Meta is developing an AI-powered pendant that it plans to start testing within the next year, according to an internal memo viewed by The Information. The device builds on the Limitless acquisition Meta completed at the end of 2025. Limitless made a pendant that users could clip to their shirt or wear as a necklace to record and transcribe conversations.

The memo also outlines plans to expand Meta’s AI glasses lineup and launch a business subscription called Wearables for Work. The enterprise tier would position Meta’s hardware as a productivity tool rather than a consumer novelty. Reality Labs, Meta’s hardware division, lost $4 billion in Q1 2026 alone.

The AI pendant category has a troubled history. Humane’s AI Pin launched in 2024 to withering reviews and was effectively dead within a year, with HP acquiring the startup’s assets for $116 million. Friend, another AI pendant startup, spent more than $1 million on subway advertisements and struggled to find users. Neither device offered enough utility to justify wearing an additional gadget.

Meta’s approach is different in one important respect. It already has a wearables business that works. Meta sold more than seven million Ray-Ban smart glasses in 2025 and commands roughly 82% of the smart glasses market. The pendant would be a second form factor in an ecosystem that has proven consumer demand, not a standalone product betting on a category that does not yet exist.

Limitless raised more than $33 million from investors including Sam Altman and Andreessen Horowitz before Meta acquired it. CEO Dan Siroker said at the time that Meta’s vision for “personal superintelligence” through wearables aligned with what Limitless was building. The startup stopped selling devices to new customers after the acquisition but continued supporting existing users.

The Wearables for Work subscription is the most commercially interesting detail in the memo. Meta’s glasses already integrate with Meta AI for voice queries, real-time translation, and visual identification. An enterprise tier could add meeting transcription, ambient note-taking, CRM integration, and hands-free access to workplace tools. The concept mirrors Microsoft’s Copilot subscription model but delivered through hardware rather than software.

The wearables market is fragmenting into distinct categories. Apple Watch dominates the smartwatch segment but is losing momentum to screenless health trackers. Oura has filed for IPO. Whoop and Google’s Fitbit Air emphasise passive data collection. Meta’s pendant would sit in a fourth category: ambient AI capture, the always-on recording device that supplements rather than replaces a phone.

The privacy implications are significant. Meta’s Ray-Ban glasses have already faced lawsuits and regulatory scrutiny over how they handle footage captured by their built-in cameras. A pendant that records conversations raises the same concerns in a more intimate form factor. The regulatory environment in the EU, where Meta faces ongoing DMA enforcement and GDPR scrutiny, could constrain where the device is sold.

Meta’s hardware strategy is now spread across glasses, pendants, a planned smartwatch codenamed Malibu 2, VR headsets, and the Vision Pro competitor. The company is betting that AI wearables will reverse Reality Labs’ cumulative losses, which have exceeded $60 billion since the division was created. The pendant is one piece of that bet. Whether it succeeds where Humane and Friend failed depends on whether Meta can make ambient AI recording useful enough that people will wear it, and trustworthy enough that the people around them will tolerate it.

The LG B6 is the entry-level OLED TV in LG’s 2026 TV lineup. While it provides a brightness boost over its predecessor, the LG B5, which I rated as one of 2025’s best TVs, the LG B6 doesn’t deliver the full and clear upgrade I was hoping for.

The LG B6 has a full suite of features and still delivers great performance, but as long as the LG B5 remains in stock and is less expensive, the new model is held back from being an unqualified pick by a few issues.

The global AI boom has exposed how unprepared we really are for such rapid data center expansion, and we’ve already reached the point where construction is struggling to keep pace with the continued rate of innovation.

Nowhere is this more evident than across the US, where hyperscalers and cloud providers are racing to build out new data center campuses capable of supporting the next wave of agentic AI workloads. This is, of course, as companies continue to push the boundaries with next-gen frontier models, with both electrical supply and cooling infrastructure in hot demand.

Go from 4K resolution for Crimson Desert to 680Hz for Counter-Strike 2.

Rust is the kind of survival game where choosing the right server matters almost as much as choosing the right weapon. This also reflects on the platform of your choice. If you’re you’re friends are spread across PC, PlayStation, and Xbox, you’ll want to know exactly who can play together before anyone starts building a base.

The answer to the question is simple in one way and annoying in another. Rust supports crossplay between PlayStation and Xbox players, but PC players cannot play with console players. So yes, there is cross-platform support, but only inside the console version of the game.

And because Rust on PC and Rust Console Edition are not treated as one shared version across every platform. They are separate enough in updates, content, performance, and server structure that you can’t just jump from PC into a console lobby.

Can you play Rust cross-platform?

Rust is cross-platform on consoles, but not between consoles and PC. Rust Console Edition players on PlayStation or Xbox can play with other console players. This includes both the PlayStation and Xbox ecosystems, though the console version has been changing as Double Eleven moves toward native PS5 and Xbox Series X/Series S support.

On the other hand, PC players are kept separate. Rust players on PC are playing exclusively in the PC pool, and not with PlayStation or Xbox users. So a player on Steam cannot join his friend playing Rust Console Edition on PS5 or Xbox Series X/S.

