Several things have rightly irked AirPods Max fans recently. The much-vaunted September 2024 AirPods Max update was disappointing, to say the least. That reveal (the first ever, in the Max's then-four-year lifespan) involved but a single hardware change, and even that came as a result of the forcing of Apple's hand: a USB-C port had to be added to comply with EU regulations.
No new audio chip, no alternative to the highly divisive 'headphones bra' case, no Apple Lossless transmission – oh, and the same eye-wateringly high price tag. Just a few new finishes and a slightly different connector.
It fell woefully short of the required upgrades we felt we needed to see to start calling them the AirPods Max 2 – and we're still not doing that.
But then, an olive branch! In March 2025, Apple announced that provided you could agree to go wired (using your Max's bundled charger, although a 3.5mm to USB-C was also being released for a fee) your AirPods would support Apple's Lossless tier audio, following a software update.
And reader, it was at this point that my head turned. I got a set to see how good the inclusion of USB-C-quality audio sounds in Apple's over-ears, and ultimately, whether it finally makes that premium price tag worth it.
(Image credit: Future)What kind of resolution are we talking here?Apple's Lossless output, written with the capital 'L', means better-than-CD resolution up to 24-bit/48kHz, or 2,304 kbps audio quality. And that's what you can now get with AirPods Max and a USB-C wire hooked up to your iPhone, MacBook, iPad, or dedicated audio player source.
Before this 2025 revelation, for four long years it had seemed so odd to me that Apple hadn't managed to release a set of headphones able to play its very own higher-resolution Apple Music tracks, which the company had casually unveiled in 2021 at no extra cost to its subscribers (other than its wired and sonically unremarkable EarPods with USB-C – and I'm not counting those).
You still can't get Apple Music's Hi-Res Lossless resolution from Apple cans (up to 24-bit/192kHz, which is a huge 9216kbps – see Spotify's top streaming quality of 320kbps for reference). That is, unless you branch out to products the Cupertino giant doesn't sell, such as one of the best headphone DACs, a dedicated hi-res player, a set of good wired headphones, or, of course, decent wired IEMs.
But baby steps, right? This is proof that Apple still cares about audio quality – and not just Spatial Audio, although I'll get to that – enough to make a feature of it. As a hi-res audio lover (and to clarify, better-than-CD resolution is well into hi-res territory), I'm not about to poo-poo that development.
Hooked up to a mid-range player, they did struggle to be heard… (Image credit: Future)Like the way I doAll software updates aside, there's stuff that just works with AirPods Max and always has. But now that I'm actually wearing them a lot, because I like the USB-C sound quality and their existing features hit differently.
I love the boinginess (technical term) of the mesh tension-fit headband, where so many luxe-look leather padded bands start to dig in after only an hour or so. I love that, unlike competitors, they never fail to note removal and pause playback. I love the fuss-free functionality of the volume knob on the right ear cup that also pauses playback quickly and without me having to worry that it might not pause when someone is talking to me (hello, touch capacitive morse-code-like taps).
What I've never been overly wowed by since their release, as you'll probably guess, is AirPods Max's audio quality for neutrality, separation, clarity, timing, and cohesion across the frequencies and dynamic nuance. Now, that has changed for me – provided you've got a bit of patience and the right audio in your source device.
(Image credit: Future)Get connectedIf you've already got a set of AirPods Max with USB-C (the ones that launched in September 2024, not the set with the now all-but-defunct Lightning port), you'll likely have received the pop-up on your device asking you to consider USB audio on your AirPods. The perk arrived in April as a free firmware update with iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4 for AirPods Max with USB-C.
This is a call I think you should accept. As Apple explains, the bundled USB-C cable that came with your headphones now offers ultra-low latency audio to AirPods Max, and that means movies and games are leveled up, too.
But here's a biggie: DJs and music creators can get significantly improved production and mixing, because (using Apple Music's 100 million-songs-and-counting in lossless audio, say) alongside that ultra-low latency, using wired AirPods Max on Logic Pro and other music creation apps means you've got the only headphones you can use to create and mix in Personalised Spatial Audio with head tracking.
There's an extra step to getting 'Personal' with Apple's brand of Spatial Audio: an iPhone with TrueDepth camera is required to basically scan your face and ears and create a personal profile for Spatial Audio. But you only have to do it once; it will then sync across your Apple devices running the latest operating system software, including iOS, iPadOS, macOS, and tvOS.
Worried about the camera? If you own an iPhone at all, you'll likely have the required hardware; TrueDepth arrived with the iPhone X in November 2017.
(Image credit: Future)Listen and enjoy (barring a few minor issues)If listening to AirPods Max via USB Audio, you can actually turn Bluetooth off on your source device, even though this isn't something Apple recommends (and you'll lose certain features when not connected to Bluetooth).
For the purposes of this test, I often did that, to check I was getting the goods, because Apple's notifications can seem vague. On your iPhone, for example, turn Bluetooth off, and you'll see your AirPods are connected in 'USB Audio' and that the Spatial Audio and noise cancellation menus are no longer available. But deploy Bluetooth, and this screen looks for all the world like a regular Bluetooth connection – even though Apple says it isn't.
I found that my MacBook Pro, in particular, would often prioritize a Bluetooth connection over a wired one. However, it's worth noting that when using said MacBook with Bluetooth off, I always needed to delve into the Sound settings to check the audio output was set to my AirPods (when you're in the office, perhaps you don't want your colleagues to hear your 90s playlist because you forgot to check – just saying).
Additionally, smaller hi-res players will struggle to drive AirPods Max – my FiiO M11S is a prime example. I needed to push the player to nearly maximum volume to get audio at anything approaching a decent level, and that's not something I'd advise. Of course, you could add a DAC/headphone amp and sort this issue, but that's a different proposition entirely, and I want to talk only about the little wire that comes with your AirPods Max.
So, are your AirPods Max headphones passively connected here? No, because as Max owners know, there's no physical button to turn AirPods Max off. They simply switch to a low-power mode when not in use after five minutes, or immediately if placed in their (decidedly odd) case. So, you're not getting passive old-school audio via USB-C, but that's also the case with competitors offering similar wired features, such as the Cambridge Audio Melomania P100 and excellent Bowers & Wilkins PX7 S3. Bluetooth remains active to handle various control functions and app support, but the audio stream is (or certainly should be) routed through the wired connection. The thing is, those options don't have Apple's walled garden Spatial Audio extras…
All of this granular detail is worth it, I promise, because when you're sure you're getting Lossless via USB-C from AirPods Max, they're a sonic delight.
