Krafton has unveiled five upcoming games as part of its plans to create global gaming franchises. The company announced them during its third consecutive Krafton Media Day at Gamescom 2026 in Germany. Its new lineup includes titles from different genres, along with a new take on the PUBG franchise.

Krafton introduced five upcoming titles at gamescom 2026, covering different genres and offering new gameplay ideas.

• NO LAW (Neon Giant): Claes af Buren, CEO of Neon Giant, presented the open-world FPS RPG NO LAW. The game takes place in Port Desire, a city where law and order have collapsed. Players’ decisions can change the challenges, opportunities, and stories they encounter. Neon Giant also uses the latest Unreal technologies to give players more freedom to shape their experience.
• Project ZETA (NIRVANANA): Namseok Kim, CEO of NIRVANANA, showcased Project ZETA, its Multi-team Tactical Arena game. Unlike traditional MOBAs, the title does not use a fixed lane-based structure. Four teams, each with three players, enter objective-focused battles from the start. NIRVANANA plans to refine the game through global testing and player feedback.
• Age Twisters (Piccolo Studio): Piccolo Studio Co-founders and Directors Jordi Ministral and Alexis Corominas introduced Age Twisters. The two-player adventure follows a grandfather and granddaughter through four different stages of life. Players will see their age differences reflected through unique abilities and changing conversations. The game continues Piccolo Studio’s focus on creating experiences with an emotional connection.
• TARAE: The Unbound (Boundary): Boundary CEO Inyoung Koo presented TARAE: The Unbound, an Eastern dark fantasy action RPG. The game draws inspiration from the concepts of reincarnation and karma in Buddhist thought. East Asian mythology and aesthetics also influence its world, character classes, combat, and story. This gives the game a setting and identity beyond the Western medieval style often seen in dark fantasy games.
• PUBG: DED.NET (PUBG STUDIOS): PUBG STUDIOS Creative Director Dave Curd introduced PUBG: DED.NET as a new direction for the franchise. The game keeps the survival and competitive elements associated with PUBG: BATTLEGROUNDS but moves away from its battle royale format. It takes place in Cascadia in 1996, inspired by the Pacific Northwest during the 1990s. A roguelite structure lets player decisions influence each run and what happens next.

All five games Krafton will release will be on display at gamescom 2026 in Cologne, Germany, from August 26 to 30 at Koelnmesse, Hall 9. This showcase reflects the company’s policy of creating global franchises and accommodating the creative concepts of its developers.

The company was originally added to a list of organisations thought to be aiding China’s military in January 2025, and that status was upheld in June of this year.

Chinese chipmaker ChangXin Memory Technologies (CXMT) is suing the US Department of Defense to seek its removal from a US government blacklist.

The company was originally added to a list of organisations thought to be aiding China’s military in January 2025, and that status was upheld in June of this year.

Established in 2016 in Hefei, CXMT creates the dynamic random-access memory (DRAM) chips needed to power mobile phones, PCs, tablets, servers, and a range of consumer products and applications.

“CXMT designs, produces and sells its DRAM chips for civilian and commercial use, ​not for military use,” it reportedly said in its court filings.

US defence secretary Pete Hegseth and two of his staff are among the named co-defendants in the suit, filed last Friday (28 August) in a US district court for the District of Columbia.

“CXMT is not a military company and has no affiliation with the Chinese military,” the company said in a statement after the filing, according to Bloomberg.

“Since its initial designation in January 2025, CXMT has continuously suffered reputational and commercial harm. It is pursuing this action to protect its reputation and business interests.”

CXMT is on a list of “entities identified as Chinese military companies operating in the United States”, according to the US defence department, which are categorised as such under a ‘section 1260H’ designation.

Designated businesses are also said to be “engaged in providing commercial services, manufacturing, producing or exporting … and operate directly or indirectly” in the US. The list also features companies such as Tencent, Huawei, BYD and Alibaba.

