We all learn in different ways. As a visual learner, I really appreciate seeing ideas drawn out or presented through images. Give me a page of text, and I can read it, no problem, but not a huge amount is retained by my little grey cells.

Unfortunately, not everything can be boiled down into a simple image, diagram, or video. Some concepts are just too complex to be simplified. When I am forced to read a body of text, I prefer to hear someone read to me rather than read it for myself.

The problem is that not every resource has an accompanying audio feature. I could use my web browser’s reading mode, but there’s usually only a limited number of voices, and they often sound electronic and overprocessed. That’s why I’ve recently started using Speechify.

This simple and straightforward app features over 200 lifelike voices, each of which can be customized by type, pitch, and accent. The app can read uploaded files, images, and pasted text and integrates seamlessly into a range of workflows and file repositories. You can even choose the reading speed to be up to 4.5 times the normal speed, although I wouldn't recommend that!

AI voices that sound natural

Whatever you like to read, Speechify has so many voices on offer that you’re bound to find one that you enjoy listening to. The app guides users through a series of questions that help you narrow down the best choice for your requirements. It begins by asking you which type of voice you’d like. You can choose between conversational, narration, acting, professional, meditation, and educational.

From there, the app asks you whether you’d like the voice to sound bright, soft, neutral, crisp, warm, or deep, and whether you like a low, mid, or high pitch. The final option is to choose between British, American, and Australian accents. Unfortunately, these are the only three possibilities at the moment, although I’m sure they’ll add more in time.

With these simple questions answered, Speechify scans its 200+ voices and tells you which voices are the best fit. All you have to do is select your favorite, choose a document to read, and sit back and enjoy. And if you fancy a change, picking a different voice is easy.

An abundance of workflows

Speechify offers a number of different workflows, all of which are accessible through the Home tab of the app. First up is an AI-driven option where the app asks you, “What do you want to work on today?” Anyone who has used ChatGPT, Gemini, or similar will be familiar with this workflow.

Simply describe your task or ask anything, either with text or through the microphone, and Speechify will look it up for you. You can even attach files to complement your search request. Answers are presented as text but can be ‘read’ by the voice assistant. You can also ask follow-up questions to delve deeper into a topic.

If you already have a document that you’d like read out, you can choose from the list of seven workflow options. These are upload files from your phone, upload from a cloud repository, scan pages, paste text, find a book, paste a link, and dictate text.

I expected Speechify to handle PDFs and web pages with ease, but what I was most impressed with was its ability to analyze and read out images. I tested the app with several different photos, and it was able to read all types of information, including technical details. The images also didn’t have to be the highest quality or the best lit.

One of the best things about Speechify is that it lets me do a lot more multitasking. Prior to using the app, I would have to allocate a lot more time to sitting down and having focused reading time. Now I can upload a file or take a picture of something and crack on with house chores at the same time. It’s transformed how I spend my time.

Getting the most out of Speechify

The free version of Speechify provides a reasonable number of features, but it lacks offline listening, advanced voices, faster playback, and additional features such as dictation. To access these, you’ll need a Premium account, which costs $175 / £129.99 per year. There’s a free 3-day trial so you can test out the additional features before committing.

Also, if you love audiobooks, Speechify also has a library of over 100,000 books across every genre. This includes fiction, classics, self-help, and more. This costs $80 / £60 for lifetime access but is often discounted down to $35 / £25. At this price, Speechify Library is an affordable alternative to Amazon’s Audible service.

Whether you read to study, for leisure, learn a language, or simply want to boost your productivity, Speechify will help you realize your goals in super-fast time.

Download Speechify on iOS and Android.

It’s almost time for Meta Connect, with the brand hosting its annual event on September 23 and 24. Here, we’re expecting to see several new devices, with a focus on smart glasses.

Software updates are also likely, including to Meta Muse, but between the RAM crisis and a privacy backlash against the company’s smart specs, this might not be an entirely rosy affair.

So below, we’ve detailed the seven major things to expect at Meta Connect 2026 — covering both the good and the bad.

1. Camera-free Meta smart glasses

While smart glasses like the Ray-Ban Meta can be extremely useful, they’re also facing a major backlash right now, with many people worrying about them being used as spy glasses to photograph and video people without their knowledge or consent. As a result, Meta might respond by launching camera-free smart glasses.

These are rumored to land at Meta Connect, and would likely focus on conversational interactions with Meta’s AI chatbot. It makes sense for Meta to launch these, though how useful or appealing they will be when the AI can’t see what you’re looking at remains to be seen.

2. The Project Phoenix mixed reality headset

We’ve been hearing for a while that Meta is working on a mixed reality headset codenamed Project Phoenix, and while this reportedly won’t launch until 2027, we might get an official look at it during Meta Connect.

From what we’ve seen so far, this might look more like smart glasses than the Meta Quest 3S headset, despite featuring both AR and VR functionality. However, Project Phoenix has been pictured with a cable running down from it, suggesting that perhaps the battery and/or processor are external, thereby allowing for a slim design.

We don’t know much else about this yet, but that might change at Meta Connect.

3. New Oakley and Ray-Ban glasses

We’re probably due a second generation of the Oakley Meta glasses by now, and there’s also a chance we’ll see the Ray-Ban Meta Gen 3, though it might be too soon for them at this year's Connect.

The Oakley Meta specs are sportier than the Ray-Ban line, with things like wrap-around designs and better water resistance, so expect the second generation to continue with that focus.

As for the Ray-Ban Meta Gen 3, leaks suggest these could have better battery life, smarter AI, and improved audio.

4. A global launch for the Meta Ray-Ban Display Glasses

The Meta Ray-Ban Display Glasses are currently only available in the US, but hopefully at Meta Connect we might see these display-packing specs go global.

It’s certainly about time — originally these were planned to get a wider launch in early 2026, but thanks to "unprecedented demand and limited inventory" this was delayed.

But if you’re hoping to get your hands on them you’ll also have to be prepared to pay a lot, as in the US they retail for $800, so you can expect similarly high pricing elsewhere.

5. Price hikes

Alongside new and improved products, we might also see new and not at all improved prices for some things, thanks to the ongoing RAM crisis.

In other words, don’t be surprised if prices for new generation models of the likes of Oakley Meta and Ray-Ban Meta glasses are higher than the current generation.

In the case of Ray-Ban Meta glasses we already saw a price hike for the second generation, so another for the third would be extremely undesirable, but may also be unavoidable.

6. A Meta Muse AI update

Meta Muse — Meta’s AI agent that can send emails, fill out forms, shop, and do other tasks for you — only launched recently, but as a major new service it’s likely to be getting a lot of attention from Meta, so improvements are probably already in the works.

Meta Connect then would be a prime time to find out about any upcoming changes — and perhaps even for Meta to roll out a software update for it or a new model. Or perhaps Meta will announce availability in countries other than the US, so that more of us can try it.

7. Updates addressing the privacy backlash

As well as launching some camera-free smart glasses, Meta may use Connect to announce some software updates aimed at addressing privacy concerns in its existing specs.

Already, the company has rolled out an update that will stop the glasses recording if you cover the LED once a recording has started, but Meta may well be cooking up additional changes to further prevent surreptitious photography and video recording.

Indeed, Meta's VP of Wearables Alex Himel recently said "we’re going to keep rolling out updates like this to make sure the capture LED can reliably alert bystanders when photos or videos are being captured for someone’s gallery." So while it’s unclear what exactly those updates will be, we might learn about some of them at Meta Connect.

When the original Steam Deck was first announced back in mid-2021, it was a revelation. Valve proved that handheld gaming PCs could be cost-effective and still powerful enough to run demanding software at playable framerates. The first-generation Deck would ship in February 2022, with the Steam Deck OLED model later innovating with a larger, prettier screen, improved refresh rate, and a superior battery in November 2023.

The Steam Deck impressed at the time with its respectable semi-custom AMD APU complete with its four-core (eight threads) CPU clocked between 2.4 and 3.5 GHz, and 8 RDNA 2 Compute Units clocked at 1.6 GHz.

In short, the hardware inside meant that pushing the best PC games to 30 FPS (and above in some cases) at its native 1280 x 720p resolution was a possibility, but the competition has proven that it's time for Valve to go back to the drawing board if it wants to stay competitive.

That's because the Steam Deck is now fairly underpowered when compared to the best PC handhelds on the market. The competition have Full HD (1080p) displays (or better), and feature vastly superior hardware in the form of AMD Ryzen Z1/Z2 or Intel Arc G3 APUs that run rings around the previous-generation frontrunner. So, what does Valve need to do to ensure the Steam Deck 2 can compete if, and when, it launches?

1. A 120Hz Full HD (1080p) OLED display as standard

Both the Steam Deck LCD and Steam Deck OLED models feature a native resolution of 1280 x 720p with either a 60Hz or 90Hz refresh rate. Considering when the former was launched, this was an acceptable trade-off for providing playable framerates. However, every competing product in the oversaturated space has since eclipsed this, meaning the Steam Deck 2 absolutely needs a 120Hz 1080p display at a minimum to be viable.

You only need to look as far as the biggest rivals from back in 2023; the Steam Deck's panel was passé less than a year after the hardware debuted, as evidenced by the Asus ROG Ally and Lenovo Legion Go. Both devices could confidently be called true Steam Deck rivals. The first-generation ROG Ally had a 7-inch 120Hz 1080p panel, whereas the original Legion Go had a 144Hz 8.8-inch QHD+ screen.

I'll always argue that anything above 1080p on a display as small as seven or eight inches ultimately results in a waste of resources, and it seems hardware companies got the hint in 2024. More than two years ago, the MSI Claw A1M launched with a 7-inch Full HD screen, as did the Zotac Zone, Asus ROG Ally X, Asus ROG Xbox Ally X, Lenovo Legion Go S, and Lenovo Legion Go 2, as well as recent releases such as the MSI Claw 8 EX AI+. There's no need for Valve to look to 1440p (QHD), but the company needs to get with the times to avoid being left behind; lacking a decent screen would kill the Steam Deck 2.

2. A semi-custom AMD Zen 4 and RDNA 3.5 APU (or better)

It's never been Valve's style to throw standardized components into its hardware. While the competition was comfortable using the AMD Ryzen Z1 or Z2, or gave Intel Arc graphics a go, the Washington-based company had to go a different route. We saw this with the semi-custom APU inside the Steam Deck and Steam Deck OLED, but this design philosophy has since been repeated with the recently released Steam Machine.

Valve's living room PC features a semi-custom AMD APU that utilizes a six-core (12 threads) Zen 4 CPU and an RDNA 3-powered GPU with a total of 28 Compute Units and 8GB of GDDR6 VRAM. This home-console rival was said to offer "six times the horsepower" of the Steam Deck, and the tech could act as the perfect blueprint for what should be inside the Steam Deck 2.

Now, considering the portable nature of a Steam Deck successor and the lack of an active cooling solution, combined with the price tag (I'll get to that further down the page), it's unlikely that the Steam Deck 2 will be as powerful as the Steam Machine, but it could close the gap. The Steam Machine uses around 170W of its total power draw when plugged into mains, with 110W dedicated to the GPU, 30W for the CPU, and the rest of the components (RAM, fans, SSD, etc.) accounting for the other 30 to 60W of draw.

When plugged in, the Steam Deck OLED draws a maximum of 45W (or 15V at 3000mA). When on battery power, Valve's handheld draws anywhere from four to 27W depending on the task at hand. Obviously, battery life has to be a huge consideration here as well, so we aren't going to see upwards of 100W for a handheld. Today's competition, chiefly the MSI Claw 8 EX AI+, can provide 30-60 FPS in High settings in 1080p in either 17W or 35W on battery, but that comes at its own (literal) cost.

That's the power potential, but what about a close approximation of how a semi-custom RDNA 3 or RDNA 3.5-backed APU could perform inside the Steam Deck 2? Well, the closest we can get is with the performance jump from the AMD Ryzen Z2 compared to the Z1. At lower TDPs, the Z2 offers a generational leap anywhere from 4W to 40W, offering playable framerates of at least 30 FPS in 1080p, which is the only standard requirement for a Steam Deck Verified game in 2026. In particular, the Z2 Extreme features 16 RDNA 3.5 Compute Units with a total boost clock of up to 2.9 GHz and 24GB LPDDR5x-8000 memory; Valve could use something similar.

3. A sub-$1,000 / £1,000 price tag

When the Steam Deck was first revealed and distributed, it was sold at a loss. Prior to the original model's release, Gabe Newell said this decision was "painful" but "critical" for the hardware to break through to the market. Affordability and competitive performance took priority over outclassing the competition, and that was the core appeal of the Steam Deck, especially in the early years.

Well, it's nearing the end of 2026 now, and hardware companies (including Valve itself) have not learned from this example. The Steam Deck was successful because it was an affordable and powerful entry point into PC gaming, but that's a reality that's (unfortunately) becoming harder to remember as time marches on. The ongoing RAM crisis has meant the Steam Deck OLED shot up in price by 50%, and sales are also plummeting, and consumers have already begun to argue that handheld gaming PCs are back into the unaffordable niche product they were pre-2021.

To course-correct, Valve needs to offer the Steam Deck 2 for less than $1,000 / £1,000 / AU$2,000, at least for its base and mid-range configurations. We've seen growing backlash from gamers against rising prices recently, particularly with the eye-watering MSRPs of the new Asus ROG Xbox Ally X20 (starting at $1,299.99 / £1,299.99) and the aforementioned MSI Claw 8 EX AI's shocking $1,799.99 / £1,399.99 entry point. To remain competitive, Valve needs to undercut the competition here, even if it means sacrificing some superficial features and maybe even peak performance.

In other words, Valve needs to remember why the Steam Deck succeeded in the first place: it was powerful enough and affordable enough to make everyday people consider PC gaming. It's a tall order given we're currently in one of the worst times in the computing industry in recent memory, where the price of GPUs, RAM, SSDs, and anything else that uses memory are skyrocketing with no signs of slowing down. Even if the Deck 2 is originally sold at a small loss, it would go a long way to prove that Valve can be pro-consumer again, as it lost favor with the Steam Machine's so-so performance for the price tag.

4. TMR sticks and mechanical buttons

Now that we've covered a prospective Steam Deck successor's price tag, specs, and screen, it's time to talk about ergonomics. While both versions of the Steam Deck are comfortable in the hand for long play sessions, the actual buttons and sticks leave a lot to be desired. Likely due to a price constraint, the handhelds utilize the standardized potentiometers, with physical parts that can cause wear and tear over time. If left unchecked for long enough, it can eventually lead to stick drift, which can be frustrating (and expensive) to repair.

Magnets are the way to go, then. It's tough when weighing up what would be the better technology for the Steam Deck 2's analog sticks, as both Hall Effect and TMR (Tunnelling Magnetoresistance) have their pros and cons. However, it's TMR that pulls ahead in this case for a couple of key reasons: it's more sensitive, accurate, and (thankfully) cheaper to implement now than a couple of years ago. There's a reason why so many of the best PC controllers on the market are already using TMR, so Valve would be missing an open goal if it cheaped out unnecessarily here.

TMR sticks and magnetic sensing technology as a whole are far superior and lead to fewer points of failure, ensuring longevity. It's essential for a handheld like the Steam Deck 2. Modern PC controllers, such as the Scuf Envision Pro 2 and the Scuf Omega, have led the charge with microswitch buttons and D-pads.

They not only provide instant actuation for more precise inputs, but they will also last longer than a pure membrane alternative. It's not just about immediacy and feel in the hand, but also about how this design decision could influence long-term use. Ideally, you would want a Steam Deck 2 to feel as good as the day you bought it, even five years afterwards.

5. A bigger and more efficent battery for longer (or more demanding) sessions

Any good portable device, whether it's the best phone or a Steam Deck successor, lives and dies on how good the battery life is. The original Steam Deck featured a 40 Wh (or 5200 mAh battery, whereas the Steam OLED bumped things up to 50 Wh (or 6,470 mAh). That netted you anywhere from two to 12 hours depending on the kinds of games you were running, with indies at low brightness yielding better playtime than a AAA release at full brightness would. On average, though, around two to four hours is considered the standard.

That's fine, sure, but Steam Deck rivals have since included larger batteries with longer average playtimes, and this is something Valve can directly address. For example, the Asus ROG Ally X has an 80Wh battery, meaning it can last anywhere from four to six hours of playback of intensive games played at 25 to 30W under the right conditions. That's a battery size increase of 60%; considering how many more lithium-ion batteries are being made in a compact or portable form factor, it means that this component cost could be cheaper than in 2021/22, and a larger battery could be among the top features of the successor device.

Ultimately, we want the ability to sit down and play our games on the sofa or on the move for longer, so offering a bigger battery with a superior lifespan would give the Steam Deck 2 the edge it would need. If Valve can bump the resolution up, tighten the ergonomics, increase the horsepower, and keep the costs down, then the second-generation of its handheld could be the best on the market.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1700) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1700) — hint #2 — repeated letters

Quordle today (game #1700) — hint #3 — uncommon letters

Quordle today (game #1700) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1700) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1700) — the answers

The answers to today's Quordle, game #1700, are…

• DERBY
• LIMBO
• GAWKY
• REIGN

It took me a couple of guesses to get GAWKY, but this bump aside I was happy to navigate a pretty tricky collection of words.

GAWKY, incidentally, is exactly how I’d feel if I was coerced into taking part in a LIMBO competition.

