Fortinet has released an emergency weekend security update for a new critical FortiClient Enterprise Management Server (EMS) vulnerability that is actively exploited in attacks.

Tracked as CVE-2026-35616, the flaw is an improper access control vulnerability that allows unauthenticated attackers to execute code or commands via specially crafted requests.

The issue was patched Saturday, with Fortinet confirming it has been exploited in the wild.

“Fortinet has observed this to be exploited in the wild and urges vulnerable customers to install the hotfix for FortiClient EMS 7.4.5 and 7.4.6,” warns Fortinet.

Fortinet says the vulnerability impacts FortiClient EMS versions 7.4.5 and 7.4.6 and can be mitigated by installing one of the following hotfixes:

The vulnerability will also be fixed in the upcoming FortiClientEMS 7.4.7. FortiClient EMS 7.2 is not affected.

The flaw was discovered by cybersecurity firm Defused, which described it as a pre-authentication API access bypass that allows attackers to bypass authentication and authorization controls entirely.

Defused shared on X that they observed the flaw being exploited as a zero-day earlier this week before reporting it to Fortinet under responsible disclosure.

Internet security watchdog Shadowserver has found over 2,000 exposed FortiClient EMS instances online, with the majority located in the USA and Germany.

The vulnerability follows a separate critical FortiClient EMS flaw, CVE-2026-21643, reported last week and also actively exploited in attacks.

Both vulnerabilities were discovered by Defused, with Fortinet also crediting Nguyen Duc Anh for the latest flaw.

Fortinet is urging customers to apply the hotfixes immediately or upgrade to version 7.4.7 when it becomes available to mitigate the risk of compromise.

Automated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the other.

This whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic questions for any tool evaluation.

Get Your Copy Now

Artemis II and its four-person crew have entered the Moon’s “sphere of influence,” meaning the spacecraft is more affected by lunar gravity than the Earth’s pull. The transition occurred at a distance of 39,000 miles from the Moon, four days, six hours and two minutes into the mission. The next and most important phase will happen tomorrow when the craft loops around the Moon’s far side, taking humans deeper into space than they’ve ever been before.

At their apogee, Astronauts Reid Wiseman, Christina Koch, Victor Glover and Canada’s Jeremy Hansen will be 252,757 miles from Earth. That will break the previous record held by the Apollo 13 crew by just over 4,000 miles. They’re the first humans to cross the lunar threshold since 1972’s Apollo 17 moon landing mission.

The crew spent this weekend carrying out preparations for their lunar flyby. That included manual piloting demonstrations, reviewing their science objectives for the six-hour observation period and evaluating their space suits, which are there for life support in the event of an emergency and for their return home. But, they’ve had plenty of time to take in the views, too — and those views sure are spectacular. In the latest series of images shared by the space agency, the astronauts are seen gazing at Earth through the windows of the Orion spacecraft.

Orion will reach the moon’s vicinity shortly after midnight on Monday, April 6. Later that day, the crew is expected to reach a point farther than any humans have traveled from Earth, surpassing the record of 248,655 miles from Earth set by the Apollo 13 astronauts in 1970.

The lunar observation period will start at 2:45PM ET, and a few hours later, they’ll be behind the moon and briefly drop out of communication. The spacecraft’s closest approach to the moon is expected to occur at 7:02PM, when it will be 4,066 miles from the surface. “From that distance, the crew will see the entire disk of the Moon at once, including regions near the north and south poles,” according to NASA. The crew will later get a chance to see a solar eclipse “as Orion, the Moon, and the Sun align in such a way that the astronauts will see our star disappear behind the Moon for about an hour.” NASA will have coverage of the flyby starting at 1PM ET.

Update April 7 at 1:40 AM ET: The post has been updated with news that Artemis II has entered the Moon’s sphere of influence.