Earlier this month, CXMT surpassed Tencent in market capitalisation to become China’s most valuable company at around $520bn.

Last week, CXMT reported first-half revenues for 2026 of around $22bn – up more than 870pc year-on-year – fuelled by the global memory crunch rooted in the AI-driven wave of demand for chips.

US curbs on semiconductor exports to China over recent years have pushed China to focus on its own chip capabilities. Earlier this year, China reportedly began restricting overseas travel for its top AI professionals in its escalating battle with the US over technological dominance.

Last week, a US judge blocked the Pentagon’s blacklisting of products made by US AI giant Anthropic being used for government purposes, ruling that its actions violated the company’s rights.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

The takeaway: Nvidia’s latest 13F reveals a $63.4 billion portfolio of US stocks, and it is very lopsided. Intel and SpaceX account for roughly 80% of it. But the filing’s most interesting detail is what didn’t happen: seven of the eight positions were untouched last quarter, but the portfolio more than tripled in value anyway.

Nvidia’s earnings this week gave the market the growth story it wanted. But a separate SEC filing gives us an additional perspective on what Nvidia is also doing with all those billions.

Form 13F is a quarterly disclosure document any institutional manager holding more than $100 million in US equities has to file. But Nvidia is a chip designer, not a hedge fund, which is precisely what makes the filing worth reviewing.

As of June 30, the company held $63.44 billion in public stock across eight positions as shown below. That’s every public US stock Nvidia owns, but that does not mean these are the only investments the company has on its books. Not even close…

* Intel stock was valued in June 30, but the stock has moved downwards since: the stake is now worth roughly $19.2 billion as of late August.

** Nvidia’s real stake in Nebius is undercounted in the 13F filing. Nvidia holds about 22.2 million Nebius shares, or 9.3% of the company (worth approximately $4.68 billion). Much of those shares are tied to a warrant that can’t be exercised until September 11, 2026. Only the common shares show up on the table above.

Six of the eight positions have a disclosed cost. Together they came to roughly $22.4 billion and were worth about $63.1 billion at the end of June – a potential paper gain of $40 billion on companies Nvidia mostly bought into because it needed them to succeed, not because it expected the trade itself to work. Three months earlier that portfolio was worth $18.4 billion.

SpaceX’s stake and everything the filing leaves out

Several reports we’ve seen of this filing describe SpaceX as a “new position.” But it’s not. It’s a newly visible one. Nvidia put $10 billion into xAI in January as part of a $20 billion round. In February, SpaceX absorbed xAI in an all-stock deal. Then when SpaceX listed on the Nasdaq in the largest IPO in history, Nvidia’s private stake became 122.76 million Class A shares of a public company, and therefore something the SEC required it to disclose.

That’s also a useful reminder that the 13F is not everything Nvidia owns. A 13F only captures US-listed equities and says nothing about private companies, which is where most of Nvidia’s money has actually gone.

Credit: App Economy Insights

The filing does not show the ~$30 billion stake in OpenAI, the investment in Anthropic, or any of the other private AI labs on the books. It also omits positions Nvidia has publicly announced in companies such as Lumentum and Marvell, along with the $2 billion warrant it wrote for Nebius – which is why Nebius appears here as a rounding error despite being a significant recipient of Nvidia capital.

Nvidia has reportedly deployed north of $100 billion into AI companies over two years. The 13F captures only a slice of that.

A portfolio or a bill of materials?

As for the picks Nvidia is making, they are all intertwined. Coherent makes the optics that move data between GPUs inside a rack. Nokia builds the network gear that moves it between buildings. Synopsys makes the EDA software Nvidia’s own engineers use to design chips. Intel is a potential second-source foundry and a CPU partner. CoreWeave and Nebius are neoclouds that exist to rent out Nvidia hardware by the hour.