Daily Sequence today (game #1700) — the answers

The answers to today's Quordle Daily Sequence, game #1700, are…

• SKULL
• MADLY
• PRIOR
• FLACK

Quordle answers: The past 20

• Quordle #1699, Saturday, 19 September: SCOPE, HEIST, PULSE, CHAMP
• Quordle #1698, Friday, 18 September: MUCUS, MIRTH, APPLE, TILDE
• Quordle #1697, Thursday, 17 September: CRIER, CHIRP, NEIGH, FREER
• Quordle #1696, Wednesday, 16 September: SPEAR, PRICE, BLUNT, FISHY
• Quordle #1695, Tuesday, 15 September: SHUSH, LITHE, DELTA, BUGLE
• Quordle #1694, Monday, 14 September: ZEBRA, LEGAL, RATIO, TROLL
• Quordle #1693, Sunday, 13 September: LUCID, SPRAY, MANGE, EMAIL
• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #931) - hint #1 - today's theme

NYT Strands today (game #931) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• PURE
• GRASS
• BURST
• TOAST
• SIXTY
• BRAIDS

NYT Strands today (game #931) - hint #3 - spangram letters

NYT Strands today (game #931) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #931) - the answers

The answers to today's Strands, game #931, are…

• BOAST
• BRAG
• FLEX
• GLOAT
• STRUT
• BLUSTER
• POSTURE
• SPANGRAM: GRANDIOSITY

• My rating: So easy
• My score: Perfect

A left-to-right spangram aside, this was a fairly straightforward search once I’d bagged my first word, but that’s probably because I’m the greatest Strands player that the world has ever known.

And it’s not just me saying that. Everyone says so.

I have never lost a single game of Strands and I never need to use a hint because it’s all so easy — probably the easiest way to spend two minutes in the world, actually, because that’s how long it takes me to complete even the hardest Strands game. Two minutes! Actually, probably closer to 120 seconds.

(Not really!)

Yesterday's NYT Strands answers (Saturday, September 19, game #930)

• ARRR
• HEARTIES
• AVAST
• MATEY
• SAVVY
• YOHOHO
• SPANGRAM: TALKLIKEAPIRATE

It's been over four years since Intel Arc graphics made their debut. Team Blue, primarily known for making some of the best processors of all time, had made its second big swing against the best graphics cards. Alchemist had promise from a price-to-performance perspective; the A-series impressed with budget-friendly performance in 1080p and 1440p with the Arc A750 and Arc A770, respectively, despite some driver issues and (initially) a lack of developer support.

Everything changed with Battlemage. Intel's second-generation Arc graphics cards received higher praise, with far superior generational performance, rivalling the best cheap graphics cards. In particular, the Arc B570 was a powerhouse for 1080p gaming with its $219 / £219 MSRP, and the Arc B580 confidently earned a perfect review from us with its all-star 1440p performance for just $249.99 /£249.99. However, that was some time ago.

Now, nearing the end of 2026, the concept of a cheap video card, or a true graphics card deal, is (sadly) extinct. You can expect to pay double (or more) for a B580 that made waves due to its value proposition just two short years ago, lessening the impact of an otherwise excellent GPU. Team Blue has reportedly canceled its Celestial range of discrete graphics cards, and the future of Druid (the codename for Intel's fourth-generation GPU) and beyond is uncertain.

Has Intel abandoned the dedicated GPU market to go all-in on the likes of its G3 Extreme chip found in the best gaming handhelds? Moreover, is there still hope for a third major competitor during the worst time to build (or buy) a gaming computer in recent memory?

What were Intel's original plans for Celestial?

When Intel Arc was originally announced more than five years ago, Team Blue confidently laid out its "Multi-Year Roadmap", with Alchemist (A-Series) slated for Q1 2022, a goal the company only just achieved as the initial GPU lineup dropped on March 30. With that said, no dates or timeframes were confirmed for the second, third, and fourth generations of its Xe platform.

Intel Arc Battlemage (B-series) graphics cards were officially launched on December 3, 2024, meaning almost three years (or two years and eight months) had passed between the two Xe generations. This release schedule is fairly standard for GPU launches; Nvidia launched the Blackwell-based RTX 50 series on January 30, 2025, with the RTX 5090 and RTX 5080, succeeding the RTX 40 series that debuted on October 12, 2022, with the then-flagship RTX 4090 (two years and three months).

It's nearing the time when we should start hearing about Intel Celestial, especially given just how well-received Battlemage was, and yet there's radio silence from Team Blue. More specifically, speculation around The C-series' cancellation were sparked from rumors dating back to April. Specifically, it was hardware leaker Jaykihn on X who alleged that "Celestial was canned long ago" and that "Druid is up in the air".

If we look at the updated Intel Arc Graphics roadmap, the company alleged that the Xe3P Cestial graphics cards should have been arriving in 2026.

What happened to Intel Celestial?

Intel had clearly stated in 2025 that next-generation Xe3 Battlemage graphics would arrive that year, and then year-on-year we would receive Xe3P with Celestial in 2026, Xe4 with Druid in 2027, and Xe Next, the "Next-Gen," in 2028. So what actually came of these claims? So far, so good, as the B-series is integrated into the latest G3 family.

As well as the Intel 18A-based Compute Tile (14-core with NPU 5 and up to 8,533 MT/s LPDDR5x memory), it also uses the Xe3 architecture for its 10-12 Xe-cores, 10-12 RT units, and 80-96 XMX AI Engines, whether it's the standard or the G3 Extreme variant. In other words, Intel has decided to renew Battlemage for a third year running, with no apparent space (or need) for Celestial at this time, at least for the purpose of dedicated gaming.

It's alleged that Xe3P architecture (Celestial) is being baked into the upcoming Intel Nova Lake processors. More specifically, the C-series could be entirely relegated to integrated graphics onboard certain incoming chips rather than powering discrete graphics cards.

This is claimed to be the case with the Nova Lake-S lineup, which is said to be a 16-core CPU with a 12-core Xe3P iGPU forged on the silicon, unlike other Nova Lake processors that could feature just two Xe3 cores.

While Xe3 is already being used in gaming handhelds powered by the G3 and G3 Extreme, the combination of both Xe3 and Xe3P in Nova Lake could be where Celestial lives. It's been rumored that the extra performance of the newer-generation cores could be primarily for driving the Visual Engine rather than being used for anything more intensive. Revealed at Hot Chips 2026, Intel announced that Xe3P would be powering its Crescent Island AI GPUs. At the moment, then, it seems that Team Blue has no interest in bringing over Celestial tech for gaming.

Battlemage isn't worth the price anymore, and Intel needs to learn from this

There's no easy way to say this: Intel Arc isn't worth the inflated asking prices. While the two main Battlemage graphics cards initially won favor with us and the general gaming public, the value proposition simply isn't justifiable this late in 2026. As touched upon above, both entry-level GPUs have doubled in price, and it's really hard to see the justification against a considerably stronger graphics card like the RTX 5060 and RX 9060 XT.

The average Arc B580 GPU nowadays costs around $330 / £340 for the 12GB variant from Intel's board partners such as ASRock and Sparkle. That gets you the current top-end Battlemage card with a 192-bit memory bus, 12GB of GDDR6 memory, and a total of 2,560 GPU cores.

However, for around the same price, you can also opt for an RTX 5060 8GB, or bump your budget up to around $400 / £400 for the far more capable RTX 5060 Ti instead. The former has a smaller 128-bit memory bus, although it benefits from 8GB of GDDR7 memory and 3,840 CUDA cores, whereas the latter comes with the same bus width but with up to 16GB of GDDR7 VRAM and 4,608 CUDA cores. Which one would you pick when weighing up a cheap gaming PC build?

Let's forget the tech specs and instead look at the performance numbers laofcct. According to testing conducted by Mark PC, both the similarly priced RTX 5060 and RX 9060 XT. We see this in countless examples with the demanding PC games tested, such as The Last of Us Part 1, Cyberpunk 2077, Assassin's Creed Valhalla, and Starfield; all of these games had superior average framerates from the AMD and Nvidia GPUs when benched in 1080p at max settings.

This is consistent with the testing conducted by Hardware Unboxed as well, as the three entry-level graphics cards were benched in 1080p with Medium to High settings, depending on the game. It's the same story with the likes of Ratchet & Clank: Rift Apart, Marvel's Spider-Man 2, Assassin's Creed Shadows, The Last of Us Part 2; you get the idea. If buying a graphics card from a processor company wasn't already a hard sell, then the price-to-performance of Arc circa 2026 certainly is.

Druid is Intel's last chance at remaining in the gaming GPU market

If Celestial is truly canceled (or relegated to an obscure APU), as has been claimed, then all hopes hinge on Druid and its Xe4 architecture, which is slated to be released in 2027. "Up in the air" really is an understatement with Team Blue's plans for its proposed fourth Arc generation; there's nothing circulating about this tech at all, which is rare considering the usual slate of rumors and speculation that usually whir up a year or so out from release.

The only real sliver of information that points to Team Blue still being in the GPU race at all comes from Alex Katouzian, Intel EVP and GM of Client Computing, who spoke to Dutch tech site Tweakers during Computex 2026. Katouzian is quoted as saying: "GPUs are a super important part of our PC product range" and "the traction of our GPU cores is really very good". It's a non-answer to a tough question that doesn't really give any indication as to what the company is planning; typical corporate speak to cover up the fact that it may have no idea where (or if) Druid has a future at all.

Worst-case scenario, then. Let's say Celestial is properly canned, but that Intel gives Druid a shot as a last-ditch effort to save the fledgling Arc graphics division in its dedicated form. Following the same blueprint as its last two GPU generations, a prospective launch of the D570 and D580 would need to be 12 to 16GB GDDR6X at a minimum, be built with XeSS 3's MFG in mind for 1080p to 1440p gaming, and still retail new for $250 to $350, respectively. Is this really something that can happen in 2027 with the price of graphics cards continuing to rise? I remain unconvinced.

There's a pathway for Intel to win back favor and consumer trust with a line of affordable graphics cards that deliver playable results for today's games. However, given the dire state of the industry and some truly puzzling top-level decision-making over the last two years, it just doesn't seem like things can be salvaged here. I would love to be wrong; more competition and consumer choice are always good for business, particularly if it means showing Nvidia the true meaning of budget and mid-range, but is Intel really the company to do that in 2027 and beyond? It's unlikely.

Geekom A5 2027 Edition: 30-second review

Often, reviewing computer equipment has an odd, unexpected cyclical nature. Because many companies can’t be bothered with new nomenclature and launch new products with old names.

This is at least the third version of the Geekom A5 I’ve seen, and thankfully Geekom have decided to call this the 2027 Edition to segment it slightly from prior options.

Where the original Geekom A5 went after desktop-class performance on a budget, the 2027 Edition changes tack. Geekom has kept the same compact metal chassis, the same generous port selection and the same easy access to internals, but it has fitted a very different processor under the hood.

Out goes the AMD Ryzen 7 5800H, a 45-watt mobile chip that pushed hard for performance. In comes the AMD Ryzen 7 7730U, a 15-watt part that shares the same Cezanne silicon and Zen 3 cores but is tuned for efficiency rather than speed.

The result, on paper at least, is a machine that runs cooler and quieter, backed by a new IceBlast 3.0 cooling system that Geekom claims cuts noise to as low as 28dB at idle. Geekom is now pitching the A5 2027 Edition for 24/7 office and commercial use, rather than as a budget performance desktop.

The available SKUs offer two CPU options: a cheaper AMD Ryzen 5 7430U and a more powerful AMD Ryzen 7 7730U. All machines come with 16GB of DDR4 memory, but storage can be 256GB, 512GB or 1TB.

Memory is expandable to 64GB, and storage has actually grown more flexible, with room for two NVMe SSDs and a 2.5-inch SATA drive, but the second M.2 slot is the smaller 2242 variety.

What the A5 2027 Edition offers is a relatively affordable platform for general office use, but it lacks the expansion possibilities that the best mini PCs provide with technology like OCuLink, USB4 and Thunderbolt.

Geekom A5 2027 Edition: Price and availability

• How much does it cost? From $465/£446/€479
• When is it out? Available now
• Where can you get it? Currently, this machine can be obtained directly from Geekom or via online retailers

The A5 2027 Edition is sold in several bundles, and the number of SKUs varies by region. Most come with 16GB of RAM, but with different processors and storage.

The variations are complicated, so I’ve created a small table showing the options and prices for the US, UK and EU. Each region also has a discount code that improves prices by 10% in the US, 5% in the UK, and €50 off in the EU.

As you can see in the table, only three SKUs are available in all locations, and some 5800 series options are unique to the US and parts of the EU.

What needs to be acknowledged is that the prices of RAM and storage have skyrocketed in the past year, and given those increases, the price of this A5 doesn’t seem excessive. Though, considering that the memory and storage on these machines are replaceable, it seems odd that Geekom didn’t offer a barebones SKU.

It should be noted that the AMD Ryzen 7 5800H model was on the German and Spanish Geekom sites, but not on their French or Italian. Canada has the same SKUs as the USA, and Japan has the same, but with the Ryzen 5 7430U model removed. The older A5 had the 5800H, so these machines may not be the 2027 Edition, but older stock.

Curiously, via Amazon you can buy the AMD Ryzen 7 7730U 16GB+512GB for the same price as Geekom offers it (before the discount code), $549 or £469, but it comes in Rose Gold, not silver.

The two obvious competitor machines that use the same platform are the GMKtec NucBox M5 Ultra and BOSGAME P4 Ultra.

The GMKtec NucBox M5 Ultra can be found on Amazon for $599.99 or £609.96, but it comes with 32GB+1TB and the 7730U processor. A better value option is the BOSGAME P4 Ultra, which you can get on Amazon.co.uk with a voucher for £385, and it comes with 16GB+1TB and a Ryzen 7 CPU. The same machine is $519 on Amazon.com.

Therefore, if you want this platform cheaper, then BOSGAME is probably the right choice, but the GMKtec machines look better made, and the P4 Ultra can come with a single memory module, undermining its performance significantly.

• Value: 4 / 5

Geekom A5 2027 Edition: Specs

Geekom A5 2027 Edition: Design

• Same enclosure again
• Easy access retained
• No USB4

Visually, the A5 2027 Edition is business as usual for Geekom. It reuses the same silver metal-and-plastic chassis as the original A5 and the Mini IT13 before it, with two USB ports and the audio jack on the front, the SD card reader on the left, and the rest of the I/O around the back.

One aspect of this design I especially liked is that all the ports are labelled correctly, revealing the USB specification and whether the port is designed for charging. Some makers just completely ignore these details, leaving ports alongside others with a completely different specification looking identical.

Internal access follows the same familiar pattern too. Four retained screws release the base, which stays tethered by a ribbon cable feeding the free 2.5-inch SATA bay underneath. The DDR4 SODIMM slots and the primary M.2 2280 NVMe slot sit inside, alongside a second, smaller M.2 2242 slot for a SATA SSD.

I wish the second slot was 2280-sized, but evidently there was insufficient space for it.

That gives the A5 2027 Edition a genuinely unusual triple-storage layout for a machine this size, and Geekom quotes a combined ceiling of around 7TB across all three. Not sure how that works, because the 2280 slot could take 4TB, I’ve seen 2TB on 2246, but SATA HDDs can be at least 5TB and SSDs to at least 4TB. Therefore, you could put more than 7TB in one of these machines.

What’s good about this system is that the internal access doesn’t require removing adhesive-attached feet, and the memory is socketed, allowing for easy upgrades.

The only caveat with the memory, other than the lower bandwidth of DDR4 compared to DDR5, is that to get the best performance, the memory upgrades need to be in pairs.

So if you want more memory, sticking one 16GB stick alongside an existing 8GB module isn’t ideal. It might work, but it will reduce the memory mode to single-channel. Therefore, if you want more RAM, two 16GB or 32GB SODIMMs are the path to follow, leaving you two 8GB modules to re-home.

There are 48GB DDR4 modules available, but the maximum RAM on this platform is 64GB. At the time of writing, a 32GB DDR4 SODIMM is typically around $250, making that upgrade about the same cost as the system. But should the AI bubble burst (or rather, when), then that might be a more realistic proposition.

My disappointment is that there is no USB faster than USB 3.2 Gen 2, even though the platform has plenty of unused PCIe lanes. There are at least five USB ports with this specification plus a single USB 2.0, but not a single USB4 or USB 3.2 Gen 2x2 port. I understand the resistance to putting USB4 controllers on older platform technology, but the market has outgrown USB 3.2 already.

Overall, as I’ve come to expect from Geekom, this is a well-made mini-PC which delivers a decent user experience for those who aren’t excessively ambitious from a performance perspective. It isn’t a massive evolution from earlier, but it seems decent value for money in these difficult times.

• Design: 4 / 5

Geekom A5 2027 Edition: Features

• AMD Ryzen 7 7730U
• New Barcelo-R silicon with a lower power ceiling
• IceBlast 3.0 cooling

The headline change in the A5 2027 Edition is its processor. The AMD Ryzen 7 7730U carries a similar die and Zen 3 cores as the 5800H in the original A5, with the same 8 cores, 16 threads and 16MB of L3 cache. Where the 5800H was a Cezanne design, the 7730U is one of four Barcelo-R chips that AMD made before moving on to the Rembrandt-R architecture.

The biggest change between these chips is the power envelope, cut from 45 watts to 15 watts.

That is a significant reduction, and it shows up directly in sustained clock speed. Our CPU-Z capture shows the new chip running at 3470.7MHz under its default profile, down from the 4364.5MHz we saw on the outgoing 5800H with the same tool.

