Feed aggregator

• Some reports mistakenly claimed Windows 11 24H2 has dropped support for Intel 8th, 9th, and 10th-gen CPUs
• Microsoft has made it clear this isn’t the case
• The confusion arose due to a support document which is correct, but aimed at PC makers, so it only applies to new, not existing, Windows 11 systems

Windows 11 hasn’t dropped support for some older Intel processors with its latest incarnation, the (rather problematic) 24H2 update, despite some reports that are floating around claiming this is the case.

Windows Latest brings this clarification, complete with word from Microsoft that these older Intel 8th, 9th, and 10th-generation processors are still fully compatible with Windows 11 24H2, and nothing has changed in that respect.

So where did this errant idea originate? It came from an official list of supported CPUs for Windows 11, which was indeed very recently updated for the 24H2 release, whereupon the mentioned Intel chips were removed.

However, the key point is that this is a support document that lists processors that are okay to use for laptop and PC manufacturers in their new Windows 11 devices. The text clearly states: “OEMs [PC makers] may use the following CPUs for new Windows 11 devices.”

There’s a clear difference between CPUs recommended to go in new Windows 11 PCs, and chips that are in existing PCs which are supported by Windows 11. Something has changed in the former case – those mentioned Intel processors are now considered too out of date to be included with a new machine packing 24H2 (even though they’re still technically okay) – but nothing has changed in the latter case with existing devices.

In short, you’ll be fine to upgrade to Windows 11 24H2 if you’re using an Intel 8th, 9th, or 10th-gen chip, there’s no need to worry on that score.

Windows Latest received a clarification direct from Microsoft with a statement that the “requirements haven’t changed” for Windows 11 24H2, and indeed they haven’t been modified since the OS was first released.

In a separate support article elsewhere on the Windows Hardware Development portal, regarding the CPU requirements for Windows 11 which are provided, Microsoft also notes: “Changes to the processors listed do not indicate or impact a customer’s existing Windows support and are intended for OEMs to determine processors which may be used in new Windows devices.”

(Image credit: Shutterstock) Analysis: It’s easy to see where confusion crept in

That clears up the matter definitively, then. That said, there is something of an oddity in that the Windows 11 system requirements page – the official effort for consumers – links across to a ‘list of approved CPUs’ which is the aforementioned recommendations for OEMs, not consumers (as Tom’s Hardware flagged).

So, Microsoft could do with tidying up its support literature here, as it’s easy to see how someone might become confused. If you don’t read the full text of the article, you won’t spot the reference to OEMs (and who reads everything these days?).

What are you supposed to do, then, as a consumer wondering about the exact CPU requirements for Windows 11? Well, Microsoft evidently doesn’t want you poring over any lists of supported processors, and instead recommends you run the PC Health Check app – which admittedly is an easy and hassle-free way to see if your computer does indeed support Windows 11. (Also checking for every possible requirement, not just the processor).

I’d still recommend Microsoft cleans up the mentioned support documentation, though, to ensure that any possible confusion is kept to a minimum, because clearly, as this episode illustrates, there’s some room for befuddlement.

You may also like...

• New patch for Windows 11 24H2 reportedly plays havoc with File Explorer, and some folks are claiming it's broken their PC
• Are you unable to get security updates for Windows 11 24H2? Here’s the likely reason why, and the fix to get your PC safe and secure again
• Windows 11 fully streamlined in just two clicks? Talon utility promises to rip all the bloatware out of Microsoft’s OS in a hassle-free way

• PS5 Slim 30th Anniversary stock looks to be available by invitation again
• This is the second such text from the EE Store I've received in recent weeks
• Sony and other retailers have given no word on any official restocks to come

For the second time in a matter of weeks, I have received another invite via SMS from the EE Store offering me PS5 Slim 30th Anniversary stock.

As a result, I'd recommend keeping your phone close if you've received messages from the store before or are (or were) an EE customer. This might be one of our last best ways to pick up one of the sought-after console bundles with no word on other retailers or official restocks for weeks now.

Even though I moved from EE to O2 last Black Friday, I'm still receiving alerts and offers from the EE Store - so it could be the same for you if you did something similar in recent months.

Today, I received a second message (the first coming a couple of weeks ago) inviting me to buy a PS5 Slim 30th Anniversary bundle. This is the same bundle that EE has sold since the pre-order phase, which consists of the Limited Edition PS5 Slim bundle, an extra Midnight Black DualSense, and a £50 EE Gamecard voucher, all for £539.

