We haven’t heard many details about Microsoft’s upcoming “Project Helix” gaming hardware since the company announced it in March as a device that will “play your Xbox and PC games.” In a new wide-ranging profile of Xbox CEO Asha Sharma, though, Fortune alludes to a dual release strategy for upcoming Microsoft gaming hardware, with “a next-generation handheld device” planned by the end of next year and a 2028 holiday season console release that could cost between $1,200 and $1,800.

That future console price range is based on what has “internally been projected” at the company, according to Fortune. But the price for consumers could come down if “Microsoft decides to subsidize the cost,” the outlet says, as many console makers have done in the past. While a $1,200 starting price would be historically high for the game console market, even accounting for inflation, it also reflects a new normal: The slowdown in Moore’s Law and AI-driven component shortages mean cutting-edge gaming hardware just isn’t as cheap as it used to be. This year, the Steam Machine broke the $1,000 starting price, while the 2-year-old technology in the PlayStation 5 Pro is now going for $900, and the 6-year-old Xbox Series X now starts at $750.

Jurors in September found Meta liable for over 43 million violations of New Mexico consumer protection laws when a political consulting firm, Cambridge Analytica, harvested Facebook user data to generate targeted political ads for the 2016 election. Forty-eight other states settled with Facebook in a nationwide case, but New Mexico chose to take the social media company to court on its own. […] During the trial, jurors assessed whether Facebook misled users about privacy and content moderation 34 separate times. State prosecutors, though, argued Facebook’s statements deceived the entire population of New Mexico and extended beyond social media users.

In the end, jurors agreed with this premise and found Facebook liable for 2.1 million violations on certain counts, bringing the total number of violations to over 43 million. Facebook’s attorneys have argued in subsequent court filings that the state’s consumer protection laws don’t apply to people in New Mexico who weren’t using the platform at the time. […] In one of the few wins for the defense, jurors found the state didn’t prove that Facebook made false claims about removing harmful content, including misinformation about the COVID-19 pandemic.

The state said the company favored certain accounts and allowed for violent or inaccurate content to proliferate. Attorney Randi McGinn said in her closing argument for the state that Facebook profited off harmful content, which CEO Mark Zuckerberg denied during his video deposition. Zuckerberg said the company has to carefully balance freedom of speech with content moderation. Attorneys for Facebook said the company has adapted its policies since the state’s lawsuit was filed in 2021 and that it removes 99% of content that violates standards.

Chief Studios Officer Cam Weber and Chief Operating Officer David Tinson wrote that “over the past several months, we’ve taken a hard look at our business.” They said a small BioWare team had been doing early groundwork on a Mass Effect game, but EA chose to drop the effort. That decision means closing the studio and its Edmonton workspace, they wrote. “We do not take this decision lightly,” Weber and Tinson said of the BioWare closure, according to Variety.

EA will keep investing in Apex Legends and is continuing work on two upcoming launches, Marvel’s Iron Man and the next Star Wars Jedi game, the executives said. They added that EA’s Respawn and DICE studios will join forces on an upcoming project, in addition to new Battlefield titles. Bloomberg said the project is probably a new installment of the Star Wars: Battlefront franchise.

[…] The integration will pair OpenAI’s frontier models with Google Cloud’s built-in access controls, centralized data governance, and high-performance infrastructure to support demanding enterprise workloads.

Google Cloud customers will be able to purchase OpenAI frontier models via model garden, transacted through the Google Cloud Marketplace. Enterprises with Google Cloud spend commitments will be able to draw down their GCP commitments for these purchases.

Additionally, OpenAI models will soon be available in Google Antigravity and the Gemini Agent, providing enterprise customers with model choice flexibility and the best model for each task. […]

Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure. “We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update,” he said on X.

Officials have said that all PHP versions from PHP 5 onward could be affected, although PHP has not yet disclosed which versions are vulnerable.

Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere. PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.

“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.” The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP. A video depicting the tool has been reposted here.

Attempts to locate the unconfirmed report were unsuccessful, but security firm watchTowr said it claimed to affect every PHP version from PHP 5, released in 2004, onward. The security firm went on to say it has confirmed that the vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are real. Researchers from separate security firm Sansec said they “expect mass attacks to start within 15 minutes of the release.” A third security firm, Webfence, also urged admins to prepare now. Huntress has also issued an advisory.

While Musk noted the certainty of such a merger should not be assumed, and it would need shareholders’ support, he said special committees within both companies have been formed to examine the move. “The special committees have not reached agreement on terms of any transaction and there’s no guarantee that they will,” Musk added. “But I do think there is a lot of merit to merging and a lot to be gained.”