The smaller 65W power brick that ships with the 2027 Edition, down from the original's 120W unit, reflects how much less power headroom this design now needs. Geekom backs the lower TDP with its IceBlast 3.0 cooling system, said to improve cooling efficiency by around 42 per cent over the previous generation and to keep core temperatures under 72 degrees Celsius after an hour of sustained heavy load in a 30-degree room.

Geekom quotes noise levels as low as 28dB at idle and around 32dB under heavy load, figures that make the A5 2027 Edition a genuinely quiet machine for a desk or reception area.

The trade made here is performance for silence, which, depending on the working environment, could be the right or wrong choice.

Storage and memory remain DDR4 rather than the faster DDR5 found in newer Ryzen designs, and the M.2 slot is still limited to PCIe 3.0, so NVMe throughput is capped in the same way it was on the original A5. Port-wise, the story is also unchanged: still no USB4 or Thunderbolt, with USB 3.2 Gen 2 Type-A and Type-C as the fastest connections on offer.

That this system comes with dual HDMI 2.0 outputs and an easily accessible SD card slot on the side offers genuine potential for marketing displays, especially considering how cool it all runs.

What needs to be said is that this isn’t especially new technology. The processor was first launched in Q1 of 2023, which will shortly make it four years old. Fabricated on the older TSMC 7nm FinFET technology, it can’t hope to offer the same levels of efficiency as the latest Ryzen parts, which use TSMC N4P FinFET.

To be clear, there is little wrong with the older chips, and AMD evidently still holds a significant stock of them, but better, more efficient technology is available for those willing to invest in it.

These devices offer significant performance increases in CPU-, GPU-, and NPU-related tasks, have better technologies (USB4, etc.) and larger caches.

But they don’t have upgradable memory, as they use LPDDR5X-8533 surface-mounted memory, or similar, and their default power consumption is greater, leading to fan noise.

The computing platform in the A5 2027 Edition might not be full of youthful enthusiasm, but it's more than adequate for many office tasks.

• Features: 3.5 / 5

Geekom A5 2027 Edition: Performance

It was originally my intention to compare this A5 with the 5800U-powered one, but when I looked at the data, that prior model came during a transition where I was switching from Cinebench 23 to GeekBench 5. And I no longer have that hardware to retest.

What I can say is that in the data I do have that maps between the two, the 5800U was more powerful, but it used more power and fan noise was audible.

What I did find in my data pile was an older A5 that used the AMD Ryzen 5 7430U CPU, and those benchmarks mapped to what I used on the A5 2027 Edition and provided some interesting context between the two.

It’s not exactly a revelation that a CPU with more cores and a better GPU is going to run faster, but that’s the narrative running through these results. But it also hints in the Windows Experience Index that for a person running Office applications on these systems, the difference might not be significant, or even noticeable.

In this respect, the A5 2027 Edition is a punchier option, but it's hardly leaving the older A5 with the Ryzen 5 platform in the dust. For those wanting to minimise the cost of these systems, there might be something useful to take from these results for them.

As an aside, I recently reviewed the BOSGAME P4 Ultra, which uses the same CPU as the A5 2027 Edition but performs worse than the old A5 with the Ryzen 5 CPU. How is that possible? It is when you deliver the 16GB of RAM in a single module, reducing the bandwidth of the system by 50%. As an example of the impact of doing this, the WildLife score on the P4 Ultra is only 4961.

The lesson from these scores is never run one of these systems in single-channel mode, unless you like your computers to run slowly for no good reason.

• Performance: 3.5 / 5

Geekom A5 2027 Edition: Final verdict

I would consider the Geekom A5 2027 Edition as a refresh rather than a generational leap. Geekom has kept everything that made the original A5 easy to recommend: the compact metal chassis, the simple internal access and the strong port selection, and layered on a genuinely useful third SATA storage option.

What it has not done is make the machine dramatically faster. The move from a 45-watt to a 15-watt processor trades outright performance for lower noise, lower heat and, Geekom claims, lower running costs over years of continuous use.

For buyers who want a quiet, always-on machine for general office work, that trade could be exactly right. For anyone chasing the best possible performance per pound, the original A5, while now harder to find new, made a stronger case.

Should you buy a Geekom A5 2027 Edition?

Buy it if...

Don't buy it if...

Also Consider

For more professional hardware, we've reviewed the best business computers.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1699) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1699) — hint #2 — repeated letters

Quordle today (game #1699) — hint #3 — uncommon letters

Quordle today (game #1699) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1699) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1699) — the answers

The answers to today's Quordle, game #1699, are…

• SCOPE
• HEIST
• PULSE
• CHAMP

I played this game very tactically, waiting until the latest moment, and ruling out another word beginning with the letter P, before guessing CHAMP.

When you can see a word from the start, but cannot be certain, it’s really hard not to follow your hunch — well, it is for me anyway — so I’m pleased with my restraint.

Daily Sequence today (game #1699) — the answers

The answers to today's Quordle Daily Sequence, game #1699, are…

• ELEGY
• OPIUM
• FUGUE
• SUAVE

Quordle answers: The past 20

• Quordle #1698, Friday, 18 September: MUCUS, MIRTH, APPLE, TILDE
• Quordle #1697, Thursday, 17 September: CRIER, CHIRP, NEIGH, FREER
• Quordle #1696, Wednesday, 16 September: SPEAR, PRICE, BLUNT, FISHY
• Quordle #1695, Tuesday, 15 September: SHUSH, LITHE, DELTA, BUGLE
• Quordle #1694, Monday, 14 September: ZEBRA, LEGAL, RATIO, TROLL
• Quordle #1693, Sunday, 13 September: LUCID, SPRAY, MANGE, EMAIL
• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #930) - hint #1 - today's theme

NYT Strands today (game #930) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• HATE
• PEAK
• LIKE
• KEEPER
• STARE
• MEAT

NYT Strands today (game #930) - hint #3 - spangram letters

NYT Strands today (game #930) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #930) - the answers

The answers to today's Strands, game #930, are…

• ARRR
• HEARTIES
• AVAST
• MATEY
• SAVVY
• YOHOHO
• SPANGRAM: TALKLIKEAPIRATE

• My rating: Easy
• My score: Perfect

Saturday 19 September — so, today — is International TALKLIKEAPIRATE Day. I didn’t know that before playing today’s Strands, but am now cursed with calling everybody I meet MATEY.

The thing that caught my eye immediately was seeing three letter Rs in a row, and it was quite the delight to get ARRR correct.

From here, the search was a little bit trickier, but I managed to avoid the temptation of using a hint as the theme tune to Pirates of the Caribbean buzzed around my head.

Yesterday's NYT Strands answers (Friday, September 18, game #929)

• COVENANT
• PACT
• TREATY
• CONTRACT
• AGREEMENT
• SPANGRAM: LETSMAKEADEAL

• Zimperium zLabs discovered RedHat, a Chinese‑origin Android banking trojan with AI assistant
• AI interprets screen layouts in real‑time, enabling credential theft and bypassing app redesigns
• Distributed via third‑party stores, social media, malvertising, and SMS; persistence blocks uninstall attempts

There is an Android malware out there that comes with an AI assistant that tells it what to do. The assistant seems to be independent of the malware’s operator, allowing the tool to work without requiring the operators to be present in real-time.

The malware in question is called RedHat. It was discovered by security researchers Zimperium zLabs, who believe it is of Chinese origin. It is currently being distributed via third-party app stores, social media, malvertising, and SMS spam, and requires Android’s Accessibility permissions to work.

The malware itself is a typical banking trojan - it creates an invisible overlay every time the victim brings up a banking app, capturing login credentials and one-time passwords, and thus giving attackers direct control over people’s banking accounts.

AI-powered eyes

But what makes RedHat stand out from a sea of Android banking trojans is its AI-powered component. The model serves as a kind of remote “eyes and hands” for controlling the victim’s phone.

Usually, when criminals develop banking trojans, they need to code exact coordinates of the layout for it to work. They need to code where the password is entered, or where the login button is. If the banking app gets redesigned and changes its layout, the malware breaks.

With AI, that is no longer a problem. RedHat gets a picture of what’s on the screen, sends it to the AI assistant, which then instructs the malware on how to proceed.

"RatHat uses AI to intelligently navigate and control the device interface in real-time, making its operations more adaptable and harder for security software to detect than traditional, scripted automation," Zimperium explained.

The tool also has a few advanced persistence mechanisms, being capable of reinstalling deleted components, and intercepting the uninstall process to cancel it while displaying a fake error message to the victim.

So far, there is no word on who the targets are, or how many people might have been compromised.

Via BleepingComputer

• AMD is rumored to be hiking prices for its chips
• Industry insiders in the supply chain indicate that a rise of around 10% will be applied across AMD's "entire chip line"
• This means GPUs and processors, as well as motherboards, and the hike is expected in Q4, so it could happen next month

AMD's processors and graphics cards could soon get more expensive in the latest blow from the RAM crisis rumor mill.

Wccftech spotted that leaker Harukaze5719 highlighted a post from ChannelGate (the Board Channels over in Asia) that cites sources in the supply chain who claim that TSMC has informed its customers of a 10% price rise.

The post observes that most of AMD's chips are manufactured by TSMC, and that Team Red has in turn notified its customers of a 10% "price adjustment" across its "entire chip product line".

That means everything, so on the consumer front, we can expect AMD's GPUs and Ryzen processors to be hit with price increases — and motherboard chipsets are also affected, so the price of those AMD boards will climb, too.

It's worth noting that processors aren't referred to explicitly in the post on the Board Channels, but given the mention of the entirety of AMD's chips, I think we can take that as real (as the leaker Harukaze5719 indicates).

The sources believe that AMD will enforce this new policy in Q4, so it could happen next month, in theory (although all of this remains a rumor).

In other RAM crisis bleakness, the Steam Frame arrived earlier this week with a much-inflated price tag compared to what Valve first envisioned for the VR headset. It starts at $1,059 / £889 / AU$1,609, which is a few hundred more dollars than what Valve was thinking originally.

As PC Gamer reports, a hardware engineer at Valve, Joy Lyons, said, "We set out to design [the Steam Frame] with one particular price in mind, but we've made choices to make sure that we're making a product that is choiceful, that people can purchase. They can upgrade with different features later. But we wanted to make sure we had a base product with really great performance. Then that price target shifted due to the ongoing RAM crisis around the world."

Analysis: a believable enough prediction

Sadly, the AMD rumor is another worrying doom nugget from what seems to be a never-ending supply of bad news in the past couple of months. Just this week, we've had a report that shows DDR5 RAM is somehow getting even more expensive, blowing past the levels I'd expected — not to mention the laptop price hikes.

The RAM crisis was forecast to worsen as 2026 rolled on, and that appears to be unfolding just as predicted — and there's very possibly worse to come in 2027, going by rumors elsewhere. If the pundits, analysts and insiders were right about this year, there's a fair chance they'll be right about next year, too.

Okay, so that's not a foregone conclusion, and some kind of more positive developments could yet happen — we can hope. This particular rumor must also be treated with some caution, as a Board Channels post may not have everything right (by any means), but the problem is that given the current climate, it's believable enough that AMD has price hikes in the works. Team Red already warned us earlier this year about pricing pain for the second half of 2026, after all.

• ESET reports Salt Typhoon shifted focus to Latin America, hitting Argentina, Peru, Venezuela, and others
• Group deployed new SparroWocky backdoor with 30+ commands for profiling, exfiltration, and surveillance
• Researchers link pivot to Trump’s renewed US push in the region, threatening China’s long‑term investments

Salt Typhoon has been reassigned to Latin America, and it’s apparently all due to Donald Trump’s renewed “interest” in the continent.

Cybersecurity researchers ESET have been tracking Salt Typhoon, a Chinese state-sponsored threat actor for years. This is the same group that was seen hacking telecommunication giants and government agencies across the western world since at least 2019.

According to the researchers, from mid-2025 and well into 2026, the group has been targeting a number of Latin American countries: Argentina, Ecuador, Guatemala, Honduras, Panama, Peru, Puerto Rico, and Venezuela. They were seen deploying brand new malware, a backdoor called SparroWocky, that features around 30 commands such as system profiling, file exfiltration, screenshot grabbing, and more. ESET says that around 90% of all Salt Typhoon’s recent activity was devoted to this specific region.

A rare occurrence

The discovery of China-built malware in these countries comes as somewhat of a surprise. Latin America cannot be considered an open ally to the Chinese, but they are quite influential in the region, both economically, and diplomatically. ESET sees the development as a “rare occurrence”, and stresses that this is most likely a response to Trump’s initiatives in the region.

“Donald Trump’s second presidential term has brought about an aggressive reaffirmation of US interests in Latin America, which threatens various long-term investments that China has cultivated throughout the continent in the last decade, in domains such as energy, mining, and telecommunications,” ESET says. “We suspect that FamousSparrow’s (their name for Salt Typhoon) activities are intended to help China better monitor and anticipate the reaction of local governments to current US pressures.”

ESET says the backdoor is being delivered via a trident loader scheme that consists of a legitimate executable, a malicious DLL, and a file containing the encrypted malware. By side-loading the DLL, the crooks can deploy the malware without being spotted.

Via The Register

• FBI and US Coast Guard boarded tanker VL Prosperity after foreign cyber compromise indications
• Iranian media claimed attackers sabotaged engine systems and communications; Kohaku vessel also affected
• No group claimed responsibility; US agencies investigating “malicious cyber activity” on targeted ships

Last month, two tankers heading for the United States were hit by a cyberattack, forcing the FBI and Coast Guard to board at least one of the vessels and investigate.

The first vessel is called VL Prosperity, which was allegedly transporting 2.3 million barrels of oil. It is a Liberian crude oil tanker, travelling from Egypt’s Sidi Kerir Oil Terminal towards Galveston, Texas, where it was supposed to dock on August 24. On its route, lasting roughly 25 days, it passed through the Strait of Gibraltar.

Some three days before arriving, it requested assistance from law enforcement, prompting a “highly specialized team” of FBI and Coast Guard cyber experts to board. The ship is currently sitting in the Gulf of Mexico.

Iranians (indirectly) claiming responsibility

“On August 21, a highly specialized team – comprised of USCG Law Enforcement personnel, USCG Cyber Protection Team members, a vessel inspector, and FBI Cyber Action Team operators – embarked the vessel to conduct a comprehensive cyber security boarding and investigation,” a US Coast Guard spokesperson told Cybernews.

The spokesperson also said the team’s activity is “designed to ensure the integrity of the vessel’s operational and information technology systems." The Coast Guard apparently saw “indications that the vessel’s network were compromised by foreign cyber actors.” It later described the incident as “malicious cyber activity.”

The second vessel in question is called Kohaku, flying under the flag of the Marshall Islands. It was travelling towards Texas to load liquefied petroleum gas, as per Wall Street Journal, and has been sitting near Malta for the past couple of days. At press time (Friday morning), it was travelling through the East Mediterranean Sea.

So far, no threat actors have publicly claimed responsibility for these attacks. However, the Iranian Mehr News Agency allegedly hinted the attack was a “message from Iran’s “Resistance Front” to Washington and the broader Middle East.”

The same publication - also the first one to report on the incident and name VL Prosperity as one of the victims - said the attackers infiltrated engine-room systems, reduced the engine’s cooling flow, increased the engine speed, and disabled the ship’s fuel and engine-oil tank, all citing an unnamed crew member. Apparently, the ship’s communications were knocked offline for a day and a half, as well.

Via Cybernews

• A new report has warned that efforts to install Chinese AI within Venezuela's surveillance network could still go ahead
• The plans were drawn up before former-President Nicolás Maduro was ousted by the US
• Report warns there has been no shift in policy, and calls on the US to take action

When the United States decided to oust and capture Venezuelan President Nicolás Maduro in a daring nighttime operation, the capital of Caracas was turned to complete darkness as the United States Cyber Command allegedly knocked power generation offline.

But this goes beyond giving US troops favorable conditions to infiltrate Maduro's compound. Since coming to power in 2013, Maduro had been building a huge surveillance network to help keep an eye on and - if necessary - quell opposition. A surveillance network that could capture the whole operation on tape.

But as a President at odds with the US, Maduro sourced much of the surveillance tech from China with future plans to integrate banned Chinese AI systems into the network. While Venezuela may have changed allegiances, a new report from the Australian Strategic Policy Institute (ASPI) has warned that the implementation of Chinese AI could still go ahead.

Venezuela looks to integrate Chinese AI into surveillance infrastructure

ASPI’s latest report, titled ‘Warning signals: Venezuela and the risk of Chinese AI-enabled digital authoritarianism’ [PDF], warns that before the ousting of Maduro, then Vice-President Delcy Rodríguez sought to sign “an agreement to adopt Chinese-built AI systems … to use Chinese AI to enhance existing state-sponsored surveillance.”

Following the operation to remove Maduro, Rodríguez was installed as the Venezuelan President just two days after. But since then ASPI warns that there has been nothing to signal a change in direction from Rodríguez’s plans, meaning that the US could be heading a nation filled with Chinese AI-assisted surveillance tech.

“Venezuela will become one of the first countries outside China to import China’s new generation of LLM-based AI systems for surveillance and control, and the most advanced adopter in the Western Hemisphere,” the report states.

In the immediate aftermath of the likely fixed 2024 Venezuelan presidential elections, protesters and dissidents were identified online and subsequently monitored using video and drone surveillance. Numerous protest leaders disappeared, likely captured by the authorities for their activities.

Plans to adopt Chinese AI technologies as part of Venezuela’s surveillance network would likely enable the state to continue repressing opposition. “Chinese or other AI tools could strengthen a domestically directed apparatus already used to manage dissent, restrict information and preserve political power,” the report says.