In short: Microsoft has spent billions building Copilot into every corner of its product lineup, pitching it as an indispensable AI co-worker. Its own Terms of Use tell a different story. A clause quietly buried in the document labels Copilot “for entertainment purposes only” and warns users not to rely on it for important advice. The gap between the marketing and the fine print has drawn fresh scrutiny as adoption figures reveal that fewer than one in 30 eligible users is actually paying for the tool.

Somewhere between Satya Nadella’s earnings calls and the product pages promising to “transform the way you work,” Microsoft inserted a sentence into Copilot’s Terms of Use that reads rather differently from the rest of its AI pitch. Updated in October 2025 and surfacing widely in early April 2026, the clause appears under a section in bold capital letters labelled “IMPORTANT DISCLOSURES & WARNINGS.” It says: “Copilot is for entertainment purposes only. It can make mistakes, and it may not work as intended. Don’t rely on Copilot for important advice. Use Copilot at your own risk.”

The same document states that Microsoft makes no warranty or representation of any kind about Copilot, that users should not assume its outputs are free from copyright, trademark, or privacy rights infringement, and that users are solely responsible for any Copilot content they choose to share or publish. The terms apply to consumer Copilot products; the enterprise-facing Microsoft 365 Copilot is excluded from the clause.

What Microsoft has been saying publicly

The disclaimer sits in sharp contrast to years of aggressive promotion. Since integrating Copilot across Windows 11 and the Microsoft 365 suite in 2023, the company has positioned the tool as a productivity multiplier, its “AI companion” for workers in Word, Excel, PowerPoint, and Outlook. Nadella has described Copilot as “becoming a true daily habit” and told investors that daily active users had grown nearly threefold year on year. The company spent approximately $80 billion on AI-related capital expenditure in fiscal year 2025, including a $13 billion investment in OpenAI whose models underpin Copilot’s core capabilities.

Microsoft 365 Copilot is priced at $30 per user per month as an enterprise add-on, with a business tier at $18 per user per month. Premium consumer tiers carry costs that reach into the tens of dollars monthly. “Entertainment purposes only” is not language typically associated with a product charging at those rates.

The legal logic behind the clause

Legal analysts who reviewed the language offered a measured interpretation. The most widely cited read is that the clause represents a lawyer’s attempt to limit liability in circumstances where the product fails, an overcorrection that has become embarrassing because of how bluntly it contradicts the marketing. OpenAI, Google, and Anthropic all include similar advisories in their terms of service, acknowledging inaccuracy and placing responsibility for verifying outputs on users. None of them, however, uses the phrase “entertainment purposes only,” which Android Authority noted is “the same disclaimer that a psychic uses to avoid getting sued.”

The broader legal context matters. Microsoft has faced litigation over Copilot’s outputs before: a class-action suit in a US federal court in San Francisco challenged the legality of GitHub Copilot over alleged open-source licence violations, and a separate dispute in Australia concerned customers who were moved to more expensive plans with Copilot bundled in. The consumer Copilot ToS language, on this reading, is corporate defensiveness made explicit, an attempt to establish in writing that the product never warranted the reliance users might have placed on it.

The adoption numbers that give context

The disclaimer arrives at an awkward moment for Copilot’s commercial trajectory. Data published in early 2026 showed that only 3.3% of Microsoft 365 and Office 365 users who have access to Copilot Chat actually pay for it. Of roughly 450 million Microsoft 365 seats, 15 million are paid Copilot subscribers, a conversion rate that reflects the difficulty of persuading existing users to pay a significant premium for AI they find unreliable.

Research from Recon Analytics traced the problem in part to accuracy. Its tracking of Copilot’s accuracy Net Promoter Score found it at -3.5 in July 2025, deteriorating to -24.1 by September 2025, and only partially recovering to -19.8 by January 2026. In surveys of lapsed Copilot users, 44.2% cited distrust of answers as the primary reason they had stopped using the tool. Separately, the US paid subscriber market share fell from 18.8% in July 2025 to 11.5% in January 2026, a 39% contraction in six months. When users are given a choice between Copilot, ChatGPT, and Gemini, just 8% of workers opt for Copilot.

