How weak passwords and other failings led to catastrophic breach of Ascension

Last week, a prominent US senator called on the Federal Trade Commission to investigate Microsoft for cybersecurity negligence over the role it played last year in health giant Ascension’s ransomware breach, which caused life-threatening disruptions at 140 hospitals and put the medical records of 5.6 million patients into the hands of the attackers. Lost in the focus on Microsoft was something as, or more, urgent: never-before-revealed details that now invite scrutiny of Ascension’s own security failings.

In a letter sent last week to FTC Chairman Andrew Ferguson, Sen. Ron Wyden (D-Ore.) said an investigation by his office determined that the hack began in February 2024 with the infection of a contractor’s laptop after they downloaded malware from a link returned by Microsoft’s Bing search engine. The attackers then pivoted from the contractor device to Ascension’s most valuable network asset: the Windows Active Directory, a tool administrators use to create and delete user accounts and manage system privileges to them. Obtaining control of the Active Directory is tantamount to obtaining a master key that will open any door in a restricted building.

Wyden blasted Microsoft for its continued support of its three-decades-old implementation of the Kerberos authentication protocol that uses an insecure cipher and, as the senator noted, exposes customers to precisely the type of breach Ascension suffered. Although modern versions of Active Directory by default will use a more secure authentication mechanism, it will by default fall back to the weaker one in the event a device on the network—including one that has been infected with malware—sends an authentication request that uses it. That enabled the attackers to perform Kerberoasting, a form of attack that Wyden said the attackers used to pivot from the contractor laptop directly to the crown jewel of Ascension’s network security.

Read full article

Comments

Right-wing political violence is more frequent, deadly than left-wing violence

After the Sept. 10, 2025, assassination of conservative political activist Charlie Kirk, President Donald Trump claimed that radical leftist groups foment political violence in the US, and “they should be put in jail.”

“The radical left causes tremendous violence,” he said, asserting that “they seem to do it in a bigger way” than groups on the right.

Top presidential adviser Stephen Miller also weighed in after Kirk’s killing, saying that left-wing political organizations constitute “a vast domestic terror movement.”

Read full article

Comments

These Powerbeats Pro Earbuds Are 60% Off Right Now

We may earn a commission from links on this page. Deal pricing and availability subject to change after time of publication.

Did you know you can customize Google to filter out garbage? Take these steps for better search results, including adding Lifehacker as a preferred source for tech news.


If you’re looking for in-ear earbuds with superior sound quality, long-lasting battery life, and a secure fit, the Beats Powerbeats Pro wireless earbuds are a reliable option, especially for those who are fans of Beats headphones.  Right now, you can get an open-box pair for just $100 on Woot, a 60% discount.

The Powerbeats Pro feature over-ear hooks that have a secure fit and are ideal for vigorous workouts and sports, with users praising how stable they remain during movement. Compatible with the Apple ecosystem, they’re easy to pair with iOS and allow for fast device switching. They also have a strong battery life, offering nine hours of playback for the buds alone. With the included charging case, they last up to 24 hours. Volume can be controlled on the earbuds via physical buttons, as can controls that let you control and skip tracks. The IPX4 rating makes them suitable for rainy days and sweaty workouts. 

The headphones feature an intense bass-heavy punch and bright highs for a sculpted sound signature, notes this PCMag review. This is mostly a pro, but it may make some tracks like orchestral music sound overly boosted—and you can’t tweak EQ on the companion app. And despite their powerful audio performance, they don’t feature Active Noise Cancellation. Still, they’re widely regarded as some of the best premium earbuds, and with their combination of sound, battery life, Apple compatibility, and a secure fit for fitness lovers, the Beats Powerbeats Pro wireless earbuds are a good deal at just $100. 

Our Best Editor-Vetted Tech Deals Right Now

Deals are selected by our commerce team

Orbea reveals the ‘future of eMTB control’ with the world’s first smart dropper post

Orbea has launched new components as part of its RS concept, consisting of the HMI handlebar control for ebikes and its own wired electronic MC10-RS smart dropper. Both run off an ebike’s battery.

The new dropper post runs off the ebike battery and is programmable for custom drops.