Even the smallest position fits the pattern. Generate Biomedicines (0.02% of the portfolio), uses AI to design drugs. So every single holding is either a supplier Nvidia needs to move faster or a customer Nvidia needs to keep buying. That is the whole argument behind the “circular financing” complaint that’s been going around for the last year or so.

Source: Bloomberg

Meanwhile, Nvidia was ready to respond to those criticisms. CFO Colette Kress acknowledged the label directly, said Nvidia “sees it differently,” and framed the stakes as investments in once-in-a-generation companies where the downside is limited. CEO Jensen Huang was less diplomatic on CNBC. He said this is the first generation of startups that needs tens of billions of dollars before it can turn a profit, and somebody has to write those checks. However, the risk is that those companies’ rise and fall are on the same AI demand curve as Nvidia’s chip sales.

The Intel stake shows how fast that can move. Worth roughly $30 billion on June 30, it had slipped to about $19 billion weeks later after an Intel stock offering diluted it.

A blast from the not-so-distant past (July 2020):
Nvidia is now worth more than Intel

Nebius runs the same problem in reverse. The 13F lists it at $329 million, which makes it look like an afterthought. But Nvidia actually controls 9.3% of the company – most of it not yet common stock, but sit in a warrant from Nvidia’s $2 billion investment that can’t be exercised until September 11 – that investment is currently valuated at around $4.68 billion.

The generous view is that this is simply what a platform company does when the technology transition is real and its customers are capital-starved. Nvidia is buying the parts of the supply chain that would otherwise slow it down, and it is doing so at a moment when it has more cash than almost anyone in history.

The less generous view is that Nvidia has wired its balance sheet so that a slowdown in AI spending hits twice, in the same quarter, in the same direction. Chip revenue falls, and the value of the companies buying those chips falls with it.

However, both can also be true at once. What the 13F does is make the wiring visible, and there’s a lot more of it that this filing still doesn’t show.

When George Arison took over Grindr in 2022, he inherited a company that had been bounced from Chinese ownership to a forced divestiture to a private-equity rescue — a business that was printing money but also had no real product or business strategy. Four years, a SPAC listing, and a controversial return-to-office mandate later, Grindr has become convincing as a growth story. Revenue is on pace to roughly triple, from $195 million in 2022 to a guided $540 million-plus this year, with adjusted EBITDA margins holding above 40%.

That growth has come almost entirely from getting existing customers to pay more versus dramatically growing its user base. In the second quarter of this year, it had 1.4 million paying users, or 9% of its user base, but average revenue per user has risen considerably since 2022, and Arison is very focused on where the next leg of growth comes from. Part of that plan includes turning Grindr into a “gayborhood in your pocket” — a platform that handles not just dating and hookups but healthcare (from ED medication to HIV prevention to, eventually, connecting users with gay doctors) and travel (helping users find community wherever they land). It’s the same “everything app” instinct driving much of consumer tech right now.

But that’s not the only thing Arison is throwing against the wall; later this year, Grindr is rolling out a subscription that it’s betting the market will support, a far pricier “EDGE” tier that has already raised hackles from some on the internet (“literally who’s paying for this,” and “we need 2012 grindr back”).

Arison, who previously founded and ran Shift Technologies, the online used-car marketplace he also took public via a SPAC, in 2020, is also aggressively seeking out press to argue that institutional investors continue discounting Grindr’s stock simply because it’s a gay dating app. In a Zoom call with TechCrunch on Thursday, he cited an investor who once showed him a financial model with a literal “Grindr discount” line item, knocking 25% off a fair-value estimate.

Not everyone thinks the discount is justified. Morgan Stanley, Goldman Sachs, and Raymond James have all raised their price targets on the stock this year, and Morgan Stanley upgraded it to “overweight” in July, citing the EDGE tier and Grindr’s telehealth push — part of a run-up that’s seen the stock climb roughly a third over the past six months. Still, that discount isn’t Arison’s imagination — the stock trades at roughly 11 times 2027 EBITDA, about a 35% discount to peers — even if it’s not clear why.

