Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

One of the key use cases for generative AI involves answering questions over private datasets, with retrieval-augmented generation (RAG) as the go-to framework. As new RAG techniques emerge, there’s a growing need to benchmark their performance across diverse datasets and metrics.  To meet this need, we’re introducing BenchmarkQED, a new suite of tools that automates RAG benchmarking at scale, available on GitHub (opens in new tab). It includes components for query generation, evaluation, and dataset preparation, each designed to support rigorous, reproducible testing.   BenchmarkQED complements the RAG methods in our open-source GraphRAG library, enabling users to run a GraphRAG-style evaluation across models, metrics, and datasets. GraphRAG uses a large language model (LLM) to generate and summarize entity-based knowledge graphs, producing more comprehensive and diverse answers than standard RAG for large-scale tasks.  In this post, we walk through the core components of BenchmarkQED that contribute to the overall benchmarking process. We also share some of the latest benchmark results comparing our LazyGraphRAG system to competing methods, including a vector-based RAG with a 1M-token context window, where the leading LazyGraphRAG configuration showed significant win rates across all combinations of quality metrics and query classes. In the paper, we distinguish between local queries, where answers are found in a small number of text regions, and sometimes even a single region, and global queries, which require reasoning over large portions of or even the entire dataset.  Conventional vector-based RAG excels at local queries because the regions containing the answer to the query resemble the query itself and can be retrieved as the nearest neighbor in the vector space of text embeddings. However, it struggles with global questions, such as, “What are the main themes of the dataset?” which require understanding dataset qualities not explicitly stated in the text.   AutoQ: Automated query synthesis This limitation motivated the development of GraphRAG a system designed to answer global queries. GraphRAG’s evaluation requirements subsequently led to the creation of AutoQ, a method for synthesizing these global queries for any dataset. AutoQ extends this approach by generating synthetic queries across the spectrum of queries, from local to global. It defines four distinct classes based on the source and scope of the query (Figure 1, top) forming a logical progression along the spectrum (Figure 1, bottom). Figure 1. Construction of a 2×2 design space for synthetic query generation with AutoQ, showing how the four resulting query classes map onto the local-global query spectrum.  AutoQ can be configured to generate any number and distribution of synthetic queries along these classes, enabling consistent benchmarking across datasets without requiring user customization. Figure 2 shows the synthesis process and sample queries from each class, using an AP News dataset. Figure 2. Synthesis process and example query for each of the four AutoQ query classes.  About Microsoft Research Advancing science and technology to benefit humanity View our story Opens in a new tab AutoE: Automated evaluation framework  Our evaluation of GraphRAG focused on analyzing key qualities of answers to global questions. The following qualities were used for the current evaluation: Comprehensiveness: Does the answer address all relevant aspects of the question?  Diversity: Does it present varied perspectives or insights?  Empowerment: Does it help the reader understand and make informed judgments?  Relevance: Does it address what the question is specifically asking?   The AutoE component scales evaluation of these qualities using the LLM-as-a-Judge method. It presents pairs of answers to an LLM, along with the query and target metric, in counterbalanced order. The model determines whether the first answer wins, loses, or ties with the second. Over a set of queries, whether from AutoQ or elsewhere, this produces win rates between competing methods. When ground truth is available, AutoE can also score answers on correctness, completeness, and related metrics. An illustrative evaluation is shown in Figure 3. Using a dataset of 1,397 AP News articles on health and healthcare, AutoQ generated 50 queries per class (200 total). AutoE then compared LazyGraphRAG to a competing RAG method, running six trials per query across four metrics, using GPT-4.1 as a judge. These trial-level results were aggregated using metric-based win rates, where each trial is scored 1 for a win, 0.5 for a tie, and 0 for a loss, and then averaged to calculate the overall win rate for each RAG method. Figure 3. Win rates of four LazyGraphRAG (LGR) configurations across methods, broken down by the AutoQ query class and averaged across AutoE’s four metrics: comprehensiveness, diversity, empowerment, and relevance. LazyGraphRAG outperforms comparison conditions where the bar is above 50%. The four LazyGraphRAG conditions (LGR_b200_c200, LGR_b50_c200, LGR_b50_c600, LGR_b200_c200_mini) differ by query budget (b50, b200) and chunk size (c200, c600). All used GPT-4o mini for relevance tests and GPT-4o for query expansion (to five subqueries) and answer generation, except for LGR_b200_c200_mini, which used GPT-4o mini throughout. Comparison systems were GraphRAG (Local, Global, and Drift Search), Vector RAG with 8k- and 120k-token windows, and three published methods: LightRAG (opens in new tab), RAPTOR (opens in new tab), and TREX (opens in new tab). All methods were limited to the same 8k tokens for answer generation. GraphRAG Global Search used level 2 of the community hierarchy. LazyGraphRAG outperformed every comparison condition using the same generative model (GPT-4o), winning all 96 comparisons, with all but one reaching statistical significance. The best overall performance came from the larger budget, smaller chunk size configuration (LGR_b200_c200). For DataLocal queries, the smaller budget (LGR_b50_c200) performed slightly better, likely because fewer chunks were relevant. For ActivityLocal queries, the larger chunk size (LGR_b50_c600) had a slight edge, likely because longer chunks provide a more coherent context. Competing methods performed relatively better on the query classes for which they were designed: GraphRAG Global for global queries, Vector RAG for local queries, and GraphRAG Drift Search, which combines both strategies, posed the strongest challenge overall. Increasing Vector RAG’s context window from 8k to 120k tokens did not improve its performance compared to LazyGraphRAG. This raised the question of how LazyGraphRAG would perform against Vector RAG with 1-million token context window containing most of the dataset. Figure 4 shows the follow-up experiment comparing LazyGraphRAG to Vector RAG using GPT-4.1 that enabled this comparison. Even against the 1M-token window, LazyGraphRAG achieved higher win rates across all comparisons, failing to reach significance only for the relevance of answers to DataLocal queries. These queries tend to benefit most from Vector RAG’s ranking of directly relevant chunks, making it hard for LazyGraphRAG to generate answers that have greater relevance to the query, even though these answers may be dramatically more comprehensive, diverse, and empowering overall. Figure 4. Win rates of LazyGraphRAG (LGR) over Vector RAG across different context window sizes, broken down by the four AutoQ query classes and four AutoE metrics: comprehensiveness, diversity, empowerment, and relevance. Bars above 50% indicate that LazyGraphRAG outperformed the comparison condition.  