News
- The Department of Homeland Security says Salt Typhoon accessed National Guard systems
- Hackers were present between March and December 2024
- The group stole vital intelligence and personally identifiable information
A Chinese state-sponsored threat actor known as Salt Typhoon was lurking in the network of the US Army National Guard for nine months, the US Government has confirmed.
TheDepartment of Homeland Security (DHS) said the attackers were present in the networks between March and December 2024.
During this time, the group stole sensitive data from its victims, including administrator credentials, network traffic diagrams, geographical maps, and personally identifiable information (PII) of service members. Furthermore, the attackers accessed data traffic between the state’s network and every other US state, and at least four additional territories. This means that they could have pivoted to other networks as well, compromising even more government and military targets.
Typhoon over AmericaIt was not discussed how the breach happened, but DHS did say the group was known for exploiting existing vulnerabilities (CVEs) in Cisco’s routers and similar hardware.
Salt Typhoon is a known Chinese state-sponsored threat actor, part of the wider “typhoon” organization that includes groups such as Brass Typhoon, Volt Typhoon, and others.
These organizations were tasked with infiltrating different core organizations within the US, such as critical infrastructure organizations, communications firms, government, military, and defense organizations, and similar.
The goal of the campaign was to be present inside the networks should tensions between the US and China over Taiwan escalate into a full-blown war, giving it the ability to disrupt networks, and steal key intelligence.
Salt Typhoon is often in the media - with recent attacks against the likes of AT&T, Verizon, Lumen, Charter, Windstream, and Viasat, to name a few, often abusing unpatched Cisco routers to gain access, before deploying custom malware such as JumblePath and GhostSpider.
Via BleepingComputer
You might also like- Top satellite communications company Viasat was also hit by Salt Typhoon – which shows just how widespread this massive attack was
- Take a look at our guide to the best authenticator app
- We've rounded up the best password managers
Attention Hulu subscribers, for the time is almost here when the platform will remove the next group of movies from its library to free up some space for its next wave of new titles. All of the best streaming services do it, but Hulu seems to only target its lesser-known titles, which is a relief.
Over the next few weeks, a total of 16 movies will leave the service one by one and though this isn't a huge number, there's a handful of movies that we think you should catch. The main title we have our eyes on is Skinamarink (2022), a horror movie that shocked audiences despite its low budget, which leaves on August 1.
Additionally, the Jane Fonda and Lily Tomlin comedy/ drama Moving On (2022) is set to be removed on August 13, shortly followed by the Bruce Willis action-thriller flick Vendetta (2022), and the French-language romance movie Anaïs in Love (2021), which has a 91% critical rating on Rotten Tomatoes.
Everything leaving Hulu in August 2025Leaving on August 1
Skinamarink (movie)
Leaving on August 7
Just Super (movie)
Leaving on August 9
The Friendship Game (movie)
Leaving on August 13
Moving On (movie)
One True Loves (movie)
Leaving on August 16
Four Samosas (movie)
Leaving on August 18
The Last Son (movie)
Leaving on August 21
My Hero Academia: Two Heroes (movie)
Leaving on August 23
Hostile Territory (movie)
Nocebo (movie)
Leaving on August 24
7 Days (movie)
Leaving on August 25
Assailant (movie)
Vendetta (movie)
Leaving on August 31
American Rapstar (movie)
Anais in Love (movie)
Tell It to the Bees (movie)
- Only Murders in the Building season 5: everything we know so far about the show's return to Hulu and Disney+
- Daredevil: Born Again season 2 has already wrapped filming – and I know when the Marvel TV show will return on Disney+
- The Testaments: everything we know about the sequel series to The Handmaid's Tale on Hulu
- Experts warn of malware running real apps in fake virtual environments
- GodFather bypasses security checks and overlays fake screens to steal credentials
- Targets banking and crypto apps globally with nearly invisible techniques
Zimperium zLabs has uncovered a new version of the GodFather malware that uses on-device virtualization to hijack real banking and cryptocurrency apps.
