Category: 4. Technology

The iPad Mini A17 Pro is the latest in Apple’s long line of miniature tablets and it’s one of the best tablets you can buy — especially if you’re looking for a smaller, more portable model. It’s also one of the most affordable tablets in Apple’s lineup but that doesn’t mean it’s what most people would call cheap. Thankfully, Amazon is offering this mini marvel for just $399 as part of its Fourth of July sale this weekend. But Apple iPads tend to sell out quickly on sale so be sure to snag it now before stock runs out.

For a limited time, this deal brings Apple’s iPad Mini back down to its all-time low of $399. There are multiple colors to choose from and the same discount can be had on different storage capacities. You can even save on the version with cellular connectivity, too. Prefer to pick your new tablet up from a store? Best Buy is matching the $399 price too.

Despite being small, the current iPad Mini is powerful, thanks to its speedy A17 Pro chip. That chip also enables Apple Intelligence features, if that’s your bag.

Hey, did you know? CNET Deals texts are free, easy and save you money.

This iPad starts with 128GB of storage and a stunning 8.3-inch Liquid Retina display. It also has fast Wi-Fi 6E connectivity and support for the fancy Apple Pencil Pro. There’s a 12-megapixel ultrawide front camera that includes Center Stage for video calls and a 12MP wide back camera to help you scan documents clearly or take photos with your iPad.

Keep in mind that these prices might not last for long and the same can be said for stocks. If you want a particular model in a particular color, we suggest ordering sooner rather than later.

Why this deal matters

This deal cuts $100 off the price of the latest iPad Mini — a rare discount considering this is one of the newest Apple tablets on the market. This tablet is fast yet small and light and it might just be the perfect portable gaming device. If a new tablet is on your Independence Day shopping list, don’t miss out on this offer.

Capcom, in collaboration with Aniplex and JoyCity, has announced Resident Evil: Survival Unit as a real-time strategy title for iOS and Android. Revealed at Anime Expo 2025 in Paris, the game reimagines the series’ survival-horror core by placing players in command of specialized squads tasked with securing biohazard zones. A global release across North America, Europe, Japan, South Korea, and other regions is planned, and an online showcase on July 10 will detail its tactical systems and narrative setting.

Resident Evil: Survival Unit challenges players to manage resources, fortify bases, and undertake mission-based objectives within familiar Resident Evil locales tied to the Umbrella Corporation’s pre-collapse era. The official website highlights both cooperative PvE and competitive PvP modes, a free-to-play framework supported by optional in-game purchases, and a user interface optimized for touch controls. Through this partnership, Capcom, Aniplex, and JoyCity aim to preserve the franchise’s established lore and atmosphere while tailoring gameplay to mobile audiences.

Image Credit: Capcom

It’s been a rough week at Microsoft. Following the news that at the company, one Xbox executive offered some questionable words of advice for people on their way out: Find solace in Microsoft Copilot.

, Matt Turnbull, an executive producer at Xbox Game Studios Publishing who clearly did not lose his job recently, took to LinkedIn to let folks know, “You’re not alone and you don’t have to go it alone.” In the same breath as acknowledging that AI evokes “strong feelings in people,” Turnbull suggested that LLMs like ChatGPT and Copilot could “help reduce the emotional and cognitive load that comes with job loss.”

Turnbull went on to provide specific AI prompts that he recommended for recently laid-off people, including, “Write a warm intro message for reaching out to someone at [studio name] about a job posting.” He explained how an LLM could aid overwhelmed developers in planning their careers and punching up their resumés, and also help with “emotional clarity and confidence.”

The post was circulated by Necrosoft Games director and host Brandon Sheffield, where it received a predictably negative reaction. According to Video Games Chronicle, LinkedIn users were similarly unimpressed. Turnbull deleted the post a few hours later. Here’s the full text from the LinkedIn post:

---

Turnbull’s post, however earnest, comes at a time when Microsoft is seemingly all-in on both AI and layoffs. The 9,000 job losses this week add to over . Microsoft President Brad Smith began 2025 by committing to spend around $80 billion on AI infrastructure through the year, and CEO Satya Nadella recently shared that is now authored by AI.

Just last week, Business Insider reported on another executive telling employees that using Copilot is “” in an internal memo. One developer at Halo Studios, which was affected by the layoffs, told Engadget’s Jessica Conditt that they felt Xbox leadership was looking to “replace as many jobs as they can with AI agents.”

If you buy something through a link in this article, we may earn commission.

