TechRadar News

• Researcher Patrick Wardle finds zero‑day in Meta’s new Muse AI assistant,
• Dubbed not‑a‑mused, the exploit requires local compromise, voice dictation, and app integrations; attackers can hijack tokens and exfiltrate data
• Meta has been informed but no patch yet; flaw highlights risks of AI assistants with broad permissions

Meta’s new Artificial Intelligence (AI) assistant Muse reportedly carried a zero-day vulnerability that allowed attackers to gain access to people’s apps, such as WhatsApp or email.

However, it’s not as straightforward as your usual zero-day - to exploit it, simply deploying malware will not suffice. Certain features need to be enabled, and certain integrations established before the bug could be leveraged.

Not-a-mused

A little background, for context: Meta recently released Muse, describing it as an assistant that can “book appointments, fill out forms, and handle customer service.” It says the tool, available exclusively for the Mac ecosystem for now, “proactively takes tasks off your plate” and makes purchases, generates images, and creates documents.

To do that, however, it needs to connect to apps such as email, WhatsApp, calendar, or social media accounts - and this connection is the first prerequisite needed to exploit the flaw.

The second prerequisite is voice dictation. The vulnerability was found in the way Muse handles commands received via voice, meaning the attacker must piggyback onto voice commands in order to escalate privileges and access other apps and their content.

Now for the flaw itself. It was discovered by security researcher Patrick Wardle, founder of nonprofit Objective-See. He named it “not-a-mused” and says it hides in an undocumented setting called endo_voyager_dictation_endpoint. When a user narrates a voice command, that instruction is sent and processed in the cloud, where Meta can log it. This setting allows the user to change which endpoint receives the dictation.

Which brings us to the third prerequisite. The threat actor must have local access to be able to change this setting in the first place. In other words, the device must already be compromised in some way, either via remote monitoring and management tools, or via low-level malware (or with physical access).

For the sake of the report, let’s say that a theoretical user checks all the right boxes - they’re running a compromised machine and are talking to Muse that’s already connected to other productivity apps. Instead of reaching Meta’s endpoints, the voice commands are first sent to attacker-controlled infrastructure, where the AI assistant, together with the instructions, also sends authentication tokens for the tool.

If the attacker reacts fast enough, they can grab the token and access their target’s AI tool. If it’s connected to other apps, such as WhatsApp or calendar, they can simply prompt it to extract whatever sensitive information is found inside.

Not-a-mused is therefore a combination of data exfiltration and privilege escalation.

Ironing out the kinks

“We can manipulate the agent and leverage its privileges to do whatever we want,” Wardle told Ars Technica.

“So instead of us having to write a very comprehensive Mac malware stealer, we can just leverage the AI assistant itself.” Wardle said he has developed several proof-of-concept attacks that do things like writing malicious files to disk and snapping pictures, in many cases with no indication to even an alert user.

Meta has been informed, but is yet to comment, or issue a patch.

AI assistants are all the rage nowadays. They’ve turned elaborate answer machines into tools that can complete assignments, even more complex ones. They can book flights and restaurant tables, make purchases, schedule and reschedule calls and meetings, and more. However, to do that, these tools need extensive permissions - something the security community is warning of.

While they’re not openly speaking against it, they are advising caution. There are many stories of AI agents either going rogue, or simply being tricked by malicious actors. For example, a hidden prompt in a phishing email can trick an AI agent tasked with summarizing the message into exfiltrating all .PDF documents from the victim’s inbox.

In the early days of agentic AI, there were reports of assistants simply deleting people’s inboxes.

Assistants are likely here to stay, but there are still quite a few kinks to iron before they can hit the mainstream.

Playing the upcoming Cairn: On the Trail DLC with one of its creators looking over my shoulder was incredibly humbling. It had been months since I’d completed my gruelling ascent of Mt. Kami, and my skills were more than a little rusty. When Aava slipped and plummeted into the sea for the fifth time in less than 20 minutes, I was worried they’d lean over, close the laptop, and walk away shaking their head in disgust.

Luckily, I was allowed to play on, and slowly but surely I (quite literally) found my feet, more confidently and successfully finding the handholds and footholds to make progress on one of the three new challenges found in this first piece of free DLC for the excellent climbing adventure.

The one I was currently dramatically failing at features a piton-shaped rock in the middle of the ocean. You start on a wooden path surrounding this peculiar natural structure, before falling into a familiar pattern where you’re scoping out the potential routes to find a good place to climb it. It’s immediately clear, though, that these DLC environments are even more experimental than what we saw in the main game.

Rising up

“On the Trail is pretty much built on ideas and desires we had but decided not to put on Kami for the sake of consistency,” explains Emeric Thoa, creative director of Cairn.

“Because Kami is a very coherent experience, as you climb a single immense mountain, we wanted the On the Trail DLC to explore more variety in the climbing fantasy.”

(Image credit: The Game Bakers)

That breaks down as follows. This first is the level I’m playing now, with its tough climb up a unique structure. There’s also one set in a climbing gym full of more technically demanding challenges and one on a small island featuring various perilous overhangs over the sea.

You can also now play as Marco, who is less flexible than Aava, but he has a longer reach, stronger arms, and a new climbot model.

Whoever you pick, none of the new stages sound very easy, even for veterans who have successfully reached the top of Kami.

“It’s aimed at people who finished the main game, but it’s not especially difficult,” Thoa assures me. “It’s not like you must have finished in free solo mode with zero falls playing with a Guitar Hero controller. But I would definitely recommend playing the main game before starting On the Trail.”

I would, too, considering I scored it four stars and called it ‘an extremely good and beautifully made climbing game’ in our Cairn review.

And while it was the determination to complete the climb and the satisfaction of achieving it that was a main draw of Cairn, it was also the atmosphere that was one of its strongest points.

As you ascend, you learn more not only about Aava as a character, but also about the civilization that used to live on the mountain and some of its secrets. These neat asides are a wonderful break from the intensity of the rest of the game.

“We definitely tried to keep that exploration and treasure hunt vibe that Kami offers,” confirms Thoa. “It’s a bit different as the climbing spots are smaller. So, for instance, we added an energy mechanic to replace the survival elements.

“Instead of risking your life in a huge ascent over several days, you tackle a one-day challenge, and you have to manage your fatigue and resources in order to climb the spot before getting too tired. But that’s also where exploring becomes useful, as you can find items to get you back on your feet.”

(Image credit: The Game Bakers)

I found I needed them too, as a useful way to restock key resources such as chalk and energy to make these tougher climbs more achievable. It still didn’t prevent me from repeated failures, but I felt that same rush of stubbornness and perseverance that gripped me in the original game coming back. It’s a feeling Thoa wants players to feel when they return to Cairn.

“They should first experience the bittersweet nostalgia of coming back to the unique experience of Cairn, and then they should quite soon after find out that it’s still a game that makes your hands sweat! The thrill should still be there.”

I definitely felt it even in the short demo I had. Truth is, I’ve been keen to return to the game since the DLC was first announced, and even though a delay has meant I’ve had to wait a little longer, The Game Bakers recently confirmed that Cairn: On the Trail - Deep Water will launch on October 29 on PC and PS5.

• Amazfit has unveiled the T-Rex Dual Solar smartwatch
• It offers solar charging on an AMOLED watch — a feat not even Garmin has managed
• As well as charging from the front, the innovative back plate allows the wearer to invert the watch for maximum light absorption

In a world in which most smartwatches now have the same features and similar specs, it's always nice to see something innovative. The Amazfit T-Rex line is a range of rugged adventure-focused smartwatches that are generally — like almost all of Amazfit's products — great value alternatives to more expensive wearables such as the best Garmin watches.

Despite focusing on solar charging, as seen on some top-tier Garmin watches such as the Fenix 9 Pro, the T-Rex Dual Solar brings innovation all of its own. Amazfit's newest smartwatch not only provides battery-lengthening solar charging from the front, but also a secondary, more efficient solar charging plate on the back of the watch. With enough sunlight, this back plate can reportedly revive a completely flat battery. That means if you're out of power, you could invert the watch and wear it inside-out, or leave it on a rock with the back plate facing the sun, to bring it back to life.

Amazfit says that "for those who adventure at the edge of the map, solar offers something more: a way to bring a completely depleted watch back to life using sunlight when traditional power isn’t available, helping users regain access to essential functions like maps and route information."

