O2 UK has fixed a vulnerability in its VoLTE and Wi-Fi Calling implementations that allowed malicious actors to discover people’s locations and other identifiers.
Back in 2017, the company introduced the IP Multimedia Subsystem (IMS) service, called “4G Calling”. The service provides better audio quality, and more reliable phone calls. However, Daniel Williams, a security researcher, recently analyzed the feature and discovered that during the call, he was able to pull all sorts of information about his conversation partner, straight from the network.
That data includes IMSI, IMEI, and cell location.
With Aura's parental control software, you can filter, block, and monitor websites and apps, set screen time limits. Parents will also receive breach alerts, Dark Web monitoring, VPN protection, and antivirus.
Preferred partner (What does this mean?)View Deal
Applying a fix"The responses I got from the network were extremely detailed and long, and were unlike anything I had seen before on other networks," Williams said in a detailed blog post. "The messages contained information such as the IMS/SIP server used by O2 (Mavenir UAG) along with version numbers, occasional error messages raised by the C++ services processing the call information when something went wrong, and other debugging information."
Luckily enough, the vulnerability was not present since early 2017 but was rather introduced in February 2023.
To get cell location, Williams used the Network Signal Guru app on a Pixel 8 device. He pulled raw IMS signaling messages during a call, and used them to find the last cell tower the call recipient connected to. He then cross-referenced that data with a map of cell towers, pinpointing a person’s location within 100 m2 in an urban environment. In a rural environment, though, the information was somewhat less precise.
Williams said he reached out to O2 UK multiple times and, at first, got no response. The company later reported the issue had been fixed, which Williams also confirmed.
"Our engineering teams have been working on and testing a fix for a number of weeks – we can confirm this is now fully implemented, and tests suggest the fix has worked, and our customers do not need to take any action," Virgin Media O2 told BleepingComputer.
Via BleepingComputer
You might also likeCybercriminals are distributing a tainted version of a popular password manager, through which they’re able to steal data and deploy ransomware. This is according to security researchers WithSecure Threat Intelligence, who recently observed one such attack in the wild.
In an in-depth analysis published recently, the researchers said a client of theirs downloaded what they thought was KeePass - a popular password manager. They clicked on an ad from the Bing advertising network, and landed on a page that looked exactly like the KeePass website.
The site, however, was a typosquatted version of the legitimate password manager. Since KeePass is open-source, the attackers kept all of the legitimate tool’s functionalities, but with a little extra Cobalt Strike on the side.
With Aura's parental control software, you can filter, block, and monitor websites and apps, set screen time limits. Parents will also receive breach alerts, Dark Web monitoring, VPN protection, and antivirus.
Preferred partner (What does this mean?)View Deal
Purview and DefenderThe fake password manager exported all of the saved passwords in a cleartext database, which was later relayed to the attackers through the Cobalt Strike beacon. The attackers then used the login credentials to access the network and deploy ransomware, which is when WithSecure was brought in.
WithSecure said that the campaign has the fingerprints of an initial access broker (IAB), a type of hacking group that obtains access to organizations and then sells it to other hacking collectives. This particular group is most likely associated with Black Basta, an infamous ransomware operator, and is now being tracked as UNC4696.
This group was previously linked to Nitrogen Loader campaigns, BleepingComputer reported. Older Nitrogen campaigns were linked to the now defunct BlackCat/ALPHV group.
So far, this was the only observed attack, but that doesn’t mean there aren’t others, WithSecure warns: "We are not aware of any other incidents (ransomware or otherwise) using this Cobalt Strike beacon watermark – this does not mean it has not occurred."
The typosquatted website that’s hosting the malicious KeePass version was still up and running at this time, and was still serving malware to unsuspecting users. In fact, WithSecure said that behind the site was extensive infrastructure, created to distribute all sorts of malware posing as legitimate tools.
Via BleepingComputer
You might also likeIt seems that the big robot vacuum manufacturers all got together and decided that what we really need is a bot with a mechanical arm. One that can move clutter out of its path as it cleans, and even sort your mess out and relocate it where it needs to go. We saw a few arm-equipped robot vacuums at this year's CES – the event where everyone showcases their upcoming launches – but Roborock surprised everyone by announcing that its own model wasn't just at the wacky invention stage, it would actually be going on sale within the year.
Fast-forward a few months, and the Saros Z70 is indeed now available to buy. So does it deliver on its potential, or has Roborock rushed it through before the tech is ready? Is this innovative bot ready to compete with the rest of the best robot vacuums on the market? I've spent the past two weeks testing it out – you can get the full low-down in my Roborock Saros Z70 review.
While it's not perfect, there are plenty of great things about it – including a few that surprised me. Read on for 3 things I loved about this handy robovac, plus 3 that I think still need work if it's going to be genuinely useful.
3 things I loved 1. The pincering is excellentThe hardware part of the pincer arm is very well designed. In my tests I found I could remote control the robot over to a bit of clutter and tell it to pick it up, and it would – almost without fail – recognize it and adjust its positioning and pincer so it could pick it up. I could then resume control and drive the bot where I wanted the clutter to go.
Should the pickup fail, Roborock has included manual adjustment options so you can operate the arm yourself. These are intuitive and precise, and the grip is gentle but firm. The arm also tucks neatly away behind a hatch when it's not in use, so it can't get caught on anything while the bot's on its travels. There's big potential for people with limited mobility here.
2. There are plenty of safety measuresMost people I talk to about this robovac seem afraid that the OmniGrip will be overzealous and try and tidy away the cat. Roborock has built in plenty of safety features to ensure this doesn't happen. First, all the arm features are off by default, so nothing at all will happen until you specify exactly what you want it to do.
