Following the 2.5 Pro model update yesterday, Google is introducing “scheduled actions” to the Gemini app. more…

Following the 2.5 Pro model update yesterday, Google is introducing “scheduled actions” to the Gemini app. more…

Where others have become obsessed with speed and trends, Sergio Membrillas has built a career on slowing down and staying true to his craft. Over 13 years as a professional illustrator, he's evolved a distinct style – bold, graphic, and quietly playful – that feels both timeless and entirely his own. But this evolution, as he's quick to point out, wasn't something he forced. "I believe evolution is essential for every artist," Sergio reflects. "Change is not something I resist; it's something I enjoy and welcome as part of the creative journey." His work, initially influenced by a love of Mid-Century graphic design, has gradually absorbed references as diverse as Etruscan art, Mesopotamian motifs, and early 20th-century traditional tattoos. It's a portfolio built on curiosity, not conformity. Despite his stylistic clarity, Sergio's process remains refreshingly analogue at its core. He still begins each project with pencil and paper, leaning into the tactility of drawing by hand. "I've always valued having a physical relationship with art," he says. "There's something essential about feeling the wood of the pencil, manually erasing mistakes, rather than simply double-tapping a screen." His philosophy of working slowly, attentively, and with purpose shows in the balanced compositions and confident use of negative space that has become his signature. Sergio credits his background in graphic design for this instinctive sense of structure. "There has always been a strong graphic sensibility within me," he says, noting that the discipline of design continues to inform his illustration practice, particularly in editorial and poster work where clarity and storytelling must co-exist. Yet, like many creative careers, his path into illustration wasn't plotted from the start. Initially, Sergio imagined illustration would complement his design projects, not become the main event. "At first, I thought I would incorporate my illustrations into my graphic design projects – but in the end, it turned out to be the other way around." A commission for EasyJet's in-flight magazine marked a pivotal moment that reframed illustration from a hobby to a profession. "It made me realize that being an illustrator is a real profession, just like any other." Fast-forward to today, and Sergio's client list reads like a who's who of publishing and design, from The New Yorker to Pentagram. While the calibre of collaborators has changed, what matters most remains the same: trust. "When a client trusts your work and approaches projects with an open mind, collaboration flourishes," he says. It's in these open, trusting relationships that Sergio finds the space to experiment and further develop his ideas. Unsurprisingly, editorial work holds a special place for him. "Editorial projects offer wider creative margins, allowing for greater flexibility and innovation," he explains. Compared to the tighter confines of advertising, editorial illustration offers the opportunity to tell nuanced stories, and Sergio is clear that he views every assignment, regardless of format, as a collaborative effort. If one thing is clear, though, it's that he's not that he's afraid to say no when needed. Maintaining a strong personal voice is non-negotiable. "I always strive to stay true to myself and ensure that every project I undertake reflects a clear personal signature," he says. For Sergio, authenticity isn't just a matter of artistic pride; it's what differentiates an illustrator in a saturated, increasingly automated industry. Valencia is home for Sergio, a city he credits with much of his creative energy. "Oh, Valencia! It's a beautiful city that inspires me and brings me joy," he says, describing it as a European cousin to Los Angeles with its sun-soaked streets and vibrant cultural scene. The blend of tradition and modernity fuels his practice, offering constant inspiration without the sensory overload that often accompanies larger creative hubs. Given the pressure many creatives feel to keep pace with shifting trends, Sergio's approach feels almost radical. "I'm not particularly interested in trends," he says. "What truly matters to me is the feeling of having done something meaningful and fulfilling by the end of the day." Instead of chasing what's fashionable, he draws inspiration from a surprisingly eclectic bookshelf, mixing everything from Wim Crouwel's graphic design classics to studies on Scandinavian tattoos and Alec Soth's photography. It's a reminder that fresh ideas rarely come from looking where everyone else is looking. In the era of AI and content overload, the role of the illustrator is changing, but Sergio remains optimistic. While machine learning might churn out images at record speed, it can't replicate the nuance and emotional intelligence that underpin great illustration. "Illustrators can tell stories, evoke emotions, and create meaningful connections that machines simply cannot replicate," he says. "Our role is shifting, but the value of authentic, thoughtful illustration remains indispensable." That insistence on authenticity carries through to the advice he offers younger illustrators navigating a commercial landscape. "Create work that makes you happy when you go to sleep at night," Sergio advises. "It's important to find projects that align with your values and passions so your artistic voice remains authentic." It's an ethos that has carried him through more than a decade of creative highs and industry shifts. Perhaps it's the real secret behind the clarity of his practice, which he has built not on chasing trends or algorithms but on careful craft, deliberate evolution, and the simple, enduring joy of a well-made pencil and a blank piece of paper.

Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

Posted on : June 5, 2025 By Tech World Times Technology  Rate this post The Software as a Service (SaaS) industry has been on an unstoppable trajectory since its inception, revolutionizing how businesses and individuals consume and manage software. The landscape of subscription services within this sector continues to evolve at a rapid pace. Driven by customer expectations, technological advancements, and economic shifts, several trends are emerging that promise to reshape the SaaS industry. These trends will not only influence the way software is delivered and managed but also impact the overall subscription economy. Check out these subscription trends that are set to redefine the SaaS industry in the next few years. 1. Personalization and Customer-Centric Models Businesses are increasingly recognizing the value of tailored experiences, and SaaS companies are responding with personalized subscription offerings. By leveraging user data and machine learning algorithms, providers are crafting customized solutions that cater to individual needs, preferences, and usage patterns. Personalization also extends to the billing process, where SaaS payment processing systems are adapting to offer flexible pricing models, such as pay-per-use and tiered subscriptions. 2. Integrated Payment Solutions and Subscription Management SaaS payment processing will become a seamless and integrated part of the subscription experience. Innovations in financial technology will streamline the billing process, providing users with a unified dashboard to manage all their subscriptions. This will simplify financial management for both consumers and businesses. Companies will be able to offer various payment methods, automate billing cycles, and handle currency conversions with ease, making it easier for them to serve a global customer base. 3. The Rise of Usage-Based Pricing Usage-based pricing is gaining traction as a fair and transparent way to bill for cloud services. Instead of flat monthly or annual fees, SaaS providers will charge customers based on the actual resources consumed. This model aligns the cost with the value derived, encouraging more efficient use of resources and reducing waste. It also allows companies to scale more easily, leading to more granular and sophisticated pricing structures that can handle these complex calculations. 4. Subscription Model Innovation To stand out in a crowded market, SaaS companies are experimenting with innovative subscription models that go beyond the typical monthly or annual plans. These include freemium models, where users get a basic version of the software for free and pay for additional features, and dynamic pricing that adjusts based on demand and supply. The goal is to create a more nuanced pricing strategy that appeals to a wider range of customers and enhances the overall perceived value of the service. 5. Emphasis on User Experience and Customer Retention The importance of user experience is paramount in the SaaS industry, and in 2025, companies will invest heavily in creating delightful onboarding processes, intuitive user interfaces, and proactive customer support. The focus on customer retention will be a key driver for subscription growth, as it becomes more cost-effective than acquiring new ones. This shift will lead to the integration of more sophisticated tools for tracking customer engagement and satisfaction, allowing for targeted interventions to reduce churn rates. 6. Expansion into Emerging Markets As developed markets become saturated, SaaS companies are setting their sights on emerging economies. To cater to these diverse markets, providers will need to adapt their offerings to suit local preferences and constraints, such as language, cultural nuances, and payment methods. This trend will result in the rise of regional SaaS leaders and increased competition from local players, pushing the industry to become more global and inclusive. 7. Increased Adoption of AI and Automation Artificial intelligence and automation will play a significant role in the SaaS industry, optimizing everything from customer support to sales and marketing. Chatbots and virtual assistants will become commonplace for handling routine inquiries, while AI algorithms will be used to predict customer behavior and offer personalized recommendations. Automation will streamline backend processes, reducing costs and enhancing the overall efficiency of subscription management. This integration will lead to more intelligent and proactive services, with the potential for predictive analytics to anticipate customer needs before they even arise. The SaaS industry is poised for continued growth and evolution, with these seven subscription trends at the forefront. Personalization, integrated payment processing, usage-based pricing, innovative models, user experience enhancements, emerging market expansion, and the integration of AI and automation are all shaping the future of this dynamic sector. The most successful SaaS companies will be those that embrace these trends, adapting their offerings and operations to meet the changing demands of the modern subscription economy. With the right strategies in place, they will be able to deliver superior value to their customers and thrive in an increasingly competitive landscape. Tech World TimesTech World Times (TWT), a global collective focusing on the latest tech news and trends in blockchain, Fintech, Development & Testing, AI and Startups. If you are looking for the guest post then contact at techworldtimes@gmail.com