However, the most interesting bit is that Amazfit has finally cracked what Garmin has not been able to, as yet: bring solar charging to an AMOLED watch. The Amazfit Dual Solar, as its name suggests, charges from both sides, even though it's got a bright AMOLED screen, as long as you're in conditions of 50,000 lux or more for three hours or more. Without exception, Solar charging Garmin watches uses lower-power memory-in-pixel displays in conjunction with Garmin's Power Glass solar charging tech.

Sara Webster Wylie, VP of Global Marketing at Amazfit, says: “With T-Rex Dual Solar, we didn’t want users to have to choose between the bright, premium display they want every day and the battery endurance they need outdoors. Bringing AMOLED and solar together for the first time lets us deliver both.”

Other specs & pricing

(Image credit: Amazfit)

In normal conditions, the watch packs up to 25 days of battery life, extended up to 35 days in optimal solar conditions, and 41 hours of use in 'accurate GPS mode'. A flashlight with red and white modes is built into the titanium casing, while its sapphire crystal screen is capable of up to 3,000 nits of brightness.

With full color preloaded maps (including ski maps), intelligent route planning with turn-by-turn directions and Apple Watch Ultra-style waypoints, and LiveShare (Amazfit's equivalent of Garmin's LiveTrack location-sharing feature), it's certainly a powerhouse of a watch.

Unusually for Amazfit, it's also very expensive, priced at $649.99 in the US. Other regions' pricing is TBC, but that's around £500 / AU$900. Having seen what Amazfit can do with budget devices such as its five-star Amazfit Active 3 Premium, I'm excited to get my hands on a high-end model.

A desktop PC makes a lot of sense when you want plenty of processing power, storage and connectivity without paying over the top. Best Buy has reduced the price of the HP OmniDesk, a powerful, modern computer that stands out thanks to its distinctive dark wood case.

• Best for: Creatives and professionals who want plenty of processing power and memory for demanding applications without paying for a dedicated graphics card they don't need.

• The deal: The HP OmniDesk is $1,398 (was $1,499) at Best Buy, saving you a solid $101, or around 7%, off the usual price.

• Why it matters: It looks good and inside you get a 20-core Intel Core Ultra 7 265 processor, 32GB of DDR5-5600 memory and a 1TB PCIe 4.0 SSD with support for up to 64GB of RAM and two M.2 slots for future storage expansion.

Omnidesk Desktop: was $1499 now $1398
The HP OmniDesk features a 20-core Intel Core Ultra 7 265 processor, 32GB DDR5-5600 memory, 1TB PCIe 4.0 SSD, integrated Intel Graphics, Wi-Fi 6, Ethernet and ten USB ports.View Deal

Why we recommend it

The OmniDesk looks distinctive and classy with its dark wood finish, but it's definitely not a case of style over substance. Inside, the 20-core Intel Core Ultra 7 265 can boost up to 5.3GHz and has 30MB of L3 cache, providing plenty of processing power for demanding workloads. There's 32GB of DDR5-5600 memory and a 1TB PCIe 4.0 SSD. You also get 10 USB ports split between eight USB-A and two USB-C connections, as well as HDMI, DisplayPort, Ethernet, Wi-Fi 6 and Bluetooth.

Price context & historical value

The $101 reduction from $1,499 to $1,398 isn't enormous at around 7%, but it's still a decent saving on a relatively expensive desktop. It isn't the cheapest we've seen it however. The desktop was on sale at Best Buy for $930 earlier in the year.

For further choices, take a look at our round up of the best business computers we've tested.

Should you buy it?

✅ Buy the HP OmniDesk Desktop if...

You want a desktop with a powerful processor, 32GB of DDR5 memory, and a fast 1TB SSD. The dark wood finish adds warmth and personality, meaning the PC will fit beautifully into home offices or living spaces, blending in with furniture rather than clashing with it.

❌ Skip the HP OmniDesk Desktop if...

You need powerful performance for GPU-intensive rendering and 3D work that will benefit heavily from a dedicated graphics card. This configuration relies on integrated Intel Graphics rather than a discrete GPU.

• Shop all desktop PCs at Best Buy

• BigCommerce confirms supply‑chain breach via compromised Ribon app credentials affecting merchant storefronts
• Master of Malt notified customers: names, emails, phone numbers, and addresses were exposed
• Attack ran Sept 13–17 2026; ICO notified, law firm warns of phishing risks for affected retailers

Ecommerce platform BigCommerce was recently hit with a cyberattack in which it lost sensitive data belonging to some of its users.

One of the users - online spirits retailer Master of Malt - confirmed the hit and notified its customers that their personally identifiable information (PII) was accessed in the attack.

BigCommerce is an ecommerce platform relatively similar to Shopify. Businesses use it to build and operate online stores without needing to develop the entire commerce infrastructure themselves. It offers features like storefronts, shopping carts, integrations with different payment providers, product inventories, SEO and marketing tools, and more.

The platform has been around since 2009 and according to a late 2024 SEC filing, serves 5,884 accounts with at least one unique enterprise plan subscription. A 2025 press release says BigCommerce is used by “tens of thousands of B2C and B2B companies across 150 countries.”

Software supply chain attack

BigCommerce allows its users to install, among others, a third-party app called Ribon, an ecommerce app providing tools that improve the online shopping experience. Some merchants integrate Ribon into their stores to add different functionality to the customer-facing storefront, and to optimize how visitors interact with different elements of their website. We don’t know exactly how many stores use Ribon.

According to Master of Malt, unidentified threat actors managed to compromise a BigCommerce Application key held by Ribon, and used it to access customer data that was held on their system. The attack took place on Sunday, September 13 2026, until the access was finally revoked four days later, on September 17.

Speaking to BleepingComputer, BigCommerce said credentials for Ribon and Ribon 1.5 were compromised:

"On September 17, 2026, Commerce confirmed that credentials belonging to third-party applications Ribon and Ribon 1.5, owned and operated by 'Be A Part Of,' a Fastr company, had been compromised and used to inject malicious scripts into a small number of merchant storefronts,” the statement reads. "Acting in the best interest of our customers and their shoppers, we uninstalled the application from affected stores to revoke the attacker's access, notified those merchants directly, and are providing log data to support the developer's investigation," the company told the publication.

The keyword in this statement is “small number of merchant storefronts.” BigCommerce hints that the attack was relatively small in scope and, consequently, in damage. However, in its report Master of Malt says otherwise:

“It’s now clear that we weren’t the target of the attack. The attack was against Ribon, which was installed on hundreds of BigCommerce stores. Once the attackers compromised an access key from Ribon, they used it to access data held inside BigCommerce.”

Names and emails

Whether or not this transforms into a new Snowflake fiasco remains to be seen.

In the meantime, Master of Malt also said BigCommerce notified it that the attack had been stopped and that there was no further risk of compromise. All companies affected by the breach were contacted. As for the spirits retailer, here is what it said about the data exposed in the hit:

“I’m sorry to say that the attackers had access to your name, email address, phone number, and address. However, they were not able to access your password, credit card or other payment information as they are held in a separate system which was never compromised.”

Master of Malt reported the attack to the UK Information Commissioner’s Office (ICO). Law firm Emery Reddy is calling for potential claimants to the incidents, saying that “several retailers” are currently notifying customers about data exposure related to the incident, BleepingComputer reported.

“A number of online retailers that use the BigCommerce e-commerce platform have begun notifying customers of a data breach that originated not with the retailers themselves, but with a third-party application called Ribon,” the law firm says. Emery Reddy also warned of potential phishing and scam attacks.

One of the unexpected consequences of freely available AI tools like Gemini, Claude, and ChatGPT has been the rise of what’s quickly becoming known as ‘grandmaslop’. It seems that grandparents are filling their family albums with AI versions of pictures of their grandchildren and sending them to their kids.

When it comes to using generative AI on family photos, at least, the trend has exposed a striking generational divide.

“I'm Gen X, but my Boomer mom made a whole AI book for both of my kids. It was bizarre,” said one Reddit user, commenting on the rise of grandmaslop. “I think the weirdest part is, if photos are our way of immortalizing a moment in time for the sake of our memories, then what is an AI-generated image, if it's a moment of time that never existed?” asked another user.

Storybooks of slop

The ease of use of AI tools means that grandparents are creating whole storybooks of slop featuring their grandkids and emailing them to their kids.

“The books are crap, all have the same AI slop cartoon styling and the stories make no sense and have horrible meter”, said another Reddit user. “One was a rhyming book that had words that didn’t rhyme.”

The new phenomenon of 'grandmaslop' seems to be a perfect example of a topic that reveals the generational divide in approaches to AI. One user suggests that perhaps for a lot of people the concept and proof of a relationship is more important than the execution of an art project.

