes sense, since the “fake IT support via Teams” technique is being used by multiple groups at this moment. Russia’s Cozy Bear, FIN7, and Storm-1811 are probably the most obvious examples.

The world’s biggest extortionists - ShinyHunters - are also known to use Teams to trick victims into granting access, but this group rarely deploys an encryptor and instead just focuses on data exfiltration.

Whoever the attackers are, and whoever they’re after, one thing is for certain - the risk in the enterprise environment has never been greater.

That is why Microsoft advises reinforcing user education by establishing internal helpdesk authentication phrases, and by training employees to recognize external-tenant indicators.

The company also urges enterprises to verify unsolicited support contact, and to harden Microsoft Teams and email against social engineering. “Use Microsoft Defender for Office 365 with Safe Links and Zero-hour auto purge (ZAP) so malicious messages and URLs are neutralized at time of click and removed after delivery,” Microsoft urges.

At IFA 2026, the huge tech show in Berlin, Germany, Nvidia announced that laptops running on its ARM-based RTX Spark chip will be available to buy from October.

The biggest names in the laptop industry, including Microsoft, Lenovo, HP, and Dell, will all have RTX Spark devices, and I got to spend a bit more time with some of them at Nvidia’s launch event.

Having already seen a lot of RTX Spark laptops at Computex 2026 earlier this year, quite a bit of what Nvidia showed at IFA was familiar. There was, again, a big emphasis on local AI performance, which is undoubtedly impressive, but a bit niche for consumers, and I can see how Nvidia tech such as DLSS upscaling and Multi Frame Gen (MFG), which RTX Spark devices can make use of, can help content creators working on complex 3D art speed up their workflows (those technologies have in the past mainly been aimed at improving the performance of PC games).

I also got to play a range of games on RTX Spark laptops, including DOOM The Dark Ages, and 007 First Light, and it remains impressive that these thin and light laptops are able to run such demanding titles with such impressive results. This is especially true when you consider that the games aren't running natively on ARM, instead they are being run via Microsoft's Prism emulation layer, which means games developed for traditional Intel or AMD (x86) hardware can run without devs having to make dedicated ARM versions. According to the Nvidia spokesperson I chatted to, the performance hit of running a game via emulation is negligible, at least with GPU-bound titles.

The spokesperson admitted, however, that CPU-intensive games (such as RTS games) could see bigger dips compared to running the game natively.

What is new at IFA is the announcement that RTX Spark laptops will go on sale in October. But, apart from that, details remain scarce - and that means it's hard to get excited about these laptops just yet.

Keeping their cards close to their chest

Despite being about a month out from going on sale, Nvidia was tightlipped about a lot of things regarding RTX Spark laptops. The biggest question mark, of course, concerns pricing.

These are powerful laptops aimed at creative professionals, and will come with up to 128GB of unified memory, so I can't imagine they are going to be anything other than very, very, expensive. The continued silence about prices doesn't bode well for anyone hoping for vaguely affordable laptops.

One spokesperson I talked to did suggest there will be multiple yet to be announced configurations that will appeal to different consumers and price points, though they looked slightly doubtful when I asked if there would be an RTX Spark laptop that students could afford.

We still don't know more about performance, either, as while there were live demos, raw performance numbers were not available, and I was not allowed to run benchmarks or change settings.

What I can say is that complex AI tools and generative AI features, all run locally on the laptops, and appear fast and smooth. Games also ran well. I was also assured by Nvidia that performance would be roughly the same if the RTX Spark laptop is plugged into a charger, or running on battery.

So, no power-conserving throttling it seems, something that Apple has long boasted about with its M-series chips.

A number of laptops from Nvidia's partners were on display, but were turned off, and journalists were asked not to even pick them up, again an odd request considering these devices are supposed to go on sale next month.

I'm certainly impressed with what I've seen, and the potential of RTX Spark is huge. I'm also glad that Windows laptops look like they could finally give Apple's modern MacBook Pros a run for their money.

But, on the topic of money, I really won't be able to ascertain just how excited we should all be with RTX Spark laptops until we know more about the price - and with an October launch, time is running out.

• FBI warns of rising OAuth consent phishing attacks exploiting legitimate app permissions
• Victims tricked into granting malicious apps access, enabling email reading and sending
• Password changes don’t help; users must revoke tokens in app security settings

Hackers found a way to access your data, read your messages, and even send emails to your contacts, without ever needing your password or other login credentials. All they need from you is a single click on a completely legitimate, well-known platform.