One of the key use cases for generative AI involves answering questions over private datasets, with retrieval-augmented generation (RAG) as the go-to framework. As new RAG techniques emerge, there’s a growing need to benchmark their performance across diverse datasets and metrics.  To meet this need, we’re introducing BenchmarkQED, a new suite of tools that automates RAG benchmarking at scale, available on GitHub (opens in new tab). It includes components for query generation, evaluation, and dataset preparation, each designed to support rigorous, reproducible testing.   BenchmarkQED complements the RAG methods in our open-source GraphRAG library, enabling users to run a GraphRAG-style evaluation across models, metrics, and datasets. GraphRAG uses a large language model (LLM) to generate and summarize entity-based knowledge graphs, producing more comprehensive and diverse answers than standard RAG for large-scale tasks.  In this post, we walk through the core components of BenchmarkQED that contribute to the overall benchmarking process. We also share some of the latest benchmark results comparing our LazyGraphRAG system to competing methods, including a vector-based RAG with a 1M-token context window, where the leading LazyGraphRAG configuration showed significant win rates across all combinations of quality metrics and query classes. In the paper, we distinguish between local queries, where answers are found in a small number of text regions, and sometimes even a single region, and global queries, which require reasoning over large portions of or even the entire dataset.  Conventional vector-based RAG excels at local queries because the regions containing the answer to the query resemble the query itself and can be retrieved as the nearest neighbor in the vector space of text embeddings. However, it struggles with global questions, such as, “What are the main themes of the dataset?” which require understanding dataset qualities not explicitly stated in the text.   AutoQ: Automated query synthesis This limitation motivated the development of GraphRAG a system designed to answer global queries. GraphRAG’s evaluation requirements subsequently led to the creation of AutoQ, a method for synthesizing these global queries for any dataset. AutoQ extends this approach by generating synthetic queries across the spectrum of queries, from local to global. It defines four distinct classes based on the source and scope of the query (Figure 1, top) forming a logical progression along the spectrum (Figure 1, bottom). Figure 1. Construction of a 2×2 design space for synthetic query generation with AutoQ, showing how the four resulting query classes map onto the local-global query spectrum.  AutoQ can be configured to generate any number and distribution of synthetic queries along these classes, enabling consistent benchmarking across datasets without requiring user customization. Figure 2 shows the synthesis process and sample queries from each class, using an AP News dataset. Figure 2. Synthesis process and example query for each of the four AutoQ query classes.  About Microsoft Research Advancing science and technology to benefit humanity View our story Opens in a new tab AutoE: Automated evaluation framework  Our evaluation of GraphRAG focused on analyzing key qualities of answers to global questions. The following qualities were used for the current evaluation: Comprehensiveness: Does the answer address all relevant aspects of the question?  Diversity: Does it present varied perspectives or insights?  Empowerment: Does it help the reader understand and make informed judgments?  Relevance: Does it address what the question is specifically asking?   The AutoE component scales evaluation of these qualities using the LLM-as-a-Judge method. It presents pairs of answers to an LLM, along with the query and target metric, in counterbalanced order. The model determines whether the first answer wins, loses, or ties with the second. Over a set of queries, whether from AutoQ or elsewhere, this produces win rates between competing methods. When ground truth is available, AutoE can also score answers on correctness, completeness, and related metrics. An illustrative evaluation is shown in Figure 3. Using a dataset of 1,397 AP News articles on health and healthcare, AutoQ generated 50 queries per class (200 total). AutoE then compared LazyGraphRAG to a competing RAG method, running six trials per query across four metrics, using GPT-4.1 as a judge. These trial-level results were aggregated using metric-based win rates, where each trial is scored 1 for a win, 0.5 for a tie, and 0 for a loss, and then averaged to calculate the overall win rate for each RAG method. Figure 3. Win rates of four LazyGraphRAG (LGR) configurations across methods, broken down by the AutoQ query class and averaged across AutoE’s four metrics: comprehensiveness, diversity, empowerment, and relevance. LazyGraphRAG outperforms comparison conditions where the bar is above 50%. The four LazyGraphRAG conditions (LGR_b200_c200, LGR_b50_c200, LGR_b50_c600, LGR_b200_c200_mini) differ by query budget (b50, b200) and chunk size (c200, c600). All used GPT-4o mini for relevance tests and GPT-4o for query expansion (to five subqueries) and answer generation, except for LGR_b200_c200_mini, which used GPT-4o mini throughout. Comparison systems were GraphRAG (Local, Global, and Drift Search), Vector RAG with 8k- and 120k-token windows, and three published