Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.

The vulnerability, tracked as CVE-2026-30612, affects Windows and macOS updaters that contacted the app’s abandoned domain (popcorntimeupd.xyz) over unencrypted HTTP and accepted executables without verifying digital signatures.

Anyone controlling the update domain could manipulate HTTP traffic and execute code as SYSTEM on Windows and as root on macOS.

The Popcorn Time app featured a Netflix-style interface that integrated BitTorrent downloads, allowing users to consume illegal content right directly inside the app.

The project was abandoned for legal reasons but later relaunched as a legitimate content-streaming app. However, forks such as Time4Popcorn emerged under the Popcorn Time name, quickly attracting millions of users.

Researchers at Eye Security discovered the security risk after registering the popcorntimeupd.xyz domain and observed up to 3 million Windows and 350,000 macOS client connections to Time4Popcorn.

Connections came from residential ISPs and corporate, government, and military networks. However, none of the users appeared to be actively using the app, suggesting it had been installed and forgotten.

“If we were able to send an update, we could potentially get code execution on millions of systems,” Eye Securit notes, adding that “the impact would be severe if this were to fall into the wrong hands.”

Following this discovery, the researchers registered 14 more domains associated with the service.

Securing the systems

Between November 2025 and March 2026, Eye used the vulnerable update mechanism to deliver remediation code that stopped and disabled the updater.

Their payload collected no host data or telemetry, and deleted no files on the users’ computers, keeping their actions within a fully legal context.

Eye explains that it had to modify its payload during testing to evade antivirus products that flagged it for disabling a service.

After deploying the remediation, Eye recorded 2 million update downloads, and by March 1 this year, requests to its update domain dropped by 98%.

Following the successful completion of the remediation operation, domain ownership was passed to the non-profit security organization The Shadowserver Foundation.

Despite this success, the researchers warned that the risk is not fully eliminated for users of the app.

First, Android users remain exposed as installing an update would require user interaction, and researchers could not disable the updater remotely for the mobile platform.

Second, the Time4Popcorn app uses a severely outdated Chrome engine from 2014, with no sandbox protections, which could be exploited in attacks.

The best course of action would be for users to remove the software entirely from their systems.

Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.

The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.

Get the report

Revival Rugs is turning 9 this month, and evidently, the birthday girl is feeling generous. The rug retailer is taking 20 percent off everything sitewide (exclusions may apply, as always). But don’t dillydally—the party ends Sunday, October 25.

Sure, Black Friday is around the corner, and there will be deals aplenty. But will they be sitewide and stackable? Revival’s 20 percent stacks, meaning it also applies to marked-down and clearance items. Will the rug you’ve been eyeing for months still be available in November? Are you willing to risk it? I wouldn’t.

Why We Love Revival Rugs

Revival is a retailer we love here at WIRED, mainly because of its lovely selection of hand-knotted and handwoven wool rugs at reasonable prices. The company imports rugs from Turkey, Morocco, and India, and also works with its own supplier in Oakland, California. Revival also offers a variety of washable rugs, à la Ruggable (which, by the way, is having its own October Hosting Sale). Not every Revival rug is machine washable, but many are easy to maintain with spot cleaning and a low-suction vacuum.

WIRED reviewer Nena Farrell has the Bronto Hand-Tufted Rug in her toddler’s bedroom, and they are both fans. Farrell appreciates how soft it is and how it makes the room feel playful without looking tacky. Meanwhile, her son is mostly here for the giant dinosaur, which, honestly, is fair. WIRED operations coordinator Molly Higgins has the Garland Washable Area Rug in her living room, where its Turkish-inspired folk-art pattern adds plenty of color and disguises everyday stains. WIRED commerce director Cooper Fleishman just bought a vibrant marmalade wool rug for his new office from the Birthday Sale; sadly, it’s sold out, but this tonal design is a close cousin.

As with any sale, there are a few exclusions. Swatches and gift cards aren’t included, and be sure to read the terms and conditions for more information.

