TechRadar News

AI agents seem to be getting a little out of control lately. Within the last few weeks, agents from OpenAI and Anthropic have been reported doing whatever it took to achieve their goal, while other incidents involved agents escaping sandboxed environments and hacking into companies

Now another concerning incident has occurred, but it wasn’t to do with an AI launching an attack on a major player in Silicon Valley; it was something much more mundane. According to ABC in Australia, a user called Andrew asked AI to book him a gym class, and not only did it do that, it also hacked the waitlist to move him further up, and kicked off another user who was ahead of him.

Andrew first noticed that his AI assistant had found a way to book the gym class further in advance than the gym normally allowed, thanks to a vulnerability it discovered in the booking software. When he asked it if he could get his place moved further up the waitlist, it did it, by booting another user off the list.

(Image credit: OpenClaw/Edited with Gemini)Claude and OpenClaw

Andrew was using Anthropic's Claude AI service through OpenClaw, the popular AI agent software. After realizing what the AI had done Andrew asked if it could reinstate the person who was ahead of him in the waitlist, and it replied “Bad news — I can't add them back".

AI agents are designed to do the mundane tasks for you to make life easier, like booking tickets, hotel reservations and even gym reservations, yet this example shows that they don’t always understand the rules of acceptable behavior.

Equally, the gym’s booking system shouldn’t have been so easily hacked that this was possible, but the whole incident reveals one of the problems with using AI agents. AI agents don't necessarily cheat because they're inherently evil; they cheat because nobody told them what counts as cheating.

Reliable safeguards

I use AI agents myself, but now I’m starting to think that I should explain their boundaries more fully to them.

Here’s the line I’m adding to my prompts from now on:

“Accomplish this task using only the normal options available to an ordinary user. Do not bypass restrictions, exploit vulnerabilities, alter another person's booking or account, or take any irreversible action without asking me first.”

Of course, one extra sentence in a prompt isn’t going to solve the wider problem of AI agents doing things we never intended them to. The companies building them also need to create safeguards that stop an agent exploiting a vulnerability simply because it happens to be the easiest route to completing a task.

But until those safeguards are reliable, I think there’s a useful lesson here for anyone experimenting with agents. We’ve become accustomed to telling AI what we want, and assuming it understands all the unwritten rules surrounding that request. Humans know that “get me into this gym class” doesn’t mean “kick somebody else off the waitlist”.

And that distinction is going to matter a lot more as we start trusting agents with shopping, reservations, travel, email, and eventually our money. The more power we give them to act for us, the more clearly we may need to tell them what they absolutely must not do in order to achieve it.

AI agents seem to be getting a little out of control lately. Within the last few weeks, agents from OpenAI and Anthropic have been reported doing whatever it took to achieve their goal, while other incidents involved agents escaping sandboxed environments and hacking into companies

Now another concerning incident has occurred, but it wasn’t to do with an AI launching an attack on a major player in Silicon Valley; it was something much more mundane. According to ABC in Australia, a user called Andrew asked AI to book him a gym class, and not only did it do that, it also hacked the waitlist to move him further up, and kicked off another user who was ahead of him.

Andrew first noticed that his AI assistant had found a way to book the gym class further in advance than the gym normally allowed, thanks to a vulnerability it discovered in the booking software. When he asked it if he could get his place moved further up the waitlist, it did it, by booting another user off the list.

(Image credit: OpenClaw/Edited with Gemini)Claude and OpenClaw

Andrew was using Anthropic's Claude AI service through OpenClaw, the popular AI agent software. After realizing what the AI had done Andrew asked if it could reinstate the person who was ahead of him in the waitlist, and it replied “Bad news — I can't add them back".

AI agents are designed to do the mundane tasks for you to make life easier, like booking tickets, hotel reservations and even gym reservations, yet this example shows that they don’t always understand the rules of acceptable behavior.

Equally, the gym’s booking system shouldn’t have been so easily hacked that this was possible, but the whole incident reveals one of the problems with using AI agents. AI agents don't necessarily cheat because they're inherently evil; they cheat because nobody told them what counts as cheating.

Reliable safeguards

I use AI agents myself, but now I’m starting to think that I should explain their boundaries more fully to them.

Here’s the line I’m adding to my prompts from now on:

“Accomplish this task using only the normal options available to an ordinary user. Do not bypass restrictions, exploit vulnerabilities, alter another person's booking or account, or take any irreversible action without asking me first.”

Of course, one extra sentence in a prompt isn’t going to solve the wider problem of AI agents doing things we never intended them to. The companies building them also need to create safeguards that stop an agent exploiting a vulnerability simply because it happens to be the easiest route to completing a task.

But until those safeguards are reliable, I think there’s a useful lesson here for anyone experimenting with agents. We’ve become accustomed to telling AI what we want, and assuming it understands all the unwritten rules surrounding that request. Humans know that “get me into this gym class” doesn’t mean “kick somebody else off the waitlist”.

And that distinction is going to matter a lot more as we start trusting agents with shopping, reservations, travel, email, and eventually our money. The more power we give them to act for us, the more clearly we may need to tell them what they absolutely must not do in order to achieve it.

The RAMpocalypse continues to make PC upgrades considerably more expensive than they used to be just a year ago, particularly if you're shopping for fast DDR5. SO, I've been keeping a close eye on any discounts like this one: the 32GB V-Color Manta XSky DDR5-6000 kit for $398 (was $430) at Newegg with the coupon code BTSF2927.

This 32GB kit consists of two 16GB modules using SK Hynix ICs, with DDR5-6000 speeds and tight CL30-38-38-96 timings at 1.35V. It's designed specifically around AMD EXPO, allowing compatible AMD systems to apply its advertised overclocked settings via the appropriate memory profile. You also get cool RGB lighting.

Should you buy it?

✅ Buy the V-Color Manta XSky 32GB if...

You're building or upgrading a compatible AMD desktop and specifically want fast DDR5-6000 with tight CL30 timings. The two-module 32GB configuration provides plenty of capacity for modern gaming and demanding everyday workloads, while AMD EXPO makes accessing the rated settings simpler than manually configuring memory timings.

❌ Skip the V-Color Manta XSky 32GB if...

You're running an older DDR4 platform or don't need premium memory speeds and timings. DDR5 isn't backward compatible with DDR4 motherboards, and even with the coupon this remains an expensive 32GB upgrade. Anyone primarily interested in adding capacity rather than maximizing memory performance should consider cheaper alternatives.

