Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

Upcoming (serious) Web performance boostBy: Adam Scott5 June 2025Progress ReportSometimes, just adding a compiler flag can yield significant performance boosts. And that just happened.For about two years now, all major browsers have supported WASM (WebAssembly) SIMD. SIMD stands for “Single instruction, multiple data” and is a technology that permits CPUs to do some parallel computation, often speeding up the whole program. And that’s exactly why we tried it out recently.We got positive results.The need for performance on the WebThe Web platform is often overlooked as a viable target, because of its less-than-ideal environment and its perceived poor performance. And the perception is somewhat right: the Web environment has a lot of security-related quirks to take into account—the user needs to interact with a game frame before the browser allows it to play any sound1. Also, due to bandwidth and compatibility reasons, you rarely see high-fidelity games being played on a browser. Performance is better achieved when running software natively on the operating system.But don’t underestimate the potential of the Web platform. As I explained in broad terms at the talk I gave at the last GodotCon Boston 2025, the Web has caught up a lot since the days of Flash games. Not only are there more people playing Web games every year, but standards and browsers improve every year in functionality and in performance.And that’s why we are interested in using WASM SIMD.WASM SIMD BenchmarksOur resident benchmark expert Hugo Locurcio (better known as Calinou) ran the numbers for us on a stress test I made. We wanted to compare standard builds to builds with WASM SIMD enabled.Note: You may try to replicate his results, but be aware that he has a beast of a machine. Here are his PC’s specifications:CPU: Intel Core i9-13900KGPU: NVIDIA GeForce RTX 4090RAM: 64 GB (2×32 GB DDR5-5800 CL30)SSD: Solidigm P44 Pro 2 TBOS: Linux (Fedora 42)I built a Jolt physics stress test from a scene initially made by passivestar. By spawning more and more barrels into the contraption, we can easily test the performance difference between the WASM SIMD build and the other.Without WASM SIMDWith WASM SIMDImprovement (approx.)Test linksLinkLink-Firefox 138(“+100 barrels” 3 times)2×Firefox 138(“+100 barrels” 6 times)10.17×*Chromium 134(“+100 barrels” 3 times)1.37×Chromium 134(“+100 barrels” 6 times)14.17×**Please note that once the physics engine enters a “spiral of death”, it is common for the framerate to drop to single digits, SIMD or not. These tests don’t prove 10× to 15× CPU computing speed improvements, but rather that games will be more resilient to framerate drops on the same machine in the same circumstances. The 1.5× to 2× numbers are more representative here of the performance gains by WASM SIMD.What it means for your gamesStarting with 4.5 dev 5, you can expect your Web games to run a little bit more smoothly, without having to do anything. Especially when things get chaotic (for your CPU). It isn’t a silver bullet for poorly optimized games, but it will help nonetheless. Also, note that it cannot do anything for GPU rendering bottlenecks.Be aware that the stress tests are meant by nature to only test the worst case scenarios, so you may not see such large improvements in normal circumstances. But it’s nice to see such stark improvements when the worst happens.AvailabilityFrom here on out, the 4.5 release official templates will only support WebAssembly SIMD-compatible browsers in order to keep the template sizes small. We generally aim to maintain compatibility with the oldest devices we can. But in this case, the performance gains are too large to ignore and the chances of users having browsers that are that far out of date is too small relative to the potential benefits.If you need to use non-SIMD templates, don’t fret. You can always build the Godot Editor and the engine templates without WebAssembly SIMD support by using the wasm_simd=no build option.What’s next?As I wrote in my last blog post, we’re currently working very hard to make C#/.NET exports a reality. We do have a promising prototype, we just need to make sure that it’s production-ready.I also mentioned in that article that I wanted to concentrate on improving our asset loading game. Preloading an entire game before even starting it hinders the ability to use Godot for commercial Web games. Once something is implemented to improve that issue, count on me to share the news with you.It’s either that, or we return to the old days of spam-webpages using the “Congratulations, you won!” sound effect when you least expect it. ↩

Max Towers / Max DudlerSave this picture!© Stefan MüllerResidential Architecture, Residential•Aesch, Switzerland Architects: Max Dudler Area Area of this architecture project Area:  26500 m² Year Completion year of this architecture project Year:  2024 Photographs Photographs:Stefan MüllerMore SpecsLess Specs Save this picture! Text description provided by the architects. The two Max Towers are the centerpiece of the residential and commercial quarter Aere, taking shape in the former industrial district of Stöcklin, which spreads between Reinach and Aesch south of Basel. The tower volumes, roughly 40 meters high, are striking for the continuous balconies that surround each level over a recessed ground floor. The girdle of balconies merges the urban flair of high-rise living with the qualities of generous garden space associated with a family house.Save this picture!Save this picture!Save this picture!The tectonic arrangement is completed on the outside by a mantle of solid columns with cornices integrated into monolithic ceilings. The inner façade behind these constitutes a second skin, benefiting from greater liberty as it steps forward and back to generate an efficient footprint. This meandering balcony zone enlivens the relationship between indoors and outdoors while serving as a filter and as a layer of flexible space.Save this picture!Save this picture!The entrance hallways in Tower 2 create an arrival zone and link the public space outside with the central garden that forms an open yet shielded hub for the new quarter.Save this picture! Project gallerySee allShow less Project locationAddress:Aesch, SwitzerlandLocation to be used only as a reference. It could indicate city/country but not exact address.About this officeMax DudlerOffice••• MaterialsMaterials and TagsPublished on June 06, 2025Cite: "Max Towers / Max Dudler" 06 Jun 2025. ArchDaily. Accessed . <https://www.archdaily.com/1030845/max-towers-max-dudler&gt ISSN 0719-8884Save世界上最受欢迎的建筑网站现已推出你的母语版本!