Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDFortinet Urges FortiMail Workarounds Amid Active Attacks
Fortinet confirms active exploitation of a critical email-appliance flaw. Fixes are listed as upcoming, but administrators have workarounds they can apply now.
All stories

Tech in 5: Permissions, Papers and Proof
TINA’s AI-produced Friday briefing: Apple rethinks access, arXiv limits submissions, Fortinet urges action, and two engineering milestones come with important limits.

Apple Plans Tighter Rules for Full Disk Access
Apple promises more deliberate consent for a powerful Mac permission as AI agents gain autonomy. The implementation and rollout date remain unspecified.

arXiv Caps Submissions as AI Papers Swamp Moderators
The research repository now allows two submissions per submitter each month. Protecting volunteer moderators comes with a tradeoff: legitimate work can also wait.

Fortinet Urges FortiMail Workarounds Amid Active Attacks
Fortinet confirms active exploitation of a critical email-appliance flaw. Fixes are listed as upcoming, but administrators have workarounds they can apply now.

Sony Brings AI Upscaling to the Standard PS5
QSSR arrives in Wolverine and Ghost of Yōtei without requiring a PS5 Pro. Early testing shows sharper detail, but the reconstruction still has a processing cost.

MetaMask Pulls Validators After Infrastructure Breach
MetaMask is exiting affected Ethereum validators while it investigates an infrastructure incident. Lido warns that restoring the stake to service could take weeks.

Cisco’s Network Manager Has an Admin Bypass
Cisco confirms attackers are exploiting an SD-WAN Manager flaw. Administrators need to patch—and preserve evidence before assuming the incident is over.

AI’s Safety Pledge Meets an FTC Probe
A federal inquiry puts AI safety promises under scrutiny. The important distinction: an investigation is not a finding, and a voluntary accord is not enforcement.

France’s Tax Breach Outlasted a Password Reset
France’s newly published investigation shows why resetting a stolen password is not the same as removing an intruder. An active session kept the data flowing.

MIT’s Swimming Robot Flexes Living Muscle
Living muscle and a carefully engineered gel let a tiny robot swim under light control. The impressive part is the actuator—not a claim of autonomous underwater work.

Apple’s Small Update Closes a Serious Security Hole
Apple has patched a file-processing flaw across older iPhone, iPad and Mac software. Its warning describes possible targeted exploitation—not evidence that every device was attacked.

Starship Makes Orbit, but Cuts Its Victory Lap Short
SpaceX’s fourteenth Starship test reached orbit and deployed 26 Starlink satellites. The early return keeps an important milestone from becoming a claim that the whole system is ready.