There's no denying that the Samsung 990 Pro SSD is an incredible SSD - we called it "stellar" in our review when we took it out for a spin. But while the 990 Pro 2TB is still down to $390 (was $640) at Amazon, I recommend professionals running heavy workloads check out the 9100 Pro instead.
Right now, you can get the Samsung 9100 Pro 2TB, running at $400 from Amazon. This next-gen PCIe 5.0 internal SSD delivers twice the speeds of the 990 Pro, up to 14,700 MB/s for just $10 extra.
If you're upgrading the rest of your gear for performance, I've also found a Corsair Vengeance RGB CL30 Cherry Blossom DDR5 RAM kit deal right now, too.
9100 Pro SSD (2TB): $399.99
Offering up to 14,700MB/s read speeds, this PCIe 5.0 NVMe SSD pairs 2TB of storage with hardware encryption, advanced thermal control, Magician Software support, and excellent performance for creative workloads, AI applications, and demanding multitasking.View Deal
990 Pro SSD (2TB): was $639.99 now $389.99
The Samsung 990 Pro is one of the best SSDs around for most general uses. In our review, we hailed it as "an absolutely stellar M.2 SSD for both professional users and gamers." View Deal
When we reviewed the 9100 Pro, we called it "the best there is," delivering professional-specific performance in a way that other Pro drives from Samsung can't match. It earned 4.5 stars after testing, and a TechRadar Recommends badge.
While not everyone will get use from a PCIe 5.0 NVMe SSD like this, ultimately we found that "for pros, there's none better than the 9100 Pro."
Capable of hitting read speeds of up to 14,700MB/s, the 9100 Pro is designed for use in workstations, or AI workloads where speed and performance matter more than, say, gaming or general computing.
The SSD uses a 5nm controller for improved power efficiency compared to older generations.
And, in keeping with the professional focus, it also includes hardware encryption for security-minded business users.
Price context & historical valueAt $400, this seems to be the going rate for the Samsung 9100 Pro right now. With rising component costs, I can't see it dropping to its all-time low of $170 any time soon. That came in October 2025. For most of 2026, it's been priced anywhere between $300 and $500, but since at least July, $400 has been the going rate, down from a high of $680.
Should you buy it?✅ Buy the Samsung 9100 Pro if...
You're a professional business user or creator who demands fast PCIe 5.0 speeds and seamless multi-tasking during demanding and complex workloads.
❌ Skip the Samsung 9100 Pro if...
You just need a simple, speedy but brilliant SSD for general day-to-day tasks, which is where the Samsung 990 Pro shines, or your system lacks support for PCIe 5.0.
The Catch: What to know before you buySince it's designed for professional use, most general users will never take full advantage of the speeds delivered by the Samsung 9100 Pro. And to actually hit those ultra-fast 14,700 MB/s speeds, you'll need to make sure your motherboard supports PCIe 5.0. However, if your rig allows for a Gen 5 SSD, then it's still worth the extra $10 over the 990 Pro for future-proofing your set-up.
The Smart Tank series is HP's answer to the refillable-ink trend we've tracked closely, and for the price, it's worth checking out the HP Smart Tank 5101 all-in-one printer for $170 (was $260) at Amazon.
Based on our experience testing HP printers, this one's an easy recommendation for home offices, as well as the back-to-school prep and dorm rooms. First, the bottled ink refills are much cheaper than traditional inkjet cartridges, saving you money - and it includes two years' of ink in the box. Second, the model features a built-in scanner and copier for work and study.
Smart Tank 5101 Wireless: was $259.99 now $169.89
Refillable ink tank system with 2 years of ink included in the box, print, scan, and copy functionality, and wireless connectivity over 2.4GHz Wi-Fi. Mobile printing supported through the HP Smart app.View Deal
Having tested all the best HP printers, the brand is one of our top-rated in the printing field (our hardware editor has been using his HP printer for almost ten years now).
Refillable ink tank printers have become the more sensible long-term option for anyone who prints regularly, since the upfront ink supply eliminates the recurring cartridge cost that makes budget inkjets expensive over time.
HP, including two years of ink in the box with the Smart Tank 5101, removes a lot of the math you'd otherwise have to do around break-even points.
It also covers the basics well: printing, scanning, and copying are all handled through the HP Smart app, and setup requires nothing beyond connecting to Wi-Fi.
For more top picks, we've tested the best ink tank printers and the best home printers, too.
Price Context & Historical ValueThis is the general sale price for the HP 5101, and it's been this price since at least July as part of a series of back-to-school deals. Back in December 2024, it briefly dropped to $140 for an all-time low, but I'd consider that relatively rare and I haven't seen that price since then.
A $90 discount off $259.99 comes out to about 35 percent off, one of the more substantial cuts in this roundup. Given that the ink already included would otherwise cost a meaningful amount on its own, the effective value here is higher than the sticker discount alone suggests.
Should you buy it?✅ Buy the HP Smart Tank 5101 if...
You print often enough that cartridge costs add up, you want to avoid replacing ink cartridges every few weeks, or you're comparing refillable-tank printers and want a known brand at a lower price.
❌ Skip the HP Smart Tank 5101 if...
Your router setup relies on 5GHz for reliable wireless printing, you need faster print speeds for high-volume jobs, or you want a unit we've already reviewed hands-on.
The Catch: What to know before you buyWe haven't tested this unit ourselves, so we're going off HP's general reputation and our testing experience with other Smart Tank printers rather than hands-on verification. It's also worth noting the wireless connection is 2.4GHz only, not dual-band, so if your router setup leans on 5GHz for print traffic, you'll want to confirm compatibility before buying.
The iVANKY FusionDock Ultra is a 26-port desktop dock designed specifically for Apple Silicon Macs and demanding professional workstations.
The company says its dock supports native quad 6K monitors, high-speed connectivity, and charging capabilities for professional users.
Unlike many universal docking stations, this model does not support Windows PCs, Intel Macs, or Chromebooks, limiting its audience considerably.
Built around high-end Apple Silicon workstationsThe dock uses a dual-chip architecture intended to keep multiple displays, storage devices, networking equipment, and peripherals operating simultaneously under sustained professional workloads.
It supports up to 80Gbps bidirectional bandwidth, while display-heavy configurations can reach 120Gbps through asymmetric data allocation across connected devices.
An included 80Gbps active cable is designed to support the connection speeds required by demanding storage and multi-display workflows during professional production sessions.
On compatible Apple Silicon systems, the dock can drive four external 6K displays without relying on DisplayLink or third-party display drivers.
However, the number of supported screens, resolutions, and refresh rates still depends on the specific Mac chip and connected monitors.