It's designed only to try and tidy very specific objects, having identified them using Roborock's (generally excellent) object recognition tech, and the arm has a weight sensor that prevents it from lifting objects over 300g. The pincering itself is designed to be 'firm yet gentle', to prevent damage to objects, so kind of like one of those fairground claw games, but with a much higher success rate. Finally, there's a physical 'Emergency stop' button on the robot itself, and a child lock.
3. It's easy to useThis is a new and potentially intimidating bit of tech, so kudos should go to Roborock for making it impressively accessible. It has placed the robot arm options front and center in the companion app, encouraging users to explore and become familiar with them. Plus, the controls themselves are logical and intuitive.
4. It's an unexpectedly great security cameraA lot of high-end robot vacuums can double as home security cams, but you're a little limited by the fact that your view is at ground level. Here, Roborock has added a camera on the arm itself. Not only can the arm reach much higher up, it can also tilt vertically, thus offering a much more expansive field of view than if you were using the front-mounted camera alone. Of course, you can only spy on what's happening inside your home, but useful nonetheless.
3 things that need improving 1. It doesn't work on its ownWhile the remote control-assisted pincering worked very well in my tests, really, the Saros Z70 needs to be able to tidy up unassisted if it's to be genuinely useful to most people. Theoretically, you can ask the robot to identify objects suitable for tidying while on a whole-home clean, then once it's finished, embark on a second run to pick them up and put them in a designated spot.
Unfortunately, this bit doesn't really work yet. It seems all the conditions need to be absolutely perfect in order for the process to be successful. So the bot needs to see the items and correctly identify them, then be able to find them again, then successfully pick them up, and then find its way to the correct relocation spot. I haven't yet managed a run where one of these factors doesn't fail.
Roborock also told me that the process has a lower success rate on carpet than hard floors, due to a "hardware limitation". That feels like a significant caveat.
If something appears to get stuck on the arm, then all other functions are locked until you manually reset it by pressing physical buttons on the robot. For instance, on one occasion during my tests the arm picked up a sandal, then as it rotated with it, the sandal got caught on a doorstop and the strap twisted, so when the bot tried to drop it, it couldn't. I had to go and rescue it before I could proceed. It's probably a logical safety measure, but it's not ideal to have to physically get involved to fix the matter.
I'm hopeful the automation functions will improve with updates, but right now, this bot can't really be left alone to tidy for you.
2. It can only pick up a few thingsAt time of writing, the list of supported objects is very short – sandals / light slippers, socks, small towels, and crumpled tissue paper. It makes sense that Roborock would be cautious about adding more objects, because it needs to be confident the bot can correctly identify them and doesn't end up trying to grip something it shouldn't. But it does limit its usefulness a little, as does the weight (and presumably size) limitation.
It's not so much Roborock's fault as a limitation of the form factor. Logically, it follows that the bot won't be able to tackle anything too big or heavy. But it still affects how helpful such a design might be in the longer term.
(Image credit: Future) 3. The priceAt the moment, the Roborock Saros Z70 comes with a price tag of $2,599 / AU$3,999 (UK price TBC, but potentially around £1,950 based on what it costs elsewhere). It's the most expensive robovac we've tested, by some margin, and out of reach of most people. At the moment, it's the only robot vacuum on the market to feature a robotic arm, so an eye-watering list price isn't surprising. However, I'm not sure I'd buy it at that price, at least until some of the issues were ironed out.
Because the robot vacuum market is competitive, with new models being released regularly, I'm used to seeing good deals and prices dropping fairly quickly as even better bots hit the market. There look to be more arm-equipped robovacs in the pipeline from other brands, so if the idea proves a hit, we might see a more competitive pricing landscape emerge. I suspect it'll take a while, though.
You might also like...Nanoleaf has launched two new smart lights to liven up your home indoors and out: the Nanoleaf Rope Light, which you can position on your wall in any shape you like, and which can be set to your choice of colors and gradients, and the Nanoleaf Solar Garden Lights, which add a little glow to your yard after dark.
Although Nanoleaf makes smart bulbs to fit your ordinary ceiling lights and lamps, the company is best known for fun and funky products like the Nanoleaf x Fantaqi EXPO illuminated display cases for showing off your collectibles, the Nanoleaf Ultra Black Shapes that can be arranged on your walls in any way you see fit, and the Nanoleaf Smart Holiday String Lights, which add festive cheer indoors or out.
The latest addition to Nanoleaf's collection of fun interior smart lights is the Rope Light – a five-meter LED string that you can bend and twist into any shape, and attach to your wall.
(Image credit: Nanoleaf)The Nanoleaf Rope Light has 420 LEDs and 70 addressable color zones, allowing you to create smooth gradients and animations. It's compatible with the Nanoleaf app, which allows you to apply scenes or make your own custom color palettes by drawing with your fingertip.
You can also use the Rope Light to mirror the colors on your PC monitor via the Nanoleaf desktop app. We'll be testing it soon to see how it compares with the best Ambilight alternatives, and whether it deserves a spot in our guide to the best smart lights.
It costs $69.99 (about £50 / AU$110), and is available now direct from Nanoleaf.
How does your garden glow?The Rope Light looks great, and I look forward to testing it, but personally I'm most excited by the Nanoleaf Solar Garden Lights. These weather-resistant smart lights resemble a bunch of tulips and can be staked into the ground wherever you like.
As the name suggests, each cluster of lights is connected to a solar panel, which you can position to catch the optimum amount of sunshine, and has a subtle black and gray finish to blend in with the plants and ornaments in your garden.