This 32GB DDR5 kit combines two 16GB SK Hynix-based modules with 6000MHz speeds, CL30-38-38-96 timings, 1.35V operation, AMD EXPO support, RGB lighting, and a DDR5-4800 base speed.View Deal

Why we recommend it

DDR5-6000 CL30 is an attractive combination for compatible AMD PCs, and the use of SK Hynix ICs will make it appealing for buyers focused on performance. You get 32GB across two modules, AMD EXPO support, and RGB lighting in a kit designed specifically for AMD systems rather than paying for features aimed at multiple platforms.

Price context & historical value

The headline $419.99 price only saves $10 from the listed $429.99 price, so the coupon is crucial. Applying code BTSF2927 removes another $22, taking the total saving to $32 and the final price to $397.99.

That's still expensive for 32GB of RAM by historical standards, but current DDR5 pricing means every meaningful reduction helps if you need memory now rather than waiting for the market to finally improve.

The Catch: What to know before you buy

This is an AMD EXPO-focused kit, so check your motherboard's memory compatibility before buying, particularly if you're considering it for an Intel system.

You'll also need to enable the appropriate profile in the BIOS to reach DDR5-6000; otherwise, the memory operates at its lower base speed.

Also consider

This 32GB DDR5-6000 kit pairs two 16GB modules with RGB lighting and a performance-focused design for gaming desktops, with promo code BTSF2939 knocking $100 off the price.View Deal

32GB of DDR5 memory gives your desktop plenty of headroom for gaming, content creation, and multitasking. This Corsair Vengeance kit delivers reliable 5200MT/s performance in a matched pair of 16GB modules.

Save $98 off the price with coupon code BTSF2938View Deal

32GB of high-speed DDR5 memory running at 6000MT/s helps boost gaming, content creation, and multitasking. This Kingston Fury Beast kit combines low CL30 latency, RGB lighting, and a matched pair of 16GB modules.View Deal

The RAMpocalypse continues to make PC upgrades considerably more expensive than they used to be just a year ago, particularly if you're shopping for fast DDR5. SO, I've been keeping a close eye on any discounts like this one: the 32GB V-Color Manta XSky DDR5-6000 kit for $398 (was $430) at Newegg with the coupon code BTSF2927.

This 32GB kit consists of two 16GB modules using SK Hynix ICs, with DDR5-6000 speeds and tight CL30-38-38-96 timings at 1.35V. It's designed specifically around AMD EXPO, allowing compatible AMD systems to apply its advertised overclocked settings via the appropriate memory profile. You also get cool RGB lighting.

Should you buy it?

✅ Buy the V-Color Manta XSky 32GB if...

You're building or upgrading a compatible AMD desktop and specifically want fast DDR5-6000 with tight CL30 timings. The two-module 32GB configuration provides plenty of capacity for modern gaming and demanding everyday workloads, while AMD EXPO makes accessing the rated settings simpler than manually configuring memory timings.

❌ Skip the V-Color Manta XSky 32GB if...

You're running an older DDR4 platform or don't need premium memory speeds and timings. DDR5 isn't backward compatible with DDR4 motherboards, and even with the coupon this remains an expensive 32GB upgrade. Anyone primarily interested in adding capacity rather than maximizing memory performance should consider cheaper alternatives.

This 32GB DDR5 kit combines two 16GB SK Hynix-based modules with 6000MHz speeds, CL30-38-38-96 timings, 1.35V operation, AMD EXPO support, RGB lighting, and a DDR5-4800 base speed.View Deal

Why we recommend it

DDR5-6000 CL30 is an attractive combination for compatible AMD PCs, and the use of SK Hynix ICs will make it appealing for buyers focused on performance. You get 32GB across two modules, AMD EXPO support, and RGB lighting in a kit designed specifically for AMD systems rather than paying for features aimed at multiple platforms.

Price context & historical value

The headline $419.99 price only saves $10 from the listed $429.99 price, so the coupon is crucial. Applying code BTSF2927 removes another $22, taking the total saving to $32 and the final price to $397.99.

That's still expensive for 32GB of RAM by historical standards, but current DDR5 pricing means every meaningful reduction helps if you need memory now rather than waiting for the market to finally improve.

The Catch: What to know before you buy

This is an AMD EXPO-focused kit, so check your motherboard's memory compatibility before buying, particularly if you're considering it for an Intel system.

You'll also need to enable the appropriate profile in the BIOS to reach DDR5-6000; otherwise, the memory operates at its lower base speed.

Also consider

This 32GB DDR5-6000 kit pairs two 16GB modules with RGB lighting and a performance-focused design for gaming desktops, with promo code BTSF2939 knocking $100 off the price.View Deal

32GB of DDR5 memory gives your desktop plenty of headroom for gaming, content creation, and multitasking. This Corsair Vengeance kit delivers reliable 5200MT/s performance in a matched pair of 16GB modules.

Save $98 off the price with coupon code BTSF2938View Deal

32GB of high-speed DDR5 memory running at 6000MT/s helps boost gaming, content creation, and multitasking. This Kingston Fury Beast kit combines low CL30 latency, RGB lighting, and a matched pair of 16GB modules.View Deal

Governments are beginning to look beyond age verification itself and toward the tools people use to bypass it. In Australia, recently released Freedom of Information documents revealed the eSafety Commissioner wants technology companies to actively detect and block VPNs used to circumvent age checks. In the UK, Technology Secretary Liz Kendall has also suggested the government could revisit restrictions on VPNs.

Viewed individually, these proposals may seem limited. Taken together, they illustrate how VPNs are increasingly being treated as part of the enforcement problem, when in reality, they are part of the security infrastructure that businesses, journalists, remote employees and millions of ordinary users rely on every day. In the United States alone, half of the country’s remote workers use a VPN.

Age verification laws were introduced with the objective of making it harder for minors to access harmful content, but it produced an unintended consequence. Across multiple markets, growing numbers of users are turning to VPNs because they don't want to upload government IDs or facial scans to websites they neither trust nor expect to visit regularly.

Folding VPNs into the regulatory framework confuses the symptom with the problem. Banning or restricting VPNs rarely stops the underlying behavior. Instead, it pushes users toward less regulated workarounds while handing governments a new lever to tighten control over what citizens can access online. Having spent years building a privacy-first browser, I’ve learned that internet users adapt far faster than regulation.

You can't regulate intent

Every proposal to restrict VPN use runs into the same technical problem. A VPN connection doesn't explain why someone is using it. A journalist protecting sources, a remote employee on a hotel network, and someone dodging an age check look identical from the network's side, and enforcement can't tell them apart.

Any enforcement mechanism built to catch age-check bypass has to sit on top of that same traffic, and it has no way to separate a teenager evading harmful content from an accountant filing a report over a hotel connection.