Another user agrees and wryly adds, “My father is the proudest grandparent in the world. He tells everyone how much he loves the grandkids he never sees, so that tracks”.

What’s interesting is that when it comes to the workplace, a Randstad report measuring AI adoption rates put Millennials as the quickest adopters of AI in their jobs, significantly more than GenZ, Gen X, and Boomers, with 50% of Millennials using AI compared to just 19% of Boomers and 34% of Gen X. “Their proficiency with Generation AI tools surpasses other generations, marking them as key players in the current AI landscape within workplaces”, says the report.

When it comes to their kids, however, Millennials apparently would rather leave AI out of the picture.

(Image credit: Shutterstock / Studio Romantic)A generational divide

I think there’s something else going on here. Digging deeper into the thread on Reddit, it quickly descended into general grievances about the lack of effort grandparents show with their grandkids.

There seems to be a general level of resentment for the privileges that Boomer grandparents have enjoyed due to growing up in different economic circumstances and the general lack of effort parents perceive in them wanting to see their grandchildren, despite having the opportunities to do so. For example:

“My parents never miss an opportunity to say how much they miss the grandkids and wish they could see them more often, and it takes every ounce of my strength not to point out they're both retired and in good health, have $80k/yr worth of pensions and social security, investment accounts worth close to $1mm, and live in a paid-off house.”

Perhaps the visceral reaction to ‘grandmaslop’ is really just the most visible tip of a much larger iceberg of resentment about the lack of effort put into grandparenting, and a generational divide that’s as much economic and cultural as it is to do with attitudes to AI.

After all, there’s nothing inherently wrong with a grandparent making a silly AI picture of their grandkids riding a dinosaur or flying through space. Some children will probably love it. But when an AI-generated storybook arrives from a grandparent who rarely turns up in person, it can start to look like another shortcut.

And perhaps that’s why ‘grandmaslop’ has touched such a nerve. The problem isn’t really that Grandma has discovered ChatGPT. It’s that, for some parents at least, generative AI has made it possible to simulate the effort they wish their children were getting for real.

• Creative Assembly says Alien: Isolation 2 is still influenced by the iconic film, despite the outdoor setting
• Principal environment artist Archie Whitehead says the environment had to be showcased "through the lens of someone from the 1970s"
• Principal UI artist Laura Mouther says the team is "not reinventing the wheel" and is still using a lot of inspiration from the first movie and game

Alien: Isolation 2 is still inspired by the first Alien movie, even though the game features a new outdoor setting, but Creative Assembly had to make sure the environment felt authentic to its iconic retro-futuristic aesthetic.

Like Ridley Scott's 1979 Alien, Alien Isolation takes place inside a space station, isolating the player in a claustrophobic environment as a Xenomorph hunts them. However, the sequel features an outdoor colony world and the confines of a Weyland-Yutani outpost, giving the studio a new opportunity to expand exploration and find new ways to adapt the movie's iconic style.

Speaking to TechRadar Gaming at Gamescom, principal environment artist Archie Whitehead didn't want to spoil the setting too much, suggesting players are in for some surprises as they explore the game's outdoor mining colony, with principal UI artist Laura Mouther explaining that the team is "not reinventing the wheel" and is still using a lot of inspiration from the first movie and the first game.

"The first movie is the lens we're looking through everything at," Mouther said. "It's our guiding step. And when it comes to new, we're really excited about introducing new retrofitting tech," she added before using a CRT computer as an example of how it would be damaged in an outdoor setting.

"I can maybe give you an idea of our approach to it," she said. "We think about it now that you have to be indoors and outdoors; obviously, things need to adapt. I have a CRT monitor on my workstation as my third monitor; there are holes on the top in the back. Obviously, if I put that outside and it's raining, it's gonna go kaput, right? So, we need to make sure that we're adapting the things that we have seen in the first movie and in the first game to be believable in this outdoor environment. [So] it makes sense."

Whitehead added that it has to be showcased "through the lens of someone from the 1970s" because things like LEDs and LCD panels didn't exist back then.

"As an environment artist, I'm making design decisions all the time when modeling something about the shapes used; where's a vent, where's this?" Whitehead said, adding that it would be easy to add "generic" shapes, but he and the team used movie set photos and imagery to "dissect" how to build these assets players will see in the environment.

"Sometimes it feels like yogurt pots," he joked. "It's a lot of vacuum form shapes. They even had some parts of it; I think it was a bomber from the Second World War. They got some stuff from the scrapyard.

"So looking at what they had and working out how to recontextualize those things when creating a new design, and just making sure that whenever we reference stuff, we don't reference anything from beyond that point because those manufacturing techniques and those materials didn't exist yet, so they shouldn't be here."

Alien: Isolation 2 will be available on PS5, Xbox Series X and Series S, Nintendo Switch 2, and PC. A release date hasn't been announced.

• The second iOS 27.2 developer beta has landed, and code points to several upcoming features
• These include an anti-snatching tool, so the phone locks itself if it detects a sharp grab or when disconnected from your Apple Watch
• There are changes hinted at for Shortcuts, Apple Music, and CarPlay Ultra too

The second iOS 27.2 developer beta has now landed, and while on the face of it this doesn’t look much different to the first beta, behind the scenes there’s quite a lot of new stuff to find.

Digging into the code, 9to5Mac has found more details of an anti-snatching feature that we’ve previously reported on. This as-yet-unannounced feature is apparently called ‘AutoLock’ internally at Apple, and is designed to lock your phone if a thief grabs it.

It sounds similar then to Android’s Theft Detection Lock, and the code in this beta suggests that it would use various signals to tell whether an iPhone has been stolen, such as a sharp acceleration (which could happen when a phone is first snatched), loss of connectivity to a paired Apple Watch, a paired Apple Watch being unreachable, prolonged loss of network activity, or the device remaining unlocked for a certain period of time.

Any of these things could trigger an iPhone to automatically lock itself, but there are also references to safeguards aimed at preventing false positives. These include things like successful biometric authentication, and certain innocent app activities that could otherwise be signs of theft.

Other hidden features

Here’s the new album release countdown on iPhone, coming soon to Apple Music.Featuring a very satisfying numeric text content transition. https://t.co/SIwlvlt9lB pic.twitter.com/stuBUYPoWJSeptember 19, 2026

On top of this, as spotted by X user @itspdfu (via 9to5Mac) iOS 27.2 beta 2 also includes code for a new album release countdown in Apple Music, and for the ability to support actions from third-party apps in Shortcuts new ‘Describe a Shortcut’ tool. So you’ll be able to include third-party apps in shortcuts built using natural language, rather than having to use the old shortcut builder.

Finally, @aaronp613 has found evidence that CarPlay Ultra will soon offer a ‘Drive Mode Theme’, allowing you to change things like the gauge style and color. Though right now CarPlay Ultra is only available on Aston Martin vehicles, so this might be of limited usefulness.

Of course there’s the usual caveat with all this that while Apple is seemingly working on these features, we can’t be sure of if or when they’ll actually launch. But they all sound like worthwhile upgrades, so hopefully they will roll out — and soon.

• iOS users are seeing ‘ads’ for other Apple products on their iPhones
• The banners promote services like iCloud+, Apple Music and AppleCare+
• The messages often can’t be dismissed and stick around for weeks

If you were to ask iOS users how they felt about Apple’s decision to insert ads into Apple Maps, it would quickly become obvious that it was not a popular move. So when iPhone fans discovered that Apple has been inserting prompts for its own products into iOS, the reaction was predictably swift and furious.

The ‘ads’ in question appear in the Settings app in iOS. They can be found near the top of the iPhone’s display and promote several products to the user, including paid-for iCloud+ storage, free trials for services like Apple Music and Apple TV, and the AppleCare+ extended warranty.

Infuriatingly for iOS users, the only way to disable these promos is to either let them expire — which in many cases could take weeks or even months, leaving a persistent notification badge on the Settings app in the meantime — or pay for the service being offered. There is not always a “dismiss” button to shoo them away for good, and when there is, some people have reported that it doesn’t seem to work.

Many people have taken to social media to vent their frustrations with Apple’s actions. “I’m feeling like this is nearly on-par with the ens***ification that Microsoft introduced with Start menu ads,” said one aggravated user. “I wish Apple would just stop that crap,” stated another. Many other people have taken to Reddit to express their exasperation, suggesting that the discontent is widespread.

