The company did not say what it had given the hacker group in exchange for the terms.

Instructure, the parent company behind Canvas, the education management platform reportedly hacked by ShinyHunters, has reached an agreement with the cyber gang, it said yesterday (11 May). Hackers had given affected universities until tomorrow (12 May) to negotiate a settlement.

As per the agreement, the cyber extortion group has returned stolen data and deleted copies, and has agreed not to extort the institutions affected in the hack, Instructure said. The company did not say what it had given the hacker group in exchange for the terms.

Reportedly formed around 2020, ShinyHunters has claimed responsibility for an array of high-profile, financially motivated attacks in recent years on groups such as Salesforce, Allianz Life, SoundCloud, Ticketmaster and Tinder-parent Match Group.

The group was linked to a breach of the European Commission’s Europa.eu platform in March, where 350GB of data, across multiple databases, was reportedly accessed and stolen.

It reportedly began targeting edtech giant Instructure late last month, which started noticing unauthorised activity in Canvas on 29 April, and later on 7 May.

ShinyHunters claimed responsibility for the attack and said it stole 280m records. The threat actor also published a list of more than 8,800 institutions that were affected by its attacks on Canvas. In a 3 May ransom note, it threatened to leak “several billions of private messages among students and teachers.”

In Ireland, the platform is used by the likes of University of Galway and Munster Technological University – both of which faced disruptions following the hack.

Instructure, at the time, said the stolen information includes user identifying information such as names, email addresses, messages and student ID numbers at affected institutions. It has reported the breach to the US FBI and the Cybersecurity and Infrastructure Security Agency and other law enforcement agencies, it said.

In its latest update, the company said that the unauthorised actor exploited an issue related to its ‘free-for-teacher’ accounts to hack Canvas. As a result, the feature has been temporarily shut down. Other services, however, are fully operational, it added.

“ShinyHunters timed this attack to sting as much as possible,” said Raluca Saceanu, the CEO of Smarttech247.

“With exam season underway and academic years drawing to a close, schools and universities needed Canvas working. That dependency gave ShinyHunters the leverage to lay out the terms of their deal. For Canvas, and its parent Instructure, it was agree to terms or lose customers.”

“While technical recovery time from ransomware attacks is accelerating, attackers are responding by shifting their focus and making the broader organisational consequences more damaging than ever.”

“It’s not just a question of causing as much potential damage as possible. From the attackers’ point of view, these newer approaches are faster, cheaper, stealthier and carry lower technical risk. And the core law of extortion anywhere holds – even if a victim pays, there’s no guarantee data won’t be exposed anyway, and the organisation has now marked itself as a valuable target,” Saceanu added.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Looking for the most recent regular Connections answers? Click here for today’s Connections hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle and Strands puzzles.

Today’s Connections: Sports Edition is a tough one. If you’re struggling with the puzzle but still want to solve it, read on for hints and the answers.

Connections: Sports Edition is published by The Athletic, the subscription-based sports journalism site owned by The Times. It doesn’t appear in the NYT Games app, but it does in The Athletic’s own app. Or you can play it for free online.

Read more: NYT Connections: Sports Edition Puzzle Comes Out of Beta

Hints for today’s Connections: Sports Edition groups

Here are four hints for the groupings in today’s Connections: Sports Edition puzzle, ranked from the easiest yellow group to the tough (and sometimes bizarre) purple group.

Yellow group hint: Need to work on your skills.

Green group hint: Wimbledon essentials.

Blue group hint: Formerly the Seattle SuperSonics.

Purple group hint: What time is it?

Answers for today’s Connections: Sports Edition groups

Yellow group: Out of practice.

Green group: Parts of a tennis racket.

Blue group: Members of the Oklahoma City Thunder.

Purple group: ____ clock.

Read more: Wordle Cheat Sheet: Here Are the Most Popular Letters Used in English Words

What are today’s Connections: Sports Edition answers?

The yellow words in today’s Connections

The theme is out of practice. The four answers are cold, off, rusty and sluggish.

The green words in today’s Connections

The theme is parts of a tennis racket. The four answers are butt, grip, grommets and strings.

The blue words in today’s Connections

The theme is members of the Oklahoma City Thunder. The four answers are Dort, Holmgren, Joe and Wallace.

The purple words in today’s Connections

The theme is ____ clock. The four answers are game, pitch, play and shot.

Toughest Connections: Sports Edition categories

The Connections: Sports Edition puzzle can be tough, but it really depends on which sports you know the most about. My husband aces anything having to do with Formula 1, my best friend is a hockey buff, and I can answer any question about Minnesota teams.

That said, it’s hard to pick the toughest Connections categories, but here are some I found exceptionally mind-blowing.