AutoD: Automated data sampling and summarization Text datasets have an underlying topical structure, but the depth, breadth, and connectivity of that structure can vary widely. This variability makes it difficult to evaluate RAG systems consistently, as results may reflect the idiosyncrasies of the dataset rather than the system’s general capabilities. The AutoD component addresses this by sampling datasets to meet a target specification, defined by the number of topic clusters (breadth) and the number of samples per cluster (depth). This creates consistency across datasets, enabling more meaningful comparisons, as structurally aligned datasets lead to comparable AutoQ queries, which in turn support consistent AutoE evaluations. AutoD also includes tools for summarizing input or output datasets in a way that reflects their topical coverage. These summaries play an important role in the AutoQ query synthesis process, but they can also be used more broadly, such as in prompts where context space is limited. Since the release of the GraphRAG paper, we’ve received many requests to share the dataset of the Behind the Tech (opens in new tab) podcast transcripts we used in our evaluation. An updated version of this dataset is now available in the BenchmarkQED repository (opens in new tab), alongside the AP News dataset containing 1,397 health-related articles, licensed for open release.   We hope these datasets, together with the BenchmarkQED tools (opens in new tab), help accelerate benchmark-driven development of RAG systems and AI question-answering. We invite the community to try them on GitHub (opens in new tab).  Opens in a new tab

Cybersecurity researchers have flagged several popular Google Chrome extensions that have been found to transmit data in HTTP and hard-code secrets in their code, exposing users to privacy and security risks. "Several widely used extensions [...] unintentionally transmit sensitive data over simple HTTP," Yuanjing Guo, a security researcher in the Symantec's Security Technology and Response team, said. "By doing so, they expose browsing domains, machine IDs, operating system details, usage analytics, and even uninstall information, in plaintext." The fact that the network traffic is unencrypted also means that they are susceptible to adversary-in-the-middle (AitM) attacks, allowing malicious actors on the same network such as a public Wi-Fi to intercept and, even worse, modify this data, which could lead to far more serious consequences. The list of identified extensions are below - SEMRush Rank (extension ID: idbhoeaiokcojcgappfigpifhpkjgmab) and PI Rank (ID: ccgdboldgdlngcgfdolahmiilojmfndl), which call the URL "rank.trellian[.]com" over plain HTTP Browsec VPN (ID: omghfjlpggmjjaagoclmmobgdodcjboh), which uses HTTP to call an uninstall URL at "browsec-uninstall.s3-website.eu-central-1.amazonaws[.]com" when a user attempts to uninstall the extension MSN New Tab (ID: lklfbkdigihjaaeamncibechhgalldgl) and MSN Homepage, Bing Search & News (ID: midiombanaceofjhodpdibeppmnamfcj), which transmit a unique machine identifier and other details over HTTP to "g.ceipmsn[.]com" DualSafe Password Manager & Digital Vault (ID: lgbjhdkjmpgjgcbcdlhkokkckpjmedgc), which constructs an HTTP-based URL request to "stats.itopupdate[.]com" along with information about the extension version, user's browser language, and usage "type" "Although credentials or passwords do not appear to be leaked, the fact that a password manager uses unencrypted requests for telemetry erodes trust in its overall security posture," Guo said. Symantec said it also identified another set of extensions with API keys, secrets, and tokens directly embedded in the JavaScript code, which an attacker could weaponize to craft malicious requests and carry out various malicious actions - Online Security & Privacy extension (ID: gomekmidlodglbbmalcneegieacbdmki), AVG Online Security (ID: nbmoafcmbajniiapeidgficgifbfmjfo), Speed Dial [FVD] - New Tab Page, 3D, Sync (ID: llaficoajjainaijghjlofdfmbjpebpa), and SellerSprite - Amazon Research Tool (ID: lnbmbgocenenhhhdojdielgnmeflbnfb), which expose a hard-coded Google Analytics 4 (GA4) API secret that an attacker could use to bombard the GA4 endpoint and corrupt metrics Equatio – Math Made Digital (ID: hjngolefdpdnooamgdldlkjgmdcmcjnc), which embeds a Microsoft Azure API key used for speech recognition that an attacker could use to inflate the developer's costs or exhaust their usage limits Awesome Screen Recorder & Screenshot (ID: nlipoenfbbikpbjkfpfillcgkoblgpmj) and Scrolling Screenshot Tool & Screen Capture (ID: mfpiaehgjbbfednooihadalhehabhcjo), which expose the developer's Amazon Web Services (AWS) access key used to upload screenshots to the developer's S3 bucket Microsoft Editor – Spelling & Grammar Checker (ID: gpaiobkfhnonedkhhfjpmhdalgeoebfa), which exposes a telemetry key named "StatsApiKey" to log user data for analytics Antidote Connector (ID: lmbopdiikkamfphhgcckcjhojnokgfeo), which incorporates a third-party library called InboxSDK that contains hard-coded credentials, including API keys. Watch2Gether (ID: cimpffimgeipdhnhjohpbehjkcdpjolg), which exposes a Tenor GIF search API key Trust Wallet (ID: egjidjbpglichdcondbcbdnbeeppgdph), which exposes an API key associated with the Ramp Network, a Web3 platform that offers wallet developers a way to let users buy or sell crypto directly from the app TravelArrow – Your Virtual Travel Agent (ID: coplmfnphahpcknbchcehdikbdieognn), which exposes a geolocation API key when making queries to "ip-api[.]com" Attackers who end up finding these keys could weaponize them to drive up API costs, host illegal content, send spoofed telemetry data, and mimic cryptocurrency transaction orders, some of which could see the developer's ban getting banned. Adding to the concern, Antidote Connector is just one of over 90 extensions that use InboxSDK, meaning the other extensions are susceptible to the same problem. The names of the other extensions were not disclosed by Symantec. "From GA4 analytics secrets to Azure speech keys, and from AWS S3 credentials to Google-specific tokens, each of these snippets demonstrates how a few lines of code can jeopardize an entire service," Guo said. "The solution: never store sensitive credentials on the client side." Developers are recommended to switch to HTTPS whenever they send or receive data, store credentials securely in a backend server using a credentials management service, and regularly rotate secrets to further minimize risk. The findings show how even popular extensions with hundreds of thousands of installations can suffer from trivial misconfigurations and security blunders like hard-coded credentials, leaving users' data at risk. "Users of these extensions should consider removing them until the developers address the insecure [HTTP] calls," the company said. "The risk is not just theoretical; unencrypted traffic is simple to capture, and the data can be used for profiling, phishing, or other targeted attacks." "The overarching lesson is that a large install base or a well-known brand does not necessarily ensure best practices around encryption. Extensions should be scrutinized for the protocols they use and the data they share, to ensure users' information remains truly safe." Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post.