Some of these ads and offers — such as the one for Apple Music — appear after you’ve bought a new Apple product. With the company launching the iPhone Duo and iPhone 18 Pro range recently, it’s perhaps unsurprising that we’re seeing a sudden influx of posts flush with irritation and indignation.

Apple’s services push

(Image credit: Future)

On the face of it, Apple’s decision to include promotions like this in its operating system might seem like a strange one. After all, Apple has long positioned itself as a premium company where the user experience is paramount. From that viewpoint, repeatedly attempting to prod customers towards even more of the company’s products might seem cheap, even distasteful. And when you’ve just shelled out a record fee for an iPhone after Apple’s painful price rises, that can just feel like nickel and diming.

But Apple has been putting increasing emphasis on its services in recent years, of which products like iCloud+, Apple Music, Apple TV and AppleCare+ are all a part. With limited room for growth in the smartphone market, the company is turning to areas where it thinks it can make more progress.

And unfortunately for users, that means more ads like this on their devices. While they are far from the most obnoxious ads around, the fact that many cannot be dismissed is clearly rubbing users the wrong way — as is the fact that the promos even exist at all in an Apple product.

There is also the possibility that at least some of these adverts are appearing due to a bug. The iCloud+ one in particular has drawn comments from users who are already subscribed to iCloud+ and thus, one would think, should not need to see any ads like this. Time will tell how that plays out and whether Apple fixes this ‘bug’ or leaves the ads in place. If the latter transpires, it would suggest that they are not appearing erroneously.

With Apple’s services push showing no signs of slowing down and further ads supposedly planned for the likes of the firm’s Visual Intelligence system, don’t expect Apple to have a change of heart any time soon.

• Principal environment artist Archie Whitehead says Alien: Isolation 2's custom lighting and audio tech allowed it to create a more "realistic" atmosphere
• He says just using Unreal Engine 5 wasn't enough, since the engine is "optimized for usually quite bright scenes"
• Custom lighting allowed the team to design "reactivity" in the environment

Alien: Isolation 2's custom audio and lighting technology has enabled Creative Assembly to create a more authentic atmosphere that it couldn't fully achieve with just Unreal Engine 5.

In an interview with TechRadar Gaming at Gamescom, Creative Assembly principal environment artist Archie Whitehead and principal UI artist Laura Mouther shared more about developing the sequel with Unreal Engine 5 and the studio's custom technology, which it previously told us was an "evolution" of what fans are familiar with.

"For horror, audio and lighting are the two Powerman things," Whitehead said. "Unreal gave us a great base, but we felt that to do certain things, it [custom tech] really, really helps."

One of those things, particularly with lighting, was "reactivity," which would offer visual effects from things like weather and other environmental assets, creating a more realistic atmosphere.

"We wanted a thunderclap, like fire flickering, sirens spinning, all of that stuff," he continued. "We felt that a custom solution would give us that perfect frame response that you want in that really, really dark environment. You know, Lumens [UE5's global illumination and reflections system] is optimized for usually quite brighter scenes."

The developer explained that the team struggled with showcasing metals in the game's darker exterior environment, saying, "Metals in virtual worlds are really difficult."

He added, "The color of metal is actually just what's being reflected, right? And the problem is all of our scenes are really dark, so for the metal to behave properly, it's quite a tricky balance to strike. So that's one of the things that our lighting system helps us with."

The game's audio system has also improved, with Whitehead reiterating that it's an "evolution" of what the first game offered, but was iterated on again and again.

"Since then, it's been used for other CA projects, so it's quite mature," he said. "And it creates a kind of spatial setup of the world. And what that means is, when a sound happens in a room that is — a vent away from you or something — that sound is being reverberated around, and you get a really, really realistic response, and hopefully a really, really terrifying version of that sound."

Alien: Isolation 2 is now in development and will launch on PS5, Xbox Series X and Series S, Nintendo Switch 2, and PC.

• Apparently Nvidia's not launching RTX 6000 GPUs until 2028
• A leaker claims that these graphics cards have been delayed from the 2027 debut Nvidia originally planned
• Pushing back these GPUs makes sense given the RAM crisis, and some gamers are happy to wait anyway

Nvidia has pushed back its timeframe for launching next-generation graphics cards for gamers, and we're now hearing they won't arrive until 2028.

As ever, all this is theoretical – Nvidia hasn't uttered a peep about its RTX 6000 GPUs officially – but according to Kopite7kimi, a well-known leaker on X (via TweakTown), these products are now destined for a 2028 release which "means they have postponed again."

In other words, Nvidia was supposedly looking at a launch for next year, but the leaker now believes that isn't the case.

Another leaker, Moore's Law is Dead on YouTube, recently said that Nvidia is planning a 2027 launch for the RTX 6000 series, so this directly contradicts that idea. However, it's possible that this was the case, but Team Green has only just changed its mind.

Analysis: a sensible move

(Image credit: Shutterstock / Monkey Business Images)

Of course, both of these assertions are just rumors, and we need to regard them with an equal amount of caution – but I think it makes more sense for Nvidia to delay the release of its next-gen GeForce GPUs until 2028.

Why? I have three predictable words for you: the RAM crisis. With the memory shortage – which also impacts video RAM – rapidly worsening as 2026 progresses, and predicted to descend further into nightmarish pricing territory in 2027, next year seems like a bad move for launching a family of next-gen GPUs.

Especially when you consider that the first graphics cards to emerge will doubtless be the flagship RTX 6090 and the 6080. How expensive will they be in such a climate, given that the RTX 5080 is already exorbitantly priced? The latter has reached around $1,500 in the US at this point, and is at similar levels in other regions, such as £1,350 in the UK (that's the cheapest GPU in both cases at the time of writing, I should make clear). And let's not even talk about the RTX 5090 which has got completely ridiculous.

Remember that these next-gen GPUs are going to require more memory to be an upgrade over their predecessors, and are also likely to use more expensive VRAM modules.

3GB modules will likely be used by Nvidia, or maybe even 4GB or 6GB chips, which as Wccftech reports, are rumored to debut in the next year or two (which would align with a 2028 release for RTX 6000, in theory). That's according to another prominent leaker over in Asia, Golden Pig Upgrade, as posted on Weibo.

All expectations are for the RTX 6000 series to be pricey, which is why launching them at what might be the height of the RAM crisis – 2027, going by current predictions – doesn't make a whole lot of sense. The following year seems a lot more likely, when hopefully the crisis has started to settle down and pricing is at least stabilizing to some extent (although some believe we're looking longer term for that to happen, more towards 2030).

Whatever the case, some gamers are getting jaded with the market. One of the replies to Kopite7kimi's post on X simply says of the next generation of Nvidia GeForce GPUs: "Nobody cares, nobody can afford it anyway." Others – like this Redditor, who says "I'd rather they delayed the launch to consumers" – indicate that they're happy enough to wait due to pricing or stock issues (launch quantities of GPUs would likely be thin on the ground).

The other question is whether we'll see those RTX 5000 Super refreshes that have been long rumored. I'm doubtful at this point, and I think Nvidia may be inclined to rely more on the AI and software side of the equation, principally DLSS 5, to impress gamers, rather than new (stupidly pricey) hardware.

Technology is constantly evolving, and with that comes increasing pressure on those working in the sector. It's no surprise, then, that technology ranks among the industries with the highest levels of work-related stress, contributing to around 550,000 working days lost over three years according to the Health and Safety Executive in 2024.

Stress rarely appears overnight. It builds over time through heavy workloads, unclear expectations, limited support and constantly shifting priorities. Too often, leaders only recognize the problem once an employee has reached burnout.

Managing stress shouldn't be seen solely as an individual's responsibility. Leaders play a vital role in creating environments where people feel supported, can raise concerns early and have the tools they need to manage pressure before it becomes overwhelming.

By recognizing the warning signs and making a few practical changes, leaders can help prevent stress from escalating into burnout.

1. Understand how and why individuals respond differently

Two employees can face exactly the same challenge but respond in completely different ways. One useful way of understanding these differences is through Kirton's Adaption-Innovation (KAI) Theory. Developed by psychologist Dr Michael Kirton, the theory suggests people naturally approach change and problem-solving in different ways.

More adaptive individuals tend to prefer structure, established processes and incremental improvements, while more innovative individuals are often more comfortable with ambiguity, risk taking and finding entirely new solutions. Most people fall somewhere between the two.

Neither style is better than the other, but each can bring different sources of stress. More adaptive employees may struggle with unclear roles, changing priorities or a lack of structure, while more innovative employees can become frustrated by rigid processes or repetitive work.