Thus, once again, I reckon it's worth keeping your phones close this week as you may get a wonderful invite to buy the rare bundle.

For what it's worth, the link in the SMS is special and can't be replicated on a regular browser, either on mobile or desktop, with the below message popping up.

(Image credit: EE)

The message is headed "You can't get there, from here." and goes on to say "If you're looking for the Sony PS5 Digital 30th Anniversary Limited Edition Bundle, you need to access via a special link we've issued to customers."

If you're looking for an alternative and have also had an eye on the 30th Anniversary Edition DualSense controller, then EE can also help you out with another bundle. The store has been one of the few places where the controller has been readily available - though it has almost always been in bundles like the one below. Still, it is worth a look if you're up for a PS5 Slim by coincidence too.

Scroll down to the bundle section on this PS5 Slim listing page and you'll soon see the 30th Anniversary DualSense bundle that EE claims can save you £19.99.View Deal

You might also like...

• Fortnite is adding Sub-Zero next season, finally becoming the first game where Street Fighter vs Mortal Kombat is possible
• Xbox boss Phil Spencer wants to be 'transparent' during Xbox showcases, will continue putting PlayStation and Nintendo logos in its trailers
• Fortnite: Lawless gets first trailer highlighting the new season's battle pass roster and the chaos of Crime City

Hey Siri, what's taking so long?

• A new SDR module is coming for Framework 16, fitting the GPU slot
• Designed for C-UAS, it’ll detect, track, and possibly neutralize rogue drones
• It packs serious processing power with custom cooling for FPGA and DSP chips

We’re big fans of Framework’s modular laptops - as while many notebook makers have shifted towards soldered components, making even simple upgrades all but impossible, Framework’s approach lets you get the laptop you want and make whatever upgrades you need to the hardware.

You can choose the processor, mainboard, RAM, and even components like the webcam, screen, keyboard and expansion cards. The company even offers a RISC-V mainboard, created by DeepComputing, and most recently, Framework announced its Laptop 16 device can now support up to 26TB of superfast Gen4 SSD storage.

In 2024, the company open-sourced 3D CAD designs for its Laptop 16, giving users the ability to 3D print custom components. Over on X, Lukas Henkel at Open Visions, which designs and develops innovative hardware solutions, announced he is taking advantage of this flexibility by making a Software-Defined Radio (SDR) module for a customer in the Counter-Unmanned Aircraft Systems (C-UAS) sector.

(Image credit: Lukas Henkel) Taking down drones

This new product will fit into the Framework 16 GPU module form factor, resulting in what Henkel describes as a “nice, fully enclosed solution with lots of processing power and a very high-bandwidth link between the radio and the host system.”

In a later post, Henkel explained he needs to “customize the heat pipe and heat spreader for the Framework Laptop SDR module in order to cool both the FPGA and DSP” because the reference implementation is “designed for only a single heat source.” Fortunately, he reports, “the form factor provides enough Z-height for these kinds of modifications.”

Although Henkel doesn’t go into detail about what the SDR module will be used for or how it will work, being in the C-UAS sector, we can assume it will detect, track, and potentially neutralize unauthorized or hostile drones. This kind of technology is often used in military, law enforcement, and security applications, but it's the first time we've seen it being integrated so smartly into a laptop in this way.

I'm developing an SDR module for a customer in the C-UAS sector. The system will fit into the Framework 16 GPU module formfactor resulting in a nice fully enclosed solution with lots of processing power and a very high bandwidth link between the radio and the host system. The… pic.twitter.com/oyHyfjr6GBJanuary 3, 2025

You might also like

• These are the best laptops for work and gaming you can buy right now
• You can now 3D print your own laptop components thanks to Framework
• Framework adds support for Intel Core Ultra processors, 9.2-megapixel webcam

After leaving OpenAI last year, Mira Murati is finally ready to share what she's working on.

Firings at the NSF included permanent employees who had already completed their one-year probationary period, as well as at-will workers.

But the satellite internet service is sold out in several major cities across the United States.

• Qualys uncovers two bugs in OpenSSH
• The flaws could be used in Machine-in-the-Middle and Denial-of-Service attacks
• Patches are available, as well as some mitigations

OpenSSH carried two vulnerabilities that were enabling machine-in-the-middle (MitM) attacks and denial-of-service (DoS) attacks, experts have warned.