These widgets made Notion an even more useful app.

News Earth Small earthquakes can have a big impact on the movements of major faults The little quakes can disrupt the growth of slow-slip events along megathrust faults Megathrust faults can generate some of Earth’s largest quakes. One example is the 2011 Tohoku earthquake, which rocked Japan and fomented a tsunami that devastated coastal areas, as shown. These same faults can also release immense amounts of seismic energy over days or weeks in harmless slow-slip events. enase/Getty Images By Nikk Ogasa 15 hours ago Seismic symphonies of minor earthquakes may affect grand movements on major faults. Small and distant earthquakes can disrupt the growth of slow-slip events — gradual fault movements that can release tremendous amounts of energy at gentle tempos, a new analysis of seismic data suggests. Reported in the May 16 Science Advances, the research shows that the more frequently small earthquakes occur near a fault’s slow-slip zone, the less synchronized the slipping becomes. Megathrust faults — massive fractures where one tectonic plate pushes under another — are notorious for hatching Earth’s most devastating temblors. These same faults can also slide steadily for days or weeks in slow-slip events while emitting faint vibrations called tectonic tremor. First identified around two decades ago, these softly humming events can shift stress on faults and may influence the timing of large, destructive earthquakes. But it’s not clear why these enigmatic events can grow for hundreds of kilometers along some faults while remaining restricted to small parts of others. Sign up for our newsletter We summarize the week's scientific breakthroughs every Thursday.

Today, Sony held its latest State of Play and while it didn’t include some of the bigger games that people were likely hoping for, like a new God of War spin-off, it did include some cool surprises, including what might be the best-looking fighting game I’ve seen in years and a remake of a beloved Final Fantasy title. Suggested ReadingTears Of The Kingdom's Newspaper Questline And The State Of Hyrulean Journalism Share SubtitlesOffEnglishview videoSuggested ReadingTears Of The Kingdom's Newspaper Questline And The State Of Hyrulean Journalism Share SubtitlesOffEnglishHere’s the full State of Play if you want to watch it all: State of Play | June 4, 2025 [English]Lumines Arise Lumines Arise - Announce Trailer | PS5 GamesThis fun announcement kicked off the 45-minute show. It’s from the devs behind Tetris Effect, and it looks (and sounds) awesome. This one is coming to PS5 and PSVR2 in Fall 2025.Pragmata delayed againPragmata - First Contact Trailer | PS5 GamesCapcom had a new gameplay trailer for its long-awaited space-adventure-action-horror game featuring a young robot girl and a cool astronaut dude fighting robots. The game was set to come out in 2022, got delayed until 2023, and then got delayed again. Now it’s set to arrive in 2026. Romeo Is a Deadman looks wildRomeo is a Dead Man - Announce Trailer | PS5 GamesZombies attack, nearly killing Romeo, but luckily his grandfather shoves a big sci-fi thing into his head and turns him into a sword-wielding half-dead undead killer. Okay, I’m interested. This one is “maybe” arriving in 2026. No shock that Suda51 and Grasshopper Manufacture are behind this wild-looking game. Silent Hill F arrives in SeptemberSilent Hill f - Release Date Trailer | PS5 GamesI’m very happy that we’ve entered a new and better era for the Silent Hill franchise after so, so many years of crap and lukewarm slop. This latest entry looks very different than past games, but still seems properly foggy, spooky, and creepy. And that’s all I need in a Silent Hill sequel. Don’t have to wait long for this one as it launches September 25, 2025.Bloodstained: The Scarlett Engagement is revealedBloodstained: The Scarlet Engagement - Announce Trailer | PS5 GamesSurprise! We are getting a new Bloodstained game. What started back in 2015 as a crowdfunded attempt to make a new Castlevania-inspired 2D action game has expanded into a large franchise of its own. And it’s about to get bigger when this new entry arrives sometime in the future on PS5. Digimon Story Time StrangerDigimon Story Time Stranger - Release Date Trailer | PS5 GamesWow, it’s wild how much better Digimon games look than Pokémon games. This latest time-traveling RPG set in the universe features some slick visuals and a lot of people screaming about the digital world. As someone living in 2025, I’m fine with the digital world being burned to the ground. Time Stranger is out October 3, 2025. Final Fantasy Tactics is finally getting a remakeFinal Fantasy Tactics - The Ivalice Chronicles - Announcement Trailer | PS5 GamesYou can read more about this in our story here, but suffice it to say that the legendary tactics RPG is, at long last, getting the remake fans have been clamoring for for ages. Sony devoted a few minutes to sharing trailers and a few bits of info on these four games, one of which is launching on PS4. Wild. Baby Steps - Release Date Announcement | PS5 GamesHirogami - Pre-order Trailer | PS5 GamesCairn - Release Date and Demo | PS5 GamesNinja Gaiden: Ragebound - Release Date Announcement | PS5 & PS4 GamesMortal Kombat Legacy Collection looks amazingMortal Kombat: Legacy Kollection - Announce Trailer | PS5 & PS4 GamesDigital Eclipse, the retro game wizards behind some excellent old-school video game collections, is taking on the Mortal Kombat series in 2025. Legacy Collection will contain a ton of games from the series, including handheld, console, and arcade ports, as well as rollback netcode and documentary content. I’m very excited to see more of this thing.Sony is making a fight stickProject Defiant Wireless Fight Stick - Teaser TrailerNot much info beyond that. Here’s Sony’s official description of the device:Join the fray at home or away with the Project Defiant wireless fight stick*. Take the fight to your opponents with the included sling carry case, and enjoy precise in-game response with ultra-low latency wireless and wired play options, along with a durable, ergonomic design that’s built for battle.New Metal Gear Solid Delta Snake Eater trailerMetal Gear Solid Δ: Snake Eater - Gameplay Trailer | PS5 GamesThe Ape Escape mode is back and looks bigger than before. But the big news is at the very end, where Konami is teasing what looks like a multiplayer mode. Is Metal Gear Online returning? I hope so. Nioh 3 is coming in 2026, a demo is out nowNioh 3 - Announcement Trailer | PS5 GamesTeam Ninja is back with Nioh 3. The game will let players swap between a samurai and a ninja on the fly during combat, and looks slick as heck. This one drops in 2026, but you can check out a demo for it today on PS5. Thief VR spin-off coming to PSVR2 this yearThief VR: Legacy of Shadow - Reveal Trailer | PS VR2 GamesWhen I saw this trailer, I thought, “Hey, this looks like a new Thief game.” And I was right. Thief VR Legacy of Shadow arrives in 2025 and is being co-developed by Eidos-Montréal and Vertigo Games. Tides of Tomorrow looks like a colorful Waterworld gameTides of Tomorrow - Release Date Trailer | PS5 GamesI love colorful-looking games, so Tides of Tomorrow instantly caught my eye. The mix of online asynchronous gameplay and having to deal with other people’s decisions in a dying and flooded world sounds interesting. Tides of Tomorrow arrives in February 2026.Astro Bot is getting even more levels! Astro Bot - Challenge DLC Trailer | State of Play 2025One of the best PS5 games ever made, Astro Bot, is getting even more free levels later this month. Five new levels will soon be added to Astro Bot. And Sony is bringing back the fan-favorite Astro Bot PS5 controller that sold out instantly last year.Sea of Remnants is another colorful pirate gameSea of Remnants - Announce Trailer | PS5 GamesWait a minute, another colorful and fun-looking ocean-based adventure game? That’s strange. But anyway, this third-person pirate game has a cool style and big bosses to fight. and ship gameplay. And mermaids. It arrives on PS5 in 2026. Sword of the Sea is coming to PS PlusSword of the Sea - Launch Date Announcement | PS5 GamesThe people behind Abzu and Pathless have a new game coming out, and it looks like you’ll be doing a lot of sick sword surfing. This launches on PS Plus on August 19. More games coming to PS Plus Classic CatalogDeus Ex’s PS2 port - Jun 17Twisted Metal 3 and Twisted Metal 4 - July 15Resident Evil 2 and Resident Evil 3 - Later this summer007 First Light reveals its new Bond“Bond is a bullet without a target. Let’s give him one.” This new trailer looks exciting as heck, but I’m really bummed by how boring the new Bond himself looks. This is out in 2026. Read more here. Ghost of Yotei will get its own digital eventSony is promising a big gamepaly deep dive for Sucker Punch’s upcoming samurai game. Expect to learn more in July. MARVEL Tōkon: Fighting Souls | Announce TrailerWell, this is a wonderful surprise. Sony, Marvel, and Arc System Works (Guilty Gear, BlazBlue, Dragon Ball FighterZ) are teaming up to make a 2.5D Marvel Comics tag-team fighting game. And it looks sick as hell. Marvel Tōkon: Fighting Souls is coming out in 2026 on PS5 and PC. Here’s a separate video Sony posted about how the game came about and the work going into it: MARVEL Tōkon: Fighting Souls | From Japan to the World

Behind 69 Walker Street’s facade in the Tribeca neighborhood of New York is a beehive of designers all striving toward the same goal: making great work, whether big or small, luxury residential or affordable housing, interiors or ground up. Fogarty Finger occupies three floors of the industrial loft building so ubiquitous in the neighborhood Robert De Niro made famous. The 130-person firm was founded in 2003 by Chris Fogarty and Robert Finger after the pair spent a decade working at SOM. Alexandra Cuber joined the office in 2014 and is a director in Fogarty Finger’s interiors studio. John Zimmer also teamed up as a director, following a stint in San Francisco. Despite having grown significantly, Fogarty Finger remains malleable, and responsive to ever-evolving industry trends. “About 80 percent of our clients are return clients,” Fogarty told AN. “Not only do clients often come back, they also recommend us. For the longest time we didn’t do business development because we didn’t need to. Now, at our size, we have to be a bit more thoughtful.” “One of many things that differentiates us from other, larger offices is that we’re still first-generation leadership,” Finger added. “We bring a very boutique approach to everything we do. Nobody has an expectation of what the firm does from generations past. This means we don’t have people above us managing us from the financial side [who are] responsible for many, many offices. This gives us more freedom in terms of design; we don’t come with the same overhead as many other firms have.” Astoria West (Alexander Severin) Astoria West, 2022 A waterfront site Fogarty Finger recently negotiated is in Astoria, Queens. Astoria West is a handsome, 500-unit luxury residential complex that’s easily recognizable from Manhattan thanks to its bays, which jut out from the facade. The complex is broken up into three buildings with a shared courtyard. “We had a supertight budget,” Fogarty said. “The client came to us and said, ‘I need something I can recognize while standing in Manhattan.’ So we used dormer rules that allowed for these vertical portals into the apartment, which gave it an identity. Working on a very slim budget, a lot of detailing and thinking went into the windows, which change size, and the brick patterns. A lot of thought also went into the ground plane. We wanted to make apartments that people couldn’t look into from the sidewalk, without creating a soulless pedestrian experience outside.” Private Equity Office (David Mitchell) Private Equity Office, 2024 Fogarty Finger’s interiors studio collaborates with high-caliber real estate, financial services, and legal firms across the Eastern Seaboard. Recently, Fogarty Finger redesigned a space within an iconic Manhattan tower for a private equity firm; the result was a design that’s both inviting and dignifying. “Companies put a lot of thought into their address, but so often how they want their interiors to look and work is an open-ended conversation,” Finger said. “Real estate is becoming a very experience-driven industry, which is affecting everything.” For Fogarty Finger, helping financial services and legal practices arrive at a clear understanding of their identity is paramount, as was the case in this project, in which the client requested to stay anonymous. “We often start with visioning sessions,” Cuber said. “We ask clients to describe themselves in a few words, which often rattles them a bit. It’s so interesting taking these interviews and creating a space that reflects the client and how they want to present themselves.” The Eliza + Inwood Public Library (Alexander Severin) The Eliza + Inwood Public Library, 2024 What to do with all of New York City’s publicly owned land has mayoral candidates talking. Amid ongoing debates, one thing seems clear: The new Eliza Apartments at the redeveloped Inwood Public Library in Manhattan is a very good precedent to use when negotiating city land moving forward. Mayoral candidates Zohran Mamdani, Zellnor Myrie, and Andrew Cuomo all alluded to the Eliza + Inwood Public Library in their housing plans as a case study to emulate. The mixed-use building opened earlier this year and was reviewed by AN. Fogarty Finger designed the ground-up building and its accompanying apartments, while Andrew Berman Architects ideated the ground-level library. “This is a truly multiuse building,” Zimmer said. “It has a community center that’s used for vocational training and STEM in the cellar, and there’s also a universal pre-K.” Nevins Landing in Gowanus, Brooklyn (Courtesy Fogarty Finger) Nevins Landing, 2021– The Gowanus neighborhood is one of the largest, most significant development sites underway in New York today. Many high-profile firms are designing buildings near the polluted canal—a Superfund site in a yearslong cleanup—and Fogarty Finger is one of them. The firm is behind 320 and 340 Nevins Landing, on the banks of what many hope becomes the “eco-friendly Amsterdam of Brooklyn.” Fogarty Finger’s design at Nevins Landing can be understood as two separate plinths that front a shared plaza with towers above them. The facades mimic the old brick buildings in the neighborhood, with all of their idiosyncrasies. One of the other commendable features of Nevins Landing’s design is its retail component: Fogarty Finger created internal public corridors lined with a variety of small commercial spaces. This will ensure the ground level of Nevins Landing is a happening display of artists and coffee shops instead of, say, another Walgreens. “Our goal was to make a neighborhood,” Cuber said.