Although they'd look striking lining the edge of your garden path, judging by Nanoleaf's photos, the Solar Garden Lights look particularly striking when placed right beside a plant, where the lights seem to be growing out of it organically. Unlike most garden lights, I can imagine them working well in a pot, so you can enjoy them even if you only have a balcony or paved yard.
(Image credit: Nanoleaf)They aren't compatible with the Nanoleaf app (which is perhaps a bit of a shame), but their daylight sensors mean you can sync them so they only turn on after dark, and they come with a remote control that lets you change their colors, apply scenes, and set timers.
The Solar Garden Lights are also available today direct from Nanoleaf, and cost $49.99 (about £40 / AU$80) for a set of two light clusters.
You might also likeIn a bid to increase production of the Nintendo Switch 2, Nintendo has partnered with Samsung Electronics Co. to help manufacture main chips for the console.
As reported by Bloomberg, Nintendo has turned to Samsung to make a customized processor designed by Nvidia for the Switch 2, using its 8-nanometer node, so it can speed up production.
Sources say that with this new partnership with Samsung, the pace should be fast enough for Nintendo to ship more than 20 million Switch 2 units by March 2026.
It's also said that Samsung can ramp up further if it's required, though it would depend on capacity at hardware assemblers like Foxconn Technology Group.
Samsung, which also makes memory chips and display components for Nintendo, has reportedly been competing with Taiwan Semiconductor Manufacturing Co (TSMC) to make chips, a company that also partners with Apple and Nvidia.
With its new Nintendo contract, it's said that Samsung hopes to grow its business and secure more ground.
Nintendo president Shuntaro Furukawa has said that the company expects to sell 15 million Switch 2 consoles during its launch window. When asked by investors why the forecast number was so low, Furukawa said that the company set the figure "with the aim of reaching the same level of sales we achieved with Nintendo Switch".
He also attributed the console's high cost to Nintendo's predictions, but said that its backward compatibility and software bundles will increase sales before the end of the first fiscal year.
The Nintendo Switch 2 launches globally on June 5, 2025, for $449.99 / £395.99. UK pre-orders and US pre-orders are now live.
If you missed out on securing a pre-order and are struggling to find stock, GameStop and Best Buy have announced they will be restocking Switch 2 units in-store and online during the console's launch.
You might also like...Security researchers have found some of the tools cybercriminals are using to steal people’s Instagram and TikTok accounts - on PyPI.
The Python Package Index (PyPI), one of the world’s biggest repositories of Python code, is often abused to holst malicious code, or trick software developers into downloading and running tainted code in their projects.
In this case, security researchers from Socket found three packages, named “checker-SaGaF”, “steinlurks”, and “sinnercore”. Cumulatively, these three had around 7,000 downloads before being pulled from the platform.
With Aura's parental control software, you can filter, block, and monitor websites and apps, set screen time limits. Parents will also receive breach alerts, Dark Web monitoring, VPN protection, and antivirus.
Preferred partner (What does this mean?)View Deal
Credential stuffing and password sprayingThe first two acted as email address validators, cross-referencing supplied email addresses with TikTok and Instagram APIs, to see if they are associated with accounts on the platform. While simply checking if an email address is valid doesn’t seem to be particularly harmful, it is an important step in cybercriminal activity, the researchers explained.
"Once threat actors have this information, just from an email address, they can threaten to dox or spam, conduct fake report attacks to get accounts suspended, or solely confirm target accounts before launching a credential stuffing or password spraying exploit," said Socket’s Olivia Brown.
"Validated user lists are also sold on the dark web for profit. It can seem harmless to construct dictionaries of active emails, but this information enables and accelerates entire attack chains and minimizes detection by only targeting known-valid accounts."
The third package, “sinnercore”, triggers the “forgot password” flow for a given username on Instagram.
The news comes roughly a month after researchers found two malicious packages on PyPI, posing as fixes for a popular, legitimate package. The malware was designed to steal people’s cryptocurrency, which is a popular attack vector on PyPI. In this case, the legitimate package is used in building “hot wallets” - software wallets for cryptocurrencies. Despite being obvious malware, the two packages still managed to rake in more than 37,000 downloads before being pulled.
Via The Hacker News
You might also likeMicrosoft has officially open-sourced Windows Subsystem for Linux at its annual software engineer and web developer conference, Microsoft Build 2025.
Most components are now open-source, with the exception of a few elements tied directly to Windows, with the source code available on GitHub.
By open-sourcing WSL, Microsoft has opened it up to direct contributions, feature development and bug fixes from the broader community, after acknowledging that the community has already contributed significantly prior to its open sourcing.
Windows Subsystem for Linux becomes an open-source project for the community"As the community behind WSL grew, WSL gained more features such as GPU support, graphical applications support (via wslg) and support for systemd," Microsoft's Pierre Boulay explained. "It eventually became clear that to keep up with the growing community and feature requests, WSL had to move faster, and ship separately from Windows."
Boulay shared some of WSL's history, including its separation from Windows in 2021 when it became its own package, distributed via the Microsoft Store.
"WSL could never have been what it is today without its community. Even without access to WSL’s source code, people have been able to make major contributions that lead to what WSL is now," Boulay added.
Despite the significance of WSL becoming open-source, Chief Communications Officer Frank X Shaw only wrote a short note about it in the conference's Book of News. An extract reads: "It facilitates collaboration among WSL users, enabling them to engage in issue resolution and learn together as a community."
Unsurprisingly, the core announcements at Build centered around artificial intelligence, with numerous updates issued to the company's Copilot agents to boost productivity across Microsoft 365 apps.
