Aurora Innovation and Kodiak AI, two companies developing self-driving trucks, have received permits from the California Department of Motor Vehicles to test their autonomous vehicle technology on public roads. And Kodiak has already started.

Kodiak said it is starting with a handful of test trucks in California, primarily around its Mountain View office.

Both companies applied for testing permits this spring under updated rules approved by the California DMV, the agency that regulates autonomous vehicles in the state. Those rules, approved April 28, lifted a ban on driverless vehicles weighing over 10,000 pounds from testing on public roads and provided a regulatory path for companies to test, and eventually deploy, autonomous heavy-duty vehicles.

Kodiak and Aurora met the DMV’s permitting criteria, including safety, insurance, vehicle registration, safety driver qualification, and other requirements, according to the agency. The testing permits require a human safety operator to be behind the wheel and prohibit companies from operating on roads where the posted speed limit is 25 miles per hour or less, unless they are on a “direct route” between destinations.

Despite those restrictions, the prospect of self-driving trucks on California’s highways continues to fuel opposition.

Last week, Teamsters California sued the state’s DMV, alleging that the agency circumvented laws requiring it to study and publicly disclose the possible economic impacts of allowing self-driving trucks on public roads. The lawsuit, filed in the state’s Superior Court in Alameda County, also accused the DMV of failing to consider the safety risks to motorists.

For autonomous vehicle developers, the new rules allow them to test and eventually deploy in their home territories.

Aurora and Kodiak are both based in California, but until recently focused their testing and deployment activities in Texas because of their home-state’s ban on autonomous heavy-duty trucks. Aurora launched a self-driving truck service in Texas in May 2025, starting with a Dallas-to-Houston route. The company has added more routes since, including between Fort Worth and El Paso, El Paso and Phoenix, Fort Worth and Phoenix, and Laredo and Dallas.

Kodiak began commercial driverless truck operations in January 2025 in an off-road environment in West Texas’ remote Permian Basin. Kodiak has since expanded to on-highway operations, including a route between Dallas and Houston.

We think it’s kind of neat.

How the sensor reads your skin

How accurate is the Galaxy Watch 8’s Antioxidant Index?

Star Wars is at its best when it doesn’t take itself too seriously, and there’s no greater example of this than Lego Star Wars. The franchise, complete with its own video game on multiple platforms, prides itself on delivering a cute story with loads of laughs and inside jokes just for the biggest fans.

Fast on the heels of The Mandalorian and Grogu leaving theaters and hitting Disney Plus, the duo and a lot of their friends are getting a Lego Star Wars film just about them. And if you happened to be at D23, there was a chance to watch the whole thing early.

Dropping on Disney Plus September 2nd, Lego Star Wars: The Mandalorian is a hilarious trip down memory lane done Lego style. Recaps of the entire Mandalorian story so far, plus or minus some embellishments from the storytellers take up the one hour special in a way that kept me laughing the entire time. Keep an ear out for some of the original actors from the series showing up to voice their Lego counterparts as well as the standard array of Lego hijinks.

This is a cute, family-friendly way to catch up or refresh your memory. It includes sections of The Mandalorian and The Book of Boba Fett, with the story bringing you to just before the start of the film. And since The Mandalorian and Grogu movie will hit Disney Plus the same day as its Lego preview, you can treat yourself to some giggles before locking in and enjoying the action-packed film right after. Just be careful with your wallet after, or you’ll end up with a shopping cart full of your own Star Wars Lego kits.

Russell Holly is a Managing Editor on the Commerce team at CNET. He works with all of CNET to assemble top recommendations as well as helping everyone find the best way to buy anything at the best price. When not writing for CNET you can find him riding a bike, running around in Jedi robes, or contributing to WOSU public radio’s Tech Tuesday segment.

See full bio

By Rajan Kapoor, VP Security, Material Security

Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I keep coming back to the same observation: these aren’t isolated incidents

They’re the same attack, run twice, against different targets, where email was not the entry point into the workspace. And once you see the pattern clearly, it changes what you think you need to defend.

It also raises an uncomfortable question that I’ve been sitting with. The pattern I’m describing, where an OAuth grant is used to access an account, read sensitive data from email and Drive, and use that access to move past the workspace, doesn’t only describe what attackers do. It increasingly describes what AI agents do, by design, every day.

