If you’re looking for somewhere soft to land at the end of each day, a Tempur-Pedic mattress is a safe bet. Tempur-Pedic is known for its super-soft memory foam mattresses, and has a huge range of products for you to end your day on. I’ve slept on everything from a Tempur-Pedic mattress to sheet sets and even pillows from the brand—truly, if there’s new bedding you need, particularly anything with a soft, sinking sensation to cradle you as you sleep, you can find it from Tempur-Pedic.

You can get the ultra-soft goods for a little cheaper thanks to WIRED’s Tempur-Pedic coupon codes, no matter what kind of super-soft bedding you’re hoping to find with Tempur-Pedic’s famous feel. Explore our Tempur-Pedic discount codes to get deals on mattresses, toppers, pillows, and more.

Save With the Tempur-Pedic Sale

Shopping the Tempur-Pedic sale is one of the best ways to score huge discounts on usually pricey buy-it-for-life items like mattresses. Tempur-Pedic offers and discounts rotate (but usually hover around 30% off), but I’d recommend checking back often to see what new items are on sale and what new seasonal discounts have sprung up. Some of the best Tempur-Pedic discounts we’ve seen are huge price reductions on pillow bundles, buy two and save 30% on sheet sets, and 25% off pillows and bedding.

Get a 30% Tempur-Pedic Promo Code When You Sign Up

This isn’t the “forward this email or be cursed” email chain you got as a kid. Sign up for Tempur-Pedic’s email updates, and get a solid 30% off discount on pillows and sheets. Plus, you’ll be the first to know about new launches, sales, and everything Tempur-Pedic is up to in the sleep realm. Why wait on savings and better sleep?

Save $300 and up to 50% Off With Today’s Tempur-Pedic Coupons

If you’re looking to stay cool and comfortable, Tempur-Pedic has got your back (literally). Right now, you get $300 off when you bundle a (qualifying) mattress with Tempur-Ergo power bases and ProSmart bases. Just as breezy as they sound, each of these mattress lines really emphasize cooling and aim to dial down the temperature—and from my prior testing experience, they are very cool to the touch. Speaking ofl, you can also get 50% off a TEMPUR-ProAir Sheet Set, which features a moisture-wicking design to keep you cool and comfortable while you sleep. On top of that, be sure to take advantage of more bedding deals, like 25% off pillows and bedding, pillow bundles starting at 2 for $69, and 30% off any 2 Tempur-Pedic sheet sets.

Purchase a Tempur-Pedic Mattress Set, Get $300 Off Bases

You’re one of those “all in” kind of people when it comes to big decisions—respect. Game recognizes game, and Tempur-Pedic’s giving you a deal that’s hard to pass up. When you get a select Tempur-Pedic mattress and a Tempur-Ergo adjustable power base, you can get $300 off the base. Plus, you can get 25% off select bedding and pillows to really go for the full package.

Enjoy $39 Off Bundle Discounts on Tempur-Pedic Pillows

Tempur-Pedic doesn’t just create high-quality mattresses that exemplify awesome pressure relief and spine alignment. It also has a variety of pillows to carry out this mission, because there’s no lack of support happening on their watch. You can bundle pillows and get a nice discount while you’re at it: Get two Tempur-Cloud Pillows for $119; two dual-sided Tempur-Symphony Pillows for $169, two Tempur-Cloud Dual Cooling Pillows for $259; or two Tempur-Neck Pillows for $179 and save $39. When one pillow already has a higher price tag, this is a really good deal to double up on.

Get Two Tempur-Pedic Sheet Sets and Save 30%

A nice pair of sheets can really make or break your sleep experience. Plus, you’ll need a few pairs depending on the season: something cooling like the ProAir for summer, rayon bamboo if you want a silky feel, or cotton flannel for a cozier vibe. You’ll want to invest in a few pairs for every season (not to mention for extra clean ones if you want to avoid laundry). When you buy 2 Tempur-Pedic sheet sets, you’ll save 30%.

Tempur-Pedic

Tempur-Adapt Mattress Topper

The Big Bang Theory‘s Bernadette as a demon is something I didn’t think I’d ever see in Stuart Fails to Save the Universe — but, now that I have, it somehow makes complete sense.

Last week’s episode saw us meet her in a wizarding world but, in this week’s entry we’re swapping the magical action for something a little more One Flew Over the Cuckoo’s Nest-coded.

Amazon, on the other hand, is fighting the measure to stop use of contractors for last-mile delivery.

Every day seems to brings fresh news of an AI agent going “rogue.” Whether that’s compromising Hugging Face, hacking a gym website, or creating its own fake profiles to socially engineer an intrusion, AI models are increasingly behaving like bad actors.

So, the AI labs that make the models doing the hacking are expanding their cyber protection offerings. This week, OpenAI announced an expansion of Daybreak, its cyber defense service which it launched earlier this year, not long after Anthropic released its cyber-focused model Mythos.

Daybreak is a service that bundles access to models, tools and workflows for defenders. The expansion includes access to a brand new cyber-focused model designed for defensive work.

OpenAI said Monday that Daybreak would now consist of two tiers: Blue and Red. Both of these tiers will allow approved customers access to OpenAI’s limited-access frontier cyber models. Frontier models — the most advanced available — have been a subject of controversy. The Trump administration previously sought to collaborate with AI companies on the roll out of such models, purportedly over safety concerns. Previously, OpenAI deployed significant guardrails to using these models, limiting what customers could do with them.