You might also likeSamsung is looking to make your Galaxy Ring more accurate than ever, reportedly introducing an upgrade to South Korean users that adds two new features to the smart ring.
The first is a new consistency-based metric that's said to make your energy score more accurate, while the second is a new sleep feature that integrates with Samsung's smart home devices.
Samsung is said to be rolling out firmware version Q50XWWU2AYD1 for the Galaxy Ring – which tops our list of the best smart rings available right now – but we haven't seen official confirmation from Samsung yet.
Instead, our information is coming from two insider fan sites – SamMobile and Sammyfans – with ties to the South Korea-based company. The upgrade is said to be currently rolling out to Samsung users in South Korea, so we imagine it won't be long before we see it in other regions.
Without any official word, we can't give you the full rundown of exactly how the new features work, but an update to the way Samsung measures activity – Sammyfans calls it 'Activity Consistency' – is said to be on the way.
In addition, Samsung's sleep guidance is also apparently getting updated. Both sites agree that the Ring will interact with Samsung's network of smart home devices called SmartThings, using Samsung's ecosystem of devices to adjust your sleep environment and ensure you get better bedrest. Exactly how this interaction will work is unknown.
A big reveal (Image credit: Zachariah Kelly / TechRadar)While this update seems relatively minor, it feels like Samsung is on its way to making you something akin to a smart-home cyborg, by integrating your health with AI-powered devices such as thermostats and smart lights.
Samsung told us that upgrades of this sort were in the pipeline at CES 2025, with Jaeyeon Jung, Head of SmartThings Team, saying: “We wanted our devices to make consumers’ lives easier and better, that’s been our vision all along. Following our acquisition of SmartThings in 2014, step by step we’re making this a reality.
“Samsung has a wide range of portfolio products, and we want to provide great lifestyle experiences [across these devices].”
We expect this SmartThings integration to be quite minor at first, but the possibilities are endless. Imagine a room which automatically gets cooler or warmer based on your sleeping body temperature, or a smart speaker playing an audiobook or soft music that automatically switches off once you enter deep sleep.
You might also like...Rode has announced a new set of affordable, high quality headphones for musicians, DJs and other creative people.
Musicians and DJs aren't like other people, at least when it comes to headphones: creativity often means pulling very long shifts at the music factory, and that means headphones need to be very comfortable.
My own go-to headphones are feather-light for long listening, and that's one of their most valuable features. The new Rode NTH-50 have been created with very light weight and also have a specially designed pressure-relieving headband; they've also been made with glasses wearers in mind so they won't pinch.
The other thing creative types need from their headphones is accuracy, and the Rode NTH-50 promise to deliver that too.
(Image credit: RØDE) Rode NTH-50 headphones: key features and pricingThe drivers here are 40mm and housed in a resonant chamber that promises "impeccable" clarity with ultra-low distortion and "incredible" accuracy. That's important, because these headphones won't be used for casual listening: headphones for that kind of listener often flatter the sound and paper over flaws, and that's the last thing you want when you're trying to ensure that a mix is going to sound perfect.
The NTH-50s' closed-back design promises good passive noise insulation both in and outwards, reducing audio bleed for the people around you while also minimizing incoming ambient noise.
The headphones are 32 ohms with a wide frequency range of 5Hz to 35 kHz.
The new NTH-50 headphones are essentially more affordable versions of the highly acclaimed NTH-100, which we awarded the full five stars to in our Rode NTH-100 review. And those headphones may be their biggest rival, because they've dropped in price since their 2023 launch: the NTH-100 were initially $149 / £149 / AU$249 but are now available for about $130 / £105 / AU$189.
Sonically they're simila,r with the same frequency range, but they're slightly more premium and promise to be just as comfortable – if the sound is as good on the new model and they're cheaper, they could be an entry for our list of the best wired headphones for those who need neutral sound for creative work.
The Rode NTH-50 headphones are available now for $99.99 / £99.99 / AU$199.95.
You might also likeNintendo has confirmed that the Switch 2's GameChat function will support text-to-speech and live subtitles.
In case you missed it, GameChat was revealed alongside the Switch 2 and is essentially a video and gameplay sharing feature similar to Discord that can be accessed by pressing the console's 'C' button.
It's a cool feature that wasn't available on the original Switch, and now Nintendo has revealed new accessibility options made specifically for GameChat.
As spotted by OatmealDome (via VGC), the feature will support text-to-speech while gaming, allowing players to type messages with the on-screen keyboard, which the system will then read out loud.
[Switch 2] GameChat supports text-to-speech. If enabled, you can type in text and the system will read it for you. While not explicitly confirmed, USB keyboards should be supported too (the Switch 1 already supports them for text input).[image or embed]@oatmealdome.bsky.social
In a separate post, it was also confirmed that GameChat will support live subtitles. While playing a game in a party, the system will transcribe what players are saying in real-time and display the text in a "chat box" on the left side of the screen.
As shown in the screenshot, the game will be minimized further alongside party member icon boxes while the accessibility option is active.
Nintendo has since updated its accessibility page on its website to now include both "GameChat Voice Speech-to-Text" and "GameChat Text-to-Speech Audio", alongside other features like Mono Audio, Screen Zoom, Display Colors, Button Mapping, and more.
The Nintendo Switch 2 launches globally on June 5, 2025, for $449.99 / £395.99. UK pre-orders and US pre-orders are now live.
If you missed out on securing a pre-order and are struggling to find stock, GameStop and Best Buy have announced they will be restocking Switch 2 units in-store and online during the console's launch.