methods: LightRAG (opens in new tab), RAPTOR (opens in new tab), and TREX (opens in new tab). All methods were limited to the same 8k tokens for answer generation. GraphRAG Global Search used level 2 of the community hierarchy. LazyGraphRAG outperformed every comparison condition using the same generative model (GPT-4o), winning all 96 comparisons, with all but one reaching statistical significance. The best overall performance came from the larger budget, smaller chunk size configuration (LGR_b200_c200). For DataLocal queries, the smaller budget (LGR_b50_c200) performed slightly better, likely because fewer chunks were relevant. For ActivityLocal queries, the larger chunk size (LGR_b50_c600) had a slight edge, likely because longer chunks provide a more coherent context. Competing methods performed relatively better on the query classes for which they were designed: GraphRAG Global for global queries, Vector RAG for local queries, and GraphRAG Drift Search, which combines both strategies, posed the strongest challenge overall. Increasing Vector RAG’s context window from 8k to 120k tokens did not improve its performance compared to LazyGraphRAG. This raised the question of how LazyGraphRAG would perform against Vector RAG with 1-million token context window containing most of the dataset. Figure 4 shows the follow-up experiment comparing LazyGraphRAG to Vector RAG using GPT-4.1 that enabled this comparison. Even against the 1M-token window, LazyGraphRAG achieved higher win rates across all comparisons, failing to reach significance only for the relevance of answers to DataLocal queries. These queries tend to benefit most from Vector RAG’s ranking of directly relevant chunks, making it hard for LazyGraphRAG to generate answers that have greater relevance to the query, even though these answers may be dramatically more comprehensive, diverse, and empowering overall. Figure 4. Win rates of LazyGraphRAG (LGR) over Vector RAG across different context window sizes, broken down by the four AutoQ query classes and four AutoE metrics: comprehensiveness, diversity, empowerment, and relevance. Bars above 50% indicate that LazyGraphRAG outperformed the comparison condition.  AutoD: Automated data sampling and summarization Text datasets have an underlying topical structure, but the depth, breadth, and connectivity of that structure can vary widely. This variability makes it difficult to evaluate RAG systems consistently, as results may reflect the idiosyncrasies of the dataset rather than the system’s general capabilities. The AutoD component addresses this by sampling datasets to meet a target specification, defined by the number of topic clusters (breadth) and the number of samples per cluster (depth). This creates consistency across datasets, enabling more meaningful comparisons, as structurally aligned datasets lead to comparable AutoQ queries, which in turn support consistent AutoE evaluations. AutoD also includes tools for summarizing input or output datasets in a way that reflects their topical coverage. These summaries play an important role in the AutoQ query synthesis process, but they can also be used more broadly, such as in prompts where context space is limited. Since the release of the GraphRAG paper, we’ve received many requests to share the dataset of the Behind the Tech (opens in new tab) podcast transcripts we used in our evaluation. An updated version of this dataset is now available in the BenchmarkQED repository (opens in new tab), alongside the AP News dataset containing 1,397 health-related articles, licensed for open release.   We hope these datasets, together with the BenchmarkQED tools (opens in new tab), help accelerate benchmark-driven development of RAG systems and AI question-answering. We invite the community to try them on GitHub (opens in new tab).  Opens in a new tab

Published June 5, 2025 10:00am EDT close Don’t be so quick to click that Google calendar invite. It could be a hacker’s trap Cybercriminals are sending fake meeting invitations that seem legitimate. NEWYou can now listen to Fox News articles! Americans’ personal data is now spread across more digital platforms than ever. From online shopping habits to fitness tracking logs, personal information ends up in hundreds of company databases. While most people worry about social media leaks or email hacks, a far less visible threat comes from data brokers.I still find it hard to believe that companies like this are allowed to operate with so little legal scrutiny. These firms trade in personal information without our knowledge or consent. What baffles me even more is that they aren’t serious about protecting the one thing that is central to their business model: data. Just last year, we saw news of a massive data breach at a data broker called National Public Data, which exposed 2.7 billion records. And now another data broker, LexisNexis, a major name in the industry, has reported a significant breach that exposed sensitive information from more than 364,000 people. A hacker at work (Kurt "CyberGuy" Knutsson)LexisNexis breach went undetected for months after holiday hackLexisNexis filed a notice with the Maine attorney general revealing that a hacker accessed consumer data through a third-party software development platform. The breach happened on Dec. 25, 2024, but the company only discovered it months later. LexisNexis was alerted on April 1, 2025, by an unnamed individual who claimed to have found sensitive files. It remains unclear whether this person was responsible for