Arison — amiable, with a hint of his native Georgia still in his voice — was game to talk about all of it in a Q&A that has been edited for clarity and length.

You came in to run Grindr in 2022 when it was pretty adrift. What was the first thing you wanted to prioritize?

Three things, really. First, company building. A lot of people had been hired during the peak-COVID era when expectations for in-office productivity were low, and average output was maybe three to four hours of real work a day. We brought people back to the office two days a week in the summer of 2023 — a decision that got a lot of press and a lot of anger. We went down to about 70 employees as a result. Today only around 25 people who were here before I arrived still work at Grindr, and we run lean: 175 U.S. employees plus a team in Colombia, doing $540 million in guided revenue this year.

Second was driving revenue growth by shipping product people would actually pay for — that’s how pay conversion went from under 6% to over 9%, and ARPU nearly doubled. Third was setting a long-term vision: the “gayborhood in your pocket” idea, and everything else — healthcare, travel — that flows from it.

You’ve said Grindr’s engineering culture is underrated. How small is the team actually running this?

About 94 or 95 people across all technical roles. A large-tech-company CEO once told me AI would let me do with far fewer people what I thought I’d need 300 to 350 for — he was right. We’re doing roughly 350 people’s worth of work with about 100. Something like 80% of our code is now AI-written, and we’ve seen a 2.5x increase in engineering productivity over the past year.

Grindr tested an AI-powered premium tier, EDGE, at a price that in Canada worked out to roughly $350–375 a month in U.S. dollars — a number that got mocked online as more expensive than just dating someone. What actually happened there?

We haven’t released EDGE — we’re testing it, and some people have access as part of that test. It sits above our existing XTRA ($23.99) and Unlimited ($44.99) tiers. We’re not selling AI itself; we’re selling features derived from it — using what we know about a user’s behavior and intent, with consent, to make much better matches than a sparse profile ever could. Retention on these features so far is higher than anything we’ve had before.

The pricing people quoted was one test point among several — we ran a range to understand elasticity, not a final price. EDGE goes live toward the end of this year or early next, and we’ll know where it lands by then. We think of it like a Tesla Model X or S: a premium flagship now, with the underlying capability rolling down to the broader product over time.

On the matching itself — you’ve described using AI to suggest partners outside someone’s home city, because gay-dating pools even in places like San Francisco are small. What evidence do you have that those long-distance matches lead anywhere?

Even in San Francisco, where the share of the gay population is higher than almost anywhere else in the country, you’re talking about maybe 50,000 to 60,000 gay people total. That’s not a big pool to be fishing in if you’re trying to find a partner, and it’s a big reason dating is so hard for gay men generally. So yes — what if AI could break down the geographic constraint entirely, and surface someone in St. Louis who actually matches what you want, based on real behavior rather than what people say in a profile?

As for whether it leads anywhere real: we don’t track people’s relationships after the fact — that’s going too far. What we do know is that Grindr is where most gay men say they meet each other for relationships, and that younger cohorts want something different than older ones did: about 50% of gay men under 35 say they want a long-term monogamous relationship, and 25% say they want children — numbers that would have been unthinkable for my own generation. When you ask people why they’re not in a relationship, the answer is usually that they have a hard time finding a partner. I can’t promise this solves that. But it’s worth trying something new, because what’s been done so far clearly hasn’t solved it.

There are so many ways to expand your addressable market beyond the dating app itself. The healthcare stuff is really interesting — can you tell us more about what you’re doing there, and whether you’re building these products yourselves or acting as the interface to outside providers?

We started with cash-pay products through a line we call Woodwork — ED medications, GLP-1s, peptides, and so on — because cash-pay was the simplest place to get going, and we just launched an AI bot that handles the whole transaction inside the app rather than sending people out to Woodwork.com. The second bucket is HIV prevention and treatment: we’ve committed to giving 10 million people direct access to information on where to get PrEP, both in the U.S., where we already offer that in our in-app health center, and internationally.

