BadBox malware has been menacing low-cost Android devices for nearly a decade.

Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

Congress loves SLS Senate response to White House budget for NASA: Keep SLS, nix science Gateway is back, baby. Eric Berger – Jun 5, 2025 7:55 pm | 77 Senate Commerce Committee Chairman Ted Cruz (R-Texas) at a hearing on Tuesday, January 28, 2025. Credit: Getty Images | Tom Williams Senate Commerce Committee Chairman Ted Cruz (R-Texas) at a hearing on Tuesday, January 28, 2025. Credit: Getty Images | Tom Williams Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only   Learn more Negotiations over the US federal budget for fiscal year 2026 are in the beginning stages, but when it comes to space, the fault lines are already solidifying in the Senate. The Trump White House released its budget request last Friday, and this included detailed information about its plans for NASA. On Thursday, just days later, the US Senate shot back with its own budget priorities for the space agency. The US budget process is complicated and somewhat broken in recent years, as Congress has failed to pass a budget on time. So, we are probably at least several months away from seeing a final fiscal year 2026 budget from Congress. But we got our first glimpse of the Senate's thinking when the chair of the Committee on Commerce, Science, and Transportation, Sen. Ted Cruz (R-Texas) released his "legislative directives" for NASA on Thursday These specific directives concern "reconciliation" for the current budget year, which are supplemental appropriations for NASA and other federal agencies under the purview of Cruz's committee. And this committee does not actually write the budget; that's left to appropriations committees in the House and Senate. Senate space priorities However, Cruz is one of the most important voices in the US Senate on space policy, and the directives released Thursday indicate where he intends to line up on NASA during the upcoming budget fights. Here is how his budget ideas align with the White House priorities in three key areas: Science: The Trump White House budget sought to significantly cut the space agency's science budget, from $7.33 billion to $3.91 billion, including the cancellation of some major missions. Cruz makes no comment on most of the science budget, but in calling for a Mars Telecommunications Orbiter, he is signaling support for a Mars Sample Return Mission. Lunar Gateway: The Trump administration called for the cancellation of a small space station to be built in an elongated lunar orbit. There is very uneven support for this in the space community, but it is being led at Johnson Space Center, in Cruz's home state. Cruz says Congress should "fully fund" the Gateway as "critical" infrastructure. Space Launch System and Orion: The Trump administration sought to cancel the large expensive rocket and spacecraft after Artemis III, the first lunar landing. Cruz calls for additional funding for at least Artemis IV and Artemis V. This legislation, the committee said in a messaging document, "Dedicates almost $10 billion to win the new space race with China and ensure America dominates space. Makes targeted, critical investments in Mars-forward technology, Artemis Missions and Moon to Mars program, and the International Space Station." The reality is that it signals that Republicans in the US Senate are not particularly interested in sending humans to Mars, probably are OK with the majority of cuts to science programs at NASA, and want to keep the status quo on Artemis, including the Space Launch System rocket. Where things go from here It is difficult to forecast where US space policy will go from here. The very public breakup between President Trump and SpaceX founder Elon Musk on Thursday significantly complicates the equation. At one point, Trump and Musk were both championing sending humans to Mars, but Musk is gone from the administration, and Trump may abandon that idea due to their rift. For what it's worth, a political appointee in NASA Communications said on Thursday that the president's vision for space—Trump spoke of landing humans on Mars frequently during his campaign speeches—will continue to be implemented. "NASA will continue to execute upon the President’s vision for the future of space," NASA's press secretary, Bethany Stevens, said on X. "We will continue to work with our industry partners to ensure the President’s objectives in space are met." Congress, it seems, may be heading in a different direction. Eric Berger Senior Space Editor Eric Berger Senior Space Editor Eric Berger is the senior space editor at Ars Technica, covering everything from astronomy to private space to NASA policy, and author of two books: Liftoff, about the rise of SpaceX; and Reentry, on the development of the Falcon 9 rocket and Dragon. A certified meteorologist, Eric lives in Houston. 77 Comments