(Image credit: Future)In conclusion: I won't be kicking Apple's cans any time soonListening to Alex Warren's Ordinary reveals clarity and emotion to the initial string progressions and texture to the choral vocals, you simply don't get over Bluetooth.
The piano at the outset of Chappell Roan's Pink Pony Club feels three-dimensional in new ways; the synths are more emotive and impactful; inflections in Roan's voice are captured, held in check, and dutifully relayed as if each one is put under a special spotlight, with plenty of space to shine on a wide soundstage.
Are they worth the upgrade if you own an older Lightning set? For me, yes – but then I love better-quality audio, and I don't mind a fairly thick white wire hanging from one ear to get it. Maybe you do, and I get that. In a wireless age, this may even feel like a step back, since USB-C audio is actually nothing new after all – it's around ten years old.
For me, this is finally (finally!) a way to harness Apple's excellent hi-res Music output within Apple's ecosystem, and I have to say, I'm a big fan.
You may also likeIn a post to Truth Social on Wednesday morning, Trump railed against Democrats, and some of his own supporters, calling the furor over the Epstein case a "hoax."
(Image credit: Anna Moneymaker)
Volt Typhoon, a Chinese state-sponsored threat actor which targeted critical US infrastructure, failed to achieve its main objective - to maintain long-term, invisible persistence on key targets.
This is according to senior cybersecurity officials from the National Security Agency (NSA) and the Federal Bureau of Investigation (FBI).
Speaking at the recent International Conference on Cyber Security at Fordham University in New York City, the agents discussed the “Typhoon” campaign as a whole, and confirmed that it was laying groundwork for a potential escalation of conflict over Taiwan.
No persistence maintained“The good news is, they really failed. They wanted to persist in domestic networks very quietly for a very long time so that if and when they needed to disrupt those networks, they could. They were not successful in that campaign,” said Kristina Walter, director of the NSA’s Cybersecurity Collaboration Center.
“We, with private sector, with FBI, found them, understood how they were using the operating systems, how they're using legitimate credentials to maintain persistence, and frankly, we equipped the entire private sector and U.S. government to hunt for them and detect them.”
Being able to breach security systems and access critical infrastructure should be cause for concern in its own right, though.
In mid-March 2025, it was reported Volt Typhoon had access to Massachusetts’ Littleton Electric Light and Water Departments (LELWD)’s operational technology (OT) network for ten months in 2023. The intrusion lasted from February to November 2023.
Before that, in January 2025, Volt Typhoon was allegedly targeting the critical infrastructure of small island nation Guam, looking to disrupt and sabotage services in the region, reportedly targeting the GPA (Guam Power Authority) to wreak havoc on the island, which is home to a large US military base.
Via The Record
You might also likeAbrahm Lustgarten says the undermining of science, and cuts to FEMA and NOAA, at a time when erratic weather is making disasters more common, should be "extraordinarily concerning" to us.
We finally received a second trailer for GTA 6 on May 6, 2025. It gives a better look at the male protagonist, Jason, and introduces the overall story and key players. Even better, there's a new website filled with info on Vice City and the main characters. Unfortunately, the game was then delayed out of its 2025 release window. It'll now arrive May 26, 2026. Hopefully we'll hear more later this year, as we've yet to see gameplay.
GTA 6 is easily one of the most hotly-anticipated games ever, with its predecessor still dominating sales charts. Thankfully, we do now know a fair bit about the next installment into the Grand Theft Auto series, including where it's set, and that it's currently slated to come out next year following a delay.
In terms of upcoming games, GTA 6 looks set to offer perhaps the most detailed open-world we've seen yet, that's if Rockstar Games can continue the success of Grand Theft Auto 5, that is. We now know that we'll be returning to Vice City this time around, a fact that means GTA 6’s story missions could reference some very iconic movies. One thing's for certain, the game is already looking very graphically impressive indeed.
While we wait for more info on Grand Theft Auto 6, you'll find everything that's been confirmed so far in this article. As new details are revealed, we'll be sure to update this page. For now, here's GTA 6's setting, what we know about its protagonists, and all of the latest news and trailers.
GTA 6: cut to the chaseGTA 6 will launch May 26, 2026 on Xbox Series X|S and PS5. This was revealed on May 2, 2025, delaying the game into 2026. We'll have to wait for more info. In terms of a GTA 6 PC release, an ex-Rockstar dev has explained why GTA 6 won't come to PC at launch: 'This stuff is very complicated'.
Interestingly, GTA 6 will be able to make use of the extra power provided by the PS5 Pro at launch. Nothing has been confirmed yet, but unless Xbox launches a competitor, the best place to play GTA 6 could be Sony's most powerful console. We expect there to be a dedicated PS5 enhanced version of GTA 6, but we'll have to wait and see what Rockstar announces.
In terms of when to expect a PC port, you might not have to wait long for GTA 6. This is according to Take-Two CEO Strauss Zelnick, who had this to say in a recent interview with IGN:
"In an interview with IGN ahead of the company's recent financial results, Zelnick was asked whether the lack of a PC release is a mistake given the platform's prevalence.
"With Civ 7 it's available on console and PC and Switch right away,” he replied, referencing the recent multi-platform release of Sid Meier's Civilization 7. “With regard to others in our lineup, we don't always go across all platforms simultaneously. Historically, Rockstar [Games] has started with some platforms and then historically moved to other platforms.”
It's expected that GTA 6 will be a colossal hit, with Take-Two boss Strauss Zelnick recently predicting sales of current generation consoles to rise.
When was GTA 6 announced?Many of you have been asking about a new entry in the Grand Theft Auto series.With every new project, our goal is always to significantly move beyond what we've previously delivered. We're pleased to confirm that active development for the next entry in the series is underway.February 4, 2022
GTA 6 was announced on February 4, 2022 via the Tweet embedded above. Ultimately, this was just confirmation that Rockstar was indeed working on GTA 6, and no other details were given aside from the fact that the game was in active development.
GTA 6 trailersThere's been two GTA 6 trailers revealed so far. The latest was released on May 6, 2025, and focused more on Jason. He picks Lucia up from prison, and then we're introduced to a bunch of new main characters. Check it out, embedded above.
The first Grand Theft Auto 6 trailer was revealed by Rockstar on December 4, 2023, after it leaked online. The trailer was initially scheduled for release the following day, but timelines were shifted. You can check it out above, in all its sun-drenched glory. It's 91 seconds long, and introduces us to Lucia, one of GTA 6's main protagonists. You'll also get some gorgeous shots of Vice City beaches, bars, and even an alligator.
