The real-time strategy game will be coming to PC in 2026 from PlaySide Studios and Warner Bros. Entertainment.

Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

WTF?! When the president of the United States and the world's richest person have a falling out, the ramifications can be widespread. Since Musk and Trump went from friends to enemies, $152 billion has been wiped off Tesla's share price, and Musk has threatened to decommission the SpaceX Dragon spacecraft that NASA relies on to deliver crew to and from the International Space Station. Musk has also said that Trump appears in files relating to Jeffrey Epstein. When he left the White House last week, Musk blasted those who said he'd had a falling out with Trump. The CEO insisted his departure was due to his scheduled 130 days as a government employee coming to an end. But Musk had been publicly criticizing Trump's Big Beautiful Bill Act, warning it would increase the budget deficit. After learning that an electric-vehicle tax credit that would help incentivize Tesla purchases was not included in the bill, Musk called it "a disgusting abomination" on X and urged Americans to call Congress to have the bill killed. On Thursday, the two men used their respective social media platforms to throw insults at each other. At one point, Trump threatened to "terminate Elon's Governmental Subsidies and Contracts" as a way to slash billions of dollars from the budget. The warning sent Tesla's shares down just over 14%, wiping around $152 billion off its valuation – and almost $100 billion off Musk's total net worth. In response to Trump's threat to cancel Musk's government contracts, Musk said SpaceX will begin decommissioning its Dragon spacecraft immediately. The craft, which NASA relies on for transport missions including ferrying astronauts to the ISS, is under contract worth roughly $4.9 billion. The capsule is the only US spacecraft capable of flying humans into orbit. The only other crewed spacecraft that sends astronauts to the ISS is Russia's Soyuz system. However, after an X user told him to "cool off," Musk wrote, "Ok, we won't decommission Dragon." // Related Stories As the war of words has grown, Musk said Trump's controversial tariffs will cause a recession in the second half of this year. But his "really big bomb" was an allegation that Trump appears in the files of pedophile financier Jeffrey Epstein, who killed himself in his jail cell in August 2019 while awaiting trial. Musk has also shared a post calling for Trump's impeachment and posted a poll asking if a new political party should be created in the US that "actually represents the 80% in the middle." 81% of the 4.4 million respondents have voted yes. One has to wonder if Musk believes his time in the White House was worth it. Beyond his reputational damage, his companies have suffered by association. Tesla sales were down 50% last month, and there have been protests and attacks on dealerships. The company's share price is down 40% from its all-time high on December 17, 2024, before Musk was part of DOGE.