想浏览ArchDaily中国吗?是否 You've started following your first account!Did you know?You'll now receive updates based on what you follow! Personalize your stream and start following your favorite authors, offices and users.Go to my stream

Summer is the best time to start hosting parties, and if you’re planning on doing just that this year, you’re going to want to make sure you have everything you need to throw some ragers. What’s the most important thing you need for a great party in addition to the “vibe”? Oh, nothing. Just some amazing music and a way to share it. Case in point? A party speaker that’s up to the task that won’t force you to spend all of your savings. Sound like a plan Head to Amazon to get the JBL PartyBox for $249, down from its usual price of $349. That’s $100 off and a discount of 29%. See at Amazon Party all night for a great discount The JBL PartyBox is everything you need to get people moving and the party jumping. And it’s powerful enough to fill your space with 100 watts of signature JBL sound. It’s also compact enough to carry over your shoulder. It even comes with a padded strap so you can sling it across your back like a messenger bag. That makes it convenient for beach trips, park hangs, or just moving from room to room too. It also includes a built-in bottle opener, which sounds like a gimmick until you actually need one mid-party and realize how smart that feature is. Because someone’s going to have to bring a drink with a lid that doesn’t twist off, and that’s gonna harsh your vibe. This is more than just a speaker. It’s also a light show in a box, which you’ll soon find out when you start using it in earnest. Whether it’s a quiet night with friends or a full-on celebration, it’s a small touch that makes a big visual impact. And if you’re the karaoke type or know someone who is, you’ll love the wireless microphone that comes included. Tweak the bass, treble, and even echo effects, which makes this speaker double as your own personal DJ booth or karaoke machine. It’s also made to handle real life. With IPX4 splash resistance, it can stand up to light rain, poolside splashes, or accidental drink spills. The 6-hour battery life keeps things going long enough for most parties, and if you’ve got another compatible JBL speaker, you can pair them together for an even bigger sound experience. All this for under $300? You’ll want to get yours as soon as possible before the heat wave and the summer parties begin. See at Amazon

Mario Kart World – is it a backwards step? (Nintendo) The Friday letters page is surprised the Sony State of Play didn’t go down better with more people, as readers share images of the Switch 2 midnight launches. To join in with the discussions yourself email gamecentral@metro.co.uk Initial experience I’ve spent a few hours playing Mario Kart World in single and multiplayer, and my first impression is that it’s a bit… boring.The free roam aspect of the game seemed like it had heaps of potential but, for the most part, it feels aimless. Sure, there are things to collect and discover, but in-between there’s just driving. Lots and lots of driving. It’s not exactly a world brimming with things to do in the same way as the sandbox areas in Super Mario Odyssey, for example. As for the races, in principle it makes sense that the tracks need to be wider to accommodate 24 racers. However, the races themselves don’t generally feel any busier because you’re still, generally, just competing against those closest to your level of ability. Consequently, I felt the game lacks the chaotic energy of jostling your rivals to get ahead because there’s so much space on the otherwise well-designed courses. I know it’s unfair to compare Mario Kart World to Mario Kart 8 at this point, given the latter spanned two consoles, with a plethora of content reflecting that. But it’s hard not to feel that while the free roam section is a solid demonstration of technical advancement (even if the inability to integrate it with Grand Prix mode seems like a missed opportunity), the core gameplay is consistent, at best. In some respects, I’d say it’s more of a step backwards, if anything. That being said, I don’t think this is the same version of Mario Kart World we’ll be playing five years from now. Free roam mode feels like a playground in which Nintendo can experiment, and I fully expect them to do so. There’ll undoubtedly be a slew of DLC and perhaps better integration of the various modes into one seamless experience. Expert, exclusive gaming analysis Sign up to the GameCentral newsletter for a unique take on the week in gaming, alongside the latest reviews and more. Delivered to your inbox every Saturday morning. In the unlikely event that this is the final iteration of Mario Kart World, it’s currently a six or (generous) seven out of 10 and probably the least enthralled I’ve ever been with a new Mario Kart title. But I’ll give Nintendo the benefit of the doubt for now because this doesn’t feel like a game that’s even close to being finished.Needlemouse Just add SonyFirstly, I’m surprised by the relatively lukewarm response to the State of Play from some people; I thought it was one of the best in recent memory and there were only a few