Padua’s Palazzo Moroni hosted the reveal of the Michelotto Gruppo 4 Tributo on October 10, 2026, fifty years after the Ferrari 308 received its Group 4 homologation. AC Motorsport, started by Padua entrepreneur Francesco Calzavara following his years at Michelotto, promoted the effort while Michelotto Group carried out the design, development, and construction.

Giuliano Michelotto established his workshop in 1969 and worked on almost 700 competition cars, winning an astounding 1,495 races, including 44 world championships. Ferrari later approached Michelotto’s business to acquire the Pininfarina-designed 308 GTB for Group 4 rallying. This essentially involved grafting on tubular frame sections, some seriously advanced composite bodywork, and a seriously tweaked 2 valve V8, and the results were nothing short of stunning: a 1981 Tour de France Automobile win with Jean-Claude Andruet and a close second place at the 1982 Tour de Corse, Ferrari’s only ever top level World Rally Championship podium finish.

Sale

LEGO Technic Ferrari FXX K Toy Car – Building Toy for Girls & Boys, Ages 10+ – Cool Birthday Gift for…

• LEGO FERRARI MODEL CAR KIT – Builders ages 10+ can create the legendary Technic Ferrari FXX K with authentic details and working mechanical features
• AUTHENTIC RACE CAR DETAILS – This supercar building set features working butterfly doors, opening hood, and an engine cover that reveals the…
• CAR MODEL KIT – Young engineers explore real automotive concepts with this educational learning toy as they build the working differential and watch…

Under the hood is a transversal 3.4-liter naturally aspirated 90-degree V8, producing 380 horsepower at 8,250 rpm and 363 Nm of torque on 98 RON fuel. The aluminum block and heads, four camshafts driving two valves per cylinder (which provides more torque on mixed surfaces than a four valve system), and electronic injection all add up to a very powerful package. The power is sent to the rear wheels via a five-speed manual with a gated shifter, dog-ring engagement, and an impressive eight different gear ratios to choose from, so whether you’re tackling tight roads or quicker circuits, you can get the car set up to fit.

The tubular frame is comprised of elliptical tubes that hold composite body panels and an integrated roll bar. This all adds up to a relatively light 950 kilos (with fluids but no gasoline), giving you a power-to-weight ratio of around 2.5 kilograms per horsepower. That’s rather similar to the original 308 footprint, however it should be noted that this is a two-seater berlinetta.

So, how is the ride? The car comes with double wishbones machined from solid, adjustable dampers, and stabilizer bars, which allow you to configure the entire chassis to your liking. Four piston calipers clamp down on the front and rear ventilated disks (which measure 345 and 328 millimeters, respectively), and the brake balance may be adjusted from the cockpit. You’ll be seated on eighteen-inch wheels with Pirelli P Zero Trofeo RS tires.

The composite bodywork is based on the classic wedge shape, but with a much more modern twist. You get a low nose, pop-up headlights, various vents and gills on the hood and fenders, flared arches, a seriously enormous rear clamshell, four circular taillights, and, of course, dual exhausts. On the inside? To keep things basic, you get composite-shell seats wrapped in Alcantara, a three-spoke wheel, and a gated shifter, all linked with a digital display and a plethora of physical switches.

Michelotto expects to build fewer than fifty of them, primarily in Padua, and hopes to confirm the final number by the end of 2027. What about price? They’re keeping that under wraps for now, but comparable restomod projects would suggest it’ll cost at least 450,000 euros. As for road registration (street legality), that is still up in the air, but the car clearly continues the work of the workshop that first took the 308 and transformed it into a true rally winner.
[Source]

Getting initial customers as a startup can be one of the most grueling challenges in business. Even when companies manage to snag some early interest, there’s no guarantee those customers will stick around.

At TechCrunch Disrupt last week, Elia Wallen, founder and CEO of travel startup Engine, Gamma founder and CEO Grant Lee, and Crystal Huang, general partner at Google Ventures, shared tips on how to attract and retain customers.

In the current era — when young AI companies like Cluely and Instinct are building big audiences not just through their products but also through their founders’ colorful online presences — social media can seem like a magic bullet for reaching early customers. But founders who want heighten their business strategy with modern marketing, have to be strategic, according to Lee.