[…] The company, which builds space rockets and Starlink internet satellites, is now expanding into offering cloud compute capacity for other tech companies, like Anthropic and Google. That line of business has become the most profitable part of SpaceX, bringing in $7.5bn according to the latest quarterly results (PDF). Starlink also tallied revenue of $5.2bn. SpaceX as a whole, however, is not profitable and has lost $1.1bn so far this year.

[…] Musk said on Tuesday a full merger between the two companies would make sense for the work each is doing around chips, artificial intelligence, software and more. He described himself as a “conflicted party” as the chief executive of Tesla and of SpaceX. Even commenting on the possibility of a merger between the two companies, Musk compared to “tap dancing through a minefield.” He added a merger would ultimately be decided by shareholders. At least 50% of Tesla’s shareholders would need to approve the merger, which Musk described as “quite a high hurdle to achieve.”

A Russian satellite, Kosmos 2612, may have passed within approximately 85 feet (26 meters) of a U.S.-registered satellite belonging to commercial imagery provider ICEYE. This would be an extraordinarily close and potentially dangerous pass-by for two objects in space traveling at thousands of miles per hour. For weeks beforehand, ICEYE-X36, which would be of special interest to Russia, had already found itself in increasingly close orbital alignment with its pursuer. The two satellites now look to be drifting further and further apart, but the episode has been a clear sign of what is to come as the potential for conflict in space only continues to grow.

Publicly available space tracking data from the satellitemap.space and orbitalradar.com websites show that Kosmos 2612 (also written sometimes Cosmos 2612 and abbreviated K2612) and ICEYE X36 had their especially close encounter at approximately 16:07 UTC today. Private space services company LeoLabs also told TWZ today that it could not “confirm or contradict what other data sources have stated publicly,” but that it has “high-confidence that the objects came within approximately [emphasis in the original] 500 meters [1,640 feet] of each other.” Kosmos 2612 had been making progressively closer passes by ICEYE X36 in recent days.

Last month, Magistrate Judge Thomas Hixson ordered Meta to hand over the command histories of the servers it used to torrent pirated books. These logs would presumably reveal how Meta’s torrent clients were set up, including any changes to their upload settings. […] The server logs could reveal what happened on Meta’s machines. However, publisher Entrepreneur Media also wants to know who approved the torrenting activity.

Entrepreneur Media, which publishes Entrepreneur magazine, filed one of the related lawsuits where it accuses Meta of contributing to piracy by uploading (seeding) works to third parties, similar to the authors’ contributory infringement claim. To find out more, the publisher asked Meta to identify everyone who “made, authorized, or approved” the decisions to obtain the shadow library datasets, and to do so via BitTorrent.

Meta’s answers named several people who are believed to have been involved in data-related decisions. However, Meta said it couldn’t identify anyone who “formally” made or approved decisions to acquire or use books for its first two Llama models. Those decisions were often the result of team consensus, Meta argued. When it came to the torrenting itself, Meta pointed to the employees who ran the downloads, describing their choices as technical decisions.

Meta added that the acquisition of data from Anna’s Archive went through an internal legal review in early 2024, which involved its in-house lawyers. In other words, the company didn’t name anyone higher up who approved the use of BitTorrent. “On that construction no one at Meta decided to torrent anything, yet Meta torrented shadow libraries repeatedly from 2022-2024,” Entrepreneur Media countered.

Shared by the 92nd Separate Assault Brigade on Monday, the video shows the soldier strapping himself into a large drone and being flown at what appears to be relatively low altitude over blurred-out territory. The drone carefully lowers him, and the drone operator greets him with “Welcome back to the ground!” The video also shows blurred faces of drone operators who carried out the mission.

The post said the unidentified infantryman was wounded at his position. “Due to intense enemy drone activity and the presence of landmines, evacuation using conventional unmanned ground vehicles was impossible,” the brigade said. “At that point, the specialists in our unit took it upon themselves to attempt something that had never been done before: evacuating a serviceman using an aerial drone,” it added.

The craft was a heavy-lift hexacopter, it said, originally designed as a bomber by a Ukrainian manufacturer. It looks about twice the size of the soldier in the video. The specialists working on the mission had to ensure the drone could carry a human being without flipping over or swaying excessively, according to the unit.

The Japanese giant named the new models the NW-WM1ZM3, NW-WM1AM3 and NW-ZX900. All can store and play many codecs, including MP3s, WMA, and FLAC files, plus others like Direct Stream Digital (DSD) and Apple Lossless, which use various tricks to avoid nasty artefacts accruing during the digitization process. Sony also says it has used “key components made from oxygen-free copper” because that apparently delivers “uncompromising sound quality.”