Workday has presented new developer tools to help enterprises connect its HR and finance software with external agents. The tools are an extension of the company’s Illuminate agentic AI platform, and include the Agent Gatewa

Key Takeaways New EU rules take effect June 20, 2025, requiring mobile phones and tablets to be easier and cheaper to repair, including mandatory access to spare parts for up to seven years. Devices must meet durability standards, such as resistance to drops, water, and dust, and batteries must retain 80% capacity after 800 cycles. Manufacturers must offer 5 years of software updates and grant repair professionals access to firmware and repair tools to ensure long-term device usability. Energy consumption is expected to drop, with households projected to save €98 over five years due to longer-lasting, more repairable devices. In a win for the right to repair, the European Union (EU) has released its new energy labeling and ecodesign requirements for mobile phones, tablets, and even cordless phones.  Once implemented, this would help extend the product lifetime of these devices by making them cheaper and easier to repair. Up Ahead: Long-Lasting and Easy-to-Repair Devices The new ecodesign and energy labeling regulations will apply to devices sold in the EU effective June 20, 2025. One key area is the availability of spare parts. Once the regulations take effect, critical spare parts for a device must remain available for seven years from the last day the producer stops selling it. These parts must also be available to repairers within 5–10 working days. Mobile phones, cordless phones, and tablets under the ecodesign regulations must also be resistant to scratches and accidental drops, and be protected from dust and water.  The EU also specified that batteries must withstand at least 800 charge and discharge cycles while holding 80% of their initial capacity. These measures could help ensure devices last longer, thus reducing the need to replace them and lowering their cost of ownership. The requirements go beyond just the hardware. On the software side, manufacturers must also provide at least 5 years of operating system upgrades and give professional repairers access to software or firmware.  These would allow devices to continue to run smoothly and protect them from security vulnerabilities. On top of the ecodesign requirements, the EU also specified energy labeling requirements on the applicable devices. The labels would provide information about the device’s repairability score, energy efficiency, battery longevity, dust and water protection, and resistance to accidental drops. Having clear and easy-to-understand labels can help consumers in the EU make better choices when buying phones and tablets. They’ll know at a glance whether a device can withstand drops or if the batteries will remain reliable for as long as possible. The Projected Impact of the Ecodesign and Energy Labeling Requirements With the new requirements, the EU expects a significant reduction in the energy consumption of the applicable devices. Regarding charging time, this should go down from 2.5 to 1.75 hours per day.  Also, the annual electrical consumption of high-end smartphones is projected to decrease by 25%, while it’s 23% for tablets by 2030. Making devices easier to repair is also seen to reduce the acquisition costs of devices by € 98 per household in five years. A Win for the Right to Repair, But Obstacles Lie Ahead While the EU has already made significant progress in the area of the right to repair, many countries remain well behind. In the US, for instance, only a handful of states like California and Colorado have already enacted right-to-repair laws, while most of the country has yet to catch up. Without laws like these, most manufacturers won’t have the incentive to make their devices easier to repair.  