Published June 5, 2025 10:00am EDT close Don’t be so quick to click that Google calendar invite. It could be a hacker’s trap Cybercriminals are sending fake meeting invitations that seem legitimate. NEWYou can now listen to Fox News articles! Americans’ personal data is now spread across more digital platforms than ever. From online shopping habits to fitness tracking logs, personal information ends up in hundreds of company databases. While most people worry about social media leaks or email hacks, a far less visible threat comes from data brokers.I still find it hard to believe that companies like this are allowed to operate with so little legal scrutiny. These firms trade in personal information without our knowledge or consent. What baffles me even more is that they aren’t serious about protecting the one thing that is central to their business model: data. Just last year, we saw news of a massive data breach at a data broker called National Public Data, which exposed 2.7 billion records. And now another data broker, LexisNexis, a major name in the industry, has reported a significant breach that exposed sensitive information from more than 364,000 people. A hacker at work (Kurt "CyberGuy" Knutsson)LexisNexis breach went undetected for months after holiday hackLexisNexis filed a notice with the Maine attorney general revealing that a hacker accessed consumer data through a third-party software development platform. The breach happened on Dec. 25, 2024, but the company only discovered it months later. LexisNexis was alerted on April 1, 2025, by an unnamed individual who claimed to have found sensitive files. It remains unclear whether this person was responsible for the breach or merely came across the exposed data.MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINSA spokesperson for LexisNexis confirmed that the hacker gained access to the company’s GitHub account. This is a platform commonly used by developers to store and collaborate on code. Security guidelines repeatedly warn against storing sensitive information in such repositories; however, mistakes such as exposed access tokens and personal data files continue to occur.The stolen data varies from person to person but includes full names, birthdates, phone numbers, mailing and email addresses, Social Security numbers and driver's license numbers. LexisNexis has not confirmed whether it received any ransom demand or had further contact with the attacker. An individual working on their laptop (Kurt "CyberGuy" Knutsson)Why the LexisNexis hack is a bigger threat than you realizeLexisNexis isn’t a household name for most people, but it plays a major role in how personal data is harvested and used behind the scenes. The company pulls information from a wide range of sources, compiling detailed profiles that help other businesses assess risk and detect fraud. Its clients include banks, insurance companies and government agencies.In 2023, the New York Times reported that several car manufacturers had been sharing driving data with LexisNexis without notifying vehicle owners. That information was then sold to insurance companies, which used it to adjust premiums based on individual driving behavior. The story made one thing clear. LexisNexis has access to a staggering amount of personal detail, even from people who have never willingly engaged with the company.Law enforcement also uses LexisNexis tools to dig up information on suspects. These systems offer access to phone records, home addresses and other historical data. While such tools might assist in investigations, they also highlight a serious issue. When this much sensitive information is concentrated in one place, it becomes a single point of failure. And as the recent breach shows, that failure is no longer hypothetical. A hacker at work (Kurt "CyberGuy" Knutsson)7 expert tips to protect your personal data after a data broker breachKeeping your personal data safe online can feel overwhelming, but a few practical steps can make a big difference in protecting your privacy and reducing your digital footprint. Here are 7 effective ways to take control of your information and keep it out of the wrong hands:1. Remove your data from the internet: The most effective way to take control of your data and avoid data brokers from selling it is to opt for data removal services. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.Get a free scan to find out if your personal information is already out on the web.2. Review privacy settings: Take a few minutes to explore the privacy and security settings on the services you use. For example, limit who can see your social media posts, disable unnecessary location-sharing on your phone and consider turning off ad personalization on accounts like Google and Facebook. Most browsers let you block third-party cookies or clear tracking data. The FTC suggests comparing the privacy notices of different sites and apps and choosing ones that let you opt out of sharing when possible.3. Use privacy-friendly tools: Install browser extensions or plugins that block ads and trackers (such as uBlock Origin or Privacy Badger). You might switch to a more private search engine (like DuckDuckGo or Brave) that doesn’t log your queries. Consider using a browser’s "incognito" or private mode when you don’t want your history saved, and regularly clear your cookies and cache. Even small habits, like logging out of accounts when not in use or using a password manager, make you less trackable.GET FOX BUSINESS ON THE GO BY CLICKING HERE4. Beware of phishing links and use strong antivirus software: Scammers may try to get access to your financial details and other important data using phishing links. The best way to safeguard yourself from malicious links is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.5. Be cautious with personal data: Think twice before sharing extra details. Don’t fill out online surveys or quizzes that ask for personal or financial information unless you trust the source. Create separate email addresses for sign-ups (so marketing emails don’t go to your main inbox). Only download apps from official stores and check app permissions.6. Opt out of data broker lists: Many data brokers offer ways to opt out or delete your information, though it can be a tedious process. For example, there are sites like Privacy Rights Clearinghouse or the Whitepages opt-out page that list popular brokers and their opt-out procedures. The FTC’s consumer guide, "Your Guide to Protecting Your Privacy Online," includes tips on opting out of targeted ads and removing yourself from people-search databases. Keep in mind you may have to repeat this every few months.7. Be wary of mailbox communications: Bad actors may also try to scam you through snail mail. The data leak gives them access to your address. They may impersonate people or brands you know and use themes that require urgent attention, such as missed deliveries, account suspensions and security alerts.Kurt’s key takeawayFor many, the LexisNexis breach may be the first time they realize just how much of their data is in circulation. Unlike a social media platform or a bank, there is no clear customer relationship with a data broker, and that makes it harder to demand transparency. This incident should prompt serious discussion around what kind of oversight is necessary in industries that operate in the shadows. A more informed public and stronger regulation may be the only things standing between personal data and permanent exposure.CLICK HERE TO GET THE FOX NEWS APPShould companies be allowed to sell your personal information without your consent? Let us know by writing us atCyberguy.com/Contact.For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you'd like us to cover.Follow Kurt on his social channels:Answers to the most-asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com. All rights reserved. Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on "FOX & Friends." Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