You might also like...Windows 11 is receiving another infusion of AI and this time it’s coming directly to File Explorer, the app that allows you to view and work with the files and folders on your PC.
Microsoft introduced this move with Windows 11’s new preview build (26120.4151) in the Beta channel.
File Explorer is getting a new option for ‘AI actions’ in its context-sensitive right-click menu. That means when you right-click a file, you’ll get extra context-based choices for working with AI abilities. To begin with – and remember, this is still in testing – there are four actions that relate to image files.
Two of them are handy shortcuts to change the background of a picture. One allows you to blur the background in the Photos app, and the other removes the background entirely – cutting out the foreground subject – in the Paint app.
The idea is that if you have an image file that needs this attention, you can simply right-click and order the job done right in the folder (with Windows 11 firing up the app and task from there).
The other two AI actions for images facilitate erasing an object (removing something that’s not wanted intruding on the pic) in Photos, and you can also order a Bing Visual Search (an image search on the web via Microsoft’s Bing engine).
To start off, these actions only work with JPG and PNG files, but that selection will be expanded in time (though most folks use JPGs in the main, anyway).
(Image credit: Microsoft)Microsoft also promises that AI actions for the likes of Word, Excel, and PowerPoint files will be rolled out (in testing) soon enough. That’ll include an option to get Copilot to summarize any Microsoft 365 file, boiling down the contents of a document to a precis, which is something that you may well be familiar with, but there’s a trick that might be new to you here: making a FAQ.
This enlists Copilot to turn a OneDrive file into a “neatly formatted, AI-generated Q&A list” which could come in useful for some folks. This functionality has been around for a while, though, but it’ll be new to the quickfire AI actions, of course.
The catch with these abilities in Microsoft 365 is that you not only need to have a subscription for that online suite, but also a Copilot subscription (via your Microsoft account). That’s because you need the latter to unlock Copilot in the Microsoft 365 apps in which the AI is available.
In the case of creating a FAQ, that functionality will be for business users only initially, although Microsoft notes: “Consumer support with a Microsoft account is coming later.”
Analysis: More AI shockerIt isn’t a surprise to see Microsoft pushing more AI functionality into Windows 11. This is a key driver not just for the OS, but for Copilot+ PCs which Microsoft is betting big on – those devices have exclusive AI powers, and the more ways the company can give users to reach them, the better.
Or at least that’s the way Microsoft will see it. The argument against this continued slow infiltration of AI into Windows 11 is that if you don’t use any of this stuff, then it’s just cluttering up the interface a bit more. In this case, the new AI actions option (which was previously unearthed in preview builds quite some time ago) is an extra line in the right-click context-sensitive menu with files, and some people may not want it and feel that it’s a waste of that (admittedly small chunk of) space.
Expect more of this in the future, and indeed there’s another minor piece of AI creep elsewhere in this preview build. That’s in the widgets panel, which has seen its feed reorganized, and Copilot AI is now piping some stories into that feed. This is a more behind-the-scenes change than the interface tweak with File Explorer, though, and on top of that, if you don’t like the new system (called ‘Copilot Discover’) you can turn it off in the ‘Personalize MSN’ settings for the widgets board.
You might also like...If you’ve got an older iPad, Apple has put out a simple message: you need to update its software now. That’s because the company has just released a patch that helps protect against security threats that could affect your device.
The iPadOS 17.7.8 update fixes a critical security flaw that affects iPads that are too old to upgrade to iPadOS 18. Specifically, it is intended for the 10.5-inch and 12.9-inch iPad Pro from 2017, as well as the sixth-generation iPad that was released in 2018.
Apple hasn’t published release notes for iPadOS 17.7.8, but the fact that it has been included on Apple’s security releases page suggests that it contains important fixes that could improve the safety of your tablet.
The new version arrives shortly after iPadOS 17.7.7 was released to the public. That version of iPadOS seemed to come with a bug that frequently logged users out of App Store apps, leading Apple to swiftly release iPadOS 17.7.8 a week later.
That said, iPadOS 17.7.7 also came with a raft of security updates in its own right, although Apple has stopped signing it in light of the reported App Store bug.
How to keep your device safe (Image credit: Apple)Over time, older iPads gradually lose compatibility with the latest versions of iPadOS, meaning they can’t get the most up-to-date features and functionality that Apple has developed. But the company often brings security updates to these devices to prevent them from being exploited by hackers and bad actors, and that’s the case with iPadOS 17.7.8.
To update your iPad, open the Settings app, then tap General > Software Update in the left-hand sidebar. Wait for your iPad to find the update, then install it by following the on-screen instructions.
It’s always important to keep your devices up to date, as the last thing you want is to fall victim to an exploit or security threat. By downloading iPadOS 17.7.8, you should be able to keep your device safe, even if you’re using an older iPad.
You might also likeIf you're looking for a serious movie player that delivers far better quality than streaming but doesn't require the disc collection of the best 4K Blu-ray players, Kaleidescape offer some excellent models such as the five star Strato V Movie Player. At just under $4K, though, the Strato V is beyond many viewers' budgets – so the arrival of a new sub-$3K player with serious specs is very welcome indeed.
The new player is called the Strato E and it bears a strong resemblance to the rest of the Strato family. It's designed to work as a standalone device with on-board storage to download movies to, but you can also team it up with Terra Prime servers for large movie collections, and you can use multiple Strato devices across multiple rooms.
Kaleidescape Strato E: key features and pricingThe Strato E is designed for home theater enthusiasts, marine installations and commercial setups. It's a 4K player with SDR, HDR10 and Dolby Vision, it has BT.2020 color space and 4:4:4 chroma, and it displays at up to 2160p at 60fps.