Does Rust have cross-progression?

No, don’t expect your progress to follow you across platform families. Double Eleven has said cross-platform progress transfer is not an option in Rust Console Edition. So you should treat your paltform choice seriously. This is even more important to note before you start purchasing skins and are focusing on progressing in one ecosystem.

What about modded and community servers?

This is another reason PC remains the best version if you have the choice. PC Rust has a stronger server ecosystem, including modded servers and more custom ways to play. This is exactly what made Rust so popular, and why fans gravitated towards PC. Console players are not completely stuck with official servers, with support for community servers. These let you tinker with the rules, settings, moderation, and other aspects. But it’s still behind the modded servers on PC.

Security

And then Microsoft busted them all

A single npm user on Thursday published 14 malicious packages within a four-hour window, all mimicking popular OpenSearch, Elasticsearch, DevOps, and environment-configuration libraries, according to Microsoft.

It’s the latest in a seemingly never-ending string of supply chain attacks targeting developer tools, and stealing cloud credentials and CI/CD pipeline secrets in its wake.

Using a newly created maintainer alias, vpmdhaj (a39155771@gmail[.]com), the threat actor published 14 packages impersonating legitimate libraries from the @opensearch and @elastic ecosystems and targeting Amazon Web Services, HashiCorp Vault, GitHub Actions, and the npm registry itself. This suggests that the attacker “likely chose a developer audience to have AWS and Elastic cloud credentials in their environments,” Microsoft warned in a Thursday blog. 

All of the malicious packages include the same install-time stager and the same Bun-compiled, second-stage payload: a 195 KB credential harvester purpose-built for cloud and CI/CD environments.

Plus, as we’ve seen with all of the other open source supply chain attacks of late, after stealing tokens and other secrets, the attacker can move laterally across cloud environments, steal additional sensitive data, and push even more poisoned updates to packages owned by hijacked maintainer identities, thus expanding the attack beyond the initial 14.

All of the malicious libraries have since been removed, and Microsoft published a list of all 14 in its blog. Give that a read to help identify systems that installed or built affected package versions on or after May 28. Be sure to also rotate an AWS IAM/STS, HashiCorp Vault, npm publish, and GitHub Actions tokens that may have been exposed.

To trick users into installing these developer tools and search engines, the attacker used typosquatting – naming a package one or two letters off from the legitimate one – or lookalike naming (such as opensearch-setup-tool, opensearch-config-utility, and elastic-opensearch-helper) to impersonate well-known libraries. 

In addition to this social engineering technique, used to drive installs through users’ typing mistakes or trust, the attacker also used two other techniques to make the supply chain attack more believable.

This includes spoofing upstream metadata. “Every unscoped package sets its package.json homepage, repository, and bugs fields to the legitimate github.com/opensearch-project/opensearch-js project,” Microsoft’s threat hunters explained.

And finally, they inflated version numbers, so the phony “releases” jump straight to 1.0.7265, 1.0.9108, or 2.1.9201 to indicate a mature release history.

After tricking users into installing the npm packages – all 14 are listed in the blog, so give that a read – the credential-stealing payloads automatically execute through preinstall hooks as soon as the victim runs npm install.

For this, the attacker used one of two stagers. The Gen-1 stager uses install, preinstall, and postinstall hooks that all invoke preinstall.js, and then collects a ton of host information including hostname, platform, arch, Node version, USER/USERNAME, cwd, INIT_CWD, npm_package_name, npm_package_version. It then base64-encodes the JSON, and POSTs it to the actor’s command-and-control server, which then serves a second-stage payload, written to payload.bin in the package install directory. 

“The package’s index.js re-launches the same payload.bin on every subsequent require() of the module – a quiet persistence mechanism that survives across CI build stages and developer rebuild loops,” according to Microsoft.

The later Gen-2 stager replaces the install-time C2 roundtrip with a stealthier loader that checks whether bun is already present on the host. If not, it downloads the legitimate Bun runtime v1.3.13, and then executes the second-stage payload, which sets to work stealing credentials across  AWS, HashiCorp Vault, npm, GitHub Actions, and other CI/CD environments.®

Meta is developing an AI-powered pendant that it plans to start testing in the next year, according to a memo viewed by The Information.

This device would presumably build on the work of Limitless, an AI device startup that Meta acquired at the end of 2025. The startup made an AI pendant that users could attach to their shirt or wear as a necklace to record their conversations.  At the time, Meta said the acquisition would allow it to “accelerate our work to build AI-enabled wearables.”

Earlier AI wearables have failed to catch on with consumers — perhaps due to privacy concerns and tone-deaf marketing, or perhaps because they just weren’t that useful. But companies like OpenAI aren’t giving up.

The memo also reportedly states that the company is planning to expand its lineup of AI glasses and launch a business subscription called Wearables for Work. With all these planned devices, Meta is apparently hoping to reverse the fortunes of its hardware-focused Reality Labs division, which lost $4 billion in the first quarter of this year.

TechCrunch has reached out to Meta for comment.