Unlike older attacks that showed fake login screens, this malware launches the actual apps in a virtual space where attackers can see everything the user does.
The attack begins with a host app that includes a virtualization tool - this host app downloads the targeted banking or crypto app and runs it in a private environment.
Moving beyond simple overlaysWhen users open their app, they are unknowingly redirected into the virtual version. From there, every tap, login, and PIN entry is tracked in real time.
Because the user is interacting with a real app, it is almost impossible to spot the attack by looking at the screen.
GodFather also uses ZIP tricks and hides much of its code in a way that defeats static analysis. It requests accessibility permissions and then silently grants itself more access, making the attack smooth and hard to detect.
“Mobile attackers are moving beyond simple overlays; virtualization gives them unrestricted, live access inside trusted apps,” said Fernando Ortega, Senior Security Researcher, Zimperium zLabs.
“Enterprises need on-device, behavior-based detection and runtime app protection to stay ahead of this shift toward a mobile-first attack strategy.”
Zimperium’s analysis shows that this version of GodFather is focused on Turkish banks, but the campaign targets almost 500 apps globally. These include financial services, cryptocurrency platforms, e-commerce, and messaging apps.
The malware checks for specific apps on the device, clones them into the virtual space, and uses the cloned version to collect data and track user behavior.
It can also steal device lock screen credentials using fake overlays that look like system prompts.
Attackers can control the infected phone remotely using a set of commands. These can perform swipes, open apps, change brightness, and simulate user actions.
How to stay safe- Avoid installing apps from unknown sources - always use official stores like Google Play.
- Check app permissions carefully. If an app asks for accessibility access or screen overlay permissions without a clear reason, uninstall it immediately.
- Keep your phone’s operating system updated.
- Use mobile security tools from trusted developers.
- Avoid sideloading APK files, even if shared by someone you know.
- Rebooting your phone regularly can help thwart any persistent malware.
- Pay attention to unusual behavior, such as faster than usual battery drain and weird, unexpected overlays.
- If your banking app ever looks different or asks for login more often than usual, stop using it and contact your bank.
- Stay protected with the best antivirus tools around
- We've also rounded up the best free antivirus solutions
- Japanese businesses are being bombarded with millions of phishing messages
- FiiO wants you to know that hi-res audio's about to go 'truly mainstream'
- …and the QX13 is priced to reflect that
- Made from 21 layers of carbon fiber for a lightweight yet durable build
You know what my favorite kind of audio gadget is? One that makes people go 'What is that?' ideally with the follow-up question, 'And also, what do the numbers mean?'
This is one such piece of kit. It's almost like the handheld super-computer Ziggy in Quantum Leap – because while nobody really understands everything about it, everyone agrees it's a Good Thing. And with Spotify HiFi launch rumors gathering momentum (recent reports suggest it might land in late 2025, and be called 'Spotify Music Pro'), when hi-res goes mainstream, you don't want to be left unable to take advantage…
What you're looking at is the FiiO QX13, a pocket DAC and headphone amp for your phone, laptop, or games console – a gateway to the world of hi-res audio on the go. And although it is a flagship product and one that marks 18 years of FiiO’s audio expertise, it isn't particularly pricey either.
New to the world of headphone DACs? That's fine: every product you own that accepts and plays a digital music signal (your phone, wireless earbuds, laptop, Bluetooth speakers, and so on) has its own built-in DAC.
The thing is, many of them are inexpensive, and adding a standalone dedicated (read: better) option to the audio path can level up what you hear a lot. Additionally, the added amplification can help give oomph and volume to hard-to-drive headphones wired up to your phone or a portable player.
How does this particular DAC work? Add any audio source with USB-C, and you've got it. You just breathed new life into your wired headphones.
The QX13 can fully decode MQA music and is compatible with file formats such as DSD512 and 768Hz / 32-bit tracks. A 3.5mm and balanced 4.4mm headphone socket ensures wide compatibility with all headphones, too.
(Image credit: FiiO )DAC's rightAnd it's quite a looker, no? The QX13 is made with 21 layers of carbon fiber for a lightweight yet durable build to show off its "extra large" 1.99-inch hardened IPS color display.