Before jumping into that discussion, let’s take a moment to map out the workspace attack chain.

The old mental model: email is where the danger lies

For most of the last decade, the dominant mental model for workspace security looked something like this: email is the dangerous channel, and everything else in Google Workspace is relatively safe.

That model made sense when attackers were primarily trying to steal credentials through phishing. It doesn’t hold anymore because attackers have learned to chain their way through the workspace, not just get in via an inbox.

The model most security teams are familiar with looks something like this:

• Email is the entry point: A malicious email (a phishing link, a weaponized attachment, a convincing pretext, a prompt intended to misdirect an AI agent) is how most attacks begin.
• A credential is stolen: The attack results in a valid credential being stolen and an account takeover happening.
• Sensitive data is accessed in Gmail and Drive: Once the takeover happens, the attacker easily jumps to connected apps within Google Workspace.
• Lateral pivots: An attacker inside an inbox can reset passwords and get into additional apps via magic links.
• Establish persistence: Attackers can sit undetected within accounts for days, weeks, or months, quietly exfiltrating data across systems.

Taken together, this is the nightmare scenario that is widely recognized as the account takeover (ATO). The workspace attack chain begins with an identity compromise via email and expands from there.

The evolving attack chain: OAuth is the entry point

The elements of the workspace attack chain attack haven’t changed, but the order in which the attacks unfold has evolved. The sequence I’ve now watched play out across Vercel, Composio, and a growing number of incidents we’re tracking doesn’t start with email at all.

Instead, the script gets flipped and an OAuth token becomes the entryway into email, not the other way around.

Here’s what these attacks looked like:

• OAuth is the entry point: These attacks started by establishing persistence through a stolen OAuth token. These tokens survive password resets, don’t expire, and are hard to observe. They are invisible to users and largely invisible to security teams who aren’t monitoring app behavior. Even scarier, the stolen token is a supply chain attack. A supplier is compromised and the result is access into your environment.
• Sensitive data is accessed: Using the stolen token, the attacker was able to get into data stored in Gmail and Drive.
• Email accounts are taken over: The ATO is initially executed using OAuth, not email. The access to email converts a compromised inbox into a much broader incident.
• Lateral pivots: Using a combination of credentials stored in Drive and password resets or magic links via email,the attacker can then move laterally across connected systems.

We can anticipate that the building blocks of the workspace attack chain will remain consistent, but that attackers – equipped with AI tools to sniff out vulnerabilities and scale their efforts – will continue to find ways to recombine them.

These OAuth-centric attacks are only one example of this evolution.

The same chains, a different actor

Now let’s shift our thinking, while keeping those four-step sequences I just described in our minds.

Your employees are connecting AI agents to Google Workspace right now. Those agents are authorized. They’re using legitimate OAuth grants. They’re reading email, searching Drive, operating on behalf of real users to do real work. In most organizations, this is happening faster than security teams can track it.

When an AI agent behaves unexpectedly — because its instructions were ambiguous, because it followed a chain of reasoning its developers didn’t anticipate, because it was fed a prompt through content it encountered in the environment — it can walk the same path as an attacker:

• It accesses an inbox or Drive folder it wasn’t explicitly intended to reach, because its scope was broader than its task required.
• It reads sensitive content like credentials in email threads or confidential documents in shared drives and makes use of that information.
• It takes an action downstream from that access: sending a message, following a link, making a request to another service.
• It moves laterally across applications and sensitive information winds up getting exfiltrated to a third party.

No malicious actor. No compromised credential. Just an agent doing something its operator didn’t intend, in an environment that didn’t have the controls to stop it.

Why this matters for how you think about defense

Most conversations about AI agent security are framed around preventing prompt injection, red-teaming agent behavior, or reviewing what apps your employees are connecting. Those are real problems and worth solving.

But the threat I’m describing isn’t about an agent being weaponized. It’s about an agent operating exactly as it was built to operate, in an environment where the guardrails weren’t designed with that kind of actor in mind.