The technique is called “OAuth consent phishing”. It’s been around for more than a year and it’s gotten popular to a point where even the FBI is taking note. Earlier this week, the law enforcement agency issued a new public service announcement, via its Internet Crime Complaint Center (IC3), warning Americans about the threat.

OAuth (Open Authorization) is an internet standard that allows users to give apps access to their account on another service, without giving the app their password for that service. For example, when users install a new app, they have the “Continue with Google” option. When they click it, they are asked if they allow the app to access their email. If they approve, Google gives that app a special access token, which allows the app to access the user’s Google account without ever seeing the password.

Pulling off an OAuth attack

So, to pull off an OAuth attack, the threat actor must first trick Google (or Microsoft, or any other company providing the service) and get their (malicious) app registered on the platform. Then they would reach out to their target via instant messaging, while impersonating government officials, media, and other publicly known personalities, and sharing a link to what appears to be a document.

The link redirects the victim to a legitimate service (for example, Google), where they are asked to grant permissions to the malicious app. If they approve, the attackers gain access to their email accounts with which they can do almost anything.

To make matters worse, simply changing the password does not fix the issue. The only way to eliminate the threat is to revoke the access token that was given, which can be done in the application security settings.

The FBI did not say who the threat actors were or who they were targeting, other than they were “prominent victims”. Their family members were being targeted, as well.

Via The Record

• Google Pics lets you generate and precisely edit images using simple text prompts
• It will be integrated directly into Google Docs, Slides and Drive
• Pics is rolling out to Google AI Pro, Ultra and eligible Workspace customers

Google has started rolling out Pics, a new AI-powered image creation and editing tool that looks like the company’s answer to Canva and even Adobe Express.

Canva became enormously popular by enabling ordinary people to produce good-looking graphics without needing professional design skills. Google Pics is attempting something similar, but rather than giving you a huge library of templates and asking you to assemble a design yourself, it puts AI at the center of the entire process.

Pics isn’t as fully featured as Canva, at least from what Google has shown so far. However, it’s included with Google AI Pro and Ultra subscriptions and selected Workspace business plans — and that could prove to be its biggest advantage.

All AI, no templates

Pics starts with a prompt. You describe what you want to create, perhaps a child’s birthday invitation, an event poster or a social media graphic, and the AI generates several versions for you to choose from.

You can then select individual objects or pieces of text and ask Pics to change them without regenerating the entire image. Text can be edited, reformatted or translated while preserving the surrounding design, and images can be cropped for different formats or upscaled to 2K or 4K. You can also request several changes at once and return to an earlier version if the results go wrong.

While some people will dislike how heavily Pics relies on generative AI, others may appreciate how much of the traditional design process it removes. Instead of learning how to use layers, masks and selection tools, you can simply describe the change you want.

Google Pics is powered by Nano Banana, Gemini’s image generation and editing model. You can see how it works in this video:

Why Workspace changes the equation

The biggest difference between Pics and Canva is that Pics isn’t being positioned only as a standalone design app. Google is also integrating its editing tools directly into Docs and Slides, with deeper Drive integration arriving over the coming weeks.

That means you’ll be able to select an image in a presentation or document and edit it using Pics without opening another app. If an image in a document is too dark, for example, you could ask Pics to lighten it while remaining inside Google Docs. Creations can also be shared and edited collaboratively in much the same way as other Workspace files.

That integration is what makes Pics potentially significant. Canva remains a much broader and more mature design platform, complete with templates and tools covering everything from presentations to websites and video. Pics doesn’t need to replace all of that, however. It only needs to make Google users wonder whether opening Canva is still necessary for the everyday graphic they’re trying to create.

Google Pics is rolling out over the coming weeks to Google AI Pro and Ultra subscribers, as well as eligible Workspace business and education customers. I’m still waiting for it to reach my account, but I’ll be putting it through its paces as soon as it does.

• Thomson Reuters confirmed March 2026 breach of its C‑Track court management system
• Incident affected courts in 11 US states, Ontario, and the US Virgin Islands
• No operational disruption; scope of exposed records still under investigation, no misuse reported yet

Thomson Reuters, the IT company behind the Reuters news agency, suffered a cyberattack a few months ago, exposing certain court documents to the attackers. In a brief announcement published earlier this week, it seems Thomson Reuters only noticed the intrusion now, months after it was already over.