GTA 6 is set in Vice CityReinterpreting real-world-like landmarks and features is a mainstay of the series and GTA 6's Vice City will carry that on. (Image credit: Rockstar Games)We now know that GTA 6 will be set in the state of Leonida, which encompasses Vice City and beyond. In a newswire post, published just after the trailer, Rockstar describes the area as 'the biggest, most immersive evolution of the Grand Theft Auto series yet'. We see a fair few shots of Vice City in the debut trailer, and loads of screenshots on the main website. GTA 6 will feature Vice City, Leonida Keys, Grassrivers, Port Gellhorn, Ambrosia and Mount Galaha as its main areas.
What song is used in the GTA 6 reveal trailer?(Image credit: Rockstar Games)Now that we have the first GTA 6 trailer, we can dig down into what it all means. The song that plays over it is Tom Petty's Love is a Long Road. This teases the themes of the game, which clearly focuses on a couple in love and on the run. Heartbreak and tragedy could be on the cards here, as well as a bit of romance amongst all the shootouts.
A Bloomberg report published in 2022 claims that GTA 6's map was much bigger to begin with, encompassing areas based on both North and South America. This was apparently cut back during development, with Rockstar Games shifting and narrowing its focus to Vice City and the surrounding areas. These are likely the swamps and bridges we see in the trailer, based loosely on the Florida Keys.
(Image credit: Rockstar Games)While this smaller launch map may sound disappointing at first, it's worth digging into other parts of the aforementioned report. Specifically, the fact that GTA 6's map may not remain static post-launch. Apparently, Rockstar plans to update the map with more cities and interior locations after release, mainly to give developers more breathing room and to cut down on overtime while GTA 6 is being worked on. According to Bloomberg, there will be new missions and new map areas added "on a regular basis".
GTA 6 story and playable charactersThe two main characters from the GTA 6 trailer could indicate dual protagonists. (Image credit: Rockstar Games)Rockstar Games revealed the first trailer for GTA 6 on December 4, 2023. In it, we're introduced to Lucia Caminos, one of the main protagonists of GTA 6. Then the following trailer focused more on Jason Duval who is ex-army, and currently working as a small-time drug smuggler around The Keys.
In terms of the story, GTA 6 looks set to follow the couple as they attempt to pull off a big score. Aside from that, we know that it'll take place in and around Vice City, and that Lucia has been incarcerated after a fight gone wrong. We'll need to wait to hear more on whether GTA 6 will indeed allow players to control Lucia and her partner, but for now, it looks like the two share the main role.
Plenty of side characters have been revealed so far, likely the ones that'll be handing out missions in-game. The first is Boobie Ike, a Vice City legend with an empire spanning strip clubs, bars and a recording studio. Then there's Cal Hampton, an internet conspiracy nut who's a friend of Jason's.
We now know that Troy Baker is not the voice behind the male character in the trailer. (Image credit: Rockstar Games)It was rumored at one point that The Last of Us actor Troy Baker might be playing the male protagonist in GTA 6. Since then, we now know that no, Troy Baker isn't playing Grand Theft Auto 6's male protagonist, with the voice actor saying: "I want that guy, whoever it is, to get credit for his work".
GTA 6 newsLucia seems to be the main playable character in GTA 6 but we'll have to wait to find out more about her journey - which seems to possible start in prison. (Image credit: Rockstar Games)While we wait for GTA 6, rumors suggest that GTA 4 is getting a remaster
Grand Theft Auto 4 is reportedly coming to PS5, Xbox Series X, and Xbox Series S later this year, followed by a possible Max Payne 3 remaster.
Grand Theft Auto 6 will reportedly run at 30FPS on PS5 and Xbox Series X
In a now-deleted Kiwi Talkz podcast episode, Mike York, who previously worked on Grand Theft Auto 5 and Red Dead Redemption 2 as an animator, shared his thoughts on the next GTA entry and expects the game to run at 30FPS on console (thanks, GamesRadar).
Analyst says there are those in the gaming industry who ‘hope’ GTA 6 will cost up to $100
An analyst has claimed that there are those in the games industry who are hoping Grand Theft Auto 6 will cost up to $100.
That's according to Epyllion's Matthew Ball (via IGN), who recently released his State of Video Gaming in 2025 report. In it, he said that there are some developers and publishers in the industry that "hope" Take-Two will raise GTA6's price from the current standard of $70 to between $80 and $100.
GTA 6 is predicted to be “one of the biggest entertainment launches in history"
This comes from market research firm DFC Intelligence (via the Financial Times), which states that it is likely to generate more than $1 billion in pre-orders alone. DFC Intelligence predicts that the game will hit a total revenue of $3.2 billion in its first 12 months, which is roughly double what its predecessor Grand Theft Auto 5 achieved in the same time period.
Publishers are reportedly not announcing firm release dates to dodge GTA 6 launch
A recent Bloomberg article states that "anticipation is so high” for GTA 6 that “some competing game publishers are waiting as long as possible to commit to their release dates for the fall”. This is reportedly so that the publishers can know whether GTA 6 will actually hit its current release window and “keep their own games far, far away" if it does.
Grand Theft Auto 6 leaks aren't "as important as people think" says GTA: San Andreas dev
A former Grand Theft Auto developer has said the past Grand Theft Auto 6 leaks are unimportant and only happen due to Rockstar's secrecy. Read more in our full news writeup, here.
GTA 6 is being described as one of the most important games in history
In an interview with GI.biz (via IGN), industry analyst Mat Piscatella commented that GTA 6 will be an extremely important release, not just for Rockstar, but the industry as a whole: 'There's probably never been a more important thing to ever release in the industry, so no pressure.'
Rockstar addresses GTA 6 leak
Rockstar Games formally confirmed that the GTA 6 leak that occurred in September 2022 was real. Releasing a statement via Twitter, the team advised this included "early development footage for the next Grand Theft Auto." While they didn't comment on particular details spotted in the leak, the team said it's "extremely disappointed to have any details of our next game shared this way."
Crucially, Rockstar's statement advised that the leak shouldn't cause any delays, stating "we do not anticipate any disruption to our live game services nor any long-term effect on the development of our ongoing projects." Promising an official update to this next game "when it is ready."
GTA 6 suffers huge gameplay leak
In September 2022, Grand Theft Auto 6 saw what was easily one of the biggest leaks in gaming history. Since then, Rockstar and Take-Two have since removed these through copyright strikes.
