Technology

Though publicly denied by Elon Musk, a new AI device from SpaceX wouldn't be very surprising.

The current president chatted with a life-sized AI version of the 26th US president at the new Theodore Roosevelt presidential library.

Here are hints and the answers for the NYT Connections: Sports Edition puzzle for July 3, No. 648.

ChatGPT-maker OpenAI is reportedly in discussions with the White House over a government financing deal. It may not happen.

The company apparently expects to sell a lot of folding iPhones.

Two of the biggest US carriers are battling for your business. We run down all the specs and features of their plans.

Here are some hints and the answers for the NYT Connections puzzle for July 3 No. 1,118.

Here are hints and answers for the NYT Strands puzzle for July 3 No. 852.

Here are hints and the answer for today's Wordle for July 3, No. 1,840.

Utz Quality Foods voluntarily recalled select varieties of potato chips due to potential salmonella contamination in the seasoning powder.

Google owes 4.1 billion euro ($4.7 billion) for anticompetitive practices involving Android, rules Europe's top court.

No matter what you're looking for in a 3D printer, we've found the best around in 2026.

• A password-spraying attack successfully breached Microsoft 365 accounts
• The hackers abused improperly configured conditional access policies to bypass MFA
• Many organizations targeted had no MFA implemented

Hackers have used previously leaked credentials to target Microsoft 365 accounts in a password-spraying attack that resulted in over 81 million login attempts during a two-week period.

The attackers then abused the improperly implemented Conditional Access policies within the Resource Owner Password Credentials (ROPC) OAuth mechanism using Azure command-line interface (CLI), allowing the hackers to bypass authentication altogether when a matching username and password was discovered.

Cybersecurity company Huntress observed the attack campaign as it targeted customers and noted that 78 Microsoft accounts across 64 organizations were compromised between June 12 and 26 2026.

Hackers access 365 accounts without authentication

The success of the attack ultimately came down to how well organizations had implemented Conditional Access policies relating to multi-factor authentication.

“Many of the compromised businesses had implemented multi-factor authentication (MFA) via a Conditional Access Policy (CAP), but the MFA was not configured to cover this specific flow that attackers used,” Huntress explained, referring to the exploitation of ROPC.

“ROPC is considered problematic for several reasons, but one of those reasons is that it doesn't offer support for modern auth flows like MFA or SSO. That means, as we saw in this campaign, ROPC sends the password straight to the /token endpoint with no interactive MFA prompt.”

Several of the organizations that were breached did not enforce an MFA policy at all, with others only applying MFA for specific user groups such as administrators. In other cases, a login attempt only required MFA when the traffic was coming from an untrusted location, meaning that MFA was not enforced if the connection was coming from a trusted IP address. Additionally, some organizations had only enforced MFA in report-only mode, meaning that the MFA policies were never actually applied.

In order to protect against attacks of this kind of attack, Huntress recommended the following mitigations:

• Organizations should implement MFA for All Users, All Cloud Apps, and All Client App types
• The Azure CLI application should be restricted from use by non-admin users
• Response to the attack should be made on credential validity, rather than spray volume

Via BleepingComputer

Electric scooters are a simple and efficient way to get where you need to go.

A recent survey suggests that using apps and artificial intelligence for health advice may be linked to vaccine distrust.

• Microsoft posted an ad promoting Copilot on social media
• It said that Copilot is the "button you can press to fix everything"
• This has elicited quite the outpouring of rage from some folks, and it's not a wise promo given the prevailing climate around AI and Windows 11

Microsoft is catching some flak once again over the topic of AI in Windows 11, following what might be regarded as an overzealous piece of marketing.

Windows Latest noticed that Microsoft's marketing department posted an image across its social media (Facebook, Instagram, and X) which promoted the dedicated Copilot button and the AI assistant it summons.

The text featured in the pic was: "Them: There's no button you can press to fix everything," followed by a reply as if in a conversation that read: "Me: Wanna bet?"

Predictably this has stirred up some controversy, with responses to Microsoft's little ad that range from accusing Copilot of being "AI slop" (or "Microslop") through to comments along the lines of "no one wants this" and similar negativity.