Here is what happened: Thomson Reuters operates a court case-management system called C-Track. It is a tool used by different courts to manage things like cases, filings, hearings, and schedules. It is used by courts in several US states, the US Virgin Islands, as well as Ontario, Canada.

On June 30, 2026, Thomson Reuters detected unauthorized activity in one of its cloud environments, prompting an investigation which later determined that an unauthorized threat actor broke in and obtained some C-Track files. This happened in March 2026.

Investigation underway

So far, the incident is confirmed to have taken place across 11 US states (Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming), the U.S. Virgin Islands, and Ontario, Canada, exposing court records and personal information. Ontario's three Chief Justices confirmed it, as well, saying Thomson Reuters notified Ontario's Ministry of the Attorney General on July 23.

A more detailed investigation is currently underway, and all relevant authorities have been notified, it was said. At press time, Thomson Reuters did not yet determine exactly what information was accessed, or how many people were affected. The good news, however, is that there is currently no evidence of identity theft resulting from the incident, and there is no indication that systems handling court-related financial transactions were affected.

C-Track itself remains operational, as well. No threat actors have yet claimed responsibility for the attack or threatened to leak the files to the dark web.

"There has been no operational disruption to C-Track as a result of this incident," a Thomson Reuters spokesperson said. "Our products and services remain fully operational and are safe ​to continue to use. Independent ​cybersecurity experts assisted in ⁠the investigation and validated the remediation measures implemented."

• Microsoft is rolling out a new security feature for Windows 11
• Memory integrity provides stronger defenses for a crucial part of the operating system, and it's being automatically enabled
• Some gamers say the feature hampers gaming frame rates considerably, and they're not happy

Windows 11 is getting its security bolstered with a feature that's being automatically enabled, but which comes at a cost that some PC gamers don't want to pay — and this is proving quite the controversy on social media.

The Verge reports that Microsoft has announced that it's rolling out the enablement of memory integrity protection across eligible Windows 11 PCs, and that this is because "security works best when protection is built in, not bolted on".

Microsoft explains: "More devices will soon receive stronger protection by default, with no additional setup required. Windows quality updates will begin enabling memory integrity protection on eligible devices.

"If not already enabled, these updates will also enable VBS [Virtualization Based Security], helping make additional security capabilities available and reflecting our commitment to making Windows secure by design and secure by default."

The idea is to tighten security for Windows 11's kernel-mode drivers, a core aspect of the OS with direct access to the system's hardware, and there can be no argument that this additional protection gives host PCs tougher defenses and makes them more difficult to exploit. So why the controversy? Let's dive into the pros and cons of what's going on here.

Analysis: a divisive move — but we can't ignore that the threat landscape is changing

In Microsoft's view, this is a no-brainer: stronger security is being rolled out to Windows 11 devices, or at least those which are eligible (older PCs may not be). However, PCs configured via group policy not to use memory integrity, or machines where it's been disabled before, won't have the feature forced on them.

Other supported PCs will get memory integrity (and VBS, because it's required for memory integrity) turned on automatically by Windows 11, and this is where some gamers are up in arms. VBS has a long history of being a thorn in the side for gamers, with the feature being linked to frame rate losses.

How much of a headwind does this cause for PC games? Well, therein lies a big part of the issue, because it's difficult to pin that down exactly, and as ever, it's bound to vary depending on your PC's exact hardware and system configuration.

Some gamers observe frame rate hits of approaching 10%, while others say the impact isn't noticeable at all. There's a lot of back-and-forth on Reddit arguing about the extent of any slowdown, and here's a typical exchange:

One Redditor notes: "HVCI [memory integrity] is a great security feature, and the performance impact on newer platforms (to which this automatic switch will apply) is negligible."

Another replies: "It ain't negligible. 9800x3d, 5080, ddr5 6000 cl28 and my 1% lows get wrecked with this feature on. Way smoother disabled."

This isn't just about frames per second performance for some gamers, then, as there are also accusations of it affecting the lowest troughs (bottom 1%) that the frame rate hits (meaning the game suffers more stuttering at times and generally feels jerkier).

