Feed aggregator

Thailand’s Cloud Security Standard took effect Sept. 10, 2026, raising compliance requirements for government, CII organizations, and cloud providers.

The post Thailand’s Cloud Security Standard Is Now in Force: What Providers and CII Operators Must Review appeared first on TechRepublic.

“Running a small business is ridiculously easy” – nobody, ever.

There is no denying that running a small business requires a specialist skills and approaching problem-solving like a competitive sport. With many small business owners working on their own, at least in the beginning, this adverse environment can feel lonely.

Sometimes, even the most motivated founder needs a nudge in the direction of progress. So, I’ve listed five quotes I’ve often read back to myself over the last 10+ years of small business ownership. I hope that you also find some spark of inspiration in these words.

Mark Twain on getting started

(Image credit: Getty Images/ Library of Congress)

Key takeaway: Stop waiting for the perfect time.

We’ve all been there: we have a great business idea, but the time isn’t right. The same excuses circulate in our heads. Not enough money, the market isn’t ready, where will I find the time…what if I fail?

This quote from Mark Twain reminds us that action always precedes progress. If you knew you needed to fail 100 times before you succeed, wouldn’t you want to start failing as soon as possible? The best time is right now.

Bill Gates on unhappy customers

(Image credit: Getty Images)

Key takeaway: Feedback isn't an attack; it's valuable R&D.

Small business owners can easily obsess over keeping customers happy. After all, losing just one customer can significantly affect business success. Here, Bill Gates reminds us that an unhappy customer actually presents an opportunity. Happy customers rarely offer honest feedback on where your business falls short, but an unhappy customer certainly will.

Taking the time to listen to an unsatisfied customer not only offers valuable business insight, but can help them feel valued, often turning them from unhappy to fiercely loyal to your business.

Winston Churchill on failure

(Image credit: Getty Images/ Keystone)

Key takeaway: Whether you are on a high or a low, remember it will pass.

Whether you are a fan of Winston Churchill or not, few will deny the power of this quote.

It reminds us that whatever is happening in business right now doesn't really matter, as long as we continue. Failures will come and go, but so will successes. So, enjoy successes while they last and rest easy knowing failures are temporary.

Larry Page on delighting customers

(Image credit: Getty Images/ Chris Hondros)

Key takeaway: Overdelivering is a powerful retention strategy.

The majority of businesses overpromise to get customers through the door, then underdeliver where possible to lower costs. You can set yourself apart by taking the opposite approach.

Sure, this makes customer acquisition a little harder, but it sure makes customer retention a lot easier.

Reid Hoffman on launching your business

(Image credit: Getty Images/ Dominik Bindl)

Key takeaway: Speed beats perfection.

Small businesses have one huge advantage over business behemoths: agility. Where big businesses spend millions testing behind closed doors, small businesses can launch lightweight and gather real feedback from real customers to improve future iterations.

• Zimperium uncovers Mantax Otax, Android malware merging infostealer, RAT, backdoor, and ransomware
• Distributed via APKs on third‑party stores, social media, and phishing; older Android versions most at risk
• Steals extensive data, enables remote monitoring, then encrypts files with AES and demands ransom

When threat actors target people’s devices, they usually infect it with one of many malware strains: an infostealer, a remote access trojan, a backdoor, or a ransomware encryptor.

Rarely do we see all of these functionalities merged into a single entity, and even rarer - to have it target Android mobile devices - yet, security researchers Zimperium discovered just that.

Mantax Otax

The security outfit published an in-depth report on Mantax Otax, a unique strain of malware circulating in the wild. It is apparently developed by an Indonesian threat actor, targeting victims in the country, but we don’t know exactly how many people are infected, or if this campaign is aimed primarily at business users, or individuals in general.

The malware is being distributed as a standalone APK, meaning it can be found on third-party app stores, Telegram channels, forums, and across social media. There are no traces of Mantax Otax on any of the official app repositories, including the Google Play Store, or Samsung’s Galaxy Store. Zimperium also speculates that it is likely being distributed via phishing emails.

Mantax Otax primarily targets users sporting older Android phones. Versions 9 and older are most at risk, since on these devices the attackers can make use of all of the malware’s features. Android 10 and newer models do get some protection:

“Conversely, on modern devices running Android 10 and above, the malware’s efficacy is severely hindered by native OS defenses, specifically Scoped Storage restrictions,” the researchers explained. “Due to these sandboxing rules, the ransomware is constrained to scanning only the application's localized external files directory, which drastically mitigates the blast radius and reduces the volume of accessible user files.”

Newer devices, as well as users of Zimperium’s Mobile Threat Defense (MTD) and Runtime Application Protection (zDefend) are said to be protected on a software level.

Another important caveat is the permissions. As is usual on Android devices, most malware won’t work unless the user grants an extensive set of permissions beforehand. In this case, Mantax Otax first asks for admin privileges, after which it grants itself an extensive list of capabilities, from accessing SMS messages, to contacts, audio, and images.

It then requests accessibility permissions, fully taking over the compromised device.

Malicious capabilities

Mantax Otax is said to be quite capable. It steals browser history, contacts, call logs, SMS messages, notifications, files, gallery media, Google account information, device specifications, location data, and application inventories. It can also pull WhatsApp information such as messages and profiles, and on Telegram it can also pull lock-screen PINs.

Infostealing features aside, it also serves as a remote monitoring tool, grabbing screenshots, recording the screen, or livestreaming it directly to the attackers. It can take photos using both the front and rear cameras, although Zimperium did not mention any microphone-recording capabilities.

Finally, once all of the data has been harvested, it encrypts user files with AES, deletes the originals, and appends a .enc extension. Victims are then shown a chat interface where they can communicate with the attackers directly and negotiate a ransom payment in exchange for getting their device back.

The tool seems to be in continuous development. Zimperium found two separate versions, one being an “evolution” of the other: “Notably, it has modified its network traffic behavior to utilize WebSockets and introduced a set of new commands,” the researchers said.