Blue, which appears to be the more basic of the two, offers a variety of cyber services, including incident response, malware analysis, and patch validation. OpenAI calls Blue its “recommended starting point for most defenders,” implying that it should be more than enough for most enterprises.

Red, on the other hand, offers a broader and potentially more dangerous toolkit. The company grants its users “purpose-trained cybersecurity models,” designed to carry out security testing and vulnerability research.

With Red also comes the new model, GPT‑5.6‑Cyber, which is only available at that tier. 5.6-Cyber is built off of GPT‑5.6 Sol, and offers enhanced capabilities for certain specialized cybersecurity tasks, the company said.

At the moment, GPT‑5.6‑Cyber is only being made available for “trusted customer partners,” including reportedly Accenture, IBM, Crowdstrike, Cloudflare, and others.

While the threats from AI agents are rapidly increasing, critics have also pointed out that they function as marketing opportunities for the AI labs. OpenAI is certainly marketing its upgraded Daybreak that way.

“The cybersecurity world is rapidly changing—threat actors will increasingly use AI to conduct cyberattacks at unprecedented speed and scale, including in fully autonomous ways,” the company said in a blog post. “As these capabilities spread, defenders have a narrowing window to prepare.” 

At the same time, enterprises remain interested in buying their protection from the AI labs who know the security risks best, because they know them first-hand.

North Korean government snoops are operating LLMs locally and collecting technology to weave AI into their attack operations, according to South Korean security firm Genians.

The researchers said they observed Kimsuky setting up and operating local LLM environments using Ollama, GPT4All, and Msty, experimenting with other AI tools such as Cursor, and using retrieval-augmented generation (RAG) for local document searches. This prevents the data from getting sucked into the cloud where enemies might see it and try to stop it.

Kimsuky, a cyber-espionage crew that operates under North Korea’s Reconnaissance General Bureau, has for years used phishing and decoy documents in attacks targeting government agencies, think tanks, academia and security research organizations. 

Genians’ findings “provide concrete evidence that the Kimsuky-affiliated threat actor is moving beyond one-off experimentation with AI and is continuously preparing to integrate the technology into actual attack capabilities, including malware development, data analysis, and the advancement of attack techniques,” the researchers said in a Monday report.

The North Korean group’s recent phishing emails use ZIP archives containing malicious LNK files – Kimsuky typically disguises these as materials related to international events, research reports, or meeting requests. When the recipient opens the archive and executes the LNK file contained within it, the shortcut runs an embedded PowerShell loader.

In some cases, the goon squad used AI to create lures related to virtual assets and finance, we’re told. These decoy documents “use natural language, a highly polished structure, and formats similar to actual business materials to increase user trust and induce the execution of malicious files,” the security analysts noted.

Additionally, the Pyongyang spies use various obfuscation techniques, including Base64 encoding, string splitting, and custom decoding routines, to hide the files’ malicious behavior.

The PowerShell script collects a ton of system information, including operating system version and architecture, system configuration, PC type, operating system installation and boot history, and a list of running processes. The attackers use this information to assess the infected environment and support follow-on attacks.

As with earlier Kimsuky campaigns, these intrusions use Git repositories for command-and-control (C2) infrastructure.

“During the analysis, Genians Security Center identified multiple public GitHub repositories operated by the threat actor,” the researchers wrote. “One repository contained not only configuration files and PowerShell scripts, but also various payloads used in subsequent attacks.”

Additionally, the months-long investigation uncovered the spies also using the Git-based C2 infrastructure for malware development and testing, stolen data management, and AI technology research.

This included setting up multiple local LLM environments using Ollama, GPT4All, and Msty on infrastructure it controlled. “Because the local approach prevents conversation data from being transmitted to external AI services, it reduces the risk of external exposure, making it a particularly attractive option for a state-sponsored threat actor,” Genians said.

The miscreants also collected a “large number” of libraries, such as LLaMaSharp and Microsoft.Extensions.AI, plus packages including OpenAI and Azure.AI.OpenAI, which call and integrate commercial AI services into their own custom applications.

“The fact that development components spanning ‘local AI execution → document retrieval (RAG) → automated agents → external AI integration’ were collected together strongly suggests that they were not gathered out of simple curiosity, but for the direct development of an AI-based tool designed for a specific purpose,” according to the threat hunters.

Genians uncovered logs containing speech-to-text tools, such as OpenAI’s Whisper speech recognition models, and evidence that the spies used Cursor AI to edit code and tested RAG for document-based question answering. Using RAG on stolen files can help attackers more quickly and automatically identify valuable information within large volumes of data.

While the researchers noted that they did not identify any evidence that the Norks have begun training their own models – but rather remain focused on applying AI to malware development and attack operations – the findings make a strong case for defenders needing to shift away from content-based assessment to behavior-based detection.

Assessing threats based on the quality of fake documents, such as unnatural translated language, poor formatting, and spelling errors, is no longer effective because AI is really good at producing convincing decoys.

In addition to using indicators of compromise (IoC) to detect attackers in their environments, organizations should look for anomalous behaviors following LNK execution – such as PowerShell execution, persistence establishment, and external communications – to hunt for threats.®