As the first comment points out, though, the likelihood should be that a more modern PC won't feel much of a hit (if anything). The gaming rigs that might see more of a spanner in the frame rate works are those which are older, but still modern enough to get the auto-enablement of memory integrity. In other words, a collection of PCs which are on the outer fringes of that compatibility limit (older machines, but not too old to avoid the feature rollout).

Of course, even those PC owners can always turn off memory integrity. The major beef for some is that they remember that Microsoft got into trouble for automatically switching on VBS in the past in a quiet, under-the-radar manner — and the question now will be whether gamers realize that this feature has been enabled alongside memory integrity.

In all honesty, when I saw what Microsoft was doing here and fired up Reddit to test the temperature of the reactions, I was expecting nothing short of a flamethrower being turned on the software giant. However, the feedback is split quite evenly between the haters — or those who disapprove at least — and users who are applauding Microsoft for this deployment.

Here are a couple of further examples from either side of the fence: "Apparently a controversial opinion, but systems that are for everyone should be failsafe, and that includes the most secure option being the default. There should be an option to disable security to get higher performance, but most secure should be the default."

Juxtaposed with this: "Already have memory integrity turned off as this 'feature' already hits gaming, I've used Windows without memory integrity for decades I think I'll be ok."

I must admit I'm inclined to agree with Microsoft's decision here — providing that when it happens, Windows 11 is clear on informing the user, so they can reverse the change if they aren't happy with it.

I think part of what Microsoft is doing here is keeping one eye on the future in terms of the difference AI might make to the security of Windows 11 PCs.

I keep hearing about how AI is already driving new threats and exploits, and so the kernel defenses that are being brought into play here may not have been quite as necessary in the past — as the last Reddit post I highlighted indicates — but they may be very much needed before too long. AI is accelerating the development of new threats considerably, and making it easier for anyone to becoming a peddler of malware, so Microsoft likely feels the pressure to act.

• 22% expect their policy to offer full coverage, 10% expect it to fall short
• Data breaches and reputational damage are major concerns
• Companies should look at finances before considering operational recovery readiness

New research from Cohesity has revealed that many UK businesses could be significantly overestimating the protection they get from cyber insurance policies, with just one in five (22%) British CEOs believing their policy would cover both the additional costs and lost revenue that an attack could lead to.

A third expect it would cover the additional costs only, another third believe their policy is only sufficient for lost revenue, and a further one in 10 did not expect it to cover either of the two categories.

The report's conclusion is that cyber insurance in its current state for many UK businesses is only enough to transfer some of the financial risk – but not enough to restore systems, data or operations.

Cyber insurance policies don't provide enough cover

According to the study of 100 CEOs from large enterprises, businesses expect a cyberattack to reduce their revenue by an average of around 15%, but many businesses lack a detailed understanding of how much an attack could actually end up costing them. As many as one in five (21%) haven't even conducted business impact modelling.

Among CEOs' biggest fears are data breaches (49%), brand and reputational damage (38%), high recovery costs (36%), revenue loss (34%) and production downtime (30%). They're all either financial concerns or incidents that could lead to financial loss, and yet it's clear that policies are unlikely to offer enough cover.

With many totally unaware of the potential impacts and the extent of their policy's cover, Cohesity urges businesses to start off with calculating financial exposure and understanding what their policy covers.

After that, they can go on to prove that critical systems can actually be recovered, because without an insurance payout, this would likely not be possible.

"Organisations must be able to identify the systems and data needed to keep the business operating, assigning clear responsibility for recovery decisions and regularly testing whether critical services can be restored securely," UK&I VP Fraser Hutchison explained.

The Munbyn RW403B remains one of the best shipping label printers we've ever tested, and it's the one our senior printer editor regularly recommends if you're running an ecommerce store or a small business. And currently, Munbyn's Bluetooth thermal label printer is down to $80 (was $120) at Amazon.

During our own testing, we found it easy to use, impressively quick to print, and actually fun to use. It delivered excellent results across a range of labels, postage notes, barcodes, and stickers with support for sizes from 1.57 to 4.25 inches wide.

The RW403B offered us a dedicated way to print 4 x 6-inch shipping labels without having to buy ink or toner. It connects over Bluetooth and works with Android and iPhone devices, as well as Windows PCs, Macs and Chromebooks. In the UK, the Munbyn RW403B is now £70 (was £95) at Amazon.

