Google Workspace attackers don’t necessarily need to exploit a software vulnerability or steal a user’s password to gain access to an organization’s data.

On September 23, 2026, BleepingComputer will host a live webinar titled “Breach autopsy: How fast-growing companies are breached through Google Workspace” with Material Security.

The webinar will feature Rajan Kapoor, Vice President of Security at Material Security, and Rick Fitzgerald, President of Fireside Consulting LLC, examining two attacks that used malicious OAuth applications and social engineering to breach Google Workspace environments.

OAuth allows users to grant applications access to Google Workspace data and services without sharing their passwords. While this makes it easier to connect legitimate applications to Google Workspace, attackers can also abuse the authorization process by convincing users to grant permissions to malicious apps.

Rather than stealing credentials, attackers can use social engineering to persuade a target to authorize an application, potentially providing access to sensitive information available through the permissions the user approved.

These attacks highlight why protecting Google Workspace requires organizations to look beyond passwords and traditional authentication controls and understand which applications have access to their environment.

During the webinar, the speakers will break down how the two attacks unfolded, the weaknesses that allowed them to succeed, and the decisions organizations made during the critical first hours of the incidents.

Attendees will also learn which security controls provide the greatest value for fast-growing organizations and what the speakers would prioritize if they were building a Google Workspace security program from scratch.

When attackers convince users to grant access

Social engineering attacks are often associated with tricking users into revealing passwords or other credentials. Malicious OAuth apps provide attackers with another approach: convincing the victim to authorize access instead.

A user may believe they are connecting a legitimate application or responding to a trusted request while actually granting a malicious app permissions within their Google Workspace environment.

The resulting access depends on the permissions granted, but the attack demonstrates why organizations need visibility into third-party applications and the access users are allowed to authorize.

By examining two attacks that combined malicious OAuth applications with social engineering, this webinar will provide a practical look at how these breaches happen and what defenders can do to reduce their exposure.

The upcoming webinar will cover:

• How attackers combine social engineering and malicious OAuth applications to target Google Workspace environments
• How users can be manipulated into authorizing application access
• What happens during the first hours of a Google Workspace breach and which response decisions matter most
• Which security controls provide the greatest value for fast-growing companies with limited security resources
• Practical security improvements organizations can implement quickly, ranked by effort and potential impact

Join us to see how malicious OAuth applications and social engineering can lead to Google Workspace breaches and what organizations can learn from real-world attacks.

➡ Register now to secure your spot!

Two announcements in, Fidelity Imports UK’s strategy is starting to come into focus. Matrix Audio will become the company’s second launch brand when Fidelity Imports UK begins trading on October 1, 2026, adding high-resolution music streamers, DACs, digital transports and amplification products to a portfolio that began last week with German manufacturer sonoro.

The more interesting part is what those two appointments tell us when viewed together. sonoro was a new relationship for Fidelity Imports and demonstrated that the UK operation would not simply reproduce the company’s North American catalog. Matrix Audio takes the opposite route: Fidelity Imports already represents the Chinese digital-audio manufacturer in the United States, making this an established partnership being extended into another market.

In other words, Fidelity Imports UK is not copying the American business, but it is not ignoring the relationships that already work there either. That makes considerably more sense than forcing every brand into the same suitcase before crossing the Atlantic.

Who Is Matrix Audio?

Based in Xi’an, China, Matrix Audio designs its hardware, operating software and control applications in-house. Its portfolio is heavily focused on digital audio and includes music streamers, streaming DACs, digital transports, headphone amplification, integrated amplifiers and more traditional separates.

That immediately separates it from sonoro, but the distinction goes beyond hardware categories. At the center of the Matrix ecosystem is MA Player, the company’s Linux-based high-resolution playback platform, paired with the MA Remote App for iOS, iPadOS and Android.

MA Player supports locally stored music, NAS libraries and network playback while integrating a broad selection of streaming services and protocols. Matrix currently lists support for Apple Music, TIDAL, Qobuz, HIGHRESAUDIO and other services, along with Roon Ready, AirPlay, DLNA/UPnP, Spotify Connect, TIDAL Connect and Audirvāna functionality. Depending on the hardware, the platform supports PCM playback up to 32-bit/768kHz and DSD up to 22.4MHz.