That native approach may appeal to creators who want additional displays without introducing another software layer into their macOS workstation.
Apple's hardware limitations are not bypassed, meaning buyers still need a compatible Mac capable of supporting their intended display configuration.
The dock also provides 10Gb Ethernet, giving users a high-speed wired connection for network storage, shared files, and other demanding workflows.
Its 26 ports include USB-C and USB-A connections, DisplayPort 2.1, HDMI 2.0, UHS-II card readers, and optical audio.
It features front and rear 3.5mm audio connections, allowing microphones, headphones, speakers, and other audio equipment to remain connected.
The magnetically articulated dual-cable connectors are designed to accommodate different Apple Silicon computers, including MacBook Pro, Mac mini, and Mac Studio.
Cooling and power for extended workloadsPower delivery is another major part of the dock, with up to 140W available for compatible MacBook Pro systems during demanding workloads.
A separate 45W USB-C power-delivery port can charge devices such as an iPad, iPhone, or another compatible accessory.
The cooling system combines passive heat dissipation with two adaptive fans that increase cooling activity as workloads become heavier.
iVANKY claims noise levels of 44 to 46 dBA at one centimeter under controlled conditions, with lower noise expected farther away.
That cooling design is intended to maintain stable connections and performance during extended sessions involving displays, storage, networking, and other peripherals.
At a promotional price of $649.99, reduced from an RRP of $749.99, the FusionDock Ultra enters an expensive docking market.
The company says the current price represents a 13% discount, although buyers should consider their actual requirements before paying for its extensive connectivity.
If you are not running an Apple Silicon Mac, this particular dock was never really built with you in mind.
Windows users, Intel Mac owners, and Chromebook owners are shut out entirely, regardless of how much they might want in.
Clint Smith's How the Word Is Passed explores how slavery is — and isn't — taught. And Above Ground includes poems to his children about what their ancestors endured and escaped. He spoke with Fresh Air in 2021 and 2023.
If you're a seasoned anime fan, you'll understand the unique sense of excitement that comes with binging a brand-new show — and it's exactly how I feel about Crunchyroll's breakout series, BLACK TORCH.
As of writing, we're now six episodes into the epic adventure, following high-schooler Jiro, who just also happens to be a ninja descendant who can talk to animals. He's rescued an injured black cat named Rago, who is actually a powerful mononoke, or demon spirit.
I'll let Crunchyroll explain the next part: "After Jiro is mortally wounded protecting Rago from hostile spirits, Rago fuses with him, creating a human-spirit hybrid. Jiro is then recruited by Japan's covert Bureau of Espionage into a special unit called 'Black Torch' to fight rogue mononoke."
It's a classic anime storytelling format with a new twist, and so far, its six episodes have successfully blended high-intensity action with a strong emotional core. Even the intro song feels a cut above the rest, and I'm not surprised that anime fans are lapping it up.
With six episodes left to go, what can we expect from the second half of BLACK TORCH? According to English dub cast AJ Beckles (Jiro) and Ryan Colt Levy (Ryosuke Shiba), you're best off expecting the unexpected.
'It's more of what we've had... but bigger'"Expect the unexpected," Beckles tells me. "It's more of what you've got, but bigger. As we reach the end of the season and these episodes start to come out, there more high-octane, serious moments. There's a lot to look forward to, for sure."
It's a vague response, but this doesn't surprise me. Even the above trailer showed almost no signs of what was to come in the actual series, which was a refreshing decision. Of course, we can expect the drama to follow the original manga, but this can't be assured as a given.
But has there been any pressure for either actor knowing that these episodes are airing to a pre-existing fanbase?
"I don't know if it's necessarily like a pressure... I like to think of it as a responsibility," Levy says. "No matter what, there are people out there that you are making this for, and where we may never get to have that face-to-face feedback, we have access. People will put so much passion into that.
"We approach this no matter what with the intention to make sure that people who love it feel seen, and feel like they are spending time with the characters that they want."
"We've been cast and It's a ginormous responsibility, because it could have gone to anybody," Beckles agrees. "So the fact that it went to us means that we have a duty to do a good job. We're not necessarily thinking about the end result. The focus should be on, 'Am I thinking as Jiro is thinking? Am I serving this character?' Because if I do so to the best of my ability, someone will resonate with that."
I've got no idea how I'm going to feel about the upcoming second half of BLACK TORCH, but hearing the sheer passion that the voice cast has for its craft fills me with hope — and the joy that my initial burst of anime excitement seems set to continue.
Younger Americans are becoming increasingly distrustful not only of AI, but also the executives and evangelists who promote the technology, a new study has claimed.
A CNBC/Generation Labs survey of 1,088 Americans between the ages of 18 and 34 found the vast majority saying they distrusted the leaders of major companies investing in AI, including the likes of Elon Musk, Sam Altman and Mark Zuckerberg.
The reasons behind this distrust were fairly clear to spot - with nearly half (45%) of respondents saying AI would have a negative impact on their careers, compared to just 10% who believed the technology will help them.
AI villainsThe study covered a range of wider concerns young people may have around the future, with worries around the economy and jobs among the biggest pressures, however the threat of AI was seemingly ever-present, with the technology increasingly influencing all areas of everyday life.
This expands to the figures becoming the poster children for AI - respondents were given nine key people in the AI industry and asked whether they trusted each of them to act responsibly on AI moving forward.
Perhaps unsurprisingly, every figure was marked negatively - with Palantir CEO Alex Karp scoring the worst, as 81% of respondents saying they do not trust him. Karp was followed by Palantir Chairman Peter Thiel (79%), Alphabet CEO Sundar Pichai (75%) and Anthropic CEO Dario Amodei (75%).
Other notable figures, including OpenAI CEO Sam Altman, Meta CEO Mark Zuckerberg, Nvidia CEO Jensen Huang, and SpaceX CEO Elon Musk all scored about the same 70% figure - but there was 'better' news for Microsoft CEO Satya Nadella, who recorded the "highest" score, with just 65% of respondents saying they don’t trust him.
Looking at technology's place in the wider world, 40% of Americans said they believed “the federal government” should establish rules for AI, with just over a third (36%) believing “an independent expert body” should do so - and just 8% said they think AI “shouldn’t be regulated.”
Keeping with the spirit of protests across the nation, nearly two-thirds (60%) of Americans believed data center construction “must be slowed,” with just 15% saying they wanted to be “speeding it up.”
Looking forward, the when asked about how they would rate the American economy, nearly 80% said they had a negative sentiment - and when asked about the future of the economy, 50% believed it “will get worse,” compared with just 22% who said it “will get better.”