#1: Serie A Clubs. Answers: Atalanta, Juventus, Lazio, Roma.

#2: WNBA MVPs. Answers: Catchings, Delle Donne, Fowles and Stewart.

#3: Premier League team nicknames. Answers: Bees, Cherries, Foxes and Hammers.

#4: Homophones of NBA player names. Answers: Barns, Connect, Heart and Hero.

“Sonos went back to the drawing board and delivered a truly rewarding hybrid speaker.”

Pros

• Clean looks and solid build quality
• Packs quite an audio punch
• waterproofing is an underrated perk
• Good mileage and replaceable battery
• Doubles as a power bank

Cons

• No power brick in retail box
• You can’t take calls
• Stereo pairing only over Wi-Fi
• Limited Bluetooth functionality

Quick Take

Sonos has had a rough couple of years. The 2024 app rollout turned into a disaster that still shows up in the support forums, and the hardware pipeline went quiet for so long that I’d genuinely started to wonder whether the company had decided to take a sabbatical from making new speakers. So when the Sonos Play showed up in the lineup at $299, I was obviously skeptical.

After six weeks of using it as my primary kitchen speaker, my weekend patio speaker, and my impromptu bathroom-radio speaker, I can confirm something I didn’t expect while unboxing this speaker. This one can bring back the irked Sonos fans. It sits between the Roam 2 and the Move 2, while delivering the best of both worlds.

At $299, in a market crowded with cheaper Bluetooth options on one side and pricier smart speakers on the other, it had to land precisely. Somehow, it did. It sounds good, packs a replaceable battery, doubles as a power bank, and still remains portable. It just loves Wi-Fi a little too much, and that often turns into a functional drawback.

Sonos Play specs: What you get from this middle-weight warrior?

Sonos Play design and build quality: Clean, mean, and easy to lug around

Pick up the Sonos Play, and the first thing you notice is the density. It weighs 2.87 pounds, which is deceptively heavier than what its size suggests. But that’s in a way well-built things tend to be. It stands a hair under eight inches tall, flaunting a stout tubular body with a subtle taper and a polycarbonate mesh. At the top, you’re greeted with a soft matte layer that hides fingerprints better than I expected.

Mine came in white. There’s a black option on the table, as well, but I’d pick the white variant because it blends more easily with the interiors, whereas the latter color option stands out as a dark monolith. Either way, this is firmly in the “grown-up audio” school of design. The speaker disappears onto a bookshelf or kitchen island instead of screaming for attention the way some rugged portables do.

The small choices are where you can tell Sonos really pored over the details. The controls on top are real, clicky, physical buttons, and not the finicky touch-capacitive sliders you’ll find on the Era line. That difference becomes apparent the moment your hands are wet, or you’re outside in 45-degree weather with sweaty palms, or you’re trying to skip a track with moist fingers after a workout.

The touch-cap sliders feel premium in the showroom and tactically infuriating in the kitchen. Sonos clearly took notes and went with a thoughtful approach. The rear has a rubberized utility loop you can hook a finger through, and I kept catching myself grabbing the speaker by that loop and moving it from counter to patio table without consciously thinking about it coming loose or snapping. It’s a small thing that turns out to matter every day, and I’m glad Sonos didn’t compromise on the material quality here.

Durability has been baked in seriously. The IP67 ingress protection rating means the device is fully dust-proof and can withstand submersion in up to one meter of water for 30 minutes. But let’s be honest here. You likely aren’t going to treat this speaker to a “pool oopsie” and watch it prove the durability claims. It doesn’t float, which is the one trick the Bose SoundLink Plus has over it.

The shock-absorbing mesh exterior and the ruggedized internal housing have already shrugged off a couple of careless bumps during my testing without a cosmetic scuff to show for it. Phew! The whole design philosophy here is hybrid. The Sonos Play is just as happy docked on the wireless charging base in your living room as it is blasting music in wireless mode atop a fridge, and it feels equally at home if you’re lugging it around.

Yanked off the base and tossed in a tote bag with a wet towel, it acts like a rugged outdoor speaker. Most products in this price band can do one of those two jobs convincingly. The Play does both, and that’s no mean feat. Whether you want a speaker to complement your lifestyle or the adventure mood swings, the latest from Sonos fares well on either end of the spectrum.

Score: 9/10

Sonos Play audio quality: Pleasing, with a serious stereo ace up its sleeve

Sound quality is where Sonos earns the premium asking price. Even though the audio cabinet is small enough to carry in one hand, it somehow houses three Class-H digital amplifiers driving two angled tweeters and a dedicated mid-woofer, plus a pair of passive radiators handling the low end.