The QX13 also introduces the flagship Ess Sabre Pro ES9027PRO chip, recommended for use in full-size hi-fi systems. However, FiiO has achieved a "micro DAC/AMP design" created to make the most of your headphones and IEMs. The chip features 8 channels set up in parallel, and is paired with two ultra-low-noise ES9312 regulators for precise output matching on each audio channel.
Of course, FiiO would point you towards its own IEMs to pair them with – possibly the FiiO FH19 (which are very good indeed) and FiiO notes that the QX13 arrives with an (optional) magnetic leather case, compatible with the custom FiiO power 'estick' pack for lightweight portability with powerhouse performance in Desktop Mode. Choose the magnetic leather case to combine both devices in one unit.
The QX13 is now available, priced $219 / £219 (around AU$450), and if that sounds a little rich for your blood, note that rival iFi's flagship DAC, the iFi iDSD Valkyrie, comes in at a cool $1,699 / £1,699 / AU$2,999 (approx). So, there's that option also…
You may also like- USB-C audio in AirPods Max doesn't just sound great on paper: for me, Lossless audio quality finally makes them worth it
- Avid's first all-new turntable in 12 years is an $11k Relveo-lation
- See our pick of the best wired earbuds to pair with your DAC for hi-res audio
- Netflix bosses have said they "expect advertising revenue to roughly double in 2025"
- This is due to the introduction of personalized ads in the second half of the year
- However, this decision could put subscribers off Netflix's ad-supported tier
The best streaming services are always adding new features and trialing new things, but Netflix's decision to focus on interactive ads might frustrate subscribers.
Speaking in a conference call, Netflix co-CEO Gregory K. Peters said: "The most immediate benefit from this rollout is just making it easier for advertisers to buy on Netflix. We hear that benefit, that ease from direct feedback talking to advertisers. They tell us that it's easier. We see it in our overall sales performance."
He added: "There's also leveraging advertiser and third-party data sources, which we definitely hear demand for as well. And it will ultimately allow us to improve the ad experience for our members, which is critically important. So that means better ads personalization."
This isn't the only change Netflix has teased, as they also discussed making their adverts more interactive for viewers.
Peters concluded: "We're also going to be introducing interactivity in the second half of the year. So that's exciting. So that's all to say this is a pretty significant milestone for us, one we're super excited to get behind us because now we can shift into the steady release cycle where we're dropping new features all the time, both for advertisers and for members."
Focus on ads might provide frustration for Netflix subscribersSquid Game, Netflix's biggest non-English language series, recently came to an end in 2025. (Image credit: Netflix)If you're currently on Netflix's "with ads" plan, you should expect to see these changes coming soon. However, while it's an exciting time for the streamer, viewers may not be as enthusiastic.
Subscribers are currently paying $7.99 per month for Netflix Standard with Ads. And when you look at ad-free streaming services like Apple TV+, which charges slightly more at $9.99 per month, it might make people wonder if they're getting the best value for money.
Ad-supported tiers are common now, of course, with rival streaming services like Disney+ and Hulu also offering this option. But constant ad-breaks are a pain, and one of the reasons many of us move away from linear TV.
Everyone will have their own opinion on this decision, as some people don't mind the ad breaks and use them as an opportunity to have a break themselves. We'll just have to wait and see how these personalized ads do once the rollout is complete.
You might also like- Netflix uses generative AI VFX in a show for the first time, as CEO says ‘the cost just wouldn’t have been feasible for a show on that budget’
- The Late Show with Stephen Colbert’s cancelation is bad news for TV, but it might be the unscripted content news Netflix has been waiting for
- I watched Brick on Netflix so you don’t have to – here’s a far superior sci-fi thriller I recommend streaming instead
- ThinkPad X9 “White Moonlight” Edition’s Lunar Lake chips bring raw power, yet discrete GPU lovers are left in the cold
- Lenovo also removes red TrackPoint and physical buttons, erasing decades of ThinkPad identity
- Four ports on a premium laptop also feels like a design choice made without real users in mind
Lenovo has unveiled a new variant of its flagship ThinkPad business laptop range but has deviated from the black, boxy, and functional design principles which have sustained it for over three decades.
