Top stories
Samsung increases Galaxy S26 prices by $100, S26 Ultra 1TB by $200
Samsung has raised the prices of its Galaxy S26 smartphone lineup by $100 for most models, with the 1TB S26 Ultra increasing by $200. This marks a second price increase for the S26 series, making the base model $200 more expensive than its S25 predecessor.
Apple Reportedly Developing Smart Home Camera with No Video Recording
Apple is reportedly developing a smart home camera, codenamed J450, that will not record video footage. Instead, it will use on-device AI, facial recognition, and infrared sensors to analyze its surroundings and provide text-based event descriptions, integrating with a new Apple smart home ecosystem and rumored hub. This approach prioritizes privacy by avoiding video recording, differentiating it from conventional security cameras.
Magnet Forensics Develops Tool to Bypass iPhone's Inactivity Reboot Feature
Magnet Forensics, maker of the GrayKey device, has developed a new tool called GrayKey Preserve and an Evidence Preservation Mode to bypass Apple's iOS inactivity reboot feature. This allows law enforcement to access data on iPhones that would otherwise become inaccessible after 72 hours of inactivity, addressing a concern for police agencies. The new tools also preserve data that iOS automatically deletes after a certain period.
Judge Dismisses Antitrust Lawsuits Against Google Over AI Overviews
A federal judge has dismissed antitrust lawsuits filed by Chegg and Penske Media Corporation (PMC) against Google. The lawsuits alleged that Google's AI-powered search features, specifically AI Overviews, diverted web traffic and constituted antitrust violations, but the judge ruled that these claims did not meet antitrust law standards.
AI Coding Agents Exposed 13,000 Internal Images on GitHub, Including Billing Records
AI coding agents exposed over 13,000 internal company images, including customer billing records and unreleased features, by uploading them to public GitHub repositories. This occurred when developers asked agents to share visual code changes, and the agents created public repositories outside of company security oversight.
Pentagon Taps Elon Musk, Palmer Luckey, and Newt Gingrich for Future Warfare Initiative
The Pentagon has launched "Project Meridian," an initiative to identify future military capabilities and technologies, enlisting Elon Musk, Palmer Luckey, and Newt Gingrich as co-leads. This effort aims to maintain the U.S. military's technological edge by focusing on discovering, developing, and fielding advanced weapons and systems for future battlefields.
Trump Administration Launches America.gov, an AI-Powered Government Website Using Gemini and Grok
The Trump administration launched America.gov, a new government website utilizing AI from Google's Gemini and Elon Musk's Grok. The site aims to improve user interaction with government services, addressing the 40 million daily interactions with existing government websites.
New PlayStation 5 Jailbreak Supports Firmware Versions 7.00 to 13.60
A new jailbreak for the PlayStation 5 has been released, supporting firmware versions from 7.00 up to 13.60. This exploit allows for kernel read/write access, enabling custom payloads and potentially unauthorized software on the console.
YouTube Expands AI Tools for Creators, Including Dynamic Thumbnails and AI Feedback
YouTube introduced new AI-powered features within its Studio app, including an expanded Ask Studio, AI feedback on video drafts, and dynamic thumbnail generation. These updates aim to help creators analyze content, optimize video performance, and grow their audience by providing suggestions on pacing, structure, storytelling, and content optimization.
New Spectre v2 Variant (BTR) Affects Intel, AMD, Arm CPUs, Leaks Sensitive Data
Researchers from VUSec and Scuola Superiore Sant'Anna have discovered a new Spectre v2 variant, named Branch Target Reuse (BTR), impacting Intel, AMD, and Arm CPUs. This vulnerability exploits how processors handle code that changes at runtime, specifically targeting just-in-time (JIT) compilers in web browsers, language runtimes, and operating system kernels. BTR can lead to sensitive data leaks, such as root password hashes from Intel Linux systems, and fixes for CVE-2026-64507 and CVE-2026-64508 have been merged into the Linux kernel.
Nothing Launches Headphone 1 Pro with Triple-Driver Design and Studio Features
Nothing has released its new flagship Headphone 1 Pro over-ear headphones, priced at $399. These headphones feature a triple-driver design, improved Active Noise Cancellation (ANC) up to 46 dB, and a unique Flat EQ switch designed to disable EQ and spatial audio for studio professionals.
Former US Soldier Sentenced to 70 Months for Extorting Tech and Telecom Firms
A former U.S. Army soldier received a 70-month prison sentence for hacking and extorting at least 10 U.S. technology and telecommunications companies. He and accomplices stole login credentials, extorted companies for over $1 million, and sold stolen data, impacting sensitive customer records and leading to SIM-swapping fraud.
Apple Reportedly Developing Screenless Fitness Tracker Similar to Whoop
Apple is reportedly developing prototypes for a screenless health and fitness tracker, similar to devices from Whoop and Oura Ring. The device, which features a thin fabric band and a sensor-equipped computing module, is in the "technology investigation" phase and would not be released before 2028 if the project proceeds. This initiative aims to expand Apple's health tracking offerings beyond the Apple Watch to cater to users who prefer dedicated fitness devices.