No, you cannot pre-order GTA 6 yet. We expect this to change next year, once the pricing and box art have been confirmed.
How much is GTA 6 going to cost?While Rockstar is yet to reveal pricing info, GTA 6 is expected to cost $69.99, based on the standard pricing for current AAA game releases. Given that GTA 6 isn't coming out til 2026, however, it's possible prices could rise. Presently, we're seeing higher prices for games like Mario Kart World, and The Outer Worlds 2, both priced at $79.99. If this continues, GTA 6 might also be priced higher. We'll have to wait and see.
You Might Also Like...The personal information of all 6.5 million UK Co-op members were confirmed to have been stolen in the cyberattack that targeted the supermarket brand earlier this year.
The leak was confirmed by Co-op CEO Shirine Khoury-Haq, who was speaking on BBC Breakfast.
“I'm devastated that information was taken. I'm also devastated by the impact that it took on our colleagues as well as they tried to contain all of this,” the CEO said.
Today’s cyberthreats are more sophisticated and scams are harder to detect. That’s why we made our all-in-one security more powerful to keep you safer online. Norton 360 now with Genie AI-powered scam detection. Advanced tech for advanced threats starting at $29.99 the first year.
Preferred partner (What does this mean?)View Deal
6.5 million details stolen“There was no financial data, no transaction data but it was names and addresses and contact information that was lost,” she continued, adding that she was “incredibly sorry” about the attack.
The Co-op, Harrods, and M&S were hit by a significant cyberattack earlier this year that saw online ordering and websites taken down, with significant disruptions to stocks and purchasing for weeks afterwards.
Khoury-Haq added that during the attack she met with IT staff attempting to remediate damage and remove the attacks from Co-op systems. “I will never forget the looks on their faces, trying to fight off these criminals,” she added.
The CEO also said, “It hurt my members, they took their data and it hurt our customers and that I do take personally.” Members of the Co-op pay a fee to join, and are then paid a share of the profits that the business makes each year.
Vonny Gamot, Head of EMEA at McAfee provided TechRadar Pro with some guidance on how those affected can best protect themselves:
Samsung has announced the next generation of its folding phones, the Samsung Galaxy Z Fold 7 and Galaxy Z Flip 7, and with them One UI 8, the next generation of Samsung’s mobile operating system based on Android 16.
As we recently reported, One UI 8 is likely to come with a selection of useful new features, but we're still fairly light on confirmed new features.
As it stands, it looks like the Samsung Galaxy Z Fold 7 and Galaxy Z Flip 7 will be the first phones to launch with One UI 8, a refreshed software experience to compliment the phones' newly slimmed-down hardware.
As keen Samsung fans will know, it’s not actually been all that long since the release of One UI 7, based on Android 15, which finally came to a wider range of Samsung devices in April of this year.
One UI 7 launched with the Galaxy S25 in pre-release, where it remained eclusive for months (Image credit: Philip Berne / Future)However, the release of One UI 7 was preceded by a saga of delays, issues, and confusion, as Samsung seemingly struggled to get its next update out the door. One UI 7 first appeared with the Galaxy S25 series in February 2025, but this was technically a pre-release build that remained exclusive to the latest Samsung flagships for a good few months.
My confidence in one of the world’s best Android phone makers shook as the beta period dragged on into the spring of 2025.
One UI 7 finally got a wide release in April 2025, 18 months after the release of One UI 6.
However, foregrounding One UI 8 so soon after the troubled release of One UI 7 suggests confidence. This is Samsung announcing that it’s ready to step forward again – but in order to win back my trust, this coming rollout needs to look a little different.
A chance to do it rightThe Samsung Galaxy A36 got One UI 7 before several previous-gen models (Image credit: Blue Pixl Media)One UI 7 technically launched with the Galaxy S25 series back in February, but Samsung was slow to bring the update to users of its older models.
Things got even more confusing with the release of the Galaxy A26, A36, and A56, budget-focused handsets that nonetheless launched with One UI 7 before several older flagships had even been given release dates.
This never sat right with me – though One UI 7 was a huge update that naturally took a while to port to older models, it felt like Samsung users had been left in the dark. I couldn't imagine spending $1,249 / £1,200 / A$2,199 on a Samsung Galaxy S24 Ultra, only to be left waiting more than a year for your very first major operating system update.
With One UI 8, Samsung has a chance to prove to the world – and more importantly its customers – that previous-generation models and users are still a priority.
In a perfect world, I’d want to see One UI 8 released to all compatible devices at the same time, but I understand that this is pretty unlikely. Samsung’s product portfolio is massive, with phones, folding phones, and tablets to consider, so I’m willing to accept a span of a few weeks between the first and last devices getting the update.
But at the very least, I want to see a compatible device list and roadmap with precise release dates included – after the last update cycle, any vagueness would just seem disrespectful to Samsung’s users, many of whom are fiercely loyal to the brand.
Having used One UI 7 myself, I can vouch for it as a charming and capable Android wrapper, as well as one of the most customizable mobile UIs on the market – that’s to say I like One UI, and want to see it succeed. I hope Samsung takes this chance to prove me right.
You might also likeAWS has revealed a new agentic AI development platform as it looks to make building and deploying agents easier than ever.
The new Amazon Bedrock AgentCore platform looks to give developers everything they need to create and deploy advanced AI agents.
Speaking at its AWS Summit New York 2025 event, the company said the launch marks a "step change" in helping developers move agents from fun toys to something effective and into production.
Amazon Bedrock AgentCore"With agents come a shift to service as software," noted Swami Sivasubramanian, Vice President, AWS Agentic AI, Amazon Web Services, outlining plans to make AWS the best place to build the world's most useful AI agents.
Set to be available soon, AgentCore includes the following services:
AgentCore Runtime - secure serverless runtime purpose-built for deploying and scaling AI agents and tools
AgentCore Memory - build context-aware agents by eliminating complex memory infrastructure management while providing full control over what the AI agent remembers
AgentCore Identity - securely access AWS services and third-party tools on behalf of users or acting with pre-authorization
AgentCore Gateway - build, deploy and discover agents across millions of connections - automatically convert into MCP-compatible tools without managing integrations
AgentCore Code Interpreter - enable AI agents to write and execute code securely, enhancing accuracy for solving complex end to end tasks - including JavaScript and Python
AgentCore Browser Tool - fast, secure cloud-based browser runtime to enable AI agents to interact with websites at scale - including live viewing for troubleshooting and auditing
AgentCore Observability - trace, debug and monitor AI agents' performance in production environments
“It’s a tectonic change in a few dimensions,” Sivasubramanian added. “It upends the way software is built. It also introduces a host of new challenges to deploying and operating it, and potentially most impactfully, it changes how software interacts with the world—and how we interact with software.”