A quick look at iFixit’s smartphone repairability scores shows that only Fairphone, which scored a perfect 10, HMD (9), and Nokia (8) had high scores among current phones. At the same time, Apple’s iPhone 16 line received a respectable 7. The Fairphone 5, launched in 2023, is especially notable for its repairability. According to iFixit, it’s easy to disassemble with common tools, the battery can be replaced quickly, and manuals and replacement parts are available to DIYers. As for the others, Ifixit gave Google’s Pixel 9 series a 5 for making it difficult to remove the battery and the USB-C port and requiring a replacement adhesive to secure the screen or back glass instead of using clips or fasteners. Meanwhile, the Samsung Galaxy S23 Ultra received a 4 because the battery is attached with a strong adhesive, and repairing the screen needs a lot of disassembly. All in all, we remain hopeful that with the EU’s lead, manufacturers can finally be encouraged to make repairing their devices easier than ever before. As technology continues to evolve—from the return of 'dumbphones' to faster and sleeker computers—seasoned tech journalist, Cedric Solidon, continues to dedicate himself to writing stories that inform, empower, and connect with readers across all levels of digital literacy. With 20 years of professional writing experience, this University of the Philippines Journalism graduate has carved out a niche as a trusted voice in tech media. Whether he's breaking down the latest advancements in cybersecurity or explaining how silicon-carbon batteries can extend your phone’s battery life, his writing remains rooted in clarity, curiosity, and utility. Long before he was writing for Techreport, HP, Citrix, SAP, Globe Telecom, CyberGhost VPN, and ExpressVPN, Cedric's love for technology began at home courtesy of a Nintendo Family Computer and a stack of tech magazines. Growing up, his days were often filled with sessions of Contra, Bomberman, Red Alert 2, and the criminally underrated Crusader: No Regret. But gaming wasn't his only gateway to tech.  He devoured every T3, PCMag, and PC Gamer issue he could get his hands on, often reading them cover to cover. It wasn’t long before he explored the early web in IRC chatrooms, online forums, and fledgling tech blogs, soaking in every byte of knowledge from the late '90s and early 2000s internet boom. That fascination with tech didn’t just stick. It evolved into a full-blown calling. After graduating with a degree in Journalism, he began his writing career at the dawn of Web 2.0. What started with small editorial roles and freelance gigs soon grew into a full-fledged career. He has since collaborated with global tech leaders, lending his voice to content that bridges technical expertise with everyday usability. He’s also written annual reports for Globe Telecom and consumer-friendly guides for VPN companies like CyberGhost and ExpressVPN, empowering readers to understand the importance of digital privacy. His versatility spans not just tech journalism but also technical writing. He once worked with a local tech company developing web and mobile apps for logistics firms, crafting documentation and communication materials that brought together user-friendliness with deep technical understanding. That experience sharpened his ability to break down dense, often jargon-heavy material into content that speaks clearly to both developers and decision-makers. At the heart of his work lies a simple belief: technology should feel empowering, not intimidating. Even if the likes of smartphones and AI are now commonplace, he understands that there's still a knowledge gap, especially when it comes to hardware or the real-world benefits of new tools. His writing hopes to help close that gap. Cedric’s writing style reflects that mission. It’s friendly without being fluffy and informative without being overwhelming. Whether writing for seasoned IT professionals or casual readers curious about the latest gadgets, he focuses on how a piece of technology can improve our lives, boost our productivity, or make our work more efficient. That human-first approach makes his content feel more like a conversation than a technical manual. As his writing career progresses, his passion for tech journalism remains as strong as ever. With the growing need for accessible, responsible tech communication, he sees his role not just as a journalist but as a guide who helps readers navigate a digital world that’s often as confusing as it is exciting. From reviewing the latest devices to unpacking global tech trends, Cedric isn’t just reporting on the future; he’s helping to write it. View all articles by Cedric Solidon Our editorial process The Tech Report editorial policy is centered on providing helpful, accurate content that offers real value to our readers. We only work with experienced writers who have specific knowledge in the topics they cover, including latest developments in technology, online privacy, cryptocurrencies, software, and more. Our editorial policy ensures that each topic is researched and curated by our in-house editors. We maintain rigorous journalistic standards, and every article is 100% written by real authors.