The machines also include “screws featuring a low-resistance gold-plated treatment … providing a stable ground connection that delivers powerful bass, an expansive soundstage and smooth, extended high frequencies.” Sony claims even the cabling it’s used in the devices “further reduces noise and preserves signal integrity for rich, detailed sound.” They’re also housed in carefully-milled slabs of copper — gold-plated in the case of the NW-WM1ZM3 — because that apparently improves sound, too.

And then Sony’s gone and spoiled it all by offering Bluetooth connectivity, a notorious music-mangler, in addition to wired headphone ports. Sony’s US site lists all three devices, which run Android 16 and include Wi-Fi so they can access streaming music services. All are USB-chargeable and Sony claims their batteries allow 30-odd hours of music playback.

AMD launched its FSR 4.1 update for Radeon RX 9000-series graphics cards in March, and promised to bring the technology to older GPUs and handhelds this year. FSR 4.1 can improve performance in more than 300 supported games, including Cyberpunk 2077, Battlefield 6, and Assassin’s Creed Shadows.

[…] While owners of Radeon RX 6000-series GPUs and Gorgon Halo- or Strix Halo-powered devices will get FSR 4.1 today with the latest Adrenalin Edition 26.10.1 drivers, Xbox console owners will have to wait a little longer. “We’ve worked very closely with AMD to optimize this technology, giving developers another powerful tool for great performance and visual quality for players,” says Xbox CTO Scott Van Vilet.

"Ask Google Help" will display a condensed version of the support article with direct troubleshooting steps, with the user then able to type in queries to have Gemini help figure out the next step forward. A “View Sources” button at the bottom of the AI response allows users to still access the original article, but direct links to any of these articles now defaults to the AI experience.

An example can be seen below on the "Secure a hacked or compromised Google account” page that Google’s own support account directed users to within the past few days. It can also be seen on the "Fix common issues with 2-Step Verification" page and, as far as we can tell, any support pages on the Google Account Help forum.

Google, as of right now, appears to only be testing this on select support topics. The Google Pixel Help section, for instance, still defaults to articles, whereas the Google Chrome topic has also moved to the new experience. Beyond support pages alone, this new design also impacts the central hub, with links to topics no longer showing by default in exchange for an AI chatbot that helps you find the relevant page.

Instead of saying he was being targeted for suspected terrorism — although this search happened just at the start of the second Trump administration, it has dramatically broadened what organizations or people may be considered such — they said they needed his phone to look for “kiddie p*rn.” “Good afternoon,” an email sent from a Homeland Security Investigations (HSI) official, part of Immigration and Customs Enforcement (ICE), to CBP and other officials reads. “The following subject is scheduled to arrive in ATL [Hartsfield-Jackson Atlanta International Airport] today via DL 1778 @ 1930 Hours. TUNICK is under investigation by HSI/JTTF for suspected terrorist activities.” The email includes a photo of Tunick, and asks the officials to direct him to secondary inspection, retain all of his electronics, and collect their passcodes.

As 404 Media first revealed in December, Tunick was charged because he allegedly “did knowingly destroy, damage, waste, dispose of, and otherwise take any action to delete the digital contents of a Google Pixel cellular phone, for the purpose of preventing and impairing the Government’s lawful authority to take said property into its custody and control.” Matthew Dodge, one of Tunick’s lawyers, previously told 404 Media he only found one other case using the same obscure law, a drug trafficking case. “This is extraordinarily rare,” Dodge said.

Tunick was part of the Stop Cop City movement in Atlanta, which broadly protested the building of a large police training center, and which authorities investigated for arson, vandalism, and doxing. Tunick is not suspected of any crime beyond the alleged wiping of the phone, and has previously put his current prosecution in the context of the wide spanning cases against other Stop Cop City protesters. The newly filed court record, in which Tunick’s lawyers argue that evidence should be thrown out, include new photos and descriptions of the airport encounter. The CBP officials asked Tunick if they were going to find “kiddie p*rn” on his phone, which Tunick immediately denied.

Several fixes improve compatibility with 32-bit Linux guests, while changes to virtual machine ownership management and interrupt emulation make the virtualization infrastructure more capable. Graphics support has also been upgraded, with DRM drivers updated to those from Linux kernel 6.18.53. Notably, OpenBSD 8.0 adds support for Intel Arc A-Series (Alchemist) graphics cards through the inteldrm driver.

Another important change increases the amd64 kernel’s virtual address space from 4 GB to 512 GB, allowing the system to map over 4 GB of video memory. The release also addresses GPU timeout issues affecting some Intel Alder Lake systems. […] For security, OpenBSD 8.0 adds checks and fixes across the kernel and system utilities, including improvements to pledge and unveil, tighter validation of executable files, and protections against memory corruption and information disclosure.