The software component matters because plenty of manufacturers can machine an attractive aluminum chassis and install a competent DAC stage. Designing the operating environment and control software in-house is considerably more difficult, and it gives Matrix direct control over the part of the product owners actually interact with every day. Anyone who has spent four figures on a streamer only to discover that its control app was apparently designed during a hostage situation understands the problem.

From Streamers to Complete Systems

Matrix Audio has expanded considerably beyond standalone DACs and network players. Its current M Series includes products such as the MS-1 and MS-1c music streamers, along with dedicated preamplification and power amplification, while the wider range includes products such as the TS-1 streamer/DAC/headphone amplifier, TT-1 and NT-1 digital transports, and MD-1 and MD-1P streaming integrated amplifiers.

The MD-1 and MD-1P provide a useful example of how far the company has moved toward complete digital systems. Both combine Matrix’s streaming architecture with integrated amplification, with the MD-1 rated at 150 watts per channel into 8 ohms and the MD-1P increasing output to 300 watts per channel into the same load.

British buyers should not assume, however, that the entire current North American Matrix catalog will be available immediately. Fidelity Imports UK has not yet announced its initial Matrix Audio product selection, recommended UK pricing, dealer availability or launch activities, with those details expected before trading begins on October 1.

A Different Kind of Second Brand

The first two Fidelity Imports UK appointments do not overlap very much, and that appears deliberate. sonoro offers integrated music systems, loudspeakers, turntables and electronics with broader lifestyle appeal, while Matrix Audio is far more heavily invested in streaming, DACs, high-resolution digital playback and systems built around networked sources.

Putting both brands into the same launch portfolio gives dealers two very different propositions rather than a collection of manufacturers fighting for the same customer and shelf space. Fidelity Imports UK says it is looking for manufacturers with distinctive engineering, strong design, clear market positioning and meaningful potential within the specialist retail channel.

Matrix checks those boxes while bringing something else to the table: an existing relationship with Fidelity Imports. That reduces some of the uncertainty inherent in launching a new distribution company because Fidelity already knows the products, the people behind them and how the brand operates in another major audio market.

More Brands Are Coming

Matrix Audio is only the second manufacturer to be disclosed, and Fidelity Imports UK says additional brand and product-category announcements will continue throughout September before the company officially starts trading on October 1, 2026.

I recently interviewed Jamie McKay, Managing Director of Fidelity Imports UK, about the launch, the thinking behind the portfolio and the realities of entering one of the world’s most established specialist hi-fi markets. We hope to publish that conversation later this week.

There are still some obvious questions about how large the portfolio will become, what Fidelity believes British dealers are currently missing and how another distributor convinces retailers that it deserves floor space and attention. McKay had plenty to say about all three.

The Bottom Line

Matrix Audio is a more revealing second appointment than it might initially appear. sonoro showed that Fidelity Imports UK is willing to establish relationships that do not exist within the North American business, while Matrix demonstrates that successful Fidelity partnerships can also be extended into Britain when the manufacturer fits the strategy.

What we still do not know is equally important: which products are coming to the UK, how much they will cost and which dealers will sell them? Those details are expected before October 1, but one comment during my recent interview with McKay makes the remaining portfolio announcements potentially more interesting.

I reiterated the point made in our first article that it would seem rather strange for Fidelity Imports UK to simply mirror the North American roster when a number of Fidelity Imports brands are themselves British and, on the surface, would have little reason to require another distributor in their domestic market.

McKay pushed back on that assumption and explained that not every British audio manufacturer is necessarily happy with how things are working in its home market. Without naming any company, he suggested that some British brands might not be opposed to becoming part of the new Fidelity Imports UK lineup.

No manufacturer was identified, and we are not going to start throwing darts at a list of British audio companies and turn speculation into news. Coming from someone who knows the UK specialist market better than most, however, it was an interesting comment and one worth remembering as the remaining brands are revealed.

We’ll have considerably more from McKay when our full interview is published later this week.