The third bucket — actual clinical care, like connecting people to a gay doctor through telehealth — is very much long-term. That’s not something we’re building today, but I do think there’s a world, a decade out, where healthcare is a bigger revenue stream for Grindr than what we do today.

Right now, though, non-subscription revenue — ads and everything else, including healthcare — is a small fraction of the business.

Subscriptions are about 83% of revenue today, down from around 86% in 2022, even though subscription revenue itself has grown enormously — that tells you how much bigger the base is overall. The newer businesses are genuinely small right now. What I want is a company that, 10 years from now, has a strong subscription business, a strong advertising business, a real healthcare business, and a real travel business alongside it. Today those last two are early.

You’ve said investors still apply what one called a “Grindr discount” to the stock because of what the company is. But the stock is up sharply over the past six months, Morgan Stanley just upgraded it, and it trades at a premium multiple to Match Group. Isn’t the market telling you the discount is gone?

I hope we’re being treated as a growth company at this point — we’ve grown revenue more than 25% for 16 straight quarters as CEO, so there’s reason to expect that. The stigma conversation is a real one; we’ve had a consulting firm decline to work with us over reputational concerns, and a bank refuse our money during the Silicon Valley Bank crisis, even as other major banks like Goldman and Morgan Stanley have been strong partners. I think a lot of that is really about Grindr being a gay dating product rather than dating being controversial per se — nobody says that about Tinder, which literally has a “free tonight” button on its homepage. But I’d agree the market’s read on us has clearly improved.

The MSI Claw 8 EX AI+ is a high-octane handheld games console that can run PC and Xbox games from a wide range of game stores. With the Intel Arc G3 Extreme chipset — featuring the Intel Arc B390 GPU and 32GB RAM — it’s easily the most powerful portable console I’ve ever (quite literally) gotten my hands on. But there’s a pretty huge catch to that performance: a price tag that would buy you two Steam Deck OLEDs or a mid-price gaming laptop.

Let’s start with the superficial stuff: the MSI Claw 8 EX AI+ looks gorgeous. Its screen is an extensive eight inches across, offers wonderfully rich colors and a silky-smooth 120Hz refresh rate. Combined with its discreet RGB lighting around the asymmetrically placed thumbsticks and Void Purple colorway, it has a unique look that definitely helps it stand out from the crowd.

I filed a request with McDonald’s earlier this month to access all of the personal data the fast food company collected about me, and I received a stunning 515-page report a few days later that detailed my app interactions in granular detail and predicted I would never stop eating there.

Under the California Consumer Privacy Act, I have the legal right to request access to information from large companies that collect personal data. So I was curious what others might have on me, and I spent the next week filing more than 100 requests.

The CCPA went into effect in 2020, and three of its key provisions are the right to opt out of the selling of personal information, the right to delete that info, and the right to request a copy for yourself.

I focused solely on the latter—access requests—to better understand what data is being collected. Most companies must list two ways for you to file. These are often via a web form, phone number, or email address, as designated in their privacy policy. After you submit a request, companies can take 45 days to complete it.

My experience placing these data access requests was incredibly time-consuming, from finding the right filing methods to verifying my identity multiple times. Most exasperating during this process were the companies that either responded to my access requests with messages concerning the deletion of information, which I explicitly said not to do, or refused to process the request through a method listed in their privacy policy.

Consumer advocates I spoke with were upset with how these requests were handled. “That’s crazy,” said Ben Winters, director of AI and privacy at the Consumer Federation of America. “That’s not an acceptable status quo.” Winters sees these examples as exhibiting the weaknesses of policy frameworks that rely on companies to act responsibly and in good faith.