games that I personally had little interest in. The main reason for writing in is the recent addition of Destiny 2: The Final Shape to PS Plus subscription. In short, I played a lot of Destiny 2 back in the day but have subsequently not played any of the most recent DLCs/additions. Can The Final Shape be played as a standalone? (both logistically and in terms of the story)?John GC: We think people were upset that Sony themselves had nothing to show from their first parties, even though we agree it was overall a good show. As far as we understand, you don’t need any other expansions to play The Final Shape. Only one Just a quick heads up for anyone buying digital content on either a Switch or Switch 2 console, if you are Switch online subscriber you can purchase a voucher for £84 that lets you purchase any two titles from a list of games.This reduces each game to a reasonable £42 and the vouchers are valid for a year. I didn’t get an alert about this until after I’d purchased Super Smash Bros. Ultimate, which I paid £59.99 for. I did at least then go on to buy a voucher for £84 and redeemed each token for Super Mario Bros. Wonder and Super Mario 3D Land + Bowser’s Fury.Charlie H. GC: It’s important to note these can’t be used for Switch 2 exclusive games. Email your comments to: gamecentral@metro.co.uk Midnight gathering I’ve seen a lot of pictures from the Switch 2 launch, so I thought I’d send you a picture of the queue at Smyth’s in Dublin city centre, a couple of minutes after midnight.I think there were a couple of hundred people there when I arrived. if I’d known then that I wouldn’t get out of the store until 2:30am, I might have gone home and tried again in the morning. But in the end, I’m glad I waited. I’ve just been tinkering with it so far, hooked it up to the TV, and played a little bit of Mario Kart World and Cyberpunk 2077, so I can’t really give any conclusions. But when my (dedicated non-gamer) wife saw it, her reaction was, ‘Oh, it looks much better! Can I play it?’ So I think Nintendo are on to another winner.Mickah Night-time rendezvous (Mickah) American retail I was on my way down to Smyths Leeds to collect my Switch 2 Mario Kart bundle, that I had pre-ordered a month ago.I called in at Costco on the way and was surprised to find they had the Mario Kart bundle for £419.99, so I decided to get one from there. It was late afternoon Thursday and they looked to have plenty left. It is limited to one per customer. I will let my pre-order lapse so it will cancel in two days.Martin GC: We had no idea Costco existed in the UK. Maybe we’re not the only ones and that’s why they have so many left. C’mon DoreenSomebody (not me, don’t know how) should start a petition to get Squirrel Girl in that Marvel game for you guys. How good did it all look? How good was that showcase? What have Sony been up too? That’s what. Mortal Kombat: Legacy Kollection is already on my wishlist. That surfing sword game wasn’t bad either. With Nintendo too, great times ahead.Indiegaz (PSN ID) GC: At least she’s in Marvel Rivals. Autumnal purchase So I won’t be buying the Nintendo Switch 2 at launch. I’ll be instead visiting Tenerife in August. But I do hope the system reviews well and those who have purchased it are zooming around on Mario Kart World. I’ll be hopefully purchasing the device before autumn of this year. But you never know what could happen.So my sister paid for my ticket and it of course must be paid back. A debt is a debt. Which is quite fitting, since I just finished my playthrough of Red Dead Redemption and just as John Marston paid his debt to a life of crime and Edgar Ross paid his debt to a vengeful son. I’ll be hopefully paid up in less than three months, then I’ll be purchasing the Switch 2 and with more information on the games, reviews, and what’s to come for the future. For now however, I look towards a week spent in the beaches of Spain and my focus on the remainder of my maths course. Also, a playthrough of Resident Evil 3 remake. Only six hours long. Can’t complain.Shahzaib Sadiq Free for all Borderlands 2 and Hellslave are currently free on Steam on PC. Hellslave is available for free until Sunday, 15th June. Also, Deathloop is currently free on Epic Games Store.I hope everyone who gets a Switch 2 enjoys it. I will have to probably get one next year now, as I need to buy a new gaming computer because my current gaming PC will not upgrade to Windows 11, unfortunately.Andrew J. Old reliable Just writing this after a couple of hours with the Switch 2. I always end up with whatever Nintendo’s latest console is at some point in its lifetime (going back to the Game Boy Advance) but for the first time I decided to jump onboard day one.The price rises for the PlayStation 5 and Xbox Series X have shown that the assumption consoles will get cheaper in the medium term isn’t a guarantee, and the feature list for the Switch 2 ticked pretty much every box I wanted from an upgrade to the original. Bump in specs, sturdier Joy-Con, and a new interface with the mouse controls. What I’ve not seen many people comment on yet is the set-up experience. It isn’t always a given with Nintendo that this is going to be smooth, but I found that the transfer from my original to Switch 2 was seamless. I had one error message in setting up GameChat, but restarting the process fixed that, and now I can settle into at least another few years of Nintendo gaming joy. As I approach the business end of 40 years old, it’s a comfort to know that the likes of Mario, Yoshi, and the other inhabitants of the Mushroom Kingdom are still karting away 30-odd years after the SNES original.Electric Crocosaurus GC: That’s a cool name. Inbox also-rans Yes! My Switch 2 has turned up and have the rest of the week off, and it’s Summer Game Fest on Friday night. Now that is what I call eating well for games fans!LemptonAs promised, here is the pic from the queue at Smyths toy store at midnight. Sorry I couldn’t get one from inside but they were only letting two at a time in. Not a bad turn out. I had about 20 people behind me too.woz_007 (NN ID) The way launches used to be (woz_007) Email your comments to: gamecentral@metro.co.uk More Trending The small printNew Inbox updates appear every weekday morning, with special Hot Topic Inboxes at the weekend. Readers’ letters are used on merit and may be edited for length and content. You can also submit your own 500 to 600-word Reader’s Feature at any time via email or our Submit Stuff page, which if used will be shown in the next available weekend slot. You can also leave your comments below and don’t forget to follow us on Twitter. GameCentral Sign up for exclusive analysis, latest releases, and bonus community content. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Your information will be used in line with our Privacy Policy

Since its announcement in January, anticipation has been building for the Nintendo Switch 2 – the followup to the gaming titan’s most successful home console, the 150m-selling Nintendo Switch. Major console launches are rarer than they used to be; this is the first since 2020, when Sony’s PlayStation 5 hit shelves. Whether you’re weighing up a purchase or just wondering what all the fuss is about, here’s everything you need to know.The basicsThe Switch 2 is out today, 5 June, priced at £395.99 (US$449.99/A$699/€469.99) or at £429.99 (US$499.99/A$766/€509,99) bundled with its flagship game, Mario Kart World. Like its predecessor, it’s a portable games machine with a built-in screen – you can use as a handheld mini-console when you’re out and about, or slide it into the dedicated dock device and plug it into your TV via an HDMI cable for a big-screen experience at home. A little bigger than the original Switch, with a crisp, clear 7.9in LCD touch screen, as opposed to the old 6.2in display, it comes with two Joy-Con controllers, which are chunkier than the previous versions. These now attach magnetically to each side of the screen with a pleasing clunk, replacing the fiddly sliding mechanism that most Switch owners disliked. They’ve also got bigger L and R buttons on the top, which sounds like a minor detail but is a huge deal for anyone trying to perfect their Mario Kart power-slides.The specBig tech advances … Nintendo Switch 2. Photograph: NintendoThe tech inside the Switch 2 is a lot more advanced than the previous console, featuring a custom nVidia processor, and a screen capable of displaying at 4K resolution (when plugged into a compatible TV) or 1920x1080 resolution in portable mode. It’s also got 5.1 surround sound, and supports high-dynamic range lighting (HDR) graphical effects at frame rates of up to 120hz. This brings the Switch 2 almost up to scratch with other modern consoles: most experts are placing its tech specs somewhere between the PS4 and PS5, or between Xbox One and Xbox Series X.In the boxThe Nintendo Switch 2 comes with the console itself, two Joy-Con controllers, a power adaptor and USB-C charging cable, a dock, a Joy-Con grip (which allows you to connect the two Joy-Cons together to create a traditional-looking games controller), and two Joy-Con wrist straps to stop them flying out of your hands.Out of the boxNintendo is going big on the social features of the console. Its GameShare function will allow you to play compatible games with other people who don’t own a copy – they just need their own Switch or a Switch 2, and can play along in the room with you or connect online. This is particularly important for families sharing one copy of a game. Meanwhile, GameChat is kind of like Zoom, but for games: you can invite a bunch of pals into a group video chat session where you can talk to each other while playing the same game, playing different games, or just hanging out. If you all buy the Nintendo Switch 2 Camera you’ll be able to see little video windows of each other on the screen, too. GameChat requires a paid subscription to Nintendo’s online gaming service, which costs £17.99 (US$19.99/€19.99/A$29.95)The gamesBig news … Mario Kart World game. Photograph: NintendoThe console is launching with around 25 games, though many of these are enhanced versions of older Switch titles. The big newcomers are Mario Kart World, an open-world take on the classic karting game; the introductory game Nintendo Switch 2 Welcome Tour; the co-op survival challenge Survival Kids and anti-gravity racer, Fast Fusion. Some favourites making it across are Fortnite, Cyberpunk 2077 and The Legend of Zelda: Breath of the Wild/Tears of the Kingdom. Most games will retail for between £45–£70 and will be available to buy and download online, or as physical boxed copies. You can also still play almost all your old Switch games on the new console, and there’s a huge back catalogue of retro NES, Nintendo 64, SNES and GameCube classics from the 1980s, 90s and 00s available to play with a Nintendo Switch Online subscription.The accessoriesAdd-ons … Nintendo Switch 2 Pro controller and camera. Photograph: NintendoThere are three things you may want to buy alongside the console. The Nintendo Switch 2 Pro controller is a traditional console joypad intended for serious play. Then you have the Nintendo Switch 2 camera, basically a webcam compatible with the GameChat service, but also with any games that might use camera features. You may also want a microSD Express card to provide additional storage for your games.Where can I buy one?If you haven’t pre-ordered, you may have to be patient and shop around. Some of the larger retailers including Amazon, Argos, Currys and John Lewis are saying they may have a few in stock today and it’s worth trying Nintendo’s online store. Be extremely wary of buying from private sellers on eBay or similar sites – there will be a lot of con artists out there. Remember when people found their PlayStation 5 deliveries were instead full of bags of rice?