Millions of drivers across the country are encountering speed cameras for the first time, or will soon. Some don't like it, but advocates say there's clear evidence that cameras make roads safer.
(Image credit: Joel Rose)
Just like all previous summers since the pandemic began, COVID-19 cases are ticking up again, even while other health threats make more headlines.
(Image credit: Justin Sullivan)
A new investigation has exposed a huge cluster of counterfeit VPN extensions that promise privacy while rerouting your traffic.
Socket's Threat Research Team said it identified 737 free VPN and proxy extensions published across at least 40 Chrome Web Store developer accounts. More than 27o of these impersonate 66 of the best VPN services and privacy brands, including big names like NordVPN and Proton VPN.
Between them, the extensions racked up more than 75,000 installs, mostly among Russian-speaking users hunting for ways to reach blocked services.
If you use Chrome and rely on a browser add-on to stay private, it's worth making sure the one you installed is a genuine product from a real provider rather than one of these lookalikes.
What the researchers foundSocket's team traced the whole network back to a single Russian VPN subscription business trading as Myxa VPN.
The researchers linked the extensions using a shared analytics account, clustered domain registrations, common hosting, and leaked Windows build paths pointing to one project folder. The free extensions appear to act as a funnel, nudging users toward a paid subscription.
Some of the paid promises were pure fiction. Socket says the premium tiers advertised servers in countries like Japan, Singapore, and Australia, but when it tested 200 premium hostnames across 40 domains, none returned an A record, meaning those servers simply did not exist.
Socket’s Threat Research Team found 737 Chrome VPN extensions in one campaign. 274 impersonated trusted brands, while 520 routed all browser traffic through shared infrastructure.The campaign’s paid plan listed 200 server hostnames. Not one resolved.https://t.co/Nwz02e3ncbAugust 11, 2026
The core trick is the same across nearly every extension. Once you press Connect, everything you browse gets pushed through a server the operator controls, with no per-site exceptions.
It adds no encryption, so it isn't doing the protective work a real VPN would. Worse, 104 extensions resolved their proxy addresses through Cloudflare or Google DNS-over-HTTPS and handed Chrome a raw IP, a technique that makes the operator's servers harder to block or spot.
Why fake VPN are dangerous, and how to stay safeSitting in the middle of your traffic gives the operator a clear view. Socket says the setup lets whoever runs the proxy observe the websites you visit, TLS SNI metadata, your source IP address, and any data sent over unencrypted HTTP. That means anything you type into a non-HTTPS page, including logins, could be exposed.
Socket doesn't know whether this data has actually been collected or misused, but the fact that it can be is the problem. It's the same pattern behind earlier warnings about fake VPN extensions in the Chrome Web Store and Google's own alerts about spyware posing as VPN apps.
Google has already acted, but not completely. By the time Socket collected its data, 221 of the 737 extensions had been removed, while 516 remained listed, so the threat hasn't fully gone away.
If you think you installed one, the advice from Socket is straightforward. Remove the extension immediately, then check that Chrome's proxy configuration has returned to normal and change any credentials you entered on non-HTTPS sites while it was active. You can review your proxy settings by heading to your browser settings and searching for "proxy."
Mangione has pleaded guilty to stalking charges in connection with the death of Brian Thompson, a health care executive. A separate judge will decide the future of Mangione's state trial.
(Image credit: Steven Hirsch)
Microsoft has recently fixed a vulnerability that allowed threat actors to bypass advanced security measures, disable antivirus software, and expose the target device to full system takeover.
All of this, it seems, could have been possible with a very simple script, and a single click from the victim’s side.
Luckily, the vulnerability was discovered by white hat hackers, reported to Microsoft and remedied before falling into the wrong hands.
Download more RAMDuring the 2026 USENIX Security Symposium, security researchers from the University of Birmingham and Durham University presented a discovery they called “Download more RAM”.
According to the researchers, some consumer memory chips (DDR4 and DDR5 DIMM) allowed software to alter the configuration reports it sends to the motherboard. In practice, it means that a threat actor could instruct the RAM chip to tell the computer it was bigger than it actually was, making the device “think” it has twice as much RAM memory as it actually has.
The researchers then established that this phantom extra memory can serve as an alias for real memory locations, granting them the ability to both read, and modify, memory allocations that should be under the processor’s, and Windows’ protection.
This window let them work around both Virtualization-based Security (VBS) and Hypervisor-Enforced Code Integrity (HVCI).
VBS, first introduced with Windows 10, is a security feature that uses hardware virtualization to isolate critical security functions from the OS, while HVCI uses virtualization to make sure only trusted and verified code can run in the Windows kernel.
The researchers also used the flaw to disable both antivirus and endpoint detection and response (EDR) software, re-introduce older, vulnerable drivers, compromise corporate systems under lockdown, and bypass kernel-level game anti-cheat protections.
The worst part is that this entire process can be chained together into a one-click script. In theory, if a victim is served this script as a file and they run it, they would trigger a chain of events that includes creating memory aliases, rebooting the computer, and disabling security protections.
"Our work exploits the fact that all processes share the same memory to bypass Windows' strongest security guarantees,” said Professor Tom Chothia, from the University of Birmingham. “Previous attacks of this kind needed a screwdriver and physical access to the machine. This one just needs a script. That changes who can carry it out and how far it can spread."
Who is vulnerable and how to stay safeThe attack surface is rather large, as well. The researchers analyzed the market and found three major manufacturers (Corsair, G.Skill, and ADATA) shipping at least one consumer memory product line in which the configuration chip was left entirely unprotected. Together, these vendors make up more than half (55%) of the high-performance consumer memory market and more than 70% of the gaming market (this doesn’t mean that 55% of the high-performance market is vulnerable - many devices are running other modules, too).
Modules from Crucial, Kingston and HyperX, and some G.Skill lines, were found to use partial write protection, but still enough to keep the device secure.
Before publishing their work, the researchers disclosed their findings to Microsoft, who quickly addressed it. The bug is now tracked as CVE-2026-23670, and is described on the National Vulnerability Database (NVD) as an “untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave” which “allows an authorized attacker to bypass a security feature locally.”
The bug was given a severity score of 5.7/10 (medium), and was fixed as part of the April 2026 Patch Tuesday cumulative update. Therefore, systems with Secure Boot running should be protected against this vulnerability.
Corsair added a feature to its iCue tools that lets users retroactively enable write protection on their memory modules. There is also a free tool called HWinfo with the same functionality, the researchers said, stressing that it mitigates the issue on non-Corsair models. Also, some motherboards offer a BIOS setting to block writes to memory configuration chips, which users can enable as an interim measure.