Cybersecurity researchers from the Qualys Threat Research Unit (TRU), who discovered the flaws and helped patch things up, noted they spotted two vulnerabilities, one tracked as CVE-2025-26465, and another tracked as CVE-2025-26466.

The former allows an active MitM attack on the OpenSSH client when the VerifyHostKeyDNS option is enabled, while the latter affects both the OpenSSH client and server, and enables pre-authentication DoS attacks.

Millions of victims

For the MitM attack to succeed, the VerifyHostKeyDNS option needs to be set to either “yes”, or “ask”, Qualys said, stressing that the default option is “no.” The attack requires no user interaction, and does not depend on the existence of an SSHFP resource record in DNS. This flaw was present in OpenSSH since December 2014, it was added, just before the release of OpenSSH 6.8p1.

“If an attacker can perform a man-in-the-middle attack via CVE-2025-26465, the client may accept the attacker’s key instead of the legitimate server’s key,” the blog reads. “If compromised, hackers could view or manipulate sensitive data, move across multiple critical servers laterally, and exfiltrate valuable information such as database credentials.”

The second flaw was introduced in August 2023, Qualys added, shortly before the release of OpenSSH 9.5p1. If threat actors can repeatedly exploit it, they may cause prolonged outages or prevent admins from managing servers, it was said.

The bug can be mitigated on the server side by leveraging existing mechanisms in OpenSSH such as LoginGraceTime, MaxStartups, and PerSourcePenalties.

Regardless of potential mitigations, Qualys urges all users to upgrade to OpenSSH 9.9p2, since this version addresses both vulnerabilities. “To ensure continued security, we strongly advise upgrading affected systems to 9.9p2 as soon as possible,” the researchers said.

OpenSSH (Open Secure Shell) is a suite of open source tools that provide encrypted communication, secure remote login, and file transfers over an unsecured network using the SSH protocol.

You might also like

• Thousands of servers could be at risk due to major OpenSSH security flaw
• We've rounded up the best password managers
• Take a look at our guide to the best authenticator app

One-minute review

The Mobile Controller MG-X Pro is the most disappointing mobile gaming controller that I’ve ever tested. For the lofty price of $119.90 / £99.90 - which is a whopping $19.91 more than the Backbone One 2nd Gen in the US - you’re getting a mobile controller that performs worse, has a lower build quality, lacks a lot of major features, and, in the case of the iPhone variant that I tried, doesn't even fit properly on some recent phones.

There is simply no reason to consider this controller at its retail price - but that’s not to say that it is completely irredeemable.

The thumbsticks are a little loose for my taste but undeniably work well for fast-paced games like Call of Duty: Warzone Mobile. The large, Xbox-style buttons are also responsive and quite appealing if you intend to use them for Xbox Cloud Gaming - though it’s a shame that the D-pad is uncomfortably flat and imprecise. There’s also the fact that this is a Bluetooth gamepad, which, even though this means that it requires separate charging and does not feature charging pass-through, some might still prefer over the wired connection of the Backbone One 2nd Gen.

The Mobile Controller MG-X Pro is quite a unique shape too, being something of a middle ground between the compact Backbone One 2nd Gen and the full-size Razer Kishi Ultra, and comfortable in the hands for extended gaming sessions.

If you can find it on sale with a discount of 50% or above, I could see this being a solid, though certainly not leading, option. Otherwise, I’m hoping that manufacturer Nacon takes the Mobile Controller MG-X Pro back to the drawing board for an updated, overhauled successor.

(Image credit: Future) Mobile Controller MG-X Pro: Price and availability

• iOS version costs $119.90 / £99.90
• Android version is $99.90 / £74.90
• Available via Nacon and Amazon

The Mobile Controller MG-X Pro sells for $119.90 / £99.90 on the Nacon website and similar rates over at Amazon. It’s available in both the US and UK, with two alternate versions to choose from. I tested the white ‘iPhone’ variant, which is compatible with iOS devices.

The Android, or ‘Xbox’ version, comes in black - with a larger Xbox-style home button. Despite being a licensed product, it’s bizarrely a little cheaper than the iOS one - at $99.90 / £74.90.

I wouldn’t say that this is good value, but at this lower price, the Mobile Controller MG-X Pro is a little bit more competitive in the face of the $99.99 / £99.99 Backbone One 2nd Gen.