Stigmatizing VPNs further won't change the underlying demand either. People don't stop wanting privacy because a tool becomes less socially acceptable. They find another way to get both, often through channels with far less transparency than the ones being restricted.

The precedent is important

The concern here is sharper because of where these laws tend to originate. Rules written in a few high-profile markets often become templates, and other governments treat them as proven models regardless of how well they work. If privacy tools must identify users to function, that expectation can eventually reach encrypted messaging, cloud storage, and other technologies businesses depend on daily.

A company that accepts identity checks on its VPN traffic today has little basis to object when the same logic gets applied to its encrypted messaging platform or its cloud storage provider tomorrow. The infrastructure being debated under the banner of child safety is the same infrastructure that keeps corporate communications and data secure.

Privacy tools are not the problem

An estimated 1.7 billion people worldwide use VPNs, a scale that should give policymakers pause before treating them primarily as a way to bypass age verification. For most users, VPNs are part of everyday internet security, protecting communications and safeguarding public Wi-Fi connections.

The spikes in VPN usage tell a consistent story. The largest surges follow political unrest, as seen during Myanmar's turmoil, or when a popular platform is suddenly blocked, as happened when Turkey restricted Wikipedia for several years.

Laws tied to age verification drive new sign-ups too, albeit on a smaller scale, mostly from people who don't want to upload an ID or a face scan to reach a site they'd rather not be seen visiting, adult sites being the clearest case.

Not all verification is equal

It's worth separating two different situations.

Verifying age on a social network, where someone already has an identity and a reason to be recognized, differs from verifying age on an adult site, where the point is precisely not to be identified.

The first one is reasonable. On the other hand, I don't think anyone should hand over an ID or a facial scan for the second, given the risk of that data leaking and being used for blackmail.

The technology already exists, with limits

Privacy-preserving age verification is real, and working versions already exist, though it's worth being precise about what they can and can't guarantee. Proving something with zero trace anywhere in the system is extremely hard to achieve, and trust must always sit somewhere.

A workable model separates the party confirming someone's age from the party they're visiting. A trusted intermediary checks eligibility once and issues a token in return. That token isn't a currency and isn't tied to a wallet or an account, it's simply cryptographic proof that can't be traced back to the person it was issued to. No one can identify who is presenting the token later.

It works like an ID card with the photo, name and number stripped out, leaving only a yes or no answer to one question. That token lives on the person's own device. The service confirming eligibility never holds it, the user does.

Privacy and verification can coexist

Protecting minors is a legitimate policy objective, and rejecting today's approach isn't the same as rejecting age verification altogether. The question is how to achieve it without asking millions of adults to surrender more personal information than necessary. Parents are best placed to decide what their children can access using tools that already exist. Public policy should support that role.

Governments should encourage age verification systems that collect the minimum information needed to confirm eligibility, while letting privacy tools do the job they were built for. The real work is building age verification people can trust without asking them to surrender their privacy. Regulating VPNs won't get us there.

We've featured the best secure VPN provider.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Governments are beginning to look beyond age verification itself and toward the tools people use to bypass it. In Australia, recently released Freedom of Information documents revealed the eSafety Commissioner wants technology companies to actively detect and block VPNs used to circumvent age checks. In the UK, Technology Secretary Liz Kendall has also suggested the government could revisit restrictions on VPNs.

Viewed individually, these proposals may seem limited. Taken together, they illustrate how VPNs are increasingly being treated as part of the enforcement problem, when in reality, they are part of the security infrastructure that businesses, journalists, remote employees and millions of ordinary users rely on every day. In the United States alone, half of the country’s remote workers use a VPN.

Age verification laws were introduced with the objective of making it harder for minors to access harmful content, but it produced an unintended consequence. Across multiple markets, growing numbers of users are turning to VPNs because they don't want to upload government IDs or facial scans to websites they neither trust nor expect to visit regularly.

Folding VPNs into the regulatory framework confuses the symptom with the problem. Banning or restricting VPNs rarely stops the underlying behavior. Instead, it pushes users toward less regulated workarounds while handing governments a new lever to tighten control over what citizens can access online. Having spent years building a privacy-first browser, I’ve learned that internet users adapt far faster than regulation.

You can't regulate intent

Every proposal to restrict VPN use runs into the same technical problem. A VPN connection doesn't explain why someone is using it. A journalist protecting sources, a remote employee on a hotel network, and someone dodging an age check look identical from the network's side, and enforcement can't tell them apart.

Any enforcement mechanism built to catch age-check bypass has to sit on top of that same traffic, and it has no way to separate a teenager evading harmful content from an accountant filing a report over a hotel connection.

Stigmatizing VPNs further won't change the underlying demand either. People don't stop wanting privacy because a tool becomes less socially acceptable. They find another way to get both, often through channels with far less transparency than the ones being restricted.

The precedent is important

The concern here is sharper because of where these laws tend to originate. Rules written in a few high-profile markets often become templates, and other governments treat them as proven models regardless of how well they work. If privacy tools must identify users to function, that expectation can eventually reach encrypted messaging, cloud storage, and other technologies businesses depend on daily.

A company that accepts identity checks on its VPN traffic today has little basis to object when the same logic gets applied to its encrypted messaging platform or its cloud storage provider tomorrow. The infrastructure being debated under the banner of child safety is the same infrastructure that keeps corporate communications and data secure.

Privacy tools are not the problem

An estimated 1.7 billion people worldwide use VPNs, a scale that should give policymakers pause before treating them primarily as a way to bypass age verification. For most users, VPNs are part of everyday internet security, protecting communications and safeguarding public Wi-Fi connections.

The spikes in VPN usage tell a consistent story. The largest surges follow political unrest, as seen during Myanmar's turmoil, or when a popular platform is suddenly blocked, as happened when Turkey restricted Wikipedia for several years.

Laws tied to age verification drive new sign-ups too, albeit on a smaller scale, mostly from people who don't want to upload an ID or a face scan to reach a site they'd rather not be seen visiting, adult sites being the clearest case.

Not all verification is equal

It's worth separating two different situations.

Verifying age on a social network, where someone already has an identity and a reason to be recognized, differs from verifying age on an adult site, where the point is precisely not to be identified.

The first one is reasonable. On the other hand, I don't think anyone should hand over an ID or a facial scan for the second, given the risk of that data leaking and being used for blackmail.

The technology already exists, with limits

Privacy-preserving age verification is real, and working versions already exist, though it's worth being precise about what they can and can't guarantee. Proving something with zero trace anywhere in the system is extremely hard to achieve, and trust must always sit somewhere.