The key thing about Kaleidescape's products is that you get the same high bitrate version of the movies as you get on 4K Blu-rays, which is many times the data you get when streaming, even in 4K.
This means you get more detail, more natural color reproduction, and clearer motion in movies.
The Strato E also supports lossless multi-channel and spatial audio including DTS:X and Dolby Atmos, with additional support for Dolby TrueHD, DTS-HD Master Audio, and Linear PCM up to 7.1ch, 96kHz/24-bit. Everything is output via HDMI 2.1 with HDCP 2.3.
The Strato E is designed to work seamlessly with Kaleidescape's high-quality movie store, and its 480GB internal storage is large enough for six full-quality 4K movies. Watched movies are automatically removed after 48 hours to free up space, but of course you can re-download them at any time. A full movie download is said to take around 10 minutes over gigabit ethernet, which Kaleidescape strong recommends in our experience.
It's worth noting that in our Strato V review we praised the movie store for offering 4K movies often long before their physical disc release, but we did feel that while "in the US the choice is huge… elsewhere the choice isn't as impressive, and films take longer to be added."
The Strato E sits in the Kaleidescape range above the entry-level reference 2K player, the Strato M, and below the Strato V. And it's priced accordingly, with a US price of $2,995 making it Kaleidescape's most affordable 4K player.
International pricing hasn't been announced just yet but it's likely to cost more outside the US: the $3,995 Strato V is currently retailing at £5,380 (about $7,200) in the UK.
The Strato E is available in US now.
You might also likeGoogle had already told us that mobile versions of the AI-powered NotebookLM research tool were on the way, and now they've appeared in the app stores for Android and iOS – just in time for the big Google I/O 2025 show later today.
As per Google's latest blog post, the apps enable you to "understand anything, anywhere", with "many of the core features of NotebookLM" carried over from the web version of the tool that's been around since 2023.
If you're completely new to NotebookLM, the idea is you feed it a bunch of sources – YouTube videos, web links, essays, PDF documents – and it can then collate all this information, summarize it, and answer questions about it.
NotebookLM's most viral moments to date have been thanks to its Audio Overviews feature, which let you turn your sources into an AI-hosted podcast that sounds almost like the real thing. You can even interrupt the podcast with follow-up questions.
Yes please, Google The mobile apps bring across many features from the web version (Image credit: Google)Having used NotebookLM for several months on the web, there's no doubt I'll be getting it installed on my mobile devices right away: it's one of the most genuinely useful AI tools I've come across so far, and because you supply the sources, those pesky AI hallucinations are kept down to a minimum.
That's not to say it can't make mistakes, but I've not seen any obvious ones so far – and anecdotally, it seems more reliable than standard generative AI chatbots. Every question is answered with a detailed citation list, so you can see where information has come from.
For getting a brief overview of a huge topic, or explaining complex subjects in simple terms, it works really well. Recently I've been using it to dig into a couple of dense scientific studies, and make them more understandable.
The NotebookLM apps for Android and iOS are available now, free of charge. If you pay $19.99 / £18.99 / AU$32 a month for Google One AI Premium, you get NotebookLM Plus – that means you can generate more Audio Overviews, customize the style and tone of notebooks, and share your notebooks with other people.
You might also likeMicrosoft just introduced Entra Agent ID, a new identity management tool for AI agents. With this capability, users can assign unique, secure digital identities to AI agents, similar to vehicle registration, or having a digital passport for the AI agent.
A blog post published earlier this week by Vasu Jakkal, Corporate Vice President at Microsoft Security, said that Artificial Intelligence (AI) is set to profoundly reshape organizations within the next two to five years.
In this new paradigm, which Microsoft dubbed “Frontier Firm”, humans will collaborate with AI agents, which is why the transformation “must be grounded in security,” Jakkal explained.
With Aura's parental control software, you can filter, block, and monitor websites and apps, set screen time limits. Parents will also receive breach alerts, Dark Web monitoring, VPN protection, and antivirus.
Preferred partner (What does this mean?)View Deal
Purview and DefenderThis starts by adopting the Zero Trust security model and prioritizing identity protection and risk mitigation. Enter Entra Agent ID. It will secure the digital identities for AI agents created in Microsoft Copilot Studio and Azure AI Foundry, ensuring centralized identity management for both humans and AIs.
For starters, Microsoft partnered with ServiceNow and Workday, to integrate Entra Agent ID into their platforms.
Redmond also announced extending Microsoft Purview’s data security and compliance control to any custom-built AI app with the new Purview SDK, enabled natively for AI agents built within Azure AI Foundry and Copilot Studio.
“This means that AI agents can now inherently benefit from Microsoft Purview’s robust data security and compliance capabilities,” Jakkal explained. “Developers can leverage these controls to help reduce the risk of their AI applications oversharing or leaking data, and to support compliance efforts, while security teams gain visibility into AI risks and mitigations. This integration improves AI data security and streamlines compliance management for development and security teams.”
Finally, Microsoft Defender - the company’s native antivirus for Windows, now integrates directly with Azure AI Foundry, offering security posture recommendations, runtime threat alerts, and a bridge between development and security teams.
With these changes, Microsoft wants to help organizations “innovate more securely with AI,” Jakkal concluded.
You might also likeUntil now, all we’d really seen of the Samsung Galaxy Z Fold 7 was renders, but now an actual photo has reportedly leaked, seemingly showing the full back of the phone.
Shared by leaker Setsuna Digital on Weibo (via NotebookCheck), the image shows the Samsung Galaxy Z Fold 7 in a silver shade and with a design that’s similar to that of the Samsung Galaxy Z Fold 6 – complete with a triple-lens camera in an oblong housing.