The duo will create a ball sports arena for local teams and the wider community, providing a new public square and gateway to an exhibition park in České Budějovice, a city 120km south of Prague. Inspired by the Möbius strip – a continuous surface with only one side and one edge – the winning design aims to reflect ‘energy, unity, and perpetual motion’ and serve as a catalyst for positive transformation in České Budějovice. WilkinsonEyre board director Sam Wright said: ‘We are thrilled to have been selected for this exciting project, which presents a unique opportunity to build on our design expertise and passion for sports architecture.Advertisement ‘We look forward to collaborating with our partners to create a world-class venue that inspires both athletes and spectators alike.’ Boele founding director Petr Suma, who has worked at both WilkinsonEyre and London-based William Matthews Architects, said: ‘By revitalising and redefining the southern entrance to the České Budějovice Exhibition Grounds, this project creates a catalyst for new development on the left bank of České Budějovice.’ Though the arena is primarily for volleyball, it will also host a range of ball sports, including handball, floorball, basketball and futsal, as well as concerts and conferences. The winning proposal was selected unanimously from 29 entries, and construction is expected to begin next year. České Budějovice is a major industrial centre with around 96,000 residents. Local landmarks include the Budweiser Budvar Brewery, the Baroque-style Museum of South Bohemia and the Neo-Gothic Church of the Presentation of the Blessed Virgin Mary.Advertisement A separate contest to remasterplan České Budějovice was launched early last year.

솔트웨어에 따르면 콩은 오픈소스 기반의 API 게이트웨이 및 서비스 메시 기술을 제공하는 기업으로, 초경량 고성능 API 게이트웨이 ‘콩 게이트웨이(Kong Gateway)’, 클라우드 기반 통합 API 관리 플랫폼 ‘콩 커넥트(Kong Konnect)’, 서비스 메시 솔루션 ‘콩 메시(Kong Mesh)’ 등 제품군을 통해 API 수명주기 전반(설계-보안-관측성)과 멀티클라우드/하이브리드 환경을 지원하

You know the scene: someone reaches for a suspiciously dusty book in a stately library, the bookshelf creaks, and boom—a hidden passage swings open. Maybe it’s a secret tunnel, maybe it’s a villain’s lair, maybe it’s just where they keep the good snacks. Either way, it’s drama. It’s mystery. It’s very extra. And guess what? That magic is no longer reserved for Scooby-Doo or Sherlock Holmes.Thanks to interior designers’ customization offerings, as well as hidden-door-specific brands such as Murphy Door and Creative Home Engineering, those secret swings and sneaky reveals are showing up in real-life homes—and homeowners are absolutely obsessed. Like, “I’ll take three, please and thank you” obsessed.Designer Lynn Kloythanomsup of Landed Interiors and Home installed a Murphy Door to conceal a hallway bathroom in a San Francisco home.Haris KenjarTa-da! With a push of the shelf a pretty powder room is revealed.Haris KenjarThese cleverly disguised doors are popping up everywhere, from kitchens and closets to home offices and bedrooms, proving that the only thing better than good design is a good surprise. “There’s nothing better than a hidden surprise,” says interior designer Maria Vassiliou of Maria Zoe Designs. Shock value aside, Murphy doors can also have practical benefits as well. “Hidden doors often come with features like shelving, allowing for better organization and use of space,” says Vassiliou. They can also be designed to blend seamlessly with cabinetry.”Translation: not only do hidden doors look cool, they can actually do something. (Imagine that!) Here’s everything you need to know about hidden doors.A built in bookcase with a secret tucked within a modern mountain barn by A Classical Studio. Heidi HarrisA little push is all it takes to reveal a secret passageway behind the shelf. Heidi HarrisWhat, Exactly, Is a Murphy Door?There’s a difference between a well-disguised door and a hidden one. You can flush-mount a jib door into the wall, wrap it in wallpaper, and remove the hardware to make it nearly invisible. These minimalist doors are scattered throughout design-forward interiors. But a Murphy Door is something entirely different. It’s not invisible—it’s intentionally integrated. It could be a bookshelf, a staircase, or even a wine rack. It’s meant to be lived with, decorated, and admired. But here’s the catch: you’d never guess it’s also a door. HEIDI GELDHAUSER HARRISIn this dining room, designer Clary Bosbyshell used the same mural wallpaper to create a seamless transition on a jib door.Of course, the thrill factor is still alive and well. If you’ve ever walked through the fridge to get into Good Times at Davey Wayne’s in L.A., or slipped through the vending machine into Basement in NYC’s Chinatown, or snuck behind the bookshelf at Eatapas in Fort Lauderdale, then you know: a hidden entrance makes everything instantly cooler. And yes, your house deserves to be that cool. Take this Central Texas home