The new Lenovo ThinkPad X9 Aura “White Moonlight” Edition eliminates the iconic red TrackPoint and the physical touchpad buttons - in their place, this device offers a sleek white slab with only four ports.
The lack of a discrete GPU and premium price tag, starting around $1810, also make it a niche option rather than a broadly recommended pick.
Design and portability trade-offsAt just 1.4 kg and a svelte 6.8mm thick, the 14-inch model targets users who value extreme portability, and is one of the lightest laptop options Lenovo has ever produced.
It comes with Intel’s new Core Ultra chips based on the Lunar Lake platform (Core Ultra 7258V and Core Ultra 9 288V processors) and integrated Arc Xe2 graphics.
Combined with 32GB of LPDDR5x RAM and up to 2TB of PCIe-NVMe SSD storage, it can easily handle demanding business or creative tasks.
On paper, it checks off many of the features expected of a top business-focused device, as its 2.8K OLED display with HDR, 120Hz refresh rate, and 1ms response time should appeal to professionals who need clarity and speed.
Its on-device AI acceleration, up to 48 TOPS, is another nod toward the engineering and creative crowd, making it a contender for the best laptop for engineering students' needs as well.
Yet, practicality suffers because the drastic slimming down comes at a cost. With only two Thunderbolt 4 ports, an HDMI 2.1 port, and a 3.5mm headphone jack, users who rely on multiple external devices like USB-A devices, SD cards, and Ethernet may find the connectivity underwhelming.
At least it supports the latest wireless connectivity options, Wi-Fi 7 and Bluetooth 5.4.
The biggest sticking point, however, remains the design’s ideological shift - this machine feels less like a continuation of the ThinkPad ethos and more like a clean break.
The white finish and minimalist profile may attract new users, but long-time fans will wonder whether the brand has abandoned the very features that once made it iconic.
Via Videocardz
You might also like- Take a look at our picks for the best WFH app around
- Check out our recommendations for the best monitors for working from home
- This tower case can hold 15 x 36TB Seagate HDDs for up to 540TB storage
- Mounting SSDs on a GPU limits your ability to upgrade graphics and storage independently
- Shared PCIe bandwidth creates more complications than benefits for most desktop system builders
- Colorful iGame Ultra mid-range GPU is trying to do too much with too little justification
Colorful has revealed a curious hybrid product at Bilibili World 2025: a graphics card from its iGame Ultra series which features two M.2 SSD slots mounted directly onto the PCB.
The integration of storage and graphics processing may appear efficient for compact systems, but it raises questions about practicality and long-term value.
Colorful has not confirmed the GPU’s architecture, although observers believe it is based on Nvidia’s GB206 or GB207 silicon, possibly aligning with the RTX 5050 or 5060.
An integrated approach to graphics and storageThis configuration positions the card firmly in the mid-range category, far from what most would consider the best GPU tier.
The standout feature of this card is the presence of dual M.2 SSD slots on its backside, near the I/O bracket, allowing users to install drives without separate cabling.
These slots are supported by mounting points for heatsinks and are cooled by the same dual-fan system that manages the GPU itself.
By using PCIe bifurcation, the card splits a single x16 slot into eight lanes for graphics and four lanes each for the SSDs.
This setup aims to preserve bandwidth for both functions while reducing the need for additional expansion cards.
For builders working with limited motherboard M.2 slots or compact ITX cases, this could seem like a space-saving solution.
The cooling arrangement also suggests that SSD thermals will be actively managed under load - however, the benefits of this layout may not justify the compromises.
Attaching storage directly to a GPU introduces additional layers of complexity in system configuration, including BIOS support, lane sharing, and upgrade constraints.
Storage and graphics are typically upgraded on separate timelines, and combining them on a single board limits that flexibility.