Last year, China saw a boom in foundation models, the do-everything large language models that underpin the AI revolution. This year, the focus has shifted to AI agents—systems that are less about responding to users’ queries and more about autonomously accomplishing things for them.  There are now a host of Chinese startups building these general-purpose digital tools, which can answer emails, browse the internet to plan vacations, and even design an interactive website. Many of these have emerged in just the last two months, following in the footsteps of Manus—a general AI agent that sparked weeks of social media frenzy for invite codes after its limited-release launch in early March.  These emerging AI agents aren’t large language models themselves. Instead, they’re built on top of them, using a workflow-based structure designed to get things done. A lot of these systems also introduce a different way of interacting with AI. Rather than just chatting back and forth with users, they are optimized for managing and executing multistep tasks—booking flights, managing schedules, conducting research—by using external tools and remembering instructions.  China could take the lead on building these kinds of agents. The country’s tightly integrated app ecosystems, rapid product cycles, and digitally fluent user base could provide a favorable environment for embedding AI into daily life.  For now, its leading AI agent startups are focusing their attention on the global market, because the best Western models don’t operate inside China’s firewalls. But that could change soon: Tech giants like ByteDance and Tencent are preparing their own AI agents that could bake automation directly into their native super-apps, pulling data from their vast ecosystem of programs that dominate many aspects of daily life in the country.  As the race to define what a useful AI agent looks like unfolds, a mix of ambitious startups and entrenched tech giants are now testing how these tools might actually work in practice—and for whom. Set the standard It’s been a whirlwind few months for Manus, which was developed by the Wuhan-based startup Butterfly Effect. The company raised $75 million in a funding round led by the US venture capital firm Benchmark, took the product on an ambitious global roadshow, and hired dozens of new employees.  Even before registration opened to the public in May, Manus had become a reference point for what a broad, consumer‑oriented AI agent should accomplish. Rather than handling narrow chores for businesses, this “general” agent is designed to be able to help with everyday tasks like trip planning, stock comparison, or your kid’s school project.  Unlike previous AI agents, Manus uses a browser-based sandbox that lets users supervise the agent like an intern, watching in real time as it scrolls through web pages, reads articles, or codes actions. It also proactively asks clarifying questions, supports long-term memory that would serve as context for future tasks. "Manus represents a promising product experience for AI agents," says Ang Li, cofounder and CEO of Simular, a startup based in Palo Alto, California, that’s building computer use agents, AI agents that control a virtual computer. “I believe Chinese startups have a huge advantage when it comes to designing consumer products, thanks to cutthroat domestic competition that leads to fast execution and greater attention to product details.” In the case of Manus, the competition is moving fast. Two of the most buzzy follow‑ups, Genspark and Flowith, for example, are already boasting benchmark scores that match or edge past Manus’s.  Genspark, led by former Baidu executives Eric Jing and Kay Zhu, links many small “super agents” through what it calls multi‑component prompting. The agent can switch among several large language models, accepts both images and text, and carries out tasks from making slide decks to placing phone calls. Whereas Manus relies heavily on Browser Use, a popular open-source product that lets agents operate a web browser in a virtual window like a human, Genspark directly integrates with a wide array of tools and APIs. Launched in April, the company says that it already has over 5 million users and over $36 million in yearly revenue. Flowith, the work of a young team that first grabbed public attention in April 2025 at a developer event hosted by the popular social media app Xiaohongshu, takes a different tack. Marketed as an “infinite agent,” it opens on a blank canvas where each question becomes a node on a branching map. Users can backtrack, take new branches, and store results in personal or sharable “knowledge gardens”—a design that feels more like project management software (think Notion) than a typical chat interface. Every inquiry or task builds its own mind-map-like graph, encouraging a more nonlinear and creative interaction with AI. Flowith’s core agent, NEO, runs in the cloud and can perform scheduled tasks like sending emails and compiling files. The founders want the app to be a “knowledge marketbase”, and aims to tap into the social aspect of AI with the aspiration of becoming “the OnlyFans of AI knowledge creators”. What they also share with Manus is the global ambition. Both Genspark and Flowith have stated that their primary focus is the international market. A global address Startups like Manus, Genspark, and Flowith—though founded by Chinese entrepreneurs—could blend seamlessly into the global tech scene and compete effectively abroad. Founders, investors, and analysts that MIT Technology Review has spoken to believe Chinese companies are moving fast, executing well, and quickly coming up with new products.  