June 5, 20253 min readNew Hires Will Still Leave the NWS Dangerously Understaffed, Meteorologists SayNearly 600 employees left the National Weather Service or were fired in recent months. Meteorologists say 125 expected new hires will still leave the agency dangerously understaffedBy Chelsea Harvey & E&E News A tornado struck communities in Somerset and London, Ky., on May 16, 2025, leaving 19 dead and more injured. Michael Swensen/Getty ImagesCLIMATEWIRE | New hiring efforts at the National Weather Service won’t be enough to overcome staffing shortages and potential risks to human lives this summer, meteorologists warned Wednesday at a panel hosted by Democratic Washington Sen. Maria Cantwell.NOAA will hire around 125 new employees at the NWS, the agency said in an announcement first reported Monday by CNN. But nearly 600 employees have departed the NWS over the last few months, after the Trump administration fired probationary federal employees and offered buyouts and early retirements.That means the new hires will account for less than 25 percent of the total losses.On supporting science journalismIf you're enjoying this article, consider supporting our award-winning journalism by subscribing. By purchasing a subscription you are helping to ensure the future of impactful stories about the discoveries and ideas shaping our world today.“A quarter of the staff are not going to do the job when, let’s just say, both hurricane and fire risks are increasing,” Cantwell said during Wednesday’s panel. “[The Trump administration’s] approach in response to this has been a flimsy Band-Aid over a very massive cut.”Cantwell added that the National Hurricane Center is not fully staffed, as NOAA officials suggested last month when announcing their predictions for the upcoming Atlantic hurricane season outlook. The NHC has at least five vacancies, she said, representing meteorologists and technicians who help build forecasts for tropical cyclones in both the Atlantic and Pacific oceans.Meanwhile, NOAA is predicting above-average activity in the Atlantic this hurricane season. Updated fire maps also suggest that nearly all of Cantwell’s home state of Washington, along with Oregon and large swaths of California, will experience an above-average risk of wildfires by August.Kim Doster, NOAA’s director of communications, did not immediately respond to a request for comment on NOAA’s staffing shortages or the NHC’s vacancies.Three meteorologists speaking on the panel echoed Cantwell’s concerns, suggesting that staffing shortages at weather offices across the country risk forecasting errors and breakdowns in communication between meteorologists and emergency managers.At least eight local weather offices across the country are currently so short-staffed that they can no longer cover their overnight shifts, said Brian LaMarre, a former meteorologist-in-charge at the NWS office in Tampa Bay, Florida. Some of these offices may have to rely on “mutual aid,” or borrowed staff, from other NWS locations to cover their shifts during extreme weather events.But Cantwell and other panelists expressed concern that staff-sharing across the NWS could erode the accuracy of forecasts and warnings for local communities.Cantwell pointed to the meteorologists that specialize in fire weather forecasts. NOAA typically deploys those experts to provide forecasts and recommendations to firefighters on the ground when wildfires strike.“If you think you're gonna substitute somebody that’s gonna be somewhere else — I don’t know where, some other part of the state or some other state — and you think you're gonna give them accurate weather information? It just doesn't work that way,” she said.Washington state-based broadcast meteorologist Jeff Renner echoed her concerns.“The meteorologists that respond to [wildfires] have very specific training and very specific experience that can’t be easily duplicated, particularly from those outside the area,” he said.Meanwhile, LaMarre’s former position in Tampa is vacant, and around 30 other offices across the country are also operating without a permanent meteorologist-in-charge.“That person is the main point of contact when it comes to briefing elected officials, emergency management directors, state governors, city mayors, parish officials,” LaMarre said. “They are the individual that’s gonna be implementing any new change that is needed for hurricane season, blizzards, wildfires, inland flooding.”The NWS suffered from staffing shortages prior to the Trump administration. But LaMarre said he never saw such widespread vacancies, including offices unable to operate overnight, in his 30 years at the agency.He emphasized that NWS meteorologists will do whatever it takes to ensure accurate forecasts when extreme weather strikes. But too many gaps at local offices mean that some services will inevitably suffer, LaMarre added.“Whenever you look at an office that is short-staffed, that means a piece of that larger puzzle is taken away,” he said. “That means some outreach might not be able to occur. Some trainings might not be able to occur. Some briefings to officials might not be able to occur.”Reprinted from E&E News with permission from POLITICO, LLC. Copyright 2025. E&E News provides essential news for energy and environment professionals.