“The ‘Download More RAM’ attack demonstrates once more the importance of understanding systems, especially in terms of security guarantees. If a lower layer can become compromised, it puts the full system at risk,” said Dr Marius Muench, from the University of Birmingham.
“Windows makes a strong promise: that even an attacker with administrator rights can't touch the secure kernel. We found that promise rests on the assumption that your memory is telling the truth about itself - on a lot of the memory people actually buy, it doesn't have to."
The performance and value of Epson's EcoTank range has consistently impressed our senior printer editor during tests. And for photography, the stand-out model is the Epson EcoTank ET-8550, now $600 (was $750) at Amazon.
Earning 5 stars in our review, we rate this ink tank printer for two core reasons. First, it uses six Claria ET Premium inks, including Photo Black and Gray designed for high-quality photos, graphics, and creative projects. These delivered stunning results during our review. Secondly, it's capable of wide-format photo printing up to 13 x 19 inches.
Beyond that, you get the usual benefits of cheaper printing using bottled ink, a complete all-in-one unit, with scanning and copying alongside automatic duplex printing and wireless control from smartphones. For UK readers, the ET-8550 is down to £629 (was £780) at Amazon.
EcoTank ET-8550: was $749.99 now $599.99
This wide-format all-in-one combines six-color cartridge-free printing, 13 x 19-inch media support, scanning, copying, automatic duplex printing, speeds up to 16ppm, mobile controls, and refillable high-capacity ink tanks.
In the UK: now £629 (was £780)View Deal
Why we recommend itThe ET-8550 tackles one of the biggest drawbacks of printing your own photos: ink costs. Instead of repeatedly replacing small cartridges, its six refillable tanks use high-yield bottled ink, with Epson estimating around 4 cents of ink for each 4 x 6-inch photo.
Alongside Cyan, Magenta, and Yellow, Epson includes Black, Photo Black, and Gray inks, giving the ET-8550 a setup specifically intended for photography and creative work. The ET-8550 scans and copies, supports automatic duplex printing, and can handle a wide range of paper sizes.
In his glowing 5-star review, our expert Jim called it: "a premium A3 printer with superior six-ink photo print quality that’s also economical to run." He also said it "succeeds on all fronts. The ink tanks integrate perfectly in this refined, low-profile design and you have great ease of use thanks to the touchscreen. The broad selection of features and media compatibility is impressive, but more so is the print quality. Whether you’re printing monochrome or color photos, or plain word documents, the results are always excellent."
For more options, take a look at our rounds up of the best home printers, best ink tank printers and best Epson printers.
Price context & historical valueAmazon has reduced the Epson EcoTank Photo ET-8550 from $749.99 to $599.99, taking $150 off the regular price, or 20%. It has been $100 lower than that in the past, but even so this is still a solid deal.
Yes, it's still considerably more expensive than a basic home EcoTank, but the appeal here is getting wide-format 13 x 19-inch photo printing, a specialized six-color ink system, and refillable tanks in one machine.
Should you buy it?✅ Buy the Epson EcoTank Photo ET-8550 if...
You print a lot of photos, artwork, or other color-heavy projects at home and want to bring your ongoing ink costs down. Epson says a set of replacement bottles can produce up to 6,200 color pages, while the printer comes with enough ink for up to two years.
The ability to print up to 13 x 19 inches also makes it much more interesting for photographers and creators. You can produce everything from everyday documents and 4 x 6-inch photos to large prints.
❌ Skip the Epson EcoTank Photo ET-8550 if...
You primarily print text documents, shipping labels, or the occasional school or work assignment. You're paying a premium for the six-color photo system and wide-format capabilities, and a cheaper EcoTank would make more sense if you won't take advantage of them.
It's also a substantial printer, clocking in at 29.8 x 20.6 x 16.9 inches, so check your available desk space rather than just assuming it will fit.
The Catch: What to know before you buyThe ET-8550 makes the most financial sense if you're actually going to print regularly. Its low estimated per-photo ink cost can help offset the relatively high purchase price over time, but occasional printers may never produce enough photos to realize that advantage.
There's also no automatic document feeder listed here, which is worth knowing if you regularly scan or copy multi-page documents. This is primarily a photo and creative printer that can handle everyday office jobs, rather than an office-focused all-in-one.
Light spoilers follow for Lanterns episodes 1 to 7.
DC Studios probably didn't expect to have so much riding on Lanterns prior to its debut. But with Supergirl flopping at the box office and fans openly worrying about how much green they'd see in its Green Lantern TV show, DC and HBO executives have likely been sweating ahead of launch.
James Gunn, Peter Safran, Casey Bloys, and company can breathe a collective sigh of relief. While it stops short of being a TV masterpiece, Lanterns is the strongest DC Universe (DCU) entry yet — and, if future DC Studios movies and shows are this good, the cinematic franchise's brightest days may still lie ahead.
In brightest day, in blackest night...Meet John Stewart and Hal Jordan, everyone (Image credit: John Johnson/HBO Max)Spanning storylines in 2016 and 2026, Lanterns introduces us to Aaron Pierre's John Stewart and Kyle Chandler's Hal Jordan. As of 2016, Jordan has spent 30 years keeping vigil as Earth's first Green Lantern.
But his tenure is nearing its end. That's because Stewart is selected to be Jordan's replacement by the Guardians of the Universe, a group of omnipresent superpowered extraterrestrials that founded the intergalactic space cop agency known as the Green Lanterns Corps. The group asks a reluctant Jordan to take the new recruit under his wing.
Lanterns suggests that the DC Universe's brightest days still lie ahead
Two months into Stewart's training, a mysterious high school murder draws the pair to Rushville, Nebraska. What starts out as a local investigation, though, soon unspools into a far-reaching, mass cosmic conspiracy that impacts both plotlines.
Sheriff Kerry Kane (left) helps and hinders Stewart and Jordan's own murder investigation (Image credit: HBO)Naturally, the 2016 narrative directly influences events in 2026, with the latter particularly focusing on the consequences and repercussions of the duo's actions 10 years prior.
I'm not allowed to reveal how these dual timelines interact, or how the wider seasonal structure and time jump operate. What I can say, though, is that I was surprised by how the episodic format frames its dual storylines.
The 2026 storyline occasionally feels like Lanterns season 1.5
In fact, the 2026 storyline, which takes place in the DCU's present, occasionally feels like Lanterns season 1.5 — and that's my biggest critique. I haven't seen this season's eighth and final episode yet, so I still hold out hope that the finale will tie everything together seamlessly. Right now, though, the present-day plot feels like an overly drawn-out epilogue to the 2016 events and a foundational layer to the DC comic book show's already in-development second season.