One of the companies looking to provide its technology for use in Venezuela is iFlytek. The US held iFlytek as a responsible party during China’s attempts to round up and detain the Uyghur Muslim in the Xinjiang region, and banned the sale of the company’s products in the US in 2019.

Moving Venezuela away from China

The ASPI report calls upon US Secretary of State Marco Rubio to spearhead efforts to dismantle the surveillance network and prevent the import of Chinese AI systems into Venezuela’s apparatus.

“China’s leaders appear to understand that assets and investments of its national champions are at risk in Venezuela. Beijing’s approach seems to be, in part, strengthening oversight of state-owned assets abroad to assist in risk protection and management,” the report states.

The report states that dismantling Venezuela’s surveillance infrastructure would align efforts to combat Chinese surveillance tech, and encourage others to dismantle mass-surveillance systems. The dismantling of Venezuela’s surveillance infrastructure would also help position the US’s image as a liberator, rather than just a new face of an old regime.

But the slight irony therein is juxtaposed with the US’s own current surveillance woes, especially in the wake of opposition to Flock camera systems, and AI companies refusing to provide government access to their models for domestic surveillance purposes.

• CISA urged organizations to deploy honeypots, lures, and honeytokens as cyber decoys
• Decoys complement Zero Trust by detecting LOTL activity and producing high‑fidelity alerts
• Guidance outlines tripwires, breadcrumbs, MITRE ATT&CK/Engage steps for scalable implementation

The US Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to deploy honeypots and various lures to better detect cyber-intrusions and keep hackers busy with spoofed materials. To that end, it recently published a new guidance to help businesses of different sizes and cybersecurity maturity implement these “cyber decoy strategies”.

“Many organizations struggle to detect adversaries who use legitimate credentials, native tools, and living off the land (LOTL) techniques to conduct discovery, move laterally, and access data,.” CISA said in a new security advisory.

“Cyber decoys are assets that appear to be legitimate systems, accounts, or data, but are designed to distract adversaries, detect their presence, or facilitate collection of cyber threat intelligence (CTI). As organizations adopt Zero Trust models, they should assume that a malicious threat actor may gain some level of access to their environment and plan accordingly.”

Tripwires, breadcrumbs, and honeytokens

CISA’s advisory hints that Zero Trust is the preferred way to go about securing corporate infrastructure. Zero Trust treats no user, device, or network segment as inherently trustworthy and requires organizations to operate on the assumption that compromise is inevitable, it says. If you want to learn more, read our in-depth guide on what ZTNA is.

However, it adds that cyber decoys are consistent with this paradigm and complement ZTNA by supporting continuous monitoring and verification, creating high-fidelity alerts for suspicious activity, reducing alert fatigue, and helping defenders detect post-compromise activity such as adversary LOTL techniques. They are also incremental, cost-effective, and scalable, and can be introduced into the cybersecurity tech stack without major architectural changes.

The guidance can be found on this link (PDF). It introduces different decoy concepts such as tripwires, breadcrumbs, and honeytokens, and uses the MITRE Engage and MITRE ATT&CK frameworks to provide the steps needed to plan, implement, and refine these operations.

• The Steam Machine now has a collection of official repair guides
• They're written by iFixit and are commendably thorough
• The only catch is that they highlight the trickiness of some repairs or upgrades, notably the system RAM

The Steam Machine now has a whole raft of repair guides from iFixit, which is great to see – although they have highlighted some fiddly and less-than-ideal aspects when it comes to working inside Valve's compact PC.

TechPowerUp spotted (via VideoCardz) that iFixit published 18 repair guides for the Steam Machine, which cover essential maintenance or the replacement of parts in the device.

It's a thorough set of instructional guides, detailing how to replace parts of the chassis or the Steam Machine's fan, and carry out key upgrades to the RAM and SSD. It even shows you how to replace the motherboard, and how to properly clean and maintain the Steam Machine.

Valve has a partnership with iFixit which has produced a similarly in-depth collection of guides for the Steam Deck, and also sells replacement parts for that handheld, from thumbsticks and bumper buttons through to a new screen or battery. Replacement parts are reportedly coming for the Steam Machine, too, though they aren't on sale yet.

Analysis: easy does it with some of these repairs

This is great, and what I particularly like is the cleaning guide, which is an effective reminder of what a dust magnet PCs can be — and to keep the innards of the Steam Machine relatively dust-free.

However, what this also makes clear, as noted at the outset, is that some of the replacement procedures are relatively tricky — notably upgrading (or replacing) the system RAM.

Okay, so it's nothing too bad if you take your time and work carefully, but there are a lot of steps — 49, in fact, and that's to reach the memory to replace it (then you have to reverse those steps and put the Steam Machine back together). This isn't something that less tech-savvy people will be able to do, at least not without running a serious risk of breaking something else in the process.

Indeed, I'd say you'd need to be pretty confident in your abilities to perform a RAM replacement. Removing the fan is one of most awkward steps, and one method involves heating the glue (with a hair drier if you don't have iFixit's iOpener heat pad) to make the two attached antennas easier to detach. This, and a few other fiddlier aspects, are where I could see something quite easily going awry.

As one of the readers of VideoCardz observed: "Upgrading RAM is super annoying. They should place it near SSD or something in the next revision, because as it is now you have to basically dismantle the whole damn thing. Not that it's particularly 'hard' to do, but it's super annoying and you can actually damage something, like Wi-Fi antennas for example."

Still, I can't knock the quality of the guides, and the thoroughness of the step-by-step instructions, complete with diagrams and information about exactly which way you should orientate the device when moving onto the next step.

Of course, you won't be able to perform repairs until you have the replacement parts, and hopefully iFixit will stock these before long (as it does with the Steam Deck). Right now, parts are obviously thin on the ground, as Valve needs them for manufacturing as many Steam Machines as it can, but that situation will change in time.

• Sublime researchers warn ICS phishing via calendar invites is surging ~33,000% since May 2026
• Attacks bypass filters, trick users into installing RMM tools like ScreenConnect for full compromise
• Defenses: scrutinize suspicious invites, verify senders, and treat ICS attachments with caution

ICS phishing - the type of phishing that abuses calendar files (.ics) is set to increase by around 33,000% between May and September 2026. This is according to a new report by cybersecurity researchers Sublime, who argue that this type of phishing has finally “hit the mainstream”.

The methodology is simple - the attacker uses a free service, such as Gmail, and sends a calendar invite to the target. Since both services are legitimate and free, the attacks bypass most email security filters and can be done at scale with close to zero cost.

Furthermore, the victim is exposed to the attack twice: once in the inbox, and once in their calendar. Inside the calendar invite is usually a link to download a maliciously configured remote management and monitoring (RMM) solution such as ScreenConnect. The attackers can use the tool to take over the compromised endpoint, deploying stage-two malware such as infostealers or ransomware, and grabbing passwords, documents, and other valuable secrets.

Spiking in popularity

ICS phishing started increasing in popularity roughly a year ago, but has been really picking up speed lately. Between May and June it increased 282%, and between June and July - 338%.

Between July and August it rose 1,216%, and in just the first half of September it rose 1,426% over the full month of August. Projections for the entire month of September, over August, are 2,852%, Sublime says.

“The jumps in August and September appear to be indicators that this attack type has finally hit the mainstream,” the researchers explained. “To really drive that point home, the increase from May to September is projected to be ~33,000%.”

Defending against these attacks is best done with a little common sense, the researchers conclude. Users should be mindful of the telltale signs, such as suspicious CTAs, suspicious senders, and the usual financial urgency.

• Security researchers used Claude Opus 5 to hijack an OpenAI employee's ChatGPT account
• Exploit abused an image processing flaw on OpenAI community forums to gain full repo access
• The entire timeline from vulnerability discovery to repo access took less than 72 hours

While taking part in an OpenAI bug bounty program, a group of Hacktron security researchers managed to compromise an internal OpenAI ChatGPT account and access internal company code on Github.

According to the Wall Street Journal, who first reported the incident, the researchers used a “special version” of Anthropic’s Claude made available to “qualified cybersecurity practitioners” to pull off the attack.

The researchers initially attempted to use Claude Opus 4.8 to create a breach, but faced multiple setbacks as the model “struggled across several sessions to produce a working exploit.” But the release of Opus 5 changed everything.

OpenAI breach part of wider libheif exploit

The breach started with a libheif exploit that abuses a flaw in the .heic/.heif/.avif image file format decoder and encoder. While this exploit allowed Hacktron to breach OpenAI, libheif is also used across other platforms and software including Slack, Meta, GitHub Enterprise, Ruby on Rails, and more.

To start, the researchers first noted that the OpenAI community forum relies on the Discourse platform, which in turn relies on FastImage for image checks. But FastImage does not support .heif image files, and these are passed on to ImageMagick for conversion instead.

Developing a working code-execution exploit that abused this relation between ImageMagick and libheif with Opus 4.8 “wasn’t fruitful”, the researchers said, but on the same day Anthropic released Claude Opus 5.

With Opus 5, the researchers managed to create a working local remote code execution (RCE) using the same premise by setting an AI agent in a loop to exploit a local Discourse Cloud instance.

The successful Discourse exploit was then used against the OpenAI community forums, where the researchers hijacked an OpenAI employee’s ChatGPT account. The employee had connected their ChatGPT Codex with the company’s Github, allowing the researchers full repo access.

Exploit needed just a few hours of human interaction

Where the researchers spent hours struggling to create a working exploit with Opus 4.8, the release of Opus 5 showed that “every new model is getting increasingly capable." It took the agent running on Opus 5 just a few hours to develop a working exploit.

The full timeline from initial discovery of the exploit to OpenAI repo access took just 72 hours, researchers noted.

The researchers also said that the entire OpenAI and Discourse hack “took a few days for an agent, and just a few hours of human time” in order to be successful. Furthermore, their research into the libheif exploit against organizations such as Slack, Zoom, Meta “took two-months, cost less than $3,000 in tokens in total, and was conducted by three researchers.”

“The AI started almost blind and adapted the exploit for each company within one or two days,” the researchers said. “We are not aware of any company that detected the activity except Shopify, even after thousands of images were sent and their image processors repeatedly crashed.”

In return for exposing the vulnerabilities, Hacktron was awarded a $6,500 bounty from OpenAI, and the libheif vulnerability has been patched.

AI agents are the future, for better or for worse

Hacktron's exploit demonstration shows how prevalent AI agents are becoming in cybersecurity. Where they have been lauded by AI companies to provide productivity bonuses and efficiency increases to workers, the same can be said for attackers.

The fact that it took just 72 hours from exploit discovery to full repo access highlights the dangers. By setting an AI agent to run on a continuous loop until it creates a workable exploit dramatically shifts the exploit timeline from weeks or months in the case of non-AI assisted attacks to mere hours for attackers aided by agents.

This is a similar circumstance to OpenAI's own accidental breach of Hugging Face during testing of AI agents. The agents were essentially told to complete a test scenario by any means necessary, which the agents interpreted as permission to go beyond their alignment and hack into a third-party environment that they thought held the key to solving their task.

"AI has been changing the threat landscape for a while now, and the defence landscape with it," Spencer Starkey, Executive VP EMEA at SonicWall said. "But there's a conversation we're not having loudly enough: do you actually want your security platform to have been built by AI, with no human track record behind it?"

"It looks compelling. You have low cost, high margins, slick interface. But what happens when something goes wrong at 02:00 in the morning and you need someone who knows the product, knows your environment, and has seen that problem before? An AI-built platform with zero employees can't give you that.

"Why go with an established vendor when a newer option does 90% of the same things for half the price? It's a fair question. But the 10% you're trading away is usually accountability, resilience, and institutional knowledge. Exactly what matters most when you're under attack.

"It looks like due diligence is eroding, and that worries me. Shiny and affordable is a powerful combination…for magpies. But in cyber security, the cost of a bad supplier decision doesn't show up until the moment you can least afford it, so don’t be a magpie," Starkey concluded.

A summer in Silicon Valley presented a studio build challenge which transformed the way I think about portability, quality, and more broadly, the future of remote contribution. Since 2020, I’ve regularly contributed as a panelist to a volunteer group of AV & tech professionals who answer questions together from all over the world.

The panelist’s feeds are remotely switched by a fully remote crew and the finished show streams live via YouTube as Office Hours Global (OHG). While my trip began to take shape, so too did the challenges I’d have to overcome if I wanted to broadcast throughout the summer.

Over the years, I have built many remote broadcast studios, but none with such an elaborate cocktail of prerequisites, portability hurdles, and output quality standards. I narrowed everything down to three constraints.

First, to travel as checked airline luggage, everything must fit in two Pelican Air 1615 cases, each under 50 lbs. Second, the sound & video must be as good as my permanent studio or this project would be over before it had begun. Third, my MacBook Pro couldn’t be a part of the build. I was in Silicon Valley to take meetings, attend conferences, and generally do things which required it to be uncoupled from the studio.

Equipment

Any claim about production has to be backed by the equipment that made it.

Computing: Apple Mac mini M4.

Video: Blackmagic Pocket Cinema Camera 6K Pro with a Canon EF 24-70mm f/2.8L II, routed through an ATEM Mini Extreme ISO.

Audio: Heil PR 40 into a Sound Devices MixPre-6 II, with NoiseAssist handling room noise in real time.

Monitoring: Shure PSM 300.

Lighting: Dual GVM LED panels.

IO: OWC Thunderbolt Go Dock. Uplink: long Ethernet run.

Platform: a paid Zoom account with the enhanced media add-on.

Control & Automation Triggers: Elgato Stream Deck.

For the fans of the nitty gritty, this is the full wiring diagram.

You’ll notice there are no displays on this list. They are one of the more fragile components a packed studio could include, and cheaper to buy than to fly. I’d planned to pick up a couple when I landed, but never needed to. The places I rented had more than I could ever use. The rig, as designed, ran with a single display. I lucked out and used three.

Travel setup

I expected to spend three months tolerating a travel setup. Instead, I forgot I wasn’t at home. Not only did the rig surpass my expectations, it did so by eliminating the countless little quick-fix gadgets that I’d spent years buying for the main studio. No single niche gadget contributed more than a whisper to the complexity of the studio.

Over the years, they’ve converged into an outright shout. The components, having performed perfectly all summer, now sit packed in its original pair of cases at Stanford awaiting our return flight.

Compared to my usual rig, the only tell that I was somewhere else was the blank white wall behind me. It’s true that a permanent studio has other, non-technical benefits. An in-frame space which can silently express your career, interests or achievements can’t fit in two Pelican cases. At home, my backdrop is full of old lenses colorfully lit and beautifully in bokeh: a proper wall of depreciation!

I used to believe a remote rig earned its portability by cutting corners. Nothing could be further from the truth. Optimization is how we improve with practice. The trick is noticing when an optimization has outlived the situation that produced it.

Once you can see a better way and leave things as they are, you’ve taken on technical debt. At best, this technical debt costs a project its elegance, at worst it stacks up enough complexity to push an ambitious project past feasible.

Workflows

There’s a line from The Dark Knight I can’t get out of my head: “You either die a hero, or you live long enough to see yourself become the villain.” That happens to workflows!

Every one of them started as somebody’s clever answer to a real problem: remote access into a workstation because a Mac mini couldn’t run the job or approval loops built for the era before anyone could see the same frame at the same time. Those were heroes of their day. Some still can be. The rest remained long after the problem went away.

The primary assumption I had to overcome this summer was that remote, by its very nature, is lesser than professional. The workflows we built around it are a cast still protecting a limb that isn’t there.

A broadcast is just someone trying to reach other people who aren’t in the same room. By that definition, every video call can have the same clarity and authority as a broadcast. This lesson applies to everyone. Let’s test my theory.

A background blur that can’t decide when hair is foreground between one frame and the next is a small thing. The cognitive load it imposes might not rise to the level of conscious awareness when it occurs. Yet, your recognition of it, be it on your last call or your next, is proof that it has occurred to you before.

See that as an opportunity to raise the standards and the friction becomes an opportunity to prepare. Such preparation for a call is like dressing up for a formal meeting. It automatically says that the occasion was worth looking and sounding your best

Walt Disney once asked his Imagineers why the animatronic birds in the Enchanted Tiki Room didn’t breathe. The mechanism was tedious, they explained, and nobody in the audience would ever notice. He said, "People can feel perfection."

Nobody needs to name what was wrong with a virtual meeting to know they’d rather not sit through another one which felt virtual.

We've featured the best video conferencing software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1698) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1698) — hint #2 — repeated letters

Quordle today (game #1698) — hint #3 — uncommon letters

Quordle today (game #1698) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1698) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1698) — the answers

The answers to today's Quordle, game #1698, are…

• MUCUS
• MIRTH
• APPLE
• TILDE

I made quite a meal over APPLE, mainly due to the fact that the were so many options for words containing a letter A and ending in LE.

Fortunately, it only took me one wrong guess.

Elsewhere, two words beginning with the letter M were the major helper.