html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd" The MetaHuman client reel. Epic Games’ framework for generating realistic 3D characters for games is out of early access, and can now be used with any DCC app or game engine. Epic Games has officially launched MetaHuman, its framework for generating realistic 3D characters for games, animation and VFX work, after four years in early access.The core applications, MetaHuman Creator, Mesh to MetaHuman and MetaHuman Animator, are now integrated into Unreal Engine 5.6, the latest version of the game engine. In addition, Epic has updated the licensing for MetaHuman characters, making it possible to use them in any game engine or DCC application, including in commercial projects. There are also two new free plugins, MetaHuman for Maya and MetaHuman for Houdini, intended to streamline the process of editing MetaHumans in Maya and Houdini. A suite of tools for generating and animating realistic real-time 3D characters First launched in early access in 2021, MetaHuman is a framework of tools for generating realistic 3D characters for next-gen games, animation, virtual production and VFX.The first component, MetaHuman Creator, enables users to design realistic digital humans. Users can generate new characters by blending between presets, then adjusting the proportions of the face by hand, and customising readymade hairstyles and clothing. The second component, Mesh to MetaHuman, makes it possible to create MetaHumans matching 3D scans or facial models created in other DCC apps. The final component, MetaHuman Animator, streamlines the process of transferring the facial performance of an actor from video footage to a MetaHuman character. MetaHuman Creator was originally a cloud-based tool, while Mesh to MetaHuman and MetaHuman Animator were available via the old MetaHuman plugin for Unreal Engine. Now integrated directly into Unreal Engine 5.6 That changes with the end of early access, with MetaHuman Creator, Mesh to MetaHuman and MetaHuman Animator all now integrated directly into Unreal Engine itself.Integration – available in Unreal Engine 5.6, the latest version of the engine – is intended to simplify character creation and asset management worklows. Studios also get access to the MetaHuman source code, since Unreal Engine itself comes with full C++ source code access. However, the tools still cannot be run entirely locally: according to Epic, in-editor workflow is “enhanced by cloud services that deliver autorigging and texture synthesis”. https://www.cgchannel.com/wp-content/uploads/2025/06/250604_MetaHumanOfficialLaunch_LicensingChanges_UnifiedClothing.mp4 Users can now adjust MetaHumans’ bodies, with a new unified Outfit Asset making it possible to create 3D clothing that adjusts automatically to bodily proportions. Updates to both MetaHuman Creator and MetaHuman Animator In addition, the official release introduces new features, with MetaHuman Creator’s parametric system for creating faces now extended to body shapes.Users can now adjust proportions like height, chest and waist measurements, and leg length, rather than simply selecting preset body types. Similarly, a new unified Outfit Asset makes it possible to author custom 3D clothing, rather than selecting readymade presets, with garments resizing to characters’ body shapes. MetaHuman Animator – which previously required footage from stereo head-mounted cameras or iPhones – now supports footage from mono cameras like webcams. The toolset can also now generate facial animation – both lip sync and head movement – solely from audio recordings, as well as from video footage. You can find fuller descriptions of the new features in Epic Games’ blog post. Use MetaHumans in Unity or Godot games, or sell them on online marketplaces Equally significantly, Epic has changed the licensing for MetaHumans.The MetaHuman toolset is now covered by the standard Unreal Engine EULA, meaning that it can be used for free by any artist or studio with under $1 million/year in revenue. MetaHuman characters and clothing can also now be sold on online marketplaces, or used in commercial projects created with other DCC apps or game engines. The only exception is for AI: you can use MetaHumans in “workflows that incorporate artificial intelligence technology”, but not to train or enhance the AI models themselves. Studios earning more than $1 million/year from projects that use MetaHuman characters need Unreal Engine seat licenses, with currently cost $1,850/year. However, since MetaHuman characters and animations are classed as ‘non-engine products’, they can be used in games created in other engines, like Unity or Godot, without incurring the 5% cut of the revenue that Epic takes from Unreal Engine games. https://www.cgchannel.com/wp-content/uploads/2025/06/250604_MetaHumanOfficialLaunch_LicensingChanges_MetaHumanForMaya.mp4 The free MetaHuman for Maya plugin lets you edit MetaHumans with Maya’s native tools. New plugins streamline editing MetaHumans in Maya and Houdini Last but not least, Epic Games has released new free add-ons intended to streamline the process of editing MetaHumans in other DCC software.The MetaHuman for Maya plugin makes it possible to manipulate the MetaHuman mesh directly with Maya’s standard mesh-editing and sculpting tools. Users can also create MetaHuman-compatible hair grooms using Maya’s XGen toolset, and export them in Alembic format. The MetaHuman for Houdini plugin seems to be confined to grooming, with users able to create hairstyles using Houdini’s native tools, and export them in Alembic format. The plugins themselves are supplemented by MetaHuman Groom Starter Kits for Maya and Houdini, which provide readymade sample files for generating grooms. Price, licensing and system requirements MetaHuman Creator and MetaHuman Animator are integrated into Unreal Engine 5.6. The Unreal Editor is compatible with Windows 10+, macOS 14.0+ and RHEL/Rocky Linux 8+.The MetaHuman plugin for Maya is compatible with Maya 2022-2025. The MetaHuman for Houdini plugin is compatible with Houdini 20.5 with SideFX Labs installed. All of the software is free to use, including for commercial projects, if you earn under $1 million/year. You can find more information on licensing in the story above. Read an overview of the changes to the MetaHuman software on Epic Games’ blog Download the free MetaHuman for Maya and Houdini plugins and starter kits Read Epic Games’ FAQs about the changes to licensing for MetaHumans Have your say on this story by following CG Channel on Facebook, Instagram and X (formerly Twitter). As well as being able to comment on stories, followers of our social media accounts can see videos we don’t post on the site itself, including making-ofs for the latest VFX movies, animations, games cinematics and motion graphics projects.