Why we recommend it

Munbyn says its DAC technology automatically calibrates the printer to reduce label misalignment, while the 0.1mm font legibility should keep small text and barcodes clear. It's also rated at 60dB, which makes it better suited to a home office or shared workspace where a noisy printer could quickly become irritating.

In his 4.5-star review, our senior printer editor Jim said: "it’s easy to set up and operate," and "the robust design feels like it’s built to last and the print quality is better than most label printers."

He went on to explain, "After your initial outlay, there’s no ink cost to think about and thermal labels can be bought inexpensively."

Scroll the gallery below for more images taken during our testing.

Price context & historical value

At $79.99, you're saving $40 against the usual $119.99 price, which works out to a solid 33% discount. It has been cheaper in the past, but not hugely. We've seen it as low as $76, which is just $4 less than the current price.

Should you buy it?

✅ Buy the Munbyn Thermal Label Printer if...

You're regularly packing and shipping orders and want to streamline the process. Bluetooth connectivity means you can print from any device. It's absolutely ideal for small business and ecommerce use.

❌ Skip the Munbyn Thermal Label Printer if...

You need colorful labels, graphics or branding. This is a monochrome thermal printer designed primarily for practical labels, so you'll need a different printing technology if presentation and full-color output are required.

The Catch: What to know before you buy

This is a specialized printer and while its maximum 4.25-inch print width is ideal for shipping labels and similar jobs, but it can't handle regular letter-size documents.

It's also worth considering how often you'll actually print labels. The convenience is easy to justify for a small business or frequent online seller, but occasional users may be perfectly happy continuing to output shipping labels on an ordinary printer.

• Shop all label printers at Amazon

• Baylor Genetics confirmed a June cyberattack affecting 2.8M patients and employees
• Stolen data includes medical test results, insurance info, and some SSNs/financial details
• Operations continued; no misuse seen yet, but no group has claimed responsibility

Baylor Genetics, a US-based clinical diagnostic laboratory, suffered a cyberattack in which it lost sensitive data on 2.8 million people - both patients and employees.

In a security update posted on its website earlier this week, the company said it spotted the intrusion in a “limited portion” of its IT environment on or around June 15. Subsequent investigation determined that both patients and employees have had their data stolen, including those who are not working at Baylor anymore.

For patients, crooks stole names, dates of birth, medical testing information, laboratory test results, and “potentially health insurance information, as well as Social Security number”. SSNs, Baylor Genetics stressed, were taken from a “very limited subset of patients”.

No attribution yet

Regardless, fraudsters who know the details about medical testing and lab results have more than enough information to launch highly sophisticated, personalized phishing attacks that can lead to ransomware infections, business email compromise, and more.

For certain current and former employees, the attackers nabbed Social Security numbers, government-issued identification numbers, and financial account information, ideal for wire fraud.

In the security update, the company did not discuss the identity of the attackers, or the number of affected individuals. However, in a separate report filed with the US Department of Health and Human Services, Baylor reported the number of victims as 2,810,878. It added that at the time of publication, there was no evidence of confirmed identity theft, fraud, or misuse of personal information stolen in the attack.

It also said the incident did not impact its everyday operations which continued as usual.

Usually, data theft incidents like this one are followed by public disclosure from the perpetrators, who name-and-shame their victims in an attempt to get them to pay a ransom demand. So far, no threat actors claimed responsibility for this incident.

• UK legislators propose “kill switch” laws to halt runaway AI, citing critical infrastructure risks
• Lord Clement‑Jones and MP Alex Sobel push amendments and new bills, backed by ControlAI advocacy group
• Similar efforts emerging in US

Sam Altman’s fear-based marketing for AI seems to have backfired, as now multiple legislators in the UK and elsewhere are calling for a “kill switch” law to be introduced.

According to the BBC, Liberal Democrats’ Lord Tim Clement-Jones proposed an amendment to the Cyber Security and Resilience Bill which would see the UK create a “vital safety net” to provide a “democratically accountable means to ‘halt a runaway system before it can compromise our critical national infrastructure’.” The capability would only be used as a last resort, Clement-Jones stressed.

The bill is currently being worked through in the UK Parliament, the BBC said.

Is there reason to worry?

But that’s not the only effort in the UK to put some reigns on AI. Apparently, Labour MP Alex Sobel plans to introduce an AI Security Bill later this month which, according to the BBC, would “effectively halt the development of superintelligent AI” and make the UK the first G7 country to do so.