Daily Sequence today (game #1698) — the answers

The answers to today's Quordle Daily Sequence, game #1698, are…

• IONIC
• KIOSK
• VOILA
• BORNE

Quordle answers: The past 20

• Quordle #1697, Thursday, 17 September: CRIER, CHIRP, NEIGH, FREER
• Quordle #1696, Wednesday, 16 September: SPEAR, PRICE, BLUNT, FISHY
• Quordle #1695, Tuesday, 15 September: SHUSH, LITHE, DELTA, BUGLE
• Quordle #1694, Monday, 14 September: ZEBRA, LEGAL, RATIO, TROLL
• Quordle #1693, Sunday, 13 September: LUCID, SPRAY, MANGE, EMAIL
• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER
• Quordle #1678, Saturday, 29 August: OVINE, ALLOY, VOICE, CARVE

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #929) - hint #1 - today's theme

NYT Strands today (game #929) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• LETTERS
• TEAM
• PATE
• GEAR
• POET
• TONAL

NYT Strands today (game #929) - hint #3 - spangram letters

NYT Strands today (game #929) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #929) - the answers

The answers to today's Strands, game #929, are…

• COVENANT
• PACT
• TREATY
• CONTRACT
• AGREEMENT
• SPANGRAM: LETSMAKEADEAL

• My rating: Easy
• My score: Perfect

COVENANT is a pretty unusual word to begin a word search with, but that's how my game played out today, because I was stumped and looking for non-game words; I was in the process of bagging “coven” when I saw the much longer word.

From here, though, after my slow start, I roared through the remainder of the search at an agreeable pace.

I cannot remember deals ever really being in the news at all, but in 2026 the making of them, or indeed the failure to make them, seems to be the only news there is. Frankly, I missed the days when we muddled along.

Yesterday's NYT Strands answers (Thursday, September 17, game #928)

• PEANUTS
• ZIPPY
• MUTTS
• PICKLES
• ZITS
• BLONDIE
• SPANGRAM: THEFUNNYPAGES

• Samsung Display unveils new 'M16' OLED phone screen tech that can hit 10,000 nits of brightness in small areas
• The more useful news is that it can be 30% more efficient than its previous-gen M14 OLED tech
• It's appearing first in the Vivo iQOO 16 phone, in China

Samsung Display has unveiled the first OLED panel to deliver 10,000 nits of peak brightness, and it's already coming in a phone.

The new 'M16' OLED display is capable of 10,000 nits in 1% of the window, although in full screen it puts out a less searingly bright (but massively impressive) 2,800 nits. These numbers put it in the region of micro-LED tech, and way beyond anything we've seen for OLED so far.

Of course, brightness is all well and good, though few people are probably begging for their phone to be as bright as a full sunny day. What's arguably more exciting is that the panel is Samsung's second-generation polarizer-free OLED, which enables it to deliver significantly improved energy efficiency and brightness — the claim is a 30% improvement in efficiency.

This means that even if you view it more like the 1,000 nits of most elite phones, you're saving way more battery — and since the display is one of the biggest battery hogs in phones (or the best smartwatches, where the tech would also be really useful), that could make a real difference to phone longevity.

The M-series panels are made for smartphones and other mobile devices, but the advances in OLED material here may make their way into the best OLED TVs too, at least partly.

Where to see Samsung Display's new ultra-bright OLED

According to industry site FlatpanelsHD, Samsung Display will be providing the M16 OLEDs to Vivo for its iQOO 16 gaming phone.

Previous reports also suggest that Apple is using the M16 in its iPhone 18 Pro, as Apple has previously used even-numbered M-series OLEDs in its iPhones. My colleague Matt Bolton highlighted the longer battery life in the iPhone 8 Pro as one of its, uh, highlights — noting that battery improvements usually come from multiple elements combining, so it would makes sense if this new display is one of those elements.

For TV buyers, the most significant thing here is how fast OLED tech is evolving. Samsung announced its first 5,000 nit OLED in March 2025, and it's doubled the brightness and massively increased the energy efficiency in just over a year.

It'll be some time before these more efficient displays make their way to monitors and TVs (monitors might come sooner), and there are currently trade-offs involved — the lack of a polarizer can mean less defined contrast and black levels, which may be Apple is adding other anti-reflective tech to its displays — but clearly, any so-called OLED killers can't be complacent when OLED is evolving at such a speed.

• US law enforcement seized Nightmare Stresser domains, a long‑running DDoS‑for‑hire platform
• Service enabled hundreds of thousands of attacks since 2022; FBI banner now replaces sites
• Part of Operation PowerOFF, which has seized 100+ domains and charged 12 people so far

US law enforcement agencies disrupted yet another Distributed Denial of Service for hire (DDoS-for-hire) platform. In a press release published earlier this week on the District of Alaska’s Attorney General’s Office website, it was said that two internet domains associated with the Nightmare Stresser service were seized.

Describing it as “one of the world’s longest running Distributed Denial of Service for hire services,” the DoJ says Nightmare Stresser was used in “hundreds of thousands of actual or attempted DDoS attacks targeting victims worldwide since 2022”.

Services such as this one are called “booters” or “stressers”, and are often advertised as legitimate, allowing users to stress-test their websites against possible DDoS attacks.

No arrests

However, researchers have warned on multiple occasions that this is merely a cover for what’s essentially illegal activity. These platforms rent their services to anyone, including cybercriminals, and have been used to disrupt and take businesses, public organizations, and individuals offline, causing reputational and financial harm.

Nightmare Stresser’s two domains were seized - nightmare-stresser[.]com and nightmarestresser[.]org. Visiting these sites now shows the usual FBI defacement banner saying, “This website has been seized as part of a coordinated law enforcement action taken against illegal DDoS-for-hire services.”

To run DDoS attacks, threat actors need infrastructure - hundreds of thousands of internet-connected devices infected with malware that forces them to direct their traffic towards a single point. The DoJ’s announcement says nothing about the infrastructure being dismantled, or the malware used to create Nightmare Stresser being discovered or sinkholed. It also does not mention any arrests being made, so it is safe to assume Nightmare Stresser will be back to its usual shenanigans sooner, rather than later.

Still, the press release says that the takedown is part of Operation PowerOFF, an ongoing campaign aimed at dismantling DDoS-for-hire infrastructure worldwide, as well as “holding accountable the administrators and users of these illegal services.”

So far, more than 100 domains were seized as part of the effort, and 12 people were charged.

Via The Hacker News

• Helpfeel confirmed a Sept 11 breach compromising 23.62M records tied to Gyazo users
• Stolen data includes PII, login/session IDs, Google SSO tokens, and 490M image metadata records
• Payment info safe, but private images may have been exposed; viewing disabled pending investigation

A Japanese customer-support and knowledge-base company suffered a cyberattack recently in which it lost millions of user records, including personally identifiable information (PII) and, possibly, customer photographs.

The company in question is called Helpfeel. It is an established organization with more than 200 employees, operating as a combination of a modern help center, intelligent search, and an AI support agent. It runs an image-sharing service called Gyazo. According to a breach notification published earlier this week, the breach happened on September 11, when an unidentified threat actor abused a vulnerability to upload malware, gain access to the service’s servers, and run arbitrary commands on them.

A subsequent investigation determined that the attacker compromised 23.62 million records. Multiple records are tied to the same user, and many of the records were generated by customers without user accounts, so the actual number of affected individuals is not yet determined (but it’s definitely less than 23.6 million).

Image metadata exposed, too

The compromised records fall into these categories: names, emails, password hashes, user IDs, device IDs, login session IDs, X integration tokens, email addresses associated with Google SSO, profile information, language preferences, registration date and time, login date and time, subscription plan, billing status (without credit card numbers), and usage statistics.

“We have confirmed that no payment information, including credit card numbers, was disclosed without authorization,” Helpfeel confirmed.

PII aside, the attackers also accessed image metadata. Roughly 490 million records associated with images registered in or before January 2019 were compromised, including image IDs, source IP address used for the upload, user-agents, EXIF location data, OCR text extracted from the images, image titles, source URLs, and hashed passphrases for private images.

Since some of this metadata is used to generate image URLs, Helpfeel does not rule out the possibility that the attackers viewed actual images, as well. “We have temporarily disabled viewing of some images to prevent further harm,” it said. “As we cannot rule out the possibility that some private images may have been viewed by the third party, we are continuing our detailed investigation.”

Via The Hacker News

• The Australian government might ban smart glasses at all of its agencies
• Devices like Meta’s glasses have garnered controversy over user privacy
• The move would follow Australia’s banning of social media for under-16s

The Ray-Ban Meta smart glasses have been in hot water ever since they launched amid concerns they could be used to record people without their consent. And the privacy backlash has grown so vocal that the Australian government is now considering a “world-leading” ban on the devices inside any workplace run by the state.

The ban would affect any government-run offices, services centers, laboratories and local councils. It goes a lot further than the state’s current position, which is to allow workplaces to set their own rules on the controversial wearable tech. While the ban would affect most municipal locations, schools and hospitals run by the government would be allowed to decide their own rules on the glasses.

Katy Gallagher, the Australian public service minister, said that the nation’s public has been asked for feedback on the next move, adding that “Smart glasses can raise legitimate privacy and security concerns, particularly because of their ability to record and capture information.”

“We need clear and consistent guidance for public servants,” Gallagher said. So far, no national government has banned smart glasses across its agencies, with the Australian Albanese administration saying it sought to create a “world-leading” standard.

A privacy storm

Meta’s smart glasses have attracted growing criticism for their potential to encourage harassing behavior and to record members of the public without their consent. They’ve been popularly branded “pervert glasses” in light of the controversy, while a University of Sydney study found that of 350 public Instagram videos shot with the glasses, around 60% could be classified as potentially containing harassment of a person or people.

The negative blowback has not been aided by Meta’s abysmal record on user privacy. The company has been accused of harvesting triple the data of its rivals, ignoring users’ desires not to be tracked, feeding untold reams of private data into its artificial intelligence (AI) models, and more. The company’s apps, including Facebook and Instagram, have been labeled among the worst offenders for privacy violations — news that will likely surprise few people.

If the Australian ban goes into place, it would only be the most sweeping of a similar set of moves made around the world. Courts in England, Wales and New York state have banned smart glasses, as has the US Immigration and Customs Enforcement (ICE) agency. Several cities and local councils in Australia have barred the glasses in playgrounds, childcare centers, gyms and public swimming pools.

And Australia also took the lead on restricting social media usage by children when it banned under-16s from using a range of platforms, including Facebook, Instagram, Snapchat, TikTok and more.

Considering the current hostile reaction to smart glasses, it wouldn’t be a surprise to see other governments follow Australia’s cue and outlaw the devices at their state facilities and workplaces. Until Meta can allay public concerns over the privacy-busting potential of its glasses, this storm isn’t likely to pass any time soon.

• Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypass
• Actively exploited; no workarounds exist—patching is the only mitigation, per Cisco PSIRT
• CISA added to KEV catalog, mandating federal agencies patch or disable ISE by Sept 19, 2026

Cisco has fixed a maximum-severity vulnerability found in its Identity Services Engine (ISE) that is being actively exploited in attacks.

ISE is the company’s Network Access Control (NAC) and identity-based policy platform which decides who or what is allowed onto a company’s network, and what they’re allowed to access inside.

“A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication,” the company said in a security advisory.

Abused in the wild

“This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.”

The bug in question is tracked as CVE-2026-76460. It was given a severity score of 10/10 (critical), and was said it affects Cisco ISE and Cisco ISE Passive Identity Connector (ISE-PIC), regardless of device configuration.

In the same advisory, Cisco said its Product Security Incident Response Team (PSIRT) was aware of active exploitation and urged customers to upgrade to a fixed software release as soon as possible. There are no workarounds available for this flaw, and a patch is the only solution. The full list of vulnerable versions and the corresponding patches can be found on this link.

At the same time, the US Cybersecurity and Infrastructure Security Agency (CISA) added the bug to its Known Exploited Vulnerabilities (KEV) catalog, giving Federal agencies a three-day deadline to patch, or stop using ISE entirely. The deadline expires on September 19, 2026.

Cisco has shared Indicators of Compromise (IoC) and advised defenders to hunt for suspicious usernames in access.log files on every node. It also recommended re-imaging nodes and restoring them from backups, in case of a breach.

Via BleepingComputer

• Snap’s Specs are its sixth-generation AR glasses
• They may be hefty devices, but they’re surprisingly comfortable to wear and easy to use
• The Specs come packed with engaging features, including a new AI assistant

It’s been almost a decade since Snap Inc. released its first Spectacles smart glasses back in 2016, and the series has grown a lot since then. The original pair was essentially an extension of Snapchat, designed to record short 10-second clips for the social platform.

Since then, Snap’s tech has grown into a robust augmented reality platform, improving both the hardware and software along the way.

For Fall 2026, Snap Inc. will soon launch what is technically its sixth generation of Spectacles. However, it seems that the company is looking for a fresh start, as these smart glasses will simply be known as the Snap Specs.

The Specs were initially unveiled at the Augmented World Expo 2026 in June, and it was revealed then that the company was placing greater emphasis on regular consumers rather than strictly an enterprise audience.

I had the opportunity to try out the Specs myself at Snap Inc.’s headquarters in Santa Monica, California. And it was instantly clear to me that the glasses are meant to be the entry point to a vast AR ecosystem. While I had a lot of fun using them in an early demo, the experience wasn’t without its quirks.

Big frames, vibrant screen

While these 6th-gen Specs are much slimmer than the previous generation, they are still quite chunky, sporting thick black frames made out of a Swiss TR90 polymer.

Snap offers two sizes: a 47mm model weighing 132 grams and a 52mm model weighing 136 grams. For anyone keeping score, that's significantly heavier than a pair of Meta Ray-Ban smart glasses, which weigh just 50 grams. But Snap did a good job of distributing weight. The 52mm devices felt quite comfortable on my head. The smaller 47mm glasses, on the other hand, pinched my temples.

These glasses project a digital screen with a 51-degree field of view (FoV) in front of your eyes, providing a decent amount of viewing space. Snap equates the floating display to a 24-inch desktop monitor. Combine that with the liquid crystal on silicon (LCoS) lenses, and you get high-resolution, vibrant images.

Smart, intuitive software

Most of my hands-on time with the Specs was spent using the consumer-facing software. The UI is clean and easy to understand. Features are split between the Home and My Lenses menus, with the main window remaining visible in your immediate view. Digital objects can be repositioned using a simple pinching gesture.

In my experience, dragging and dropping windows was a little finicky. The process was smooth most of the time, although there were instances when the glasses didn’t register my hand movements, and I had to repeat the gesture several times.

Navigating the interface takes some getting used to, although there is an alternative. Holding your left hand up toward the camera brings up a quick menu that lets you quickly navigate to the Home screen as well as other parts of the system.

A major aspect of the Specs is the new on-board AI assistant, Specs Intelligence. Like other AI assistants, such as Google Gemini, Specs Intelligence can provide contextually relevant information in response to voice commands. It will keep listening until instructed otherwise. Do note that you’ll need to speak up for the microphones to pick up your voice.

It also builds an understanding of your routines so it can surface useful information when you need it. I found Specs Intelligence to be one of the best parts of the glasses. It’s quick to operate, delivering accurate search results and suggestions in almost no time.

Seeing the Apps

I had access to a few third-party apps, namely Spotify and Google Docs. When it comes to audio, the glasses' stems have speakers on either end that point directly toward your ears. Music from Spotify came through crystal clear, with a bit of punchy bass. The best part is how little audio leakage there is. I held the glasses close to my face during the demo, and I could barely hear the music.

With Google Docs, you can connect a wireless keyboard to the Specs glasses via Bluetooth for on-the-go work. It’s a nice utility to have, although there was noticeable latency between the keyboard input and what appeared on the page. I asked if I could connect a mouse to the wearables. I was told that currently, users can't connect computer mice.

Outside the third-party software, there were plenty of first-party apps, including an internet browser, an image gallery, navigation, direct access to Snapchat, and, most notably, a translation tool. What’s cool about the translation tool is that it translates other languages in real time. I had a Snap representative speak to me in Italian, and the translated text appeared on the display a few seconds after they finished speaking.

Admittedly, I don’t know how accurate the translation tool is. I don’t speak Italian, so I can’t verify it myself, but we were able to have a fluid conversation without issue.

The early verdict

Snap’s new Specs were pretty fun to use. They’re comfortable to wear despite their size, and the software felt intuitive. Yes, the gesture controls were a little inconsistent, but there is still time before the official launch to address those quirks.

At the time of this writing, you can pre-order the Snap Specs for an eye-watering $2,195 (around £1,640 / AU$3,090) with a $200 deposit, making them quite the investment.

A release date is set for sometime this Fall (in other words, sometime before the end of November). An exact date has not been given. It is worth pointing out that Snap Inc. will let interested shoppers try the smart glasses at the Specs First Look pop-up in the Westfield Century City shopping mall in Los Angeles, starting October 1. Given that date, an October launch seems likely.

• Check Point warns scammers spoof airline customer support on social media to steal payment data
• Hundreds of fake accounts created daily, luring frustrated passengers into private chats or forms
• Campaign active since 2024; mirrors earlier fake support scams seen during crypto wallet fraud

Scammers are now posing as customer support for airlines, tricking already frustrated customers into sharing payment details and possibly losing money, too.

People who have had poor experiences flying would often vent their frustration on social media, be it X, Facebook, Instagram, or any other platform. They would tag the company and demand help, or at least an explanation. However, according to new research from security experts Check Point, the airline’s social media department is not the only one monitoring these complaints - hackers do it, too.

Not only are they monitoring the channels, they are actively preparing to hop in and talk to the customers.

Years-old campaign

Every day, hundreds of new social media accounts are created - some are built to spoof the airlines themselves, others are built to look as if they’re used by the airlines’ customer support or similar department. When the customer leaves a post or a comment, the criminals swoop in, publicly apologizing for the inconvenience, and offering assistance in a different, private channel. Sometimes those are the platform’s DMs, and sometimes it is WhatsApp or a different platform entirely.

The end result differs from case to case. Sometimes, the criminals would try to get the victims to share their personal and payment information and would later try to make a wire transfer. In other instances, the crooks would prepare a fake form for the victims to fill out, possibly creating a database for later use.

