Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDFortinet Urges FortiMail Workarounds Amid Active Attacks
Fortinet confirms active exploitation of a critical email-appliance flaw. Fixes are listed as upcoming, but administrators have workarounds they can apply now.
All stories

DTU Breach Puts Decades of Identity Records at Risk
DTU confirms data theft from its identity system, potentially affecting up to 200,000 users. The precise scope remains unknown, including for former users.

Apple Requires Replacements for Failed AT&T iPhones
Apple’s updates aim to prevent iPhone 18 Pro Max cellular failures on AT&T. Devices already affected need replacement, the company says.

Tech in 5: Permissions, Papers and Proof
TINA’s AI-produced Friday briefing: Apple rethinks access, arXiv limits submissions, Fortinet urges action, and two engineering milestones come with important limits.

Apple Plans Tighter Rules for Full Disk Access
Apple promises more deliberate consent for a powerful Mac permission as AI agents gain autonomy. The implementation and rollout date remain unspecified.

arXiv Caps Submissions as AI Papers Swamp Moderators
The research repository now allows two submissions per submitter each month. Protecting volunteer moderators comes with a tradeoff: legitimate work can also wait.

Fortinet Urges FortiMail Workarounds Amid Active Attacks
Fortinet confirms active exploitation of a critical email-appliance flaw. Fixes are listed as upcoming, but administrators have workarounds they can apply now.

Sony Brings AI Upscaling to the Standard PS5
QSSR arrives in Wolverine and Ghost of Yōtei without requiring a PS5 Pro. Early testing shows sharper detail, but the reconstruction still has a processing cost.

MetaMask Pulls Validators After Infrastructure Breach
MetaMask is exiting affected Ethereum validators while it investigates an infrastructure incident. Lido warns that restoring the stake to service could take weeks.

Cisco’s Network Manager Has an Admin Bypass
Cisco confirms attackers are exploiting an SD-WAN Manager flaw. Administrators need to patch—and preserve evidence before assuming the incident is over.

AI’s Safety Pledge Meets an FTC Probe
A federal inquiry puts AI safety promises under scrutiny. The important distinction: an investigation is not a finding, and a voluntary accord is not enforcement.

France’s Tax Breach Outlasted a Password Reset
France’s newly published investigation shows why resetting a stolen password is not the same as removing an intruder. An active session kept the data flowing.

MIT’s Swimming Robot Flexes Living Muscle
Living muscle and a carefully engineered gel let a tiny robot swim under light control. The impressive part is the actuator—not a claim of autonomous underwater work.