The hallucination record has not helped. In August 2024, Copilot falsely accused German court reporter Martin Bernklau of the crimes he had covered for years, describing him as a convicted child abuser and fraudster and providing his home address. Microsoft was forced to block queries about Bernklau after a data protection complaint. In January 2026, Copilot generated false claims about football-related violence, triggering further coverage of the tool’s reliability problem. The “entertainment purposes only” clause looks rather less like a legal technicality in that context, and rather more like an accurate description.

Microsoft’s pivot and what it means

Nadella’s response to Copilot’s uneven performance has been to assume direct control over AI product development, reportedly delegating other responsibilities from September 2025 onward to focus personally on the roadmap. The company has also begun building its own models. Microsoft’s launch of MAI-Transcribe-1, MAI-Voice-1, and MAI-Image-2 in April 2026 , its first proprietary AI model releases since renegotiating its contract with OpenAI in September 2025 — signals a strategic intent to reduce dependency on the models that currently sit under Copilot’s hood.

The irony is that Copilot’s limitations are well understood inside Microsoft. The company’s own leaked internal feedback, as reported by several outlets, described integrations that “don’t really work.” The ToS language is, in a sense, the legal department’s way of saying what the product team has been grappling with in private. The expectation that AI tools be trustworthy, verifiable, and fit for purpose has moved from aspiration to regulatory reality across multiple jurisdictions, making the gap between Copilot’s marketing and its terms of service harder to sustain.

None of this means Copilot is uniquely unreliable by the standards of the current generation of AI assistants. Its primary competitor, ChatGPT, has its own well-documented accuracy problems even as OpenAI pushes into commercialisation. The difference is that Microsoft bet earlier, louder, and more money on the proposition that AI assistants were ready to become essential workplace tools. The fine print in its own terms of service suggests the company is hedging on that bet while the marketing continues to double down on it. Competitors raising billions on promises of AI reliability will have noticed the opening. The race that defined 2025 is entering a phase where the gap between “for entertainment purposes only” and genuinely trustworthy AI is the most valuable real estate in the industry.

A growing number of bars and restaurants across the United States are embracing a phone-free experience, reflecting a broader cultural shift toward reducing screen time and encouraging real-world connection. From upscale supper clubs to neighborhood cocktail bars, establishments are introducing policies that either restrict phone usage or actively incentivize guests to put their devices away.

At the heart of this trend is a rising awareness of the negative effects smartphones and social media can have on attention, memory, and interpersonal relationships. Studies continue to highlight how constant digital engagement impacts learning, socialization, and even self-esteem. With Americans reportedly checking their phones around 144 times a day and spending nearly 4.5 hours on their devices, the pushback against screen dependency is gaining traction.

Younger generations, particularly Gen Z, are leading this shift

Surveys indicate that a significant portion of them intentionally disconnect from their devices, followed by millennials and older age groups. This growing appetite for “analog” experiences is now influencing the hospitality industry in noticeable ways.

Restaurants and bars in at least 11 U.S. states have already introduced some form of phone restriction. Washington, D.C., currently leads with the highest number of such venues. Some establishments take a strict approach, such as locking phones away in secure pouches for the duration of a visit, while others offer softer incentives like free desserts for diners who keep their devices off the table.

The reasoning behind these policies is simple: removing phones enhances human interaction. Business owners and industry experts argue that without digital distractions, guests are more engaged with their company, their surroundings, and even their food. Chefs have also noted that phones can detract from the dining experience, making meals feel less memorable.

For customers, the impact can be surprisingly profound

Many report feeling more present and emotionally connected during phone-free outings. Experiences that might otherwise be fragmented by notifications become more immersive and meaningful.

Looking ahead, the trend is expected to expand beyond independent venues. As digital fatigue continues to grow and awareness of screen-time effects increases, more mainstream chains and public spaces may experiment with similar policies. While not everyone may be ready to give up their phones during a night out, the rise of phone-free dining suggests a clear shift: people are beginning to value presence over perpetual connectivity.