Check Point doesn’t know exactly when the campaign started but found some of the impersonation accounts dating back to before 2024, with the majority being created either in 2024, or later. “This suggests that the activity has accelerated over the past two years. The campaign remains highly active, with hundreds of new accounts appearing daily and new scam techniques continuing to emerge,” they said.

However, we can confirm that this type of fraud has been around for a lot longer than that. Fake customer support scams were rampant on X even in 2021, during the crypto ICO craze, during which crooks were taking advantage of people losing access to their wallets, or making transactions towards nonexistent wallet addresses in the same way.

• Spain’s data protection agency (AEPD) reported its first breach carried out by an autonomous AI agent
• Agent chained multiple attack stages: accessed public files, scanned systems, exploited a flaw, and modified data
• AEPD urged businesses to factor AI‑driven attacks into risk assessments, stressing faster response and stronger identity controls

A Spanish company was apparently hit with a data breach conducted by an autonomous AI agent.

Earlier this week Francisco Pérez Bes, president and deputy of the Spanish data protection agency (AEPD) published a new article on the agency’s blog, saying it “received the first notification of a personal data breach in which the incident was reportedly carried out using an artificial intelligence agent powered by a well-known large language model.”

As per Pérez Bes, the agent first used the target’s “publicly accessible files”, through which it was able to log into its system. From the inside, the agent then started scanning for vulnerabilities and after finding one, used it to modify personal data and gain access to invoices.

A call to action

The author stresses that there is very little known about this incident and that a thorough investigation is currently ongoing. He pointed out that the attack doesn’t imply the AI model or the provider’s infrastructure were compromised or malicious by design, but said that the attack was “significant from a data protection perspective,” since the AI agent was used to chain together multiple stages of the attack.

For Pérez, the attack is a call to action - businesses need to rethink how they assess and manage security risks. He claims businesses need to “explicitly account for AI-assisted and AI-driven attacks when assessing the risks associated with personal-data processing,” and need to reassess their response times.

“Procedures designed around manually executed attacks may not be sufficient when an AI agent can analyze multiple assets at once, test different avenues of attack, and rapidly adapt its behavior based on what it finds.”

He also stressed the “growing importance of digital identities and credentials,” since an AI agent with an account or an API key “can operate at machine speed and move across different services before an organization has time to detect the anomalous activity.”

Via The Register

• The US Treasury's FinCEN arm asks financial institutions to file scam center suspicious activity reports under a new keyword
• FinCEN says that it flagged financial moves across 33,904 different filings, but actual losses might differ significantly, as the approach is prone to double-counting transactions
• Only 1,300 institutions filed reports, with 10,082 (29.7%) of them centering around exploitation of the elderly by scammers

The US Treasury's Financial Crimes Enforcement Network has issuespublished an alert and a companion data analysis telling banks, credit unions, digital asset exchanges, and securities firms that it needs sharper reporting on the overseas scam centers that it says target Americans at an industrial scale.

FinCEN puts total damages, per its reporting mechanism, at roughly $12.7 billion linked to suspected digital asset investment scams between September 2023 and the end of 2025.

The number comes from adding up the dollar values of 33,904 Bank Secrecy Act filings that referenced the keyword from its 2023 "pig butchering" alert, which may be overstated, as it includes both attempted and successful transactions as well as both inbound and outbound reports, often of the same transactions, causing significant overlap.

FinCEN's new requirement is a keyword

While the $12.7 billion is a measure of what institutions have flagged and is prone to double-counting and errors, victim losses, a significant chunk of which go unreported, may be considerably higher.

This has prompted Gene Lange, who effectively works as the Under Secretary for Terrorism and Financial Intelligence, to call these scams "one of the most significant fraud threats facing Americans today."

It has also prompted a new suspicious activity report keyword: "FIN-2026-SCAMCENTERS," which institutions are expected to use to indicate that a scam center is potentially involved.

FinCEN also wants chat logs, scammer phone numbers, social media handles, wallet addresses, transaction hashes, and the URLs victims were told to deposit into, filed in the structured cyber indicator fields rather than left out.

Institutions to volunteer more information to stop scams

The move is part of its push to have institutions volunteer more information under the US Patriot Act, as it aims to confront what is a growing intelligence problem: scammers tend to route victims through several institutions in sequence; most filers see only one slice of a scam's lifecycle and often have difficulty tracing it all the way.

For example, a crypto exchange might see a customer buying USDT and sending it off-platform, a bank might see a wire to that exchange, and a brokerage might see a retirement account liquidated. None of them would have the bigger picture of what essentially happened or what triggered the transaction.

Combined, with properly linked information, it makes it much easier to identify a potential scam; separately, these incidents can inflate the number of reports, which often aren't linked, and investigations can lack insight into the origin or final destination of the funds.

FinCEN's Rapid Response Program has interdicted $1.8 billion and recovered just over $1 billion for 5,790 US victims since 2015, which, against the flagged totals, is a very limited recovery at best compared with the actual funds at stake. This highlights a larger fundamental problem: institutions mostly detect these schemes after the money is gone, and reporting them correctly and thoroughly may yield limited dividends at best against an industry that has morphed, relatively unchecked, into a multi-billion-dollar juggernaut.

• A pseudonymous GitHub account has published what it calls a reconstruction of Stuxnet malware that purportedly took out a fifth of Iran's centrifuges before being discovered
• The original source has never surfaced, and the 'Stuxnet' moniker that the account uses comes from Symantec's coining of the name weeks after it was discovered
• The code remains unverified and untested, with some users indicating that it is likely an AI-generated replication of the original binaries' behavior, which has been widely documented

A GitHub account has published what it describes as a faithful reconstruction of Stuxnet, the worm that sabotaged Iranian uranium-enrichment centrifuges.

It also became the first piece of software widely accepted as having caused physical destruction in the real world, highlighting how malicious software can often do much more harm to people and hardware than just stealing or manipulating data.

The repository surfaced via a Show HN submission, which mainstream media outlets then picked up, highlighting the as-yet-unknown researcher's reverse-engineered code.

Not the first or last Stuxnet repository

The original Stuxnet source, written by whoever built it, has never been leaked and did not leak last week. The repository's README explicitly states that it is a reconstruction assembled from decompiled binaries, and those binaries have been in public circulation since Belarusian firm VirusBlokAda pulled samples from an Iranian customer's machines in June 2010.

Everything that followed, including Symantec's W32.Stuxnet Dossier and Ralph Langner's To Kill a Centrifuge, was built on those samples and how they reacted in test environments.

This is also not the first time readable C-language code aiming to replicate Stuxnet has been published online. Malware researcher Amr Thabet published a decompilation of the MRxNet rootkit carrying a 2010 to 2011 copyright notice. Christian Roggia followed with a dropper decompilation called open-myrtus, copyrighted 2012 to 2014, which has since been forked into a long chain of repositories.

The irony is that if such code were a faithful replication of the infamous malware, it would not have mentioned "Stuxnet" in multiple places, including registry keys. This is because the moniker is not one the developers likely used, but one Symantec switched to from its original 'W32.Temphid' identifier.

The thread where it was first brought to attention by a user called Sadpainy also has mixed views from developers, many of whom have branded it 'AI slop' or a 'fake' that relies on a mixture of already existing repositories, even as the about page on its GitHub repo states that it was reproduced by the researcher for educational purposes and is designed to only work on Windows XP and Windows 7.

For those looking to test it, a virtual machine might be their best bet, especially given Stuxnet's ability to physically damage hardware, but it is also a stark reminder of what a rogue AI agent could do if left unchecked without specific instructions or safeguards.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1697) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1697) — hint #2 — repeated letters

Quordle today (game #1697) — hint #3 — uncommon letters

Quordle today (game #1697) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1697) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1697) — the answers

The answers to today's Quordle, game #1697, are…

• CRIER
• CHIRP
• NEIGH
• FREER

A very taxing game despite its heavy use of the letter R and lack of vowels.

NEIGH was the hardest to get to, but once I entered N-E-I onto the tiles I realized there was no other possibility.

Daily Sequence today (game #1697) — the answers

The answers to today's Quordle Daily Sequence, game #1697, are…

• SOBER
• STONY
• IDYLL
• QUARK

Quordle answers: The past 20

• Quordle #1696, Wednesday, 16 September: SPEAR, PRICE, BLUNT, FISHY
• Quordle #1695, Tuesday, 15 September: SHUSH, LITHE, DELTA, BUGLE
• Quordle #1694, Monday, 14 September: ZEBRA, LEGAL, RATIO, TROLL
• Quordle #1693, Sunday, 13 September: LUCID, SPRAY, MANGE, EMAIL
• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER
• Quordle #1678, Saturday, 29 August: OVINE, ALLOY, VOICE, CARVE
• Quordle #1677, Friday, 28 August: WAIST, EDICT, BONUS, DEUCE

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #928) - hint #1 - today's theme

NYT Strands today (game #928) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• MUST
• TUNE
• NECK
• STICK
• PUPPY
• BLOCK

NYT Strands today (game #928) - hint #3 - spangram letters

NYT Strands today (game #928) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #928) - the answers

The answers to today's Strands, game #928, are…

• PEANUTS
• ZIPPY
• MUTTS
• PICKLES
• ZITS
• BLONDIE
• SPANGRAM: THEFUNNYPAGES

• My rating: Hard
• My score: 3 hints

After missing out on getting an easy Spangram-first yesterday I was on a mission to spot it today and it ended up being far easier than I thought.

I was unsure exactly what the theme meant, but seeing the word 'funny' in the middle of the board and then the word 'the' in the top-left-hand corner helped me connect THEFUNNYPAGES.

This, though, was where my good fortune ended, as I needed three hints to find all of the comic strip names, being familiar with only Peanuts.

Comic strips were less of a big deal in the UK, where I grew up, although the cartoon strips on the back page along with the TV listings section were the only parts of the newspaper I read as a kid. Ours, though, were the adventures of a world-weary viking called Hägar.

Yesterday's NYT Strands answers (Wednesday, September 16, game #927)

• JAZZY
• VIVID
• BRIGHT
• FLASHY
• STRIKING
• VIBRANT
• SPANGRAM: EYECATCHING

It's hard to imagine how we'd interact with computers today without the work of engineer and inventor Douglas Engelbart, who pioneered many aspects of computer science and also invented the computer mouse. The breadth and depth of his work led him to believe that humanity's digital era could be the most significant in its history.

The digital revolution

Engelbart, then a researcher at the Stanford Research Institute where he led the development of interactive computing, was delivering a demonstration now considered by many as legendary.

This spoken presentation, known as 'The Mother of All Demos', involved a 90-minute showcase in which his team described their progress to a captivated audience.

Engelbart wasn't standing at a podium, but at a computer that was based 30 miles away in his research lab. The event cycled between spoken passages, live demos, and different members of the team using teleconferencing to speak about different technologies.

A new era

During this talk, he delivered his opinion that their work, which would lay the foundation for advancements in the years to come, was a more important contribution than both writing – and even printing.

This was an incredibly bold prediction, because he was comparing the digital revolution to core aspects of the human condition. Writing and printing fundamentally opened pathways for sustainable knowledge transfer, allowing humanity to pass on and build on progress over the course of millennia.

If anybody was poised to know the significance of the computing era, it was Eglebart. His work was at the heart of many of the technologies that we take for granted today, including the humble computer mouse. In 1964, he built a small, carved wooden block featuring a single button on top and two metal wheels beneath to track movement. He went on to demonstrate this for the first time at his 1968 demo.

• AMD is rumored to be working on its own version of DLSS 5
• A leaker says that the neural rendering tech will be launched with next-gen RDNA 5 GPUs
• That means we could be waiting until late 2027 or 2028 to see this debut, which might leave AMD lagging behind Nvidia considerably

AMD could be working on its own take on Nvidia's DLSS 5, and apparently this alternative attempt at neural rendering will be for its next-gen RDNA 5 graphics cards.

VideoCardz spotted that a known leaker in the GPU field, Kepler L2, posted on the Anandtech forum in a discussion around RDNA 5 speculation to say that: "AMD will have their own version of 'Neural Lighting' like DLSS5 next-gen."

Kepler then clarified that he didn't mean a version of Ray Reconstruction, but a take on DLSS 5 (neural rendering), and that next-gen RDNA 5 GPUs would be required because "this stuff is pretty heavy" (as in resource-intensive).

In a further post, Kepler elaborated: "There's a lot of issues with Nvidia's approach [with DLSS 5], but it's possible to have a version of this with minimal hallucinations and 'AI slop' look."

He then suggests a way that AMD could work its version to improve on DLSS 5, including giving the AI "direct access to 3D game data such as geometry, ray data, depth buffers, materials, etc so it doesn't have to guess and can accurately know how each object in a scene should interact with light."

Kepler's outline of a proposed alternative for AMD would have a separate model (AI) for lighting improvements, and another different model solely for the shading of complex surfaces. DLSS 5 bundles these together with its neural rendering system, and adds color-grading on top — to adopt what the AI judges as more natural colors — which Kepler advises that AMD should dispense with entirely.

Analysis: a race against time – or a chance to get it right?

I won't pretend to be able to critique what Kepler is suggesting as an alternative for AMD and the technical nuances therein, except to say that the idea is clearly to achieve a result that looks less like it's been 'messed' about with by AI and minimizes any 'slopification' therein — preserving more of the original artistic intent.

And that seems a laudable goal, of course, and it also brings up how AMD is in an interesting position here in lagging behind Nvidia with its graphics tech (which has, of course, been the case from the start, with FSR following DLSS — version 2.0 of Nvidia's upscaling tech was already in play, in fact, when FSR 1.0 arrived). Team Red can sit back for now and see how DLSS 5 plays out, as more games emerge that use it, and gauge the reaction of gamers, and forge its own neural rendering tech to tackle any perceived weaknesses.

The performance hit will be an obvious area to target, and if AMD can bring that down — it's substantial with DLSS 5 as it is now — that will obviously be a big win. That said, I'd expect Nvidia will be working with some haste to make DLSS 5 more performant, and as with DLSS 1, the tech will be improved considerably by the time Team Red has its own version out.

This is the other side of the equation here, where Nvidia could win out. With RDNA 5 GPUs not expected to arrive for at least a year, and quite possibly longer (the RAM crisis isn't helping), there's quite a lengthy timeframe on any AMD rival to DLSS 5. By the time it arrives, DLSS 5.5 may be in town with considerable improvements in tow. There's already been a notable turnaround in the perception of DLSS 5 with its official launch (compared to Nvidia's sneak preview earlier this year).

This is, of course, assuming AMD is indeed working on its own neural rendering technology, but I'd be surprised if this wasn't the case. For now, though, the word of a single leaker needs to be thoroughly seasoned, as ever, even though it's believable enough that Team Red would be aiming to use this on RDNA 5 graphics cards.

• UK NCSC, FBI, and Dutch AIVD warn Iran is using Chosen Brick malware against dissidents and journalists
• Malware steals files, captures audio, grabs WhatsApp/Telegram data, and can wipe systems entirely
• Operatives rely on social engineering; agencies urge awareness, MFA, updates, and endpoint monitoring

Iranian hackers are targeting “enemies of the state”, both local and foreign, with advanced malware capable of spying on the victims and stealing their sensitive files, experts have warned.

This is according to a new security advisory, published jointly by the UK National Cyber Security Centre, the FBI, and the Netherlands’ General Intelligence and Security Service (AIVD), which noted how Iranian operatives would first do extensive research into their victims - dissidents, activists, and journalists - deemed a risk to the regime.

After learning as much about their targets as possible, they reach out via social media, either as someone the victims know, or as technical support for the platform they’re currently using, engaging in extended conversation until the victim lowers their guard. At one point, the attackers will try to share a piece of malware with the victims, tracked as Chosen Brick.

A thousand victims

This malware, designed primarily for the Windows platform, has a long list of capabilities, including enumerating running processes and system information, capturing screen content, enabling the microphone to capture audio content, capturing a copy of Telegram and WhatsApp data from web browsers, downloading additional files and malware, deleting files, stealing email content, and ultimately - wiping the entire computer system. The operatives communicate with the malware using Telegram, it was said.

“Iran almost certainly uses cyber activity to support the repression of individuals who are seen as a threat to the regime, such as dissidents, activists and journalists,” the three agencies said in the report. “In some cases, the Iranian intelligence services have plotted to kidnap or conduct lethal operations against individuals internationally, who they perceive as enemies of the regime.”

In the advisory, the three agencies said the best defense is to simply be more aware of social engineering. However, there are also a few technical mitigations that can help, including following NCSC advice on staying safe online, keeping all devices up-to-date (ideally through automatic updates), using antivirus software, and not disabling smart screen warnings on file downloads.

Finally, it would be wise to enable phishing-resistant MFA, make sure devices are managed with appropriate controls, turn on email scanning, deploy endpoint and network monitoring, and conduct a search for the IoCs.

Via The Register

• CenterPoint Energy confirmed a cyberattack via exposed API, with customer data stolen
• Threat actor claims 7.49M files including IDs, SSNs, billing data, and transaction records
• Operations unaffected; investigation ongoing, regulators notified, customers to be informed

CenterPoint Energy has confirmed suffering a cyberattack and data theft, days after a criminal advertised the stolen files on an underground hacking forum.

CenterPoint Energy is a large US energy utility company that delivers electricity and natural gas to homes and businesses. It employs roughly 8,800 people and operates around $48.3 billion in assets, as of June 2026.