The Nintendo Switch 2 is finally a thing you can buy in the US — or at least, a thing you can try to buy. The $450 console officially went up for sale at midnight ET on June 5, with numerous retailers offering the device both online and in-store. Predictably, online stock dried up fairly quickly and remains highly limited as of Thursday evening. Broadly speaking, it appears people have had a bit more luck by heading to a physical retail store. There’s still no guarantee that you’ll be able to snag one that way, but a couple of Engadget staffers managed to grab a Switch 2 on Thursday at their local Target and GameStop, even with no pre-order in place.  If you can’t find the device out in the wild, your next best chance to get the Switch 2 online looks to be via Target. The retailer says it’ll resume selling the console online in the “early morning” on Friday, June 6, though it hasn’t confirmed an exact time beyond that. To make things a little easier for those still on the hunt, we’re rounding up all of the information we can find on how to buy the Nintendo Switch 2 at launch and tracking any restocks that pop up. Where to buy the Nintendo Switch 2 Walmart opened up online purchases at midnight on June 5, but both the console alone and Nintendo's Mario Kart World bundle remain out of stock as of our latest update. Naturally, the world's largest retailer is also selling the console at its brick-and-mortar locations. The company has noted that quantities are limited and inventory will vary by location, but it's worth checking if any store near you still has devices available. Target began selling the Switch 2 in stores on June 5. The retailer has warned that supply will be limited, but some stores still appear to have the console in stock as of Thursday evening, so it's worth looking into the locations closest to you. Anecdotally, Engadget's Billy Steele was able to pick up the device at a Target just outside of Greensboro, North Carolina as late as 4:15pm ET on Thursday. The company says it'll restock its online inventory in the "early morning" on Friday, June 6, while supplies last. That may be the next best opportunity to secure the Switch 2 without going to a store. GameStop held launch events on Wednesday and is advertising in-store availability, though again this will vary by location. Engadget's Cherlynn Low was able to buy the console without a pre-order at a GameStop store in the New York City area on Thursday morning. That particular location had a little under 80 units available, but its manager told Low that inventory will differ at other stores based on population. As we write this, the device is unavailable on GameStop's website. A $625 bundle that includes Mario Kart World, a microSD Express card and a few other accessories has been in and out of stock more frequently than the standard SKUs, though it's sold out now (and kind of scummy anyway). We briefly saw it pop back up around 2:30pm ET, so it may be one to bookmark if you can stomach the extra cost. The listings for the base console and Mario Kart bundle, meanwhile, now point to a "Find a Store" page. Best Buy held in-store launch events at midnight and said it'd have limited stock at its retail locations starting June 5. It is not selling the console online during launch week, however. You may also have some luck at certain membership-based retailers. A Mario Kart World bundle at Costco that includes a 12-month Switch Online membership has gone in and out of stock, while Sam's Club has had a bundle without the Switch Online sub available as well. You'll need a membership to check on either of those, though. We've also seen online stock at BJ's, but those listings are unavailable as of our most recent update. Verizon briefly had the Switch 2 available on Thursday morning, but that's dried up, and only those with Verizon service were able to order. As of now, Amazon is the only major retailer that doesn't have some form of Switch 2 listing on its website. The company didn't take any pre-orders for the Switch 2 either, so it's unclear if and when it will sell the device. Newegg has listed the Switch 2 on its site for several weeks, but it hasn't started sales yet.  With all of these stores, we've generally seen the Mario Kart World bundle available in greater quantities online than the base console, which costs $50 less. But considering Mario Kart is the Switch 2's biggest launch game and retails for $80 on its own, that may not be the worst thing. Nintendo, meanwhile, is still only selling the Switch 2 via an invite system. This requires you to have been a Switch Online member for at least 12 months and logged at least 50 hours of Switch 1 playtime as of April 2. It can't hurt to put your name on the list if you meet that criteria, but don't expect it to bear fruit anytime soon — several people who registered in April still haven't received an invite, and shipments haven't gone out yet for many of those who did order (including yours truly). You can find a list of every Switch 2 retail listing we could find below. Just be aware that this is meant to be a reference, not a rundown of everywhere the device is available right this second. Where to buy Switch 2 + Mario Kart World bundle: Walmart GameStop GameStop ($625 bundle with various accessories) Best Buy Target Costco (membership required) Sam's Club (membership required) BJ's (membership required) Verizon (service required) Where to buy Switch 2: Walmart GameStop Best Buy Target BJ's (membership required) Verizon (service required) Where to buy Nintendo Switch 2 games and accessories Nintendo is also selling a bunch of new accessories for the Switch 2, most of which became available on June 5 alongside the console. The same thing goes for games such as Mario Kart World and the Switch 2 edition of The Legend of Zelda: Tears of the Kingdom. Another big Switch 2 title, Donkey Kong Bananza, won't be available until mid-July, though you can still pre-order it today. As of Thursday evening, just about all Switch 2 games remain widely available. Stock for the accessories is a little patchier, but most devices are generally in stock at certain retailers. Note that you'll need to have received an invite to purchase most accessories at Nintendo's online store. Mario Kart World ($80) Nintendo Walmart GameStop Best Buy Target Donkey Kong Bananza ($70) Nintendo Walmart GameStop Best Buy Target Costco (membership required) Additional Switch 2 games Nintendo Amazon Walmart GameStop Best Buy Target Samsung microSD Express Card (256GB) for Nintendo Switch 2 ($60) Nintendo (invite required) Walmart GameStop Best Buy Target Amazon Joy-Con 2 bundle ($95) Nintendo (invite required) Walmart GameStop Best Buy Target Switch 2 Pro Controller ($85) Nintendo (invite required) Walmart GameStop Best Buy Target Costco ($75, membership required) Switch 2 Camera ($55) Nintendo (invite required) Walmart GameStop Best Buy Target Hori Nintendo Switch 2 Piranha Plant Camera ($60) Best Buy Target Amazon Joy-Con 2 Charging Grip ($40) Nintendo (invite required) Walmart GameStop Best Buy Target Joy-Con 2 Wheels (set of 2) ($25) Nintendo (invite required) Walmart GameStop Best Buy Target Switch 2 All-in-One Carrying Case ($85) Nintendo (invite required) Walmart GameStop Best Buy Target Switch 2 Carrying Case and Screen Protector ($40) Nintendo (invite required) Walmart GameStop Best Buy Target Nintendo Switch 2 Dock Set ($120) Nintendo (account required) This article originally appeared on Engadget at https://www.engadget.com/gaming/nintendo/how-to-buy-the-nintendo-switch-2-current-in-stock-availability-on-consoles-and-games-120039522.html?src=rss