designed by Sarah Stacey of Sarah Stacey Interior Design. She cleverly utilized an iconic British telephone booth as the secret entrance between the home’s garage-turned-speakeasy and dance hall. Then there’s the Grandpa who created his own version of C.S. Lewis’ Narnia by enclosing a secret room within his bedroom wardrobe. STEPHEN KARLISCHDesigner Sarah Stacey brought on a contractor to remove the back of the booth to recast it as a hidden door.What Styles of Murphy Doors Are Available?Murphy Door’s lineup is basically a choose-your-own-adventure of hidden access points. Want a full-length Mirror Door that’s secretly a portal to your glam room? Done. Need a Pantry Door to hide your cereal stash and your coffee machine? There’s a Murphy Door for that too. Or you can do your own custom built-in like Vassiliou did in her clients’ home below. “The hidden door allows the homeowners to hide away items that might otherwise seem cluttered, such as small appliances like coffee machines and toaster ovens and extra pantry items like fruit, vegetables and snacks,” she says.This seems to be just another display cabinet in this butler's pantry designed by Marie Zoe Designs.Linda Pordon PhotographyThis opens up to reveal additional storage and even tucked away appliances. Linda Pordon Photography“A Murphy Door isn’t just a door—it’s a gateway to possibility,” says Jeremy Barker, Founder and CEO at Murphy Door. “Homeowners are drawn to the idea that behind what looks like an ordinary bookcase or cabinet is something deeply personal: a wine cellar, a hidden study, a secure space, or even a walk-in pantry.”Murphy Door’s newest launches—debuted at the 2025 NAHB International Builders Show—include the Archway Bookcase Door for that Beauty and the Beast library moment, the Speakeasy Door if you want to relive the thrill of the prohibition, and let’s not forget the Tactical Murphy Door, which sounds like it moonlights as a Marvel superhero but is actually just a very secure place to keep your valuables. They also offer a number of these doors in a French Door style making way for double the drama and mystery.Courtesy of Murphy DoorOne of Murphy Door’s newest additions, the Archway Bookcase Door, in green. Where Can I Install a Murphy Door?These doors are as functional as they are fun. But the best part? Hidden doors can be installed in a variety of places. According to Steve Humble, president of Creative Home Engineering, the world’s premier designer and manufacturer of motorized and high-security secret passageways, “location is the first thing you must consider when installing a hidden door in your home. It determines which door ideas are feasible.” Humble recommends primary bedrooms, bathrooms, libraries, wardrobes, and basements as the top five locations to install a secret passthrough. With staircases as a very close runner up. No matter where you install them, they save space. They hide mess. They make you feel like you’re living in your own secret lair—but in a more chic versus villainous way.SARAH HEBENSTREITDesigner Regan Baker installed a bookshelf Murphy Door under a staircase to add function to an underused space. In a world where everyone’s trying to declutter, hide the chaos, and add personality to their space, hidden doors offer the perfect triple threat: style, storage, and just the right amount of sass. Because honestly, who doesn’t want to feel like they're in a Bond movie while grabbing a protein bar? “The appeal is emotional and functional,” says Barker. “They’re not just entrances, they’re the first step into an experience tailored to your vision.”Bottom line: Hidden doors aren’t just a trend—they’re a (secret) lifestyle. So go ahead, pull that book, press that panel, and swing open the possibilities. Your home’s next best-kept secret is just a hinge away. Shop Murphy DoorsSpice Rack Door$2,282 at Murphy DoorsCredit: Murphy DoorsArchway Bookcase Door$2,762 at Murphy DoorCredit: CREDIT: MURPHY DOORMirror Door$2,092 at Murphy DoorCredit: CREDIT: MURPHY DOORHamper Door$2,569 at Murphy DoorCredit: Murphy Doors

The big Leslie Benzies interview: MindsEye, Everywhere, and the double-edged sword of GTA How Build A Rocket Boy developed its debut project Feature by Samuel Roberts Editorial Director Published on May 30, 2025 As the producer behind the Grand Theft Auto games from GTA 3 through to GTA 5, as well as Red Dead Redemption and LA Noire, any project with Leslie Benzies' name on it is going to be a lightning rod for attention. MindsEye, the first game from Benzies' studio Build A Rocket Boy, is getting plenty of it – even if some of that attention has been less positive. MindsEye is a single-player third-person shooter with vehicle gameplay, set in a Las Vegas-style city called Redrock. It's a techno-thriller story about a former soldier called Jacob Diaz – but it's clear from visiting BARB in Edinburgh this week that the game is envisioned as