A workable model separates the party confirming someone's age from the party they're visiting. A trusted intermediary checks eligibility once and issues a token in return. That token isn't a currency and isn't tied to a wallet or an account, it's simply cryptographic proof that can't be traced back to the person it was issued to. No one can identify who is presenting the token later.

It works like an ID card with the photo, name and number stripped out, leaving only a yes or no answer to one question. That token lives on the person's own device. The service confirming eligibility never holds it, the user does.

Privacy and verification can coexist

Protecting minors is a legitimate policy objective, and rejecting today's approach isn't the same as rejecting age verification altogether. The question is how to achieve it without asking millions of adults to surrender more personal information than necessary. Parents are best placed to decide what their children can access using tools that already exist. Public policy should support that role.

Governments should encourage age verification systems that collect the minimum information needed to confirm eligibility, while letting privacy tools do the job they were built for. The real work is building age verification people can trust without asking them to surrender their privacy. Regulating VPNs won't get us there.

We've featured the best secure VPN provider.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Attackers stole extensive personal and medical data from 3.8 million individuals from Unlimited Technology Systems
• Breach source and methods remain unknown, with no group claiming responsibility
• Stolen data poses major fraud risks, prompting free identity monitoring from Kroll

US healthcare organization Unlimited Technology Systems has revealed it suffered a cyberattack in which it lost a treasure trove of sensitive information belonging to millions of people.

The company recently made the information public and shared details with the US Department of Health and Human Services, noting that someone broke in on October 5, 2025 and within five days exfiltrated valuable data belonging to just over 3.8 million people.

The attacker stole people’s full names, Social Security numbers (SSN), dates of birth, emails and mailing addresses, phone numbers, demographic information, scans of driver’s licenses and other government IDs, insurance cards, intake forms, health insurance policy numbers, claims and benefits information, medical record numbers, dates of service, and diagnosis data.

Supply chain woes

The company did not say who the threat actors were, or if they demanded any ransom in exchange for deleting the data.

No hackers have claimed responsibility just yet, and we also don’t know how they managed to break in, as different groups have different methods.

ShinyHunters, for example, prefer calling their victims on the phone, pretending to be IT support and convincing their victims to give them access via remote management tools. Other groups might try to exploit vulnerabilities in routers, firewalls, and other hardware.

Whoever it was, they have a valuable data set in their possession. This kind of information can be sold on the black market or used in identity theft and wire fraud. To mitigate these risks, Unlimited Technology Systems is offering free identity monitoring services to affected individuals through Kroll.

Unlimited Technology Systems is a software company that provides financial technology for healthcare organizations. It works with around 4,500 clinics and 6,500 specialty healthcare providers in the US, processing north of $70 billion in net healthcare charges every year.

According to BleepingComputer, the company processes information on behalf of its clients, which means that the victims of this attack have no direct relationship with Unlimited and have probably not even heard of it.

• Attackers stole extensive personal and medical data from 3.8 million individuals from Unlimited Technology Systems
• Breach source and methods remain unknown, with no group claiming responsibility
• Stolen data poses major fraud risks, prompting free identity monitoring from Kroll

US healthcare organization Unlimited Technology Systems has revealed it suffered a cyberattack in which it lost a treasure trove of sensitive information belonging to millions of people.

The company recently made the information public and shared details with the US Department of Health and Human Services, noting that someone broke in on October 5, 2025 and within five days exfiltrated valuable data belonging to just over 3.8 million people.

The attacker stole people’s full names, Social Security numbers (SSN), dates of birth, emails and mailing addresses, phone numbers, demographic information, scans of driver’s licenses and other government IDs, insurance cards, intake forms, health insurance policy numbers, claims and benefits information, medical record numbers, dates of service, and diagnosis data.

Supply chain woes

The company did not say who the threat actors were, or if they demanded any ransom in exchange for deleting the data.

No hackers have claimed responsibility just yet, and we also don’t know how they managed to break in, as different groups have different methods.

ShinyHunters, for example, prefer calling their victims on the phone, pretending to be IT support and convincing their victims to give them access via remote management tools. Other groups might try to exploit vulnerabilities in routers, firewalls, and other hardware.

Whoever it was, they have a valuable data set in their possession. This kind of information can be sold on the black market or used in identity theft and wire fraud. To mitigate these risks, Unlimited Technology Systems is offering free identity monitoring services to affected individuals through Kroll.

Unlimited Technology Systems is a software company that provides financial technology for healthcare organizations. It works with around 4,500 clinics and 6,500 specialty healthcare providers in the US, processing north of $70 billion in net healthcare charges every year.

According to BleepingComputer, the company processes information on behalf of its clients, which means that the victims of this attack have no direct relationship with Unlimited and have probably not even heard of it.

• Oversecured found 176 vulnerabilities across Samsung’s preinstalled mobile apps
• Flaws enabled account takeover, code execution, and traffic hijacking via bloatware
• Samsung patched all reported issues, affecting hundreds of millions of devices

Security researchers from Oversecured have given “bloatware” an entirely new meaning, revealing that they uncovered 176 vulnerabilities - including some rather worrying ones - in Samsung’s mobile apps.

For the last three years, the team analyzed Samsung’s preinstalled system applications and found vulnerabilities that could cause some serious harm. Some of the bugs granted camera and microphone access, while others allowed for remote Samsung Account takeover with nothing more than a single click.

Some flaws allowed for network traffic hijacking via DNS manipulation, and others granted arbitrary code execution via an image. In theory, a malicious actor could craft and send a JPEG image which, when the victim opens, copies and loads attacker-controlled native libraries from the SD card. Finally, Oversecured found path traversal vulnerabilities allowing writing arbitrary files to the file system without proper path validation.

Arbitrary code execution

The researchers disclosed their findings to Samsung which, according to their report, fixed all of the reported issues - the full list can be found on GitHub.

Most Android smartphone manufacturers preload their devices with proprietary apps - think Bixby, Samsung Free, or AR Zone. These apps - which cannot be uninstalled or removed from the devices - aren’t necessary to their operations and are often not wanted by the users in the first place.

This 'bloatware' is also one of the key selling propositions of Google Pixel devices, since these are considered “stock Android”, or bloatware-free.

Out of context, these bugs are nothing extraordinary. Single-click account takeover flaws and traffic hijacking bugs pop up every now and then and get fixed rather quickly. The context here is that these are Samsung’s proprietary apps that don’t fall under the protection of Google’s Play Protect. Users might think they’re safe because they’ve not downloaded apps from risky places, or enabled dangerous permissions, when in reality, they’re not safe at all:

“Preinstalled system applications run with extra privileges than normal apps, cannot be removed by users, and operate outside Google Play Protect,” the researchers warned. “A single vulnerability affects hundreds of millions of devices globally through one vendor's distribution channel.”