Orbea claims the new RS dropper is the lightest 240mm dropper post available, including all mechanical and electric posts.

The Basque brand has also shared details of its new Rise eMTB range, with a full launch slated for 23 September. The new tech will feature as standard on those bikes.

A control ecosystem

Orbea’s new HMI (Human Machine Interface) is part of its RS System, using Shimano firmware. Orbea

Orbea calls the new RS concept products “The future of control”. It’s a new communication ecosystem linking an ebike’s motor, dropper and display, which Orbea is confident will set the standard for the future.

The Basque brand is keen to stress it isn’t launching simply a remote or a dropper. The brand claims it is reimagining the whole system, by both replacing the Shimano EMC100 remote (used on the current Orbea Rise) with a more ergonomic and integrated ebike remote, and integrating a dropper post lever.

Aware that many ebikes have five or more batteries, Orbea set out to design a system around one central ebike battery, with one auxiliary control on the handlebar.

The resulting RS Control System links the motor, dropper, display and handlebar control.

Orbea MC10-RS dropper post

Orbea says the new MC10-RS dropper post is as light as an XC dropper, but as tough as an enduro post. Orbea

Orbea boasts the new dropper is around 100g lighter than a typical cable-actuated dropper post.

The MC10-RS is said to be the world’s first ‘smart’ dropper, meaning the button can be programmed to perform different functions, such as a partial drop, which could be useful on technical climbs.

The post is available with 180, 210 or 240mm of travel, and each can be adjusted by 25mm in intervals of 5mm.

Orbea claims this is the lightest dropper post in its category: as light as an XC dropper, but with the performance of enduro droppers.

Orbea says using the CAN BUS technology means there’s no need for a separate battery or cable: it runs on the main ebike control cable. No additional batteries are required for the dropper or remote because both run off the ebike battery.

Orbea explains its Time Of Flight sensor unlocks the smart features programmable in the Orbea RS app.

The dropper button on the Human Machine Interface (HMI) can be used as a traditional dropper by pressing and holding.

It can also be programmed with smart features. These include using a double-press to activate a 20% drop, which could be useful for technical climbs (the percentage drop is programmable through the app). This tech could have significant real-world implications, changing the way we use dropper posts.

The new design means fewer cables hanging out of the front of the bar than a mechanical dropper. The cable for the ebike remote (with integrated dropper lever) goes from the grip through the handlebar and into the frame. The cable is plug-and-play, with connectors inside the bike linking the dropper and drive unit with the same cable.

Due to not including the weight of the cable or the battery, Orbea is claiming some impressive weights for the post. It says the 180mm MC10-RS (564g) is lighter than a cross-country dropper, such as the Fox Transfer SL 150 (560g).

The MC10-RS dropper is programmable with smart functions. Orbea

Orbea claims the MC10-RS is 140g lighter than wireless droppers, with the 240mm post claimed at 646g. Fox’s Transfer Neo in 200mm (with remote and battery) is said to weigh 786g and the RockShox Reverb AXS in 225mm weighs a claimed 815g for the system.

Orbea also compares the MC10-RS with mechanical dropper posts, stating it’s the lightest 240mm dropper on the market. It claims the MC10-RS is lighter than the mechanical Fox Transfer setup in 240mm size, which it says weighs 862g, and OneUp’s V3 in 240mm, which is said to weigh 733g.

Orbea RS HMI handlebar control

Orbea’s HMI handlebar control combines the electronic dropper post remote, function buttons and displays. Orbea

Orbea’s Human Machine Interface (HMI) handlebar control is designed to be integrated and ergonomic, and function as a control for both the ebike and the dropper post.

The HMI has larger buttons with replaceable touch points and a minimal display. It has a graduated light on the front and five LEDs on top.

This doesn’t look to be particularly intuitive and riders will need to learn what the different colours and lights mean.

Shimano symbiosis

Shimano allowed Orbea to use its firmware to develop the RS system. Orbea

Orbea’s RS concept is: “More bike and less E, with a seamless connection between bike and rider”.

To enable this, Orbea developed its own firmware and battery to work in conjunction with the Shimano motor and handlebar control.