In accordance with WIRED’s policies, I am disclosing that I used generative AI to draft bureaucratic emails and update my tracking spreadsheet as part of this report. I wrote the body of this article mainly by hand in my scratch notebook.

One of the first errors came from Crunchbase, known for its database about tech startups. I emailed my access request to its privacy address on August 17. My message laid out the rights I wanted to exercise and included a direct request not to erase anything: “I am not requesting deletion at this time. Please do not treat this as a deletion request.” I received a reply two days later from a Crunchbase support representative.

“Thanks so much for your patience. Your account has been permanently deleted from Crunchbase. Please let me know if you need anything else!” the message read in full.

I followed up via email almost immediately, reiterating that I wanted data access, not data deletion. “Your Crunchbase user account was deleted. Other data located on Crunchbase was not deleted,” read the follow-up support response explaining what happened. If I wanted to have a Crunchbase account, I would have to reregister.

When I reached out to Crunchbase for comment, a spokesperson blamed the mistake on a “processing error” and said that the company would proceed with my original access request as filed. The spokesperson also claimed the misclassified response came from “a person on our customer success team” and not a generative AI tool.

My interactions with BeenVerified, a searchable database that gathers public records, also encapsulate my friction-filled experience placing these access requests.

I emailed BeenVerified’s dedicated CCPA compliance address on the morning of August 19. It laid out that I was a California resident placing an access request, not a deletion request. You’ll never guess what happened next.

Public Wi-Fi is safe enough for checking the weather or reading the news. It gets risky the moment you log into your bank, your email, or anything with a saved card number. A few minutes of setup, done before you connect rather than after, closes most of that gap.

Quick Take

Here is the short version, before the full walkthrough below. Do these five things every time you use a public network, in this order.

The rest of this guide walks through each step for phones, laptops, and the situations where these tips genuinely don’t apply.

Prerequisites

Do these things at home, on your own network, before you connect to public Wi-Fi anywhere. Setting them up at the airport or coffee shop, on the same connection you’re trying to protect, defeats the purpose.

Install a VPN app on every phone and laptop you travel with. Set it up now, so you’re not comparing options over an unsecured connection later. This list of VPN apps for Android is a reasonable starting point if you haven’t picked one for that platform.

Turn on automatic updates for your phone and your laptop. Most attacks that succeed on public Wi-Fi rely on a security hole that was patched months earlier. These basic cybersecurity habits cover this alongside a few others worth setting up once, not per trip.

Finally, turn on two-factor authentication for your email, banking, and any account you’d be upset to lose. If your bank or employer offers an authentication app instead of text-message codes, use that instead. Text codes can be redirected through a hijacked phone number; an app on your own device can’t be.

Know the Real Risks First

Evil Twin Networks

An evil twin attack happens when someone sets up a fake Wi-Fi hotspot using the same name as a real one nearby. Your phone can’t tell the difference by name alone. Once you join the fake network, the attacker can show you a fake login page, or simply watch what you send.

This is why confirming the network name with staff is step one in the Quick Take above. A coffee shop’s real network has exactly one name. Two networks with nearly identical names is the warning sign.

Man-in-the-Middle Interception

This attack doesn’t need a fake network at all. On an open, unencrypted Wi-Fi network, someone else connected to the same hotspot can potentially read data traveling between your device and the internet. This is called packet sniffing, and free tools that do it are easy to find online.

A VPN exists to stop exactly this. It wraps your traffic in its own encryption before it touches the local network, so anyone sniffing that network sees scrambled data instead of your actual activity.

Malware Delivered Through the Connection

Some public networks push malicious software onto connected devices, often disguised as a required “network login” app or a fake update prompt. Android phones face their own version of this: OMACP malware spreads through network configuration messages rather than a normal app install.

None of these three risks require you to be targeted personally. They’re automated and cheap to run against anyone who connects.

Which Steps Apply to You

Not every step below matters equally in every situation. Answer these questions first, then use them to judge how carefully to follow what comes next.