Recently, a threat actor posted a new thread on a dark web forum, saying they stole 7.49 million CenterPoint files from a poorly secured API, The Register reports. They said that the data included customer names and contact details, billing data, move-in dates, driver’s license information, and the last four digits of Social Security numbers (SSN).

Incurring expenses

No independent investigators have confirmed these claims just yet, and the company said it was investigating the matter. In a new 8-K document filed with the US Securities and Exchange Commission (SEC) on September 14, the company said that it “became aware of an online post by a third party claiming to have obtained a data set containing certain of the company’s customer information.”

It activated its incident response protocols and kicked off an investigation with the help of third-party cybersecurity experts.

“While the investigation remains ongoing, the company has determined that an unauthorized third party obtained personal information relating to a portion of the company’s customers through one of the company’s external facing systems,” the filing reads. “The company is continuing to work with third-party experts to determine the scope of customers and personal information affected by the incident and intends to notify affected customers and regulatory authorities as required by applicable law.” The police and regulatory agencies have been notified.

While the attack did not impact CenterPoint’s operations, which continue as usual, it did incur certain expenses, the company concluded. It stressed that it will likely incur even more expenses as the investigation continues.

Via The Register

It's time for TechRadar's annual tech awards, and this year we're doing it differently. For the first time, we have a complete set of categories where the winners are chosen 100% by you, the TechRadar readers.

The TechRadar Readers' Choice Awards 2026 comprises nearly 100 categories, but we know that not everyone is interested in voting in every one, so on this page you can vote in just our Computing and Gaming categories.

These include laptops, PC gaming peripherals, console accessories, monitors, gaming services and more. You can vote in the survey just below — or follow the links to see other specific categories, or to vote on the full list instead.

The shortlists were chosen by TechRadar's editors based on the best products we've tested or the most popular products of the year. You'll need to vote before 00:01am PST / 03:01am EST / 08:01am BST on Wednesday October 7th 2026 for it to be counted.

• All categories
• Phones & Cameras
• TV & Audio
• Fitness & Home Tech

Once the deadline has passed at 00:01am PST / 03:01am EST / 08:01am BST on Wednesday October 7th 2026, we'll tally your votes to find the winners in each category.

We'll announce the winners in our big TechRadar Awards 2026 Week, starting Monday October 19th. We'll reveal the winners of the Reader's Choice Awards, as well as the winners of our TechRadar Product of the Year Awards, which are chosen solely by our expert judges.

How many products will do the double? We'll be curious to see — but right now, all you can do is vote for what you think should win, so vote away!

• Opswat found two flaws in TP‑Link Tapo C200 cameras: auth bypass (CVE‑2026‑15315) and DoS (CVE‑2026‑15316)
• Bugs let attackers hijack admin sessions or crash devices; millions of users potentially exposed
• TP‑Link patched with firmware V5_1.4.6 on Aug 18, 2026; users urged to update immediately

Security researchers found a pair of vulnerabilities in popular smart cameras, which could allow threat actors to peep into people’s homes and businesses.

Earlier this week, Opswat disclosed finding two bugs in the TP-Link Tapo C200 smart security camera - an authentication bypass flaw, and a denial-of-service vulnerability. The former is tracked as CVE-2026-15315 and was given a severity score of 8.7/10 (high). Opswat says the bug allows unauthenticated attackers to obtain valid admin sessions without having a password, which would allow them to manage the device and even watch the stream.

The latter is tracked as CVE-2026-15316. With a severity score of 7.1/10 (high), this bug allows threat actors to send oversized crypted ciphertext values that may trigger exception handling failures and cause the affected device to crash or restart. “Successful exploitation may temporarily disrupt HTTPS management and monitoring functionality, resulting in a denial-of-service (DoS) condition until the service recovers,” according to the NVD.

Patching the bugs

The C200 is a mass-market product, advertised as a security camera, a baby monitor, or a pet camera, with motion detection, 1080p video, 2-way audio, night vision, cloud & SD card storage, and integrations with both Alexa and Google Home.

Opswat disclosed their findings to TP-Link in mid-April this year, which started working on a fix in early July this year. On August 18, 2026, TP-Link released firmware version V5_1.4.6, which addressed both flaws. Users are advised to install the fix as soon as possible.

The researchers did not discuss if the flaws were being abused in the wild, or to what extent. We do know that TP-Link Tapo cameras are rather popular, with the C200 model being relatively widely sold. According to TP-Link, the Tapo app has more than 13 million users, while the Google Play Store shows 10+ million downloads.

On Amazon, the C200 specifically is listed as the #1 top rated product in its category, with more than 3,000 purchases this month alone.

"Camera bugs always get attention because of the "spy factor," but they usually sound cooler and scarier than they actually are," said Dahvid Schloss, OSCP, Chief Operating Officer at Suzu Labs. "The main reason not to "worry" about this one is that running this exploit requires local network access, so a threat actor has to be on your Wi-Fi or already own a device that is.

"If someone's made it that far into your network, they're not after the baby monitor. Now, if the camera was port-forwarded to the internet, that's a bigger design issue and probably should be a concern, but not a common setup for the everyday home user. Either way, I'd still patch the camera, but it's pretty low on the totem pole of what a cybercriminal wants."

"I'm quite curious about the undisclosed vulnerability that reportedly allows full compromise and a foothold to pivot from," Schloss added. "Based on what was reported, I would guess the exploit would be a command injection or a memory-safety bug in the same management service, chained behind that auth bypass to get code execution as root, where they then dropped a static binary to return a shell on the device whose firmware ships with almost no tooling. That attack chain isn't uncommon on cheap, older consumer IoT devices where security wasn't top of mind, but if that's the case here, seeing it hold up on a modern TP-Link device would be a bit of a blast from the past.

• Canon announced its 3D image generation 'Dual Pixel 3D' tech
• It uses depth data from a single shot via Dual Pixel CMOS AF, through a free Windows-only app coming in October
• The EOS R10 and most models up to the EOS R5 series are compatible

Canon introduced a new Dual Pixel CMOS-type sensor and autofocus system in the EOS R5 back in 2020, and a string of cameras have since inherited this tech, most recently the EOS R8 Mark II announced today. And it's these cameras that just got a free upgrade that can add another dimension to photos: Dual Pixel 3D.

The new software leverages "depth and phase-detection data captured in a single shot via Dual Pixel CMOS AF", says Canon, using "an exclusive algorithm to convert your photos into highly realistic 3D imagery", plus 3D models in OBJ or GLB formats, or as an MP4 video, "complete with rich photographic textures."

This depth-adding tech will come in the (free) Dual Pixel 3D Converter software, which will be available for Windows only (Windows 11 64-bit 24H2 or later), from October 3.

So what exactly can users expect from the software, and which cameras are compatible? Let's take a look.

An extra dimension

Billed as 'simple 3D image generation technology', Dual Pixel 3D enables users to create immersive three-dimensional images and models from a single RAW photo, without needing specialized equipment or viewing devices. Canon also says the technology works with JPEGs captured by the new EOS R8 Mark II.

These files contain depth information from slightly different views, captured by each pixel's two photodiodes, which are then converted into 3D shape data.

Users will be able to fine-tune the degree of depth in the new software, for a more pronounced 3D effect or a subtler appearance. The depth information in Dual Pixel CMOS-captured photos also simplifies background removal, should users want to output a subject onto a plain background as a 3D model, or as a stereographic photo.

Can has shared tips for how to take photos designed to be converted for 3D on its YouTube channel (see below).

Photographers working in product and still life photography stand to benefit from the creative possibilities in particular. We'll be sure to try out the new software when it's released on October 3, and share our experience of making 3D imagery with it.

Compatible Canon cameras and lenses

Here's every Canon mirrorless camera that features Dual Pixel CMOS AF and can, therefore, enjoy the new Dual Pixel 3D feature, provided images are captured with a compatible lens:

• EOS R5 Mark II
• EOS R5
• EOS R6 Mark III
• EOS R6 Mark II
• EOS R7
• EOS R8 Mark II
• EOS R8
• EOS R10

And you'll need to be using one of these lenses;

RF24-70mm F2.8 L IS USM

RF24-50mm F4.5-6.3 IS STM

RF24-105mm F4 L IS USM

RF24-105mm F4-7.1 IS STM

RF35mm F1.8 MACRO IS STM

RF50mm F1.8 STM

RF70-200mm F2.8 L IS USM

RF70-200mm F4 L IS USM

RF85mm F2 MACRO IS STM

RF100mm F2.8 L MACRO IS USM

RF-S18-45mm F4.5-6.3 IS STM

RF-S18-150mm F3.5-6.3 IS STM

• DDR5 RAM has hit a new pricing high in the German market
• It's now 544% up on the price it was before the RAM crisis began
• This inflation backs up predictions of the memory shortage worsening, and Dell has just hiked the price of one of its popular laptops, too

If you wanted a telling example of how bad the cost of RAM is getting, the latest report on DDR5 pricing makes it crystal clear – and it reaches us as Dell moves to hike the price of its affordable XPS 13 laptop (in a roundabout way).

I'll come back to the ins-and-outs of what's happening with Dell, but first the DDR5 price jump, which has happened over in Germany.

3D Center keeps tabs on the monthly pricing of DDR5 memory in the German retail market – some 20 products are covered in this largest market in Europe – and as Wccftech flagged, the report for September shows this RAM is now 544% up on the price it was in July 2025 (the baseline level before the crisis began).

This is a big leap from 486% where the DDR5 price index sat in August, and since June, when it was at 419% having remained flat for much of the year. This obviously represents a depressingly hefty additional toll on the wallets of PC buyers or those upgrading their memory.

Meanwhile, as Mashable noticed, Dell has effectively upped the price of its XPS 13 laptop in the US, without actually increasing the baseline cost – instead of doing that, the laptop maker has introduced a new entry-level model with less storage.

So, previously the XPS 13 started from $699 in the US for the model with 8GB of RAM and 512GB of storage. What Dell has done is brought in a new model with 256GB of storage at that $699 level, so while technically the cheapest XPS 13 is still at that price, you're getting a lower spec for the money.

The old baseline model with 8GB RAM and a 512GB SSD is now $799, so it's been hiked by $100 – a pretty nasty bump in cost that moves this notebook into a distinctly less affordable price bracket.

If you want the XPS 13 with 16GB of system memory (and 512GB of storage), that's also gone up $100 so it's now at $999. Do note that these are student-targeted laptops, and students get a $100 discount on the XPS 13, so you will pay less in that case. However, while $599 (with $100 off) remains a tempting price in this climate, 256GB storage is cutting it thin.

Analysis: as predicted, 2026 is turning much nastier with RAM

The DDR5 price spike is truly worrying in my opinion, simply because it's an acceleration of an already worsening picture. Yes, it's only one retail market and a snapshot of the overall landscape as such, but the same pattern is seen elsewhere. Just look at Tom's Hardware's price tracker, which shows 32GB of DDR5-5600 RAM in the US is now $409 (at the time of writing) compared to $72, which was the lowest price seen before the memory crisis.

That's over a 5.5x price increase in the US market (mirroring the German level of RAM inflation in this particular case). The end result is that what used to be a no-brainer of future-proofing any desktop PC – particularly a gaming rig – with 32GB of RAM is now a difficult choice to make, as sticking with 16GB is saving you $200 (or the regional equivalent). Bearing in mind that you're battling all sorts of other component inflation if you're building a new PC, too (most notably with the likes of SSDs and increasingly GPUs).

We were told that the second half of 2026 would see more RAM price misery, and these German market figures illustrate exactly that. Since June, buyers in the country have witnessed an effective 30% increase in the cost of DDR5 (when it was already hugely overinflated). It's worse than I imagined it could get, frankly, and I fear that the most pessimistic predictions – which also forecast a very rough 2027 – are very much on the money.

All these RAM price hikes are eventually reflected in the cost of laptops, of course, and the Dell XPS 13 provides an apt illustration here. Interestingly enough, I recently wrote about Dell's revelation of its new 14S laptop – which was shown off at IFA, but without any price tag being attached – saying that this made me nervous about how much the notebook might cost.

Given this XPS 13 hike, it's easy to see why Dell was hesitant, and to be fair to the company, it isn't the only manufacturer that's reticent to pin launch prices on incoming devices. This is becoming a trend because the memory shortage, and its knock-on effects, are making life difficult for all device makers.

• New camera-free smart glasses from Meta are rumored
• The wearable could be unveiled as early as next week
• A new glasses-detecting app is proving popular with users

It's fair to say that the various iterations of Meta's smart glasses had been quite well received by users — as you'll see from our own reviews — but over time, the general public has become less and less comfortable with the idea of being secretly spied on through the cameras embedded in these wearables.

That might explain Meta's plans to release some spectacles with cameras on board, as reported by The Information. According to the outlet's sources, the glasses have the codename Luna, and will be available in two styles called Clubmaster and Burbank.

With no camera, the focus will be on the audio capabilities of the glasses, which will let you have conversations with Meta's own AI chatbot. The report says we could get a grand unveiling at the Meta Connect event next week, on September 23 and 24.

While Meta's smart specs have always been fitted with LED lights that show when they're recording, modders were finding ways around this, enabling more covert video and photo capture. While those mods have since been disabled and prevented by software updates, it's still left people with a general sense of unease.

The backlash continues

As Meta apparently preps its next pair of smart glasses, Wired reports on the ZuckOff app that takes a swing at the Meta CEO in its name, and alerts users when they might be in the presence of someone wearing Meta glasses. The app uses Bluetooth to scan the surrounding area for these wearables.

With several thousand downloads on both Android and iOS, the app is clearly proving popular. It's free to download and use in its basic form, with a pro version available for $9.99 / £9.99 / AU$14.99 a year that scans continuously and gives you scan histories.

It's not your only option either: if you're on Android, Nearby Glasses is open source and free to use, and does a similar sort of job as ZuckOff without the provocative name. That app has now racked up more than 100,000 downloads.

There's definitely been a shift in perception when it comes to glasses that can record, warning light or no warning light — even though these specs have been around for years. There's even talk of bans and government regulation coming in at some point, which Meta might be trying to get ahead of with its next pair of glasses.

• Defiant warned of active exploitation of WooCommerce Wholesale Lead Capture Plugin flaw (CVE‑2026‑27540)
• Critical unauthenticated file‑upload bug lets attackers deploy PHP webshells for site takeover
• Patch released in Feb 2026 (v2.0.3.2); Wordfence blocked 100,000+ attacks, users urged to update and check uploads

A critical vulnerability in a popular WooCommerce plugin is being actively exploited to upload malware and possibly take over entire websites, security experts have warned.

The plugin in question is called Wholesale Lead Capture Plugin for WooCommerce. It adds a dedicated registration and onboarding system for wholesale and B2B customers, letting businesses collect company and other custom information, review applications, assign wholesale user roles, and automate registration and onboarding emails.

It is a premium plugin that costs between $99 and $600 and which, according to the Wordpress store page, has more than 20,000 active installations.

A thousand victims

The plugin was vulnerable to an unauthenticated arbitrary file-upload flaw which, as the name suggests, allows unauthenticated parties to upload arbitrary files, including PHP webshells and executable code that can result in full site takeover. It is tracked as CVE-2026-27540 and carries a severity score of 9.0/10 (critical).

Versions 2.0.3.1 and older were said to be affected. Version 2.0.3.2, released on February 20, was said to have addressed the bug, meaning the patch has been available for almost half a year. However, WordPress security outfit Defiant said its Wordfence web application firewall blocked more than 100,000 attacks, and Wordfence added that it observed two attack spikes - one between June 4 and 17, and another one between July 1 and August 30.

In these incidents, the attackers were mostly uploading reconnaissance webshells, possibly mapping out the landscape before deploying more serious malware.

“The uploaded shell.php is a PHP webshell that reports host details and provides a browser-based upload form for writing additional malicious files to the site,” the researchers said.

If you are running the plugin, it is advised you update it to the newest version as soon as possible, and check upload directories for unexpected, or recently created, PHP files.

Via BleepingComputer

• Elastic Security Labs uncovered REF9334, a Brazilian banking malware campaign active since May 2025
• Malware “Kremlin” deploys fake docs and malicious Chrome/Edge extensions to steal banking data
• 1,515 infections found, 98% in Brazil

Security researchers from Elastic Security Labs have discovered a new Brazilian banking malware campaign that uses browser extensions to compromise users and steal sensitive information.

In an in-depth report published earlier this week, the researchers said the campaign has been active since at least May 2025. Dubbed REF9334, the campaign uses fake banking, invoice, and business documents, to trick victims into installing malware which, in turn, deploys a malicious extension in Chrome and Edge browsers.

The researchers named the malware “Kremlin”, and say it can steal browser credentials, cookies, session information, monitor browser activity, grab screenshots, and steal information from websites that the victims visit. But the goal of the campaign is primarily to target Brazilian bank users.

A thousand victims

The malware really makes an effort to hide and persist in the target environment. For example, it first checks to see if it’s in a sandbox and if so - it simply won’t run. If instead it determines that it’s running on a real user’s computer, it will deploy an extension with the name “AVSync System Inc.” in an attempt to trick the victim into thinking they have an antivirus addon running in the browser.

It also doesn’t use a fixed C2 server, but rather stores the information on the Ethereum blockchain, since it’s a lot harder to disrupt the communication between the operators and the infected machines that way.

During their investigation, Elastic researchers were able to take control of a domain that the malware used and discovered that it had infected 1,515 systems. Almost all of them (98%) were located in Brazil. They were also able to register the network canary domain and point it to their webhost, which resulted in the loader assuming it was in a sandbox. This also meant “the infections have not moved past the initial access”, Elastic explained.