There is a reason why ransomware operators prefer targeting businesses instead of individuals. Although the latter has not disappeared entirely from the victim list, businesses stand to lose a lot more from disrupted operations and, as such, are targeted more frequently. Unfortunately, we don’t know what kind of app Mantax Otax is spoofing, therefore it is difficult to assess who the targets are.

Commentary: I can’t figure out if the Duo would replace my iPad, or if it’s just a portable alternative.

NPR reflects on the events of 9/11 and the toll it left on the U.S. 25 years later. And, President Trump and Vice President Vance's convention speeches urge voters to back the GOP in the midterms.

(Image credit: Leonardo Munoz)

If you've worked in cybersecurity for as long as I have, then you'll know there are a couple of things you can count on. First, the threats that are out there never stop evolving. And second, sooner or later, you're going to be in the bullseye.

What makes life so much harder today is that AI and other automated tools have dramatically narrowed the gap between vulnerability discovery and the time it takes to exploit them.

And when this can now be measured in minutes – seconds, even – you know you have a problem. This fundamental change in the way adversaries operate means we no longer have the luxury of time to understand an attack, assess the risk and decide what to do next.

Which means we have to be better prepared and have resiliency for whatever is thrown at us.

Visibility is key

For me, that starts with accepting a simple reality: you cannot defend what you cannot see. And it’s why visibility is one of the most important capabilities an organization can develop.

After all, if you understand what exists within your environment – how those systems interact and what normal looks like – then you're in a much stronger position to identify unusual behavior before it develops into something more serious.

Observability, on the other hand, takes that visibility to the next level. It provides the context security teams need to make informed decisions quickly, especially when time is working against them.

In other words, visibility tells you what is happening, while observability helps you understand why it's happening.

And that’s crucial. Today's organizations operate across on-premises infrastructure, cloud environments, networks, and an increasing number of connected technologies.

As those environments become more distributed, understanding what's happening across them becomes significantly harder.

Without that visibility, it's difficult to understand where your risks are, how systems interact, or where an attacker may be able to exploit a weakness.

Think like a hacker

Which leads me neatly onto my next point. Throughout my career, including my time working in offensive cyber operations in the intelligence community, I've found that the most effective way to understand risk is to think like the adversary.

I start by asking how someone would attack an organization and then work backwards to identify and close gaps.

That’s because attackers don't see organizations in the way that you or I might do. They’re always on the hunt for a toehold in. They look for weaknesses in people, processes and technologies.

They look for the easiest route first to achieve their objective. And then they exploit that weakness.

And it’s an approach I would urge all security leaders to adopt if they want to stay one step ahead.

That means continuously asking where an attacker would start, how they would move through the organization and what controls would slow them down or stop them altogether.

But for this to work, it also requires organizations to design resilience into the way they operate. And that’s something we’ve embedded across our organization.

For instance, we have internal and external teams that conduct continuous product, enterprise, spear-phishing and physical penetration testing.

For us, it's about educating the team across the business to ensure they remain vigilant. But it’s also about inoculating people so that when they see something suspicious online, they have that instinct that something might be wrong and they report it.

We also want to make it easy for people to report events so we can analyze them quickly and better understand the targeting.

Secure by design

We’ve also invested heavily in Secure by Design to ensure that all the products we deliver to customers are as secure as humanly possible. In practice, it means being able to trace every piece of code back to its source and verify its integrity throughout the development process.

It's similar to maintaining a chain of custody for evidence. We want to know exactly where software components come from, how they're verified and how they're protected throughout the entire build process.

More broadly, Secure by Design is increasingly being adopted across our industry as organizations recognize the importance of software integrity, traceability and transparency throughout the development lifecycle.

This is important because, as I said at the beginning, there are two certainties in cybersecurity: threats will continue to evolve, and organizations will continue to be targeted. Businesses across the world must adapt quickly to the grim reality that a cybersecurity incident isn’t a matter of if, but a matter of when. And AI is supercharging the pace at which all this is happening and broadening the blast radius of any attack.

That’s why you need to understand your environment well enough to reduce unnecessary risk, detect malicious activity quickly and limit the blast radius when something does happen. Pair that with a clearly defined and tested plan for recovery and that's what robust cyber resilience looks like in practice.

We've featured the best endpoint protection software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Apple’s and Google’s phones are both rated for dust and water resistance. Here’s how they compare when it comes to other features such as cameras, battery life and displays.

Defense is operating in an environment where the pace of change continues to increase. Adversaries are adapting quickly and technology development cycles are becoming shorter. The boundaries between physical and digital operations are also becoming harder to define, while military commanders have more information available to them than ever before.

This changes how operational advantage is achieved. The performance of an individual platform or system remains important, but so does its ability to work effectively within the wider operational environment. Information needs to move securely to where it is needed, supporting decisions and action across different domains.

As new technologies are introduced, integration will become an increasingly important part of defense capability. The challenge is making sure innovation can be put to practical use alongside the systems and infrastructure already supporting operations.

Connecting technology across defence

Conversations around defense innovation often focus on AI, autonomous systems, advanced sensors, cyber capability and space assets. Each has a significant role to play, but none operates in isolation.

Information gathered by one system may need to be shared across multiple domains before it supports an operational decision. Networks, data, command systems and people all contribute to that process. The value of any individual technology is linked to how effectively it connects with the wider operational environment.

This principle also applies to the infrastructure supporting military operations. Communications networks, operational facilities and digital systems all contribute to creating an environment where information can move securely and reliably. As these environments evolve, resilience and security must be designed from the outset though approaches such as secure-by-design and zero-trust principles.

Strengthening the foundations of operational capability

AI has become one of the defining topics in defense. Its ability to process information and support decision-making has significant potential, but those capabilities depend on the quality of the data available and the resilience of the infrastructure that carries it.

Reliable communications, trusted data and secure networks remain fundamental to operational effectiveness. If those foundations are unavailable or compromised, the benefits of advanced technologies are reduced.