Sometimes, Lanterns' tension-breaking jokes undermine its more serious moments (Image credit: John Johnson/HBO)None of this means Lanterns is predictable. Sure, given its source material, its superhero flair and 'new weird' sci-fi sensibilities are expected. At its core, though, it's a grounded, rural crime drama — albeit with cosmic stakes — that unapologetically wears its True Detective influences on its sleeve.
Narrative curveballs, then, are par for the course, even if they're hurled with varying degrees of success. Indeed, while I decoded one of the 2016 storyline's biggest mysteries early on, I was completely blindsided by a game-changing plot twist that redefines its dual timeline structure. No spoilers, but it's a bold storytelling pivot guaranteed to upset Green Lantern fanatics and ignite debate among DC purists.
Lanterns' game-changing plot twist is... guaranteed to upset Green Lantern fanatics
Given the deliberately slow-burn nature of its unfolding story threads, the DCU Chapter One show's action largely takes a backseat to character work and its police procedural tendencies. Small-scale skirmishes and chase sequences, rather than constant spectacle, are largely the name of the game.
When Lanterns decides to go full throttle, though, it does so with aplomb. Again, I'm not at liberty to talk extensively about specific episodic events, but one entry completely usurps the space cop murder-mystery vibes for emotionally heavy, big-budget set-pieces — and the show is all the better for it.
Passing of the torchDespite Hal Jordan's prominence in proceedings, Lanterns is very much John Stewart's story (Image credit: HBO)Ultimately, Lanterns wouldn't be as blindingly brilliant without its talented co-leads — and Pierre and Chandler are certainly a match made in heaven.
Aaron Pierre and Kyle Chandler are a match made in heaven
Barely five minutes into episode 1, their utterly absorbing buddy cop relationship bears fruit, too.
Balancing humor and gravity in equal measure, Stewart and Jordan are unmistakeably two sides of the same courageous coin from their very first interaction. It's an opening exchange that instantly validates their perfect casting, and highlights the pair's natural, magnetic rapport that only deepens as the series progresses.
Hal Jordan isn't going to give up his ring without a fight (Image credit: DC Studios/HBO Max)Their bond is only strengthened by their individual and collective complexities. Between Hal's unconventional mentorship, backstories that unexpectedly tie their pasts together, and a deep-seated yet unspoken mutual respect, the veiled hostility that punctuates their dynamic has an electrifying push-and-pull that you can't take your eyes off.
Stewart and Jordan's dynamic has an electrifying push-and-pull you can't take your eyes off
Green Lantern traditionalists might balk at certain character tweaks, such as the obsessive drive imbued in the DCU's Stewart.
For the most part, though, both actors capture the true essence of their characters — Pierre embodying the stoic, disciplined, and measured Stewart to a tee, while Chandler delivers a flawless portrayal of Jordan's brash, reckless, intentionally aggravating, and stubborn persona.
With these polar opposites both believing themselves uniquely worthy of wielding Earth's sole Green Lantern ring, their powder-keg rivalry heightens with every episode, which eventually erupts into a conflict that leaves their already fragile relationship irrevocably scarred. Suffice it to say, Lanterns' buddy cop bond is the best I've seen in a long, long time.
Are you afraid?Kelly Macdonald's Kerry is a crucial component of Lanterns' dual storylines (Image credit: John Johnson/HBO Max)Beyond its leads, Lanterns boasts an exceptionally strong ensemble. Kelly Macdonald is terrific as the HBO Max show's primary supporting character, Kerry Kane, Rushville's no-nonsense sheriff with a mysterious history of her own, who dovetails with Stewart and Chandler as part of a captivating triumvirate.
Beyond its leads, Lanterns boasts an exceptionally strong ensemble
Macdonald is far from the only standout. Garret Dillahunt is the subtle, creeping menace and intriguing ranch owner, Will Macon, whose wider antagonistic role isn't exactly subtle with regard to Lanterns' thematic exploration of white privilege, racial discrimination, and injustice.
Elsewhere, Poorna Jagannathan imbues the enigmatic Zoe with charm and complexity, and Laura Linney commands the screen as Lianna, aka one of the Guardians of the Universe.
Will Macon is a hard man to read for much of Lanterns' first season (Image credit: John Johnson/HBO Max)Furthermore, J. Alphonse Nicholson and Jasmine Cephas Jonas shine as Stewart's parents — primarily during a flashback-heavy, Stewart family-focused episode, but also now and then during the 2026 plot. Special credit to Nathan Fillion's guest-starring role as the wonderfully obnoxious Guy Gardner, too, whose fiery interactions with Stewart are, like the latter's fraught dynamic with Jordan, worth the entry fee.
If there's a downside, it's that a few talents are disappointingly underused — namely, Jason Ritter's Billy Macon and, given his weight in Green Lantern mythology, Ulrich Thomsen's Sinestro. With the latter, though, the trajectory heading into this season's finale suggests the show might still set things right.
The mysterious Zoe has a big role to play in DC Studios' latest TV venture (Image credit: John Johnson/HBO Max)Beyond the characters, Lanterns leans heavily into its source material's lore, thereby honoring DC's rich history rather than just skimming the best bits off the surface.
Refreshingly, its deep-cut fan-service doesn't come at the expense of accessibility. Indeed, with Stewart serving as the audience's entry point to the Green Lantern Corps and wider mythos surrounding this fictional institution, newcomers can easily grasp the cosmic mechanics without feeling lost.
Meanwhile, long-time fans have a treasure trove of Green Lantern Easter eggs and wider comic book references — a couple made it into Lanterns' initial teaser and Lanterns' first official trailer — to pore over. But regardless of your familiarity with this particular corner of the DC comic book universe, seeing Stewart and Jordan flex their creative muscles with the latter's power ring is pure joy, especially when they use it for the most basic tasks.
My verdictRecency bias aside, Lanterns is unequivocally the finest DC Studios production so far. Driven by an absorbing, twist-filled narrative, anchored by heavyweight performances, and extremely faithful to its literary roots, this is prestige television nearly firing on all cylinders.
And I say "nearly" because a few minor missteps, which I've already covered, mean it falls just shy of absolute perfection. Even so, Lanterns is a shining example of a comic book adaptation done right — and a much-needed beacon of hope for the DCU at the end of what's been its most challenging period to date.
Lanterns launches with a one-episode premiere on August 16/17, with new episodes airing weekly. Ahead of launch, find out everything we know so far about Lanterns.
Light spoilers follow for Lanterns episodes 1 to 7.
DC Studios probably didn't expect to have so much riding on Lanterns prior to its debut. But with Supergirl flopping at the box office and fans openly worrying about how much green they'd see in its Green Lantern TV show, DC and HBO executives have likely been sweating ahead of launch.