We may earn a commission from links on this page.In 2023, I decided to update my Apple Watch after consistently failing to wear my Series 4 for a number of years. I sold that one on Poshmark and began looking at newer models to find one with enough features to convince me to actually wear it. I opted to get a Series 8, although the Series 9 had just been released, as I was buying two: one for my mom and one for myself. As it turns out, that was a great decision.If you're searching for a new wearable or considering upgrading yours, you might also be wondering which of the older Apple Watch models is still useful today. My Series 8 is holding up beautifully three years after it was introduced, so I'm a big proponent of using older devices as long as possible. But not all Apple Watches will work as well as the Series 8 does in 2025. Don’t buy a watch Apple doesn’t support anymoreWe have to draw the line somewhere: Seven of Apple's watches are no longer supported, meaning they won't receive any software or security updates anymore. In addition, you run the risk that the watch will no longer be compatible with your iPhone or certain apps. In short, you shouldn't buy a watch that Apple doesn't support. That includes the following:Apple Watch Series 0Apple Watch Series 1Apple Watch Series 2Apple Watch Series 3Apple Watch Series 4Apple Watch Series 5Apple Watch SE (first-gen) While the company does currently support the Series 6, it is next in line to join this list. It's not clear when that will happen, but you can be sure it will. We'll see next week—when Apple reveals watchOS 26—whether the watch will be supported another year. If not, it'll be stuck on watchOS 11 for good.Performance and other generational Watch improvementsThere are considerations for older Apple Watch models that extend beyond their ability to simply run the latest operating system. With each generation, improvements are made in some form or another. For instance, the Series 4 introduced the ECG sensor, while the Series 6 introduced the blood oxygen sensor (though Apple had to disable the feature for the Series 9 and Ultra 2 in the U.S. due to a lawsuit). The Series 7 charges faster than its predecessors, and Apple has included fast charging on most watch models since (sorry, Apple Watch SE users).In general, each Apple Watch is faster than the last. Apple tends to put its newest S-Chip—the Apple Watch's processor—in its latest watch series. Simply put, a newer S-chip gives you a faster, more productive product. The Series 6 has an S6 chip, Series 7 has S7, and so on until you hit the Ultras. (The first-generation Ultra has an S8 chip like the Series 8, while the Ultra 2 has an S9 chip like the Series 9.)While there are some core features all currently supported watches share—like workout and swim tracking, sleep tracking, Apple Pay, ECG scanning, and the ability to read and respond to messages—newer models also each have some of their own special advancements and upgrades. Here's a brief list:The Series 7 introduced faster charging, a larger display, and more durable screen.The Series 8 brought temperature sensing, crash detection, and a low-power mode for conserving battery (as did the second-gen Apple Watch SE).The Series 9 debuted new gesture controls, on-device Siri access, more precise location tracking in Find My, and a display with double the brightness of the Series 8.The first-gen Apple Watch Ultra introduced a more durable titanium casing, custom shortcuts to apps and modes via the Action button, a depth gauge and water temperature sensor, more accurate GPS, a 36-hour battery life, and an emergency siren.The Apple Watch Ultra 2 introduced a display with a maximum brightness of 3,000 nits and on-device media playback. The Series 10 introduced the largest display available on a standard Apple Watch and faster charging. If you see a feature you absolutely need in a particular watch model, you'll have to spring for it. But if you just want something for core Apple Watch tasks, you can start to consider older options. Apple's watch comparison site can be a helpful tool for identifying different features among models. Battery degradation All tech degrades to some extent and the Apple Watch is no different—particularly when it comes to the battery. While there are ways to mitigate the problem, over time, the lithium-ion battery powering your wrist computer won't last as long as it used to. That might be a bigger issue than your watch's ability to download and support a new operating system. Apple's warranty doesn't cover batteries that wear down from normal use, and charges $99 for the repair, which you could instead put towards the purchase of a new watch. There is one exception: Battery service is free if you have AppleCare+ and your watch's battery holds less than 80% of its original capacity. You need to take your watch in to an Apple Store or service provider to have it tested. My watch was pre-owned, and while I have no way of knowing if it has its original battery, my battery life has not declined substantially in the two years I've been using it daily. I primarily use mine to track my workouts, vitals, and sleep, which means it's always running. I charge it while I'm in the shower and occasionally for a few minutes before bed, and that's about it. On an average day of constant notifications, mine lasts me a bit longer than the advertised 18-hour mark. Because I have little interest in the small improvements offered by the Series 9 and Series 10—like extra brightness, larger screen size, performance bumps, and advanced cycle tracking—the battery life is what would (or will) compel me to upgrade in the future, but for now, I have not noticed any problems. I asked my mom if she's noticed any battery degradation on hers, since I bought it at the same time and place as mine, and she said no. She uses hers to track walking workouts, talk on the phone, and monitor her sleep and vitals, too.Stick with the Series 7 or newerThoroughly consider which of the features on newer models are actually important to you before making any buying decision and, if you can, stay above a Series 7. The Series 6 is still functional, but, again, it's a matter of time until the company stops acknowledging that one completely. For now, I have been pleasantly surprised by how well my Series 8 has held up for two years. Its touchscreen has never faltered, the external buttons function perfectly, it syncs to all of my apps and devices with no problem, and it does exactly what I need it to do—which is to tell me how many steps I'm taking and how hard I'm exerting myself at the gym. If you're in the market for a smart watch, I see no reason that an older version shouldn't be considered, as long as it still runs the latest operating system. You can save a chunk of change by sourcing an older model from the resale or refurbished markets and put that money away for when Apple drops something super revolutionary in the wearable space. Apple doesn't sell anything below a Series 10 or SE directly anymore, so if you want a 6, 7, 8, or 9, you'll have to check the resale and refurbished markets. You'll definitely save some money that way (a new Series 10 starts at $399, though it can be found on sale, and the refurbished Series 8 I got is selling right now for $219). Apple Watch Series 8 (Renewed) $209.00 at Amazon $220.00 Save $11.00 Learn More Learn More $209.00 at Amazon $220.00 Save $11.00