Money reinforces the pull to launch overseas. Customers there pay more, and there are plenty to go around. “You can price in USD, and with the exchange rate that’s a sevenfold multiplier,” Manus cofounder Xiao Hong quipped on a podcast. “Even if we’re only operating at 10% power because of cultural differences overseas, we’ll still make more than in China.” But creating the same functionality in China is a challenge. Major US AI companies including OpenAI and Anthropic have opted out of mainland China because of geopolitical risks and challenges with regulatory compliance. Their absence initially created a black market as users resorted to VPNs and third-party mirrors to access tools like ChatGPT and Claude. That vacuum has since been filled by a new wave of Chinese chatbots—DeepSeek, Doubao, Kimi—but the appetite for foreign models hasn’t gone away.  Manus, for example, uses Anthropic’s Claude Sonnet—widely considered the top model for agentic tasks. Manus cofounder Zhang Tao has repeatedly praised Claude’s ability to juggle tools, remember contexts, and hold multi‑round conversations—all crucial for turning chatty software into an effective executive assistant. But the company’s use of Sonnet has made its agent functionally unusable inside China without a VPN. If you open Manus from a mainland IP address, you’ll see a notice explaining that the team is “working on integrating Qwen’s model,” a special local version that is built on top of Alibaba’s open-source model.  An engineer overseeing ByteDance’s work on developing an agent, who spoke to MIT Technology Review anonymously to avoid sanction, said that the absence of Claude Sonnet models “limits everything we do in China.” DeepSeek’s open models, he added, still hallucinate too often and lack training on real‑world workflows. Developers we spoke with rank Alibaba’s Qwen series as the best domestic alternative, yet most say that switching to Qwen knocks performance down a notch. Jiaxin Pei, a postdoctoral researcher at Stanford’s Institute for Human‑Centered AI, thinks that gap will close: “Building agentic capabilities in base LLMs has become a key focus for many LLM builders, and once people realize the value of this, it will only be a matter of time." For now, Manus is doubling down on audiences it can already serve. In a written response, the company said its “primary focus is overseas expansion,” noting that new offices in San Francisco, Singapore, and Tokyo have opened in the past month. A super‑app approach Although the concept of AI agents is still relatively new, the consumer-facing AI app market in China is already crowded with major tech players. DeepSeek remains the most widely used, while ByteDance’s Doubao and Moonshot’s Kimi have also become household names. However, most of these apps are still optimized for chat and entertainment rather than task execution. This gap in the local market has pushed China’s big tech firms to roll out their own user-facing agents, though early versions remain uneven in quality and rough around the edges.  ByteDance is testing Coze Space, an AI agent based on its own Doubao model family that lets users toggle between “plan” and “execute” modes, so they can either directly guide the agent’s actions or step back and watch it work autonomously. It connects up to 14 popular apps, including GitHub, Notion, and the company’s own Lark office suite. Early reviews say the tool can feel clunky and has a high failure rate, but it clearly aims to match what Manus offers. Meanwhile, Zhipu AI has released a free agent called AutoGLM Rumination, built on its proprietary ChatGLM models. Shanghai‑based Minimax has launched Minimax Agent. Both products look almost identical to Manus and demo basic tasks such as building a simple website, planning a trip, making a small Flash game, or running quick data analysis. Despite the limited usability of most general AI agents launched within China, big companies have plans to change that. During a May 15 earnings call, Tencent president Liu Zhiping teased an agent that would weave automation directly into China’s most ubiquitous app, WeChat.  Considered the original super-app, WeChat already handles messaging, mobile payments, news, and millions of mini‑programs that act like embedded apps. These programs give Tencent, its developer, access to data from millions of services that pervade everyday life in China, an advantage most competitors can only envy. Historically, China’s consumer internet has splintered into competing walled gardens—share a Taobao link in WeChat and it resolves as plaintext, not a preview card. Unlike the more interoperable Western internet, China’s tech giants have long resisted integration with one another, choosing to wage platform war at the expense of a seamless user experience. But the use of mini‑programs has given WeChat unprecedented reach across services that once resisted interoperability, from gym bookings to grocery orders. An agent able to roam that ecosystem could bypass the integration headaches dogging independent startups. Alibaba, the e-commerce giant behind the Qwen model series, has been a front-runner in China's AI race but has been slower to release consumer-facing products. Even though Qwen was the most downloaded open-source model on Hugging Face in 2024, it didn’t power a dedicated chatbot app until early 2025. In March, Alibaba rebranded its cloud storage and search app Quark into an all-in-one AI search tool. By June, Quark had introduced DeepResearch—a new mode that marks its most agent-like effort to date.  ByteDance and Alibaba did not reply to MIT Technology Review’s request for comments. “Historically, Chinese tech products tend to pursue the all-in-one, super-app approach, and the latest Chinese AI agents reflect just that,” says Li of Simular, who previously worked at Google DeepMind on AI-enabled work automation. “In contrast, AI agents in the US are more focused on serving specific verticals.” Pei, the researcher at Stanford, says that existing tech giants could have a huge advantage in bringing the vision of general AI agents to life—especially those with built-in integration across services. “The customer-facing AI agent market is still very early, with tons of problems like authentication and liability,” he says. “But companies that already operate across a wide range of services have a natural advantage in deploying agents at scale.”