It does look as though it might be wider than the Galaxy Z Fold 6, bringing it more in line with the Samsung Galaxy Z Fold Special Edition, but it’s hard to say for sure from this image. It being wider would however line up with a previous leak, suggesting the Samsung Galaxy Z Fold 7 will be 158.4 x 143.1 x 3.9mm when unfolded.
There’s not much else to take from this image, beyond it being a sign that the Samsung Galaxy Z Fold 7 is well on the way to launching – which makes sense, since we’re expecting to get an official look at it in July.
Image 1 of 2A leaked photo of the Samsung Galaxy Z Fold 7 (Image credit: Setsuna Digital)Image 2 of 2A leaked photo of the Samsung Galaxy Z Flip 7 cover screen glass (Image credit: Setsuna Digital) A look at the Galaxy Z Flip 7 tooHowever, in the same post, this source has also shared a photo that appears to show the cover screen display panel for the Samsung Galaxy Z Flip 7.
This supports previous leaks that pointed to an all-screen design, just with cut-outs for two camera lenses and a flash. That would mark a major departure from the design of the Samsung Galaxy Z Flip 6, which houses the camera in a panel above the display.
But switching to this design should allow for a larger screen, and while we’d take this image with a pinch of salt, this is a design we’ve heard mentioned numerous times now.
We should find out for sure what design the Galaxy Z Flip 7 will have in July, as that too is expected to land then.
You might also likeNintendo has confirmed that it will be returning to Gamescom this year. The annual event based in Cologne, Germany, is one of the largest on the gaming calendar.
And now that the Nintendo Switch 2 will be out by the time Gamescom occurs between August 20 - 24, it's something of a no-brainer for the company to be in attendance this year.
The news was confirmed by Nintendo's official German X / Twitter account. Using the website's built-in translation feature, the post reads: "Mark your calendar in red: Nintendo will be back at Gamescom in 2025. We look forward to welcoming you to Cologne from August 20th to 24th!"
Now, if you were hoping for a rundown on what Nintendo Switch 2 games will be featured at Nintendo's booth, that unfortunately hasn't been confirmed yet. It'll likely be a round-up of the usual suspects, particularly Metroid Prime 4: Beyond if that game hasn't been released by the time Gamescom occurs. Upcoming third-party releases like Hades 2 and Borderlands 4 could also make a potential appearance.
While I'm sure the likes of Mario Kart World and Donkey Kong Bananza will also be playable (even though these will have launched before August), Gamescom is also a great chance to preview games ahead of their release. That has me wondering if we can expect another Nintendo Direct presentation sometime between the Switch 2's June 5 launch and Gamescom's late-August dates.
Is the news of Nintendo's attendance at Gamescom this year surprising? No, not really. The company skipped out on last year's event, presumably because it didn't have much to showcase at the time for the aging Nintendo Switch hardware. Now that it has a fresh new console on the block, a return to Europe's largest gaming event should be a given.
You might also like...More Nintendo Switch 2 stock will be available at GameStop and Best Buy during the handheld's launch.
The Nintendo Switch 2 finally releases worldwide on June 5, 2025. Although UK and US pre-orders opened weeks in advance, some retailers have already run out of stock, and some fans have been unable to secure a console.
Fortunately, some retailers like GameStop and Best Buy will be offering new Switch 2 stock to those who missed out, but they'll only be available during the console's release.
"Didn't pre-order? Additional Switch 2 units will be available in-store and online at launch while supplies last," GameStop said in a social media post.
It will also be hosting a launch event, which begins in-store at 3 PM local time on June 4, with Switch 2 pickups starting at 12 AM EST / 9 PM PST.
Didn't pre-order Switch 2? We got you. pic.twitter.com/6Xa4QUzM3gMay 16, 2025
Best Buy also shared on its homepage that it will be hosting late-night store openings after midnight on June 5.
"In addition to fulfilling pre-orders, most stores will have limited inventory of systems, games and accessories for in-store purchase. Customers will also have the chance to receive a Nintendo collectible," the retailer said.
Although more stock will be available, Best Buy has warned buyers of crowds and long queues.
"Expect to see long lines at popular Best Buy stores in US cities hours in advance of the midnight release date, and some in the crowd may not be able to get the new console," Best Buy said in a statement to The Shortcut.
In case you missed it, the Nintendo Switch 2 will cost $449.99 / £395.99 or $499.99 / £429.99 for the Mario Kart World bundle which includes a digital copy of that game.
You might also like...Computex 2025 is underway, and we’re looking forward to seeing new hardware from the likes of Nvidia, AMD, and Intel – and the latter is already making an impression with its upcoming mobile processor lineup.
As reported by our friends at Tom's Hardware, Intel's demos at the big computing expo in Taipei included Panther Lake-powered systems, with Team Blue focusing on the power efficiency and gaming performance of its new mobile processor lineup – ultimately, aiming to match the power efficiency of the previous Lunar Lake lineup.
Intel's teasers and claims at the show add credibility to the rumors, based on leaked specifications, regarding upcoming Panther Lake processors using Cougar Cove P-cores (performance cores) and Darkmont E-cores (efficiency cores). It's also worth noting that the new processors are being built on Intel's new 18A node manufacturing process, which further helps improve performance.
We've previously seen the power efficiency of the Lunar Lake lineup, in particular in the Core Ultra 7 258V used in the MSI Claw 8 AI+. Power efficiency is one of the biggest highlights of the handheld gaming PC – to put it simply, gaming at 17W power consumption still yields great performance results while saving a lot of battery. Efficiency and performance were made even better with Intel's recent drivers, allowing better frame pacing.