Therefore, creating decision advantage is not simply a technology challenge. It is an infrastructure and digital challenge and increasingly, a collaboration challenge.

For organizations supporting critical infrastructure, this has become an increasingly familiar challenge. Communications, operational technology, and digital infrastructure must work together to create environments where reliability cannot be compromised.

Keeping people at the heart of automation

Automation is attracting considerable attention across defense as organizations are looking to improve efficiency and increase operational tempo. However, automation should never be viewed as an end.

Its greatest value often comes from reducing routine activity rather than replacing people. Predictive maintenance, autonomous monitoring, automated network management and logistics optimization all help reduce the time spent on repetitive tasks, allowing highly trained personnel to focus on areas where experience and judgement remain essential.

The most effective technologies do not replace human capability - they amplify it.

The infrastructure supporting multi-domain operations

As operations become increasingly integrated across land, sea, air, cyber and space, infrastructure is taking on greater strategic importance. Communications, transport, energy, and digital systems all contribute to operational capability, showing how infrastructure and technology are becoming increasingly interdependent.

The movement of people, information, energy, and capability all contribute to operational readiness. Reliable infrastructure enables those elements to function as a single system, ensuring capability can be delivered when and where it is needed.

One example can be seen in the Falkland Islands, where runway infrastructure forms part of maintaining long-term strategic capability and readiness. It illustrates how infrastructure and operational capability are becoming increasingly interconnected.

Bringing innovation into operational use

The UK benefits from an established community of innovators, with government, industry, academia, SMEs and the Armed Forces all contributing to the development of new ideas and technologies. The opportunity now is to ensure those innovations can be adopted enough to meet operational needs.

Collaboration is still a critical part of this process. Bringing together different perspectives helps ensure technology is developed with practical application in mind and can be integrated more effectively into future capability.

Delivering the next phase of defense capability

Much of the technology required to support future defense operations already exists. The focus now needs to be on how quickly it can be integrated and put to operational use, giving the Armed Forces the advantage they need as threats and operating environments continue to change. That requires stronger connections across networks, data, platforms, people and infrastructure.

Collaboration between government, industry, academia, SMEs and the Armed Forces will remain central to moving capability from development into deployment. Technologies also need a clearer and faster route beyond demonstrations and pilots, so useful capability reaches operators when it is needed.

The organizations that succeed will be those able to bring people and technology together across the wider defense environment. Doing that securely, reliably and at pace will determine how effectively innovation translates into operational advantage.

We've featured the best AI tool.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Meta wants to upgrade ex-managers back to managers
• 7,000 workers were moved into the Applied AI org earlier this year
• Company's CTO admitted previous workforce changes were "atrocious"

Meta has reportedly partially reversed its decision to push for flatter, manager-light teams by asking some employees in its Applied AI business to move from individual contributor roles back into managerial positions.

New Business Insider reporting suggests Meta is asking certain workers to volunteer themselves as managers rather than forcing them into it, but without the company sharing comment on the matter, it's unclear how workers who refuse may be impacted.

As for the business itself, it's a pretty new one that was established this year, with around 7,000 employees shifted under the Applied AI umbrella.

Meta wanted fewer managers, now it wants more

Some of the workers who were previously assigned as managers were reassigned as individual contributors when they joined the Applied AI org, with Business Insider previously reporting how many workers felt they'd effectively been "drafted" into the business, highlighting ongoing friction internally.

The manager-light stance comes from CEO Mark Zuckerberg's 'Year of Efficiency' announcement in 2023, when he argued that a flatter organization could be more nimble and better poised for change.

With the company as a whole now on track to spend over $130 billion this year on AI chips and infrastructure, it's possible that a growing Applied AI organization could be behind the need for more traditional management.

Still, Zuckerberg's efficiency-driven, manager-light program seems to remain in force across other areas of the business, with this push for new managers looking to only be affecting Applied AI.

Separately, CTO Andrew Bosworth previously admitted that Meta's rollout of its new AI division was "atrocious" (via Wired), promising better communication for future changes.

"We shook up the management structure that was providing you stability while rapid changes in strategy, including the boom/bust cycle of hiring, left entire teams in the lurch," he admitted.

Diesel prices in the U.S. has hit yet another record, soaring past $6 a gallon on average as Washington's war with Iran disrupts the world's flow of fuel

(Image credit: George Walker IV)

AI has rewritten the enterprise data playbook. Workflows no longer just create temporary operational data, but vast amounts of high-value assets, from LLM training datasets and model outputs to logs, metadata and archived knowledge that may need to be preserved for years.

As enterprise tech leaders seek to scale infrastructure to meet these demands, storage requirements are undergoing a fundamental shift. Capacity and performance remain critical, but data security has become equally important. Today, long-term data integrity and absolute cyber resilience carry equal weight.

Protecting this data, however, is no longer just about defeating today’s threat vectors. It requires preparing storage infrastructure for a significant shift: the arrival of quantum computing.

Data is a long-term strategic asset, not a short-lived trend

AI is accelerating data growth, but it can also extend the useful life of information. Data recorded today will be harvested for compliance, advanced analytics and model retraining for years to come.

To manage this economically, enterprise architectures rely heavily on high-capacity HDDs. While flash technologies dominate performance-critical hot tiers, HDDs remain the undisputed backbone of large-scale storage, providing the capacity, economics and longevity needed to archive data at scale.

As a result, organizations must consider how to protect not only today's data, but also its future value. After all, if the underlying infrastructure is compromised down the road, the very assets driving future AI innovations become the biggest operational and regulatory liability.

Harvest now, decrypt later

Current encryption technologies remain effective against conventional threats. However, quantum computing is expected to challenge some of the cryptographic methods used for authentication and key exchange.

This has led to concerns around “harvest now, decrypt later” attacks, where encrypted data is collected today with the expectation that future quantum capabilities could potentially decrypt it later.

For organizations storing sensitive intellectual property, research data or AI training datasets, this means security decisions made today could have implications for years to come.

Preparing for that future requires action from security leaders and IT directors now.