For more information: fidelityimports.co.uk | matrix-digi.com

This smart lock is built for rentals in all-new ways. / Tyler Lacoma/CNET

Pros & Cons

• 
  
  
  Affordable for its tech and design quality
• 
  
  
  Many access options including fingerprint, included cards, keys, keypad and more
• 
  
  
  Extra-large battery case rated for up to three years
• 
  
  
  Easy to manage access and logs through the app
• 
  
  
  Unique sleep mode if the home is going unused for a while
• 
  
  
  Effective and simple TapCom communication include for vacation renters and similar situations

• 
  
  
  The rental-focused design may not be suited for every home
• 
  
  
  The deadbolt requires manual turning when locked/unlock, which differs from most smart locks

Many smart locks introduced innovations in 2026. We saw charging solar panels and ultrawideband sensing. But Lockly went the opposite way: The security company has launched a new lock called Lyro, which aims at a unique mix of affordability, battery life and new features made specifically for vacation rentals, short-term renting, landlords and similar situations. I’ve never seen anything quite like it.

To test the Lockly Lyro Lasta ($169), I set it up as if I was the owner, and tried to access it in a variety of ways like I was a newcomer on vacation. It’s interesting what features Lockly has added here, and what the company has done with a lock well under $200 that still has a durable design, fingerprint sensor, RFID tags to give out and more. Here’s what I found.

A design made for durability and battery power

The Lyro Lasta is mostly a normal smart lock — except for several very important additions. On the front of the lock I found the fingerprint reader and Lockly’s stylish touchscreen keypad, a design I’ve seen on other Lockly products before and found them very reliable. That outward-facing section is also IP65 weatherproof, so you shouldn’t need to worry much about operation in heavier weather.

The inside housing, however, is extra large because it’s made to hold eight AA batteries, something I’ve never seen in a smart lock before, since most are made for four AAs or fewer. Lockly says the extra battery boost lets the lock last for up to three years without needing replacement. It’ll take me a while to see if that’s true.

As with most modern locks, this Lyro model doesn’t need a Wi-Fi hub to go online. Installation and setup proved relatively simple. The lock isn’t especially complex, and components are quite sturdy for the price.

Codes, keys and more access options

In addition to standard keys, keypad code, phone connection and the included NFC tags, I tested this lock’s fingerprint sensor, which boasts a 0.2-second response time (I don’t know about that, but it was under a second), and the ability to hold 99 fingerprints.

Everything proved responsive with smooth operation, but I did run into yet another unique feature of the Lasta that took me by surprise. Almost every other smart lock I’ve tested automatically unbolts the lock when it’s unlocked by any means. Not so here: This lock unlocks internally, but you still need to manually turn either the inside or outside thumbturns to move the deadbolt.

I’m not sure why Lockly chose this approach, which could be confusing to those with experience in smart locks. It may cut down on wear and tear, and it could help save even more battery life, but it’s important visitors know they’ll need to manually move the lock. Fortunately, the lock also introduces all-new ways to communicate with guests.

Best Home Security Systems for Renters in 2026: Hassle-Free, No Contracts

You can equip your rental with personalized security options. My picks can fit nearly anywhere — no screws required.

Advertisement

Lockly TapCom and other rental-friendly add-ons

The plethora of unlocking options are convenient for anyone, but this Lyro lock also has features that make it well-suited for vacation rentals, visitors, Airbnbs and similar situations. The extra battery life, for example, is particularly handy for homes that may stay vacant for part of the year, or have off-seasons with little activity. But that’s only the start.

The physical RFID tags make it easy to hand off access methods to others without fussing with extra pairs of physical keys, and you can disable them by the app if they aren’t returned. Speaking of the app, it also provides owners with an easy-to-use log of activity, and an unusual sleep mode that saves even more battery life if a residence is going to stay unused for a while.

But the most useful rental feature of them all is the TapCom, the platform Lockly offers to help connect and coordinate renters with owners. It’s not the first Airbnb-friendly platform I’ve seen announced this year, but it is one of the first to market and I like what I see.

To use TapCom, owners scan a QR code on a card-sized NFC plate, then stick the plate by the Lyro lock. When guests show up, they can scan the code with their phones or just tap directly on the card to get started. Owners control different ways for guests to communicate and announce their arrival, as questions, wait for remote unlocking, finalize payment info and so on.

In my tests, TapCom allowed me to enable video calls, audio calls and requests to unlock, and geofencing that only enables communication when a phone is right by the TapCom plate. Connections worked accurately in seconds on both phones used in the conversations. Of course, you will need to give the platform a certain amount of access to your mics, phone number, etc. to make this all work.

While these features sound like a particularly good fit for Airbnbs, I can imagine standard landlords and property management companies, along with tenants, would also appreciate such on-demand communication options.