Team Blue has also previously hinted at a “next-gen built-in iGPU”, which could prove to be a significant performance enhancer for portable gaming.
While Panther Lake is set primarily for the laptop platform, there's every chance we could see one of these iGPUs in an upcoming gaming handheld.
If Panther Lake is any better than this, I'll be more than happy (Image credit: Intel) The battle with AMD in the handheld gaming PC market is truly onWe're still awaiting the launch of a new handheld gaming PC powered by one of AMD's Ryzen Z2 Extreme processors – I'm expecting this to happen at Computex, considering the prototype reveal of the Lenovo Legion Go 2 at CES earlier this year and rumors regarding an Xbox-styled Asus ROG Ally. Until then, Intel is in the lead, in terms of a balance between power efficiency and gaming performance, with its Core Ultra 7 258V.
While the AMD Ryzen 9 AI HX 370 is an absolute powerhouse for gaming, and is used in the OneXPlayer X1 Pro handheld, I doubt that the X1 Pro’s battery life lives up to that of the Core Ultra 7 258V-powered MSI Claw 8 AI+. It's also far more expensive, heading into $1,000-plus territory (depending on the configuration).
Intel's Lunar Lake processor has been the most impressive to me for handheld gaming systems, as it appears to strike the perfect balance between great performance and enabling long gaming sessions thanks to its power efficiency.
If its Panther Lake processors take power efficiency and performance a step further, and AMD's Medusa Point struggles to match them in that department, I can only see Team Blue dominating the mobile processor market in the coming years, as handheld manufacturers won’t be forced to compromise on battery life.
You may also like...This year's Google I/O event is set to bring major announcements showcasing the future of Android XR, Gemini, and everything else the tech giant is working on.
Google showcased Android 16 last week, leaving lots of people guessing at what to expect during its flagship keynote this year. As we expect the focus to be less about Android and more about XR and AI, this year's Google I/O could be the biggest yet.
From Google's new AI Mode to Gemini Live, we expect some huge announcements that could shift the way we interact with the internet.
Starting at 10 am PT / 1 pm ET / 6 pm BST, we'll be covering all the latest announcements from Google I/O 2025.
Google I/O 2025: What to expectEverything we expect to see at Google I/O 2025 is still a mystery, here are some of the things we're hoping to get a glimpse of:
Welcome to TechRadar's Google I/O 2025 live blog! John-Anthony Disotto, Senior AI Writer, here to take you through the first few hours of today as we build up to one of Google's biggest events of the year.
So grab a coffee, set this tab up to the side of your monitor, and get ready for a huge day in the world of tech!
(Image credit: Google)Google I/O 2025 starts in around 9 hours, at 10 am PT / 1 pm ET / 6 pm BST. That gives us loads of time to take you through everything we expect to see at Google's headline keynote.
There's going to be loads of AI, maybe some Android, and definitely some surprises, so you won't want to miss what the tech giant has up its sleeve.
On Google's official website for the event, it says, "Discover how we’re furthering our mission to organize the world’s information and make it universally accessible and useful."
This makes me think we're going to see some big improvements to Google Search, and maybe even a wider roll-out of AI Mode.
AI Mode launched in beta earlier this year, bringing artificial intelligence to the forefront of the Google Search experience. Whether you love it or hate it, AI looks like it's here to stay, and Google Gemini is probably going to play a part.
(Image credit: Google AI Mode Screenshots)One feature I expect Google to talk more about today is AI Mode. TechRadar writer Eric Hal Schwartz has tried Google's AI Mode and says it might be the end of Search as we know it.
In his feature about the user experience he says, "There's always a lot going on in my area, but finding information on what's on can often be tough. Instead of checking six different websites and hoping they’ve been updated, I asked Google through AI Mode: “What are some local events happening in the Hudson Valley this weekend?”
As you can see above, the AI responded almost instantly with a tidy roundup of events. The list of links to the right showed where it was pulling from, and each event had a short description and details of location and time, as well as a hyperlink to where the information came from. The diversity of sources stood out, and I can't deny it was faster than a regular search plus time spent opening each site to see what was listed."
Think of AI Mode as Google's take on ChatGPT Search, although, are we ready to fully embrace AI search yet? I'm not so sure.
Google I/O 2025 takes place over May 20 and May 21, but the main event is the Google keynote, which starts at 10am PT / 1pm ET / 6pm BST, which is 3am on May 21 for those in the AEST time zone.
The keynote will likely be around two hours long based on past form, and you’ll be able to live stream it from Google’s I/O website, and also on the Google YouTube channel.
We’ve embedded the YouTube video below, so you can watch it without even leaving this page if you want – and if you click the ‘Notify me’ button on the video, you can get a notification when the event is about to start.
Normally we get a look at the future of Android at Google I/O, but this year is different after Google showcased Android 16 last week.
If you want to see what the upcoming mobile software update looks like, we've covered the 5 most useful features coming with Android 16.
Google Gemini updates? (Image credit: Shutterstock/ Sadi-Santos)In March, Google revealed Gemini 2.5 Pro Experimental, which the company called its 'Most intelligent AI model' yet.
I'm hoping to see more information on 2.5, and maybe a wider release. At the moment, naming schemes for AI models are getting increasingly hard to follow. Could Google rise up and find a way to simplify the process?
Gemini has so much to offer from Gemini Live, Deep Research, Canvas, Veo, the capabilities are almost endless. If Google could merge everything so that the AI can determine what you need, when you need it, that would be a major shift in the way we interact with artificial intelligence.