Gamma, which sells AI-powered presentation software, managed to scale its business exponentially with a social media strategy that deployed influencers through its Ambassadors (or “Gambassador”) program. The company adopted the plan before influencer-based marketing was a tried-and-true strategy for smaller companies, eventually reaching a multi-billion dollar valuation.

But simply giving influencers a platform and telling them to promote your brand online doesn’t automatically translate to sales, said Lee. There’s more to it than that.

“If you have a product that can serve many different segments or use cases, then you want to basically have creators that can target each one of those,” Lee said. “If you have folks that are in consulting versus people that do all their marketing and create all the decks for their CMO, there’s all these different segments you might want to go after.”

Lee said sometimes founders seem to treat creator marketing or influencer marketing as a sort of set it and forget it thing.

“I think you’re better served by really spending a lot of time with these creators, because if they’re not able to understand how to articulate the value of your product, it doesn’t matter how much money you spend, it’s just going to fall flat,” Lee added.

The effectiveness of social media depends largely on the type of business. Other ways of reaching customers can be just (if not more) effective.

Wallen would know. His company Engine, which manages lodging and travel bookings for midsize businesses, bootstrapped its way to $150 million in bookings before taking on any outside funding. They also had no visible social media strategy at all. For Wallen, traditional sales tactics can be far more useful than a positive TikTok video.

“We did events and we smiled and dialed,” said Wallen. “We still have a lot of people picking up the phone. A lot of people who didn’t grow up with that or don’t understand it think that it’s outdated or it doesn’t work but it does. It’s a hard thing. There are a lot of companies that just refuse to do it or don’t know how to do it well. But they’re missing out on a very big offline client base.” He added: “The phone still works.”

Wallen also shared an in-person tactic that his company deployed during its scrappy early days: hiring a magician named David to perform tricks for prospective clients at events and encourage them to visit the Engine’s booth. In short, old-fashioned personal engagement can work just as well, if not better, than the latest social media tricks.

Huang, who has managed droves of startups and shepherded them to success, said that once you have a customer, a lot of value can be derived from looking at how they use the product.

“Can you look into usage data and figure out if it’s recurring, if it’s increasing, if they are referring their friends?” Huang said. “It can come across in early usage and retention information as well. And then also, do you see some super fans, right, who even want to work at the company, promote the company, be attached to the brand?” She added: “You need to have ways to create evangelists who are really passionate about the product.”

The Call of Duty series needed a win this year. Last year’s Black Ops 7 was a clown car of bad decisions, featuring an always-online campaign mode with ridiculous zombie bosses and open-world Warzone. Worse still, the multiplayer mode (the only reason that many people buy the game) was entirely forgettable. Developer Treyarch was tasked with putting out Call of Duty games two years in a row — that crunch was a recipe for disaster.

On the other hand, that means Modern Warfare developer Infinity Ward had plenty of time to cook up the fourth and final entry in its own series. Thankfully, the studio used that extra runway to its advantage. Modern Warfare 4 may not have returned Call of Duty to the highest highs of the original trilogy that ended in 2009 (and which Infinity Ward rebooted over the last decade), but this is a leap in the right direction for a series that has become increasingly sloppy in recent years.

Players will find plenty of cinematic action in the single-player campaign, and the multiplayer mode has slowed down just a touch, which I think the game largely benefits from.

More importantly, Modern Warfare Zombies has been completely dropped in favor of DMZ, an accessible player-versus-player-versus-AI extraction shooter experience. The experimental swing feels like a lifeline for the series, and DMZ is the standout mode for the game.

The campaign identity crisis is (mostly) resolved

Modern Warfare 4 is a tighter game than Infinity Ward’s previous project, and it’s leagues better than Black Ops 7.

At the same time, it has a complicated campaign to crack open (and not because the plot is hard to follow). Players flit back and forth between the perspective of Captain John Price, longtime protagonist of the series, and South Korean soldier Park Hyun-Jun, a newcomer whose squad is fighting for his homeland. A battle rages against a united coalition of Russian and North Korean ultranationalists, who are blazing a path into other territories.