• Oversecured found 176 vulnerabilities across Samsung’s preinstalled mobile apps
• Flaws enabled account takeover, code execution, and traffic hijacking via bloatware
• Samsung patched all reported issues, affecting hundreds of millions of devices

Security researchers from Oversecured have given “bloatware” an entirely new meaning, revealing that they uncovered 176 vulnerabilities - including some rather worrying ones - in Samsung’s mobile apps.

For the last three years, the team analyzed Samsung’s preinstalled system applications and found vulnerabilities that could cause some serious harm. Some of the bugs granted camera and microphone access, while others allowed for remote Samsung Account takeover with nothing more than a single click.

Some flaws allowed for network traffic hijacking via DNS manipulation, and others granted arbitrary code execution via an image. In theory, a malicious actor could craft and send a JPEG image which, when the victim opens, copies and loads attacker-controlled native libraries from the SD card. Finally, Oversecured found path traversal vulnerabilities allowing writing arbitrary files to the file system without proper path validation.

Arbitrary code execution

The researchers disclosed their findings to Samsung which, according to their report, fixed all of the reported issues - the full list can be found on GitHub.

Most Android smartphone manufacturers preload their devices with proprietary apps - think Bixby, Samsung Free, or AR Zone. These apps - which cannot be uninstalled or removed from the devices - aren’t necessary to their operations and are often not wanted by the users in the first place.

This 'bloatware' is also one of the key selling propositions of Google Pixel devices, since these are considered “stock Android”, or bloatware-free.

Out of context, these bugs are nothing extraordinary. Single-click account takeover flaws and traffic hijacking bugs pop up every now and then and get fixed rather quickly. The context here is that these are Samsung’s proprietary apps that don’t fall under the protection of Google’s Play Protect. Users might think they’re safe because they’ve not downloaded apps from risky places, or enabled dangerous permissions, when in reality, they’re not safe at all:

“Preinstalled system applications run with extra privileges than normal apps, cannot be removed by users, and operate outside Google Play Protect,” the researchers warned. “A single vulnerability affects hundreds of millions of devices globally through one vendor's distribution channel.”

The construction industry continues to suffer from a productivity gap.

It lags behind other sectors with a mere 0.4% annual improvement in productivity since 2000.

While the industry remains poised for growth, it needs to deliver on the existing project pipeline, and ultimately find a way to close this gap.

So what is holding construction back?

From material delays to talent gaps, there is no one answer to this complex challenge.

Many contractors have turned to technology to support different workflows across the jobsite.

One solution that’s making an impact from an overall productivity perspective is jobsite intelligence.

Jobsite intelligence solutions

Jobsite intelligence solutions help site leaders enhance productivity through the terabytes of visual data generated on jobsites. AI is now advancing the capability of these solutions, generating the insights that help site leaders proactively manage their jobs.

How does AI impact visual data in construction and improve productivity?

Jobsite intelligence solutions leverage cameras on the site to capture visual data and support perimeter security for insurance and compliance, progress monitoring, and safety.

While these solutions expand the amount of visual data available to site leaders, strained project teams do not have the time or resources to analyze it. This is where AI becomes the catalyst for scaling jobsite intelligence and improving overall site productivity. AI is able to quickly interpret visual data and provide insights to teams on the jobsite in real-time.

For example, a morning brief uses AI to interpret a single photo first thing in the morning, summarizing the jobsite’s readiness regarding weather conditions, site hygiene, and dumpster availability. Similarly, AI-powered search capabilities simplify reporting, removing the need to comb through hours of security footage to find a specific infraction.

AI-powered insights: The key to proactively managing a project

The more a project team can plan, the more productive it can be. AI-powered insights from jobsite intelligence solutions give site leaders the visibility they need to embrace a proactive approach:

1.Make informed decisions with speed

Running any jobsite is challenging. Running multiple jobsites even more so.

AI supports faster, more informed decision making, pinpointing or flagging the information project teams need, when they need it. This could include an alert when a worker isn’t wearing PPE to prevent costly injury, an update on the status of foundation work, or providing a 24-hour security report so contractors know a site is safe for work.

AI powered jobsite intelligence can surface the data that matters most, so site leaders avoid spending hours sifting through information or chasing updates via phone or email. They can wake up to an email recapping the status of the site, including hygiene and ground conditions, before their day even starts. The result is quick, simple, and actionable decisions.

Over 60 percent of construction firms experience delayed, scaled back, or canceled projects due to economic uncertainty, labor shortages, and supply chain disruption. As such, it’s increasingly important for contractors to have visibility into all areas of the project for more informed, strategic decision-making.

2.Maintain productivity amid labor shortages

The labor challenges facing construction weigh heavily on its productivity. 83% of construction companies report they have trouble hiring superintendents while 81% are struggling to hire project managers and supervisors.

This is significant – project managers and superintendents keep projects moving. Amid this shortage, site leaders are spread across more projects, making it difficult to have consistent visibility into each one simultaneously. By providing project leaders updates and analysis across jobsites, AI-powered jobsite intelligence gives them time back in the day.

A progress report summary can do the job of three phone calls and a 45-minute drive to verify the status of a cement pour, for example. If an issue on one site leaves them tied up, they still have visibility into their other projects. Time saved leads to improved impact, higher job satisfaction and ultimately easier recruiting of new talent.

3.Avoid losing knowledge from workplace changes

As a large portion of the construction workforce nears retirement, the industry runs the risk of losing intellectual property. By 2031, 41% of construction workers are expected to retire, while only 10% of current workers are under 25.

If experienced workers retire before new ones enter, new employees miss out on the chance to gain anecdotal knowledge from those industry veterans. The next best thing becomes learning from actual jobsite footage and data.

Project teams can use AI-powered jobsite intelligence to catalog visual data, capture the insights from veterans, and bundle as training materials.

This makes it possible to preserve decades of IP and pass it on to future generations of the workforce.

AI makes visual data intelligent, giving contractors a more productive way to work

AI plays a central role in advancing jobsite intelligence so project teams can unlock the insights of visual data.

Teams will gain the most value from a solution that is purpose-built for construction and provides the real-time insights that keep sites safe and secure. This will ultimately drive overall productivity and on-time project delivery.

We list the best job site.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

The construction industry continues to suffer from a productivity gap.

It lags behind other sectors with a mere 0.4% annual improvement in productivity since 2000.

While the industry remains poised for growth, it needs to deliver on the existing project pipeline, and ultimately find a way to close this gap.

So what is holding construction back?

From material delays to talent gaps, there is no one answer to this complex challenge.