The tweeters fire at roughly right angles to each other, which is the engineering trick that gives the Play a soundstage no single-enclosure portable has any right to produce. Most speakers this size sound like they’re firing from one point in space. The Play sounds like it’s coming from a wider strip than the actual cabinet, and on tracks with strong stereo imaging and separation, you actually hear the trick working.

It’s not magic, exactly, but for a sub-eight-inch speaker, it’s the closest thing to it. The midrange is where the signature Sonos character lives, one that has been the company’s audio fingerprint for years. Vocals come out pleasant and natural, with a warmth-inclined, slightly-forward presence that makes it a lovely choice for podcasts and audiobooks.

If you’re into listening to your morning news briefings, they sound like a real person standing in the room rather than an audio stream with weird tinny resonance. On denser tracks, the speaker keeps everything legible without me having to crank the volume to compensate. The bass isn’t earth-shaking, but you can still feel the thump. It isn’t quite the kick-in-your-chest low-frequency output, but there’s still enough oomph to enjoy those bass-boosted playlists.

The dual passive radiators add real weight to the low-mids, and on dance tracks at outdoor volume, the speaker holds its own instead of turning the instruments into a screeching cacophony of distortion. I’ve spent a lot of time with portable speakers that sound great at certain volume levels but awful at others. The Play is a rarity, thanks to a flatter volume curve that maintains composure across the board range.

Between the crooning of Hamaki and Nayyara Noor, and the autotuned drops by T-Pain, there’s barely any mainstream track the speaker can’t handle. If you’re listening to layered instrumentals, some overlap happens once you cross the 60% volume levels, but within the halfway threshold, the likes of Tom Holkenborg are a blast to hear.

One reasonably clever trick is Automatic Trueplay. The Play’s onboard microphones continuously sample the room and adjust the EQ on the fly. The first time I really noticed it working was when I carried the speaker mid-song from a cramped bathroom into a spacious living room.

The tuning shifted within a couple of seconds, and the bloated bass that had been booming in the bathroom got pulled back to something sensible. It’s not a fix-everything feature, and on a windy patio with no walls to reflect from, the soundstage understandably narrows. But in practice, it means you don’t have to think about where you’re putting the speaker. I’d call it a win.

Score: 9/10

Sonos Play app and software: Gets the job done, but still needs some polish

Let’s address the elephant in the room, which is the Sonos companion app. After the 2024 redesign meltdown, a high number of long-term loyalists had a genuinely bad spell with woes such as randomly disconnecting speakers, lost groups, and broken Trueplay, to name a few. I won’t pretend the experience is fully back to where it was before the redesign, but it’s much, much closer than it was six months ago.

Stereo pairing works without any hiccups. Settings stick instead of mysteriously resetting overnight. The integration is still the actual reason you’d pay Sonos money over any random Bluetooth speaker. If you want Apple Music, Spotify, Tidal, YouTube Music, and a handful of internet radio stations on call from one app, this is the cleanest way to do it on the market.

What I like more than anything else, though, is that the Play has finally fixed the Bluetooth/Wi-Fi schism. Older Sonos speakers forced you into a binary. You had to pick between the high-fidelity multi-room Wi-Fi convenience or the dumber Bluetooth world. Switching modes felt like punishment, and you couldn’t group across modes at all.

The Play now supports Bluetooth grouping of up to four Play speakers, or you can pair two Plays over Wi-Fi for stereo syncing. Bring them home, drop them on their wireless bases, and they automatically rejoin the rest of your Sonos system. I love these quality-of-life conveniences.

Voice control comes in two flavors. Amazon Alexa works the way it works everywhere else, with the same charms and the same low-level eavesdropping concerns. Sonos Voice Control is the more interesting option, by the way. It processes commands locally on the speaker itself, so nothing leaves the device. Plus, the assistant who does all the talking has the voice of Giancarlo Esposito of “Breaking Bad” fame.

It’s a small touch but a delightful one, and the voice is pretty soothing to hear. The local processing also means it’s noticeably snappier than cloud-based assistants for the small handful of commands it actually supports. It’s not outrageously smart. For the most part, it handles play, pause, next, volume, group, and ungroup. You get the drift. In hindsight, these are the core commands you actually use 95% of the time.

The one persistent nag is that getting the speaker into the Sonos system still requires Wi-Fi for the initial setup and any system-level configuration. If you only ever plan to use the Play as a dumb Bluetooth speaker on a beach somewhere and never touch the app again, that’s a big hurdle.

The newer Wi-Fi 6 and Bluetooth 5.3 radios are up to the mark, though not the latest protocols. In my testing phase, pairing has been quick and reliable. Reconnections, however, are iffy. Plus, there’s still a sub-second delay between issuing an in-app command and it registering on the speaker. But the drill is clear. Sonos still very much wants you to live in their app, and the Play isn’t shy about reminding you of it, with the connectivity limitations in tow.