Security must be built into the infrastructure

Security is often viewed through the lens of data encryption, and with good reason. Self-encrypting drives (SEDs) provide always-on, hardware-based AES-256 encryption that helps protect data at rest without impacting performance.

But protecting data alone is no longer enough.

Storage devices themselves must be trusted. Firmware, authentication mechanisms, provisioning processes and diagnostic tools all play a role in ensuring a drive operates securely throughout its lifecycle.

If attackers compromise a device's firmware or trust architecture, broader security controls can be undermined regardless of how data is encrypted elsewhere in the system. This makes storage security a critical component of overall cyber resilience.

Implementing quantum-resistant defenses in storage

To counter these emerging attack vectors, the storage industry is actively embedding post-quantum cryptography into hardware architecture of enterprise hard drives. Rather than focusing solely on protecting data, the objective is to protect the trust architecture that underpins the drive itself.

Post quantum cryptography (PQC) technologies are being incorporated into areas such as secure key establishment, firmware authentication, secure provisioning, and trusted diagnostics. These capabilities are designed in alignment with established NIST post-quantum standards and are implemented using hybrid approaches that combine classical cryptography with quantum-resistant algorithms.

In practical terms, this means that the mechanisms responsible for establishing trust, validating firmware integrity and protecting administrative functions can remain resilient against both conventional and future quantum-enabled attacks. With the operational service life of HDDs often spanning 5 years (or more), implementing PQC today helps protect against quantum-based threats that may not materialize for several years, but that we know are coming.

Importantly, HDDs have long incorporated security controls to defend against today's threats. PQC does not replace these protections; it enhances them by adding an additional layer of resilience against emerging attack vectors.

Trust in the AI era

For many years, storage innovation was primarily defined by increases in capacity. Today, the expectations placed on infrastructure are much broader.

Organizations seek storage platforms that can scale with AI-driven data growth, deliver reliable performance, preserve integrity over long retention periods and withstand an increasingly complex threat environment.

PQC represents an important step in that evolution. By extending protection beyond data encryption and into the trust mechanisms that underpin storage devices themselves, PQC-enabled HDDs help organizations prepare for the security challenges of tomorrow while protecting the data they manage today.

As AI continues to elevate the strategic value of enterprise data, security can no longer be a short-term, reactive consideration. Trust must be engineered directly into the hardware layer and built to outlast the threats of today, tomorrow and the quantum era ahead of us.

We've featured the best SSD.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Qobuz wants you to make a memory-filled playlist, and explain it
• You can win an iFi iDSD GR 2 for your efforts
• World Alzheimer's Month runs through September

Alongside 'Fast songs for the gym' and 'Band 101 for introducing a partner to a band on the eve of going to their gig', remembering moments or periods of your life is one of the most important reasons we make playlists. I still listen to "mix-tapes" (in digital format, mostly) I made while living abroad, road tripping around the outback or preparing for big university parties.

Now, streaming service Qobuz has taken time off its war on AI slop to acknowledge the link between music and memory for World Alzheimer's Month, teaming up with hi-fi tech brand iFi Audio to do so.

World Alzheimer's Month runs through September, and during that time, Qobuz and iFi are running a competition to submit a memory-laden playlist, and perhaps win an iFi iDSD GR 2 for your efforts.

Wait, what's the link? Well, it has been shown that musical memory remains well-preserved in Alzheimer's sufferers, and so a song may help with memory recall.

I'm getting this from a study published in the National Library of Medicine, which suggests that music interventions can "delay and decelerate the neurodegeneration in individuals at risk". But my colleague and Audio Editor tells me she has seen music's profound effect on memory recall in a fellow dancer who (even in advanced stages of this progressive disease) could still perform decades-old choreography, if the music were played.

Many non-profits, including Music & Memory or Playlist for Life, exist to help people by providing training, awareness or music-based care, to aid those suffering with various degenerative illnesses.

What about that competition?

(Image credit: iFi / Qobuz)

Oh yes, the competition.

During September, Qobuz and iFi want you to make a playlist (on the former's hi-res download and streaming platform, of course) full of songs which bring you back to a certain time or important memory.

Then, you need to head over to iFi Audio's competition landing page, which will give you a few steps to complete and fields to fill in.

This page also lets you provide a 'short story' or description of what the playlist means to you. There's no stated word count, but this whole news story could be pasted into the field with without a problem.

Once you've submitted your playlist, you'll be in with a chance to win the iFi iDSD GR 2 DAC (or digital-analog-converter, to level up your music using, say, the USB-C port on your phone, and on to your wired headphones or earbuds), worth $529 / £529 / AU$849. And that's a great prize. We gave the iFi IDSD GR 2 a perfect, 5-star review, praising its sound quality and easy-to-use touch-screen. So good luck!

There's no indication of how the brands will choose a winner; if it'll be based on the description, or tracks, or at random. It's also not clear what will happen to the rest of the playlists; maybe Qobuz will publish some of its favorites for all to see, but perhaps the submission is just for the purposes of the competition. Either way, delving back into old albums and tracks that really take you back to a specific moment will be a cathartic — and sometimes profound — experience. Music's great, isn't it?

FastestVPN is a cost-effective VPN solution based in the Cayman Islands, which makes it a solid choice for privacy-conscious users. However, in our testing, we found that while the service offers decent functionality and has come a long way in terms of privacy, features, and app usability, it still underperforms when compared to today's best VPNs.

That’s not to say FastestVPN isn’t worth considering, though. In addition to its sub-$1 two-year introductory plan, its lifetime VPN plan at just $40 is something you’ll rarely find elsewhere. It also boasts an audited no-logs policy and apps for all device types, and unblocks most popular streaming platforms with ease. Read on to see whether FastestVPN is worth your time.

Features

FastestVPN offers a standard suite of VPN features, along with a few less-common extras.

Even though it has a relatively small pool of servers, it’s impressive that FastestVPN offers P2P-optimized servers, allowing you to download and upload P2P files with increased security. Combined with its port forwarding feature – which can further boost download and upload speeds – FastestVPN is a solid option if you’re looking for a torrenting VPN.