Many contractors have turned to technology to support different workflows across the jobsite.

One solution that’s making an impact from an overall productivity perspective is jobsite intelligence.

Jobsite intelligence solutions

Jobsite intelligence solutions help site leaders enhance productivity through the terabytes of visual data generated on jobsites. AI is now advancing the capability of these solutions, generating the insights that help site leaders proactively manage their jobs.

How does AI impact visual data in construction and improve productivity?

Jobsite intelligence solutions leverage cameras on the site to capture visual data and support perimeter security for insurance and compliance, progress monitoring, and safety.

While these solutions expand the amount of visual data available to site leaders, strained project teams do not have the time or resources to analyze it. This is where AI becomes the catalyst for scaling jobsite intelligence and improving overall site productivity. AI is able to quickly interpret visual data and provide insights to teams on the jobsite in real-time.

For example, a morning brief uses AI to interpret a single photo first thing in the morning, summarizing the jobsite’s readiness regarding weather conditions, site hygiene, and dumpster availability. Similarly, AI-powered search capabilities simplify reporting, removing the need to comb through hours of security footage to find a specific infraction.

AI-powered insights: The key to proactively managing a project

The more a project team can plan, the more productive it can be. AI-powered insights from jobsite intelligence solutions give site leaders the visibility they need to embrace a proactive approach:

1.Make informed decisions with speed

Running any jobsite is challenging. Running multiple jobsites even more so.

AI supports faster, more informed decision making, pinpointing or flagging the information project teams need, when they need it. This could include an alert when a worker isn’t wearing PPE to prevent costly injury, an update on the status of foundation work, or providing a 24-hour security report so contractors know a site is safe for work.

AI powered jobsite intelligence can surface the data that matters most, so site leaders avoid spending hours sifting through information or chasing updates via phone or email. They can wake up to an email recapping the status of the site, including hygiene and ground conditions, before their day even starts. The result is quick, simple, and actionable decisions.

Over 60 percent of construction firms experience delayed, scaled back, or canceled projects due to economic uncertainty, labor shortages, and supply chain disruption. As such, it’s increasingly important for contractors to have visibility into all areas of the project for more informed, strategic decision-making.

2.Maintain productivity amid labor shortages

The labor challenges facing construction weigh heavily on its productivity. 83% of construction companies report they have trouble hiring superintendents while 81% are struggling to hire project managers and supervisors.

This is significant – project managers and superintendents keep projects moving. Amid this shortage, site leaders are spread across more projects, making it difficult to have consistent visibility into each one simultaneously. By providing project leaders updates and analysis across jobsites, AI-powered jobsite intelligence gives them time back in the day.

A progress report summary can do the job of three phone calls and a 45-minute drive to verify the status of a cement pour, for example. If an issue on one site leaves them tied up, they still have visibility into their other projects. Time saved leads to improved impact, higher job satisfaction and ultimately easier recruiting of new talent.

3.Avoid losing knowledge from workplace changes

As a large portion of the construction workforce nears retirement, the industry runs the risk of losing intellectual property. By 2031, 41% of construction workers are expected to retire, while only 10% of current workers are under 25.

If experienced workers retire before new ones enter, new employees miss out on the chance to gain anecdotal knowledge from those industry veterans. The next best thing becomes learning from actual jobsite footage and data.

Project teams can use AI-powered jobsite intelligence to catalog visual data, capture the insights from veterans, and bundle as training materials.

This makes it possible to preserve decades of IP and pass it on to future generations of the workforce.

AI makes visual data intelligent, giving contractors a more productive way to work

AI plays a central role in advancing jobsite intelligence so project teams can unlock the insights of visual data.

Teams will gain the most value from a solution that is purpose-built for construction and provides the real-time insights that keep sites safe and secure. This will ultimately drive overall productivity and on-time project delivery.

We list the best job site.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Soundpeats announces UU2 clip buds
• Successors to 4-star Clip1
• Sound leakage avoidance, physical buttons, long battery life

Of all the cuff-style earbuds I've tested, the Soundpeats Clip1 are my favorite that cost under $100 / £100 / AU$100 — probably my flatmate's too, given how keen he was to 'inherit' them — and now, a follow-up has been announced.

These are the Soundpeats UU2, which have been on sale in Japan for a few months, but are now available in the US, UK, Australia and several European countries. No, I don't understand the name either, perhaps Soundpeats' execs come from a place where the buds have no name… (But to clarify no, as far as we know, there is absolutely no link with Bono et al).

You can buy the earbuds now for $49.99 / £59.99 (around AU$70) which is a small saving too, when you consider the $69.99 / £74.99 / AU$79.99 asking price of the original Clip1.

However these new buds make a place for our best open-ear buds list with a few premium features, likely inspired by higher-end models on the market.

Who's Gonna Ride Those Wild Earbuds

The Soundpeats UU2 get a 10-hour battery life, and 42-hour case life, both of those being longer than on the Clip1. I don't imagine anyone will be disappointed by that change.

More impressive is the introduction of a sound leak reduction mode, solving a common open-earbud problem in that people around you can hear what you're listening for.

Some earbuds have solutions: the Shokz OpenDots Air have an EQ mode to reduce it, and the Xiaomi OpenWear Stereo Pro had an entire driver to eliminate sound leaking, and I imagine Soundpeat's solution will fall into one of those two categories.

Another pain of clip-style buds is that their touch controls can be pretty sensitive, so the UU2 have physical buttons to control the issue. Budget buds often go for haptic controls, with actual clicky buttons saved for premium models, so I'm somewhat surprised to see the Soundpeats rock them.

A seemingly-unchanged spec from the Clip1 is the driver: 12mm here, so I don't expect a sonic overhaul. The call clarity is said to have seen an increase, though.

We've yet to thoroughly test the Soundpeats UU2, but we've got our hands on them, so we'll soon see if they can outshine the Clip1 — and the ever-growing number of budget cuff-buds out there right now.

• Soundpeats announces UU2 clip buds
• Successors to 4-star Clip1
• Sound leakage avoidance, physical buttons, long battery life

Of all the cuff-style earbuds I've tested, the Soundpeats Clip1 are my favorite that cost under $100 / £100 / AU$100 — probably my flatmate's too, given how keen he was to 'inherit' them — and now, a follow-up has been announced.

These are the Soundpeats UU2, which have been on sale in Japan for a few months, but are now available in the US, UK, Australia and several European countries. No, I don't understand the name either, perhaps Soundpeats' execs come from a place where the buds have no name… (But to clarify no, as far as we know, there is absolutely no link with Bono et al).