Congress loves SLS Senate response to White House budget for NASA: Keep SLS, nix science Gateway is back, baby. Eric Berger – Jun 5, 2025 7:55 pm | 77 Senate Commerce Committee Chairman Ted Cruz (R-Texas) at a hearing on Tuesday, January 28, 2025. Credit: Getty Images | Tom Williams Senate Commerce Committee Chairman Ted Cruz (R-Texas) at a hearing on Tuesday, January 28, 2025. Credit: Getty Images | Tom Williams Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only   Learn more Negotiations over the US federal budget for fiscal year 2026 are in the beginning stages, but when it comes to space, the fault lines are already solidifying in the Senate. The Trump White House released its budget request last Friday, and this included detailed information about its plans for NASA. On Thursday, just days later, the US Senate shot back with its own budget priorities for the space agency. The US budget process is complicated and somewhat broken in recent years, as Congress has failed to pass a budget on time. So, we are probably at least several months away from seeing a final fiscal year 2026 budget from Congress. But we got our first glimpse of the Senate's thinking when the chair of the Committee on Commerce, Science, and Transportation, Sen. Ted Cruz (R-Texas) released his "legislative directives" for NASA on Thursday These specific directives concern "reconciliation" for the current budget year, which are supplemental appropriations for NASA and other federal agencies under the purview of Cruz's committee. And this committee does not actually write the budget; that's left to appropriations committees in the House and Senate. Senate space priorities However, Cruz is one of the most important voices in the US Senate on space policy, and the directives released Thursday indicate where he intends to line up on NASA during the upcoming budget fights. Here is how his budget ideas align with the White House priorities in three key areas: Science: The Trump White House budget sought to significantly cut the space agency's science budget, from $7.33 billion to $3.91 billion, including the cancellation of some major missions. Cruz makes no comment on most of the science budget, but in calling for a Mars Telecommunications Orbiter, he is signaling support for a Mars Sample Return Mission. Lunar Gateway: The Trump administration called for the cancellation of a small space station to be built in an elongated lunar orbit. There is very uneven support for this in the space community, but it is being led at Johnson Space Center, in Cruz's home state. Cruz says Congress should "fully fund" the Gateway as "critical" infrastructure. Space Launch System and Orion: The Trump administration sought to cancel the large expensive rocket and spacecraft after Artemis III, the first lunar landing. Cruz calls for additional funding for at least Artemis IV and Artemis V. This legislation, the committee said in a messaging document, "Dedicates almost $10 billion to win the new space race with China and ensure America dominates space. Makes targeted, critical investments in Mars-forward technology, Artemis Missions and Moon to Mars program, and the International Space Station." The reality is that it signals that Republicans in the US Senate are not particularly interested in sending humans to Mars, probably are OK with the majority of cuts to science programs at NASA, and want to keep the status quo on Artemis, including the Space Launch System rocket. Where things go from here It is difficult to forecast where US space policy will go from here. The very public breakup between President Trump and SpaceX founder Elon Musk on Thursday significantly complicates the equation. At one point, Trump and Musk were both championing sending humans to Mars, but Musk is gone from the administration, and Trump may abandon that idea due to their rift. For what it's worth, a political appointee in NASA Communications said on Thursday that the president's vision for space—Trump spoke of landing humans on Mars frequently during his campaign speeches—will continue to be implemented. "NASA will continue to execute upon the President’s vision for the future of space," NASA's press secretary, Bethany Stevens, said on X. "We will continue to work with our industry partners to ensure the President’s objectives in space are met." Congress, it seems, may be heading in a different direction. Eric Berger Senior Space Editor Eric Berger Senior Space Editor Eric Berger is the senior space editor at Ars Technica, covering everything from astronomy to private space to NASA policy, and author of two books: Liftoff, about the rise of SpaceX; and Reentry, on the development of the Falcon 9 rocket and Dragon. A certified meteorologist, Eric lives in Houston. 77 Comments

Published June 5, 2025 10:00am EDT close Don’t be so quick to click that Google calendar invite. It could be a hacker’s trap Cybercriminals are sending fake meeting invitations that seem legitimate. NEWYou can now listen to Fox News articles! Americans’ personal data is now spread across more digital platforms than ever. From online shopping habits to fitness tracking logs, personal information ends up in hundreds of company databases. While most people worry about social media leaks or email hacks, a far less visible threat comes from data brokers.I still find it hard to believe that companies like this are allowed to operate with so little legal scrutiny. These firms trade in personal information without our knowledge or consent. What baffles me even more is that they aren’t serious about protecting the one thing that is central to their business model: data. Just last year, we saw news of a massive data breach at a data broker called National Public Data, which exposed 2.7 billion records. And now another data broker, LexisNexis, a major name in the industry, has reported a significant breach that exposed sensitive information from more than 364,000 people. A hacker at work (Kurt "CyberGuy" Knutsson)LexisNexis breach went undetected for months after holiday hackLexisNexis filed a notice with the Maine attorney general revealing that a hacker accessed consumer data through a third-party software development platform. The breach happened on Dec. 25, 2024, but the company only discovered it months later. LexisNexis was alerted on April 1, 2025, by an unnamed individual who claimed to have found sensitive files. It remains unclear whether this person was responsible for the breach or merely came across the exposed data.MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINSA spokesperson for LexisNexis confirmed that the hacker gained access to the company’s GitHub account. This is a platform commonly used by developers to store and collaborate on code. Security guidelines repeatedly warn against storing sensitive information in such repositories; however, mistakes such as exposed access tokens and personal data files continue to occur.The stolen data varies from person to person but includes full names, birthdates, phone numbers, mailing and email addresses, Social Security numbers and driver's license numbers. LexisNexis has not confirmed whether it received any ransom demand or had further contact with the attacker. An individual working on their laptop (Kurt "CyberGuy" Knutsson)Why the LexisNexis hack is a bigger threat than you realizeLexisNexis isn’t a household name for