the breach or merely came across the exposed data.MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINSA spokesperson for LexisNexis confirmed that the hacker gained access to the company’s GitHub account. This is a platform commonly used by developers to store and collaborate on code. Security guidelines repeatedly warn against storing sensitive information in such repositories; however, mistakes such as exposed access tokens and personal data files continue to occur.The stolen data varies from person to person but includes full names, birthdates, phone numbers, mailing and email addresses, Social Security numbers and driver's license numbers. LexisNexis has not confirmed whether it received any ransom demand or had further contact with the attacker. An individual working on their laptop (Kurt "CyberGuy" Knutsson)Why the LexisNexis hack is a bigger threat than you realizeLexisNexis isn’t a household name for most people, but it plays a major role in how personal data is harvested and used behind the scenes. The company pulls information from a wide range of sources, compiling detailed profiles that help other businesses assess risk and detect fraud. Its clients include banks, insurance companies and government agencies.In 2023, the New York Times reported that several car manufacturers had been sharing driving data with LexisNexis without notifying vehicle owners. That information was then sold to insurance companies, which used it to adjust premiums based on individual driving behavior. The story made one thing clear. LexisNexis has access to a staggering amount of personal detail, even from people who have never willingly engaged with the company.Law enforcement also uses LexisNexis tools to dig up information on suspects. These systems offer access to phone records, home addresses and other historical data. While such tools might assist in investigations, they also highlight a serious issue. When this much sensitive information is concentrated in one place, it becomes a single point of failure. And as the recent breach shows, that failure is no longer hypothetical. A hacker at work (Kurt "CyberGuy" Knutsson)7 expert tips to protect your personal data after a data broker breachKeeping your personal data safe online can feel overwhelming, but a few practical steps can make a big difference in protecting your privacy and reducing your digital footprint. Here are 7 effective ways to take control of your information and keep it out of the wrong hands:1. Remove your data from the internet: The most effective way to take control of your data and avoid data brokers from selling it is to opt for data removal services. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.Get a free scan to find out if your personal information is already out on the web.2. Review privacy settings: Take a few minutes to explore the privacy and security settings on the services you use. For example, limit who can see your social media posts, disable unnecessary location-sharing on your phone and consider turning off ad personalization on accounts like Google and Facebook. Most browsers let you block third-party cookies or clear tracking data. The FTC suggests comparing the privacy notices of different sites and apps and choosing ones that let you opt out of sharing when possible.3. Use privacy-friendly tools: Install browser extensions or plugins that block ads and trackers (such as uBlock Origin or Privacy Badger). You might switch to a more private search engine (like DuckDuckGo or Brave) that doesn’t log your queries. Consider using a browser’s "incognito" or private mode when you don’t want your history saved, and regularly clear your cookies and cache. Even small habits, like logging out of accounts when not in use or using a password manager, make you less trackable.GET FOX BUSINESS ON THE GO BY CLICKING HERE4. Beware of phishing links and use strong antivirus software: Scammers may try to get access to your financial details and other important data using phishing links. The best way to safeguard yourself from malicious links is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.5. Be cautious with personal data: Think twice before sharing extra details. Don’t fill out online surveys or quizzes that ask for personal or financial information unless you trust the source. Create separate email addresses for sign-ups (so marketing emails don’t go to your main inbox). Only download apps from official stores and check app permissions.6. Opt out of data broker lists: Many data brokers offer ways to opt out or delete your information, though it can be a tedious process. For example, there are sites like Privacy Rights Clearinghouse or the Whitepages opt-out page that list popular brokers and their opt-out procedures. The FTC’s consumer guide, "Your Guide to Protecting Your Privacy Online," includes tips on opting out of targeted ads and removing yourself from people-search databases. Keep in mind you may have to repeat this every few months.7. Be wary of mailbox communications: Bad actors may also try to scam you through snail mail. The data leak gives them access to your address. They may impersonate people or brands you know and use themes that require urgent attention, such as missed deliveries, account suspensions and security alerts.Kurt’s key takeawayFor many, the LexisNexis breach may be the first time they realize just how much of their data is in circulation. Unlike a social media platform or a bank, there is no clear customer relationship with a data broker, and that makes it harder to demand transparency. This incident should prompt serious discussion around what kind of oversight is necessary in industries that operate in the shadows. A more informed public and stronger regulation may be the only things standing between personal data and permanent exposure.CLICK HERE TO GET THE FOX NEWS APPShould companies be allowed to sell your personal information without your consent? Let us know by writing us atCyberguy.com/Contact.For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you'd like us to cover.Follow Kurt on his social channels:Answers to the most-asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com. All rights reserved. Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on "FOX & Friends." Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