James Gunn, Peter Safran, Casey Bloys, and company can breathe a collective sigh of relief. While it stops short of being a TV masterpiece, Lanterns is the strongest DC Universe (DCU) entry yet — and, if future DC Studios movies and shows are this good, the cinematic franchise's brightest days may still lie ahead.
In brightest day, in blackest night...Meet John Stewart and Hal Jordan, everyone (Image credit: John Johnson/HBO Max)Spanning storylines in 2016 and 2026, Lanterns introduces us to Aaron Pierre's John Stewart and Kyle Chandler's Hal Jordan. As of 2016, Jordan has spent 30 years keeping vigil as Earth's first Green Lantern.
But his tenure is nearing its end. That's because Stewart is selected to be Jordan's replacement by the Guardians of the Universe, a group of omnipresent superpowered extraterrestrials that founded the intergalactic space cop agency known as the Green Lanterns Corps. The group asks a reluctant Jordan to take the new recruit under his wing.
Lanterns suggests that the DC Universe's brightest days still lie ahead
Two months into Stewart's training, a mysterious high school murder draws the pair to Rushville, Nebraska. What starts out as a local investigation, though, soon unspools into a far-reaching, mass cosmic conspiracy that impacts both plotlines.
Sheriff Kerry Kane (left) helps and hinders Stewart and Jordan's own murder investigation (Image credit: HBO)Naturally, the 2016 narrative directly influences events in 2026, with the latter particularly focusing on the consequences and repercussions of the duo's actions 10 years prior.
I'm not allowed to reveal how these dual timelines interact, or how the wider seasonal structure and time jump operate. What I can say, though, is that I was surprised by how the episodic format frames its dual storylines.
The 2026 storyline occasionally feels like Lanterns season 1.5
In fact, the 2026 storyline, which takes place in the DCU's present, occasionally feels like Lanterns season 1.5 — and that's my biggest critique. I haven't seen this season's eighth and final episode yet, so I still hold out hope that the finale will tie everything together seamlessly. Right now, though, the present-day plot feels like an overly drawn-out epilogue to the 2016 events and a foundational layer to the DC comic book show's already in-development second season.
Sometimes, Lanterns' tension-breaking jokes undermine its more serious moments (Image credit: John Johnson/HBO)None of this means Lanterns is predictable. Sure, given its source material, its superhero flair and 'new weird' sci-fi sensibilities are expected. At its core, though, it's a grounded, rural crime drama — albeit with cosmic stakes — that unapologetically wears its True Detective influences on its sleeve.
Narrative curveballs, then, are par for the course, even if they're hurled with varying degrees of success. Indeed, while I decoded one of the 2016 storyline's biggest mysteries early on, I was completely blindsided by a game-changing plot twist that redefines its dual timeline structure. No spoilers, but it's a bold storytelling pivot guaranteed to upset Green Lantern fanatics and ignite debate among DC purists.
Lanterns' game-changing plot twist is... guaranteed to upset Green Lantern fanatics
Given the deliberately slow-burn nature of its unfolding story threads, the DCU Chapter One show's action largely takes a backseat to character work and its police procedural tendencies. Small-scale skirmishes and chase sequences, rather than constant spectacle, are largely the name of the game.
When Lanterns decides to go full throttle, though, it does so with aplomb. Again, I'm not at liberty to talk extensively about specific episodic events, but one entry completely usurps the space cop murder-mystery vibes for emotionally heavy, big-budget set-pieces — and the show is all the better for it.
Passing of the torchDespite Hal Jordan's prominence in proceedings, Lanterns is very much John Stewart's story (Image credit: HBO)Ultimately, Lanterns wouldn't be as blindingly brilliant without its talented co-leads — and Pierre and Chandler are certainly a match made in heaven.
Aaron Pierre and Kyle Chandler are a match made in heaven
Barely five minutes into episode 1, their utterly absorbing buddy cop relationship bears fruit, too.
Balancing humor and gravity in equal measure, Stewart and Jordan are unmistakeably two sides of the same courageous coin from their very first interaction. It's an opening exchange that instantly validates their perfect casting, and highlights the pair's natural, magnetic rapport that only deepens as the series progresses.
Hal Jordan isn't going to give up his ring without a fight (Image credit: DC Studios/HBO Max)Their bond is only strengthened by their individual and collective complexities. Between Hal's unconventional mentorship, backstories that unexpectedly tie their pasts together, and a deep-seated yet unspoken mutual respect, the veiled hostility that punctuates their dynamic has an electrifying push-and-pull that you can't take your eyes off.
Stewart and Jordan's dynamic has an electrifying push-and-pull you can't take your eyes off
Green Lantern traditionalists might balk at certain character tweaks, such as the obsessive drive imbued in the DCU's Stewart.
For the most part, though, both actors capture the true essence of their characters — Pierre embodying the stoic, disciplined, and measured Stewart to a tee, while Chandler delivers a flawless portrayal of Jordan's brash, reckless, intentionally aggravating, and stubborn persona.
With these polar opposites both believing themselves uniquely worthy of wielding Earth's sole Green Lantern ring, their powder-keg rivalry heightens with every episode, which eventually erupts into a conflict that leaves their already fragile relationship irrevocably scarred. Suffice it to say, Lanterns' buddy cop bond is the best I've seen in a long, long time.
Are you afraid?Kelly Macdonald's Kerry is a crucial component of Lanterns' dual storylines (Image credit: John Johnson/HBO Max)Beyond its leads, Lanterns boasts an exceptionally strong ensemble. Kelly Macdonald is terrific as the HBO Max show's primary supporting character, Kerry Kane, Rushville's no-nonsense sheriff with a mysterious history of her own, who dovetails with Stewart and Chandler as part of a captivating triumvirate.
Beyond its leads, Lanterns boasts an exceptionally strong ensemble
Macdonald is far from the only standout. Garret Dillahunt is the subtle, creeping menace and intriguing ranch owner, Will Macon, whose wider antagonistic role isn't exactly subtle with regard to Lanterns' thematic exploration of white privilege, racial discrimination, and injustice.
Elsewhere, Poorna Jagannathan imbues the enigmatic Zoe with charm and complexity, and Laura Linney commands the screen as Lianna, aka one of the Guardians of the Universe.
Will Macon is a hard man to read for much of Lanterns' first season (Image credit: John Johnson/HBO Max)Furthermore, J. Alphonse Nicholson and Jasmine Cephas Jonas shine as Stewart's parents — primarily during a flashback-heavy, Stewart family-focused episode, but also now and then during the 2026 plot. Special credit to Nathan Fillion's guest-starring role as the wonderfully obnoxious Guy Gardner, too, whose fiery interactions with Stewart are, like the latter's fraught dynamic with Jordan, worth the entry fee.