Russian bad actors have been the primary antagonists of every Modern Warfare game, and it’s actually really cool to see South Korea’s positive representation in a Call of Duty title. But the propaganda is laid on thick — Russia and North Korea are presented as sneering colonialist powers, while the Western world’s soldiers are a shield on every front.

Americans spearhead the fight against imperialism; forget about the Strait of Hormuz and gun down these unambiguously bad guys. The whole plot hinges on a somehow less-subtle Red Dawn-type of scenario, and the gung-ho military politics are absolutely nauseating this time around. Sure, Price is framed as morally gray — he’s working with a cartel to achieve his goals, and there’s boring melodrama where he comes to blows with his former allies — but he’s vindicated in the end because he is the type of Call of Duty leader that prevents global conflict.

Modern Warfare 4 also features an obligatory shockingly graphic mission, which is something of a tradition for the series. In it, you play as a North Korean soldier rounding up and executing the occupants of a small village for hiding a defector. During my playthrough, I earned an achievement for successfully interrogating a villager without beating them down. The whole affair is gratuitous, gross and gamified in a problematic way, exacerbated by the bizarre decision to continue making this kind of mission a mainstay in each game.

It’s a shame that the story is so trite and icky because the tentpole action is really good. The best mission takes place early in the campaign, when Price infiltrates a New York nightclub to search for a Russian oligarch. Bright lights and pulsing music contrast with brutal fistfights and gunplay — it’s like playing through the climax of a John Wick film. From there, the highlights keep coming: There’s a fight in a train yard where the cover moves on rails, a chase scene across Mumbai rooftops, a high-stakes nighttime penthouse raid and a full-out assault on a dictator’s compound.

But the worst mission in the campaign repeats the mistakes of other modern Call of Duty games. When the player’s squad initially counterattacks North Korean airspace, they’re shot down and have to survive behind enemy lines with scavenged gear. It’s an interesting setup that is completely wasted on a Warzone-like, open-world mission with a checklist of more than 50 optional collectibles to seek out.

The few puzzles that exist are mind-numbingly easy — despite my best efforts, I checked out after completing around half of the activities. I focused on the main objective to end the mission as soon as possible, which is just about the worst feeling to have while playing a game.

I don’t know if there’s an edict from up top to put one of these open-world missions in each new game to funnel players into Warzone, but they don’t work at all and are the worst part of any campaign.

Still, the folks that play the campaign will probably have a good time here. Players can explore tons of cool locales, and the enemies are surprisingly difficult this time around. Still, if you care about the loose narrative implications of a Call of Duty campaign, it’s tough to wash the bad taste out of your mouth.

DMZ is better than Warzone and a welcome reprieve from Zombies

DMZ, a fairly accessible extraction shooter game mode, returns with new content for the first time since its “beta” ended in 2023. Players have been mourning what could have been for years, but it seems like the developers at Infinity Ward have been tinkering with it in the background for quite some time.

And their hard work has paid off because I’m confident that DMZ is the standout mode for Modern Warfare 4.

This extraction shooter is perhaps simpler than even ARC Raiders, but that’s part of the appeal. Players drop into North Korea to loot, fight each other and take down key targets throughout the map.

Everything is streamlined and easy to understand, including the loot. During play, you will come across several types of scrap, an assortment of healing items and tons of weapons, so you don’t have to think too hard about what to grab. Just move, shoot and pull out high-value items, then run the loop again.

The enemy AI is surprisingly aggressive and fun to battle against, especially when you run into an overwhelming number of troops. Armored vehicles and helicopters will try to smear you into the dirt. It’s an adrenaline rush, and as far as I’m concerned, Infinity Ward nailed the really important part of DMZ. It’s tough to get the player-versus-AI balance right, but these enemies feel like a real threat.

Other players might also come for your loot, which is what sometimes puts folks off of the extraction genre altogether. But DMZ’s in-depth bounty system provides a foil to player-versus-player gameplay.

Folks who hunt down other players rack up a bounty and appear on the map, so pacifists have a better chance to steer clear while bounty hunters stalk them down. It’s a pretty genius compromise that encourages the player-versus-player enjoyers to butt heads while the player-versus-environment crowd hides away because the tension of a potential run-in with aggressors is never truly alleviated.