• What device are you using? Phones and laptops have different auto-join settings, covered separately in Step 2.
• What are you about to do? Checking sports scores carries little risk. Logging into your bank, checking email, or entering a card number means every step below applies, not just the easy ones.
• How long will you be on this network? A five-minute check-in at a departure gate is a different risk than working from a café for three hours, where a bad connection has more time to do damage.

If your answer to the second question involves money or a password, don’t skip the VPN or two-factor authentication steps, even if the rest feels like overkill for a quick visit.

Step-by-Step: Securing Your Connection

1. Step 1: Confirm the Network Name

   Ask an employee for the exact Wi-Fi name before you connect, or check a printed sign. Don’t guess based on which network looks official. If you see two networks with almost the same name, such as “Airport_WiFi” and “Airport_WiFi_Free,” treat both as suspicious until staff confirm which one is real.

   Expected outcome: you connect to a network you’ve manually verified, not just the strongest signal in the room.

   Advertisement

2. Step 2: Turn Off Auto-Join

   This step looks different by device. Find the version that matches what you’re using.

   On iPhone: open Settings, tap Wi-Fi, tap the network name, and turn off Auto-Join. This keeps the password saved but stops your phone from reconnecting on its own. To remove the network entirely instead, tap Forget This Network.

   

   On Android: open Wi-Fi settings, tap the gear icon next to the network, and look for a toggle labeled “Connect automatically” or similar. Exact wording varies by phone manufacturer, so search your settings app for “network suggestions” if you can’t find it under the network itself.

   On Windows or Mac laptops: uncheck “Connect automatically” at the connection prompt when you first join. If you already connected once without noticing that box, open your Wi-Fi settings, select the network, and turn the option off there instead.

   Expected outcome: your device asks before joining this network again, instead of doing it silently from inside your bag or pocket.

   Advertisement

3. Step 3: Turn On Your VPN Before You Open Anything Else

   Open your VPN app and confirm it shows as connected before you open a browser, email, or any other app. A VPN encrypts your traffic before it reaches the local network, so even a compromised hotspot only sees scrambled data.

   If you don’t already have a VPN installed, do this at home first. Setting one up for the first time on an unfamiliar network is exactly the situation you’re trying to avoid. When choosing one, look for an app with a kill switch, a feature that blocks all internet traffic if the VPN connection drops unexpectedly, so you’re never accidentally exposed mid-session without knowing it.

   Expected outcome: your VPN app shows an active, connected status before any other app touches the network.

4. Step 4: Turn Off File Sharing and Set the Network to Public

   On a Windows laptop, choose “Public” rather than “Private” when prompted after connecting to a new network. This turns off network discovery, so other devices on the same Wi-Fi can’t see your laptop or browse its shared folders. If you missed that prompt, you can turn off file sharing manually afterward.

   

   On a Mac, open System Settings, go to General, then Sharing, and make sure File Sharing and Screen Sharing are both switched off before connecting to public Wi-Fi.

   Expected outcome: your laptop is invisible to other devices on the network, and no folder on it can be reached from outside.

   Advertisement

5. Step 5: Check for HTTPS, But Don’t Trust It Completely

   Look for a padlock icon and “https://” before the website address in your browser. This means the connection to that specific site is encrypted, even on an unsecured network.

   Here’s the catch: scammers can put a padlock on a fake site too. The Federal Trade Commission points out that fraudulent sites are often encrypted as well, so a padlock alone proves the connection is private, not that the site itself is legitimate. Check that the web address is spelled correctly before you trust the padlock next to it.

   Expected outcome: you catch a misspelled or fake web address instead of trusting the padlock icon on its own.

6. Step 6: Turn On Two-Factor Authentication

   Before you travel, turn on two-factor authentication for your email, banking, and social media accounts if you haven’t already. A stolen password by itself then isn’t enough to get into your account, since the attacker would also need your phone or a code app.