a gateway into something much larger, both in the fiction of MindsEye, and for players who pick the game up. That includes a user-generated content platform called Build.MindsEye, where players on PC can create levels using relatively straightforward tools that incorporate any object in the game. When asked if third-person shooter levels or driving sections were the limits of the build side of MindsEye, the developers showed other examples of how they can be used, like massively increasing the proportions of a basketball, dropping it into the world, and functionally making an in-game version of Rocket League. Still, while MindsEye launches on June 10, 2025, for PC and consoles, many questions remain unanswered, including the future of its long-gestating Everywhere project. Benzies sat down with GamesIndustry.biz earlier this week to talk us through his vision for the game. This interview has been edited for brevity and clarity. Image credit: Austin Hargrave What's your grand vision for MindsEye? What will it be at launch, and where is it going in the future? MindsEye is one story in an epic universe. The other stories take place at different time periods, and [at] different locations in the universe. This story is Jacob Diaz's story. There are also other stories within MindsEye, so we tell the backstories of other characters Jacob will meet. That's the way we're going to fill out the universe over time – so when you travel around, all the stories will be connected by one overarching theme, and each story will have different mechanics. And we'll give these mechanics to players within the creator tools. What will happen with the game after launch? [The studio] will support the game through Play.MindsEye, with continuous new content. Some of the content, like races, are made just for fun. But [with] most of the content, we'll try and incorporate it into the story. So once you've played the big overarching ten-year plan, you'll have a very good idea of what this universe looks like. We have plans to add multiplayer, [and] we have plans to make a full open world. And of course, we've also got to look at what players are creating, and incorporate that into our plans. Given the ease of the tools, we think there's going to be a high percentage of players who will jump in and give it a pop, see how it feels. Hopefully some will create compelling content we can then promote and make that part of our plans to push to other players. Is it best to think of MindsEye as the first game in a series of games? Or one game as part of a larger experience? MindsEye sits bang in the middle of our story. So, we're going to go back 10,000 years, then we're going to go forward a certain amount of time. It's the relevant piece of the puzzle that will have players asking questions of what the bigger story is. We've intentionally not released footage of huge parts of the game, because we don't want to spoil anything for players. But this story does take some unusual twists. What's your vision for the multiplayer component of the game? I guess there's two sides to the answer. The dream from the building side is to allow players the opportunity to create their own multiplayer open world games with ease. So anyone could pick up the game, jump in, drive around, stop at a point where they see something of interest, build a little mission, jump back in the car, drive again, build another mission. Once you've built a couple of hundred of these, you've built your own open world game. So, that's the build side. From our side, we want to [create] a place where people can socialise, play together, and engage in the stories that we build. So, we do have plans next year to launch an open world multiplayer game that takes place a year after MindsEye finishes. In the interim, we also have an open world free roam game that spans from when MindsEye finishes to the launch of the open world multiplayer game. All of these stories interconnect in a fairly unique and original way, which I think players like these days. They like the complexity of deeper stories. You're selling the base game at launch, with a pass for upcoming content additions. Do you have a vision for how you're going to package future stories in the overarching MindsEye experience? It depends on the scale of the story. Some will be free, and some will be paid. After you left Rockstar Games, what came next? What led to you building the studio? I spent a few years looking into some other things: going [into] some property development. Using some of the games experience, we made a thing called VR-Chitect, which allowed you to build houses and view them in VR. I spent a lot of time in Los Angeles at this point, and this is when the droughts were very bad. I got into [making] these machines that would suck water out of the air. Still sitting in my back garden in Los Angeles is this big clunky machine, it works like an air-conditioning