(Image credit: Windows Latest / Microsoft)Undermining the fix Windows 11 effort

This is a particularly poorly timed piece of PR, given that, as Windows Latest observes, Microsoft is finally bringing in the ability to change the Copilot key back to function as Right Control. This is the key that the Copilot button replaced on 'AI PCs' (laptops), but as some people have said, Right Control is crucial to their workflow (and has accessibility ramifications for one-handed keyboard use).

With that change coming to Windows 11 later this year — an effective softening of Microsoft's initial stance that you should have the Copilot key and like it — this marketing snippet feels even more badly judged.

What's worse here for me is the exaggeration of the usefulness of the Copilot key. The AI can "fix everything" can it? It's a frankly ridiculous statement to make, and yes, I know that's not exactly uncommon in advertising, but you've got to bear in mind your target audience here and the context.

AI in Windows 11 has triggered a lot of bad feeling in the user base since last year, and indeed Microsoft's blinkered focus on pushing AI was one of the reasons that people were up in arms about fixing the OS rather than adding Copilot trimmings. Or in other words, the big fix Windows 11 campaign — which is the focus of this entire year for Microsoft — was partly the result of all the anti-AI feeling.

So, erm, let's market around the Copilot key being this amazing solve-all feature, shall we? Sounds like a great plan, everyone. Full steam ahead! Let's talk about how great it would be to add more AI into Notepad while we're at it, yeah? (Apologies, I remapped my Copilot key to be a 'Sarcasm' key and it appears to be jammed down right now).

Microsoft also says the Copilot key is a button with "main character energy" in this advert, the problem being that if AI in Windows 11 was a movie, it's been a box office turkey for the software giant so far. Microsoft's hope is that AI agents in Windows 11 will turn things around, but it remains to be seen how that'll pan out.

Meantime, while Microsoft is trying to generate positivity and good vibes around Windows 11 with all its (very commendable) work to fix the OS, it'd be better for the software engineers and designers in the thick of it not to have those efforts undermined by the marketing crew wheeling out unintentional ragebait like this Copilot button nonsense.

Now, I'm not saying that Microsoft's PR team can never mention AI, of course, but this particular snippet on social media is a perfect example of how not to do it in the current Windows 11 climate.

Regulated industries are entering a turning point that many enterprise leaders have yet to fully grasp.

Agentic AI tools capable of executing multi-step tasks with minimal human intervention, are now commonly embedded in audit and finance operations, automating testing, documentation, risk assessment, and reporting.

But many organizations are still behind updating the governance infrastructure required to make those gains sustainable.

Most organizations ask what AI can do, but neglect to evaluate whether they have operating models, governance frameworks, and human oversight capacity in place to control what AI does.

In regulated environments, that gap is where exposure compounds quickly.

Three Gaps Compounding at Once

Validating AI output requires a different skill set than producing it. Traditional audit training doesn’t develop that capability, and most firms have yet to redesign programs to account for that lack of knowledge.

Junior staff are nominally in charge of reviewing AI-generated work they don’t fully understand. In regulated environments, this creates easy-to-miss opportunities for exposure.

Audit workflows were designed around human pacing and judgment. Agentic AI moves sequentially and at speed, silently resolving ambiguity rather than surfacing it.

Layering AI tools onto processes built for human practitioners means unclear handoffs, undefined escalation paths, and audit trails that fail to document decision rationale in ways that satisfy regulators.

When stewardship is a title rather than a function, organizations produce governance documentation that exists on paper, not in practice.

Premature AI deployment can still look like a success even long after the foundation started to erode. Adoption metrics show usage. Cycle times improve.

These ostensibly positive outcomes don’t reveal whether employees can meaningfully evaluate what the system produces, whether workflows have been redesigned for how AI operates, or whether governance is anywhere close to complete.

For enterprise leaders in regulated industries, the critical question is not whether the AI is working, but whether it surfaces issues early enough for teams to intervene effectively.

In many organizations, AI implementation is also outpacing operational alignment. Risk, compliance, finance, and technology teams often operate with different assumptions about how agentic systems are being used and where accountability resides.

Without shared oversight across those functions, governance gaps become harder to identify before they create operational or regulatory consequences.