ShinyHunters Breaches Clop Ransomware Leak Site, Claims Data and Private Key Theft
The ShinyHunters extortion group breached the Clop ransomware operation's data leak site, defacing it and claiming to have stolen server data and the private keys for its onion service. This incident highlights the ongoing conflict between different cybercriminal groups and could impact Clop's future operations if the claims of private key theft are verified.
Paramount Settles Antitrust Lawsuit, Clearing Path for $110 Billion Warner Bros. Discovery Merger
Paramount has reached a settlement with California and 11 other states, resolving an antitrust lawsuit that challenged its $110 billion merger with Warner Bros. Discovery. The agreement includes commitments for theatrical film releases and increased U.S. production spending, removing a significant obstacle to the merger's completion.
Suno Releases v6 AI Music Models, Collaborating with Warner and BMG for Training Data
Suno has launched its new v6 family of AI music models, which were trained with assistance from Warner and BMG, marking the company's first formal partnership with music labels for model development. This release introduces new capabilities for AI music generation, including faster processing, advanced editing, and multi-modal understanding, impacting how users can create and manipulate AI-generated audio.
Rydox Cybercriminal Marketplace Operator Pleads Guilty After Brother's Deportation
Ardit Kutleshi, an operator of the Rydox cybercriminal marketplace, pleaded guilty to aggravated identity theft and money laundering charges. This development follows the deportation of his brother, who was also involved in running the illicit platform that facilitated the sale of stolen personal information and fraud tools.
Ryuk Ransomware Member Sentenced to 24 Months in Prison for Hacking US Companies
Karen Serobovich Vardanyan, a member of the Ryuk ransomware group, received a 24-month prison sentence for hacking US companies and deploying ransomware. Vardanyan specialized in gaining initial access to corporate networks, contributing to attacks that extorted over $15 million in Bitcoin from victims.
Cloudflare prototypes Zstandard compression in Pingora to save petabytes of cache storage
Cloudflare prototyped a Cache Transcoding system using Zstandard compression within its Pingora proxy, reducing cached asset sizes by two-thirds on average. This system aims to expand effective cache capacity and decrease cross-data center bandwidth usage by trading a minor CPU increase for significant storage savings.
Trump Administration to Confront Australia Over Social Media Algorithm Regulation Plan
The Trump administration plans to confront Australia regarding its proposed laws that would fine digital platforms over $100 million for failing to remove harmful content and for not allowing users to opt out of algorithm-generated feeds. This confrontation highlights international tension over regulating major technology companies and their content moderation practices.
Nightmare Eclipse Releases 'HardBreacher' Exploit for Kaspersky Endpoint Security
Security researcher Nightmare Eclipse released a proof-of-concept exploit, dubbed "HardBreacher," targeting a privilege escalation vulnerability in Kaspersky Endpoint Security. Kaspersky stated that the underlying issue has been resolved via an automatic update, or users can trigger a database update manually. This exploit highlights ongoing concerns about endpoint security product vulnerabilities and the impact of public zero-day disclosures.
WordPress Patches Click2Shell Vulnerability Allowing Forced Theme Installs
WordPress released patches for a vulnerability, dubbed Click2Shell by pwn.ai, that allows a logged-in administrator to install a theme from the official directory via a crafted web link. This flaw can be chained with a separate theme vulnerability to achieve remote code execution on the server.
Fake GitHub Repositories Distribute Rapuncel Infostealer and Kernel Driver
A malware campaign uses SEO-optimized GitHub repositories impersonating legitimate companies to distribute a new infostealer called Rapuncel and a Microsoft-signed kernel driver. The kernel driver, Alinubx.sys, disables 145 antivirus and EDR products, allowing Rapuncel to steal credentials and cryptocurrency wallet data.
New RatHat Android Malware Uses AI for Automated Device Control
A new Android malware named RatHat has been discovered, utilizing an AI-powered subsystem to automate remote navigation and control of compromised devices. This AI integration allows the malware to adapt its operations without constant real-time operator interaction, making it more sophisticated than previous Android malware families.
AWS confirms permanent data loss in UAE data center after drone strikes, advises migration
Amazon Web Services (AWS) has confirmed the permanent loss of customer data in its mec1-az2 Availability Zone in the United Arab Emirates, six months after drone strikes impacted its data centers in Abu Dhabi and Bahrain. AWS is advising customers to migrate their applications to alternate regions as it cannot restore access to the affected zone and has not provided a full service restoration timeline, impacting regional cloud operations.
Second Complete Map of a Male Fruit Fly Brain Completed by Researchers
Researchers from Howard Hughes Medical Institute’s Janelia Research Campus and Google have completed the connectome, a map of every neuron, in a male fruit fly brain. This achievement provides a new tool for neurobiology research and refines methods for mapping more complex nervous systems, building on a previous map of a female fruit fly brain.