Score: 8/10

Sonos Play battery life: This one’s built for longevity

Sonos quotes 24 hours of playback on a charge. In real life, while listening at moderate to loud volumes (imagine filling a kitchen during or a moderate lobby), I’m seeing 14 to 17 hours, which is not too bad for a speaker of this acoustic class. The charging story is the most thoughtful part of the whole package.

The Play ships with a wireless charging base that doubles as a permanent docking station. You simply drop the speaker on the base, and it picks up where it left off in the multi-room system without any manual fussing. For travel, the bottom has a USB-C port that’s also bi-directional, meaning the Play can charge a dead phone from its own battery in a pinch.

I haven’t had to use that yet, because I always carry a wireless power bank with me, but it’s the kind of feature you’ll be grateful for exactly once and remember forever. The base itself sits flush enough on a counter that I keep mine permanently on the kitchen island, and the speaker just lives there, fully charged, ready to grab.

The biggest surprise is that the battery is user-replaceable. It shouldn’t come as a surprise that Lithium cells degrade over time. Whether it’s your tiny earbuds or the hulking cell packs in an electric car, the electrochemical degradation is unavoidable. After three or four years of daily use, every portable speaker on earth gets noticeably worse at holding a charge. The solution? Buy a new one and add to the e-waste pile.

Sonos is taking a better route. The Play lets you swap the cell yourself with a few screws and a replacement part, extending the useful life of a $299 piece of hardware potentially by another half-decade. This should be a checkbox feature for the entire industry, but it isn’t, so credit where it’s due. Sonos took the complex (read: more expensive) engineering path here, and the world is better for it.

The one thing missing from the box is the wall adapter. You get the wireless base and a cable, but if you don’t already own a USB-C PD brick rated at 18W or 45W, you’ll have to fork extra cash for it. Sonos frames this as a sustainability decision, just like Apple and Samsung, which means fewer bricks ending up in landfills, since most of us already have one lying around.

That argument is at least partially honest, but on a $299 product, it still feels like a pinch. If your customer is paying premium money for a premium speaker, just throw in a brick, will ya? That’s the one piece of friction in an otherwise unnaturally well-thought-out package.

Score: 10/10

Should you pick up the Sonos Play?

The Play is the most coherent answer Sonos has had to “which one should I buy?” in years. If you want a speaker that lives in the kitchen on weekdays, follows you to the patio on Saturday, and comes camping with you on Sunday, this is the one. The acoustic step-up is significant for its class, especially if you are confused between the Era 100 and the Roam.

The Play is for the hybrid user: someone who wants Sonos’s seamless ecosystem at home but doesn’t want to own a separate, cheap Bluetooth speaker for outdoor use. If you’ve ever found yourself with two speakers in two different ecosystems and wished one device could do both jobs without compromise, the Play is the one to pick.

It’s a thumping comeback for Sonos. The hardware is excellent. The software is mostly recovered. The price is fair for what you’re getting. This is the kind of device you ship to win customers after a fiasco. Whether one good product is enough to repair the trust is a longer question, but as a piece of hardware in 2025, the Play deserves all the applause (and easy recommendation).

Why not try

If the Sonos Play doesn’t quite fit the bill for you, there’s a healthy bench of options you can consider:

Bose SoundLink Plus: The closest competitor to the Play. Priced at $269, it delivers a warmer sound profile and the genuinely useful trick of floating in water if you drop it in the pool. What you give up is the Sonos ecosystem. No Wi-Fi multi-room, no app-based streaming integration, and no whole-house grouping. If you’ve never owned a Sonos and never plan to, the Bose is the simpler choice without sacrificing audio quality.

Sonos Move 2: It’s the bigger sibling for buyers who need a primary-room speaker that occasionally travels rather than the other way around. At $499, it’s significantly pricier, but the extra cabinet volume translates into genuinely deeper bass and substantially higher peak loudness. If you regularly host backyard parties or you want a single speaker capable of filling a large living room, the Move 2 earns its weight.

JBL Charge 6: The budget-conscious pick at $170, though the sticker price is $200. It’s rugged, loud, and ships with its own power bank trick. You’re giving up the soundstage, the Wi-Fi, the multi-room, and the smart-home integration. But if good ‘ol Bluetooth is all you need, it’s a hard speaker to argue against on pure value.

UE Everboom: This one typically goes for $179.99 and leans heavily into a punchy sound output. The audio fidelity isn’t in the same league as the Play, but the design and durability are excellent for the money. If the Play is the grown-up choice, the Everboom is the fun one. Both have their place, but the Boom app is loaded with features that are tailor-made for outdoor parties.