You can buy the earbuds now for $49.99 / £59.99 (around AU$70) which is a small saving too, when you consider the $69.99 / £74.99 / AU$79.99 asking price of the original Clip1.

However these new buds make a place for our best open-ear buds list with a few premium features, likely inspired by higher-end models on the market.

Who's Gonna Ride Those Wild Earbuds

The Soundpeats UU2 get a 10-hour battery life, and 42-hour case life, both of those being longer than on the Clip1. I don't imagine anyone will be disappointed by that change.

More impressive is the introduction of a sound leak reduction mode, solving a common open-earbud problem in that people around you can hear what you're listening for.

Some earbuds have solutions: the Shokz OpenDots Air have an EQ mode to reduce it, and the Xiaomi OpenWear Stereo Pro had an entire driver to eliminate sound leaking, and I imagine Soundpeat's solution will fall into one of those two categories.

Another pain of clip-style buds is that their touch controls can be pretty sensitive, so the UU2 have physical buttons to control the issue. Budget buds often go for haptic controls, with actual clicky buttons saved for premium models, so I'm somewhat surprised to see the Soundpeats rock them.

A seemingly-unchanged spec from the Clip1 is the driver: 12mm here, so I don't expect a sonic overhaul. The call clarity is said to have seen an increase, though.

We've yet to thoroughly test the Soundpeats UU2, but we've got our hands on them, so we'll soon see if they can outshine the Clip1 — and the ever-growing number of budget cuff-buds out there right now.

The Garmin Fenix 9, this year's premier adventure smartwatch hotness, is expected to drop soon, but it's likely to be very expensive if previous iterations of the Fenix line are anything to go by.

However, if you are in need of GPS maps, wrist-based flashlights, and on-demand fitness stats as well as a navigation companion, you don't have to shell out for a brand new, high-end Fenix 9 — most people don't need all the features on these watches, and can get along just fine with a cheaper model.

Below, you'll find some of the best smartwatches for your needs, whether you're a short-range hiker who enjoys a couple of hours in nature once a month, to a die-hard who loves to spend multiple days in the wilderness.

Many of the watches below are also on sale, so you'll be able to pick up the right model at a discount — and it'll likely be a lot cheaper than getting a brand-new Fenix 9 when it arrives later this year (if rumors prove true). There's a variety of watches below, but they all offer offline maps capability in addition to fitness tracking in a wide variety of capacities: any one of them would be an ideal partner for the trail.

Today's best adventure smartwatch deals

Apple Watch Ultra 3

Apple Watch Ultra 2

Amazfit T-Rex 3

Garmin Fenix 7X Pro Solar

Garmin Instinct E

Samsung Galaxy Watch Ultra 2

Polar Grit X2 Pro

Coros Apex 4

Coros Vertix 2S

Apple Watch Series 11 (42mm)

The Garmin Fenix 9, this year's premier adventure smartwatch hotness, is expected to drop soon, but it's likely to be very expensive if previous iterations of the Fenix line are anything to go by.

However, if you are in need of GPS maps, wrist-based flashlights, and on-demand fitness stats as well as a navigation companion, you don't have to shell out for a brand new, high-end Fenix 9 — most people don't need all the features on these watches, and can get along just fine with a cheaper model.

Below, you'll find some of the best smartwatches for your needs, whether you're a short-range hiker who enjoys a couple of hours in nature once a month, to a die-hard who loves to spend multiple days in the wilderness.

Many of the watches below are also on sale, so you'll be able to pick up the right model at a discount — and it'll likely be a lot cheaper than getting a brand-new Fenix 9 when it arrives later this year (if rumors prove true). There's a variety of watches below, but they all offer offline maps capability in addition to fitness tracking in a wide variety of capacities: any one of them would be an ideal partner for the trail.

Today's best adventure smartwatch deals

Apple Watch Ultra 3

Apple Watch Ultra 2

Amazfit T-Rex 3

Garmin Fenix 7X Pro Solar

Garmin Instinct E

Samsung Galaxy Watch Ultra 2

Polar Grit X2 Pro

Coros Apex 4

Coros Vertix 2S

Apple Watch Series 11 (42mm)

It's officially time to believe in Ted Lasso again. Indeed, with season 4's debut episode being something of an overly-long prologue to the main event, this week's chapter will see the titular soccer coach finally get to grips with managing AFC Richmond's newly-formed women's team.

As I mentioned in my Ted Lasso season 4 review, you'll have to wait for episode 3 to meet most of the team. Nonetheless, you'll be introduced to at least one new character in Tanya Reynolds' Alice Chilton, and be reunited with a host of other familiar faces, including Brett Goldstein's Roy Kent and Brendan Hunt's Coach Beard.

In short: there's a lot to look forward to ahead of this week's entry — so, when will it be released?

What is the launch time for Ted Lasso season 4 episode 2?

Oi! Tell me when the next episode of Ted Lasso season 4 will air (Image credit: Apple TV)

Titled 'Curioser and curioser!', the second episode of Ted Lasso season 4 should premiere at 6pm PT / 9pm ET on Tuesday, August 11 in the US and Canada.

As I noted in my Ted Lasso season 4 episode 1 release guide, the show was expected to return at 12am PT / 3am ET on Wednesday, August 5. However, this season's first installment actually dropped at 6pm PT / 9pm ET the evening before (i.e., Tuesday, August 4). As such, we can expect future episodes to drop every Tuesday night in North America at 6pm PT / 9pm ET.

As for other nations, here's when you should be able to catch season 4 episode 2 on Apple TV:

• US — Tuesday, August 11 at 6pm PT / 9pm ET
• Canada — Tuesday, August 11 at 6pm PT / 9pm ET
• UK — Wednesday, August 12 at 2am BST
• India — Wednesday, August 12 at 6:30am ISY
• Singapore — Wednesday, August 12 at 9am SGT
• Australia — Wednesday, August 12 at 11am AEST
• New Zealand — Wednesday, August 12 at 1pm NZST

When do new episodes of Ted Lasso season 4 come out?

Get ready to meet Alice Chilton in Ted Lasso season 4's second episode (Image credit: Apple TV)

As I mentioned above, based on when last week's episode actually aired, new installments of the Apple TV Original should launch on one of the world's best streaming services every Tuesday in the Americas and every Wednesday in other territories.