I’m concerned that the pared-down simplicity of the gameplay loop could hurt DMZ’s long-term success, but Infinity Ward seems committed to adding new world bosses. That could really shake up how matches play out, even if there’s nothing as over-the-top as Marathon’s Cryo Archive boss.

DMZ isn’t perfect, but I see the groundwork laid for one of the better extraction shooters I’ve played. Depending on how the development team builds on this game mode, I can see it becoming something special (and maybe even a Call of Duty mainstay for years to come).

Multiplayer remains quick, but it’s heavier and grounded

Call me an oldhead, I don’t care: Black Ops 7’s omnimovement system, which allowed players to run, jump and slide around while looking in any direction, was disastrous for Call of Duty game balance.

Treyarch’s update to the formula might work for massive Warzone maps where there’s plenty of open space and a higher time-to-kill for other players, but the smaller multiplayer maps become impossible to breathe on. Call of Duty is, first and foremost, an arcade shooter, but the multiplayer formula still works best when there’s time to recoup and recover, make tactical flanks and call in your scorestreaks.

Infinity Ward’s Modern Warfare 4 removes the omnimovement system, but it still allows players to sprint, slide and dolphin dive around at appreciably high speeds. The new mantling mechanic adds some traversal options, but everyone feels a little heavier.

The slightly slower six-versus-six matches feel great, and the larger modes are a bit less chaotic. The Modern Warfare games have always skewed closer to classic boots-on-the-ground Call of Duty, and the latest entry doesn’t disappoint in that regard.

Still, the fatal flaws of the modern Call of Duty formula have gone untouched. There remain more than 70 attachments for many weapons. Many modes have maps cut out of larger Warzone areas. The seemingly mandatory 24/7 Shipment playlist is being added soon to prey upon your nostalgia. Progression needs to synergize across a complete Modern Warfare 4 product, so unnecessary bloat exists everywhere you look.

This is a solid modern Call of Duty game, but the overall quality is still a far cry from the series’ heyday. In a post-Warzone world, this is about as good as it gets — but if that formula doesn’t work for you, it might be worth steering clear of Modern Warfare 4.

Tyler is a writer for CNET covering laptops and video games. He’s previously covered mobile devices, home energy products and broadband. He came to CNET straight out of college, where he graduated from Seton Hall with a bachelor’s degree in journalism. When Tyler’s not asking questions or doing research for his next assignment, you can find him in his home state of New Jersey, kicking back with a bagel and watching an action flick or playing a new video game.

You can reach him at tgraham@cnet.com.

See full bio

Advertisement

We buy fitness bands and activity trackers to keep tabs on our exercise, but it is easy to forget to start tracking or switch modes when moving between different activities. For Fitbit and Pixel Watch users, that could soon become a lot less annoying, as Google is rolling out a major upgrade to automatic activity tracking that can recognize more than 100 types of exercise, up from just 10 before.

Google first showed off the improved tracking earlier this month alongside the Fitbit Edge. It is now coming to Fitbit Air and the Pixel Watch 3, 4, and 5, and Google claims the added context behind the system makes workout detection nearly twice as accurate while cutting missed activities by more than half. Fitbit Edge will support it too.

It looks at more than just your movement

Google Health can consider your usual exercise routines, activity history, previous manual corrections, and, if you allow it, your location when figuring out what you are doing. The expanded list includes strength training, swimming, racket and team sports, cardio machines, golf, and high-intensity workouts. Sessions that meet your minimum duration, set to 15 minutes by default, and maintain an elevated heart rate can be logged automatically. A summary should arrive in Google Health within about 30 minutes. Correcting a wrongly detected activity also helps the system learn your patterns for future sessions.

According to 9to5Google, the feature is arriving through Google Health 5.11, which is already widely available on iOS and still rolling out on Android. Users receiving the upgrade are also seeing a new setup screen for expanded activity detection.

Fitbit Air is getting another health upgrade

Google is also bringing Health Guardian to Fitbit Air later this month for Google Health Premium subscribers. It can track blood pressure and insulin resistance trends and provide a report at the beginning of each month for users who meet the required wear time. Google Health Coach can then use those patterns to adjust fitness and wellness guidance.

eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of just 4—said it’s getting out of the business.