Understanding how individuals prefer to work allows leaders to allocate work more effectively, helping employees perform at their best while reducing unnecessary pressure.

2. Create a culture of asking questions

Many employees struggle to admit when they need help. We are often taught this is a sign of weakness and an indicator of capability.

Creating a culture of trust changes that. When people feel comfortable raising concerns, asking questions or admitting they are struggling, problems can be addressed before they become unmanageable.

Leaders set the tone. Asking for feedback, acknowledging your own mistakes and responding positively when employees raise concerns all help create psychological safety within a team. An open culture also makes it much easier to recognize when someone is beginning to struggle.

Changes such as withdrawing from colleagues, becoming more irritable, missing deadlines or struggling to prioritize work are often viewed as performance issues, when they may actually be signs of mounting stress.

Regular conversations, rather than relying solely on formal performance reviews, give leaders the opportunity to identify these warning signs early. Simple adjustments, such as redistributing workloads, clarifying priorities or removing unnecessary obstacles, can prevent stress from developing into burnout.

3.Observe your team to identify stress early

Stress rarely appears suddenly. It can build gradually, making it difficult to recognize until it begins to affect an employee's wellbeing or performance.

While you may be aware that a particular task or deadline is likely to create pressure, it can be harder to spot when longer-term stress is beginning to affect your team. Changes in behaviour can be early warning signs. An employee may start to withdraw from colleagues, become more irritable or defensive, miss deadlines or struggle to prioritize their workload.

As leaders, we can be quick to interpret these changes as performance issues. However, they may be indicators that someone is experiencing stress and needs additional support.

Regular check-ins, rather than relying solely on formal performance reviews, give leaders an opportunity to understand what's happening and address problems early. By noticing these changes, leaders can redistribute workloads, adjust expectations or remove obstacles before stress develops into burnout.

4. Give your employees control

Many employees experience stress because they feel they have little control over their work. Those in the technology sector often face tight deadlines, changing priorities, and high expectations. While we cannot remove all these pressures, we can provide autonomy to employees to help them be more successful.

Greater autonomy doesn't mean removing direction altogether. Leaders still need to set realistic expectations and help teams distinguish between what's genuinely urgent and what can wait. As a leader, you need to help your employees set realistic goals. You can help employees recognize what is urgent and prioritize their tasks effectively.

Employees who provide input and contribute in this way feel more in control and experience a higher level of buy in to team goals.

5. Create a culture that prioritizes recovery

We often mistake short-term performance for sustainable outcomes. However, we require time to recover not just as a reward, but as consistent practice. Employees need to be encouraged to take time to recuperate.

As a leader, the tone you set is seen and mimicked. If you’re not taking regular breaks, working at all hours of the night, and pushing through exhaustion, your employees will feel they need to do the same. Consider your own habits and then promote celebrating breaks, disconnection outside of working hours, using leave time, and establishing work-life balance.

It is easy to say, “do as I say not as I do.” However, this culture starts with you. Taking time to recover yourself helps you avoid burnout and be a better leader overall. It will also lead to long-term sustained performance over short bursts of success.

Stress will always be a part of the workplace. The goal is not to remove stress, but to prevent burnout and sustain performance.

As a leader, the ability to help your employees reduce stress is a shared responsibility between the individual, yourself, and your team. By understanding how individuals solve problems, creating an environment of trust, observing stress early on, increasing employee autonomy, and promoting recovery time, your organization can retain talent and build a healthier and more productive workforce.

We've featured the best HR software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Meta reaches agreement to allow Prospect union access to UK employees
• New reforms under the Employment Rights Act 2025 come into force in October 2026
• Despite slipping steadily, UK union membership could see a major bounce back

Meta has reached an agreement with Prospect union to allow access to its UK employees to speak about membership opportunities.

The move comes as a deadline for compliance with new union membership rules under the Employment Rights Act 2025 looms in October 2026.

Under the agreement, Prospect will have access to all 5,000 of Meta’s UK employees, allowing the union to talk to Meta workers about the benefits of union membership and recruit workers.

New union rules strengthen UK workers

A spokesperson for Meta said, “Employees who want to find out more about union membership have a straightforward way to do so. Meta's industrial relations team already works with employee representative groups in multiple markets, and we are approaching this in the same way.”

Initial trade union reforms as part of the Employment Rights Act 2025 took effect in February of this year. But subsequent reforms, due to take effect on 30 October, add additional requirements for employers to inform workers of their right to join a union, provide greater access for unions to workplaces, add additional protections for union representatives, and give workers greater protections when taking industrial action.

Meta is therefore providing Prospect with access to Meta employees ahead of the deadline, which Mike Clancy, General Secretary of Prospect, said “is to Meta’s credit that they have struck this voluntary deal with Prospect, rather than waiting for the new Right of Access to kick in, sending a positive message to staff that they are open to engaging with a union.”

Prospect currently has over 160,000 UK workers within its membership pool, covering technology, broadcasting, creative industries, defense and education.

The beginnings of a UK union bounce back?

According to official statistics from the UK Department for Business & Trade, union membership has been on a steady decline. In 1995, 28.8% of those in employment belonged to a union. But by 2025, this number has reached a historic low of just 19.9%.

Ahead of the reforms introduced by the Employment Rights Bill, union membership as a percentage of those in employment rose to 20.4% in 2025, potentially being bolstered ahead of the Bill’s formal introduction.

There are a number of reasons for the steady decline in union membership - some good, and some bad. The UK economy shifting away from industrial industries that traditionally held union-heavy employment is one of the most significant factors.

But Anti-union legislation introduced under Margaret Thatcher’s premiership during the 1990s also weakened the power of unions significantly. Unions lost legal protections against strikes, outlawed sympathy strikes, and introduced mandatory secret votes on union leadership ahead of strike action.

New rules introduced as part of employment protections and regulations - such as the minimum wage introduced in 1998 - have also reduced the need for unions to negotiate fair pay or organise industrial action in events of extreme unfairness.

Looking forward, the rapid introduction of AI to UK industries and the fear of job displacement are also likely fueling union membership in the UK.

Ask a UK bank for investment advice, and you get a lawful recommendation. If it was negligent, you will have the right to make a claim using the Financial Services Compensation Scheme.

Ask ChatGPT, or, more fashionable, Claude, the same question and you get nothing. Just an answer, but it will be delivered with a more confident tone, no matter whether it's right or absolutely wrong.

Despite that, more than a quarter of UK consumers now say they trust AI chatbots for money advice. The Financial Conduct Authority found this figure and flagged it as a live concern in its most recent review.

Other surveys found even higher figures. STRAT7 found 55% of UK adults have used AI for financial guidance, Sky News reported 40%, and EY's global study measured Gen Z adoption at 68%. Whatever the precise number is, the direction is the same.

People have started to trust AI more and more in their financial decisions. But the debate about it has, so far, been asking the wrong question.

What is the wrong question?

Most publications today focus on accuracy, and what everyone wants to know is whether the AI's advice is good. But is it?

In one study, there were five real financial scenarios passed to major chatbots, and the output was compared to certified financial planners. The result was unsurprising, though. The bots reliably missed emotional and situational context, so personal decisions turned to rough spreadsheet logic that missed important input.

Sky News has conducted a similar test, where three chatbots were given £16,000 in real savings. What they found was that the recommendations were US-biased and incomplete.

Most alarming, it was an investigation which found Claude incorrectly described Binance as FCA-registered when advising a beginner on cryptocurrency. Binance was, in fact, ordered to cease UK-regulated activity back in 2021.

AI’s misleading outputs sound disturbing, but what is even worse is that it is only one part of the problem. Things get harder after the incorrect advice has already been given, acted on, and gone wrong.

So, when it happens, who takes the blame? Nobody is the answer, although it’s quite uncomfortable to hear.

The FCA has noted the same. In its 2026 report, the regulator confirmed that LLM platforms such as ChatGPT and Claude sit entirely outside its regulatory remit. This means that consumers using them for financial guidance are not receiving regulated advice. Therefore, they have no access to the Financial Ombudsman Service (or the Financial Services Compensation Scheme) if things go wrong.

That said, the safety net simply does not apply the moment consumers paste a question into a chatbot.

The regulatory gap explained

To understand why this gap exists, let’s understand how UK financial regulation actually works. The regulatory perimeter is activity-based, not technology-based. This means what matters most is what is being done, not how.

A firm that provides personalized recommendations on the purchase, sale, or holding of certain assets is engaged in regulated activity, regardless of whether those recommendations are provided by a person or an algorithm.