Mobile Controller MG-X Pro: Specs

(Image credit: Future) Mobile Controller MG-X Pro: Design and features

• Thick and comfortable in the hands
• Plastic feels cheap
• Face buttons are reliable

The Mobile Controller MG-X Pro’s design is a midpoint between smaller options like the Backbone One 2nd Gen and Scuf Nomad and larger mobile gamepads such as the Razer Kishi Ultra. It’s quite hefty, weighing 0.77lbs / 350g, with an overall shape that’s a bit reminiscent of the Xbox Wireless Controller, albeit with an extending spring-loaded back to accommodate the addition of a mobile phone.

The grips are thinner than Microsoft’s pad, however, and the overall layout is a little bit squashed in comparison - with the thumbsticks, buttons, and D-pad all very close together. It’s certainly not uncomfortable, even in my larger hands, and I actually quite like the way that little nook underneath the rear triggers provides a perfect little resting place for your middle fingers.

Still, the build quality is a letdown at this price point. There are cheap-looking seams on the sides of the controller, plus a few visible imperfections in the plastic molding. Some corners are quite sharp too, especially where the phone is attached, which occasionally led to me painfully scraping my hands on it while trying to get my device in and out. This is nowhere near the almost Apple-like construction of the slightly cheaper Backbone One 2nd Gen.

(Image credit: Future)

This is a Bluetooth gamepad, so it has no physical connection to your phone. Instead, you need to turn it on by holding the small home button and waiting for it to connect to your device. Four small LED indicators show you its current status, such as its current battery level and whether it's in pairing mode. On the bottom of the controller is a USB-C port, used to charge up the controller. Bear in mind that, unlike the Backbone One 2nd Gen, there’s no charging pass-through here, so won’t be able to top up your device while it’s in use. There’s also no headphone jack, so many of the best gaming earbuds simply won’t work.

The Mobile Controller MG-X Pro is compatible with the MG-X Series App, which bizarrely only seemed to be available on iOS. This is fully functional, but lacks anything beyond the most basic features - only offering thumbstick calibration, a quick control guide, and the option to update your gamepad. There’s no button remapping here, no way to customize trigger sensitivity, no list of suggested compatible games, or really any reason to ever boot it up. It’s significantly behind the Backbone or Razer Nexus apps, which both function as game launchers and offer basic necessities such as button remapping in addition to a few killer features like, in Razer’s case, a fantastic virtual controller mode.

At least the setup process is mercifully straightforward, simply requiring you to turn on the controller and select it from your phone’s Bluetooth menu to pair.

(Image credit: Nacon) Mobile Controller MG-X Pro: Performance

• Strong battery life
• Thumbsticks feel quite loose
• D-pad is awful

The performance of the Mobile Controller MG-X Pro is just about acceptable, provided you ignore the price. The thumbsticks are roughly equivalent in size to the Xbox pad but with a thinner column and much more travel.

There’s not a lot of resistance, which makes them quick to use in fast-paced multiplayer games like Call of Duty: Warzone Mobile or PUBG Mobile, but at the same time means that they feel a tad slippery.

The face buttons have a flat design with a lot of surface area and a pleasant, membrane-feeling mechanism. The D-pad is also very flat and spongy, but unlike the buttons, I soon found that this made it very hard to make precise inputs. Pressing right would often also trigger an upwards input and if you play lots of platformers or retro games with D-pad controls, this is going to be a complete dealbreaker.

A note on accessibility

(Image credit: Future/Rob Dwiar)

Nacon sent me the Android variant for testing - and I've had a pretty positive experience with it from an accessibility standpoint. Thanks to its chunky design, it's the only mobile controller I've really been able to use and has let me enjoy Stalker 2 on the sofa via remote play. Each arm is perfectly sized and the buttons are arranged closely enough for my different hands to engage with. It's a shame about the price and build, but for those looking to try a uniquely shaped mobile controller, the MG-X Pro earns some credit.

- Rob Dwiar, Managing Editor, TechRadar Gaming

The iOS version of the Mobile Controller MG-X Pro also doesn't fit well if you’re using a larger iPhone. I tested the controller with my iPhone 15 Plus, where the large camera module makes it difficult to securely insert. It goes in fine enough at first, but is loose and could fall out if you’re not careful. After a quick look online, I discovered that this was quite a common complaint with a handful of customers saying that it didn’t fit an iPhone 14 Pro Max either.