unit. It could suck up one thousand litres of water. So I got involved with that. But there's really nothing like making games. The different types of people – the lawyers, the accountants, the programmers, the artists, the dancers, the singers – that bunch of people in one big pot, all working together, and turning something from a piece of paper into [something on the] screen – that's where I get my excitement. Since I was a kid, that's what I've wanted to do. I thought, 'I better get back into making games' because nothing else was as much fun. What was the journey towards creating MindsEye as your first standalone release? Your first game's always your hardest. You have to build systems, you have to build the team. Everything is new. You don't really see a lot on the screen until way down the line, because you're building underlying systems, physics systems, the gameplay systems. It's a slow start, but what you end up with is an engine, and obviously we use Unreal, which provides a certain level of support and building. On top of that, we've got to build our own stuff. [Plus], we have to pack up everything we build and present it nicely for the creator tools. So it adds this extra layer of complexity to everything. But now, given where we are, the speed that we can iterate, we can very quickly place enemies, place vehicles, place puzzles, whatever, and get a feel for a game. We've now got a great, experienced team – a lot of talented guys in there. In the old days, you'd get a game, stick it on the shelf, and you'd wave goodbye. It's not like that anymore. You're continually fixing things. When you release a game, you've suddenly got, not a hundred testers, but hopefully millions of testers. You've got to continually fix, continually optimise, and especially with the tools that we've got, we want to continually create new content. So MindsEye is a standalone game, and Everywhere is not mentioned anywhere on the Steam page. But obviously there's a strong 'build' component to this game, which was part of the Everywhere pitch. What does this mean for Everywhere, and what was behind the decision to package the game this way? This is all part of a bigger story and ecosystem that we've got planned. Everywhere is going to show up again pretty soon. Everything we're working on, there's a story behind it – a big overarching story. So Everywhere will come back, and it fits into this story somewhere. I can't tell you [where], because it would be a spoiler. But that's going to reappear soon, and it will all be a part of the same product. "I'm not sure it would've been smart as a company to say, 'we are going to compete with the biggest game on the planet'" Leslie Benzies, Build A Rocket Boy In terms of the tools, the tool doesn't really care what world you're building in. It sits separately. So any game we create, it will naturally work on top of it. But we're big fans of keeping everything thematically connected, or connected through a narrative, and you'll see it. The bigger story will become obvious, once you've played through all of MindsEye. Then you might start to see how it all connects together, to the Everywhere world. Has the landscape for something like Everywhere, or the build component to MindsEye, changed as platforms like UEFN have taken off or Roblox has become so huge? It's great to see these tools being used by people. I build a lot with my son, and when he builds, I see the excitement he gets. It reminds me of when I was a kid with my Dragon 32 computer, managing to get a little character moving on the screen – that excitement of, 'wow, I did that'. Giving that to other people is massive. It's still very difficult to build in Roblox. For example, when my son wants to do it, I have to jump in. I used to be a programmer, and I struggle to build in there. When he wants to run around and scream with his friends he's in Roblox; when he wants to build he'll jump into Minecraft, because Minecraft is a much easier system to build within. And I think we sit somewhere in the middle: you can get very high quality, fun games, but they're very easy to build. I think we're at the infancy of this in video games. We're at the very beginning of it, and we're going to see way, way more of it. It doesn't necessarily have to be presenting it to your friends, or to an audience. I think the process of creating for a human being is fun in itself. MindsEye has been positioned as a linear game. You are best known for creating open world games. What was behind the decision to make MindsEye a more linear, narrative-driven experience? I think certain stories are more difficult to present to players in an open world setting. Open world gives you freedom – you don't necessarily want freedom to portray a story. For MindsEye, it's a very set time in a character, Jacob Diaz's, life. You pick up as Jacob when he arrives in Redrock, and then you leave Jacob