The problem is that AI chatbots occupy a new space. They are not marketed as financial advisers, so they don't claim to be regulated. And technically, in most cases, they are not offering advice in the strict legal sense — they are responding to open questions.

Again, this ambiguity was addressed in the FCA report. The Mills Review highlights that AI platforms may influence consumers’ financial decisions without clearly implementing regulated actions. As a consequence, this creates a serious blank space between the actual financial impact and the protection provided by regulatory authorities.

The review's main recommendation was for the FCA to officially revise the scope for receiving financial recommendations developed using AI tools. So, this process is ongoing, and further updates will be available only after a few months, or even more.

The consumer protection problem and what fintech can do

While there is no law so far protecting ordinary people, what should we do? Can fintechs close this gap, at least for now?

First of all, waiting for the FCA perimeter check to be completed is not a strategy. It’s better to start by separating information from personalization, especially if your company has an AI assistant.

The thing is that the boundaries of recommendations depend on whether the conclusion is adapted to the specific circumstances of a particular person. The tool that generally explains what an ETF is is in a completely different regulatory status than the one that says how much you should invest in funds.

Also, make sure the disclaimer does real work. The footer text “not financial advice,” located below a specific recommendation, will not pass regulatory checks. The FCA evaluates content, not form. If the output data looks like a personalized recommendation, the tiny disclaimers will not reclassify it.

Although many people use AI today, do not overuse it to earn trust. An analysis of more than 330 million reviews showed that mentions of interaction with AI are rated, on average, at just 1.7 points, compared to 3.7 points for reviews that do not mention AI.

Final words

Surely, there will be some people who continue to use AI directly for financial advice, and their number will grow. For them, I can say only one thing: be careful about who you trust with your earnings. If no one is accountable, maybe not treating it as a rulebook will save you from losses.

But fintechs should start building the accountable version of their business, with an audit trail and a human above the AI layer. So when the machine says "yes," someone is actually standing behind that answer.

We've featured the best AI website builder.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Apple unveils its Music Hall in Battersea Power Station, London
• Space for live music, but also a place for recording said music
• All performances can be recorded in Spatial Audio

If you love listing to acoustic sets, live recordings or unplugged sessions from your favorite artists, then Apple Music's new announcement might make it your go-to streaming service for this kind of recording.

London's Battersea Power Station, an iconic Art Deco power station once famous for its use in Pink Floyd album artwork (that's since been turned into a rather soulless shopping mall) now plays host to the Apple Music Hall. This, of course, levels up the location's artistic merits, joining the The Cinema in the Power Station, which this writer argues is the best movie theater he's ever been to.

Apple Music Hall is a 600-seater venue, with a 48-speaker surround sound system (that's 12.5 people per speaker, if the venue is at capacity). But its appeal isn't just for people who can hop on the London Underground's Northern Line and navigate the winding halls of the Power Station.

The space also houses a production facility, which can be used for live or post-performance mixing. That means performances at the Apple Music Hall can be recorded and mixed incredibly quickly, letting Apple Music listeners at home enjoy the set with Spatial Audio and video recordings too.

Apple has confirmed that its Music Hall performances will be live-streamed, so you can tune in easily. It didn't specify that this'll only be to Apple Music subscribers, but (given the heavy investment in such a a venue) it'd be odd for the company to let just anyone tune in and listen.

A place to listen to music

(Image credit: Apple)

Music streaming services are starting to realise that intentional listening is more meaningful than algorithmically-picked background noise which you tune out of. Only a few months ago, Spotify opened a Listening Lounge in London, which is a room with a high-end stereo set-up so you can enjoy quality music in an acoustically-tuned environment.

Listening Lounge is a bit different to the Apple Music Hall, because it's not for live music and you can't simply buy tickets to go, but they share a common theme: it's nice to sit down and spend all of your mental capabilities enjoying music. These will be live streams that you don't put on in the background; you can sit down and enjoy the performances as they happen.

The addition of live artists gives the Apple Music Hall a little extra juice — and if the brand manages to book some good artists, the live streams could be outstanding. I don't mean popular artists, but those with a flair for live performance that'll make the recordings transcend their studio equivalents.

Thankfully, London's a city full of artists, with every street hosting theater bars, record store gigs and open mic nights. Apple doesn't need to open the purse strings and look for the big names, or rely on people with loads of TikTok followers, to get a talented line-up.

No artists have been announced for the venue yet, but after its full opening on September 28, perhaps we'll hear some names. And if, like me, you're a local who might consider going to a gig there, signing up for a newsletter on the Apple Music Hall website will keep you in the know.

In March, Google moved its own post-quantum cryptography (PQC) migration deadline forward to 2029, a full six years ahead of NIST's guidance, and two ahead of the NSA's requirement for national security systems. It was a terrific bit of security signaling, but now it is backed up by a new product-by-product roadmap organized around three risk domains, with milestones attached to named services.

For anyone whose job touches digital trust, the most significant of those three domains is Google’s attempt at enhancing foundational capabilities for cryptographic agility: building flexible systems that can adopt new cryptographic standards with minimal engineering effort as those standards evolve.

The message is that organizations should prepare for a future in which standards, certificate formats, and operational requirements continue to evolve, and evolve regularly, requiring cryptographic agility.

Why quantum risk is already a digital trust problem

Adversaries are already harvesting and storing encrypted data today on the assumption that a future quantum computer will decrypt it (harvest now, decrypt later). Anything with a long confidentiality tail, from health records to national archives to intellectual property, is already exposed to a machine that does not yet exist.

Quantum-resistant algorithms, like ML-DSA, solve the cryptographic problem, but they introduce much larger keys and signatures. Deployed through today's public key infrastructure (PKI), they would inflate or possibly break the systems behind secure connections. Legacy systems and high-latency networks would feel it most.

What is a Merkle Tree Certificate (MTC)?

At the time this article is being written, the most significant development in Google's roadmap may be the easiest to miss. Under Domain 2, Integrity and non-repudiation, a single line reads:

“Google Trust Services, Merkle Tree Certificates, 2028”.

Merkle Tree Certificates (MTCs) are a new kind of website domain certificate designed to keep secure connections fast in the coming era of quantum computers. Today a website proves its identity by presenting a certificate that carries several digital signatures, and the quantum-resistant versions of those signatures are so bulky they would slow down every secure connection on the internet.

MTCs solves this by having the certificate authority (CA) record everything it issues in a public, tamper-evident log, organized as a Merkle tree. Rather than carrying heavy signatures, the website presents a short trail of digital fingerprints showing its certificate sits in that log, and the browser checks the trail against a summary of the log it already received through its normal software updates.

Of note, MTCs do not abandon X.509. They are X.509 certificates, carrying a proof where a signature used to sit, issued alongside conventional directly-signed certificates rather than replacing them.

The result is a certificate that stays small, stands up to quantum computers, and is publicly verifiable by default. For the regular everyday person: we get to keep using the internet fast and uninterrupted with quantum resistance underneath.

MTCs make transparency structural

In today's web PKI, transparency is bolted onto issuance as a separate step. The CA signs a certificate, submits it to independent CT logs, and collects SCTs, each of which is a log's signed promise to publish the certificate within a fixed window. A misbehaving or compromised log can vouch for a certificate that never becomes visible to the monitors watching for misissuance.

MTCs change that relationship. The CA certifies by logging, and a certificate is literally a proof that its entry appears in the CA's public issuance log, verified by the browser on every connection. If it is not in the log, it is not a certificate. Under MTC, transparency does not merely survive the post-quantum transition. It comes out stronger.

Who is developing Merkle Tree Certificates

When the vendor with the dominant browser share proposes a new certificate format and a new root store to hold it, it is reasonable to ask whether the rest of the ecosystem is being consulted or simply informed.

However, MTCs are not Google's alone. At the time of writing, the IETF draft's authors span Google, Apple, Cloudflare, and Geomys. Cloudflare has been involved from the outset, CAs including Sectigo have contributed to the underlying research, and Let's Encrypt publicly committed to MTCs in June 2026. The result will be an open standard any CA can implement, controlled by no single vendor.

The organizations that will shape post-quantum web trust are the ones in the working group now. Root programs, CAs, and large implementers who stay outside it will inherit decisions rather than influence them. That choice is available to everyone, and the window is open today.

How organizations should prepare for MTCs

Google’s 2028 date for MTCs deserves a roadmap's usual caveats. Google ties it to standardization work still in progress at the IETF, and dates like these move. The direction, however, resembles something that seems settled.