Game reveals, release date confirmations, and new looks at titles coming to PlayStation in the near future: today’s State of Play packed a lot into its runtime. Whether you missed the show, want to rewatch it, or dig down into the individual announcements, this article has you covered.  Firstly, you can rewatch the full show below. Underneath that we highlight each of the games featured in the show with recaps of their announcement as well as their full trailers. We also have further details and insight by the game creators in a selection of dedicated PS Blog articles.  Play Video View and download image Download the image close Close Download this image Astro Bot  New levels are coming to Astro Bot this summer! Get ready for the challenge of five new Vicious Void Galaxy levels. They’ll require every bit of skill together to complete! And of course, these new levels will introduce their own Special Bots! And that’s not all: an updated smiley version of the Astro Bot Limited Edition DualSense wireless controller is set to launch later this year. Preview both the upcoming DualSense controller and the new PS5 levels in a PS Blog post from Team Asobi Studio Head Nicolas Doucet. Play Video Baby Steps The wonderfully weird walking sim has a release date as Baby Steps toddles onto PS5 September 8. Today’s new gameplay trailer further highlights the game’s unique traversal mechanics, as well as challenges its onesie-wearing protagonist Nate faces as he attempts to answer the call of nature.  Play Video Bloodstained: The Scarlet Engagement  The 2.5D side-scrolling action RPG returns with a new dark chapter. Explore the massive Ethereal Castle as two new heroes – Leo and Alex – join forces to tackle its fearsome inhabitants. You’ll be able to switch between the duo at the press of a button, leveraging each adventurer’s distinct abilities in order to survive.  505 Games dives further into the sequel’s gameplay mechanics and details what you can expect when you enter the castle’s halls when it launches on PS5 next year in a PS Blog post.  Play Video Cairn Climb like never before in survival-climber Cairn, which ascends onto PS5 November 5. Consider your path and climb anywhere on the mountain, managing your endurance and resources to survive. You’ll be able to hone your skills and test palm strength early, as a demo launches onto PlayStation Store today.  Cairn creator The Game Bakers breaks down its interactive take on alpinism in a tie-in PS Blog post.  Play Video Digimon Story: Time Stranger After being announced in the last State of Play this past February, Digimon Story: Time Stranger returns with a new trailer that digs into its story, reveals more of its vibrant characters and highlights the variety of Digimon growth and customization you can expect when the game launches October 3.  View and download image Download the image close Close Download this image Everybody’s Golf Hot Shots  Teeing off on PS5 this September 5 is the return of the classic golfing series. Everybody’s Golf Hot Shots debuted a new gameplay trailer that revealed a surprise guest star: Pac-Man! The gaming icon will be available as an early unlockable character when you pre-order the game.  Play Video Final Fantasy Tactics – The Ivalice Chronicles Originally released in 1997 for PlayStation, Final Fantasy Tactics is known for its rich story and deep, strategic gameplay. This September 30 you can enjoy both when the strategy RPG returns on PS5 and PS4 in the form of Final Fantasy Tactics – The Ivalice Chronicles. This enhanced version adds fully voiced dialogue, optimized and updated UI, graphical improvements, and a number of other quality of life features Square Enix details what to expect, including the more accessible “Squire” difficulty setting, in a PS Blog post.  Play Video Ghost of Yōtei Today’s show announced a special State of Play episode dedicated to Ghost of Yōtei, coming your way soon.  Sucker Punch will guide you through an extended look at new and evolved gameplay mechanics, including exploration, combat, and much more. Mark your calendar: the episode airs this July.  Play Video Hirogami Hirogami is an origami-inspired 3D action platformer coming to PS5 on September 3. Explore a beautiful but fragile origami world as Hiro, a master of the art of ‘folding’, and take on animal forms to traverse the landscape, solve puzzles, overcome enemies, and save the realm from a deadly digital threat. Play Video 007 First Light IO Interactive’s third-person action-adventure game 007 First Light third-person action-adventure game unveils a new James Bond origin story. Discover the events that lead a young maverick to become the best MI6 agent and the world’s most iconic spy when the game launches on PS5 next year. IO Interactive shares first details on the game, including its story and Bond’s background in a new PS Blog post.  Play Video Lumines Arise A brand-new, built from the ground up entry into the iconic puzzle series launches later this year on PS5 and features optional PS VR2 compatibility. Lumines Arise includes 30 flow state-inducing stages, including lush jungles, oceans, to more electronic frontiers like the bustling streets of Tokyo and the endless expanse of outer space. A new Burst mechanic amps up the timeless gameplay.  Enhance discusses the debut of its new title, talks Avatars and teases an upcoming demo in a new PS Blog post.  Play Video MARVEL Tōkon: Fighting Souls  PlayStation Studios, Arc System Works (Arc), and Marvel Games have joined forces to realize the latest in tag team fighters, MARVEL Tōkon: Fighting Souls! Experience the Marvel Universe like never before with reimagined characters and stages, a heart-pounding soundtrack, intuitive gameplay mechanics, and jaw-dropping visuals that will keep you on the edge of your seat. Whether this is your first fighting game or you are a veteran of the genre, Arc has incorporated gameplay controls and mechanics that are easy to pick up and play, and yet still offer the depth and versatility for high level competition.  