Final thoughts on the Lyro Lasta

Lockly’s Lyro Lasta ($169) does a little of everything with unique new features made just for rentals, vacation homes, Airbnbs and similar situations, at a reasonable price.

The extra-long battery life, multitude of access options and free support for the TapCom communication system for new guests all worked flawlessly in my tests, although I was caught off guard by the need to manually turn the deadbolt after it locked/unlocked internally.

The Lyro Lasta is more of a niche product than many smart locks, but it’s a niche with plentiful opportunities, including owners with specific plans on how to manage their property for newcomers. It will be interesting to see what comes of the Lyro line in the future.

Tyler Lacoma

Editor / Home Security and Smart Home

Tyler has worked on, lived with and tested all types of smart home and security technology for over a dozen years, explaining the latest features, privacy tricks, and top recommendations.

With degrees in Business Management, Literature and Technical Writing, Tyler takes every opportunity to play with the latest AI technology, push smart devices to their limits and occasionally throw cameras off his roof, all to find the best devices to trust in your life. He always checks with the renters (and pets) in his life to see what smart products can work for everyone, in every living situation.

Living in beautiful Bend, Oregon gives Tyler plenty of opportunities to test the latest tech in every kind of weather and temperature. But when not at work, he can be found hiking the trails, trying out a new food recipe for his loved ones, keeping up on his favorite reading, or gaming with good friends.

See full bio

Advertisement

Remember when the cloud promised storage and computing for a low monthly fee? Only, as time has gone on, the number of subscriptions we all have has grown, and the price has shot up.

No wonder, then, that this year’s IFA show had several local AI servers for the smart home and cameras, removing monthly fees and putting the control back in your hands.

In many ways, this is a throwback to the days when NAS devices were the home accessory of choice, but I’m all down for this, with the likes of the Anker MindBase or UGreen HomeAgent as the new local server.

An end to subscription fees

I’m not averse to paying a subscription fee, but flicking through my bank account, it’s quite scary how many things have a monthly subscription: video streaming, music, broadband, phone, software, cloud backup and so on. Where I once had a few small subscriptions, it feels like everything now needs to be paid for monthly.

Home servers promise to kill a lot of that off, even in a slightly more limited way, with the core focus on security.

More features, more control

A big change that I’ve noticed with security cameras is that there are now multiple tiers of cloud subscription, with the changes between them not only affecting how much storage you have, but often the features. Pay more for Ring, for example, and you get AI-powered video search; opt for the more basic package and you get more basic features.

Ditching that and having a central ‘brain’ gives you all the features that you could want. With the Anker MindBase and the UGreen HomeAgent, for example, the local AI can process advanced object detection, give you video search, and the apps can all tell you what’s happening in a video. No subscription in sight.

Having a centralised system also means that your storage is in one space. Upgrade when you’re running short, and you’ll have enough space for all the cameras and all of the footage, safe in your own home.

Beyond cameras

Local servers promise more than just support for security cameras. Anker will have the Eufy Smart Security Shield, a radar-based sensor to detect strangers, and promises to add new software AI agents for smart energy management and cleaning.

UGreen’s HomeAgent will offer voice control, giving you a smart-speaker experience, only with all of the data and processing handled locally.

Of course, there’s a higher up-front fee for the server hardware, but I see this as an investment. With local AI, I’m in control of what gets shared, and new features get rolled out immediately without a subscription hike. Look out for full reviews of these systems soon.

• Windows 11’s latest update breaks the sound on some PCs
• The September update also messes with File History
• Microsoft is working on a fix for the audio glitch, but we don’t have an ETA

Windows 11’s new update is breaking the audio on some PCs, thanks to the latest nasty bug that Microsoft has let slip through the QA testing net.

Windows Latest spotted that Microsoft has admitted that the September update has torpedoed the audio on some systems, in a post on the Windows release health dashboard.

Microsoft has confirmed reports that the September 2026 security updates cause Remote Desktop Services (RDS) failures on Windows Server systems.

According to a release health update on Friday, this known issue impacts Windows Server 2012 and later, as well as Windows 10 and Windows 11 devices.

This confirmation follows widespread reports from Windows admins that installing this month’s Patch Tuesday updates prevents users from connecting and, in some cases, requires a hard reset to restore functionality.

“In some environments, RDS might become unstable, resulting in RDP connections failing after several minutes, sign-in issues, or servers hanging at ‘Please wait for the Remote Desktop Configuration’,” Microsoft said on Friday.