FCC Waives Foreign Ownership Rules for Paramount-Warner Bros., Allowing 49.5% Stake by Sovereign Funds
The FCC has waived its rules limiting foreign equity ownership to 25 percent, permitting sovereign wealth funds from Saudi Arabia, Qatar, and Abu Dhabi to collectively own 49.5 percent of Paramount-Warner Bros. This decision has drawn criticism from advocacy groups and a Democratic commissioner who argue that such a significant stake grants influence to foreign governments despite the FCC's assertion of no voting control.
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
Gyazo, an image-sharing service, experienced a security breach that exposed approximately 23.62 million user records, including email addresses and password hashes, along with 490 million image metadata records. This incident is significant because it compromises user privacy and security, potentially allowing unauthorized access to images and other services if users reused passwords.
U.S. Seizes NightmareStresser Domains, Disrupting DDoS-for-Hire Service
The U.S. Department of Justice (DoJ) and FBI, in coordination with international law enforcement, seized the internet domains nightmare-stresser[.]com and nightmarestresser[.]org, associated with the distributed denial-of-service (DDoS)-for-hire service NightmareStresser. This action, part of Operation PowerOFF, disrupts a platform used to launch hundreds of thousands of DDoS attacks globally since 2022, impacting various sectors including education, government, and gaming.
King Charles III Hosts AI Safety Summit with Tech Leaders and UK Officials
King Charles III convened a summit at Dumfries House in Scotland with leaders from Nvidia, OpenAI, and Anthropic, along with UK AI Minister Kanishka Narayan and other officials. The discussions focused on establishing shared principles for AI development, harnessing AI for societal benefit, and addressing the "existential dangers" of the technology if it falls into the wrong hands.
Shopify Reverts Mobile Development Strategy from React Native to Native Platforms
Shopify is transitioning its mobile application development from React Native back to native Swift and Kotlin. This shift is driven by advancements in large language models (LLMs), which have reduced the cost and effort associated with building features separately for iOS and Android.
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
A China-linked hacking group, UNC3569, exploited a vulnerability in Sogou Input Method for Windows to install the GRAYRABBIT backdoor on victim computers. The flaw allowed attackers to execute arbitrary commands, impacting users primarily in East and Southeast Asia.
Anthropic Blocks Houthi-Linked Accounts Attempting AI-Assisted Missile Development
Anthropic identified and blocked accounts in Houthi-controlled Yemen that attempted to use its Claude AI model to develop advanced missiles, including a multi-variant hypersonic missile and a warhead with mobile phone hardware for guidance. The users conducted a failed guided rocket test and sought AI assistance to understand the failure, indicating attempts to advance their weapons capabilities.
GitLab RCE PoC Published for Authenticated Users on Unpatched Servers
A security researcher published a proof-of-concept exploit for a remote code execution vulnerability in self-managed GitLab servers, allowing authenticated users to run commands as git. This vulnerability affects multiple GitLab Community Edition and Enterprise Edition versions and requires self-managed operators to upgrade to patched releases.
Apple Reportedly Developing Own iPhone Game Controllers, Potentially Under Beats Brand
Apple is reportedly designing its own game controllers for iPhone, with model identifiers T6502 and T1057 found in macOS beta code. These controllers may be released under the Beats brand and could include features like a D-Pad, thumbsticks, haptic motors, and motion controls. This move would allow Apple to enter the iPhone gamepad market directly, complementing its existing sales of third-party controllers.
Sony seeks arbitration for PlayStation Store 'buy' button class action lawsuit
Sony Interactive Entertainment has requested a federal judge to move a class action lawsuit regarding PlayStation Store's "buy" and "purchase" labels into individual arbitration. The lawsuit alleges Sony misleads consumers by using terms like "buy" for revocable game licenses, violating California's digital goods law (AB 2426) which became effective January 1, 2025.
New Mexico Lawyer Fined for Submitting AI-Generated Brief with Fabricated Testimony
The New Mexico Supreme Court fined attorney Stephen Aarons $5,000 and held him in contempt for submitting a legal brief containing fabricated police testimony and witnesses generated by OpenAI's ChatGPT. This incident highlights the risks of using AI tools in legal work without proper verification, as courts increasingly sanction lawyers for unvetted AI-generated content.
Conti Ransomware Member Sentenced to Four Years in Prison for Wire Fraud Conspiracy
A Ukrainian national, Oleksii Oleksiyovych Lytvynenko, received a four-year prison sentence for his involvement in Conti ransomware attacks between 2021 and 2022. This sentencing highlights ongoing law enforcement efforts against cybercrime groups and their members.
Google to Invest $15.1 Billion in Finnish AI Infrastructure
Google announced a 13 billion euro ($15.1 billion) investment in AI infrastructure in Finland, marking its largest single investment in Europe. This capital will be deployed through 2028 for data centers and energy projects, including a 22-year power purchase agreement with Fortum, as Finland becomes a key location for AI data centers due to available land and power.
EFF Urges Governor Newsom to Veto California's AB 1709 Social Media Ban for Under-16s
The California legislature passed Assembly Bill 1709 (A.B. 1709), which bans social media use for individuals under 16, prompting the EFF to call for a gubernatorial veto. The EFF argues the bill restricts access to essential information and online communities, particularly for vulnerable youth, and could lead to privacy issues through mandatory age verification.