Critical Sudo bugs expose major Linux distros to local Root exploits

Critical Sudo flaws let local users gain root access on Linux systems, the vulnerabilities affect major Linux distributions.

Cybersecurity researchers disclosed two vulnerabilities in the Sudo command-line utility for Linux and Unix-like operating systems. Local attackers can exploit the vulnerabilities to escalate privileges to root on affected systems.

Sudo (short for “superuser do”) is a command-line utility found in Unix and Linux systems. It lets a permitted user run commands with the security privileges of another user, most commonly the root user (the system’s most powerful administrative account).

Below is the description of the two vulnerabilities:

• CVE-2025-32462 (CVSS score: 2.8) – Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
• CVE-2025-32463 (CVSS score: 9.3) – Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the –chroot option.

The Stratascale Cyber Research Unit (CRU) team discovered both local privilege vulnerabilities.

CVE-2025-32462 is a critical flaw in the Sudo utility, stemming from the --host option introduced in version 1.8.8 in 2013. Though originally meant only for listing rules (sudo -l), it also worked with other commands like sudoedit. In specific enterprise configurations using Host or Host_Alias directives, this oversight lets users run commands with elevated privileges by referencing remote host rules.

“The Stratascale CRU team discovered that since the introduction of the host option in 2013, executing a sudo or sudoedit command with the host option referencing an unrelated remote host rule causes Sudo to treat the rule as valid for the local system. As a result, any command allowed by the remote host rule can be executed on the local machine.” reads the report published by Stratascale.”Even though the production server is explicitly denied for the lowpriv user, root access is achieved by specifying the host option for the development server.”

The issue was addressed with a patch that limits the --host option to listing only.

“Sudo’s -R (–chroot) option is intended to allow the user to run a command with a user-selected root directory if the sudoers file allows it. A change was made in sudo 1.9.14 to resolve paths via chroot() using the user-specified root adirectory while the sudoers file was still being evaluated. It is possible for an attacker to trick sudo into loading an arbitrary shared library by creating an /etc/nsswitch.conf file under the user-specified root directory.” reads the advisory published by Sudo project maintainers. “The change from sudo 1.9.14 has been reverted in sudo 1.9.17p1 and the chroot feature has been marked as deprecated. It will be removed entirely in a future sudo release. Because of the way sudo resolves commands, supporting a user-specified chroot directory is error-prone and this feature does not appear to be widely used.”

On April 1st, 2025, Rich Mirch from Stratascale Cyber Research Unit (CRU) reported the vulnerability to Sudo maintainer Todd Miller. On June 23, 2025 a patch was sent to operating system distros list. Sudo advisory links confirmed.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Sudo)

---

---

Apple’s new Liquid Glass design is noticeable on the Home Screen right when you unlock your iPhone, though the degree of change is customizable. We’ve rounded up everything that’s changed with the ‌iPhone‌’s main interface.

Liquid Glass Design

By default, app icons have a layered look with subtle depth, essentially appearing as multiple sheets of glass stacked on one another to create a glass-like translucent look.

Apple created Liquid Glass app icons for apps like Safari, Maps, Photos, the App Store, Mail and more. Third-party app icons are adopting the same aesthetic, and for apps with a simple design on a solid background, no update is needed. Icons like this already have a Liquid Glass look.

The dock is transparent and blends into the background behind it, and the same goes for the search button. App folders have a frosted glass design that also changes tint based on your wallpaper. When you edit your ‌Home Screen‌, the buttons that you interact with are also transparent.

Interface elements like the dock, folders, and the search button have a lighting effect that changes when you move your ‌iPhone‌, making them look like real glass.

Light, Dark and Tinted Modes

The Liquid Glass effect is apparent in both Light Mode and Dark Mode, with icons continuing to feature the same stacked glass look, just with a lighter or darker background.

Apple technically changed Light Mode to “Default Mode” in the customization settings where you can adjust color (long press on the display and tap on customize).

There are new “Always” and “Auto” toggles for enabling permanent Light or Dark styles or adjusting them based on time, and the Small and Large buttons for changing icon size have been relocated to the upper right of the customization interface.

Tinted mode looks different in iOS 26 than it did in iOS 18. Rather than icons featuring a black background with colored graphics, icons adopt the full color that you select with white graphics in Light Mode. In ‌Dark Mode‌, backgrounds are a much darker shade of the color you choose, but aren’t entirely black.

With Tinted icons, the layered glass look isn’t as obvious, but it’s still present.

Clear Icons

Apple added a “Clear” icon option in ‌iOS 26‌ that’s available alongside Default, Dark, and Tinted. As the name suggests, Clear has a dramatic Liquid Glass look with icons that are entirely transparent. The icons adopt the color of your wallpaper, with white text and designs.

There are Light and Dark options for the Clear setting. Light looks like frosted glass, while Dark looks like tinted glass. If you want to go all-in on Liquid Glass and have your ‌iPhone‌ look notably different, Clear is the option to choose.

Widgets

Widgets have some of the same aesthetic as icons, but on the whole, they don’t look too much different from how they looked in ‌iOS 18‌ in the Default mode.

With the Clear option turned on, widgets are transparent and have a more cohesive design that matches with your wallpaper.

Wallpaper

You can edit your wallpaper directly from the ‌Home Screen‌ in ‌iOS 26‌. Long press on the display and then tap on the new “Edit Wallpaper” option.

The wallpaper interface lets you change the image that you’re using on the ‌Home Screen‌, but it doesn’t affect the Lock Screen. If you have a photo set as a wallpaper, for example, you can change the color, select a gradient, or choose a photo, plus you can turn blurring for images off or on.

Wallpaper takes a starring role in ‌iOS 26‌ because it affects the color of the dock, folders, and icons, depending on your settings.

Control Center

Control Center adopts Liquid Glass, so while the functionality is the same, the general look is different. Compared to the ‌iOS 18‌ Control Center, the ‌iOS 26‌ version has depth for the icons with the Liquid Glass shifting light effect.

The icons are tinted to look like frosted glass, and some of the underlying buttons for adjusting Control Center have been tweaked with the updated look. Icons are a little larger, and some of the bar-shaped icons for volume, brightness, and other settings are rounder.

Other Home Screen Elements

The Dynamic Island, Notification Center, long press gestures, and App Library have not changed beyond aesthetics. App Library folders are translucent and the search bar is rounded, and for widgets, there is a glass look of varying intensity depending on your icon color choice.

App Library icons are also slightly larger, with less padding between them.

Web Apps

When you add a website to your ‌Home Screen‌ in ‌iOS 26‌, it always opens as a web app. Web apps were available on the ‌Home Screen‌ in ‌iOS 18‌, but web developers needed to configure them to operate as web apps.

If websites weren’t configured properly, they would open in Safari when added to the ‌Home Screen‌. Now a website will open as a dedicated web app, even if it hasn’t been explicitly set up to work that way.

There is an Open as Web App option that can be toggled off when adding a website to a ‌Home Screen‌ if you prefer that websites open up in Safari.

Read More

We have a dedicated iOS 26 roundup that goes into detail on all of the new features that are available in the update.

Tired of receiving those spam texts asking you to pay for a toll you supposedly owe? Other spam texts can be just as annoying. How many messages have you received supposedly sent from the U.S. Postal Service about a package that couldn’t be delivered because there wasn’t enough postage paid? One of the hallmarks of a successful spam campaign is a message that forces you to react emotionally instead of logically.

One example would be a text claiming to be from your bank that says it is processing a withdrawal for a large amount of money. Right away, you worry that someone was able to infiltrate your bank account so you respond to the text by revealing personal information, and find that you’ve put yourself in even more financial jeopardy.

Toggling on “Screen Unknown Senders” hides notifications about texts sent from a sender you don’t know and moves such messages to the Unknown Senders list. In a little bit, I will tell you how to access that list. The Filter Spam hides notifications related to texts considered to be spam and moves such messages to the Spam list.

Even though you won’t see notifications about texts received from unknown senders and texts considered to be spam in your main conversations page, these texts can be accessed from individual Unknown Senders and Spam lists. To see those lists, open the Messages app and tap the blue button in the top right-corner. You will see a small menu pop up. To view messages from “Unknown Senders,” press on that listing. You will see all of the texts you received from unknown senders that were hidden by the system. Do the same for “Spam” to see a list of texts considered spam that were placed in the individual Spam list.

Tapping the blue button in the upper-right corner will allow you to access four different and individual lists containing:

• Messages
• Unknown Senders
• Spam
• Recently Deleted messages

Again, this is a feature that most of you will receive with the iOS 26 release in September. Those of us who have installed the iOS 26 Developer beta have this feature now.

Grab Surfshark VPN now at more than 50% off and with 3 extra months for free!

Secure your connection now at a bargain price!

We may earn a commission if you make a purchase

Check Out The Offer

As MCP servers become the backbone of multi-agent AI systems, their design and protection demand first-class architectural status.