If there's a downside, it's that a few talents are disappointingly underused — namely, Jason Ritter's Billy Macon and, given his weight in Green Lantern mythology, Ulrich Thomsen's Sinestro. With the latter, though, the trajectory heading into this season's finale suggests the show might still set things right.
The mysterious Zoe has a big role to play in DC Studios' latest TV venture (Image credit: John Johnson/HBO Max)Beyond the characters, Lanterns leans heavily into its source material's lore, thereby honoring DC's rich history rather than just skimming the best bits off the surface.
Refreshingly, its deep-cut fan-service doesn't come at the expense of accessibility. Indeed, with Stewart serving as the audience's entry point to the Green Lantern Corps and wider mythos surrounding this fictional institution, newcomers can easily grasp the cosmic mechanics without feeling lost.
Meanwhile, long-time fans have a treasure trove of Green Lantern Easter eggs and wider comic book references — a couple made it into Lanterns' initial teaser and Lanterns' first official trailer — to pore over. But regardless of your familiarity with this particular corner of the DC comic book universe, seeing Stewart and Jordan flex their creative muscles with the latter's power ring is pure joy, especially when they use it for the most basic tasks.
My verdictRecency bias aside, Lanterns is unequivocally the finest DC Studios production so far. Driven by an absorbing, twist-filled narrative, anchored by heavyweight performances, and extremely faithful to its literary roots, this is prestige television nearly firing on all cylinders.
And I say "nearly" because a few minor missteps, which I've already covered, mean it falls just shy of absolute perfection. Even so, Lanterns is a shining example of a comic book adaptation done right — and a much-needed beacon of hope for the DCU at the end of what's been its most challenging period to date.
Lanterns launches with a one-episode premiere on August 16/17, with new episodes airing weekly. Ahead of launch, find out everything we know so far about Lanterns.
This is a major steal if you're looking for a webcam for work from a trusted brand, with the Lenovo 310 webcam dropping to $30 (was $40) at Amazon.
It's a full HD webcam, but what I think makes this ideal for business use is the physical privacy shutter. Slide it over the lens and you're protected.
In my experience, Lenovo knows what makes a laptop camera usable, and that experience shows in a simple, well-built accessory that'll beat most built-in laptop webcams hands-down. I can't argue at this price.
310 FHD Webcam: was $39.99 now $29.99
1080p Full HD video at 30fps, two integrated microphones for clearer call audio, a sliding privacy shutter, and a 1.8m USB-A cable for plug-and-play setup on Windows or Mac. No drivers required, works out of the box with Teams, Zoom, Google Meet, and most conferencing software.View Deal
A lot of budget webcams in this price range come from brands with no history in computing hardware, which makes driver support and build quality a gamble. Lenovo has been building laptops, monitors, and accessories for decades, and the 310 FHD Webcam reflects that experience: it is a straightforward, no-fuss device rather than one trying to compete on gimmicks.
The dual integrated microphones are a genuine plus at this price. Many webcams in the sub-$30 bracket include a single mic or skip audio hardware altogether, pushing you toward a separate headset. Having two mics built in means clearer capture for calls without extra cables or a second device to manage.
The sliding privacy shutter is a small but meaningful inclusion, and one that some competitors still charge extra for or omit entirely. Being able to physically block the lens when the camera is not in use is worth having, especially for anyone working from a shared space.
Setup is genuinely plug-and-play. There are no drivers to install, and the 1.8m USB-A cable gives enough slack to position the camera on a monitor or external display without needing an extension. It is a webcam built for people who just want it to work.
Price Context & Historical ValueThis is the lowest price for the Lenovo 310 webcam that I've seen, matching the $29.99 it was back in March this year. I wouldn't expect it to drop any lower, although it has been sold at over $41 via Amazon before.
It is not a blowout deal, but $29.99 is a genuinely competitive price for a 1080p webcam with dual microphones and a privacy shutter from a recognizable brand, especially compared to similarly specced webcams from unknown sellers at a similar price.
Should you buy it?✅ Buy the Lenovo 310 FHD Webcam if...
You want a dependable 1080p webcam from an established PC brand, you rely on video calls and want built-in dual microphones instead of a separate headset, or you need a simple plug-and-play upgrade over a laptop's built-in camera.
❌ Skip the Lenovo 310 FHD Webcam if...
You stream or record content and need 4K or 60fps footage, you want autofocus or AI-driven framing, or you are after a webcam with a companion app for manual image adjustments.
The Catch: What to know before you buyThis is a 1080p/30fps webcam, not a 4K or high-frame-rate model, so it is not the right choice for streamers or content creators who need sharper footage or smoother motion. There is no autofocus, no AI-based framing or background effects, and no companion software for image tuning. For everyday video calls and meetings, none of that matters much, but it is worth knowing before you buy if you had something more advanced in mind.
The European Union is fundamentally changing how privacy tools are regulated, introducing an official security standard for VPN services on the market. Crafted under the sweeping Cyber Resilience Act (CRA), the new framework sets strict, auditable cybersecurity requirements for any virtual private network sold in Europe.
Until now, users looking to protect their digital footprint have largely had to rely on a provider's own marketing claims or third-party audits to verify encryption strength or no-logs VPN policies. Now, the European Telecommunications Standards Institute (ETSI) has stepped in to establish a unified legal baseline known as EN 304 620.
This comprehensive standard was not drafted in a vacuum. Major industry players, like Palo Alto Networks, Cisco, Airbus, and Google, alongside industry heavyweights NordVPN and Surfshark, have actively contributed to shaping these security parameters to ensure they are both operationally feasible and technically robust.
For everyday users, this legislation is a massive win. It ensures that any VPN software you download complies with mandatory European benchmarks for data confidentiality, authentication, and secure key management.
Miguel Fornes compares this shift to the arrival of seat belts and airbags in cars. "Before crash tests and seatbelt laws, drivers simply had to hope their car was safe. Once official safety standards existed, every car had to meet them. Surfshark is helping do the same thing for VPNs."
NordVPN – the best VPN overall
NordVPN came out on top in our 2026 round of VPN tests. We think it's the best VPN for most people. It’s easy to use, very secure, fast enough for gaming, and offers flawless streaming service unblocking. Subscriptions start at the equivalent of $3.49 per month.View Deal
Surfshark – the best cheap VPN
Surfshark is a fast, easy-to-use VPN that seriously beats the competition when it comes to subscription pricing. Its two-year Starter plan is the cheapest, but we think Surfshark One is the best value plan, starting at the equivalent of just $2.79 a month.View Deal
Draft standard EN 304 620 specifically targets VPN clients, servers, and gateways. It dictates exactly how these products must encapsulate and encrypt your traffic to protect data integrity as it travels across untrusted networks.