The bill is supported by a campaign group called ControlAI, a UK-based nonprofit and advocacy organization focused on the risks posed by advanced AI. Its founder and CEO is Andrea Miotti, who previously worked at the AI safety company called Conjecture. Across the pond, US legislators are currently considering an AI Kill Switch Act as well, but the bill is still in very early stages of development.

Ever since the first ChatGPT model that was introduced in 2021, a debate has been raging whether or not AI will be net positive, or net negative, for humanity. While some argue that the discovery rivals the steam machine and that it will transform our lives beyond our wildest dreams, others are fearful of losing jobs, a collapsing economy, and a dystopian future devoid of humanity and emotion.

Marketing campaigns for ChatGPT and, in some measure, Claude, are not helping, either. Both companies have built models focused on cybersecurity which were advertised as “too dangerous” for the general public and instead were only given to a handful of organizations. Despite partial skepticism, many are worried that these models might severely disrupt the security of banking, critical infrastructure, and communications.

Via BBC

• Acer has revealed two interesting new laptops at IFA 2026
• The Swift Blade 14 is a super-light notebook at just 799g, and it's the lightest mainstream laptop yet
• The Vero 16 is designed to be easily repaired, with a replaceable SSD, battery, USB ports — even the CPU can be upgraded

Acer has revealed a couple of smart new laptops over at IFA 2026, one of which is notable for its repair-friendly credentials and upgrade possibilities, while the other is remarkable because it's the lightest laptop we've seen to date.

That lightweight champ — which is Acer's Swift Blade 14 — requires a caveat, though, as technically there's a lighter notebook model which already exists. However, the Fujitsu LifeBook laptops out there are niche products targeted at the Japanese market (or other parts of Asia in some cases), so in terms of the global consumer market, the new Blade 14 takes the crown, weighing just 799 grams or 1.76lb (which isn't much more than the mentioned LifeBooks).

The Blade 14 has a chassis that's fashioned from a combination of carbon fiber and a magnesium-aluminum alloy, which Acer says means it's durable as well as incredibly light.

The premium trappings continue with a 14-inch OLED screen that has a 3K resolution (and a 16:10 aspect ratio).

The Swift Blade 14 is built around an Intel Core Series 3 CPU — Wildcat Lake models which are power-efficient and easier to keep cool in a super-trim laptop — backed with 12GB of RAM. So, the spec here is slightly pulled back, with that notable compromise of not going for 16GB of system memory to keep the price down.

As for that price, we don't have it yet, and we don't have a launch date either. However, even with a more affordable CPU and 12GB of RAM, I expect this super-slim machine will extract quite a toll on the wallet.

From lightweight hero to Vero

Also at IFA, Acer took the wraps off the new Vero 16, a notebook that majors in repairability and is backed by some substantial eco-friendly credentials.

As Acer makes clear, this is a 16-inch notebook that benefits from a "more serviceable design [that] makes key components easier to access, repair, and replace", with the aim of extending the usable life of the device. In short, avoiding obsolescence (rather than planning for it, as the accusations often run with some notebooks).

To that end, you're given tool-free access to the innards of the Vero 16, and the SSD is replaceable along with the battery. The RAM is soldered to the motherboard, so that can't be upgraded — the one fly in the ointment here — but the ports aren't, so they're removable. That means if a USB connector is broken, you can switch it out, and the hinge between the body and screen is designed so it can be replaced as well.

On top of that, the Vero 16 allows for the processor to be upgraded, as Notebookcheck.net points out, although it isn't clear how this works yet (likely via a motherboard swap, which would also allow for a RAM upgrade at the same time). This is very unusual for a laptop, and we're told upgrades will be good for at least two generations of CPU silicon.

Speaking of the CPU, the Vero 16 is built around Panther Lake, offering up to an Intel Core Ultra X9 388H chip with Arc B390 integrated graphics. When it comes to the display, there's the choice of a 3K OLED or a 2K OLED touchscreen.

In terms of its green-friendly nature, Acer says the Vero's aluminum chassis is made from a "blend of 50% post-industrial recycled aluminum and 50% low-carbon aluminum". The packaging is 100% recyclable, too.

We don't yet have a price for this laptop either, but hopefully we'll get more info on pricing, and the release dates, for both of these notebooks before long. I'm keen to see both models arrive later this year, and to learn the details of how upgrading the Vero's CPU will work.