Visually, the card adopts a clean, matte-white aesthetic that stands apart from the more common darker GPU designs.
While this may appeal to custom PC builders who prioritize appearance, the core performance considerations remain unchanged.
The SSD slots are unlikely to support the largest SSD capacities or deliver the best SSD speeds on the market, and the GPU itself, based on its probable architecture, is not aimed at top-tier performance.
This puts the product in a narrow use case, offering integration without delivering leadership in either category.
As of now, the company has not provided detailed specifications or pricing, and without this information, the card appears more experimental than practical.
This device is technically interesting, but it is not yet clear why such a product needs to exist beyond novelty.
For users who care about maximizing storage capacity, pursuing the best GPU performance, or building for future flexibility, this design may offer more limitations than advantages.
Via Guru3d
You might also like- Check out the best portable SSDs you can get today
- These are the best NAS devices around
- We've also rounded up the best cloud storage platforms on offer
- You can celebrate Disneyland's 70th at home via Disney+
- The streaming service has released 16 new Park POVs
- You can ride Radiator Spring Racers, Rise of the Resistance, and countless other attractions in exceptional quality
Disney Parks around the world are a whole host of fun, but what if I told you that you could experience and ‘ride’ some of the best attractions at Disneyland right from the comfort of your home? Well, that’s a possibility now for a handful of the best attractions, including classics and more modern debuts, as there are full ride POVs on Disney+.
These pro-shot, excellently edited ride-alongs for some of the most popular attractions at the original Disney park dropped this week in honor of the 70th anniversary of Disneyland, the same day the Walt Disney animatronic made its official debut. It’s also a massive expansion as Disney dropped a ride-along for Star Wars: Rise of the Resistance for May the 4th, just a few weeks back.
This is a much bigger drop, though, providing anyone with a Disney+ account a taste of Disneyland. 16 more ‘Parks POVs’ as the streamer puts it, have arrived, covering classics like Haunted Mansion and Big Thunder Mountain to Radiator Springs Racers and a walk-through of Cars land. The total of Park POVs is now at 17.
(Image credit: Disneyland)Whether you’re someone who frequents the parks, doesn’t go that often, or are in the lead-up to a visit, these are all pretty great. And the quality also bests what we’ve had on YouTube for years – you have the best seat with a camera in a rig (likely) right in the front row, and it’s all edited well, even turning to view something as you might on the ride.
Disney shot all of these with either a Sony FX6, RED Raptor, or a Ronin 4D, and the decision was made based on the attraction or land that was captured. The Sony FX6 was great in low-light scenarios, likely Rise of the Resistance and Cars Land. Regardless of the camera, these were mixed and mastered at UHD quality with HDR and SDR, with audio either in 5.1 or 2.0.
Even though it’s not particularly brand new this drop, I’d start with Rise of the Resistance, whether or not you're a Star Wars fan. It’s a tour-de-force of an attraction that combines multiple ride systems and, let’s be clear, join the resistance. After that, you can roam around Galaxy’s Edge West – aka Batuu – and might just encounter a Stormtrooper or two.
(Image credit: Disney+)All of these Parks POV are captured when the parks are empty as well, so you really get the feeling of a front row seat to the experience. After a trip into far, far away, I’d take a ride on Route 66 and check out Radiator Spring Racers – this is one of my favorite rides in all of Disney’s California Adventure.
You can see just how good the environment that Walt Disney Imagineering made, as the course really puts you into the film Cars – you can also stream that on one of the best streaming services, Disney+ – and after that, you can even mosey down the main boulevard of Radiator Springs and see the whole place come to life.
(Image credit: Disney+)Also captured here with this drop of 16 Disneyland Park POVs are Pirates of the Caribbean – complete with an extra drop that Disney World doesn’t have – Haunted Mansion, Jungle Cruise with a skipper just for yourself, Indiana Jones Adventure, Tiana’s Bayou Adventure, and even a walk down Main Street U.S.A.