When it comes to Apple, all eyes are on AI. Generative AI (genAI) is the most disruptive technology we’ve seen in years; it is weaving itself into all parts of life – so why should IT management be left unscathed? It won’t be, and the latest AI-powered IT management features within the Jamf platform will soon be the kind of tools IT expects. Jamf is a leading Apple-in-the-enterprise device management (and security vendor recently began offering enterprise support for Android devices). The company has been working away on AI features to support its solutions for some time, and has at last introduced some of these at its Jamf Nation Live event. The tools are designed to boost efficiency and support better decision-making when it comes to handling your fleets. Of course, you’d expect anyone fielding genAI solutions to say something like that, so what do these tools do? Introducing Jamf AI Assistant Available as a beta, AI Assistant is designed to support tech support! That means it will help IT admins find what they need and help them understand how and why devices they do find are configured. Jamf splits these two paths into two categories: Search skill and Explain skill. Search skill lets admins perform natural language inventory queries across their managed fleets, enabling them to quickly find devices within their flotilla that meet the search parameters. The goal is to make it quicker and easier to audit managed devices for compliance, and to troubleshoot when things go wrong. Explain skill caters to another facet of an IT admin’s daily challenges. As Jamf explains, it means the genAI can translate complex configurations and policies into clear, easy-to-understand language. This helps admins make informed decisions, streamline troubleshooting and manage policies more confidently, says Jamf. While these new Jamf tools don’t automate much of the workload facing IT, it’s not hard to see how once the AI can understand what’s happening on a Mac and identify those devices that meet a set of parameters, the only missing piece is to automate some of the workflow in between. This, of course, is the direction of travel and will likely ripple across IT and every platform. Who knows, it might even make the cost of supporting Windows fleets almost as affordable as that of managing fleets of Apple devices. (Though I doubt it.) Beyond AI Jamf also made a handful of announcements outside of AI, including the general availability of Blueprints, a set of tools the company announced at JNUC last year. Blueprints builds on Apple’s Declarative Device Management framework and is designed to simplify and accelerate device configuration by consolidating policies, profiles and restrictions into a single, unified workflow. This makes a lot of sense on a road map to further AI deployment, as well as for anyone attempting to manage and deploy large Apple fleets. I imagine admins preparing for mammoth college- or school-wide deployments will have some optimism that Blueprints could help save time. Don’t neglect that education tech is expected to deploy thousands of devices in a few weeks, so these tools should be significant to them. Jamf continues working on Blueprints, and has introduced a beta release of Configuration Profiles within Blueprints. This tech consists of a new dynamic framework designed to help teams manage devices at scale, thanks to the new dynamic framework for MDM key delivery. Ticket to ride Jamf has offered a Self Service+ portal since earlier this year. Aimed at end-users, the system lets users request, download and update apps, as well as monitor their device security. Those features have been expanded with identity management tools, so users can view their accounts change passwords, and request things like temporary admin access. The beauty of Self Service+ is that it enables users to do these things autonomously while keeping their devices fully auditable and compliant. The idea is that it’s a lot better to focus the expensive tech support teams on the big problems, rather than seeing them bogged down in small, transient (albeit important), challenges.  The company also introduced Compliance Benchmarks. Based on Apple’s macOS Security Compliance Project (mSCP), this system helps IT automate the process of securing their Apple devices. Jamf has also added malware detection to its App Installers module, which means every application made available through that system is scanned to maintain security confidence. That’s really important to companies attempting to provision apps to employees, particularly if they want to avoid accidental installs of hacked malware posing as the original app. You can follow me on social media! Join me on BlueSky,  LinkedIn, and Mastodon.