New Orbea Rise coming soon

The Orbea Rise SL M-Ltd will use the new RS System, along with the other three new Rise models. Orbea

This tech will be included as standard on the new Orbea Rise eMTB, with four models launching on 23 September.

These are the LT version in M10 and M-Team specs, and the SL version in M10 and M-Ltd specs.

The bikes will include Shimano Di2, with the shifting powered from the main ebike battery, and use Shimano’s Free Shift technology.

There are two battery sizes on offer: 420Wh and 630Wh. These can be chosen on the Orbea configurator. Both carbon and alloy Rise models will have these options.

Riders can switch between two profiles: RS mode, offering 54Nm, which Orbea says brings a more natural feel, and RS+ mode, unleashing the full 85Nm for maximum power.

Orbea hinted that this may not be the peak power of the drive unit, but declined to reveal any figures.

Orbea estimates using the dropper post and shifting while on a ride will equate to “less than 1% of the main battery’s capacity”.

Meta Confirms Third-party Horizon OS Headsets Are Still Coming – But When?

Meta announced in early 2024 it was planning to release Horizon OS beyond Quest in an apparent bid to become the ‘open’ alternative to Apple’s staunchly monolithic Vision OS. While this year’s big Connect reveals are behind us—with no announcements for new XR headsets to speak of—the company confirmed with Road to VR that partner devices are still coming.

Meta announced in April 2024 it was planning to open its operating system to third-parties, initially tapping three main companies to produce standalone mixed reality headsets running Horizon OS: ASUS, Lenovo, and Microsoft’s Xbox.

Admittedly, the Xbox headsets doesn’t exactly count. From the get-go, it was expected to be a branding deal only, resulting in the June 2025 release of Quest 3S Xbox Edition—essentially a black variant of Quest 3S with matching Elite Strap, Touch Plus controllers, and Xbox gamepad. Notably, Xbox Cloud Gaming is available on everything from Quest 2 and up, bringing nothing substantively new to the table.

Image courtesy Meta, Microsoft

Both Asus and Lenovo devices are expected to be materially different from Quest 3 though, with Asus looking to leverage its Republic of Gamers brand for a “performance headset” and Lenovo developing “mixed reality devices for productivity, learning, and entertainment,” Meta said at the time.

Now, more than a year and a half since their announcement, those devices have yet to materialize. And neither has the expanded list of partner ODMs teased by Meta CEO Mark Zuckerberg.

At Connect, a Meta spokesperson told us that, despite the lack of on-stage update, the company is still actively working with partners to bring Horizon OS to more devices.

Why The Long(er) Wait?

Although the 2025 Holiday Season presents another big moment for Meta to not only onboard more users with its $300 Quest 3S for a second year now, the company seems to be using its release of partner headsets to essentially bridge the gap between device generations. And that gap could be growing.

In June 2024, The Information reported Quest 4 was slated to arrive sometime in 2026, with a more powerful ‘Pro’ style headset set to arrive in 2027. Updated reports from XR analyst Brad Lynch and data miner ‘Luna’ (via Tom’s Guide) from earlier this summer however suggest that Quest 4 may have been delayed to 2027.

Quest 3S (left), Quest 3 (right) | Images courtesy Meta

On the face of things, the wait doesn’t seem uncharacteristically long; Quest 2 was launched in 2020, Quest 3 was released in 2023, and Quest 3S in 2024, leaving a three-year gap until the next-gen Quest.

Still, Quest 3S isn’t a new device generation per se, as it packs in the same chipset as Quest 3, allowing it to play all of the same virtual and mixed reality games, but makes it cheaper by coopting Quest 2’s Fresnel lenses and single 1,832 × 1,920 per-eye resolution LCD panel.

If those additional reports are true, by the time a Quest 4 arrives the current platform generation will be four years old—not long for a console lifecycle, but still the longest in standalone platform’s history.

And keeping users engaged with new headsets that fundamentally don’t rock the boat in how developers create games for the platform may just be how Meta bridges that gap in the near term. Whatever the case, Asus and Lenovo likely don’t want to compete with the next-gen Quest, making it a good bet we’ll see them sooner rather than later.

The post Meta Confirms Third-party Horizon OS Headsets Are Still Coming – But When? appeared first on Road to VR.