Other than that, there’s also an ad blocker that enhances your online experience by ensuring you’re not bombarded with frustrating and potentially malicious ads. FastestVPN is also one of the very few VPNs to offer extra device logins for an additional fee. While it comes with 10 simultaneous connections by default, you can add more devices for $4 per device if you want to share the love.

Other add-on options include a dedicated IP and port forwarding, both of which are extremely reasonably priced. Admittedly, most VPNs don't provide port-forwarding, but some generous services (like Private Internet Access) offer it for free.

Plus, regardless of the plan you choose – monthly, yearly, or the exclusive lifetime plan – you’ll also get two years of free access to the FastestPass password manager, which helps improve the security of your online accounts and reduce the risk of identity theft by creating and safely storing highly secure passwords.

Features score: 5/10

(Image credit: FastestVPN)Server network

FastestVPN has over 800 servers spread across 49 countries, with over 100 locations to choose from. While there are plenty of servers across Europe, as well as access to the US, Japan, Australia, and Canada, it's not particularly comprehensive across the Middle East, Africa, or Asia.

Server locations, though, don’t add up: the website claims 100+, yet we could only count 66. It seems FastestVPN is inflating the figure by listing individual servers as distinct locations.

So, while it might not be the first choice for users in some of these countries, the good news is that all the popular streaming locations you’d expect are easily accessible.

The provider also recently rolled out a double VPN feature, which, as the name suggests, routes your internet traffic through two servers instead of one, adding an extra layer of encryption and security to your data.

Admittedly, FastestVPN is nowhere close to the thousands of servers offered by industry leaders like NordVPN, Surfshark, or ProtonVPN. However, it’s also worth considering that FastestVPN doesn’t have the same volume of users as these top providers. Still, I’d like to see the service add more servers and locations.

Server network score: 6/10

Apps

When you jump into the FastestVPN downloads page, you're immediately presented with nearly twenty different platforms to choose from. FastestVPN supports fully-fledged apps on Windows, macOS, iOS, and Android, as well as browser extensions for Chrome and Firefox.

For everything else like routers and TVs, there are setup guides available on the support site. There's a download link for Linux, too, but it just takes you to the features page. You'll have to read the support blog and use a third-party client – which can be tricky if you're not a tech-savvy Linux user.

Apps score: 8/10

(Image credit: FastestVPN)Ease of use

For me, this is where FastestVPN disappoints. When you boot up the VPN, you're immediately presented with the full app. However, trying to actually use it bounces you over to the login screen.

It's slightly confusing, but once you're through it only takes one click to connect to your nearest server. Even though it's easy enough to read and navigate, the actual app looks a little rough compared to some of its closest competitors.

Unfortunately, trying to use FastestVPN for the first time on a Mac testing machine brought up some issues with the app. After trying to connect to the DVPN servers for testing, the app shut down and wouldn't restart even after a reboot. I couldn't replicate this issue on any other platform, but if you're hunting for a bulletproof Mac VPN app, you might need to look elsewhere.

Ease of use score: 6/10

(Image credit: FastestVPN)Speed and performance

As our speed tests show, FastestVPN isn’t the fastest VPN – it’s actually one of the slower ones we’ve tested.

Against a 135 Mbps baseline, we managed just 105.5 Mbps on a local UK server, a loss of nearly 22%. In comparison, Mullvad lost under 5% and VPN Super a little over 12%. Speeds dropped further over distance, reaching just 86 Mbps on US servers – again, well behind both rivals.

Provider

UK-UK average download speed

Baseline retention percentage

UK-US average download speed

Baseline (no VPN)

135 Mbps

100%

N/A

FastestVPN

105.5 Mbps

78.1%

86 Mbps

Mullvad

128.5 Mbps

95.2%

121.5 Mbps

VPN Super

118.5 Mbps

87.8%

120 Mbps

FastestVPN’s results were also far less consistent over long distances than Mullvad’s, suggesting limited system capacity and too many users competing for the same resources at peak times.

These speeds don’t match up to our top VPNs, but they'll still suffice for most activities. If you need a VPN for gaming, torrenting, or HD streaming, then FastestVPN isn't a bad choice.

Speed and performance score: 7/10

Unblocking

FastestVPN might not be the fastest, but is it capable of working with streaming services?

To test a VPN's unblocking claims, we skip all of the marketing material and go straight to testing the top streaming sites. We check out multiple different Netflix regions (the US, Canada, UK, Japan, and Australia) as well as Amazon Prime and Disney+. We even check out some regional providers, like BBC iPlayer and ITV, too.

Unfortunately, streaming was a mixed bag. FastestVPN worked with Netflix (US, UK, Australia, Canada, and Japan), Amazon Prime Video Canada, Disney+ (US, UK, and Canada), DAZN (US and Canada), and YouTube UK, plus local services like BBC iPlayer and ITVX.

Elsewhere, results were patchier. Although it worked with 7Plus and 9Now in earlier testing, FastestVPN has since removed its Australian servers – and even then, more than one server was needed to access 7Plus.

The Canadian specialty streaming server couldn’t unblock DAZN or Prime Video, though one in Montreal could. Servers in Japan refused to open Disney+ or YouTube at all, and FastestVPN also failed with Amazon US and Canada, DAZN UK, and YouTube Canada.

Torrenting thankfully works pretty well on FastestVPN's dedicated P2P servers, and the inclusion of port forwarding means you'll be able to connect to the full swarm whenever you're torrenting.

Unblocking score: 6/10

Privacy and security

FastestVPN doesn't have the extensive suite of security tools you'd see from a provider like NordVPN or Surfshark, but it does cover the basics.

It offers all the VPN protocols you’d expect from a top service, including OpenVPN, WireGuard, and IKEv2, allowing you to choose the best option for your specific use case. On top of that, all FastestVPN apps have been audited and use the highly secure, industry-standard AES-256 encryption.