Chrome's planned Quantum-resistant Root Store will support quantum-resistant certificates only in the MTC format, not as post-quantum signatures bolted into traditional X.509. Compact classical signatures and X.509 served the web extraordinarily well for three decades, but with the dawn of quantum computing, we are due for a redesign.

For everyone else, the practical implication of Google's roadmap is not that you need MTCs. It is that you need to be capable of adopting them (or whatever else emerges) without a multi-year engineering program. Which is precisely the cryptographic agility Google put at the foundation of its own plan.

In concrete terms, organizations should focus on:

• A complete inventory of certificates and cryptographic assets, because you cannot migrate what you cannot see
• Automated certificate lifecycle management, because shorter certificate lifetimes will make manual processes untenable well before quantum computers arrive
• A written post-quantum roadmap from your CA, which every organization should be asking for

The full scope of what MTCs can do is still coming into focus, and they may not be the only answer the industry ultimately adopts. What is already clear is that organizations that invest in cryptographic agility, certificate lifecycle management, and complete visibility today will be best positioned to adapt as post-quantum standards mature.

The future of digital trust will belong to organizations that can evolve as quickly as the cryptography they depend on.

We've featured the best endpoint protection software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Daredevil: Born Again will end with its third season
• Marvel has wielded the ax on its longest-running live-action Disney+ show
• Its showrunner has also left with the final season deep into post production

Daredevil: Born Again will end with its third season after Marvel called time on the Charlie Cox and Vincent D'Onofrio-led TV show.

Rumors first emerged in the US morning yesterday (September 21) when X/Twitter user HablemonsdecineX claimed it had been canceled. Almost instantly, numerous industry insiders with spotty track records quickly jumped on the bandwagon to insist they'd heard similar things.

TechRadar approached Marvel and Disney for comment on its supposed axing, but didn't receive an immediate response. However, a few hours after Hablemonsdecine's original post, The Hollywood Reporter (THR) published its own piece indicating Daredevil: Born Again season 3 would be the show's last hurrah.

A Disney spokesperson has since told me that THR's article is accurate, so Born Again season 3, which will air on Disney+ sometime in March 2027, will be its final outing.

Why was Daredevil: Born Again canceled after three seasons?

I’ve now lived through two Daredevil Season 3 cancellations. You can’t hurt me anymoreSeptember 21, 2026

Outside of Marvel headquarters, nobody knows for sure — but there's one major reason why it's likely been consigned to the scrap heap.

Indeed, the show's second season suffered a significant drop in viewership compared to its debut outing on Disney+. Per audience measurement experts Luminate, Born Again season 2 accumulated 4.5 million views across its first five weeks in March. Compare that to the 8.4 million that season 1 accrued across the same time period in early 2025 on one of the world's best streaming services, and the Marvel Phase 6 program's audience share fell by a seemingly unrecoverable 47% in the space of 12 months.

I wrote about this last year but Charlie and Vincent only ever signed on for 3 seasons. It’s sad to see it end again but I’m very grateful we got 3 additional seasons. There’s always a possibility that they do come back for more. The ball is in Marvel’s court to make a new deal https://t.co/f83pEFHn6RSeptember 21, 2026

For all intents and purposes, Born Again season 2's dramatic drop in viewers didn't appear to spook Marvel executives. That's because its third — and now final — season was not only greenlit prior to its forebear's release, but also entered full production mere days before season 2 premiered on Disney+.

Furthermore, it seems that the decision to throw the Marvel Cinematic Universe (MCU) TV show in the trash was only just made. According to Deadline, its cast and crew were informed of its cancellation on the same day that said news broke. It's unclear if Marvel's top brass spent months deliberating over the show's future before culling it, or if it was more of a spur-of-the-moment decision.

One thing that might have fast-tracked its demise is the departure of showrunner Dario Scardapane.

Per THR, Scardapane, who was brought on to rescue Daredevil: Born Again following reports that Marvel wanted to rework the entire show in late 2023, is said to have parted ways with the comic giant. Scardapane's exit comes with the show's third season deep into its post-production phase, too, thereby leaving the Born Again team without its creative figurehead. There's no word on who, if anyone, will fill the void and get the series' final installment over the line.

Why Daredevil: Born Again's cancellation couldn't have come at a worse timeComment from r/marvelstudios

With Born Again's time coming to an end, Marvel now has a two-fold problem on its hands.

For one, season 3 was seemingly set to herald a new dawn for the street-level corner of the MCU. Indeed, with the likes of Luke Cage and Iron Fist set to join the eponymous vigilante, Wilson Fisk, and Jessica Jones in making the leap from the Netflix Marvel-Verse to the MCU, fans had hoped that more gritty and grounded MCU stories would branch off of Born Again's forthcoming season.

Admittedly, that could still happen. However, if Marvel no longer has confidence in its longest-running live-action series, what hope do we have of seeing a Jessica Jones TV revival or — whisper it quietly — a Heroes for Hire project?

Comment from r/MarvelStudiosSpoilers

The other major issue Marvel has to contend with is actively promoting Daredevil: Born Again season 3.

New York Comic-Con (NYCC) has been used to market and/or announce many of the comic titan's forthcoming Disney+ offerings. And, with NYCC 2026 due to take place between October 8 and 11, it's highly likely that Marvel will hold its usual panel to reveal more details about its 2027 TV line-up.

With Born Again season 3 confirmed to be the show's last entry, will Marvel show and/or tell us anything significant about it? Or will it shift its focus to its animated programs, such as X-Men 97 season 3 and Your Friendly Neighborhood Spider-Man season 2, and subsequently ignore the giant Daredevil-shaped elephant in the room? I guess we'll find out in a few weeks' time.

For now, catch up on everything else we know so far about Daredevil: Born Again season 3.

The Asus ROG Xbox Ally X20 feels like the PC gaming handheld of 2026. An enhanced version of the original Xbox-branded Ally X, this is shaping up to be one of the best-looking, ergonomically fantastic, and brilliantly performing handheld games consoles — and I went hands-on with it at Gamescom last month and liked it. A lot.

Coming to it as someone who hasn’t truly jumped in with both feet to PC gaming handhelds — basically none of them play nice with my hands due to being bulky and heavy — even a short time with the newest, flashiest version of Asus’ Xbox handhelds has left a permanent mark. One that might make me a PC handheld convert.

Much will be made of its price tag and purchase options — either $1,299 / £1,299 on its own, or $2,299.99 / £2,299.99 as a bundle with the new ROG XREAL R1 glasses — but after experiencing all its enhancements and features, and seeing how games run on it, it really could be a hit.

Looks and feels the part

(Image credit: Future)

Even though I know that this is a similar handheld to its predecessor, this thing is a joy to hold and use from a design perspective.

The overarching form is the same as the original Ally X, but the new translucent finish is a thing of beauty. It gives it an almost see-under-the-hood kind of vibe, and does a great job of making it stand out from its largely black-and-white competitors.

The gold accents are even more fantastic in real life and up close than in pictures, too, with the rings around each thumbstick and the shine of the four small buttons on the front, as well as the ‘ROG 20th Anniversary’ plate, and the stripe down the back really popping out of the otherwise black aesthetic.

(Image credit: Future)

That translucent back also has an incredibly grippy feel — you won’t need to add an external case here. As someone who always has to worry about that with gamepads and phones, this was extremely welcome; the rubberised, tactile wings of the controller really are conducive to maintaining a solid grip.

The inputs remain great too, with rounded face buttons, lovely triggers and bumpers that are all a joy to interact with, as well as excellent Tunnel Magnetoresistance (TMR) thumbsticks that offer a tangible upgrade over the analogue sticks of its predecessor. Though, I’d have liked to have seen some microswitch button tech in the X20 as a similar upgrade as well.

The star of the show, though, is, of course, that slightly bigger, but much better, screen. Offering an increase of 0.4 inches, but a huge leap up to OLED in panel tech, the new screen is vibrant and has colors that really pop and contrast. The boost to color gamut and HDR it offers makes for a genuine visual treat, and you know you’ll be covered in all situations with a brightness of up to 1400 nits to tap into.

But has the guts to match

(Image credit: Future)

The performance remains excellent as it was on the X20; games might never have looked better on a handheld screen.

The OLED panel is a joy to use, with fantastic colors and contrast, and the extra bump in the VRR to FreeSync Premium Pro is also welcome and a great feature. As a result, Forza Horizon 5 looks comfortably better, by a strong margin, compared to the handheld I am most used to, my PlayStation Portal, in sheer image quality and vibrancy, while getting comfortably north of 60 frames per second.