A human operator acting in an environment where they’ve been overpermissioned will generally know how to navigate this situation using a combination of common sense and understanding of company norms and policies.

OAuth tokens granted to an AI agent carry the same access as tokens granted to a person, but the agent won’t understand that it’s been overpermissioned before it acts. It will simply do what it needs to do in order to execute the task.

The controls that matter here aren’t controls on the agent. They’re controls on the environment the agent operates in.

If you know where sensitive data lives across email and Drive, you can enforce policies that restrict access to it before an agent (or an attacker) gets there. If you’re investigating OAuth grants, you can understand and limit exposure to the prying eyes of an attacker or an errant agent.

If you can redact password reset links and require step-up verification before sensitive inbox content is readable, it doesn’t matter whether the entity trying to access that content is an attacker or an agent acting outside its intended scope.

The same coverage that defends against the modern attack chain also defends against the modern agent risk. They’re the same problem, wearing different hats.

What defense looks like across the full chain

I don’t think the answer is to add more point solutions to each stage of this chain. I think the answer is coverage that understands the chain as a chain, that can see what’s happening across email, OAuth, Drive, and account behavior, and connect the dots before things go wrong at step three or four.

That’s what we’ve built at Material. Here’s how our coverage maps to each step:

Blocking the initial email payload. Our email security is designed to catch what native controls miss: sophisticated phishing, payloads that bypass reputation-based filters, attacker-in-the-middle techniques. Stopping the most common attack method before it starts remains the highest-leverage intervention for the malicious threat.

Detecting suspicious OAuth behavior. Material goes beyond cataloging what apps exist and what scopes they hold.

The platform watches what apps actually do: what they read, when they read it, how that behavior changes over time. Whether an OAuth token is being used by an attacker or an AI agent operating outside its intended parameters, anomalous behavior at the activity layer surfaces the danger.

Detecting and protecting sensitive data at rest. You can’t protect what you can’t see, and you can’t design a policy around access you don’t know exists.

Material’s file security gives teams visibility into where sensitive data lives across email and Drive: which shared drives carry broad access, which email threads contain credentials or PII, which Drive folders are exposed beyond their intended audience. This is the foundation for enforcing least-privilege access against any actor, human or automated.

Blocking lateral movement via password resets. Material can redact sensitive message content, including password reset links, and require step-up verification before that content becomes accessible.

An attacker with inbox access can’t use it as a pivot point if the reset links aren’t available in plaintext. An AI agent reaching the inbox looking for something to act on encounters the same restriction.

The pattern is going to repeat

Vercel. Composio. I expect this list will keep growing, and I expect the next entries on it won’t always fit neatly into the category of “external attacker.”

Some of them will involve AI agents doing something unexpected. Some will involve overpermissioned integrations that reach data they were never supposed to see. The mechanism will look familiar even when the story around it doesn’t.

The right response isn’t to be alarmed about AI agents or to slow down adoption. Agents are genuinely useful and the productivity case for them is real.

The right response is to recognize that the workspace those agents operate in needs controls that are appropriate for a world where OAuth-authenticated software (authorized or not) is a first-class actor in your environment.

If your Google Workspace security strategy ends at the inbox, it has a gap. That gap is exactly where the modern attack chain runs, and it’s exactly where an AI agent operating outside its intended scope will run too.

If you want to talk through what full-chain workspace coverage looks like for your environment, reach out to us at Material Security.

Sponsored and written by Material Security.

It’s nearly two hundred years old.

BT’s 1846 roots took a few detours

Ilbusca/Getty Images

What BT looks like today

John Keeble/Getty Images

Just like any other online service, hackers can target and break into your accounts on popular AI platforms such as ChatGPT, Claude, and Perplexity. 

TechCrunch has created a comprehensive guide to help you protect yourself if you suspect someone has broken into your account on one of the internet’s most popular platforms, social networks, or messaging apps. Now, we’re here to show you how to check whether your accounts on AI platforms have been hacked.

As usual, we recommend using unique passwords stored in a password manager, and turning on multi-factor authentication (MFA), so that even if someone steals your password, they won’t be able to log in without that second piece of information. 

ChatGPT and Perplexity offer MFA. Claude doesn’t, because instead of asking for a password, Anthropic’s AI chatbot sends a login link to your email address.