What Closing the Gap Actually Looks Like

The organizations seeing sustainable results share a key characteristic: they build governance infrastructure before scaling use cases. In practice, that means establishing a centralized governance function with both business and technical representation.

Successful AI governance in regulated environments requires joining stakeholders who understand operational stakes and regulatory requirements at the same table, with the authority to act on what they find.

Domain stewards need real authority, with clear accountability for model performance, explicit escalation paths, and organizational backing to act accordingly. Defined rules of engagement are what separates a stewardship role from a title implying nominal ownership on an org chart. This structure must be built before deployment, not retrofitted after an incident.

Starting narrow is the right instinct. Financial close, reconciliations, and anomaly detection are good initial use cases due to clean inputs, measurable outputs, and the presence of a human reviewer that evaluates what the system produced.

Data flows need to be integrated across systems before models go into production. Scaling AI into fragmented processes doesn’t fix fragmentation—it accelerates it. Selecting a technology capable of bringing data integrity to the forefront is key for establishing sustained governance practices.

Workforce readiness belongs on the governance roadmap alongside technical deployment. Junior staff need structured development in how to evaluate AI output including when to trust it, when to push back, and when to escalate. That capability doesn’t emerge simply from exposure to AI tools. The firms getting this right are treating this part of the process as risk control.

Another challenge is that many governance models remain reactive rather than adaptive. Regulatory expectations surrounding AI are evolving faster than most enterprise oversight structures, leaving organizations vulnerable to compliance gaps that may not become visible until after deployment.

Companies that treat governance as an ongoing operational discipline, rather than a one-time implementation exercise, will be better positioned as both technology capabilities and regulatory scrutiny continue to advance.

Governance Is the Foundation

Agentic AI will continue expanding into audit and finance regardless of whether governance infrastructure is in place. The competitive pressure is too strong, and the case for efficiency is too compelling for adoption to slow.

The question for enterprise leaders isn’t whether to deploy AI—it's whether they’re building the operational foundation to deploy it responsibly.

Accountability in regulated industries does not transfer to the algorithm. It stays with the humans who chose to deploy it, and with the organizations that decided they were ready when the evidence said otherwise.

The leaders who are prepared have already answered this question: if something goes wrong, do we know exactly where judgment ended and automation began?

Manage employees with the best HR software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Apple Hide My Email can reveal a user's authentic email address
• The bug puts users at risk of identification, experts warned
• It has been unpatched for over a year

A bug in Apple’s ‘Hide My Email’ feature allows for those with knowledge of the vulnerability to identify the real email address hidden behind the anonymous email address.

The bug was discovered by EasyOptOuts co-founder, Tyler Murphy, who shared the exploit with 404 Media after notifying Apple multiple times that the feature could be actively exploited.

“We reported the issue and replication instructions to Apple over a year ago. We don't know why it hasn't been fixed, but we don't feel comfortable waiting any longer,” Murphy said.

Hide My Email can be actively exploited

As the bug still hasn’t been patched, the details of how the exploit works have not been shared.

Apple’s Hide My Email feature was designed to anonymize email addresses, helping to prevent a user’s real email address from being leaked in a data breach, or to prevent a user’s email address from being linked to them personally in a way that could reveal their identity.

There lies the crux of the issue. By being able to identify the real email address by exploiting the bug, a malicious actor could uncover the real identity of the anonymized email.

“Free, publicly accessible people-search sites make it easy to link an email address to other personal details, so people relying on Hide My Email for safety may be at risk,” Murphy said. “We don't know the full scope of the issue, but in our limited tests with volunteers, 100% of Hide My Email addresses were exploitable.”

Users concerned about being identified via people-search sites can use a data removal service to have their data scrubbed from these sites, but the process can take a few days.

The issue was first reported to Apply by Murphy in June 2025, with Apple replying a month later that it was looking into the cause of the issue. Earlier this year, in March, Apple said that it had “addressed the reported issue in a recent system change,” but Murphy found that the bug could still be exploited.

Again, Murphy notified Apple, who replied in May 2026, stating, “We are still investigating this issue. To avoid placing our customers at risk, we would appreciate you not disclosing this information until our investigation is complete. We appreciate your assistance in helping us to maintain and improve the security of our products."