Swapping over to an old iPhone 12, this was not an issue at all, so it’s clear that Nacon needs to revise the design for modern iPhones - or at the very least add a disclaimer to its store page clarifying exactly which devices it’s most compatible with. This makes it a mobile controller that you’re realistically not going to want to use out and about; after all there’s no point risking your phone coming loose and falling out onto a hard surface while you’re trying to game on the train.

The only area where the Mobile Controller MG-X Pro unreservedly delivers is in its battery life. Nacon claims that it will last “up to 20 hours” and I can attest that it gets very close to that figure. I was able to use the controller repeatedly throughout the week without ever having to worry about charging it up, which is excellent.

(Image credit: Future) Should I buy the Mobile Controller MG-X Pro? Buy it if...

You want strong battery life
Easily the best element of the Mobile Controller MG-X Pro is its battery life. You’re getting close to 20 hours in standard use, which is great and cuts down on the need to charge it up between sessions.

Don't buy it if...

You crave the best value
The Mobile Controller MG-X Pro is far too expensive for what you get. It’s impossible to recommend above the many similarly priced and even cheaper alternatives out there today.

You want lots of features
The Mobile Controller MG-X Pro has a tiny feature set and a comically barren mobile app. If you want a controller that you can truly customize, then you need to look elsewhere.View Deal

Also consider

Looking for something a bit better than the Mobile Controller MG-X Pro? Consider these two strong alternatives instead.

Scuf Nomad
The Scuf Nomad is similar to the Mobile Controller MG-X Pro in that it’s also a Bluetooth mobile gamepad, but it has a significantly greater number of features and a much more high-quality design.

Read our full Scuf Nomad review

Backbone One 2nd Gen
The Backbone One 2nd Gen is the mobile controller to beat, and massively better than the Mobile Controller MG-X Pro. It’s wired, but fits more phones, is compatible with both Android and iOS at once, and boasts a great app.

Read our full Backbone One 2nd Gen review

(Image credit: Future) How I tested the Mobile Controller MG-X Pro

• Test for a few weeks
• Tried with a variety of mobile games
• Compared to other controllers

I tested the iOS version of the Mobile Controller MG-X Pro for roughly three weeks. During that time I paired it with my trusty iPhone 15 Plus and, briefly, an old iPhone 12. I played a wide variety of compatible mobile games, including favorites like Call of Duty: Warzone Mobile, Zenless Zone Zero, Hitman Blood Money Reprisal, Call of Duty Mobile, and more.

Throughout my time with the controller, I compared my experience with my hands-on testing of other mobile gamepads including the Razer Kishi, Razer Kishi Ultra, Backbone One, Backbone One 2nd Gen, Scuf Nomad, Turtle Beach Atom, and GameSir X2s Type-C.

Read more about how we test

First reviewed February 2025

A baby seal was rescued from the streets of downtown New Haven, lethargic and underweight. He is now recovering at a nearby aquarium, which hopes to eventually release him back into the ocean.

The Mate XT Ultimate Design bends twice, creating three distinct sections. But here's the bad news: It's not coming to the US anytime soon.

Even while Pope Francis is hospitalized, he still keeps in touch with a Roman Catholic parish in Gaza City, making near-nightly phone calls to the priest and congregation there.

(Image credit: Alessandra Tarantino)

Leading VPN firm ExpressVPN has just released a major update to its router with built-in VPN, Aircove.

The update means ExpressVPN's Aircove and Aircove Go devices promise to be faster, more secure, and private. The upgrades include a new guest Wi-Fi feature to give you more control over your privacy, and up to doubled connection speeds than previously. Aircove and Aircove Go are also the first platforms supporting the newly launched Lightway protocol in Rust.

Upon release, the new AircoveOS v5 has had a successful third-party audit from cybersecurity experts at Cure53 under its belt that validates ExpressVPN's security infrastructure.

What's new with AircoveOS v5?

The AircoveOS v5 update was mainly shaped by customers' direct feedback, ExpressVPN explained.

"We listened carefully to what mattered most – from faster connections to isolated network access for your friends and family – and intentionally built these improvements into every aspect of Aircove’s architecture," said David Gilbert, staff product manager for Aircove.

Better performance was certainly one of the users' priorities. With the update, Aircove should reach 330 Mbps speed when using ExpressVPN's Lightway TCP protocol. While this doesn't yet match the fastest VPNs around, it's a considerable improvement and more than plenty to do most online activities without lag.