How we tested

For a spell of three weeks, the Sonos Play speaker had a place atop my kitchen counter and my workstation. I used it standalone and in a stereo pair, as well. Over the course of testing, it was pushed at movies, music streaming (Apple Music, Amazon Music, and Spotify), live TV, and podcasts. It was connected to a 500Mbps Wi-Fi connection and linked to an iPhone 17 Pro.

I also traveled with the Sonos Play speaker, using it as a portable speaker in the car, camping sites, and exclusively as a Bluetooth speaker in a large hall that also served as my vacation work spot. I used a generic 50W power brick to charge the speaker and a generic USB Type-C cable to use the speaker as a power bank to charge my phone.

For comparison, I tested it against rival speakers in a closed room with minimal acoustic interference, playing the same tracks via Apple Music.

Audio-Technica has owned a large chunk of the entry-level phono cartridge conversation for years, and the reason is not complicated: its VM95 Series cartridges are affordable, easy to mount, widely supported, and found on a lot of turntables that people can actually afford.

Alongside Ortofon, the Japanese cartridge maker has become one of the default installs on tables below $450, where every dollar matters and cartridge upgrades need to be simple, reliable, and sonically worthwhile.

Now Audio-Technica is expanding that formula with the AT-VM95EBK Dual Moving Magnet Cartridge and AT-VM95EBK/H Headshell/Cartridge Combo Kit, two new black-finished versions built around the same VM95 Series platform.

The cartridge uses a 0.3 x 0.7 mil elliptical stylus, delivers 4.0 mV output, fits standard half-inch mount turntables, and remains compatible with all six interchangeable AT-VMN95 replacement styli.

The cartridge sells for $74, while the pre-mounted headshell combo kit comes in at $109, making this less of a reinvention and more of a smart cleanup job for one of vinyl’s most practical upgrade paths.

Why the VM95 Series Matters

The VM95 Series is one of the reasons Audio-Technica has become such a force in affordable vinyl playback. The concept is simple but effective: one cartridge body, multiple stylus options, broad turntable compatibility, and pricing that does not require a financial intervention from the rest of the household — think about all of the records one can buy that they will never know about if they think you showed some fiscal restraint and stayed below $300.

At the core of the VM95 platform is Audio-Technica’s Vertical Dual Magnet design, which mirrors the 90-degree V-shaped configuration of the cutter head used to create the original vinyl master. Audio-Technica says this helps the cartridge deliver accurate tracking, strong channel separation, a more defined stereo image, and clarity across the frequency range. 

The bigger selling point for real-world users is flexibility. Every VM95 cartridge uses the same body design, which means owners can upgrade or replace the stylus without replacing the entire cartridge. The series supports multiple stylus profiles, including conical, elliptical, nude elliptical, Microlinear, Shibata, and 78 RPM conical options. That gives listeners a clear path from an entry-level setup to something more refined without starting over. 

Installation is also part of the appeal. All AT-VM95 cartridges fit standard 1/2-inch mount headshells, and the threaded cartridge body allows mounting with two screws and no tiny nuts to drop into the carpet, where they immediately join the witness protection program. 

That matters because the VM95 Series is aimed squarely at the part of the market where most vinyl listeners actually live: affordable turntables, modest systems, and users who want better tracking and detail without turning a cartridge upgrade into a weekend engineering project. The new AT-VM95EBK and AT-VM95EBK/H do not change the formula. They make one of Audio-Technica’s most practical cartridge platforms look cleaner in black while keeping the upgrade path intact.

Want More? The AT33x Series Is the Next Step Up

For listeners who want to move beyond the VM95 Series, Audio-Technica’s AT33x Series is the next serious step. Unlike the affordable VM95 moving magnet platform, the AT33x models are moving coil cartridges, handcrafted in Japan and aimed at listeners with better tonearms, more capable phono stages, and records clean enough to tell the truth.

The lineup includes three stereo models — AT33xEN, AT33xMLD, and AT33xMLB — plus two mono versions, the AT33xMONO/I and AT33xMONO/II. Prices start at $449 for the mono models and $699 for the stereo versions, topping out at $899 for the AT33xMLB. The range adds more advanced materials, including a die-cast zinc base, hybrid body construction, refined suspension, PCOCC copper coil wiring, and upgraded cantilever/stylus options.

This is where Audio-Technica starts asking more from your system, your setup skills, and your phono stage. Cheap turntable with a built-in phono preamp? Wrong neighborhood. Better deck, proper MC gain, and a little patience? This is where this type of upgrade would make sense. Just don’t tell the family.

The Bottom Line

The Audio-Technica AT-VM95EBK is not a radical new cartridge platform, and that is the point. It brings the proven VM95 Series formula into a cleaner black finish with easy installation, an elliptical stylus, interchangeable stylus upgrades, and strong entry level performance for under $100. The AT-VM95EBK/H combo kit makes even more sense for listeners who want a premounted, ready to install option without turning a simple cartridge upgrade into a lost weekend.