You might also likeAfter NPR reported on a Department of Homeland Security tool to check the citizenship of registered voters, three U.S. senators are expressing concern about accuracy, transparency and privacy.
(Image credit: Joseph Prezioso)
If you’re an avid Spotify user then you may have run into its sponsored recommendations in the home page – and if you’re like me and you haven’t, then consider yourself among the lucky ones.
In short, sponsored recommendations are small pop-ups in your home page that show music suggestions but in ad-like form, and they’ve been rubbing Spotify users the wrong way recently – especially those who pay for Premium subscriptions.
A recent Reddit post about sponsored recommendations (see below) garnered over a hundred responses, with users sharing their thoughts about sponsored recommendations and when and where they appear. Despite not explicitly stating how users can opt-out, there is a way around it.
Ads for a service you pay to be add free for is absolutely diabolical. from r/truespotifyTo stop seeing sponsored content, all you have to do is go into Spotify on your desktop (you can’t do this in the app) and head to the ‘Account’ section. From there, go to ‘Account privacy’ and disable the ‘Tailored ads’ toggle, and you should be free of sponsored music suggestions.
While some users don’t seem to be too bothered about seeing sponsored recommendations, they’ve proven to be a huge turn-off for others, and those who aren’t fans have shared three main objections in the above Reddit thread.
1. Sponsored recommendations ignore your personal tasteThough some Spotify users on Reddit have been open to sponsored music recommendations, a common complaint from others is coming across sponsored content from artists they’ve never engaged with – classic Spotify behavior.
Comment from r/truespotifyOne user (shown above) highlighted that the sponsored recommendation pop-up forced new music from bigger artists such as Drake and Taylor Swift in their home page, despite that user having never streamed their music, which seems a little presumptuous to say the least
These recommended slots are evidently reserved for more popular artists who can afford to pay Spotify, resulting in their music being promoted at the expense of rising artists that might otherwise appear in users’ recommendations. That said, Spotify showed sponsored content from artists users actually follow and stream, it wouldn’t be as much of an issue.
2. Spotify doesn’t state this when you sign up to PremiumAnother argument that paying Spotify users have raised is that when you sign up for a Spotify membership, there’s no mention in the sign-up process that users may run into sponsored recommendations.
Comment from r/truespotifyHowever, some users have said they only care about ad-free music playback, and say that sponsored recommendations are a reasonable intrusion. On the other hand, others strongly believe all areas of the Spotify ecosystem, including podcasts and the home page itself, should be free of sponsored content. I stand with the latter.
3. Sponsored recs overtake new music releasesIf there’s one thing that Spotify fans can collectively agree on, it’s the importance of supporting smaller artists, which I mentioned earlier, and users have pointed out that sponsored recommendations push out upcoming music releases that users have already pre-saved as well as songs from artists they already follow.
However, there’s another factor that seems to be tied in with how sponsored music suggestions are presented: TikTok.
Comment from r/truespotifyThere’s no denying that social media circulation plays a big part in promoting new music – take the latest Addison Rae album for example, which is currently doing the rounds on social media, and which is mentioned in the Reddit post.
This is something that users have previously expressed disappointment about online, highlighting their experiences with Spotify cluttering their playlists with viral hits and pushing its vertical, TikTok-style video content. Now, it could be possible that viral music is interfering with sponsored recommendations.
Given the amount of users that have come forward to share their frustration with sponsored content, it’s only fair for Spotify to come forward and address these concerns. That will be a testament to how much it cares about its subscribers, but we all know what the outcome will be.
You might also likeCancelations are the worst thing that can happen to a TV fan. You get invested, you're on the edge of your seat, then suddenly you wake up to news that your favorite show is no more.
That's my experience when it comes to Utopia, a criminally underrated thriller series that originally aired in the UK on Channel 4. Now, it's got a second wind on Prime Video in the US and Australia. Unfortunately, UK viewers have once again been scorned, as it's not available on any of the best streaming services there.
While I can't lend everyone in the UK my boxset, I can urge that US and Australia viewers sit down and watch this right now, though I will warn you that you won't get anything done because it's truly gripping stuff.
Utopia did, regrettably, get a bad remake on Prime Video so to clarify, this is the original 2013-2014 British series you're looking for which is infinitely better.
Utopia's cancelation shouldn't stop you from watching it because I firmly believe it holds up, even if we're never really going to find out how it ends. Read on to find out why.
Why you should watch Utopia (Image credit: Channel 4)There's so much to love about Utopia that it's hard to know where to begin. If you're the kind of fan who loves dark, gripping thrillers, then it's got everything you need. Mystery, conspiracies, black comedy, some shocking scenes, it's all rolled into this two-season run.
Utopia follows a community of comic book fans who believe that the graphic novel calledThe Utopia Experiments predicted several disastrous epidemics, such as mad cow disease. Rumors circulate that there's an unpublished sequel and they're keen to get their hands on it.
When one comic book fan does get the manuscript, he invites four of his friends from an online forum to meet in real life, only for them to start being hunted down by a shadowy organization called 'The Network' that want the manuscript as well as a mysterious woman named Jessica Hyde.
From there, it goes off the rails in the best possible way. There's some shocking twists and turns, outstanding performances, and a horrible yellow color palette, which makes everything look so bleak and nasty. Visually it's outstanding and the sound design is even better, somehow.
Utopia has a fantastic composer, Cristobal Tapia de Veer, who recently worked on the Paramount+ horror movie Smile and HBO hit The White Lotus. I can promise you he's excellent at bringing creepiness and mystery to the table. The soundtrack is so unsettling to listen to, yet oddly fun to have on in the background while you work.
There's a great cast here too including Fiona O'Shaughnessy, Alexandra Roach, Adeel Akhtar, Paul Higgins and Paul Ready, and there's really not a lot of faults to find in this series. Even the critics agree, as the show has a flawless 100% Rotten Tomatoes score.
So, if you're in the mood for a great thriller I highly recommend Utopia. I miss streaming it very much but I'll always have my boxset to enjoy.
You might also like:In 2024, cybersecurity experts started to warn of a new threat to the software supply chain. Named 'slopsquatting', it is a type of cyber attack where bad actors create fake packages containing malicious code that is inadvertently added to legitimate code.