All three of these AI platforms offer similar ways to check if there’s a suspicious device logged into your account. Here’s exactly how each platform works.  

ChatGPT

To find out if someone has broken into your ChatGPT account, open it on your computer’s browser, click on your username in the bottom left corner, go to “Settings,” then “Security and Login,” and finally click on “Active Sessions.” 

You will see where you are logged into your ChatGPT account. If you see any device you don’t recognize, you can log out of that single device. You can also click on “Log out all.”

At this point, if you want to change your password, you need to log out of your account. 

Then, on ChatGPT’s website, click “Log in” located in the bottom-left corner, enter your email address, click on “Forgot password,” and then “Continue.”  

ChatGPT will then send you an email containing a six-digit code. Enter the code on the ChatGPT login page, click “Continue,” and then enter a new password. 

You can also click “reset your password” in the email you received to see the official instructions on how to do that. 

Claude

For Claude, open it in your computer’s browser, click on your username in the bottom-left corner, then “Settings,” and click on “Account.” That’s where you will see your “Active sessions.” 

If you don’t recognize one of them, hover over it, click on the three vertical dots that appear on the right, and click “Log out” or “Terminate.”

If you want, you can click on “Log out of all devices.” 

At that point, you’ll be able to log back into your account using your email address. You will receive an email with a link to log in. Claude does not allow you to use passwords at all, so there’s no password to change.

Perplexity

In the case of Perplexity, the AI-powered search engine does not show you where you are logged in. 

So if you’re worried someone may have broken into your account, go to Perplexity in your browser and click your username in the bottom-left corner, then “All settings.” Finally, click on “Sign out of all sessions,” and then “Confirm.”

At that point, you can log back in by entering your email address. You will then receive an email with a unique six-digit code. Enter the code on the website to log in, or click on the “Sign in” button in the email to log in directly. 

I’m already growing hoarse in Golden Gate Park as Charli XCX takes the stage at a San Francisco music festival. The crowd starts jumping as a guitar hook hits, and I reluctantly comply, bouncing around on these aging knees as my chunky Puff necklace almost flies off the chain.

During a lull in the set, someone next to me compliments the necklace, which has stainless steel swirls and a bulbous orange center. Their eyes grow wide as I flip the cap off and explain that it’s a hidden USB flash drive—I plugged the Puff into my phone to show off the animations.

When Harry Isaac and Sebastian Bidegain, working together under the Noware moniker, posted an early prototype of their retro-futuristic necklace on social media in 2025, it quickly racked up over a million views with thousands of waitlist sign-ups to buy one. The duo has spent the last year attempting to turn the online attention on their prototype into a mass-produced reality. Now, Noware is finally ready to ship units this October.

Photograph: Courtesy of Noware

The pair arrived at the WIRED office wearing Puff necklaces, naturally, that match with their trendy gorpcore outfits. They seem nervous, albeit excited, to show off their creation. Neither has had a wide release for their products before, though both are well-versed in whimsical designs. Isaac previously went viral for making an electric scooter that shoots out bubbles. Bidegain was already sculpturally approaching electronics, with prototypes like a vape camera and lo-fi sampler built into a rock.

The design ethos of the Puff is just as much about aesthetics as it is about usefulness. Noware’s marketing materials show a cool girl with a Puff clipped onto her purse, where a Labubu might have sat last year, as well as styled on her neck with a pile of other silver chains. Bidegain says the “squishy, doughy” textures of food partially inspired Puff’s design, as well as cellular biology and tactile devices, like old phones and radios.

“On one end, I want anyone to be able to wear it, just if they think it’s pretty,” he says. “Though, I also want people who actually find utility in flash drives as part of their workflow: photographers, DJs, IT people.”

The small screen in the middle of the necklace is my favorite aspect. When it’s plugged into my phone or laptop, Puff’s center lights up with a customizable design. The Noware duo showed me goopy animations that reacted to the direction I held the phone as well as an aquarium mode. They even put the WIRED logo on it through custom software anyone can use to craft their own designs. The Puff doesn’t have an internal battery, so the USB drive can live as a piece of jewelry far longer than the expiration date of most electronics.

channel

70,000 customers will join the collective, whose name and leader remain unknown

TalkTalk Business and UK technology services biz ARO plan to merge, creating what they say will be one of the country’s largest communications and managed services providers.