at a certain point in the future. And so, it'd be very difficult for us to have an open world in there. It's horses for courses: it depends what you're doing. But for Jacob's story, it had to be a linear game. Having said that, there are open world experiences in there, and we can build them through Build.MindsEye. There is a free roam open world mode, where you play [as] a different character and you see his time, from the end of MindsEye, to the point of our next big planned launch. Again, they're all connected through a narrative, and we really want to show the universe, show the stories that have taken place in the universe, the characters in that universe, and see how they've experienced the same experience but from different viewpoints. "The dream from the building side is to allow players the opportunity to create their own multiplayer open world games with ease" Leslie Benzies, Build A Rocket Boy Was there ever a discussion about creating a more traditional GTA competitor? In design, you look at a lot of different options. I'm not sure it would've been smart as a company to say, 'we are going to compete with the biggest game on the planet'. I'm not sure that would be the best business decision to make. We went through a bunch of different designs, and to tell our story, this is what we landed on. MindsEye is priced more like a game from a decade ago at $60, and it'll take around 20 hours to finish. Can you talk about how you settled on the game's length and scope, and how you made that decision around price? So you've got the MindsEye campaign, and yes, it'll be about 20ish hours. But you do have all this other side content: there's going to be this continuous stream of content. These days, there are so many different options for people. It's not just games: there's streaming TV, so many good shows out there. I don't think you can have filler content in games. I think people want the meat, and they want the potatoes. We've tried to make as much meat as we can, if that makes sense. I think that's a good length for a game. What you also find through data, is that [with] big games, people don't play them all. The majority of people – 60% or 70% of people – don't actually play games to the end. So when you're making something, I would prefer – I'm sure the team would say the same – [that] you had the whole experience from start to finish, and not create this 200-hour game. Create something that is finishable, but have some side things that will fill out the universe. A lot of the side missions on the play side of MindsEye do fill out the characters' back stories, or do fill out what was happening in the world. On price: the world's in a funny place. People are worried about the price of eggs. So value for money, I think people appreciate that when times are difficult. I was curious why you waited until quite late in the day to reveal the build element of the game, only because it seemed you were being quite church and state with how MindsEye is releasing versus what Everywhere is. So in general, we believe – and again, it goes back to the amount of information, the amount of options people have these days – I don't think you can have extended marketing times. It's very expensive, we're a start-up. I think you lose interest from people. There are so many things for people to do, that if you extend it, you're not punching through to the place you need to be. I've seen other games, nine years before launch, it's getting talked about. I'm not sure that's the way of the world these days. You'll see there are games that never go to market: the day of launch was the marketing campaign, and it worked very well. So I think we tried to compress ours down for that reason. On the MindsEye.Play [continuous content] part of it, yeah, maybe we should've got that out there sooner, but it is a nice little surprise to give players. That's the thing with marketing – you never know what's the right or wrong way to do it, you've got to go with your gut, your senses, and test it. Being who you are, it brings a certain level of expectation and attention. Do you find it a double-edged sword, launching a new studio and launching a new game, with your background? Yes. There's always comparisons, and I think that's how humans work. As kids, we're taught to put a triangle into a triangular hole, and a square into a square hole. I think we do that for the rest of our lives, and we like to describe something new as 'it's X plus Y, with a bit of Z in there'. It makes things easy for us. It's maybe humans optimising the way we communicate. So there are comparisons. It serves us well in some ways, it doesn't serve us well in others. Dave Grohl said it well when he formed the Foo Fighters: nobody's interested in the Foo Fighters, all they were interested in was Nirvana. The guys have built something very cool, and I just hope people can see it for what it's trying to be.