In my last Fast Company column, I shared my reasons for manufacturing my electric trucks in the U.S. I’m not alone. While near-shoring to North America has been underway for several years, the current tariff shifts and shipping complexities make U.S. manufacturing a higher priority still. However, there were 292,825 factories in the U.S. as of 2021. Of those, 846 employ 1,000 people or more. Some of these are my engineering firm’s clients, giving us a front row seat to the complexity of retrofitting an existing factory to full U.S. manufacturing. While building a new factory is expensive and lengthy, these companies’ tasks are more difficult still. There are good reasons for making the shift as quickly as possible. Moving to most or fully U.S. manufacturing brings higher visibility, faster response time, and higher resilience to supply chain disruption, as well as greater protection from tariff shifts and geopolitical change. But if you’re early in the process, here’s my advice for your transition: Determine a priority ranking for the refining and raw materials you shift to in-country and North American sourcing. Give highest ranking to categories including defense, high value items (such as steel, aluminum, and rare minerals, etc.), and consumer safety items (such as pharmaceutical components, etc.). Be more strategic in the offshore suppliers you continue using for non-advanced manufacturing by prioritizing closer and more geographic-friendly locations for production and shipment such as Mexico and Argentina. Utilize government-backed capital, where possible, for extracting/mining minerals and metals such as lithium, red mud, magnesium, etc. Beyond the high-ranking product categories, move to domestic suppliers for primary materials such as steel, aluminum, cement, and plastics. Likewise, reduce offshoring of technical staff as well as raw materials, where possible. Use all means possible to become power independent through solar production, micro-grids, and nuclear power production. Consider creating a 4-year completion bonus for military vets. Hire vets wherever possible, as they make great workers and entrepreneurs. Likewise, we can press for future policy changes that best support Made in America manufacturing, as follows: Encourage ship building in the U.S., as well as creating new means of automated freight transit. Work towards transformation plans for government-funded R&D to include more attractive loans, rebates, and grants, as well as programs for tax-free status for intellectual property during commercialization, to incent and support organizations making the shift. Consider energy rebates to U.S. manufacturers and distributors to make American manufacturing more cost-effective and viable.   Create policies to include the cost of offshore staff in tariff calculations. Expand trade relationships with Caribbean nations for products such as sugar, avocados, bananas, etc. Avoid or even ban foreign ownership of the food supply chain. Create fair competition for government contracting. Make health supplements and homeopathic medicines tax deductible, to promote a healthy workforce. While it may not be readily evident, these policy changes are related to successful reshoring. In all, we need larger scale, lower costs, and more automated and simplified mechanisms for product manufacturing. These issues, in my experience, are as equally important as the raw materials we require. We need increased support for niche manufacturing. In my opinion, we also need deregulation, and increased access to land (particularly in the west; the federal government owns great quantities of the available land, which is choking available supply). I believe we need better education, self-reliance, health, and incentive structures to get the capital, entrepreneurs, and workers for Made in America manufacturing. Who’s with me? Matthew Chang is the founding partner of Chang Robotics.

iOS 19—or is it iOS 26, as rumors suggest?—is nearly here. Apple will almost assuredly announce the latest version of the iPhone's OS next week at WWDC 2025. As such, rumors about iOS 26's features have been coming in fast, and only more so as we approach the big event. Although none of these rumors can be confirmed at the moment, they still give us a good idea about what Apple might be considering behind the scenes.Is Apple changing iOS' name?Seems that way. While we (logically) thought the next version of iOS would be called iOS 19, Apple reportedly has other plans in place. According to Bloomberg's Mark Gurman, iOS 19 will be iOS 26, taking the name of the following year. Apple is reportedly doing this with all of its OS titles, including iPadOS 26, macOS 26, watchOS 26, and visionOS 26. A fresh look for iOS 26While iOS has changed considerably in recent years, the overall design language still follows the last big UI overhaul: 2013's iOS 7. It's been nearly 12 years since Apple has mixed things up, leaving users to design their own Lock Screens and app icons. According to Gurman, however, that might change with iOS 26, as well as iPadOS 26 and macOS 26. The details are scarce, but Gurman reports sources within Apple say the company wants to better align the design languages across its various products, without merging those OSes entirely, while also simplifying the way you interact with these devices. That means iOS 26 could adopt the design of visionOS, which uses circles instead of squares for app icons, translucent window elements, and the adoption of 3D—though that latter element may be difficult to translate on a 2D display.You can see those elements on display in this concept video from Jon Prosser. If the rumors are correct, we could be looking at "one of the most dramatic software overhauls in the company’s history." In addition to a