The pair claim the combined organization will be “uniquely positioned” to serve as a single technology partner for British firms pursuing digital transformation. It will have annual revenue of about £200 million ($270 million) and a combined customer base of more than 70,000 companies.

Analyst firm Megabuyte noted that ARO, formerly known as Arrow, is the larger of the two businesses by earnings.

However, the vast majority of the combined customer base will comprise TalkTalk Business’s small-business clients, with the remainder mainly ARO enterprise customers. Megabuyte expects fixed-line and mobile communications and connectivity to generate most of the combined revenue – about £130 million ($176 million) – with IT and cybersecurity services providing the remainder.

Megabuyte said the immediate priority would be integrating the businesses and finding opportunities to sell their services across the combined customer base.

“One can see why the deal is being sold in terms of cross-sell, with relatively little overlap in terms of customers and products. TalkTalk Business has a large base of small business customers who should be receptive to ARO’s mobile and Microsoft offerings, as well as other IT and cyber services,” says chief analyst Philip Carse.

TalkTalk Business completed its separation from the wider TalkTalk Group earlier this year as it sought to expand as an independent managed network provider. It recently acquired Planet IT, a service desk biz selling IT support and professional services.

ARO provides cloud, cybersecurity, and datacenter services and is a Microsoft Solutions Partner.

The two firms describe their operations as highly complementary.

The deal remains subject to approval under the UK’s National Security and Investment Act (NSIA), apparently because ARO supplies some government customers, and is expected to close by the end of the summer.

Initially, both businesses will retain their existing brands and offices while the companies develop their integration plans.

The implication there is that there could be a shake-out of duplicate products and staff roles coming later, as often happens with corporate mergers.

We asked what the combined business would be called and who would lead it, but the companies declined to answer.

“This is a defining moment for both ARO and TalkTalk Business,” claimed ARO chief Ciaran Rafferty.

“By bringing together our complementary strengths, we are creating a stronger partner with broader capabilities, deeper expertise and greater capacity to invest in innovation, service delivery and long-term customer success.”

TalkTalk Business CEO Ruth Kennedy said it represents a key step in the firm’s ambitions to become a leading managed services provider.

“The market is evolving rapidly, with organizations increasingly seeking technology partners that can combine strategic expertise, operational excellence and broad service capabilities at scale,” she commented. ®

Following the 2025 launch of its 7875 Series LED/LCD TVs with Roku and Ambilight, Philips is expanding the lineup for 2026 with the new 7985 Series. The latest models retain Roku’s smart TV platform and Philips’ signature Ambilight technology, but add Quantum Dot technology for the first time in the series, moving the range into the increasingly competitive QLED TV category.

Philips Ambilight Extends the Picture Beyond the Screen

Ambilight is a lighting technology available on select Philips TVs that projects colored light beyond the borders of the screen, creating a more immersive viewing experience. Small LEDs on the back of the TV cast light onto the wall behind it, matching the colors and action on-screen in real time.

Big game-winning goal? Your living room glows green. Concert blasting through your speakers? The lights pulse with the beat. Romantic movie sunset? The wall behind your TV adds more drama than the plot.

Ambilight effectively takes the TV from “just a screen” to the main attraction in the room by extending the visual experience beyond the display itself and making the wall behind it part of the presentation.

What Is QLED?

A QLED TV is an LCD-based TV that has an LED backlight, and images are still viewed on an LCD display panel. However, it adds another component, a sheet of Quantum Dots (that is where the “Q” comes from). The Quantum Dot sheet is placed between the LED backlight and LCD panel to improve color. Quantum Dots are nano (microscopic) particles that emit color when hit with a light source. For a complete rundown on how the technology works, refer to our companion article.

QLED and Ambilight Create a More Immersive Viewing Experience

The 2026 Philips 7985 Ambilight QLED TV Series uses Quantum Dot technology to expand the available color range, improve color accuracy, and deliver a brighter image compared with conventional LED/LCD displays.