most people, but it plays a major role in how personal data is harvested and used behind the scenes. The company pulls information from a wide range of sources, compiling detailed profiles that help other businesses assess risk and detect fraud. Its clients include banks, insurance companies and government agencies.In 2023, the New York Times reported that several car manufacturers had been sharing driving data with LexisNexis without notifying vehicle owners. That information was then sold to insurance companies, which used it to adjust premiums based on individual driving behavior. The story made one thing clear. LexisNexis has access to a staggering amount of personal detail, even from people who have never willingly engaged with the company.Law enforcement also uses LexisNexis tools to dig up information on suspects. These systems offer access to phone records, home addresses and other historical data. While such tools might assist in investigations, they also highlight a serious issue. When this much sensitive information is concentrated in one place, it becomes a single point of failure. And as the recent breach shows, that failure is no longer hypothetical. A hacker at work (Kurt "CyberGuy" Knutsson)7 expert tips to protect your personal data after a data broker breachKeeping your personal data safe online can feel overwhelming, but a few practical steps can make a big difference in protecting your privacy and reducing your digital footprint. Here are 7 effective ways to take control of your information and keep it out of the wrong hands:1. Remove your data from the internet: The most effective way to take control of your data and avoid data brokers from selling it is to opt for data removal services. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.Get a free scan to find out if your personal information is already out on the web.2. Review privacy settings: Take a few minutes to explore the privacy and security settings on the services you use. For example, limit who can see your social media posts, disable unnecessary location-sharing on your phone and consider turning off ad personalization on accounts like Google and Facebook. Most browsers let you block third-party cookies or clear tracking data. The FTC suggests comparing the privacy notices of different sites and apps and choosing ones that let you opt out of sharing when possible.3. Use privacy-friendly tools: Install browser extensions or plugins that block ads and trackers (such as uBlock Origin or Privacy Badger). You might switch to a more private search engine (like DuckDuckGo or Brave) that doesn’t log your queries. Consider using a browser’s "incognito" or private mode when you don’t want your history saved, and regularly clear your cookies and cache. Even small habits, like logging out of accounts when not in use or using a password manager, make you less trackable.GET FOX BUSINESS ON THE GO BY CLICKING HERE4. Beware of phishing links and use strong antivirus software: Scammers may try to get access to your financial details and other important data using phishing links. The best way to safeguard yourself from malicious links is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.5. Be cautious with personal data: Think twice before sharing extra details. Don’t fill out online surveys or quizzes that ask for personal or financial information unless you trust the source. Create separate email addresses for sign-ups (so marketing emails don’t go to your main inbox). Only download apps from official stores and check app permissions.6. Opt out of data broker lists: Many data brokers offer ways to opt out or delete your information, though it can be a tedious process. For example, there are sites like Privacy Rights Clearinghouse or the Whitepages opt-out page that list popular brokers and their opt-out procedures. The FTC’s consumer guide, "Your Guide to Protecting Your Privacy Online," includes tips on opting out of targeted ads and removing yourself from people-search databases. Keep in mind you may have to repeat this every few months.7. Be wary of mailbox communications: Bad actors may also try to scam you through snail mail. The data leak gives them access to your address. They may impersonate people or brands you know and use themes that require urgent attention, such as missed deliveries, account suspensions and security alerts.Kurt’s key takeawayFor many, the LexisNexis breach may be the first time they realize just how much of their data is in circulation. Unlike a social media platform or a bank, there is no clear customer relationship with a data broker, and that makes it harder to demand transparency. This incident should prompt serious discussion around what kind of oversight is necessary in industries that operate in the shadows. A more informed public and stronger regulation may be the only things standing between personal data and permanent exposure.CLICK HERE TO GET THE FOX NEWS APPShould companies be allowed to sell your personal information without your consent? Let us know by writing us atCyberguy.com/Contact.For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you'd like us to cover.Follow Kurt on his social channels:Answers to the most-asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com. All rights reserved. Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on "FOX & Friends." Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Reskate’s Youthful Murals Transform into Glowing Symbols of Peace June 5, 2025 Art Jackie Andres During the day, Reskate’s extensive murals cover large swathes of space on buildings, stage backdrops, and even transformer towers. While these monumental public works are striking during sunlit hours, they completely transform with the darkness of night. Artists Javier de Riba and María López are the artistic duo behind Reskate. Primarily based in Barcelona, both artists travel throughout the year, visiting different corners of the world to complete projects to “raise awareness of care for culture, nature, and peace.” Detail of “Paix” (2025). Reims, Champagne. Image by Romain Berthiot Reskate’s subjects are often children. In a bold, illustrative style with graphic linework, the artists depict young figures holding objects related to the area in which the mural is placed, as well as articles that reflect global concerns. “The invisibilization and invalidation of youth as an active element that should be part of society is a burden that continues to be perpetuated,” the duo explains in a statement covering “Eulalia,” a previous mural completed in 2023. An example of this is prevalent in “Bruit,” taking the form of stage design for an immersive concert. In the piece, a young girl protectively wraps her arms around a fishbowl, nodding to the impact of sound pollution within the oceans. The pair recently completed an exhibit at the Museu Picasso in Barcelona and plans to continue their artistic endeavors both in and out of the public space. Find more work on Reskate’s website and Instagram, and browse prints in their online shop. “Harmony” (2025). Liverpool. Image by Corbyn John “Transformateur” (2024). Mareuil-sur-Ourcq, France. Image by Sophie Palmier Detail of “Transformateur” (2024). Mareuil-sur-Ourcq, France. Image by Sophie Palmier “Bruit” (2024). Le Mans, France Detail of “Bruit” (2024). Le Mans, France “Boycott” (2024). Ghent, Belgium Next article