That said, it has yet to announce support for post-quantum encryption, which is becoming increasingly important as it protects your data against the threat of quantum computers and Q-Day.

Digging into FastestVPN's privacy policy revealed that the VPN commissioned its first no-logs audit in 2023 from Altius IT, a California-based auditing company with over 30 years of experience. The full report makes for illuminating reading. You can check it out yourself via the provider's site and the link included at the bottom of the page.

The only information FastestVPN logs is the date you connect to the VPN service and your email address. While this is certainly excellent and in line with what we expect from a private VPN, the provider hasn’t undergone another audit since. Ideally, a VPN should regularly submit its no-logs policy for independent verification.

Even if law enforcement does come asking for the little information that FastestVPN holds onto, it's headquartered in the Cayman Islands. This puts it far outside of the jurisdiction of Five Eyes nations while retaining strict data laws with a national data privacy policy comparable to GDPR.

However, the company’s LinkedIn and Trustpilot pages list US addresses. This would be a very different picture for privacy, given US retention laws and Five Eyes membership. Adding to transparency concerns, there’s very little information about the people behind the company.

Privacy and security score: 7/10

Customer support

FastestVPN offers 24/7 live chat and email support, but its support section lags behind. Many setup guides are outdated – some still recommend PPTP, a long-obsolete and insecure VPN protocol dropped by other VPNs, with no warning of the risks. The site’s search engine is poor too: searching “slow vpn” returned just three results, only two of which displayed, and neither was relevant.

Accessibility is equally disappointing. The website scored just 10% on AccessibilityChecker, with structural issues that make pages hard for screen readers to interpret and poor color contrast for users with limited vision.

The Windows app fares no better: Tab switches between controls but without any highlight, making it impossible to even connect using the keyboard alone.

Customer support score: 8/10

(Image credit: FastestVPN)Track record

For a vendor with nearly a decade of experience, FastestVPN has a relatively uneventful history.

No traffic breaches, no huge exploits, no scandalous lawsuits. Instead, it's a VPN that has been slowly but steadily reinventing itself over and over into what is now a decent service. Maybe it isn’t at parity with top-tier VPNs, but WireGuard integration and a no-logs audit put it above a big chunk of the industry.

However, FastestVPN's reviews don't quite paint the same story. Some of the reviews I read complain about the lifetime plan running out or having other subscription issues, although it seems like the support team is pretty good at catching these complaints and rectifying them.

Track record score: 8/10

Pricing and plans

FastestVPN is one of the most budget-friendly VPNs around. At $5, its one-month plan is far cheaper than NordVPN ($14.99) or Surfshark ($16.45) – though these are among the best VPN services on the market – making it great for short-term coverage or a risk-free trial.

Longer plans offer even better value: the two-year subscription costs $19.95, working out at just $0.83/month – an 83% saving that rivals can’t match. FastestVPN is also one of the few providers to offer a lifetime plan at $40, less than two or three months with many competitors.

All plans include a 31-day money-back guarantee, though oddly its own support pages cite 15 days instead.

While the subscriptions are excellent value, the add-ons aren’t. Dedicated IPs are reasonable at $1.20/month, but extra devices are poor value. On the two year plan, adding five devices ($20) costs as much as buying an entire second two year plan with ten more connections.

Pricing and plans score: 9/10

Should you use FastestVPN?

FastestVPN is a strong budget option for those looking for basic security and privacy without breaking the bank. It's not the fastest VPN, despite its name, and it doesn't have the largest server network. That said, its affordability and core privacy features make it a solid choice for if you're a casual VPN user who's willing to compromise on some performance for a significantly lower price point.

However, if you require a VPN with high-speed performance, global streaming access, or advanced security tools, premium services like ExpressVPN or NordVPN may be better options.

FastestVPN alternatives

1. NordVPN – from $3.39 per month
The best VPN overall
There's no better VPN in the industry if you need a fast and secure provider with global server access. With a variety of security and performance features, including a built-in virus scanner and double-hop servers, NordVPN is great value for money.View Deal

2. ExpressVPN – from $3.49 per month
The best VPN for beginners and the most secure
ExpressVPN offers fantastic blocking capabilities with a nearly unparalleled set of locations to choose from. ExpressVPN guarantees high-speed obfuscated connections with its own proprietary VPN protocol, Lightway, as well as a high-quality server bank and audited no-logs server technology.View Deal

3. Proton VPN – from $3.49 per month
A superb all-round VPN and online security alternative
Proton VPN is the best free VPN out there, with a truly unlimited bandwidth plan across three different locations. Built by the minds behind Proton Mail, Proton VPN also provides a range of privacy-first features which make it a great choice if you're concerned about your internet data. The standout of these is Secure Core, which allows you to chain your VPN connection through multiple servers for better security.View Deal

FastestVPN FAQsAre all VPNs required to have a no-logs audit?

No, most VPNs do not provide proof of a no-logs audit. FastestVPN is one of the few VPNs on the market to have contracted a third party to audit its privacy policy.

Spoilers for The Paper season 2 ending ahead.

Regardless of whether you love or loathe Esmeralda (Sabrina Impacciatore), you can't deny that she's made The Paper season 2 ending incredibly memorable.

While Ned (Domhnall Gleeson) comes to Mare's (Chelsea Frei) rescue at The Cincinnati Chronicle, Esmeralda is on a mission of her own. Distraught by the news that her son has got C on his latest school exam, she undertakes an undercover investigation to get to the bottom of the "injustice."

As Oscar (Oscar Nuñez) tells us, these Esmeralda specials tend to be a regular occurrence. She's donned a fat suit to protest weight restrictions at a local playground, and disguised herself as a balding, older man to work out why those who "aren't attractive" are having problems dating.

This time, Esmeralda's transformation comes in the form of a teenage boy, dressing up in a short brown wig, baggy football jerseys and a backwards cap — much like a member of N*SYNC — to infiltrate Matteo's (Zak Messinger) class, though she's immediately detected.