V. Srinivasan, chairman of India-based eMudhra Limited, cited increasing costs and complexities of compliance requirements—paired with the business generating just 1 percent of its revenue. He also said that the emergence of organizations providing TLS certificates free of charge further reduced returns on investment when compared to other products and services the company offers.

Don’t let the door hit you on the butt

“However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business,” the company continued in a Thursday post. “In view of this, after detailed deliberations our board has concluded that withdrawing from global SSL/TLS is the right decision for eMudhra and its shareholders.”

The announcement came two days after researchers revealed eMudhra had issued eight certificates with private keys so defective they were trivial to discover. Anyone who took the time—which was measured in milliseconds—could crack them and then use them to generate TLS certificates that would be trusted by all major browsers, as well as an untold number of email servers, IoT devices, Docker containers, forgotten Linux machines, and unmaintained CLI tools that ship their own copy of the roots.

Whereas NIST P-384 elliptic curve cryptography private keys—used in the type of certificates eMudhra issued—are supposed to contain roughly 384 bits of entropy, the eight compromised certificates had key sizes ranging from 3 to 8 bits. Stated differently, whereas there are supposed to be 2³⁸⁴—a number with 116 digits—different key possibilities, the strongest of the defective keys had a maximum of just 256. The private keys were 4, 56, 66, 115, 155, 156, 230, 237.

Why Buy a Soundbar in 2026?

While TV makers have made progress in the past few years in improving the sound of built-in speakers, the physics involved present a challenge. Slim TVs lack the cabinet volume needed for low bass reproduction and the TV screen itself limits the placement and size of internal speakers. Soundbars offer a compelling solution as they can concentrate on providing better sound, while also allowing expansion to discrete multi-channel immersive sound, with no speaker wires or separate A/V receiver required.

But there is a trade-off: getting rid of speaker wires and a separate A/V receiver means that each speaker needs its own power cable, and the width of the front soundstage is still limited (in most cases) by the dimensions of the soundbar itself. It also means that the height effects, critical to immersive sound formats like Dolby Atmos, Eclipsa Audio and DTS:X, are served either by virtualization (simulated height) or by up-firing drivers which bounce sound off the ceiling. While both of these solutions can work reasonably well in the right room, they don’t compare with the discrete height speakers of a traditional wired, component based surround system.

Alternative solutions have emerged that allow customers to get a wider front soundstage by placing speakers on either side of the TV, while still maintaining the set-up simplicity of a wireless system. Sony’s BRAVIA Theater Trio and Quad are examples of this, as are LG’s Sound Suite and TCL’s Z100 wireless speakers, both of which use Dolby Atmos FlexConnect technology to allow customers to choose anywhere from one to five speakers for their room, with a wireless connection from the TV and built-in calibration software to optimize the sound.

But the appeal of a simple one-piece or two-piece soundbar system is hard to deny. Plug in a single HDMI cable from the TV to the bar and provide power to each speaker and you’ll instantly improve the sound of anything you watch on TV. Good soundbars also integrate with music streaming services so you can enjoy high quality sound from music, podcasts or audiobooks when the TV is off.

In 2026, we’ve seen and tested updated soundbar models from Sony, Samsung, Sonos, Bose, Nakamichi and Bluesound. High-end speaker maker Focal also introduced its first soundbar-like product (but don’t call it a soundbar). The Focal Mu-so Hekla wireless speaker can create convincing surround sound with solid bass from a single one-piece speaker that sits on a shelf or credenza below your TV. Our review of that product will be coming soon. This year LG introduced its first soundbar with Dolby Atmos FlexConnect built in (the H7), which is capable of adding up to five additional wireless speakers (including two subwoofers), for maximum immersive surround. But that model is not eligible for an award as we haven’t reviewed it yet.

Methodology

All of the soundbars and soundbar systems selected as “eCoustics Editor’s Choice” for 2026 were reviewed hands-on by our experienced staff of tech journalists. We tested all soundbars standalone, and with optional subwoofers and rear speakers, when possible. We used a wide sampling of content including movies, TV shows and music in both stereo and spatial audio formats like Dolby Atmos. In addition to sound quality (which is paramount), other factors including ease of use and set-up, ergonomic design and usability and aesthetic design were considered. Without further ado, here are our picks for best soundbars of 2026.