Later in the same month, Apply said a fix was “expected in the coming weeks."

Porkbun is an American-based domain registrar that’s been around since 2015. Underneath its quirky pig-based exterior, it promises to be one of the cheapest options around. It sells most domains at cost price of wholesale pricing, plus ICANN fees, and credit card fees, without making a chunky sum out of hidden fees. Besides domains, it also offers web hosting, and email hosting, but I’m focusing on its domain services here.

I’ve been buying domain names for the past 25 years and have been reviewing services for over a decade. This Porkbun review is based on my hands-on testing, consulting official documentation and support, as well as checking verified user reviews for additional feedback.

For more options, why not look through our list of the best domain registration services.

Porkbun: My experience

(Image credit: Porkbun)

Signing up to a domain via Porkbun only took moments. On the main page, I entered the domain name I was interested in purchasing and was quickly presented with a list of all the domain suffixes available right now. Once choosing to purchase one, there’s an option to add hosting and also to ‘upsell me’. Click the latter button and Porkbun suggests some relevant domain names you might also want to add on.

A minute later and you’re all set. Again, there’s a bit more upselling with the option of adding a site builder or WordPress hosting, but it’s not too intrusive. The domain management page is right there and it's simple to browse through your domains. As with most domain registrations, it takes a minute or two to be registered and it was pretty quick with Porkbun. The simple management page has everything you need and I liked the process. Just make sure to toggle auto-renew off unless it’s essential for you.

Porkbun: Features

(Image credit: Porkbun)

Porkbun keeps things simple so when it comes to features, there’s no filler here. Buying a domain name also brings the offer of web hosting but that’s about as complicated as it gets.

On the domain registration page, you’re given WHOIS privacy as standard. You can toggle the domain lock on or off, and there’s an auto-renew toggle as well. If you’re planning on selling your domain name at some point, you can also quickly add to the marketplace to auction it off to someone. CSV file downloads of all your domain name details, including auth codes, can be quickly obtained from the management page too.

Wrapping things up well, it’s easy to configure your DNS records for many popular services with a couple of clicks of a button. These include Google Workspace, Squarespace, Shopify, and Bluesky, amongst other services.

Porkbun: User experience

Porkbun is very simple to use even if it isn’t exactly attractive to look at. There’s no conventional onboarding process like you’d get with one of the more user-friendly (and more expensive) services, but its domain management page is reasonably straightforward to figure out, even if you’re not a particularly advanced user.

Crucially, a series of tooltips and one line explainers go a long way to ensuring that you won’t break anything. A few toggles are also available and clearly laid out. What it lacks in looks, it makes up for with easily accessible settings.

Porkbun: Customer support

Porkbun offers a good range of support options. It has a knowledge base which should solve most simple queries. There’s also an AI chat bot which answers a lot of questions before transferring you to a person if needed. Refreshingly, you can also click a button to go straight to talking to a real person if you’d prefer.

There’s also phone support although that isn’t 24/7. It’s available between 9am and 5pm PST. Otherwise, email support is 24/7 and human chat support is a somewhat vague ‘hours vary’ although I found I always got a response.

Porkbun: Pricing

Domain

Price from

.xyz

$1

.com

$11.08

.eu

$5.46

.net

$12.52

.org

$7.98

There’s seemingly a domain name suffix for every occasion here. Porkbun’s cheapest are its .xyz domains which cost $1 to register for the first year. .com domains are available from $11.08 while .net starts at $12.52.

As with any domain service, your mileage will vary depending on the domain name you have in mind, but those are good starting prices. Type in the name you have in mind and you’re given a vast list of available options along with a renewal price for the future.

Porkbun: Specs

Spec

Details

Lowest price from

$1 (.xyz)

Highest price from

$2.575 (.sexy)

Search tools

Standard search, AI, bulk, marketplace, auction

Other services

Web hosting, WordPress hosting, email hosting

Porkbun: Should I buy?

Attribute

Notes

Score

Features

Porkbun has all the essentials you need.

4.5/5

User experience

A little simplistic and basic, but still mostly easy to figure out.

4/5

Value

Excellent value with some very cheap domains.