While Matteo is willing to indulge her ridiculousness (albeit for a short time), the sheer stupidity of it all makes it the best moment in the entire season. But which disguise did Impacciatore find the most uncomfortable?

'I was shocked when I looked in the mirror'

"I had so much fun with that," Impacciatore tells me. "The most uncomfortable was the woman.... but the older man was horrible.

"I felt so shocked looking at myself in the mirror, and that shock remained for a good few days. I didn't recognize myself... just a very shocking experience. It's literally just for a few seconds in the show, but the experience of it lasted."

Personally, I'd enjoy an entire episode dedicated solely to Impacciatore's old man, who tells a group of attractive younger women at a bar that just because he doesn't look like Marlon Brando — already an outdated reference — doesn't mean that he should be ruled out.

While Esmeralda is probably the least predictable character of the bunch, these episode 10 transformations do set her up for future undercover investigations if The Paper season 3 is greenlit.

If her more direct exposé has almost cost Esmeralda her job and status at the Toledo Truth Teller, then why not try alternative methods to do exactly what she wants to? Watch this space, is all I'm saying.

• Marvel has seemingly cast a Gen V alumnus as Angel in its new X-Men movie
• Asa Germann is said to have signed on to play the winged mutant
• For the most part, MCU fans have reacted positively to the news

Marvel has reportedly tapped Asa Germann to play Angel in its new X-Men movie.

The Hollywood Reporter (THR) first broke the news, with the trade publication's sources claiming that the former Gen V star has signed on to play the winged mutant in the Marvel Cinematic Universe (MCU).

Interestingly, THR suggests that Germann was a major contender to portray Scott Summer/Cyclops in the forthcoming flick. However, while Marvel decided to hire Kit Connors to play Cyclops in its X-Men reboot, the comic giant's top brass were so impressed by Germann's audition, they offered him the role of Angel instead.

After appearing in The Boys spin-off Gen V, Germann has some superhuman experience under his belt (Image credit: Prime Video)

At 28 years old, Germann is on the older side of the Marvel Phase 7 movie's cast, with many of his fellow stars in the 20 to 25 bracket. Nonetheless, Germann fits the bill as an actor under the age of 30 who, as long as he's signed a multi-picture deal, could feature in numerous X-Men and MCU movies over the next decade.

Real name Warren Worthington III, Angel is a founding member of the X-Men in Marvel Comics. As his mutant alias implies, he's defined by a pair of giant, white feathered wings that protrude from his upper back. Unsurprisingly, these allow him to fly, but Angel also boasts the usual superhuman abilities — super-strength, reflexes, stamina, and durability — that keep him in the fight for longer than ordinary people.

Germann won't be the first actor to embody Angel on the big screen. Indeed, Ben Foster portrayed the Marvel character in 2006's X-Men: The Last Stand, while Ben Hardy played the same individual 10 years later in 2016 movie X-Men: Apocalypse. For more on those films and other mutant-led flicks, find out how to watch the X-Men movies in order.

What have Marvel fans said about Asa Germann's casting as Angel in the MCU's first X-Men film?Comment from r/marvelstudios

In the main, MCU fans have lauded Germann's casting. Indeed, threads on r/MarvelStudios, r/MarvelStudiosSpoilers, and the ResetEra forums are filled with comments from people excited to see what Germann will bring to the table as part of his portrayal.

Funnily enough, as one eagle-eyed fan pointed out, Germann's first name actually means 'wing' in Portuguese, too. It's almost as if this was planned, isn't it!

While the vast majority are pleased with this hiring — shout out to long-time MCU casting director Sarah Halley Finn for yet another great pick, by the way — a couple of fans are giving themselves a well-earned pat on the back for previously suggesting that Germann would be their top choice for Angel. Not exactly the proven leaks we're used to, but I'll allow it.

Anyway, what do you think of Germann's casting? Let me know in the comments, and if you want to read more on the first MCU movie he'll star in, find out everything else we know so far about Marvel's new X-Men movie.

The newest Apple smartwatches have premium features — and prices to match.

• OpenAI for Financial Services comes with built-in premium datasets
• Third-party subscription sharing is also in the works
• GPT-6 promises 100% on the 256-512K Long Context benchmark

OpenAI has lifted the wraps off ChatGPT for Financial Services, its latest industry-specific version of ChatGPT Work designed to give sector professionals access to relevant reasoning and models.

The company warned that analysts regularly spend too much time finding data, checking figures, building models and turning complex analysis into presentation-friendly reports – all things it hopes to be able to tackle with this iteration of ChatGPT Work.

Core to this new product is, of course, GPT-6 Astra, but OpenAI also worked with investment experts from Morgan Stanley and Evercore to guide its development.

ChatGPT for Financial Services

With the launch of ChatGPT for Financial Services, OpenAI has built premium datasets from the likes of Daloopa, PitchBook and LSEG News directly into the tool, so users won't need to negotiate their own external datasets. By hosting and indexing that data itself, OpenAI can ultimately improve performance and latency for end users.

OpenAI also promises to be working with S&P Capital IQ, LSEG, MSCI, Dow Jones Factiva and Moody’s so that users can access their subscription benefits directly through their ChatGPT login to reduce the friction further.

All of this with the benefits of OpenAI's latest frontier model, Astra, which sees marked improvements across the board. The jumps from 91.5% to 100% at 256K-512K and from 73.8% to 96.3% at 512K-1M are especially noteworthy on the Long Context MRCR benchmarks when compared with GPT-5.6 Sol, because finance work often requires handling long documents like annual reports and filings.

The company also advertises a 100% score for the ExploitBench cybersecurity benchmark, which should come as welcome news to this highly-regulated industry.

Only eligible financial institutions will gain access to the tool for now, and they must contact OpenAI for options.

"ChatGPT for Financial Services is one way we serve customers across the industry, but we recognize that it will require a range of solutions to address the needs of the finance industry," the company said in its launch blog post.

"OpenAI has a long history of collaborating with innovators to unlock novel AI solutions. Financial services firms and developers can use our API to build specialized applications for the needs they understand best. OpenAI brings frontier models and the capabilities to put them to work. Financial institutions, data providers, and software partners bring specialized expertise, trusted information, and customer relationships."