For affordable turntables, this is exactly where Audio-Technica continues to win: practical, upgradeable, widely compatible, and priced for people who still need money left over for records.

Where to buy:

Related Reading:

Both privilege escalation vulnerabilities stem from bugs in the kernel’s handling of page caches stored in memory, allowing untrusted users to modify them. They target caches in networking and memory-fragment handling components. Specifically, CVE-2026-43284 attacks the esp4 and esp6 () processes, and CVE-2026-43500 zeroes in on rxrpc. Last week’s CopyFail exploited faulty page caching in the authencesn AEAD template process, which is used for IPsec extended sequence numbers. A 2022 vulnerability named Dirty Pipe also stemmed from flaws that allow attackers to overwrite page caches.

Researchers from security firm Automox wrote:

Dirty Frag belongs to the same bug family as Dirty Pipe and Copy Fail, but it targets the frag member of the kernel’s struct sk_buff rather than pipe_buffer. The exploit uses splice() to plant a reference to a read-only page-cache page (for example, /etc/passwd or /usr/bin/su) into the frag slot of a sender-side skb. Receiver-side kernel code then performs in-place cryptographic operations on that frag, modifying the page cache in RAM. Every subsequent read of the file sees the corrupted version, even though the attacker only ever had read access.

CVE-2026-43284 is found in the esp_input() process on the IPsec ESP receive path. When an skb object is non-linear but lacks a frag list, the code skips skb_cow_data() and decrypts AEAD in place on the planted frag. From there, an attacker can control the file offset and the 4-byte value of each store.

CVE-2026-43500, meanwhile, resides in rxkad_verify_packet_1(). The process decrypts RxRPC payloads using a single-block process. Splice-pinned pages become both a source and destination. That, paired with the decryption key being freely extracted using the add_key (rxrpc), allows an attacker to rewrite contents in memory.

Either exploit used separately is unreliable. Some Ubuntu configurations use AppArmor to prevent untrusted users from creating namespace contents. That, in turn, neutralizes the ESP technique. Most other distributions by default don’t run rxrpc.ko, which neutralizes the RxRPC arm. When chained together, however, the two exploits allow attackers to obtain root on every major distribution Kim tested. Once the exploits run, attackers can use SSH access, web-shell execution, container escapes, or compromise low-privilege accounts.

“Dirty Frag is notable because it introduces multiple kernel attack paths involving rxrpc and esp/xfrm networking components to improve exploitation reliability,” Microsoft researchers wrote. “Rather than relying on narrow timing windows or unstable corruption conditions often associated with Linux local privilege escalation exploits, Dirty Frag appears designed to increase consistency across vulnerable environments.”

Researchers at Google-owned Wiz said exploits will be less likely to break out of hardened containerized environments such as Kubernets with default security settings in place. “However, the risk remains significant for virtual machines or less restricted environments.”

The best response for anyone using Linux is to install patches immediately. While fixes likely require a reboot, protection from a threat as severe as Dirty Frag outweighs the cost of disruptions. Anyone who can’t install immediately should follow the mitigation steps laid out in the posts linked above. Additional guidance can be found here.

On the lower west side of Manhattan Island, in the Chelsea district, there is an unassuming, concrete-looking townhouse whose previous owners include Lady Gaga and basketball player Kevin Durant. If you ever get the opportunity to saunter through its doors, you’re stepping into a tower of sound.

That’s because the House of Sound, operated by Bose after its acquisition of the Sonus Faber brand, is an ode to audiophile and luxury tastes.

Through six floors of the townhouse, there’s a cadre of McIntosh and Sonus Faber kit, with each room designed to give a taste of what it’d be like to have this hi-fi equipment in your home. As the House of Sound website puts it, it’s a “destination where audio, art, and design intersect to create a truly immersive experience”.

And for once, the hype is well met.

A tower of sound

Not to be confused with BBC’s KeyStage learning exercises, or the music studio in the north of England, Bose’s House of Sound is designed to demonstrate what “a luxury audio experience can really be in your home”. If you have deep enough pockets, of course.

It wants to promote the idea that audio can be considered in the same aspirational league as travel, watches, cars, and haute couture fashion. And that it can be a form of creativity as well, whether that’s through the form it takes – the materials and aesthetic that goes into Sonus Faber and McIntosh products – or how it brings other creative works to life, whether that’s through two-channel stereo or a private cinema install (that Questlove from The Roots rents for the Oscars). It’s the Met Gala for sound systems.