4.5/5

Buy it if...

• You want a no-frills domain service. Porkbun skips fancy visuals and focuses on providing domain names very cheaply and clutter-free.
• You want the best value. Some kind of domain name for $1? Porkbun makes it very tempting to bulk buy in the best way.
• You want quick access to many domains. Porkbun dishes out a huge list of available domain names making it oh so easy to click on multiple domains to buy.

Don't buy it if...

• You need hand holding. If you want guidance through setting up a domain, Porkbun isn’t the service for you. It’s not complicated but the onboarding could be a little more welcoming.
• You want web hosting from the same place. Porkbun’s web hosting isn’t bad but there are better options if you want an all-in-one service.
• You want a stylish experience. Porkbun is very basic looking and that can be a little off-putting compared to some competitors.

Porkbun: The competition

• Namecheap: For cheap domain names, Namecheap lives up to its name. Its dashboard is a little more appealing than Porkbun but renewals can be pricier.
• GoDaddy: Want good hosting as well as a domain? GoDaddy is the place to go. Just be aware of its upselling tactics.
• Dynadot: Dynadot has fairly cheap domains, limited upselling, and a good approach to domain registration. It misses a few TLDs out but for most people, it’s great.

How I tested Porkbun

• Set up an account and bought two domain names
• Tested the domain management features
• Evaluated the price of domains compared to competitors

I set up an account with Porkbun before searching for new domain names then buying two. I went through the sign up process to purchase the domain, before going into the domain management tools to make adjustments. This included looking at nameservers, how to change DNS records, and how to turn off auto renew and other features.

• Warner Bros will adapt Trevor Henderson's Siren Head for the big screen
• Weapons director Zach Cregger and Whalefall's  Brian Duffield are working on the script
• This news comes after A24's Backrooms became the second highest grossing horror movie of 2026

We're seeing a trend of Creepypasta adaptations coming back, and Siren Head is the next internet horror phenomenon to be adapted for the big screen.

Creepypasta-based movies have varied in quality over the years, whether it's the terrible Slender Man or the critically acclaimed Backrooms, and it seems we're about to get even more new horror movies based on these terrifying online tales.

When it comes to Siren Head, it already has a strong team behind it. Trevor Henderson's original creation has been picked up by Warner Bros., with Weapons' Zach Cregger and Whalefall's Brian Duffield working on the script, according to reports from Deadline.

Siren Head has all the ingredients to be a successful horror movie, but it's, of course, too early to say if it will ever reach the heights of Backrooms, which became the second highest-grossing horror movie of 2026 with box office takings of $331 million.

The question is, will a Siren Head movie work as a feature length? At the moment, I'm not entirely convinced.

Siren Head's short film was good, but I'm not sure a feature length movie is necessary

Sometimes, less is more. That's how I feel about Siren Head, as the creepy cryptid is well suited to short-form entertainment like YouTube videos and quick horror games. Will it have the same impact with a longer runtime?

Creepypasta stories are often quite simple, and Siren Head is no exception. The creature is known for camouflaging with its surroundings before attacking anyone in its vicinity, with the Siren Head wiki page explaining it is responsible for "a large number of disappearances across suburbia and rural environments".

Scary as it is, I'm worried there's not enough substance to make this work, and we may get bored with Siren Head's modus operandi of chasing and killing anyone in its path, seemingly for no reason, before doing it all over again.

Backrooms, on the other hand, is more of a slow burn and requires deep exploration to uncover the true horror, which is why I think it has done exceptionally well theatrically. There are lots of areas, lore, and monsters to explore, and the Backrooms fandom is full of fan-created levels featuring new threats and ideas.

Like the Backrooms, the storytelling possibilities seem infinite. It is a vast, terrifying space with weird set design and that signature dark ambient sound design to keep us on edge. Any character can set foot in it, often no-clipping out of reality unexpectedly. It's ripe for multiple adaptations and interpretations, whereas Siren Head may not live up to that.

But, as I said, there is a strong team behind it. We may well be headed into a new era of very effective Creepypasta adaptations, and I'm excited if that's true.

I'll be following Siren Head closely, and I hope it'll be a thrilling feature-length adaptation after all.