   Expected outcome: logging in from a new device or location triggers a code request, blocking access even if your password leaked.

7. Step 7: Confirm Your Security Software Is Current

   Check that your antivirus or endpoint protection has updated within the last week before relying on public Wi-Fi. If you’re overdue for an update or don’t have one installed, a tool covered in this Bitdefender Total Security review is worth evaluating alongside whatever protection your device already includes.

   Expected outcome: your device can recognize and block known malware, rather than relying on the network alone to keep it out.

   Advertisement

Verify You’re Actually Protected

Troubleshooting

Where This Approach Has Limits

• A VPN and the steps above lower your risk significantly, but they don’t make public Wi-Fi risk-free. A few things are worth knowing honestly.
• A VPN encrypts your connection, but it does nothing against phishing. If you type your password into a convincing fake login page, the VPN protected the connection perfectly while you handed over the password anyway. Encryption and deception are different problems, and a VPN only solves one of them.
• A VPN also can’t remove malware already on your device. If something installed before you turned the VPN on, it keeps running underneath the encrypted tunnel.
• A VPN can leak your DNS requests, the lookups your device makes to find a website’s address, outside its encrypted tunnel if it’s misconfigured. That can reveal which sites you visit even though the content stays hidden. Most reputable VPN apps turn on leak protection by default, but it’s worth confirming in your provider’s settings if you want to be sure.
• Captive portals create a real gap of their own: they require an unencrypted connection to complete their login page before your VPN can even turn on. That short window, usually under a minute, is the least protected part of the whole process. Keep it brief and avoid opening anything sensitive during it.
• If you ever suspect an account was compromised despite these precautions, use this data breach checklist and change passwords from a trusted connection, not the one you suspect.

Key Takeaways

These habits cover Wi-Fi specifically. For broader habits like password managers and spotting phishing attempts, see this online safety guide.

FAQ

Meet the smallest and cheapest member of HP’s Smart Tank family, lowering the entry point for cartridge-free printing in the home or home office.

It’s a severely stripped-back print-only device with no auto-duplex mode, no ethernet port or paper drawer and a very basic display. but the print engine is the same as that of the more expensive HP Smart Tank 5100, so I’m hoping for decent prints with an unbeatable cost-per-page.

The pair of built-in, three Watt JBL speakers are adequate here, but as you can imagine, there’s very little in the way of bass frequencies. Dialogue can also get lost if there’s a lot going on in a scene, and it all sounds very localized. As a Bluetooth speaker, it’s perfectly fine, but it can’t compete with our top picks.

Battery Woes

With the average movie now running to 114 minutes, the Vibe One’s maximum 1.2 hours of battery life is, well, terrible. To even achieve that figure you’ll need to set it to Eco mode, which limits brightness considerably. Otherwise you’ll need to plug it in to watch anything over an hour long.

It’s the biggest flaw in an otherwise great little projector, and sadly limits its practicality. You’re better off considering the Vibe One’s portability a bonus feature rather than a reason to buy. You’d need to spend at least $100 more to punch through the 2-hour battery ceiling, or invest in a projector like the Soundcore Nebula Mars 3 ($1,149), which has a 5-hour battery life and 1,000 ANSI lumens of brightness.

Should You Buy One?

Despite its technological limits, the XGIMI Vibe One is extremely easy to enjoy. No, it isn’t bright enough for daytime viewing, the speakers are only adequate, and the battery won’t get you through most films. But for $250, you’re still getting a Full HD projector with Google TV, autofocus, keystone correction, and plenty of customization, all squeezed into a stylish, practical design that doubles as a speaker and lamp.

Photograph: Chris Haslam

It’s not the best portable projector, and it’s no TV replacement, but it is a great extra screen for spare-room cinema nights, kids’ sleepovers, and garden-wall projectors well after dark. Just treat the battery as backup rather than the main event, and keep the curtains closed.