Apple’s First OLED MacBook Tipped For A Touchscreen Display And It’s About Time

Apple's First OLED MacBook Tipped For A Touchscreen Display And It's About Time
Apple’s strategic stubbornness to avoid slapping a touchscreen display on its MacBook laptops is coming to an end, and not a moment too soon. At least, that’s the word from Apple analyst Ming-Chi Kuo, who has a positive (though not spotless) track record when it comes to these sort of things. In a post on X, Kuo said Apple is planning on releasing

Flick Shot Rogues is the rare turn-based game that my brain is gelling with

Try as I might, turn-based strategy games don’t usually do it for me. That’s one reason I haven’t yet dipped into Clair Obscur: Expedition 33, many people’s favorite of the year so far. I’d almost always rather be playing a more action-based game. 

But after trying the demo for Flick Shot Rogues on a whim during the most recent Steam Next Fest, the game hasn’t been far from my thoughts. The debut title from Butter By The Fish, a three-person studio in Germany, arrived on Steam this week. Despite the likes of Hollow Knight: Silksong tugging at my attention, I keep turning back to this pirate-themed, turn-based roguelite.

It’s a bit like Subbuteo but with crabs, monkeys and lasers. Each level features several enemies on red discs that you have to take out by flicking your character toward them. One hero causes damage when you clatter into enemies, and another will smash every foe within a certain radius after they stop moving. My favorite, the Froggomancer, collects frogs and uses them to attack goons that they slide by or end up next to.

You can take a couple of characters into each run (and swap to the other one before your turn) and equip each with a relic. These include fire damage, lightning attacks and sticky bombs. Many of these have chain effects, so you can use them to attack multiple bad guys in one turn. Since this is a roguelite, you’ll upgrade your abilities as you go. After the first couple of stages, each level has at least one enemy or boss with a yellow disc. Once you take those out, you beat that wave or level.

There are no prizes for guessing that putting together a strong build is a big part of this game. In one run, I tripled up on a trinket that gave me a 50 percent attack boost (so 150 percent extra damage) when I had full shields, making the first shot of each round all the more important.

Flick Shot Rogues echoes one of my favorite games of 2023, Subpar Pool. I played quite a bit of snooker and pool growing up, and I always enjoyed figuring out the angle and power of my shot — executing it successfully was an entirely different matter. Being able to replicate that here is one reason why I’m digging this game so much.

You can see where your character will end up after hitting a wall or enemy to help you better plan your turn. So, for once in a video game, I’m slowing down and taking more time to actually consider the consequences of my actions before doing anything.

The tactility of slamming my character’s disc into enemies and causing a killer chain reaction helps make Flick Shot Rogues feel more active and engaging to me than many other turn-based games I’ve tried. Each runs can take up to an hour or so, but they don’t feel anything like that long.

I do wish the game did a better job of communicating the enemies’ next moves and how their attacks work. It’s not clear to me, for instance, when a yellow-disc enemy is about to teleport to the other side of a level. You’ll often get an indicator of what your foes are about to do, but not every time. That makes it a little more difficult to decide whether to attack, make a defensive move or reposition for a better angle on my next turn.

But still, I keep coming back for more. Launching a barrage of fire-inducing frogs after squeezing through a narrow gap on a bank shot is pretty fun. I’m looking forward to finding out what other characters, relics and enhancements can do.

This article originally appeared on Engadget at https://www.engadget.com/gaming/flick-shot-rogues-is-the-rare-turn-based-game-that-my-brain-is-gelling-with-133020834.html?src=rss

Meta Unveiled Their New Oakley Vanguard Smart Glasses

We may earn a commission from links on this page.

Along with display-style glasses, Meta’s 2025 line of smart spectacles includes a new version of Oakley Meta glasses. Called Vanguard, these shield-style smart glasses will cost $499 and go on sale Oct. 21.

Vanguards feature a wrap-around frame and a 12MP camera that shoots 3K video from a center-mounted camera that can be operated hands-free. According to Meta, Vanguard glasses have a battery life of up to nine hours of daily use, improved audio, and (of course) integration with Meta’s AI.