“Related tools, including Microsoft Management Console (MMC), RDS Licensing Diagnoser, and File Explorer might also become unresponsive. Additionally, the Windows Update page might stop responding and continuously display a loading indicator.”

Affected users have also found that once a server starts failing, existing Remote Desktop sessions may not disconnect or log off properly, while new connection attempts may also fail after hanging during the connection process.

Mitigation available

Microsoft now provides the following Group Policy (found under Computer Configuration > Administrative Templates), which can be used to mitigate the issue on enterprise-managed devices managed by IT departments:

While it still works to ship a permanent fix for this issue, Microsoft said those who can’t access virtual machines through RDP may be able to temporarily restore RDS connectivity by stopping and restarting the affected virtual machine.

​Windows admins have also been able to restore Remote Desktop functionality by rolling back the buggy updates. However, removing them will also remove the security fixes included in this month’s Patch Tuesday release.

Microsoft fixed a similar known issue that triggered Remote Desktop and RDS connection failures in March 2025 after installing Windows updates released since January 2025.

Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.

Save your seat

Mullenweg accused the company board of conspiring against him to place him on a paid leave.

For reasons unknown to the public, the founder and CEO of Automattic Matt Mullenweg was briefly ousted from his position last week. He was reinstated a few days later.

Last Wednesday (9 September), Mullenweg posted to a company-wide Slack channel that Automattic’s chief financial officer Mark Davies had “conspired” with other board members, including founding CEO Toni Schneider (who is the current CEO of Bluesky), to put him on a paid leave of absence.

The board voted Davies as interim CEO and told publications that it had full confidence that he would be able to “execute against the company’s priorities”.

However, by Friday (11 September), Mullenweg seemed to be back in his position, according to newer Slack messages verified by company employees.

“A lot happened in the past 48 hours that we need to sort out, and I hope much of it was a misunderstanding, because I have huge respect and regard for those involved,” he wrote on Slack.

And in a statement, Automattic confirmed with the media that Mullenweg is back as the chairperson and CEO of his company “with full support of the board”.

“If you search online you can see many top executives and Automatticians supporting him as well”, the spokesperson added.

Mullenweg, according to his posts on X, seems to be taking his brief ousting in stride. Last Friday, in a series of posts, he seemingly joked that this was the fifth attempt at a coup in his company.

“Founder advice: If you don’t have a coup attempt every few years, you’re not hiring strong enough leaders,” he said. In a separate post, he wrote “Boards are never boring,” with a ‘laughing-crying’ emoji accompanying the statement.

Automattic is best known as the creator behind WordPress.com. It also owns the microblogging platform Tumblr, WooCommerce, a plugin for WordPress, as well as the online survey and quiz conductor PollDaddy, now known as CrowdSignal.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Xbox has started putting in some real work to make a comeback in the console race under the leadership of Asha Sharma. The company recently gave physical game discs a digital future at a time when PlayStation is preparing to move away from physical media starting in 2028. It also picked up Hideo Kojima’s PHYSINT after Sony decided to walk away from the project.

Microsoft has also been making changes to the console experience itself. Xbox has now released another batch of features for members of the Xbox Insider program, including better Remote Play quality, background downloads during cloud gaming, more personalization options, and improvements to party chat.

Remote Play is getting a quality boost

Xbox Series X and Series S owners in the Alpha Skip-Ahead and Alpha Insider rings can now test Remote Play at up to 1440p resolution. Microsoft has also increased video bitrates, which should result in sharper image quality on supported devices and sufficiently fast connections.

Downloads can now continue in the background when a player is streaming a game through Xbox Cloud Gaming, provided network conditions allow it. Microsoft previously let Insiders start streaming games while they were downloading or updating, but downloads would not continue in the background during the cloud session. Xbox Series X and S consoles are expected to see the biggest benefit from the change.

Xbox is adding more customization too

Players can now choose their console startup animation, including options from previous Xbox generations. Profiles can display up to five earned badges, and individual badges can be hidden from public view. A new local search tool also makes it easier to find specific games and achievements inside larger lists.

Voice Clarity is another useful addition. The feature reduces everyday background noise during party chat and is supported by most games released since 2020. Microsoft is also testing behind-the-scenes changes to improve party reliability and security.

These features are currently limited to Xbox Insiders, and Microsoft has not announced when all of them will reach the wider Xbox user base.