As AI agents grow more autonomous and influential in enterprise and operational environments, a new class of infrastructure has emerged as critical: Model Context Protocol (MCP) servers.

MCP servers help support the use of real-time data, enhancing situational awareness. Unlike traditional inference-serving models, where a stateless prompt yields a one-time response, MCP-backed agents often operate autonomously and can take actions based on new information.

As a result, many organizations are exploring MCP servers for the first time. And like any other new technology, there are implementation challenges and security issues that must be addressed.

Implementation Challenges

Implementing MCP servers presents several challenges, particularly in terms of scalability, data consistency, and model interoperability. MCP servers must deliver low-latency context access while handling rapidly evolving memory structures. Additionally, supporting multiple types of AI agents, which are often powered by different models or frameworks, requires standardized context schemas and adaptable APIs. Integration with external data sources and orchestrating context across multi-agent environments further complicates implementation, demanding careful design around performance, reliability, and modularity.

With that said, here are some of the top implementation challenges to address in any MCP implementation.

Real-Time Context Management at Scale: MCP servers must support low-latency access to large volumes of structured and unstructured data, often in a distributed setting. Organizations must decide how to prioritize retrieval performance over consistency and how to orchestrate updates without interrupting ongoing agent workflows.

Cross-Agent and Cross-Domain Complexity: In environments where multiple agents collaborate, such as when a swarm of agents coordinates logistics in real-time, MCP servers must serve context that is both shared and scoped appropriately. Improper isolation could lead to “context bleeding,” where one agent inadvertently accesses or corrupts another’s memory or instructions.

Integration with Heterogeneous AI Models: Many organizations deploy a mix of open-source, proprietary, and fine-tuned foundation models. Ensuring that MCP context formats are interoperable across diverse models requires standardized schemas, adaptable APIs, and often runtime translation layers.

Security Challenges

Giving AI agents the ability to access different data sources and act autonomously obviously introduces potential security problems. Unfortunately, malicious actors are keen to exploit these problems. Therefore, organizations need to be aware of common security issues and how to minimize their impact. To that end, some of the top issues to consider include:

Target-Rich Environment for Attackers: MCP servers house sensitive intellectual property, strategic intent, and behavioral history. A breach could allow attackers to manipulate agent decisions subtly over time, such as altering financial strategies, operational workflows, or even cybersecurity responses. This makes MCPs a prime vector for cyber risk.

Authentication and Authorization Complexity: With agents potentially spawning dynamically, authenticating identities and authorizing access to context becomes nontrivial. Fine-grained policies must distinguish between agents, tasks, users, and even temporal state, all while minimizing performance impact.

Poisoning and Context Drift: Beyond direct breaches, attackers may attempt to poison MCPs by injecting subtly corrupted data, thereby altering an agent’s behavior in ways that are hard to detect. Defending against this requires a mix of provenance tracking, anomaly detection, and possibly cryptographic signing of trusted context updates.

See also: MCP: Enabling the Next Phase of Enterprise AI

Drilling Down into MCP Security Challenges

A recent investigation by Backslash Security revealed a troubling pattern of vulnerabilities in MCP servers. The company’s analysis uncovered that hundreds of MCP instances were misconfigured, leaving them exposed to serious security risks. One of the most alarming findings, dubbed “NeighborJack,” showed that many MCP servers were bound to 0.0.0.0, meaning they were open to any device on the same local network. In environments like coworking spaces or shared office networks, this allowed potential attackers to silently connect to these servers without any authentication, hijacking agent behavior, or accessing sensitive context data.

Compounding this issue, some servers were found to permit the execution of arbitrary operating system commands. Due to poor input sanitization and unsafe subprocess handling, attackers could run dangerous commands, such as deleting files, stealing credentials, or even installing malware. In the worst cases, servers combined both vulnerabilities, allowing a complete remote takeover without any credentials or security checks.

Even more troubling is the potential for context poisoning, where manipulated data, such as phishing emails or malicious documents, could silently enter an agent’s context and influence its reasoning. The report’s findings underscore the urgent need to properly secure MCP servers by restricting access, validating input, and treating these systems as high-risk infrastructure.

The Road Ahead for MCP

Just as databases have become critical infrastructure for enterprise applications, MCPs are becoming foundational for intelligent automation. And with that rise comes the urgent need to treat them as a critical asset to protect, optimize, and audit.

As MCP servers become the backbone of multi-agent AI systems, their design and protection demand first-class architectural status. Organizations must invest in secure memory architectures, implement zero-trust principles across agent interactions, and continuously monitor for anomalies in context.