Using the TMR thumbsticks was great too: every move feels much more responsive, smooth, and instant compared to my Portal or a Steam Deck, and the extra durability the sticks offer over analog ones is superb too.

The Asus ROG Ally X20 is a fantastic bit of kit, and offers a compelling route into handheld PC gaming — perhaps one of the most complete offerings — even for me, as someone who has yet to jump in and can’t ever find the right device for the job.

So far it might be the PC gaming handheld I’ll consider buying most if I commit to going mobile. It’s not a transformation of the PC handheld experience that the ROG Xbox Ally X offers, but it’s an excellent refinement.

Twitter is not back, and we'll surely never see the likes of it again. In its place, we have X, and now, Tweet.app. You can be forgiven for the confusion. Many who still use X think their posts are tweets, but the still-pay-to-play platform from Bluebird, Inc. is now called Tweet.

It's a tale far too rich to contain in, say, a classic 140-character tweet, but I'll attempt to unpack it here, with insights from Bluebird, Inc. President and General Counsel Stephen Coates.

"I call it the 'Tweenix,' " Coates tells me, after I noted that Tweet.app's new blue logo looks a little like a phoenix. The imagery is apt. It signifies classic Twitter rising from the ashes, but also Bluebird's initial success and then failure to revive 'Twitter', before ultimately launching Tweet.app a few weeks ago.

Two years ago, Bluebird began the skunkworks project to revive Twitter, a brand Elon Musk effectively killed when he bought Twitter in 2022 and then in 2023 rebranded it to X, leaving vestiges of the old 'Twitter' scattered throughout the services, a fact that played a crucial role in Bluebird's ability to revive the brand.

Coates told me that after his company tried to file for a cancellation of the 'Tweet' and 'Twitter' trademarks in December of last year, X quickly filed a federal injunction. In the meantime, Bluebird launched Twitter.now. Months later, the judge ruled that because X still had "formerly Twitter" on the Apple App Store listing, it had brand rights. Coates called the ruling surprising, but Bluebird quickly pivoted and rebranded to Tweet.

The company, he told me, has no plans to go after the iconic Twitter bird logo, even though it's not well protected as a brand by X. Hence, the Tweenix.

Tweet, though, still seems like a risky name. Coates told me, "We're optimistic... It seems highly likely we’ll prevail on 'Tweet'."

Bluebird, Inc. President Stephen J. Coates (Image credit: Bluebird, Inc.)

That remains to be seen. When you sign up for Tweet, you must acknowledge that you know it's not affiliated with X. Search Tweet in the App Store, and the first result is still X. However, Tweet.app operating relatively under the radar might help it avoid further scrutiny from X and Elon Musk.

It has, by Coates' measure, just about 8,000 users. "[That's] pretty good, considering it's paid," Coates told me. The platform is so small that you could conceivably read all the tweets — I'm not sure that's a selling point, but Coates said there are "already community and inside jokes."

The company is using the income from those users to pay its small team of 10 employees and contractors as it builds the platform and tweaks the moderation filters, something Coates considers of critical importance.

Tweet.app, which does resemble old-school Twitter, is currently using AI to scale its moderation, including its still-in-beta Vera tool, which measures content for misinformation and applies a score. Eventually, Tweet.app members will have a dial connected to those ratings to automatically filter out their desired level of misinformation.

That's right, Tweet.app won't be in the business of rooting out all fake news. The creed will be, "Freedom of speech but not freedom of reach," said Coates.

FutureFutureFuture

Where Twitter, under former CEO Dick Costolo, whom Coates worked under, struggled with how to be a town square when there was one guy shouting obscenities in the corner, Tweet.com will let the guy shout, but also let users hide the obscenities they don't want to see in their feeds.

If it works, all of it will be powered by this AI. "I call it AI for good. We're not creating tools that will create AI outputs," said Coates, who has worked as counsel for Meta, Reddit, and TikTok.

None of this, of course, ensures success. Classic social media, including Twitter, was built on viral moments, like the Arab Spring, the killing of Osama Bin Laden, and selfies that broke the internet.

I call it AI for good. We're not creating tools that will create AI outputs

Stephen Coates

Coates acknowledged the power of these "inflection" moments, but reminded me that you can't predict them. Tweet.app is happy to grow slowly. Coates knows that paying members will be more deeply engaged than people who simply hop on the platform for free. "At some point will it be open to everyone? I certainly hope so," he told me.

I asked Coates why we need this or any other new social media. He told me that he sees room for reinvention, with space for social media that gives users control. "We're empowering them to control the algorithm," which is an idea that well-established social media platforms have only recently approached.

As the other upstart micro-blogging social media platform, Bluesky, moves away from the town square concept, Coates sees an opportunity to build an alternative to the only other big open platform: X.

"There's room for more. I think people will come for the nostalgia of Twitter and tweeting and stay for the control and experience. It’s a grand experiment."

• CISA added three Linux kernel flaws (CVE‑2025‑39682, CVE‑2026‑53266, CVE‑2025‑39964) to KEV catalog
• Red Hat confirmed active exploitation; agencies given rare three‑day patch deadline expiring Sept 21, 2026
• Bugs enable DoS, privilege escalation, or data corruption; patches available, limited mitigations for two flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux flaws to its Known Exploited Vulnerabilities (KEV) catalog, signaling abuse in the wild and giving government agencies a deadline to patch or stop using the flawed product entirely.

The three bugs in question are tracked as CVE-2025-39682 (severity score 9.8/10 - critical), CVE-2026-53266 (severity score 8.8/10 - high), and CVE-2025-39964 (severity score 7.8/10 - high). All three have already been patched in the Linux kernel. CVE-2025-39682 was fixed in stable releases 6.1.149, 6.6.103, 6.12.44 and 6.16.4, while CVE-2025-39964 was fixed in 5.10.245, 5.15.194, 6.1.154, 6.6.108, 6.12.49 and 6.16.9. CVE-2026-53266 has been fixed upstream and backported to supported stable/distribution kernel branches, including 5.10.259, 6.1.176 and 6.12.94.

The first issue is an improper check for unusual or exceptional conditions vulnerability in the TLS receive patch which could allow unauthenticated threat actors to launch memory disclosure or denial-of-service (DoS) attacks. The second one (CVE-2026-53266) is an out-of-bounds write vulnerability in the ebtables Source Network Address Translation (SNAT) Address Resolution Protocol (ARP) rewrite patch which allows local attackers to escalate privileges or mount DoS attacks.

The last one (CVE-2025-39964) is a race condition flaw that allows concurrent writes to the same AF_ALG socket, which allows local malicious actors to crash the system or corrupt cryptographic operation results, leading to data integrity issues and possible DoS states.

Attacks in the wild

Red Hat acknowledged that all three are being abused in real-life attacks. “This CVE is high risk and there are known public exploits leveraging this vulnerability. Address this vulnerability with high priority,” it said in all three advisories.

However, there are no details as to who is currently using these exploits, against whom, and to what cause. There are currently no separate reports of cyberattacks referencing any of the abovementioned vulnerabilities.

However, CISA still reacted. All three flaws were added on September 18, 2026, and all three have a small three-day deadline for patching that expires on September 21. Usually, CISA would grant Federal Civilian Executive Branch (FCEB) agencies a three-week deadline to patch up, with just exceptionally dangerous flaws getting a shorter window. That being said, these flaws are likely extremely dangerous.

In theory...

In a hypothetical scenario, a threat actor could target a Linux system using kernel TLS (kTLS) by sending a specially-crafted TLS record that triggers CVE-2025-39682 and causing either a crash, or even arbitrary code execution. Attackers that already have a low privilege foothold on the target endpoint could use CVE_2025-39964 to escalate privileges, while on systems using the affected bridge/netfilter configuration, CVE-2026-53266 could be used for privilege escalation, as well.

According to the Red Hat advisory, there is a chance that CVE-2025-39682 is remotely triggerable, but only when the system is using the affected kTLS receive path. The other two flaws are exclusively local vulnerabilities.

Besides fixes, two out of the three flaws also have possible mitigations. For the improper check one, users should prevent module tls from being loaded. For the out-of-bounds write one, users are advised to disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces. The final vulnerability, currently does not have a working mitigation, and the only way to stay secure is to apply the provided patches.

Linux kernel vulnerabilities are generally considered serious, but the severity still depends on the flaw and how the affected kernel is deployed. Earlier this year, security researchers disclosed four local privilege escalation flaws, called DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121), and DiagSpill (CVE-2026-74469).

Via The Hacker News