Sonos Beam Ultra

The Sonos Beam Ultra ($699.99) is the newest Sonos soundbar for 2026, available in white or black finishes. At just under 30-inches wide it delivers better immersion and more mid-bass punch than you’d expect for its size thanks to more power and more speaker drivers than its predecessor (the Sonos Beam), including two new up-firing reflective height channel speakers. And, for the first time, Sonos allows its portable wireless speakers, including the Play and Move 2, to be used as surround speakers. This means you don’t actually need power cords in the back of your room to get discrete rear sound effects. You will need to recharge these speakers occasionally though, as their built-in batteries don’t last forever. But while they’re not in use as surround speakers, you can take them to the backyard or the beach for music on the go.

The Beam Ultra can also work with the Sonos Ace Ultra headphones to swap sound from speaker to headphones with the touch of a single button, while still maintaining a spatial Dolby Atmos immersive soundstage, complete with head tracking.

Why We Picked It: The Sonos Beam Ultra provides high quality surround sound in a compact, fairly affordable package, works seamlessly within the robust Sonos ecosystem and app and can be upgraded to true discrete multi-channel surround with solid bass if you add an optional subwoofer and rear speakers.

Where to Buy:

Read full review

Samsung HW-Q990H Soundbar System

At $1,999 MSRP, the 4-piece Samsung HW-Q990H is the company’s flagship soundbar system for 2026. Unlike unlike some competitive models, the HW-Q990H comes with everything you need in the box: the soundbar, a pair of rear channel speakers (with up-firing drivers) and a surprisingly capable compact dual 8-inch subwoofer. The nearly 49-inch wide soundbar can process up to 11.1.4 channels of immersive audio, routing sound to each of the 23 separate speaker drivers. In real world testing, we found that the Q990H was the best soundbar we’ve tested at creating an immersive dome of sound with seamless motion and few audible dead spots around the room.

We love that it supports not only Dolby Atmos and DTS:X immersive surround, but also the new Eclipsa Audio format which is beginning to gain traction on YouTube. Also, with three HDMI ports (compared to competitive products with only one or two HDMI ports), the Q990H offers maximum flexibility and can work well even with older TVs or TVs with limited audio passthrough options. It performs well with both movies and music and its compact design won’t draw too much attention to itself.

Why we picked it: At a street price of around $1,500, the HW-Q990H system offers a simple, yet great-sounding upgrade to any TV or projector, and its comprehensive format support ensures future compatibility.

Where to Buy: $1,999 $1,499 at Amazon | Best Buy | Crutchfield

Read full review

Bose Lifestyle Ultra

The Bose Lifestyle Ultra soundbar ($1,099) works well as a standalone soundbar, but its performance ascends to the next level with the addition of a sub and rear speakers. At a system price of $2,596, the four-piece Bose Lifestyle Ultra system includes a 43.5-inch soundbar, wireless Lifestyle Ultra Subwoofer, and two Lifestyle Ultra Speakers serving as rear surround and height channels, creating a 7.1.4-channel Dolby Atmos configuration. The system supports HDMI eARC, Apple AirPlay 2, Google Cast, Spotify Connect, Wi-Fi, and Bluetooth, along with Bose’s CustomTune room calibration and adjustable SpeechClarity dialogue enhancement.

Why We Picked It: Our testing revealed excellent dialogue clarity, convincing Dolby Atmos height and surround effects, and significantly greater cinematic impact with the subwoofer and rear speakers engaged. The premium design, generally straightforward setup, and strong performance in real-world living spaces make it an excellent choice for buyers who want immersive home theater without an AVR and speaker cables. The occasional app hiccup and lack of DTS support are worth considering, but the complete system delivers an engaging movie and television experience.