Restaurants are finally pushing back against the constant glow of screens at the table, and honestly, it feels long overdue. Dining out was never meant to compete with notifications and endless scrolling. By nudging people to put their phones away, these places are restoring something we’ve quietly lost – real conversation, attention, and presence. It may feel restrictive at first, but the payoff is a far more meaningful experience.

Looking for the most recent regular Connections answers? Click here for today’s Connections hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle and Strands puzzles.

Today’s Connections: Sports Edition is a tough one. If you’re struggling with it but still want to solve it, read on for hints and the answers.

Connections: Sports Edition is published by The Athletic, the subscription-based sports journalism site owned by The Times. It doesn’t appear in the NYT Games app, but it does in The Athletic’s own app. Or you can play it for free online.

Read more: NYT Connections: Sports Edition Puzzle Comes Out of Beta

Hints for today’s Connections: Sports Edition groups

Here are four hints for the groupings in today’s Connections: Sports Edition puzzle, ranked from the easiest yellow group to the tough (and sometimes bizarre) purple group.

Yellow group hint: City of Angels.

Green group hint: Winter football.

Blue group hint: Like Hemsworth, but in hoops.

Purple group hint: Cinderellas.

Answers for today’s Connections: Sports Edition groups

Yellow group: A Los Angeles athlete.

Green group: College football bowl games.

Blue group: Basketball Chrises.

Purple group: Men’s NCAA tournament 16-seeds.

Read more: Wordle Cheat Sheet: Here Are the Most Popular Letters Used in English Words

What are today’s Connections: Sports Edition answers?

The yellow words in today’s Connections

The theme is a Los Angeles athlete. The four answers are Clipper, King, Ram and Spark.

The green words in today’s Connections

The theme is college football bowl games. The four answers are Fiesta, Orange, Rose and Sugar.

The blue words in today’s Connections

The theme is basketball Chrises. The four answers are Bosh, Mullin, Paul and Webber.

The purple words in today’s Connections

The theme is men’s NCAA tournament 16-seeds. The four answers are Howard, Long Island, Prairie View A&M and Siena.

Samsung could be preparing to shake up its audio lineup with a radically different kind of earbuds – ones that don’t even rely on your ear canal. According to recent leaks, the company is working on a new product, possibly called “Galaxy Buds Able,” and early signs suggest these could use bone conduction technology instead of traditional speaker drivers.

Multiple leaks and certifications, including a recent appearance on India’s BIS database, indicate that the product is actively in development. While details remain limited, the unusual model numbering and repeated references across sources hint that this isn’t just another incremental Galaxy Buds refresh, but potentially an entirely new category.

Bone conduction audio works very differently from conventional earbuds

Instead of pushing sound waves through your ear canal, it sends vibrations through your skull directly to the inner ear, effectively bypassing the eardrum. This allows for an open-ear design, meaning users can still hear their surroundings while listening to audio—something traditional in-ear or noise-canceling earbuds often block out.

That shift matters more than it might seem. As wearable tech evolves, companies are increasingly looking at ways to blend digital experiences with real-world awareness. Bone conduction could make earbuds safer for outdoor use, more comfortable for long sessions, and even more accessible for users who struggle with in-ear designs. It also opens doors for new health and assistive applications, especially when combined with Samsung’s growing interest in wellness-focused audio features.

For users, the appeal is straightforward. Imagine listening to music, taking calls, or interacting with voice assistants without isolating yourself from your environment. Whether you’re commuting, working out, or just walking through a busy street, this kind of tech promises a more natural and less intrusive experience.

Looking ahead, timing could be key

Reports suggest Samsung may be positioning these earbuds for a major launch alongside its next-generation foldables, such as the Galaxy Z Fold 8 and Flip 8. If that happens, the “Buds Able” could represent the company’s push into more experimental, next-gen hardware – going beyond iterative upgrades and into entirely new user experiences.

While nothing is official yet, the direction is clear: Samsung isn’t just refining earbuds anymore – it may be redefining how we hear them.