More notably, the update adds a new guest Wi-Fi feature that allows you to isolate untrusted devices in an independent network. The feature, the provider explains, ensures guest Wi-Fi devices experience the same powerful VPN encryption – without the risks of these interacting with other devices on users’ home networks.

Like the existing device group feature, you can customize the Guest Wi-Fi group by setting a different VPN location and toggling on advanced protections like ad-blocker and parental control.

(Image credit: ExpressVPN) The first of a new era

Aircove and Aircove Go are the first platforms to support the new Lightway protocol re-coded in Rust.

This upgrade – which is set to be rolled out across all other ExpressVPN platforms in the next months – promises to make your VPN experience faster and more secure.

Rust is a modern programming language designed for maximum performance and security. An easier code compared to the previously used C, the Rust-based Lightway is expected to make it easier for the team to adopt fixes and add new features.

The new Lightway protocol includes the NIST standard ML-KEM, too, ensuring Aircove can protect you against upcoming threats.

Cure53 has already given its security validation to AircovOS v5. The experts took apart the code in November and couldn't find any major vulnerabilities. You can read the full Cure53 report here.

All in all, Gilbert said, "The result is our most secure and performant OS yet, and we are thrilled to be delivering an enhanced VPN router experience on Aircove."

President Trump and his appointees are now solely in charge of the Kennedy Center. Performers protested by dancing.

(Image credit: David Dowling)

• The first teaser trailer for Fortnite Chapter 6 Season 2: Lawless has been released
• The next season will take place in Crime City and will feature a train heist
• Characters like Bill Dill, Midas, Sub-Zero, and more will be featured in the Battle Pass

Epic Games has released the first trailer for Fortnite Chapter 6 Season 2: Lawless ahead of its launch this week.

The next season will take players to Crime City, "where the hustle never stops," and with the new cinematic trailer, we finally got a chance to see the location in all its chaotic glory, alongside a bunch of new characters who will be featured in the upcoming Battle Pass.

It also seems rumors about this chapter featuring another heist are true, as the video kicks off with Big Dill, a playable pickle, robbing a bank while his song 'Runamok' plays throughout the trailer.

"Ransack Fletcher Kane’s banks, pull off a train heist and make an explosive getaway in Battle Royale Chapter 6 Season 2: Lawless," the description confirms.

The trailer soon devolves into mayhem as the bag of gold bars Dill robbed gets handed from one character to the other until it eventually lands in the hands of a mob boss wolfman, who appears to be the antagonist of the season.

We also got our first look at Midas' new look, a returning character who first appeared in Chapter 2 Season 1, and some gameplay within Crime City as players cause trouble with what appears to be a new laser weapon.

Epic Games just confirmed that Mortal Kombat's Sub-Zero will be featured in the new Battle Pass, making him the franchise's first character to be added to the game. Sub-Zero's abilities haven't been detailed just yet, but the trailer did offer a glimpse at his ice powers.

Fortnite Chapter 6 Season 2: Lawless is scheduled to begin on February 21, 2025.

You might also like...

• Best battle royale games 2024 - be the last one standing in these titles
• Ubisoft announces Rainbow Six Siege X, 'the biggest transformation' the tactical shooter has ever seen that will overhaul gameplay and graphics
• Xbox boss Phil Spencer wants to be 'transparent' during Xbox showcases, will continue putting PlayStation and Nintendo logos in its trailers

• Security researchers found two flaws affecting Xerox Versalink MFP printers
• The flaws could be used in "pass-back" attacks to steal login credentials
• Patches and workarounds are already available, so update now

Some Xerox printers are vulnerable to a “pass-back” attack which can be used to steal login credentials, experts have warned.

Cybersecurity researchers Rapid7 discovered the vulnerability and reported it in an in-depth analysis, saying that during security testing, it found a vulnerability affecting Xerox Versalink MFP printers. This flaw can be abused either via LDAP, or SMB/FTP, to mount a pass-back attack, and with that in mind, it was given two CVEs: CVE-2024-12510 for LDAP, and CVE-2024-12511 for SMB/FTP. The vulnerabilities were given severity scores of 6.7/10 (medium) and 7.6/10 (high) respectively, and affect firmware versions 57.69.91 and earlier.

“This pass-back style attack leverages a vulnerability that allows a malicious actor to alter the MFP’s configuration and cause the MFP device to send authentication credentials back to the malicious actor,” the researchers explained. “This style of attack can be used to capture authentication data.”