Find out more in this PS Blog post.  Play Video Metal Gear Solid Delta: Snake Eater  Today’s trailer offered a closer look at how this remake has approached the fearsome adversaries that Naked Snake will face on his mission: The Cobra Unit. The new footage doesn’t just linger on the high stakes action you’ll face during the story campaign though. Konami also shares gameplay of Snake vs Monkey, which is also making its return when the game launches on PS5 this August 28.  Play Video Mortal Kombat Kollection Digital Eclipse partners with Warner Bros. Interactive Entertainment to bring Mortal Kombat: Legacy Kollection to PlayStation 4 and PlayStation 5 later this year. With multiple playable games from the early days of this groundbreaking fighting game series as well as interactive documentaries, Mortal Kombat: Legacy Kollection promises to be the most comprehensive, detailed look at the franchise’s history ever assembled. In a supporting PS Blog post, Digital Eclipse outlines the games included in the collection, and shares more information on the documentaries that’ll include Mortal Kombat co-creators Ed Boon and John Tobia, developers, actors and more.  Play Video Ninja Gaiden: Ragebound Ninja Gaiden: Ragebound, the new spectacular side-scrolling entry to the acclaimed series, releases on July 31 on PS5 and PS4. Honoring the franchise’s legacy, Ragebound modernises the unforgiving action-platforming formula with the fast-paced and exhilarating action The Game Kitchen (Blasphemous I & II) is known for. Play Video Nioh 3  Koei Tecmo and developer Team Ninja announced Nioh 3 for PS5. In this dark fantasy action RPG, players can fight using two distinct combat styles: Samurai and Ninja. The Samurai style provides a gameplay experience similar to previous Nioh titles, while Ninja style excels in quick movements like dodging and aerial actions. Players will be able to switch between battle styles instantly at any time. Intrigued to know how they’ll work? You can find out today with a limited time demo that’ll be launching on PlayStation Store.  Keoi Tecmo shares more story and gameplay details about the game in an accompanying PS Blog post.  View and download image Download the image close Close Download this image PlayStation Plus  Along with Sword of the Sea coming August 19 as part of the Game Catalog lineup (more on that further down), there were new titles announced coming to PlayStation Plus. The PS2 version of immersive sci-fi sim Deus Ex joins Game Catalog June 17, Twisted Metal 3 and Twisted Metal 4 come to the PlayStation Plus Premium’s Classics range July 15. Later this summer, the original PlayStation versions of Resident Evil 2 and Resident Evil 3: Nemesis also come to  PlayStation Plus Premium’s Classics range. Play Video Pragmata Pragmata, Capcom’s new science fiction adventure, received a new gameplay trailer during today’s State of Play. This early peak of the game’s gameplay shows its unique twist of action and strategy, as in Pragmata, players must control its two protagonists, Hugh and Diana, at the same time to overcome the many obstacles you’ll face. Capcom shares more details of its latest IP, out 2026 on PS5, in an accompanying PS Blog post.  Play Video Project Defiant  Today State of Play saw the reveal of the first wireless fight stick custom designed by PlayStation. Codenamed Project Defiant, this new controller allows wireless play through PlayStation Link, or wired connection on PS5 or PC, and is set to launch next year.  Get your first full details on the fight stick in this PS Blog post.  Play Video Romeo is a Dead Man Romeo Stargazer is a man stuck between life and death who chases space-time’s most wanted fugitives as FBI special agent Dead Man. This newly revealed action title, created by Grasshopper Manufacture, launches on PS5 next year, and sees you use guns, swords and even enemies’ own powers against them to battle evil hordes.  How does a time paradox shattering the space-time continuum turn someone into an FBI special agent? Grasshopper Manufacture explains (kinda) in a new PS Blog post.   Play Video Sea of Remnants Meet a world of puppetfolk exploring the open sea and its secrets in oceanic action RPG Sea of Remnants, which sets sail for PS5. Form a specialised crew to answer any challenge that lies beyond the horizon, upgrade your ship to ride out any storm and return home with your spoils to Orbtopia, a pirate city that’ll evolve based on your swashbuckling decisions.   Joker Studio expands on the game’s punk aesthetic art style and delves deeper into its gameplay in an accompanying PS Blog post.  Play Video Silent Hill f Silent Hill f launches September 25 on PS5, and today’s State of Play trailer shows Shimizu Hinako’s perilous journey as the high schooler’s hometown is engulfed in fog, and the dangers within will have her fighting for her life. As a standalone spinoff, the game serves as an excellent introduction to the series.  “Find beauty in terror” – Konami explains the mission statement that shaped the game’s development in this PS Blog post.  Play Video Sword of the Sea Giant Squid is bringing its exhilarating, mythic surfing adventure Sword of the Sea to PS5 on August 19, with the game releasing as part of that month’s PlayStation Plus Game Catalog lineup.  In an accompanying PS Blog post, the studio outlines the game’s inspirations and merging those with its signature environmental design and atmospheric narrative style has resulted in a mythic surfing adventure unlike anything else. Play Video Thief VR: Legacy of Shadow  The legendary Thief franchise is reimagined for PlayStation VR2 in Thief VR: Legacy of Shadow, launching later this year. Play as Magpie, a cunning thief orphaned by Northcrest’s brutality and shaped by the streets and use PS VR2 mechanics to steal, evade, and outsmart the forces controlling The City. Move between shadows, and extinguish light sources with water arrows, hands or even a well-aimed breath to remain undetected.   Vertigo Games details how the franchise’s mechanics have been adapted to PS VR2 in this PS Blog post.  Play Video Tides of Tomorrow Road 96 creator DigixArt returns with an intriguing asynchronous multiplayer, oceanic adventure, coming to PS5 February 24, 2026. Tides of Tomorrow’s vibrant post-apocalyptic world interweaves your choices and a previous player’s decisions for a truly unique experience. You’ll see echoes of that player’s choices and actions, that will help you avoid traps, solve puzzles, investigate what happened before, or simply adapt based on the other player’s actions. Road 96 creator DigixArt introduces the oceanic nomads the Tidewalkers and breaks down the game’s unique mechanic in a new PS Blog post written by the studio.