It’s a place that desires to be the apex of what hi-fi can be – without limitation. It’s not so much a consumable thing that, while enjoyable as an experience, is in ways designed to be disposable. Without trying to sound like an advertisement, you go to its listening rooms to luxuriate in high-fidelity sound, or as it was put to us on the tour, to connect “yourself and your own emotions and the people around you”. Lofty, but why not reach for the stars?

I’ve been to hi-fi demo spaces before, such as KJ West One, which is literally wall-to-wall of high-end hi-fi equipment, or ventured to hi-fi shows such as High End. But the House of Sound obviously feels different from either of those two because it takes place in an actual home space.

If you need to be convinced of parting with money into the six or seven figures, it certainly helps having an idea of how it would look in your own well-appointed home. It all helps to add to the sense of immersion because the space you’re listening in is a familiar-ish one.

Hi-fi with no limits

Of course, this would be rather moot if the products didn’t sound great. I’ve limited experience with Sonus Faber products, having tested the Omnia all-in-one system several years ago, but Sonus Faber doesn’t really deal with products that tend to be easily shippable.

I’ve heard Amati Supreme hi-fi loudspeakers at events such as 2025’s Paris AV Show, and thought they sounded “phenomenal”. This time I got to hear the Suprema, which is essentially Sonus Faber’s no-holds-barred loudspeaker.

And they sounded phenomenal. They’re a bit on the crisp side of neutral, so at times can sound a little thin to my ears, but they generate huge levels of transparency, insight and naturalism, as well as power and energy in a stereo image that’s wide and deep, with minimal, if any, distortion.

We got to play a selection of tracks*, to just sit there and listen to the speakers. Some people didn’t want to leave.

*(If you want to know my choices, they were Slipknot’s Duality and Illit’s K-pop Magnetic in an attempt to try and ‘break’ the speakers. I failed.)

My own private cinema

We then descended to the ground floor (first floor for any Americans reading) and had the opportunity to listen to the private home cinema install.

Past a large, nondescript door that doesn’t hint at the excitement that awaits, is a reference standard private home cinema with a sound system that will blow your Sonos Arc Ultra surround system away.

Dotted around the room is a 29-channel system that includes Sonus Faber Arena 20 in-wall speakers, Arena 10 in-ceiling modules, and Arena 30 speakers behind the screen in a left, centre, right configuration with a dual-tweeter design similar to the Amati Supreme for clearer dialogue. In total, there are 16 (sixteen!) subwoofers.

It’s powered by 19 McIntosh amplifiers that, apparently, provide a whopping 22,400W of total power to the system. All amps have a THD of less than 0.005% for absolutely minimal distortion, and the amps power on in a trigger sequence to avoid a massive on-rush of current when you’ve got 20,000+ watts waiting to be released.

An interesting little titbit was the reveal that in films, there’s generally only 8-9 minutes of true LFE (Low Frequency Effects) in a typical two-hour film. 12 of the sixteen subwoofers are then repurposed with the other channels, with the front left/right receiving a dedicated cluster of subs, and the sides, rears, and even the ceiling arrays partnered with a sub.

The result of this configuration was full-range sound from infrasonic to beyond audible high frequency, allowing for precise placement of bass in an area of the room rather than just shaking the entire floor.

This private cinema is placed on the first floor under the kitchen, and apparently, you can feel the rumble in the kitchen even if you can’t hear what’s playing. That’s the power unleashed by this cinema.

Kaleidescape is the source for films, with an Apple TV nearby for sports and streaming, plus a PS5 for gaming.

And we were treated to Top Gun: Maverick, which has become a staple of Dolby Atmos demos (everyone from Sonos, Yamaha and Focal uses it, moving on from Mad Max: Fury Road being).

It is probably (memory aside), the best I’ve heard the film since watching it in Dolby Cinema at the West End Odeon (the better of the Odeon Leicester Square cinemas). It sounded immense, the nuance of the smaller details that might be lost in a home cinema set-up are rendered crystal clear. The system has even been given the thumbs up by the Oscar-winning sound mixer of Maverick, who watched the film there at an event.

The best home cinema systems can put you in an immersive bubble, whether it’s object-based or channel-based. The private cinema in this townhouse is an experience where you feel it too… and you don’t have to bother with people talking or a crisp packet rustling in the darkness, as it did when I watched The Drama a few weeks ago and annoyed another patron in the cinema.

Head out on the highway

So I’ve written about hi-fi and home cinema. Why not cars too?

On the same first floor as the private cinema is a Lamborghini tucked away in the corner. Inside is a Sonus Faber sound system that’s been tuned for the (tight) interior environment. I’ve written in the past how, for many people, a car might be the best way to listen to music, and it’s the same case for this Lamborghini system.