The Nintendo Switch 2 is finally a thing you can buy in the US — or at least, a thing you can try to buy. The $450 console officially went up for sale at midnight ET on June 5, with multiple retailers offering the device both online and in-store. Pre

Temporary local copies can be shared with Nintendo through manual user reporting.

Disguised as a free chair model, it's distributed via Discord, Gmail, and Fiverr.

Crowdfunding a game you like is a common practice, but be careful with where you send your money. Zarya is an upcoming cozy narrative simulator telling the story of a rural driver in a post-Soviet setting, clearly inspired by Disco Elysium. Developed by SBSR, it needs support like any other game, but the creators don't ask for money online, so if you've seen their game on Indiegogo, be aware that this is a scam.One of the game's developers, Anton Surkov, went to Reddit to warn potential players about this fake page, saying that SBSR didn't create it and never planned to run a crowdfunding campaign. "Someone just stole our game name, visuals, and text, and started collecting money under our name. It’s not just upsetting – it’s terrifying."The worst part is that they might have never learned about it if not for emails offering “advice” and “coaching” to improve crowdfunding results that they started receiving after the page's launch.SBSR has already contacted Indiegogo but hasn't received a reply yet. "We’re just three people working late nights on something we care about. Watching someone try to exploit that… it sucks. But we’re not giving up."If you're interested in Zarya, wishlist it on Steam and find all the relevant information there, not on some crowdfunding site. Here is some information about the game so you can decide if this is something you'd like to play when it gets released.SBSR"Immerse yourself in the life of Vasily, a local driver striving to breathe new life into his village. Assist the villagers, transport packages, tow cars. Do everything within your power! Deliver cargo across endless fields, country roads, and overgrown paths. Upgrade your vehicle, turning it into an indefatigable iron steed."SBSRYou'll get to talk to people living far from civilization and see their views on the world. "Grill kebabs with the guys in the garages, go fishing with Petrovich, take the harvest to the market, tow cars, and try not to end up in a pit, as the last time a tractor was seen in the village was 30 years ago."There are plenty of "authentic post-Soviet clichés" and the warm atmosphere of the good old days.SBSRSign in for a playtest and join our 80 Level Talent platform and our new Discord server, follow us on Instagram, Twitter, LinkedIn, Telegram, TikTok, and Threads, where we share breakdowns, the latest news, awesome artworks, and more.