Where to Buy:

Read Full Review

Canvas HiFi All-in-One Soundbar

On paper, Canvas HiFi ($4,999) is a soundbar with an integrated TV stand and mounting system. In reality, that description sells it short—by a long shot. Its Danish build quality is exceptional, and its sonic performance outclasses every standalone soundbar we’ve heard. Thanks to BACCH 3D technology, the soundstage is so expansive and convincing that you’ll swear there are extra speakers hiding somewhere in the room. There aren’t.

Despite all that scale and theatricality, dialog remains locked dead-center and crystal clear, and the system somehow delivers genuinely chest-punching bass down to 30Hz—without the help of a subwoofer. Great for movies. Great for music. One box. No compromises.

The Canvas HiFi has multiple size and finish options and is optimized for TVs 55 to 85 inches. The company makes a version called the “HiFi Frame” specifically for Samsung’s “The Frame” and “The Frame Pro” TVs, for seamless integration with those models. Also, a larger version (Canvas L), optimized for TVs 65 inches to 115 inches was introduced at the Vienna HiFi show and is expected to begin shipping later this year.

Why We Picked It: The Canvas HiFi’s unique combination of elegant design and rich expansive sound offers an ideal solution for design-conscious movie and music lovers who appreciate great sound but also desire visual simplicity.

Where to Buy: $4,999 at Canvas

Sonos Arc Ultra

Sonos made its name as a pioneer of whole home wireless audio systems. Rather than requiring a custom installer or routing miles of speaker wire all over your home, Sonos offered a simple networked solution allowing music lovers to play their music out loud anywhere in their home via a simple mobile app and wireless ecosystem. 13 years ago, the company launched its first soundbar, and in late 2024, they released their latest flagship soundbar, the Arc Ultra ($1,099).

The Arc Ultra builds on what made its predecessors great, with simple design, high quality sound and the ability to expand into a fully immersive multi-channel wireless surround system. Its main strength is simplicity and integration within the Sonos environment, but it’s no slouch in the sound quality department and does a great job adding impact and drama to movies and TV shows. But it was designed for music first, and it shows when you play back your favorite tunes from your streaming service of choice, either in stereo or immersive Dolby Atmos surround.

The Arc Ultra does well as a standalone soundbar, with good spaciousness and solid bass, but really shines if you add a pair of ERA 300 rear speakers and one (or two) subwoofers. Get ready for a little sticker shock, though: a fully loaded system with Arc Ultra, 2 ERA 300s and 2 Subs will set you back around $3,700, and at that price, you could opt for a pretty nice component-based system, albeit with more effort involved.

Why We Picked It: Sonos offers a robust app and ecosystem for music and movie lovers who want to listen to their content out loud anywhere in the home (and even outside it). The Arc Ultra is one of few soundbars that can hold its own, without any additional speakers, though it comes alive with the addition of optional surround speakers and subwoofer.

Where to Buy:

Theory Audio Design Soundbar System

The Theory Audio Design 5.2.2 is a professionally installed home theater system built around a three-channel soundbar, dedicated surround and height speakers, dual subwoofers, and Theory’s amplified loudspeaker controllers with integrated DSP and bass management. The system is modular, allowing installers to tailor the speaker configuration and amplification to the room, although a separate AV processor is required for Dolby Atmos and DTS:X decoding. Unlike conventional wireless soundbar packages, Theory prioritizes neutral tonal balance, excellent dialogue intelligibility, precise imaging, and dynamic range without sacrificing detail or control.

Why We Picked It: In more than two decades of reviewing home theater equipment, few systems have delivered the sense of scale and emotional involvement that the Theory 5.2.2 achieved. Explosions had genuine physical impact without overwhelming the rest of the soundtrack, while quieter scenes revealed subtle ambient details that made films and television dramas feel more believable. It wasn’t simply about playing louder; Theory demonstrated how convincing cinematic sound can fundamentally change the viewing experience.

Priced from $10,398 for a 5.1 system at Theory Professional

Read full review

The Bottom Line

No longer just a poor man’s cheap fix to bad TV sound, sound bars and similar products have expanded to provide comprehensive sonic solutions for virtually any budget and lifestyle. Where you’re looking for something simple and easy to set-up or something more robust and expandable, there is likely a soundbar system out there that will serve your audio needs.

Related Reading