Capturing login credentials

The technical details can be found in the blog post here, but the gist is that if a threat actor gains access to a printer’s admin settings, and LDAP is used for authentication, they can change the LDAP server to the one they control, capturing login credentials.

They can also hijack the printer’s scan-to-file feature to steal SMB or FTP credentials, potentially compromising Windows Active Directory and other critical systems.

"For this attack to be successful, the attacker requires an SMB or FTP scan function to be configured within the user's address book, as well as physical access to the printer console or access to remote-control console via the web interface," the researchers stressed.

"This may require admin access unless user level access to the remote-control console has been enabled."

After being tipped off, Xerox issued Service Pack Service Pack 57.75.53, which fixed the problem for VersaLink C7020, 7025, and 7030 series printers.

Those who are unable to apply the patches immediately are advised to set stronger passwords for their admin accounts, refrain from using Windows authentication accounts with high privileges, and disable the remote-control console for unauthenticated users.

You might also like

• Microsoft says Russian hackers are exploiting an ancient printer security flaw
• We've rounded up the best password managers
• Take a look at our guide to the best authenticator app

The Belgian champions have a slender advantage heading into this knockout second leg in Bergamo.

The Portuguese team have a one-goal advantage heading into this home leg at the Estádio da Luz.

A year after Reddit went public, the company's efforts to monetize its popular message boards continue.

• A Redditor has received a third-party RTX 5070 Ti before its launch on February 20
• This comes before its February 19 review embargo
• Recent reports suggest that the new GPU will suffer from similar stock issues seen with the RTX 5090 and RTX 5080

Nvidia's RTX 5000 GPU series launch has been a tangled affair, due to numerous issues like limited retailer supply and scalping. Now, if it wasn't bad enough for Team Green already, the RTX 5070 Ti is only two days away from its launch - but one of its third-party models is unfortunately already out in the wild.

Spotted by VideoCardz, a Redditor claims they have already received the Asus RTX 5070 Ti Prime OC GPU, before both the review embargo and the actual launch of the Founders Edition card, which are set for February 19 and February 20 respectively. Leaks and speculation circulating around the new Blackwell GPUs aren't exactly anything extraordinary, but a card actually landing with a buyer days before launch is a pretty wild turn of events.

While it may not prove to be heavily detrimental to the RTX 5070 Ti's launch, it does further underline exactly how messy Team Green's latest GPU launch has been - more reports highlighted by VideoCardz suggest the upcoming GPU could also face the same supply issues seen with the RTX 5090 and RTX 5080, potentially leaving scalpers salivating once again.

The Redditor also mentioned paying more than the retail price, which doesn't come as a surprise - multiple online retailers currently feature inflated prices for third-party RTX 5090 and RTX 5080 cards, so even though the recipient likely paid extra (with the unexpected benefit of getting the RTX 5070 Ti early), there's a high chance the same price inflation will occur for the 5070 family.

(Image credit: Nvidia) It's probably best to stick with your RTX 4000 series GPU for now

Acknowledging the ongoing issues with RTX 5000 availability, the easiest solution is to stick with your RTX 4000 series GPU if you have one. If you're lucky enough, you may even find third-party models of AMD's Radeon RX 7900 XTX (which is only slightly weaker than the RTX 5080) at discounted prices, or you could just wait for Team Red's new Radeon RX 9000 series lineup (assuming those don't get the scalper treatment too).

The only disadvantage you may have with Team Red's RX 7000 series flagship GPU, is potentially no access to FSR 4 - I say this with heavy emphasis on 'potentially', as the upscaling method might not end up being exclusive to the RX 9000 series forever.

While I'm not downplaying the effectiveness of DLSS 4 with Multi Frame Generation on the new Blackwell GPUs, it's just not worth the hassle to overpay to pre-order any of the cards at this point. There will more than likely be restocking in order for RTX 5090 and RTX 5080 GPUs at some point (and likely the same once the 5070 family sells out), but who knows how long that will take.

Right now, if you own an RX 7900 XTX or the likes of an RTX 4080 Super, rest assured, you're not missing out...

You may also like...

• One Redditor spotted an AMD Ryzen 7 7800X3D for $99 in the wildest price drop I've ever seen
• We've barely seen AMD's RDNA 4 GPUs in action yet, but a new rumor suggests we could be getting an Nvidia RTX 5090 competitor at last
• Intel's rumored 'Celestial' GPUs could finally give Nvidia and AMD cause for concern