“Ambilight TV has always been about creating a more immersive way to experience television,” said Fangfang Li, CEO, SKYWORTH USA. “With our new QLED Ambilight TV series, we’re expanding that experience with advanced QLED technology that delivers richer colors, enhanced picture quality, and a more immersive way to watch, stream, and play.”

Pro Tip: In 2025, SKYWORTH entered into a trademark licensing agreement (TMLA) that allows it to offer Philips-branded televisions to the North American market. 

Philips 7985 Ambilight QLED TV Series Key Features

• Ambilight: Ambilight extends on-screen colors onto the surrounding walls, creating a wider and more immersive viewing experience.
• Follow Audio Mode: This dedicated audio-reactive mode uses Ambilight effects that pulse and move with the beat of the music, adding another visual element to parties and music playback.
• Gaming Excitement: Ambilight reacts to gameplay in real time, providing dynamic lighting effects that complement fast-paced action on the screen.
• Roku Backdrops and Ambient Lighting: Roku Backdrops can display artwork or personal photos, while Ambilight can provide ambient lighting when the TV is not being used for conventional viewing, adding more versatility to the room.
• Eye Comfort: Ambilight can soften the perceived contrast between a bright TV image and a darker surrounding room, potentially making extended viewing more comfortable.
• Seamless Streaming: Built-in Roku OS provides access to thousands of movies and TV shows, Roku Originals, more than 500 live TV channels, and a wide selection of streaming apps.
• HDR Support: Philips 7985 Ambilight QLED models support HDR10, Dolby Vision, and HLG, providing compatibility with major HDR formats for enhanced contrast, color, and highlight detail.
• Dolby Atmos Support: Dolby Atmos compatibility provides support for immersive, multidimensional audio when used with compatible content and audio equipment.
• Roku Smart Picture: Roku Smart Picture automatically adjusts picture settings based on the type of content being displayed to optimize the viewing experience.
• Wireless Connectivity: The TVs support wireless connections with compatible Roku speakers, soundbars, and subwoofers, providing additional options for building an integrated home theater system.
• Apple AirPlay: Apple AirPlay support allows users to stream music, videos, photos, and other compatible content directly from Apple devices to the TV.
• Roku Ecosystem: Integration with the Roku mobile app provides access to voice controls, remote-control functions, and Roku Smart Home notifications for broader system connectivity.

Philips QLED Amblight TVs with Roku OS Specs

The Bottom Line 

The addition of Quantum Dot technology gives the 2026 Philips 7985 Series a meaningful step up from the earlier 7875 Ambilight Roku TVs, with the potential for a wider color gamut and better overall color performance. But the real differentiator remains Ambilight. The combination of QLED, Roku OS, and Philips’ rear-mounted dynamic lighting system gives the 7985 Series something that most similarly priced TVs simply do not offer.

There are compromises. Philips does not specify full-array local dimming or Mini-LED backlighting, and the company has not provided peak brightness figures, making it difficult to judge how effectively the 7985 Series will reproduce demanding HDR content. Dolby Vision support is welcome, but HDR format compatibility does not guarantee high-impact HDR performance; substantially brighter premium QLED and Mini-LED TVs can deliver considerably more highlight intensity and contrast.

Gaming support also appears fairly basic, with no indication of more advanced features such as 120Hz or 144Hz high-refresh-rate playback or VRR. Dolby Atmos is supported, but the TV’s built-in two-channel speaker system will inevitably limit the immersive effect, making a soundbar or home theater system the better option for movies and television.

For buyers on a tighter budget, however, the equation is more interesting. The 50-, 55-, and 65-inch Philips 7985 models combine QLED color, Dolby Vision, Roku streaming, over-the-air television support, four HDMI inputs, and Ambilight in an affordable package. If you want the strongest HDR performance or a serious gaming display, there are better-equipped options. If you want an inexpensive primary or second-room TV with an easy-to-use Roku interface and a visual feature that genuinely stands apart from the competition, Ambilight remains the reason to look at Philips.

Price & Availability

The Philips 7985 Series Ambilight QLED TVs are available in 50″, 55″, and 65″ screen sizes on Amazon and BJ’s Wholesale Club.

Related Reading: