TL;DR
Brazil’s civil defense alert system was hacked, sending fake extreme alerts with the word “misantropi4” to millions of phones before the platform was shut down.
An average visitor is expected to spend around $5,400 in the US—far above the $720-$2,500 visitors to Qatar spent in 2022.
Transport at this year’s tournament is fundamentally different from that of the one-city tournament in Qatar, or in Russia in 2018, which provided free public transportation and an additional 500 trains to help people get around.
This year, because of the vast distances, the only option for fans and teams is flights, which airlines have been adding to accommodate potential World Cup travelers.
“Teams and fans now must factor in flights, not metro rides, and the carbon and cost implications are real,” Anagnostopoulos says.
The need to book flights, not trains or taxis, may also be decreasing demand for hotels simply because the travel costs are too high for some people. “US hotels are already reporting bookings below expectations,” Anagnostopoulos says. “Scale doesn’t guarantee the crowds will show up.”
For organizers and host cities, the scale of the tournament demands a massive investment in security, including against threats that would have barely crossed the minds of previous hosts.
The US federal government has issued $625 million in grants for host cities to address security issues. On top of that, the Department of Homeland Security has made over $200 million worth of grants available to states to buy anti-drone technology, with the US State Department highlighting hostile actors’ increasing access to drones and other technology.
In Canada, federal authorities have issued around $104 million worth of grants to host cities Vancouver and Toronto. That brings total public grants in Canada and the US alone to nearly $1 billion—likely just a fraction of the real costs of securing the tournament.
The size of the tournament, and the fact that it crosses borders, has pushed the price tag higher.
“Qatar 2022 benefited from a highly compact geography, with venues operating within a relatively unified environment. The 2026 World Cup will involve multiple cities, jurisdictions, agencies, and technology ecosystems across the United States, Canada, and Mexico,” says Leo Levit, chair of Onvif, a membership body focused on standardization of physical security products.
“The challenge is not simply the number of systems involved, but whether those systems can exchange information efficiently,” he adds.
The numbers tell a story of a tournament straining under its own ambition. It’s not yet clear whether these investments will pay off in terms of tickets bought and advertising slots sold. Why, then, is FIFA pursuing growth at all costs?
According to Simon Chadwick, professor of sport and geopolitical economy at the international SKEMA Business School, the reason may be growing competition from other sports.
“What [FIFA president Gianni] Infantino is trying to do is to ensure that football remains robust, relevant, prominent and that it doesn’t begin losing market share—to the NBA, which is in China, India, Africa, and the Gulf region; to the NFL, which is making moves on Europe; and to Formula One, which has grown hugely in popularity, particularly in North America,” Chadwick says.
If Day 1 of the BMPS 2026 Grand Finals belonged to Divine Gaming, Day 2 was all about Victoris Sumus and GodsReign. Both teams consistently found themselves in the late game across multiple matches and looked like one of the most complete squads on the battlefield. At the same time, teams like GodLike Esports mounted impressive comebacks, while iQOO SouL finally showed signs of life after a disastrous opening day. Here’s everything that happened on Day 2 of the BMPS 2026 Grand Finals.
The biggest story of the day was undoubtedly Victoris Sumus. The squad started strong in the opening Rondo match and eventually secured a crucial chicken dinner after outlasting GodLike Esports in the final fight. That momentum continued throughout the day as they repeatedly put themselves in winning positions.
Match 2 saw Victoris Sumus pull off one of the most surprising endgames of the tournament. Despite being forced to rotate into the zone under pressure from GodLike, the team somehow survived without losing a player. Moments later, they eliminated GodLike and secured another chicken dinner. Even when they weren’t winning matches, Victoris Sumus remained a constant threat. Their positioning, rotations, and ability to capitalize on mistakes made them one of the most dangerous teams on the server.

After spending most of Day 1 near the bottom of the standings, iQOO SouL desperately needed a response. Unfortunately, the day didn’t start well. Genesis Esports eliminated SouL in the opening match, exposing the same coordination issues that had haunted the team throughout Day 1. Match 2 wasn’t much better, as TAG stunned the crowd by wiping SouL near Pochinki.
However, things finally clicked during the Miramar games. SouL looked far more coordinated, won several crucial engagements, and secured their first chicken dinner of the tournament in Match 5. The team followed that up with another solid performance in the final game, highlighted by a clutch play from Legit that helped eliminate GodLike during the closing stages. It wasn’t a perfect day, but it was exactly the kind of comeback SouL fans had been hoping for.
GodLike Esports entered Day 2 with plenty of ground to make up and looked significantly sharper throughout the day. The team consistently found itself in favorable late-game positions and finally converted one of those opportunities into a chicken dinner during Match 3. Their aggressive pushes and grenade usage were among the best we’ve seen so far in Jaipur. While they narrowly missed out on a few additional wins, GodLike’s Day 2 performance firmly placed them back into contention heading into the final day.

No team generated more crowd reactions than Team Aryan x TMG. Whether it was aggressive early-game pushes, risky compound crashes, or unconventional strategies, TAG constantly found themselves in the middle of the action.
The team showed flashes of brilliance, including a memorable win over SouL and an impressive shotgun push against Genesis. Unfortunately, their aggressive playstyle often backfired, preventing them from converting strong starts into meaningful points. TAG remains one of the most entertaining teams to watch, but they’ll need a much cleaner Day 3 to climb the leaderboard.
While much of the attention was on Victoris Sumus, SouL, and GodLike, Gods Reign quietly put together one of the most impressive comeback stories of the tournament. After spending much of the event in the lower half of the standings, GDR consistently picked up crucial finish points throughout Day 2. Their biggest moment came in the final Miramar match, where they secured 19 points and a chicken dinner to cap off the day in style.
That massive haul propelled them all the way to second place in the overall standings, turning them from an outside contender into a genuine title threat heading into the final day. Check out the full standings after day 2 of the BMPS Grand Finals here.
The Wall Street Journal reports on internet-connected devices — and how every year millions of them “can contain a secret digital backdoor that opens up access to your home internet, so that anyone… can surf the web as if they were you.” (And this is especially true for “knockoffs that you buy online”…)
In a video report this week they tested two digital picture frames from Amazon and three streaming devices from Walmart “because we heard that they often ship with backdoor software used in cyberattacks. Security experts believe manufacturers are being paid to add this malware, but many people also get tricked into downloading the software onto their phones or computers… Within minutes of turning the devices on, there was a surge of internet traffic… Visits to gambling, porn, cryptocurrency and loads of other sketchy web sites started pouring in from users around the world.” (And remote visitors also tried to access Outlook and Gmail accounts…)
Residential proxy companies even rent out access to “tens of millions of home networks around the world,” according to the report. “But the problem is actually worse than that. Hackers figured out a way to seize control of these backdoors, and they started taking over these residential networks. Last month authorities arrested a 23-year-old Ottawa man, saying he’d taken control of more than a million devices to launch some of the largest cyberattacks anyone had ever seen..”
After a couple months the Journal’s reporter collected logs of all the traffic, and sent it to an investigator at Comcast, who said both were conducting DDoS attacks. But estimate for the number of infected devices are as low as tens of millions or as high 500 million-plus. “We’ve seen nation state attacks launched through these kind of endpoints, which means your device sitting in your house is part of a nation state attack against another nation state… We’ve seen ad fraud, we’ve seen ticket scalping, we’ve seen financial fraud.”
But more importantly, “We have seen some of the largest computer attacks — meaning computers attacking other computers at human request — ever recorded in our digital history in the last several months.” At cybersecurity conferences, some are warning “there are much larger ones on the horizon if we don’t get a hold of this problem.”
The company making the picture frame “couldn’t be reached for comment,” while Amazon said it’s been out of stock since last year. Both Amazon and Walmart said they take action when they confirm malware on a third-party product.
The takeaway: New research is challenging a basic assumption about espresso: that it has to be made with hot water. Instead of relying on near-boiling water, researchers have shown that high-frequency sound waves can produce an espresso-style shot with similar strength and taste – no heat required.
Developed by engineers and food scientists at UNSW Sydney, this new method is called “ultrasonic espresso” and replaces heat with mechanical energy. It runs at room temperature, using sound waves to pull flavor from finely ground coffee, and reaches espresso-level intensity in under three minutes despite the cold-water start.
The setup still begins with a standard espresso basket. A small metal transducer is mounted against its wall, and once activated, it emits ultrasound – sound waves above the range of human hearing – that travel through the water and coffee bed.
What happens next is the key step.
The sound waves trigger acoustic cavitation, a process where tiny bubbles form in the liquid and collapse in rapid succession. When those bubbles implode near coffee particles, they generate microscopic bursts of force that chip away at the grounds, speeding up the release of oils, flavor compounds, and caffeine into the water.
In effect, the system swaps heat for controlled agitation at a microscopic level, using pressure changes and localized mechanical action instead of temperature to drive extraction.
That distinction matters more at scale than it does on a kitchen counter. For a home user, skipping the heating step might not move the needle much. But in industrial settings – particularly ready-to-drink coffee production – energy consumption becomes a central concern, and the researchers estimate that eliminating the need to heat water could cut energy use by up to 75%.
The process also introduces some logistical flexibility. Because the coffee is produced at room temperature, it can go straight into bottled drinks or milk-based products, or be shipped as a concentrated liquid and diluted later, potentially simplifying production and distribution.
Ultrasound is not entirely new to coffee science. Earlier work from the same UNSW team explored its ability to speed up cold brewing, compressing what is typically a 12 to 24-hour process into a matter of minutes. But espresso presents a different challenge: it is not just about extracting caffeine or basic flavor, but about achieving a specific balance of bitterness, aroma, and body typically associated with high heat and pressure.
To hit that target, the researchers, led by Dr. Francisco Trujillo, fine-tuned several variables. Grind size played a clear role, with finer particles allowing faster extraction. The water-to-coffee ratio had to be carefully controlled to avoid under-extraction or dilution, and timing proved equally important, with the optimal window landing between two-and-a-half and three minutes of ultrasonic exposure.
Matching the chemistry of espresso is only part of the equation, though. The more practical question is whether people can actually taste the difference.
To test that, the team ran a blind evaluation with about 100 regular coffee drinkers, those findings are published in the Journal of Food Engineering. Participants sampled four coffees: traditional espresso, ultrasonic espresso, and both traditional and ultrasonic filter coffee, served at the same temperature and in random order.
The results were strikingly close. Participants couldn’t reliably distinguish between the traditional espresso and the ultrasonic version, with the two performing nearly identically across aroma, flavor, bitterness, and overall preference. In the filter category, the ultrasonic version was actually favored, with tasters describing its bitterness as more balanced.
The findings suggest that heat may not be as essential to espresso as long assumed. By using ultrasound to accelerate extraction, the process reproduces the defining characteristics of espresso while significantly reducing energy input. For an industry built around heat-driven methods, this opens up a different way of thinking about how coffee can be made.
Image credit: The Conversation
The most controversial feature is Simultaneous Opposing Cardinal Direction (SOCD) customization. This allows one key to override another rather than registering both simultaneously, which is ideal for strafing in tactical shooters like Counter-Strike 2 and Valorant. The difference in reaction speed is immediately noticeable, making quick peeks far more consistent. However, because of the distinct advantage it provides, the feature has been banned in some competitive games because it reduces the delay between directional movement to near-zero levels without requiring any additional skills.
Testing these features across a variety of shooters and racing games, I was consistently impressed by the level of fine-tuning Wootility offers—something not possible on a traditional mechanical keyboard.
The gaming experience of this keyboard is simply impressive. The switches are incredibly smooth and consistent, offering granular control with near-instantaneous, low-latency inputs. While older Hall Effect keyboards from competitors like Keychron and Asus often lacked the tactile feel of traditional mechanical designs, Wooting’s Lekker switches easily bridge the gap.
The RGB lighting also looks great and is deeply customizable. Like most LEDs, it tends to lean slightly blue, but this is easily corrected in the software (I set mine to 203/192/180 for a true white). It is a minor quirk in an otherwise impressive lighting setup.
Photograph: Henri Robbins
The 60HE v2’s simple internal design makes repairs easy, allowing the keyboard to be disassembled in seconds. Despite this ease of access, Wooting’s solid construction ensures everything stays securely in place. Inside, you will find a plate, switches, a silicone layer, a PCB with rubber feet on the underside, your choice of sound dampening layer, and the case.
Switch compatibility is often a weak point for analog keyboards, but the 60HE v2 easily outpaces competitors from Keychron, Razer, and ROG, which typically only support two or three options. By adopting the widely used KS-20 design, the 60HE v2 works with switches from Gateron, Geon, and several other manufacturers, giving users a constantly growing range of options.
My only real complaint is the adherence to the standard GH60 form factor, which places the USB-C port directly on the left side of the PCB. While I would prefer a centered port on a separate daughterboard for convenience and repairability, I understand the choice. The benefits of standardization for both consumers and manufacturers ultimately outweigh this minor design gripe.
I’m impressed by how well this keyboard performs across every metric. The build quality is robust, the switches are smooth and consistent, and nearly every aspect can be tailored to the individual player. Aside from the lack of wireless connectivity, it leaves nothing to be desired.
The 60HE v2 is easily one of the best gaming keyboards available today. While it is currently backordered, if you are willing to be patient, it is absolutely worth the $240 price tag.
Day 2 of the BMPS Grand Finals was truly the day of comebacks, with teams like GDR and Victoris Summus making the largest leap, and occupying the second and third place in the rankings, respectively. While there was plenty of action from the bottom dwellers, Divine held their 30-point lead, thanks to clever strategies that put them in the top five of almost every match consistently. Here’s what the schedule will look like for day 3 of the BMPS Grand Finals.
The live broadcast will begin at 2:45 PM IST. Fans can catch the games like on Krafton’s YouTube channel in Hindi, English, and a few other regional languages. Or, if you want to support your team live, head over to the Jaipur Convention Center. Tickets are available on the District app. Maps for today will include:
A total of 18 matches will be played over the course of this weekend. And the format is pretty simple. Points are awarded for each finish, and also for how long a team survives. In the end, the team with the most total points (position + finish) will be the winners.
| Rank | Team | WWCD | Finish Points | Position Points | Total Points |
|---|---|---|---|---|---|
| 1 | DIVINE | 2 | 83 | 47 | 130 |
| 2 | GDR | 1 | 65 | 28 | 93 |
| 3 | VS | 2 | 55 | 36 | 91 |
| 4 | GODL | 1 | 58 | 32 | 90 |
| 5 | GENS | 0 | 63 | 27 | 90 |
| 6 | iQOOORGE | 2 | 40 | 38 | 78 |
| 7 | NBE | 1 | 52 | 25 | 77 |
| 8 | VASISTA | 1 | 52 | 24 | 76 |
| 9 | iQOOSOUL | 1 | 46 | 23 | 69 |
| 10 | iQOO8BIT | 0 | 45 | 24 | 69 |
| 11 | iQOOxTT | 0 | 49 | 19 | 68 |
| 12 | iQOORNTX | 0 | 47 | 15 | 62 |
| 13 | 7GODS | 1 | 35 | 20 | 55 |
| 14 | iQOOxOG | 0 | 37 | 17 | 54 |
| 15 | TAG | 0 | 45 | 2 | 47 |
| 16 | MYTH | 0 | 33 | 7 | 40 |

British World Rally Championship (WRC) driver Louise Cook recently climbed into Forza Horizon 6 with an enthusiast-grade Direct Drive (DD) wheel setup, triple screen monitor rig, and a digital 1986 Audi Quattro rally car. She is most likely using dialed in custom force feedback values, before threading the car through narrow mountain roads, tunnels, and tight corners with pro racer precision.
Playground Games launched the latest installment in Japan, and the setting is better suited to the franchise than any previous location. The map covers a variety of biomes, including actual elevation fluctuations. You have snow-capped alpine passes rising over the verdant highlands and coastal highways, and then there’s Tokyo City, which is five times larger than anything they’ve done before, with distinct districts that change character as you walk around them. So you’ll be passing through cherry blossom tunnels one minute and neon-lit streets the next, before returning to peaceful (yet narrow) alleyways. The seasonal weather does a fantastic job of adjusting grip and visibility without making each drive difficult. They’ve also included a few vertical slopes and hairpin sequences to test your ability to use momentum rather than pure power.
The game has approximately 550 cars, with the majority of them being Japanese vehicles, ranging from everyday icons like the Nissan Cedric to legends like the R32 Skyline, S15 Silvia, and Honda NSX. You also have some recent standouts, such as the Toyota Land Cruiser and the GR GT Prototype (on the cover). Of course, you’ll come across some barn treasures that will surprise you, like a vintage Toyota 2000GT hidden away on a dirt track. The tuning depth has also been increased, with engine swaps, aero options, and visual layers now available, and community-shared tunes and liveries provide an excellent way to skip some of the grind while still customizing cars for certain routes or events.

The handling has also been dramatically enhanced, with cars transmitting weight more convincingly around corners and steering inputs feeling noticeably sharper than in the last game. Drifting down the winding roads of the Highlands is no longer a source of frustration, but rather a delight. They’ve also introduced a new simulation steering mode to help prevent understeer in controller configurations. Wheel support has also been significantly improved, with more detailed force feedback and cockpit animations displaying a complete 540 degrees of rotation.
Brazil’s civil defense alert system was hacked, sending fake extreme alerts with the word “misantropi4” to millions of phones before the platform was shut down.
Hackers breached Brazil’s national civil defense alert system overnight, sending fake “Extreme Alert” notifications containing the word “misantropi4” to millions of mobile phones across at least seven states. The Civil Defense Alert platform was taken offline at 1:30 am on Saturday after the Ministry of Integration and Regional Development confirmed the intrusion.
The Federal Police has been activated to investigate. No timeframe has been given for when the platform will be restored.
The first unauthorized alert was registered around 11:40 pm on Friday, 19 June, in Paraná. Within hours, the same emergency sound, the type that bypasses silent mode and overrides whatever is on screen, reached phones in São Paulo, Rio de Janeiro, Brasília, Bahia, Pará, Mato Grosso do Sul, and Acre.
National Secretary of Protection and Civil Defense Wolnei Wolff told a press conference that 10 alerts were tracked across various Brazilian states, with most sent via Cell Broadcast and at least one via SMS. The total number of phones affected was not officially disclosed, though German outlet Ad-hoc-News reported an estimate of approximately 30 million people reached.
“It’s difficult to say whether one or more people participated in this criminal act,” Wolff said. He added that the incident was “very bad for the system, considering that we are dealing with people’s safety when we issue the alert.”
Phones displayed “Defesa Civil: misantropi4,” with the final letter “a” in the Portuguese word “misantropia” replaced by the number 4, a substitution common in leetspeak. Misantropia translates to misanthropy, meaning hatred or aversion to humanity.
No dangerous instructions accompanied the message, but the use of the most severe alert category, which is reserved for imminent natural disasters, caused widespread alarm. Recipients across seven states were jolted awake by the emergency sound.
Wolff confirmed that the attackers managed to regain access after an initial blocking attempt. The platform was ultimately shut down entirely at 1:30 am The system will remain suspended until all digital security conditions are re-established, according to the ministry.
Brazil’s Cell Broadcast system is relatively new. It was mandated by telecommunications regulator Anatel in 2022, piloted in 11 cities beginning in August 2024, and expanded to cover the entire national territory by October 2025.
The technology broadcasts alerts to all devices within a cell tower’s range without requiring phone numbers or prior registration. The four operators that deliver the service, Algar, Claro, TIM, and Vivo, were involved in the overnight response alongside Anatel.
The vulnerability exploited in the attack has not been publicly disclosed, and the investigation is ongoing. Security researchers have noted that Cell Broadcast systems globally lack cryptographic authentication, meaning devices cannot independently verify whether an alert was genuinely sent by civil defense authorities.
Academic research since 2019 has demonstrated that fake alerts can be transmitted using relatively inexpensive equipment, including software-defined radios. Whether the Brazilian attack exploited the central platform, as the government’s statement implies, or used a clandestine transmitter remains unclear.
A person claiming responsibility for the attack posted on X (formerly Twitter) before the posts were removed by the platform, according to Brazilian tech outlet TecMundo. The Federal Police has not confirmed whether this individual is a genuine suspect.
The incident echoes a pattern of critical infrastructure alert systems being compromised through surprisingly basic attack vectors. In Taiwan last month, a 23-year-old student triggered emergency braking on four high-speed trains using a laptop and a cheap software-defined radio, exploiting cryptographic keys that had not been changed in 19 years. The European Commission was breached in March through a poisoned open-source security tool, resulting in 92 gigabytes of stolen data.
The immediate concern for Brazil is the erosion of public trust. The Cell Broadcast system was built to save lives during floods, landslides, and severe weather events.
If citizens learn to associate the emergency sound with pranks rather than genuine warnings, they may ignore future alerts when a real disaster is unfolding. That risk, more than any technical vulnerability, is the lasting damage of a hack that woke up a country with a single strange word.
Looking for the most recent Strands answer? Click here for our daily Strands hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle, Connections and Connections: Sports Edition puzzles.
Today’s NYT Strands puzzle was a bit challenging, but the words make sense once you figure out the theme. Some of the answers are difficult to unscramble, so if you need hints and answers, read on.
I go into depth about the rules for Strands in this story.
If you’re looking for today’s Wordle, Connections and Mini Crossword answers, you can visit CNET’s NYT puzzle hints page.
Read more: NYT Connections Turns 1: These Are the 5 Toughest Puzzles So Far
Today’s Strands theme is: That’s included!
If that doesn’t help you, here’s a clue: More than just a bed.
Your goal is to find hidden words that fit the puzzle’s theme. If you’re stuck, find any words you can. Every time you find three words of four letters or more, Strands will reveal one of the theme words. These are the words I used to get those hints but any words of four or more letters that you find will work:
These are the answers that tie into the theme. The goal of the puzzle is to find them all, including the spangram, a theme word that reaches from one side of the puzzle to the other. When you have all of them (I originally thought there were always eight but learned that the number can vary), every letter on the board will be used. Here are the nonspangram answers:
The completed NYT Strands puzzle for June 21, 2026.
Today’s Strands spangram is HOTELAMENITIES. To find it, start with the H that’s three letters down on the far-left vertical row, and wind down and over.
Here are some of the Strands topics I’ve found to be the toughest.
#1: Dated slang. Maybe you didn’t even use this lingo when it was cool. Toughest word: PHAT.
#2: Thar she blows! I guess marine biologists might ace this one. Toughest word: BALEEN or RIGHT.
#3: Off the hook. Again, it helps to know a lot about sea creatures. Sorry, Charlie. Toughest word: BIGEYE or SKIPJACK.
security
Campaigners say tech is unable to reliably distinguish between kids and adults at the boundary where use is planned
More than 60 rights groups have told the UK government to scrap plans to use AI-powered facial age estimation on asylum-seeking children, warning the technology is biased, inaccurate, and potentially unlawful.
In an open letter sent to border security and asylum minister Alex Norris, 62 organizations, including Amnesty International, Human Rights Watch, Liberty, the Electronic Frontier Foundation, Foxglove, and the Open Rights Group, called on the Home Office to halt deployment of facial age estimation (FAE) technology, currently slated for rollout from 2027.
The intervention comes after the Home Office unveiled plans to use AI-powered facial age estimation to help immigration officers decide whether someone claiming to be a child is likely to be over or under 18. Ministers insist the technology will support, rather than replace, human decision-making.
But the coalition behind the letter is unconvinced.
“There are substantial and well-founded concerns about the bias of FAE,” the groups wrote, arguing that the technology has “baked-in failures and discrimination,” particularly affecting women and people of color.
The groups also highlighted an uncomfortable detail in the Home Office’s own guidance: the technology’s performance varies by ethnicity and skin tone. That makes it difficult to see why officials believe it will be reliable for assessing asylum-seeking children, who are predominantly people of color, they argued.
The organizations also took aim at what may be the technology’s biggest practical problem: age estimation systems are least precise around the exact boundary the Home Office wants them to assess.
“The Home Office admits FAE systems are imprecise at the crucial 16-to-18-year-old boundary,” the letter notes, citing government figures showing even the best-performing systems have an error margin of roughly 2.5 years in that range.
The groups argue that the technology may fare even worse on asylum-seeking children. Their letter says trauma, violence, malnutrition, dehydration, sleep deprivation, and long journeys can leave children looking older than they are, potentially skewing the results.
“As such… we can see no basis upon which the Home Office has concluded this technology will increase the accuracy of its decision making,” the groups wrote.
The coalition also raised questions about the data used to develop and test the systems and demanded details about the images and datasets used for training, arguing it is unclear how consent could lawfully have been obtained if asylum-seeking children were included.
The Register asked the Home Office to comment.
The Home Office has so far released only limited details about its testing program. The groups noted that officials have yet to publish detailed results, methodologies, or impact assessments that would allow independent scrutiny of the technology’s performance. The letter also noted that no Equality Impact Assessment or Data Protection Impact Assessment has been made public.
The groups have given the department 21 days to respond to a series of questions covering testing methods, training data, safeguards, appeal mechanisms, and how facial age estimates would ultimately influence asylum decisions.
The row also exposes a broader disagreement over age assessments. While the Home Office has emphasized cases involving adults claiming to be children, campaigners argue the greater risk is that vulnerable children end up being treated as adults.
Until then, the government’s AI age guesser remains a technology it says works, but has yet to fully show its workings. ®
The clock is ticking for Windows and Linux users to update cryptographic keys that protect their systems against firmware-based UEFI infections, a pernicious form of malware that loads before operating system and antimalware protections start.
Beginning June 24, three certificates that cryptographically verify that each piece of firmware and software that loads during system boot will expire. The Microsoft-signed certificates are the linchpins of Secure Boot, a Microsoft-designed chain of trust. Secure Boot checks the digital signatures of all firmware that loads during system startup to ensure it originates from a trusted provider, such as the manufacturer of the motherboard the system runs on.
Secure Boot is designed to thwart UEFI bootkits, a form of malware that alters the Unified Extensible Firmware Interface, the successor to the BIOS, both of which begin the initial boot sequence. Because these bootkits load before the OS and most other code, they can be difficult to detect. Once installed, they typically load malware onto the OS that steals credentials, backdoors the system, or performs other malicious actions. Even when the OS is disinfected, the bootkit can reinfect the system. Bootkits survive OS reinstallations as well.
The genesis of bootkits dates back to the early 1980s with the creation of several pieces of malware that targeted Apple II machines during the boot process. They spread in the wild through floppy disks that ostensibly contained pirated games.