However, unlike other forms of digital squatting, in this case, the attackers use packages that are hallucinated by large language models (LLMs). This means increased risks of attack, as all it takes is a programmer running code generated by an LLM without first evaluating and validating it.
To safeguard themselves from the new generation of cyber attackers, companies need to understand what package hallucinations are and what can be done about them.
What are package hallucinations?Coding languages like Python and JavaScript draw heavily on dependencies – pre-written code that is bundled together into packages such as libraries and modules. Developers import these packages from public code repositories (such as the npm registry for Node and PyPi for Python).
With the rise of AI usage for coding, programmers and researchers started to identify a new threat: package hallucination. This is when tools built on LLMs, such as ChatGPT, Claude, Mistral or DeepSeek, add references to the code for packages that do not exist.
These hallucinations, according to recent research, are occurring more frequently than one might expect. Researchers from the University of Oklahoma, Virginia Tech and the University of Texas at San Antonio analyzed over half a million fragments of code generated by LLMs. Alarmingly, 19.7% of packages referenced in this code were hallucinations.
These code samples, totaling 576,000, were generated in two programming languages (Python and JavaScript) using models including ChatGPT-4, Claude, Mistral, DeepSeek, and CodeLlama. While commercial models, such as Claude and ChatGPT-4, generated fewer package hallucinations in their code than open-source models, all faced the problem of package hallucination to varying degrees.
Opening the door for a new form of attack – "slopsquatting"Concerningly, 43% of the package hallucinations in the study were recurrent, continuing to appear when the same prompts were used. Furthermore, 38% of them had similar names to real packages or the same name as packages used in other coding languages. It is these two factors – recurrence and similarity – that create the potential for a new form of cyber attack, dubbed "slopsquatting."
The name is derived from typosquatting, which originated as a form of scam where bad actors register domains with a similar name to legitimate websites, for example, those related to free software. Then, internet users entering URLs or search prompts containing typos become exposed to malicious websites.
The same idea can be adjusted to exploit typos developers make when installing open-source packages. White hat hackers used similar tactics, leveraging errors and creating packages on public registries with the same name as internal company packages to infiltrate the likes of Shopify, Apple, PayPal, Netflix, Yelp, and Uber.
In Slopsquatting the approach is similar but the packages used are hallucinated by LLMs. Because some hallucinations are recurrent, hackers can hone in on specific package names that are likely to be repeated. Then, they create a fake package using this name that contains malicious code. And because many package hallucinations have similar names to real packages, they can be hard to detect.
Mitigating the risks of slopsquatting using pre-generation techniquesThe most effective way to protect against the risk of slopsquatting is to use pre-generation techniques – strategies that preemptively reduce the number of package hallucinations created.
Self-refinementSome models are already capable of detecting their own hallucinations with a good degree of accuracy. In the study cited above, the models GPT 4 Turbo, GPT 3.5 and DeepSeek were all able to identify hallucinations with an accuracy of over 75%.
This opens the possibility for self-refinement. This is when a programmer instructs an LLM to check and refine its own output to weed out package hallucinations. After the model has generated package names, it is asked to confirm that each package is valid. If not, the response is regenerated with instructions not to use the invalid package.
This approach is not flawless. For example, a model may mistakenly classify a valid package as an invalid one. It should also be remembered that some hallucinations can be persistent. Nevertheless, by iterating this process multiple times, one can increase the chances of successfully identifying and removing invalid packages.
Unfortunately, the success of this approach is highly dependent on the model used. For example, Meta's CodeLlama was found to have a bias towards treating hallucinated packages as valid.
Fine-tuning the modelAnother pre-generation technique that is possible with open-source models, such as DeepSeek and CodeLLama, is fine-tuning the model. This involves tweaking the model itself to improve performance on tasks prone to hallucinations.
The issue with this approach, however, is that it can impact the actual performance of the code. So, while a fine-tuned model may produce fewer package hallucinations, the code quality is likely to be worse.
Retrieval-Augmented GenerationIn another notable pre-generation technique, Retrieval-Augmented Generation (RAG), prompts for LLMs are enriched with information from specific data sources. This could occur at the stage of the initial prompt or during refinement and iteration.
In the case of package hallucinations, it is possible to augment prompts with a database of valid packages and descriptions of what these packages are relevant for. The LLM can then query the database and add relevant answers to the prompt, which will help it accurately identify valid packages.
Naturally, this approach requires an initial investment of time to create a dataset and structure it so an LLM can effectively search it to identify relevant valid packages. However, this approach has been shown to reduce the number of hallucinations when using models such as DeepSeek.
Post-generation techniques for mitigating package hallucinationA second, and arguably less effective, approach to mitigation is to filter out package hallucinations after they have been generated.
For example, one option would be to take a master list of valid packages and then cross reference this with the output from an LLM. This approach would eliminate invalid package names. However, it is only as reliable as the master list used. An attacker could simply add their invalid package to any public master list that is used, making it ineffective as a defense. It is also possible to curate the list using metrics that estimate validity, such as their popularity, but this would be far from foolproof.
Other post-generation techniques, such as scanning for malicious content, are also unlikely to provide 100% security. Packages could be legitimate at the outset but could beacon to a command control server at a later date, which then updates the package and adds the malicious code.
Robust internal practices to verify codeUltimately, this threat relies on internal agents running code received from an LLM without first validating it. So, one of the most effective approaches an organization can take in order to mitigate the risk of slopsquatting is to ensure they have robust verification practices in place.
First and foremost, code should be tested in secure environments to avoid the risk of the supply chain being poisoned. It is also crucial to train programmers on the potential risks of package hallucinations and implement procedures for peer code reviews.
Notifying reviewers about which parts of the code have been generated by LLMs will enhance the effectiveness of peer reviews. Additionally, dependency analysis tools can help by identifying potential vulnerabilities and alerting about suspicious packages.
Summing up: tackling new threatsLLM's are revolutionizing the way programmers work. However, as the example of package hallucinations shows, with every new development in these models, new risks occur. By employing a combination of pre- and post-generation techniques and ensuring best internal practices are in place, companies can continue to enjoy the benefits of LLM-generated code while mitigating the risk of slopsquatting.
We list the best Linux distro for developers.
This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro
Cybersecurity experts at KPGM have confirmed that ExpressVPN never logs any of your identifiable information, as stated in its privacy policy. The experts specifically checked ExpressVPN's server infrastructure design, checking that it effectively prevents the collection of such logs.