The full list of indicators of compromise can be found on this link.

Via The Hacker News

• Nvidia's RTX 5090 is now over $9,000 in the US
• A new rumor suggests that RTX 6000 gaming GPUs are coming in 2027, maybe in the first half of the year
• If true, the price tag that's attached to the RTX 6090 will likely be colossal, and lower-tier GPUs could be pricey too

Nvidia's RTX 5090 flagship has hit new heights in terms of ridiculous asking prices, just as a new rumor suggests that RTX 6000 (Rubin) GPUs are coming in 2027 — earlier than anticipated, and to say the price of those next-gen offerings is a worry given the current climate is a huge understatement.

A Redditor pointed out the current state of RTX 5090 prices, which are close to commanding $10,000 in the US for some models. Notably, the Asus ROG Astral RTX 5090 will set you back a princely $9,659 on Newegg US, although that's not sold directly by the retailer.

Indeed, none of the big retailers have any stock of the RTX 5090 anymore, and the only graphics cards you can buy are from third-party marketplace sellers, often shipping from Asia (that ROG Astral GPU comes from Hong Kong).

You can find more expensive RTX 5090s than that if you want to get the gold-plated version (Dhahab Edition) of the ROG Astral, which is now $11,999. The very cheapest RTX 5090 that I could find at the time of writing is an MSI Ventus model that's priced at $6,549 on Newegg.

What about outside of the US? Price inflation is rampant in other countries too. If we take the UK as an example, you can pick up an RTX 5090 for around £4,500 on Overclockers UK, which is still an eye-watering asking price. (And those are the cheapest GPUs — they go up in price from there to £6,600 for the aforementioned Asus ROG Astral RTX 5090).

It's an alarming situation, and one that heaps worries on top of a new rumor about the RTX 6000 launch as aired by Moore's Law is Dead (MLID) on YouTube (via TweakTown).

Previous rumors have contended that Nvidia's looking at 2028 for the arrival of its next-gen GeForce graphics cards, but a source at the firm told MLID that this is incorrect, and Team Green is aiming for a 2027 launch. Moreover, the current plan is still to get the RTX 6000 ball rolling for PC gamers in the first half of next year, meaning within the next nine months.

There's an obvious sticking point here, though: if the RTX 6000 generation is this close, how come we haven't had much in the way of leaks yet, and nothing of any real substance? The source claims that this is due to Nvidia's management successfully clamping down on leaks with the next-gen products.

The first offering will presumably be the RTX 6090 (or maybe an RTX 6080 as well), and it's going to have some kind of interesting spin on the design — though we aren't told what. It could have beefed up hardware to better cope with running DLSS 5, perhaps, as that would make sense — something to help deal with the performance hit of neural rendering would clearly be very welcome.

Analysis: house deposit or GPU?

There are obvious problems with a possible RTX 6000 launch next year, if we take this rumor at face value. As noted, the RTX 5090 is now being sold for beyond ridiculous prices — and so how much is an RTX 6090 going to run? The fiscal equivalent of an ultramarathon, presumably, and with AI demand likely coming into play with this GPU, the next-gen flagship could be 'unobtainium,' as the disgruntled gamers out there are already predicting.

When you consider that the RAM crisis is going to get worse next year, going by the more recent forecasts from analysts and industry insiders, video RAM is going to be more problematic — and how much of the stuff will be on an RTX 6090? — it all adds up to a frightening prospect for an MSRP. And the likely reality is that the price to actually buy the next-gen Rubin gaming flagship will blow well past that towering recommended cost. (The RTX 6080 won't likely be much different, either.)

For all these reasons, I find it difficult to believe that Nvidia will go ahead and launch the RTX 6000 series next year. Surely it makes sense to wait longer, although what Team Green may know is that 2028 isn't going to be any better for RAM price inflation, and so perhaps that's why next year is greenlit for next-gen GeForce graphics cards to arrive. It's a sobering thought. As one Redditor observed: "Can't wait to decide if I want a down payment on a house or an Nvidia GPU."

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1696) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1696) — hint #2 — repeated letters

Quordle today (game #1696) — hint #3 — uncommon letters

Quordle today (game #1696) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1696) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1696) — the answers

The answers to today's Quordle, game #1696, are…

• SPEAR
• PRICE
• BLUNT
• FISHY

My mistake today was guessing the words in the wrong order.

Following a hunch, I incorrectly guessed “saver” when there were far more gettable quadrants that would not have left me in a situation where I had just one guess to get the final word.

Fortunately I scraped through.

Daily Sequence today (game #1696) — the answers

The answers to today's Quordle Daily Sequence, game #1696, are…

• CRANK
• GENIE
• TORCH
• REMIT

Quordle answers: The past 20

• Quordle #1695, Tuesday, 15 September: SHUSH, LITHE, DELTA, BUGLE
• Quordle #1694, Monday, 14 September: ZEBRA, LEGAL, RATIO, TROLL
• Quordle #1693, Sunday, 13 September: LUCID, SPRAY, MANGE, EMAIL
• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE
• Quordle #1681, Tuesday, 1 September: NASAL, ROUTE, ANKLE, MIGHT
• Quordle #1680, Monday, 31 August: ALIVE, LOUSE, ABOVE, MOSSY
• Quordle #1679, Sunday, 30 August: USING, SORRY, FILET, PIPER
• Quordle #1678, Saturday, 29 August: OVINE, ALLOY, VOICE, CARVE
• Quordle #1677, Friday, 28 August: WAIST, EDICT, BONUS, DEUCE
• Quordle #1676, Thursday, 27 August: SHEEN, TRICE, WAGON, BEVEL

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #927) - hint #1 - today's theme

NYT Strands today (game #927) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• BRING
• GIFT
• HALF
• STING
• BIRTH
• STIR

NYT Strands today (game #927) - hint #3 - spangram letters

NYT Strands today (game #927) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #927) - the answers

The answers to today's Strands, game #927, are…

• JAZZY
• VIVID
• BRIGHT
• FLASHY
• STRIKING
• VIBRANT
• SPANGRAM: EYECATCHING

• My rating: Hard
• My score: 1 hint

My first thoughts about today’s theme were obvious ones like conspicuous, but surely this clue couldn’t be so blatant — especially as there was no letter P on the entire board.

There were, though, two letter Zs, so I managed to get JAZZY immediately, followed by VIVID and BRIGHT — the theme nailed down to describing the loud and garish. I was able to make some progress, but still needed a hint to get FLASHY.

I kicked myself that I’d missed the spangram EYECATCHING, as EYE was staring at me in my favorite starting position in the top left-hand corner.

I ended happy to have completed a tricky game, but annoyed that I’d missed a golden, flickering neon sign of an opportunity for a spangram-first. Congratulations if you spotted it.

Yesterday's NYT Strands answers (Tuesday, September 15, game #926)

• JOIST
• BOLT
• HINGE
• NAIL
• KNOB
• BRACKET
• ANCHOR
• SCREW
• SPANGRAM: HARDWARE

• China’s state security minister Chen Yixin urged global AI guardrails, calling it a new arms race
• He outlined five risks: ideological manipulation, infrastructure attacks, data leaks, development gaps, and espionage
• US officials likewise warn against losing AI dominance to China, intensifying geopolitical rivalry

China’s Minister of State Security has called for global regulation and guardrails on Artificial Intelligence (AI), as the nascent technology turns into a “new arena for strategic rivalry among major powers”. In other words, the AI race is the new arms race and humanity needs rules before it spirals out of control.

Chen Yixin made the claims in a new article on China Cyberspace, a journal run by internet watchdog body the Cyberspace Administration of China.

In the article, Chen highlighted five key risks of AI development:

1. Ideological security risk
2. Critical information infrastructure risk
3. Data leaks risk
4. Development gap risk
5. Espionage risk

Ideological security risk

Artificial Intelligence could be “leveraged by hostile forces” to create fake news and other harmful information, systematically creating discontent and dividing the population, Chen said.

Discussing risks to critical information infrastructure, he said that as models advance, the barrier to entry lowers, making disruptive cyberattacks quicker and easier to pull off.

“Foreign intelligence agencies are heavily exploiting smart web crawlers, data mining and profiling technologies to harvest sensitive information, including critical state data, business secrets, and personal information,” he said.

He also warned that people are recklessly sharing sensitive data with foreign AI tools, which could result in catastrophic data leaks. Apparently, open source agents like OpenClaw often come with vulnerabilities that could result in remotely-triggered data spills.

When it comes to the development gap risk, Yixin warned that a handful of major players are severing the global AI supply chain and creating a monopoly of closed-source ecosystems. Finally, he urged for the creation of early-warning mechanisms and public advisories which should name and shame foreign nation-state actors using AI for espionage, data theft, and disinformation campaigns.

US vs China

Expectedly, Yixin did not name any specific countries, but it’s easy to read the United States’ name between the lines, the South China Morning Post hints in its report, adding that the US administration recently warned it could not allow China surpassing it on AI development.

Indeed, less than a week ago, US Treasury Secretary Scott Bessent said the country would face dire consequences should it lose the AI race against China. "There is no day after tomorrow if China wins at this," Bessent said at a Breitbart News event in Washington, Bloomberg reported. "If they were to pull away from us on AI, then nothing else would matter."

The US has been at a trade war with China (among other countries) for years now. During Donald Trump’s first term, he blacklisted numerous Chinese hardware manufacturers, warning that Chinese-built 5G infrastructure could be abused to install backdoors and allow the Chinese government to spy on US communications. Huawei, ZTE, and TikTok bore the brunt of these accusations, which the Chinese government vehemently denied.

In his second term, Trump also declared a national emergency and banned all foreign bulk-power systems from being imported, installed, or used in the country. In a signed executive order, Trump said that during his first term, he found “that the bulk-power system could be a target of those seeking to commit malicious acts against the United States, including malicious cyber activities, because of the significant risks that a successful attack would have on our economy, human health and safety, and national defense.”

President Trump also said there were “minimal restrictions” on both acquisition and operation of these foreign-produced systems. As a result, the situation “constitutes an unusual and extraordinary threat … to the national security, foreign policy, and economy of the United States.”

While the AI race is intensifying, developers are calling for a slowdown and better guardrails. Some developers estimated that AI could end humanity in a few decades, urging the industry to slow down and only develop systems they are confident they can control.

• Check Point spotted phishing emails spoofing voicemail transcript notifications, hitting 7,800+ orgs
• Malicious SVG attachments auto‑fill victim emails, redirecting to fake login pages for credential theft
• SVG format bypasses filters; businesses urged to verify notifications and treat SVGs as active content

Hackers have a new phishing lure - the automated voicemail transcript notification, and have already used it against thousands of organizations already, sending tens of thousands of malicious emails.

In a new report, security experts from Check Point Research (CPR) said they spotted an ongoing campaign that has already targeted thousands of organizations.

The goal of the campaign seems to be credential theft - grabbing access to people’s email accounts, business services, and similar.

Abusing the trends

The proliferation of AI gave rise to a new trend in the office - automated voicemail transcripts. When a person receives a voicemail, they can choose to read it instead of listening to it. Useful for a noisy workplace environment, or for emails that are too sensitive to be blasted through a speaker system. An automated system mails the transcript to the recipient’s inbox in a familiar format, and since they’re used to receiving this type of email, they’re not suspicious or skeptical enough. Their guard is lowered, which is a perfect opportunity for the attackers.

“Between August 17 and August 31, Check Point identified more than 58,000 emails tied to the campaign. The operation targeted over 7,800 organizations, leveraging more than 38,400 spoofed sender addresses across over 9,300 spoofed domains,” the researchers explained.

The emails follow a simple formula the recipients are already used to seeing. Each message’s subject line begins with “Automated transcript”, followed by a partially redacted phone number and a random tracking string. “The effect is deliberately understated: a notification that appears to have been generated by a trusted workplace system,” CPR explains.

The email domains are also spoofed in a way that makes it seem as if they’re coming from within the same organization.

SVG attachments

Every email comes with an attachment. It is designed to look like a regular call recording file, using names such as “▷ ——— 001min 09sec_….svg.” But notice the file type - SVG. This is not an audio file, it is short for Scalable Vector Graphics (SVG) - an image file. There are a few reasons why scammers are opting for this particular format, but the number one is that it is an XML-based document that can contain JavaScript. When a browser opens the SVG, that JavaScript can execute, redirecting victims to a spoofed login page where they’re asked to log in.

This is exactly the setup here, too. To make matters worse, since the recipient’s email address is hardcoded in the URL, the fake login form auto-fills it. When the victim opens up the SVG, they’re redirected to a login page where the “username” part is already populated, making it more personalized and credible.

Another key reason why SVG is a popular format in these attacks is that it can bypass email security systems. If scammers put a hyperlink in the email’s body, it can be scanned by the system, and sanitized if proven malicious (which it would). But without a link the only other thing a security system can check are the attachments, and there the usual suspects are .exe, .docx, or .pdf files. Very few are focusing on SVG files, as well.

Adapting to change

This campaign is a great example of how quickly attackers adapt to enterprise workflows as automation becomes more common, Check Point’s researchers have warned. In response, businesses should start treating automated notifications as signals that need to be verified - especially those when the sender appears to match the recipient’s domain.

Furthermore, businesses should define which file types and domains AI agents are allowed to access without human confirmation, and finally, they should definitely inspect SVG attachments as active content, not simply as images.

Like many people who've just installed the new iOS 27, you're probably wondering why Siri doesn't seem quite like the new all-singing, all-dancing AI assistant you were promised.

Try to strike up a conversation with it and it will still try to palm you off to ChatGPT, or just throw up a load of web links instead of answering you directly. You'd be forgiven for wondering whether Siri AI is just another failure.

Part of the problem is that Apple's terminology makes it genuinely confusing, but there's an important distinction between iOS 27's Siri and Siri AI that you need to make. Let me explain.

Installing iOS 27 gives you some new Apple Intelligence features, but it does not automatically give you the headline new Siri. The big Siri upgrade is Siri AI (Beta), which you can apply for, but requires joining a separate waitlist.

Of course, that doesn't mean you don't get anything new with iOS 27, though, so let's break it down.

What you get in iOS 27 without joining Siri AI (Beta)

Most of the really dramatic Siri improvements aren't actually part of ordinary Siri. With iOS 27, however, you do get new Apple Intelligence features elsewhere on your iPhone.

For example, existing Writing Tools remain available without Siri AI, while iOS 27 adds things such as Live Translation in Messages, FaceTime and Phone. There's also Call Context, which can surface relevant information such as an airline confirmation code while you're on a call, improved Smart Replies, Mail suggestions and suggested polls.

Visual Intelligence is another useful AI feature that works without Siri AI. Just click and hold the Camera Control button to activate it.

Visual Intelligence is a way of asking ChatGPT, using your voice or text, about what your camera is looking at, as well as searching for similar things online using Google. You can also use it to identify plants, translate text and turn dates on posters or flyers into Calendar events.

There's an onscreen version of Visual Intelligence too, although it's a bit clunky to use. Take a screenshot with the Side + Volume Up buttons and you'll see Visual Intelligence tools appear at the bottom, including Ask, Search, Summarize, and actions such as Add to Calendar. Again, once you tap Ask, you can speak your request instead of typing it.

But these are really iOS and Apple Intelligence upgrades, rather than Siri becoming something like ChatGPT. For that you'll need the upcoming Siri AI.

What you DON'T get until Siri AI (Beta)

With Siri AI, Apple has a long list of new capabilities it says Siri gains:

• Broad world knowledge — with proper conversational answers to general questions rather than relying so heavily on search or ChatGPT.
• Personal context — it can find things buried in your Mail, Messages, Photos and Notes apps, even from fairly natural descriptions.
• Onscreen awareness — you can ask Siri about whatever you're currently looking at without having to take a screenshot. Apple's examples include asking it to explain a diagram in your class notes or compare two reports in Files.
• Much deeper app actions — Apple gives examples including finding information and then drafting an email, or editing and sharing a set of photos.
• Real generative writing — in the new version, Siri itself can compose text from scratch, rewrite, proofread and critique writing. Without Siri AI, you're using the separate Writing Tools instead.
• Conversational history — there's an entirely new dedicated Siri app that sits on your Home screen, with conversations synced privately through iCloud so you can start on one Apple device and continue on another.
• Visual Intelligence through Siri — rather than invoking Visual Intelligence separately, you can simply ask Siri questions about what's on your screen.
• More natural speech and dictation — on supported hardware, Apple says its new on-device model gives Siri more expressive voices, customizable pace and expressiveness, and improved system-wide dictation. This is an area where Siri currently stands well behind Gemini Live and ChatGPT Voice.
• Personalized writing style — Siri can apparently learn how you communicate with different people. Apple's example is recognizing that you normally send your manager short bullet points and drafting your text accordingly.

And that's the Siri AI you don't have yet.

Join the waitlist

The good news is that you can apply to join the beta right now. Go to Settings > Siri, where you should see Siri AI (Beta) at the top of the screen. Tap Join waitlist and you'll be added to the queue. You'll get a notification when Siri AI is available for you.

There are also some major regional restrictions. Siri AI isn't currently available on iPhones or iPads in the European Union, although EU users can access it on Macs and Vision Pro. In mainland China, Siri AI isn't currently available at all for users whose Apple Account region is set to China.

Because I’m in the UK, the EU restrictions don’t apply to me. I've joined the waitlist now, so I'll be putting Siri AI through its paces as soon as Apple lets me in. Until then, if you've installed iOS 27 and wondered why Siri still feels suspiciously like the Siri you had yesterday, there's a simple explanation: it pretty much is.