Whether a provider uses industry-standard AES-256 encryption, cutting-edge WireGuard protocols, or RAM-only VPN servers, they will need to demonstrate deterministic and testable security controls.
The standard is a vital pillar of the broader Cyber Resilience Act, which by the end of 2027, will fully require manufacturers of digital products to meet essential cybersecurity requirements.
New rules also mandate rapid incident reporting for actively exploited vulnerabilities, keeping providers strictly accountable if their infrastructure is ever compromised.
For anyone wondering, "Are VPNs safe?" this EU-wide standardization effectively guarantees a much higher baseline of protection, forcing potentially shady free VPN apps to either step up their security engineering or face removal from the European market entirely.
Not just VPNs: A wider net for software securityVPNs aren't the only software getting a major regulatory upgrade. Alongside the VPN guidelines, ETSI recently launched the approval process for 17 European standards supporting the CRA.
The expanded list covers everyday digital essentials, including password managers, antivirus software, smart home assistants, connected toys, and wearables.
As these proposals move through public enquiry and final approvals, the end result is clear: European consumers are about to benefit from a much safer, more resilient digital ecosystem by default.
Insomniac Games has finally explained why the X-Men don't exist in Marvel's Wolverine, and it's all about telling a story where mutants aren't safe.
In the upcoming superhero game, Logan, aka Wolverine, is a former member of the mutant black ops unit, Team X, which also includes Sabretooth and Mystique, meaning the X-Men haven't been established in this world.
"So Team X is canonical. It is Logan's first team in his history," narrative director Walt Williams said in an interview with IGN. "It was a black ops team from the '70s made up of wetworks mutant workers. So in telling Wolverine's story, we wanted to bring it back to the beginning of where his story really began in that long string of teams. Because as we know, he's been a member of many teams by this point in his 50-plus year history.
"But really what we were looking to do is, because superheroes have become so mainstream at this point in just pop culture and everything through TV shows, comics, movies, and everything, that even especially with our own Spider-Man games, these are characters with superpowers that a lot of the world has accepted, that they are celebrated. They have parades, they are honored and stuff. But mutants at the core are outsiders, even within the Marvel universe. And we have not really had that aspect of them be brought out a lot lately in the stories that we get in the bigger mainstream."
According to Williams, the studio wanted to tell a story where mutants are still outsiders and don't have a safe place to go, such as the X-Mansion. Logan's point of view, he explained, is the "perfect" way to get that across to the player.
"We wanted to bring players back to that mindset of that these are characters who exist on the outside," he continued. "They are not superheroes. They don't have a safe space. They are people who are living in shadow. They are people who are hiding their powers from the world because they are afraid of what would happen if people would discover them.
"And so if we had started this story with the X-Men in existence, there would already be that aspect of a safe place for them. And we wanted to remind people that existence for a mutant is not safe. It's hard. It's scary. And entering that world through Logan, it really felt like the best POV possible."
Williams goes on to describe Logan as an "incredibly complex, layered character that has so much potential to write," but he's also "an outsider's outsider," even among other mutants.
"He was that perfect POV for us to be able to enter into that mutant world and begin to understand just how much mutants do not feel as if they belong anywhere," he said.
Marvel's Wolverine launches exclusively on PS5 on September 16, and its Performance Mode will run at 60 frames-per-second (fps) with ray tracing enabled on the base PlayStation 5.
Hackers are targeting businesses and individuals running Shopify stores with a highly sophisticated fake refund scam, experts have warned.
Security researchers at Huntress outlined how the fake refund scam works: first, a victim gets a notification that they received a refund. It could be for a returned iPhone, or a canceled service or order. The “refund” can be anywhere from a few hundred, to a few thousand dollars. Soon after, the scammers call (or mail) the victim, say they work at the company that gave the erroneous refund, and convince the victim to return the funds.
If the victim complies, they are actually sending their own money to the victims, since the “refund” part never happened.
Abusing Shopify's infrastructureThere are a couple of ways to pull this attack off: sometimes the scammers really make the initial transaction, but are able to cancel it and return the funds; in other scenarios, they create spoofed pages showing the transactions, tricking those slightly more gullible.
In most cases, fake refund scams can be spotted relatively easily, which is why they are not that popular nowadays. However, this new campaign comes with a sinister twist that will make even hardened veterans wince.
Huntress’ report notes the attackers start by creating a Shopify store of their own (or use a compromised one). The one the researchers observed was called “My Store” and was later deleted before it could be further scrutinized. Then, the attackers make a fake order themselves, setting their targets as the recipients using their phone numbers, or email addresses.
This type of information isn’t that difficult to come by these days. There are hundreds of email and phone number databases leaked on the dark web, which can be picked up for free (or for a handful of dollars). When they submit the purchase order, a notification appears in the victim’s Shop apps.
Yes, that’s right. In the Shopify app itself. Coming through Shopify infrastructure. As such, it can easily be confused for an authentic notification. It is even worse for users that enabled push notifications on their mobile phones, since they’ll see a notification with the Shopify logo, next to all the other notifications on their phone.
But the attackers still need to pull off the hardest part - getting the victim to “return” the money. In this case, instead of calling or messaging them, they leave their contact information in the shipping address, hoping victims would panic and reach out themselves.
In one shared example, the shipping address was listed as: Owen Nolan “2856 If You Didnt Place This Order Call Us at 1_888_690_3420-”, Albany NY United States 1_888_690_3420.”
For those treading carefully through the internet’s wastelands, the message included in the shipping address is an immediate red flag. Grammar mistakes, all letters capitalized, and a phone number completely out of place should be quite an obvious sign of an attempted fraud. However, since these kinds of scams bet on people being fast, reckless, overworked, and afraid, it might just work.
Huntress did not say if the scam made any meaningful impact among the Shopify’s community, or if it targeted a specific subgroup of users.
Defending against fake refund scamsTo protect against such attacks, the researchers advise users never interact with phone numbers, email addresses, or links contained in an order that aren’t recognizable. They also advise users concerned about the security of their SHop account or personal data to contact support, and stress users should check their bank accounts to confirm whether they were actually changed. If they weren’t, they can report the order as “Not my order” in the shop app.
Finally, when purchasing from a store on Shop in general, users should check the store and its product reviews to learn about other customers’ experiences. If users are concerned that a product or store could be fake, it can easily be reported. Many of the shops in this scam were brand-new, with some using a "coming soon" description, as well.