Rated by us as one of the best VPN services right now, this audit marks the 23rd time ExpressVPN has put its software under scrutiny, with the latest audit confirming ExpressVPN's claims as of February 2025.
"No exception noted"The team at KPGM thoroughly checked that ExpressVPN TrustedServer acts as it should. Testing its description, design, and implementation of controls.
Developed in 2019, ExpressVPN TrustedServer is the provider's technology at the base of its no-log claims. All VPN servers run entirely on RAM, for example, meaning that nothing is stored on the server after a reboot.
ExpressVPN's servers are also designed so that every time the server is rebooted, the newest version of the code stack (which includes the operating system (OS) and the VPN infrastructure above it) is loaded as a unique block, minimizing the risks of bugs, other vulnerabilities, and misconfiguration.
As of February 28, 2025, KPGM confirmed that ExpressVPN's infrastructure doesn't present any anomalies in its design or implementation, as "no exception noted" during tests. You can see the full report here.
"Having KPMG evaluate our technologies and assess our privacy protections again demonstrates our unwavering commitment to maintaining the highest standards of user privacy protection," said ExpressVPN's Chief Information Security Officer, Aaron Engel, commenting on the findings.
"Independent assurance isn't just a checkbox for us—it's fundamental in our efforts towards trust and transparency," he added.
A regularly audited no-log privacy policy and security infrastructure aims to provide a guarantee that none of your personal information or usage data is collected, leaked, and then linked to you or your online activities.
It's worth remembering, however, that even no-log VPNs collect some basic data. This includes information such as your email address and the number of users connected to a server, for example. Yet, these details should not be enough to identify you or your activities when using the VPN.
You might also likeProduction on the live-action The Legend of Zelda movie is very much underway as two members of the lead cast have officially been confirmed.
The news was posted on social media by Nintendo legend Shigeru Miyamoto, who revealed a picture of the actors that will play the eponymous princess of 'Hyrule' (the fictional kingdom in the video game series), Zelda, and legendary swordsman Link in costume.
Benjamin Evan Ainsworth, who made his debut in Mike Flanagan's horror series The Haunting of Bly Manor on Netflix, has been cast as Link, while Bo Bragason from the period drama Renegade Nell on Disney+ will play Zelda.
This is Miyamoto. I am pleased to announce that for the live-action film of The Legend of Zelda, Zelda will be played by Bo Bragason-san, and Link by Benjamin Evan Ainsworth-san. I am very much looking forward to seeing both of them on the big screen. (1/2) pic.twitter.com/KA5XW3lwulJuly 16, 2025
Nintendo and Sony casting two young actors to play the lead characters of the Zelda franchise is one of our first indications of which direction the movie could take. Indeed, such a young cast could mean that we see an earlier game in the franchise, such as The Legend of Zelda: The Wind Waker, as the central plot of the film.
Of course, that's just speculation. It could be that there's still a chance that The Legend of Zelda: Ocarina of Time is the subject matter for the first live-action movie adaptation, but that would mean that we're expecting a second Link to be cast for when the character grows up in the game.
This first casting announcement also arguably suggests that we could be in store for a series of movies. Having such a young cast gives the actors room to grow with their characters over multiple films, and means there won't be any issues like Stranger Things now has with its cast of adults playing teenagers in season 5.
Nothing else surrounding the production of The Legend of Zelda adaptation has been confirmed yet, but we do know the release date of the live-action movie: March 26, 2027. We can therefore expect more casting announcements in the months to come.
What are fans saying about the cast of the live-action The Legend of Zelda movie?In the lead-up to today's announcement, there were quite a few rumors about who would play Zelda and Link in the live-action The Legend of Zelda movie. One of the frontrunners for Zelda's role was Hunter Schafer (Euphoria), but it seems that Wes Ball, who's directing the film, ruled her out by going for a younger cast.
Indeed, going off an interview that Nintendo's veteran game designer Takashi Tezuka did with MTV over nine years ago, there was even a chance that Link could have been played by a woman. "This is just personally, [but] it would be very fun and awesome if Link was played by a female actress," Tezuka said, "a boyish female actress."
The direction that Ball has decided to take the movie in instead has been met with a lot of praise on social media, with many expecting another quality film in the vein of Nintendo's last hit, the Super Mario Bros. Movie. While some have expressed disappointment that Schafer didn't land the role of Zelda, others say that this suggests the movie will be part of a trilogy.
Comment from r/gamingSome users also appear to be pleased that both actors are English, as it offers some continuity to the video game – many of the voice actors are English in the series (except Link, of course). However, this does vary from game to game.
Overall, the reception appears to be positive, especially as it gives fans of the video game who are excited for the live-action movie their first real indication of what to expect. Could such a young cast mean we get a Zelda movie trilogy? Does it narrow down our speculation about which video game will form the basis of the story? There's a lot to chew on here.
You might also likeA new NYT Connections puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Wednesday's puzzle instead then click here: NYT Connections hints and answers for Wednesday, July 16 (game #766).
Good morning! Let's play Connections, the NYT's clever word game that challenges you to group answers in various categories. It can be tough, so read on if you need Connections hints.
What should you do once you've finished? Why, play some more word games of course. I've also got daily Strands hints and answers and Quordle hints and answers articles if you need help for those too, while Marc's Wordle today page covers the original viral word game.
SPOILER WARNING: Information about NYT Connections today is below, so don't read on if you don't want to know the answers.
NYT Connections today (game #767) - today's words(Image credit: New York Times)Today's NYT Connections words are…
What are some clues for today's NYT Connections groups?
Need more clues?
We're firmly in spoiler territory now, but read on if you want to know what the four theme answers are for today's NYT Connections puzzles…
NYT Connections today (game #767) - hint #2 - group answersWhat are the answers for today's NYT Connections groups?
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
NYT Connections today (game #767) - the answers(Image credit: New York Times)The answers to today's Connections, game #767, are…
A work colleague recently mentioned that they really disliked the phrase “no WORRIES”, so I made an effort to stop saying it.
I found it incredibly hard and realized that I say it virtually every time someone says thank you. I struggled to find a decent alternative – “my pleasure” makes it sound too much like I enjoyed whatever it was a bit too much, “no sweat” made it appear as if it was too easy, and “not a problem” sounds like it was a problem. I wrestled over it for a few days then decided it wasn’t worth worrying about.
Anyway back to the puzzle. This was my ideal type of Connections, just about tricky enough to be satisfying, but not too tricky that it became time consuming.