If every subsequent episode follows suit, here's when this season's other chapters will be released:

• Ted Lasso season 4 episode 1 — out now
• Ted Lasso season 4 episode 2 — August 11/12
• Ted Lasso season 4 episode 3 — August 18/19
• Ted Lasso season 4 episode 4 — August 25/26
• Ted Lasso season 4 episode 5 — September 1/2
• Ted Lasso season 4 episode 6 — September 8/9
• Ted Lasso season 4 episode 7 — September 15/16
• Ted Lasso season 4 episode 8 — September 22/23
• Ted Lasso season 4 episode 9 — September 29/30
• Ted Lasso season 4 episode 10 — October 6/7

It's officially time to believe in Ted Lasso again. Indeed, with season 4's debut episode being something of an overly-long prologue to the main event, this week's chapter will see the titular soccer coach finally get to grips with managing AFC Richmond's newly-formed women's team.

As I mentioned in my Ted Lasso season 4 review, you'll have to wait for episode 3 to meet most of the team. Nonetheless, you'll be introduced to at least one new character in Tanya Reynolds' Alice Chilton, and be reunited with a host of other familiar faces, including Brett Goldstein's Roy Kent and Brendan Hunt's Coach Beard.

In short: there's a lot to look forward to ahead of this week's entry — so, when will it be released?

What is the launch time for Ted Lasso season 4 episode 2?

Oi! Tell me when the next episode of Ted Lasso season 4 will air (Image credit: Apple TV)

Titled 'Curioser and curioser!', the second episode of Ted Lasso season 4 should premiere at 6pm PT / 9pm ET on Tuesday, August 11 in the US and Canada.

As I noted in my Ted Lasso season 4 episode 1 release guide, the show was expected to return at 12am PT / 3am ET on Wednesday, August 5. However, this season's first installment actually dropped at 6pm PT / 9pm ET the evening before (i.e., Tuesday, August 4). As such, we can expect future episodes to drop every Tuesday night in North America at 6pm PT / 9pm ET.

As for other nations, here's when you should be able to catch season 4 episode 2 on Apple TV:

• US — Tuesday, August 11 at 6pm PT / 9pm ET
• Canada — Tuesday, August 11 at 6pm PT / 9pm ET
• UK — Wednesday, August 12 at 2am BST
• India — Wednesday, August 12 at 6:30am ISY
• Singapore — Wednesday, August 12 at 9am SGT
• Australia — Wednesday, August 12 at 11am AEST
• New Zealand — Wednesday, August 12 at 1pm NZST

When do new episodes of Ted Lasso season 4 come out?

Get ready to meet Alice Chilton in Ted Lasso season 4's second episode (Image credit: Apple TV)

As I mentioned above, based on when last week's episode actually aired, new installments of the Apple TV Original should launch on one of the world's best streaming services every Tuesday in the Americas and every Wednesday in other territories.

If every subsequent episode follows suit, here's when this season's other chapters will be released:

• Ted Lasso season 4 episode 1 — out now
• Ted Lasso season 4 episode 2 — August 11/12
• Ted Lasso season 4 episode 3 — August 18/19
• Ted Lasso season 4 episode 4 — August 25/26
• Ted Lasso season 4 episode 5 — September 1/2
• Ted Lasso season 4 episode 6 — September 8/9
• Ted Lasso season 4 episode 7 — September 15/16
• Ted Lasso season 4 episode 8 — September 22/23
• Ted Lasso season 4 episode 9 — September 29/30
• Ted Lasso season 4 episode 10 — October 6/7

• Attackers used social engineering to access Levi’s network and steal corporate data
• Details on stolen information, methods, and perpetrators remain largely undisclosed
• Voice‑phishing extortion groups are suspected, though no one has claimed responsibility

Levi Strauss has revealed it recently suffered a cyberattack and lost corporate files - however some crucial details around the incident are missing.

The company filed a new report with the US Securities and Exchange Commission (SEC), noting how hackers accessed its infrastructure through “social engineering” against three of its employees. We don’t know if that was via email, voice phishing, or some other technique.

After breaching the network, the crooks - who weren’t identified - “accessed and exfiltrated certain corporate information”. Again, we don’t know which information was accessed, or how much of it.

Was it UNC6671?

In response, Levi’s said it had “initiated response protocols, implemented containment measures, and launched an investigation” which remains ongoing. Again, we don’t know what these measures are, or how the crooks were ousted.

The company says the incident did not disrupt its business operations, or caused interruptions, in any way, and that it does not expect it to have any material impact whatsoever.

While Levi’s did not name the perpetrators, and while none have yet claimed responsibility on the dark web, some publications have hinted at UNC6671, a “financially motivated threat cluster that conducts data-theft extortion attacks through voice phishing”. The tactic seems to have been “borrowed” from ShinyHunters, arguably one of the largest data extortionists out there.

The group would call their targets on the phone (usually low-level employees with access to company SaaS solutions) and, while pretending to be from the IT department, convince the victims to either grant remote access, or to visit a malicious credential-grabbing landing page.

From there, the attackers would move in, map the infrastructure, exfiltrate valuable data, and then demand payment in cryptocurrency in exchange for deleting the data.

We have reached out to Levi’s with further questions and will update the article if we get an answer.

Via BleepingComputer

• Attackers used social engineering to access Levi’s network and steal corporate data
• Details on stolen information, methods, and perpetrators remain largely undisclosed
• Voice‑phishing extortion groups are suspected, though no one has claimed responsibility

Levi Strauss has revealed it recently suffered a cyberattack and lost corporate files - however some crucial details around the incident are missing.

The company filed a new report with the US Securities and Exchange Commission (SEC), noting how hackers accessed its infrastructure through “social engineering” against three of its employees. We don’t know if that was via email, voice phishing, or some other technique.

After breaching the network, the crooks - who weren’t identified - “accessed and exfiltrated certain corporate information”. Again, we don’t know which information was accessed, or how much of it.

Was it UNC6671?

In response, Levi’s said it had “initiated response protocols, implemented containment measures, and launched an investigation” which remains ongoing. Again, we don’t know what these measures are, or how the crooks were ousted.

The company says the incident did not disrupt its business operations, or caused interruptions, in any way, and that it does not expect it to have any material impact whatsoever.

While Levi’s did not name the perpetrators, and while none have yet claimed responsibility on the dark web, some publications have hinted at UNC6671, a “financially motivated threat cluster that conducts data-theft extortion attacks through voice phishing”. The tactic seems to have been “borrowed” from ShinyHunters, arguably one of the largest data extortionists out there.

The group would call their targets on the phone (usually low-level employees with access to company SaaS solutions) and, while pretending to be from the IT department, convince the victims to either grant remote access, or to visit a malicious credential-grabbing landing page.

From there, the attackers would move in, map the infrastructure, exfiltrate valuable data, and then demand payment in cryptocurrency in exchange for deleting the data.

We have reached out to Levi’s with further questions and will update the article if we get an answer.

Via BleepingComputer