Here’s a full list of the Park POVs dropped for Disneyland’s 70th on Disney+:
- 70th Celebration Nighttime Spectaculars
- Avengers Campus
- Big Thunder Mountain Railroad
- Cars Land
- Haunted Mansion
- Hollywood Land
- Indiana Jones Adventure
- Incredicoaster
- Jungle Cruise
- Main Street, U.S.A.
- Mickey's ToonTown
- Pirates of the Caribbean
- Pixar Pal-A-Round
- Radiator Springs Racers
- Soarin' Around the World
- Tiana's Bayou Adventure
I watched a good few of these already, and can share that they were a hit with my nieces as well. So, definitely fun for the whole family, and I especially like that it brings a bit of the Disney Parks into your home with excellent quality.
The super-cut of the new nighttime spectaculars, including 'Paint the Night' and 'It's Wondrous', is a really nice touch. You can read more about those and other elements of the 70th celebration for Disneyland here.
Let’s just hope there are more of these coming. I, for one, would love to see Guardians of the Galaxy, Tower of Terror, or Kilimanjaro Safaris from Disney World.
You can read more about Walt Disney - A Magical Life and our first thoughts on the new animatronic here. And if you're anything like me, here are eight new shows to watch soon on Hulu and Disney+.
You might also likeAn unfortunate couple excitedly traveled for hours for a chance to take a mountaintop cable car called the Kuak Skyride. They’d seen it online, complete with smiling tourists gliding along and a TV journalist narrating the whole video.
However, when the couple arrived, there was nothing but a small town and confused locals unaware of what they were talking about. Turns out it was all an AI-generated video that they had believed was real. That story, detailed in a report by Fast Company, sounds like it would be unique, but I suspect it's something everyone will have to consider when perusing the internet for ideas of things to buy or places to visit.
A small logo in the corner of the video indicates the video was made with Veo 3, Google’s newest AI video engine, and it's hardly the only indicator that the video is made with AI. The appearance of the people and the structures all has that AI sheen of unreality to it. However, if you're not well-versed in deepfakes or looking for the signs, you might not have noticed, as it would seem silly to be suspicious of a well-made tourist video.
However, our new reality is that AI can now sell you not just a product, but a place – and that place might never have existed before. Slightly wrong spelling and suspicious URLs are practically quaint in comparison. It wasn’t even clear whether the video was malicious or just someone’s misguided attempt at content creation. It’s easy to roll your eyes and say, it would never happen to you. But we all have blind spots. And AI is getting really good at aiming for them.
This is obviously a much more problematic use of AI video than showing cats as Olympic divers. Still, the necessity of really paying attention to spot the clues of an AI creation is universal.
AI travel tricksWe’re past the visual age of trust. In the AI era, even seeing is just the beginning of the vetting process. Of course, that doesn’t mean you should abandon all travel plans. However, it does mean that the average person now needs a new kind of consumer savvy, calibrated not just for Nigerian princes and surprise crypto pitches, but for video illusions and AI travel influencers who can go places no human can follow.
And that's before considering real places with review sections flooded by AI-written, fake testimonials extolling places, almost certainly with AI-generated exaggerations of things to do that don't exist outside of their own hallucinations.
Dealing with it might mean having to be suspicious of things that look too good to be true. You might need to cross-check multiple sources to see if they all agree that something is real. Maybe a reverse image search or public social media post search would be necessary. And when it comes to images and videos, make sure they aren't too perfect. If no one is frowning or sneezing in a crowd shot, I'd be wary about its reality.
It's unfortunate. I don't like the idea of seeing a beautiful location in a video and doubting its reality instead of planning a trip there. But maybe that’s the price of living in a world where anyone can make realistic illusions of almost-real worlds. But you'll need to do more to ensure you're headed somewhere with a foundation that's more than just pixels and algorithms.
You might also like- Midjourney just dropped its first AI video model and Sora and Veo 3 should be worried
- Forget virtual pets – the next AI video craze is cats doing Olympic diving, and it’s all thanks to this new Google Veo 3 rival
- I watched some of the viral ASMR videos made with AI and I feel more confused than soothed