I was delighted to get the purple group – ENDING WITH FISH – but it came after my one mistake of the round, when I panicked after seeing no links in the eight words I had left at that point.
Then I remembered to do what we should always do when the words seem too random and look at the end of each one. Sweet joy and relief followed.
Yesterday's NYT Connections answers (Wednesday, July 16 game #766)NYT Connections is one of several increasingly popular word games made by the New York Times. It challenges you to find groups of four items that share something in common, and each group has a different difficulty level: green is easy, yellow a little harder, blue often quite tough and purple usually very difficult.
On the plus side, you don't technically need to solve the final one, as you'll be able to answer that one by a process of elimination. What's more, you can make up to four mistakes, which gives you a little bit of breathing room.
It's a little more involved than something like Wordle, however, and there are plenty of opportunities for the game to trip you up with tricks. For instance, watch out for homophones and other word games that could disguise the answers.
It's playable for free via the NYT Games site on desktop or mobile.
A new Quordle puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Wednesday's puzzle instead then click here: Quordle hints and answers for Wednesday, July 16 (game #1269).
Quordle was one of the original Wordle alternatives and is still going strong now more than 1,100 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today – or scroll down further for the answers.
Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.
SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.
Quordle today (game #1270) - hint #1 - VowelsHow many different vowels are in Quordle today?• The number of different vowels in Quordle today is 3*.
* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).
Quordle today (game #1270) - hint #2 - repeated lettersDo any of today's Quordle answers contain repeated letters?• The number of Quordle answers containing a repeated letter today is 2.
Quordle today (game #1270) - hint #3 - uncommon lettersDo the letters Q, Z, X or J appear in Quordle today?• No. None of Q, Z, X or J appear among today's Quordle answers.
Quordle today (game #1270) - hint #4 - starting letters (1)Do any of today's Quordle puzzles start with the same letter?• The number of today's Quordle answers starting with the same letter is 0.
If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:
Quordle today (game #1270) - hint #5 - starting letters (2)What letters do today's Quordle answers start with?• C
• T
• P
• H
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
Quordle today (game #1270) - the answers(Image credit: Merriam-Webster)The answers to today's Quordle, game #1270, are…
While I was playing this game I thought that I was making some wild, inspired guesses and getting them right every time, but on reflection those guesses were the only options – I just got to them before I had to do much thinking.
POWER was my only real lucky guess as it could have been boxer or foyer on a different day.
Daily Sequence today (game #1270) - the answers(Image credit: Merriam-Webster)The answers to today's Quordle Daily Sequence, game #1270, are…
A new NYT Strands puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Wednesday's puzzle instead then click here: NYT Strands hints and answers for Wednesday, July 16 (game #500).
Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.
Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.
SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.
NYT Strands today (game #501) - hint #1 - today's themeWhat is the theme of today's NYT Strands?• Today's NYT Strands theme is… Find your seat
NYT Strands today (game #501) - hint #2 - clue wordsPlay any of these words to unlock the in-game hints system.
• Spangram has 8 letters
NYT Strands today (game #501) - hint #4 - spangram positionWhat are two sides of the board that today's spangram touches?First side: right, 2nd row
Last side: left, 2nd row
Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.
NYT Strands today (game #501) - the answers(Image credit: New York Times)The answers to today's Strands, game #501, are…
I didn’t see the THEATERS spangram straight away – possibly because I am hardwired to see the UK spelling. Instead, I saw several non-game words in heat, heater, and heaters. So, I took the lazy option of starting with a hint.
BOXES didn’t help me narrow things down much, but it did make me think that we were looking for something about venues and auditoriums. Seeing two letter Zs together helped me get MEZZANINE – a lovely sounding word – and once I got LOBBY I knew that we were looking for words associated with theaters.
It’s a little odd that “stage” is missing from the search as you can’t have a theater without one, but that’s my only quibble.
Yesterday's NYT Strands answers (Wednesday, July 16, game #500)Strands is the NYT's not-so-new-any-more word game, following Wordle and Connections. It's now a fully fledged member of the NYT's games stable that has been running for a year and which can be played on the NYT Games site on desktop or mobile.
I've got a full guide to how to play NYT Strands, complete with tips for solving it, so check that out if you're struggling to beat it each day.
The infamous Konfety Android malware has apparently been updated, with new versions hiding in plain sight through tampered APK structure, experts have warned.
Security researchers zLabs have found new Konfety variants were adopting “increasingly advanced” techniques to evade detection and hinder reverse engineering efforts.
In ZIP files (which APKs are based on), every file includes a so-called General Purpose Bit Flag, a two-byte field that stores metadata about how the file should be handled (either 0 or 1). One of the bits in the flag indicates if the file is encrypted or not.
Today’s cyberthreats are more sophisticated and scams are harder to detect. That’s why we made our all-in-one security more powerful to keep you safer online. Norton 360 now with Genie AI-powered scam detection. Advanced tech for advanced threats starting at $29.99 the first year.View Deal
Evil twins and dual-app deceptionIn Konfety’s case, the attackers intentionally set bit 0 to 1, even though the file wasn’t actually encrypted, causing decompression tools to misinterpret the files, analysis tools to crash thinking it was unreadable or corrupted, and reverse engineers to waste time troubleshooting.
But that’s not all. Each file entry in a ZIP archive also includes a compression method identifier (0x000 for no compression, 0x000C for an uncommon compression standard, etc.)
With Konfety, the attackers managed to declare files compressed using 0x000C, which wasn’t really the case. Since the files can’t decompress properly, it leads to partial extraction, parsing errors, or even crashes, which complicates reverse-engineering and analysis.
There are other ways Konfety tries to hide and maintain persistence. zLabs said that the attackers are also using so-called “dual-app deception”, in which there’s a legitimate app on major app stores, and a malicious one elsewhere.
The app also hides its icon when installed, and applies geofencing to make sure certain analysts and researchers can’t get to it.
Konfety works by using CaramelAds SDK to fetch ads, deliver payloads, and maintain communication with attacker-controlled servers. It redirects users to malicious websites, prompts unwanted app installs, and triggers persistent spam-like browser notifications.
“The threat actors behind Konfety are highly adaptable, consistently altering their targeted ad networks and updating their methods to evade detection,” the researchers warned.
“This latest variant demonstrates their sophistication by specifically tampering with the APK's ZIP structure. This tactic is designed to bypass security checks and significantly complicate reverse engineering efforts, making detection and analysis more challenging for security professionals.”
Via BleepingComputer
You might also like