new look, iOS may be getting a little less buggy. Gurman says that stability is a big priority for Apple this year, which is music to my ears.Live translation for AirPodsGurman also says that Apple is working on a live translation feature for certain AirPods models. If you're having a conversation with someone who is speaking a language you don't know, your AirPods will translate and dictate those words in your target language automatically. When you speak, your words will be translated and dictated by your iPhone, via the Translate app. This feature isn't groundbreaking—Google's Pixel Buds have offered it for years. But it'd be a great addition to iOS 26, and to AirPods users. Accessibility featuresApple doesn't reveal much about its upcoming updates before officially announcing them, but accessibility features are an exception. Last month, the company unveiled a list of accessibility features coming to devices "later this year." While they don't name iOS 26 and other "26" updates, it's pretty obvious those are the updates we'll see them in. There's a new Accessibility Reader feature that makes text easier to read across iOS; Magnifier is coming to Mac; you'll see "Accessibility nutrition" labels on the App Store, to denote how accessible an app is; Apple Watch is getting Live Captions, and Vehicle Motion Cues are coming to the Mac. 'Desktop' modeRumor has it that Apple is working on a "Stage Manager-like" desktop mode for USB-C iPhones with iOS 26. The feature would let you plug your iPhone into an external monitor, so you can extend your iPhone's screen to the larger display.This might not be a true "desktop mode" experience, like Samsung DeX, in that you might not be able to use your iPhone as a portable computer this way. But it could make it easier to share your iPhone's display when you want to connect to a larger screen. You only need to sign into public wifi networks onceIf you use multiple devices on public wifi networks, it's a pain to connect each one manually. That might be changing with Apple's upcoming updates: Gurman says that once updated, you'll only need to log into the wifi with one Apple device (your iPhone, iPad, or Mac) and the rest will automatically connect.Battery upgradesHere's a great use for AI: optimizing battery life. Rumor has it iOS 26 will analyze your usage habits and determine the right times to lower performance in the name of preserving battery life. Extending the amount of time between charges is something we can all get behind. In addition, the company may add a charging indicator to the lock screen, so you know how long your battery has left to charge. This small feature has been sorely missing on iPhones for years. Apple offers it on MacBooks, but only in Activity Monitor. I hope its brings it back to the menu bar in a future update. Your iPhone will (probably) run iOS 26With any luck, your current iPhone should be compatible with iOS 26, assuming you're currently running the latest software. Citing a source within Apple, French website iPhoneSoft.fr reports that any phone that runs iOS 18 should be compatible with iOS 26 as well. However, the iPad 7 will supposedly not be so lucky, as the website says it will not be included in the iPadOS 26 update.However, a MacRumors source says that Apple plans to drop the iPhone XR, XS, and XS Max this year. We'll have to wait and see what Apple announces on Monday to find out which phones will still be supported.A new gaming appAccording to Gurman, Apple is working on a dedicated gaming app for iOS, iPadOS, macOS, and tvOS, meant to replace the existing Game Center. The app will both let you launch titles, as well as check leader boards, chat with friends, and see your achievements. If true, it'll be interesting timing, considering the announcement will come four days after the launch of the Nintendo Switch 2. I have my doubts that such an app could compete with a gaming titan like Nintendo, or that this will really expand beyond the traditional short and sweet mobile game experience, but who knows. Maybe Apple is about to become a serious gaming company. (I doubt it.)Shortcuts get Apple Intelligence integrationThe Shortcuts app lets you set up "shortcuts," which you can use to automate tasks across your Apple devices. Gurman says with iOS 26, Apple is integrating Apple Intelligence into the Shortcuts app, which might let you create shortcuts with natural language—or, in other words, describe the shortcuts you want and have the AI build them for you. Small updatesAccording to 9to5Mac, Apple has plans to add a new feature or two to a handful of apps. That includes:Messages: Automatic translation for incoming and outgoing messages, as well as polls.Music: Full-screen animated artwork on the lock screenNotes: Markdown support, a huge plus for pro-notes usersCarPlay: A redesigned UI to compliment iOS 26The merging of Siri and Apple IntelligenceAccording to Gurman, Apple plans to merge Siri with Apple Intelligence sometime during the iOS 26 patch cycle. Yes, the assistant is currently listed as being part of Apple Intelligence, but behind the scenes, it supposedly has a new LLM in the works that would unify its currently split architecture and allow it to more frequently handle complex requests. As of now, its AI features are much more limited, and most of Siri doesn't use this type of AI at all.Gurman says he expects the merger to be completed by spring of 2026 with the launch of iOS 26.4. His report states that, originally, Apple's plan was to launch a more conversational Siri in the same update, but that's been delayed and is not expected to be unveiled at WWDC 2025.Gurman also indicates that because Apple has not yet completed last year's Apple Intelligence feature rollout, any unannounced features shouldn't be expected for a while.