Hunting for an iPhone 18 Pro case to go with your shiny new handset? I'm here to help. I've rounded up my favorite cases and covers from some of our favourite brands. Sure, you can get cheaper options if you go for a weird, no-name brand on Amazon, but with a phone this pricey, it really is worth paying a bit more for a case that's going to provide proper protection.

If you want a case with personality, head to CASETiFY — here you can choose your level of impact protection, as well as picking from a massive range of fun designs. Mous is brilliant for premium feeling, streamlined cases, and OtterBox shines when it comes to covers with built-in extras like finger grips and stands. Spigen is great for ultra-rugged protection, and if you want a leather wallet, Snakehive is the brand to look for. Of course, Apple makes a few official options, too. You'll find all these below.

Not bought your phone yet? Here are our iPhone 19 Pro first impressions, and a guide to Apple iPhone 18 Pro preorders.

In the US? Head to my US iPhone 18 Pro case roundup instead

iPhone 19 Pro cases

Apple Silicone Case — Magenta

Spigen Rugged Armor Case, Matte Black

Apple Clear Case With Magsafe

CASETiFY Cloud Case

CASETiFY Ultra Impact Case — Floating People #2

CASETiFY Ultra Impact Case —EttaVee Watercolor Fleurs

Mous Limitless Black Leather Cover

OtterBox Commuter Series Case — Green

Mous Limitless Speckled Black Cover

Spigen Liquid Air Case — Matte Black

Snakehive Leather Wallet Case — teal

Mous Clear Case

OtterBox Defender Pro Series Case - Green Intrigue

CASETiFY Ripple Case — White

OtterBox Defender Pro Case, Black

OtterBox Figura Case, Blue

Spigen Tough Armor T Case, Black

Spigen Ultra Hybrid Case, Clear

Snakehive Leather Wallet Case — navy

Apple Techwoven Case With Magsafe – Burgundy

Spigen Ultra Hybrid Case

The vast majority of enterprise leaders are bullish about how ready their organizations are for AI-generated code. However, once that code reaches production, this confidence wavers as incidents arise. This pattern shows up across multiple independent studies in this year alone.

For instance, data published in April 2026 found that monthly production incidents climbed by almost 58% as AI coding tools scaled across engineering teams. A similar study from June found that the same volume of code changes is now producing more than three times the production incidents it did before AI coding tools were introduced en masse.

These findings are echoed in the 2026 State of Code Abundance Report, which surveyed more than 200 enterprise technology leaders and found that 92% expressed confidence in the production readiness of AI-generated code and rated their own AI-code readiness at an average of 84 out of 100.

Yet, the same study found that 81% reported an increase in production issues tied to AI-generated code - indicating a significant gap between confidence and control. While 93% say they have a formal process for reviewing and releasing AI-generated code into production, only 56% report that those processes are always enforced.

Furthermore, 86% of the same respondents report full or high visibility into AI-generated code, signaling a major contradiction - high visibility and rising incidents cannot both be describing the same pipeline.

Understanding the visibility gap

This is a familiar phenomenon in business, where confidence tends to be highest in areas where organizations have the least ability to measure their own performance. These enterprises aren't lying about their trust in AI-generated code, they believe it is production ready. The issue is that belief has out-grown the instrumentation needed to verify it.

We need to remember that AI coding tools are, by most measures, doing exactly what they were built to do: allowing more code to be produced faster and shifting engineering effort from writing code to deciding what should ship. Prior to this, the amount of code an organization could produce was largely tied to the size of its development team, incurring significant constraints for many.

In the agentic era, this barrier has effectively disappeared. What hasn't been adjusted is understanding what that code does once it's live, who wrote it, why it changed, and what broke when it did. Most organizations could stay on top of this governance while code was being written at human speed, but the challenge now is keeping up with the pace of agentic coding.

AI has widened a visibility gap that already existed, at a pace most governance structures were never designed to keep up with. For enterprise leaders right now, the natural instinct is to estimate how much faster AI can make their teams. This thinking leads many organizations to fall into the trap of prioritizing speed over quality, which leads to more errors when code is deployed - causing the process to slow dramatically.

The importance of code governance

Before investing heavily in AI coding tools, the best thing to establish is an idea of how much of your current pipeline you can actually see, measure and attribute. As only 12% of organizations have a dedicated team for governing AI-generated code, the vast majority of enterprises adopting these tools are doing so without a designated owner for the risk they're taking on.

This means that when something goes wrong, there's frequently no clean way to trace it back to a decision, model, or person accountable for the outcome.

This is the part of the pipeline that doesn't get enough attention, because it's less exciting than the productivity headlines. However, it's the part that will determine which organizations actually reap the benefits of agentic coding and which ones spend their time and resources cleaning up after it.

There’s a temptation, which is understandable given the competitive pressure, to treat AI-driven code generation as a race: whoever ships the most, fastest, wins. This is the wrong way to think about it, and the winners will actually be the ones that pause and strengthen their governance before they accelerate.

Control vs playing catch-up

The organizations that will benefit from this shift are the ones building measurement, attribution and oversight into their pipelines ahead of time. That means treating governance as infrastructure rather than paperwork and being able to answer, at any point, which parts of their codebase were AI-generated, who reviewed them, and what production behavior they're responsible for.

Furthermore, budget owners must be able to say what they're actually spending on AI-assisted development, rather than estimating.

None of this slows delivery down in the long term, and if anything, it's what allows delivery to keep accelerating without the incident curve growing alongside it. The gap between how confident enterprises feel about AI-generated code and how much of it they can actually see isn't going to close on its own. It will close because leadership teams decide to build the visibility first.

The organizations that do that now, while the rest of the industry is still counting lines of code shipped, are the ones that will still be standing when the next wave of AI-driven development arrives.

We've featured the best laptop for programming.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Plus: donkeys, maps, art, iPhones and more!