Windows bootkits gained notice in the early 2000s as proofs of concept developed by researchers of offensive security. BootRoot, a bootkit demonstrated at the 2005 Black Hat security conference, is likely the first such instance. The malware infected the Network Driver Interface, which streamlined communications between network protocol drivers enabling service such as TCP/IP network adapter drivers. In the years following, similar PoCs included Vbootkit, the Stoned Bootkit, and Mebroot. There were many more.
In 2012, a new form of bootkit was demonstrated. Instead of targeting machines through the BIOS or master boot record, one such bootkit attacked Mac OS X systems by infecting the EFI, a package of firmware that started the boot process. A second very primitive bootkit targeted Windows 8 machines by infecting the UEFI bootkit, the predecessor to the UEFI. Around 2013, a researcher demonstrated a more advanced UEFI bootkit for Windows named Dreamboat.
The first known case of a real-world attack targeting the UEFI came in 2018 with the discovery of malware dubbed LoJax. A repurposed version of legitimate anti-theft software known as LoJack, it was created by the Kremlin-backed hacking group tracked under names including Sednit, Fancy Bear, and APT 28. The malware was installed remotely using malware tools that can read and overwrite parts of the UEFI firmware’s flash memory.
In 2020, researchers unearthed the second known instance of real-world malware attacking the UEFI. Each time an infected device rebooted, its UEFI checked whether a malicious file was present in the Windows startup folder and, if not, installed it. Researchers from Kaspersky, the security provider that discovered the malware, named it “MosaicRegressor.” Researchers have yet to determine how the compromised UEFIs became infected. Since then, a handful of new UEFI bootkits have come to light. They are tracked under names including ESpecter, FinSpy, and MoonBounce.
In response to the more menacing threat of UEFI bootkits, Microsoft worked with device makers to develop Secure Boot, an industry-wide standard that uses cryptographic signatures to ensure that each piece of firmware loaded during startup is trusted by a computer’s manufacturer. Secure Boot is designed to create a chain of trust that prevents attackers from replacing the intended bootup firmware with malicious firmware. If a single link in the startup chain isn’t recognized, Secure Boot will prevent the device from starting.
Then in 2023, researchers discovered LogoFail, a series of critical vulnerabilities found UEFIs booting up just about every Windows and Linux system in the world. An image-parsing bug in the software that presented hardware manufacturers’ logos during bootup allowed attackers to bypass Secure Boot and infect the UEFI with malicious firmware.
No Jackpot Winner as $257 Million Prize Rolls Over to $269 Million Monday Draw
Weekend Open Thread: Miami – Corporette.com
Zimbabwe Requires Crypto Businesses to Register Annually Under New FIU Regulations
Wall Street Week Ahead: Investors see Micron earnings as pulse check of AI rally momentum
Matt Damon’s Viral Sci-Fi Thriller Has Taken Over HBO Max
As AI companies race to go public, who else is along for the ride?
HIVE shares jump as $220M AI deal speeds Bitcoin mining pivot
Anthropic staff to meet White House officials next week, Axios reports
Bitcoin could crash to $48,000, if this historical pattern is triggered
what doctors are seeing in ebike crashes
Warning of disruption as Cardiff Crossrail works to start
Tributes to former deputy head teacher at Cambridge school among death and funeral notices
Kate Middleton Glare Goes Viral After Kids Booed At Royal Event
“Israel’s” ban on ICRC visits ruled illegal, but Knesset moves to stop them permanently
Financial Accounting | Last Day Revision Strategy and Booster | CMA Inter – June 2026
XRP ETFs Outperform As Bitcoin And Ethereum Funds Extend Outflow Trend
Over 400 Arch Linux packages compromised to push rootkit, infostealer
Invesco Quality Income Fund Q1 2026 Commentary
Singer Oliver Tree dies aged 32 in helicopter crash in Brazil
Dick Advocaat’s Curacao scores first-ever World Cup goal against Germany
You must be logged in to post a comment Login