The system itself is not as numerous in speakers or has quite as fancy custom technology as the Bowers & Wilkins kit in the Polestar 3, but the sense of immersion convinces me that cars make for a pretty excellent hi-fi room. The low end produced, despite there being no dedicated sub (if memory serves), brought genuine bass to the proceedings, but the best thing about the whole experience is how balanced it all sounded.

I’m still unnerved by my own anxiety that bass would distract during a car trip, but then wouldn’t the roar of the engine distract too? Perhaps they’d cancel each other out.

Luxury, aspirational sound

It was a great few hours at the House of Sound alongside seeing Bose’s Lifestyle Collection, products which aim for premium but for a mainstream audience. The House of Sound shows the potential for hi-fi to move into more luxurious realms (if it hasn’t already).

Of course, this is not an area that I or most people who happen across this article would ever find themselves inhabiting. The Aida sound system, along with all the McIntosh equipment in the room, is an easy seven-figure cost. These are sound systems that would exist in people’s dreams.

But for a few hours in Bose’s House of Sound, those dreams can become reality.

Nvidia’s real AI moat isn’t “a piece of hardware,” writes Wired’s Sheon Han. It’s CUDA: a mature, deeply optimized software ecosystem that keeps machine-learning workloads tied to Nvidia GPUs. An anonymous reader quotes a report from Wired: What sounds like a chemical compound banned by the FDA may be the one true moat in AI. CUDA technically stands for Compute Unified Device Architecture, but much like laser or scuba, no one bothers to expand the acronym; we just say “KOO-duh.” So what is this all-important treasure good for? If forced to give a one-word answer: parallelization. Here’s a simple example. Let’s say we task a machine with filling out a 9×9 multiplication table. Using a computer with a single core, all 81 operations are executed dutifully one by one. But a GPU with nine cores can assign tasks so that each core takes a different column — one from 1×1 to 1×9, another from 2×1 to 2×9, and so on — for a ninefold speed gain. Modern GPUs can be even cleverer. For example, if programmed to recognize commutativity — 7×9 = 9×7 — they can avoid duplicate work, reducing 81 operations to 45, nearly halving the workload. When a single training run costs a hundred million dollars, every optimization counts.

Nvidia’s GPUs were originally built to render graphics for video games. In the early 2000s, a Stanford PhD student named Ian Buck, who first got into GPUs as a gamer, realized their architecture could be repurposed for general high-performance computing. He created a programming language called Brook, was hired by Nvidia, and, with John Nickolls, led the development of CUDA. If AI ushers in the age of a permanent white-collar underclass and autonomous weapons, just know that it would all be because someone somewhere playing Doom thought a demon’s scrotum should jiggle at 60 frames per second. CUDA is not a programming language in itself but a “platform.” I use that weasel word because, not unlike how The New York Times is a newspaper that’s also a gaming company, CUDA has, over the years, become a nested bundle of software libraries for AI. Each function shaves nanoseconds off single mathematical operations — added up, they make GPUs, in industry parlance, go brrr.

A modern graphics card is not just a circuit board crammed with chips and memory and fans. It’s an elaborate confection of cache hierarchies and specialized units called “tensor cores” and “streaming multiprocessors.” In that sense, what chip companies sell is like a professional kitchen, and more cores are akin to more grilling stations. But even a kitchen with 30 grilling stations won’t run any faster without a capable head chef deftly assigning tasks — as CUDA does for GPU cores. To extend the metaphor, hand-tuned CUDA libraries optimized for one matrix operation are the equivalent of kitchen tools designed for a single job and nothing more — a cherry pitter, a shrimp deveiner — which are indulgences for home cooks but not if you have 10,000 shrimp guts to yank out. Which brings us back to DeepSeek. Its engineers went below this already deep layer of abstraction to work directly in PTX, a kind of assembly language for Nvidia GPUs. Let’s say the task is peeling garlic. An unoptimized GPU would go: “Peel the skin with your fingernails.” CUDA can instruct: “Smash the clove with the flat of a knife.” PTX lets you dictate every sub-instruction: “Lift the blade 2.35 inches above the cutting board, make it parallel to the clove’s equator, and strike downward with your palm at a force of 36.2 newtons.” “You can begin to see why CUDA is so valuable to Nvidia — and so hard for anyone else to touch,” writes Han. “Tuning GPU performance is a gnarly problem. You can’t just conscript some tender-footed undergrad on Market Street, hand them a Claude Max plan, and expect them to hack GPU kernels. Writing at this level is a grindsome enterprise — unless you’re a cracker-jack programmer at DeepSeek…”

Han goes on to argue that rivals like AMD and Intel offer competitive specs on paper, but their software stacks have struggled with bugs, compatibility issues, and weak adoption. As a result, Nvidia has built an Apple-like moat around AI computing, leaving the industry dependent on its expensive hardware.