At the company’s Meta Connect 2025 keynote, the company also announced partnerships with Garmin and Strava. Garmin users will be able to sync their glasses with Garmin devices to track progress and get performance summaries through the Meta AI app. Strava users will be able to share activities from their glasses and access their workout history. Both devices will allow activity data—distance traveled, pace, heart-rate, and more—to be overlaid on video.

NVIDIA To Invest $5 Billion In Intel To Co-Develop Data Center And PC Chips

NVIDIA To Invest $5 Billion In Intel To Co-Develop Data Center And PC Chips
Big things are happening at Intel these days, as CEO Lip-Bu Tan looks to transform the chip maker’s business model after stumbling a bit in the past few years. The newest development—and one we didn’t see coming—is that NVIDIA is investing $5 billion in Intel’s common stock at a purchase price of $23.28 per share, which suggests a high level

Meta Officially Unveiled Its Rumored Display-Style Ray-Ban Smart Glasses

At the company’s Meta Connect 2025 event yesterday, CEO Mark Zuckerberg officially unveiled its long-rumored and recently leaked display-focused smart glasses. Meta Ray-Ban Display glasses will cost $799 and go on sale on Sept. 30.

The next generation of Meta smart glasses will feature a full-color, monocular, 600 × 600 pixel HUD in one of the lenses that will only be visible to the user. Display smart glasses will also include improved versions of the audio, video, and AI capabilities of non-display Meta glasses.

Meta Ray-Ban Display

Credit: Meta

Meta Ray-Ban Display glasses will be controlled through a wearable device dubbed the “Meta Neural Band,” which allows users to “type” on any surface to send messages as well as control other aspects of the display and smart glasses through small muscle movements.

According to Zuckerberg, users will be able to “silently control their glasses with barely perceptible movements.” An example from the keynote: turning up the volume on music by mimicking the motion of turning a dial. The wristband will have 18 hours of battery life and is IPX7, so it can be fully immersed in water up to one meter.

At the keynote, Zuckerberg showed off texting on the Display glasses, and touted that video calls through WhatsApp would be available on the new glasses (although, notably, the demo didn’t actually work at the event).

Meta Ray-Ban Display glasses will feature a 12MP camera with 3X zoom, and the addition of a display screen gives users a viewfinder and the ability to see pictures and videos you take before you send them or save them.

Gen Z Leads Biggest Drop In FICO Scores Since Financial Crisis

An anonymous reader quotes a report from Bloomberg: Gen Z borrowers took the biggest hit of any age group this year, helping pull overall credit scores lower in the worst year for US consumer credit quality since the global financial crisis roiled the world’s economy. The average FICO score slipped to 715 in April from 717 a year earlier, marking the second consecutive year-over-year drop, according to a report released Tuesday by Fair Isaac Corp. The average score dropped three points to 687 in 2009.

Gen Z borrowers saw the largest drop, not only this year, but of any age group since 2020, with their average score falling three points to 676, the Montana-based creator of the FICO credit score said. FICO scores are a measure of consumer credit risk and are frequently used by US banks to assess whether to provide loans. The scores typically range from 300 to 850. The credit scoring agency attributed the recent overall drop to higher rates of utilization and delinquency, including the resumption of reporting student loan delinquencies — a category that hit a record high of 3.1% of the entire scorable population. […] While the overall average score dropped, the median FICO score continued to rise to 745 from 744 a year ago, indicating that a large drop in scores at the low end dragged down the average.


Read more of this story at Slashdot.

DT Swiss’ latest upgrade takes on pedal-kickback – without forcing you to buy new hubs

DT Swiss has released the DEG DF, an anti-pedal kickback system that can be fitted to all Ratchet DEG-equipped hubs.

The system works by enabling the freehub to rotate within a certain range before engaging, enabling the chain to grow and reducing pedal kickback.

The German brand says it’s easily adjustable, with three setup options: 0º, 10º and 20º, and adds no extra weight to your hubs.

There is also a DEG DF Hybrid option designed to work with the higher torque provided on electric mountain bikes. However, this is limited to 0º and 10º of rotation before the freehub engages.

Both upgrade kits are priced at $176.20 / €129.90, including the tool required to change the rings within the hub.

Smoother suspension

DT Swiss DEG DF upgrade kit in 240 hub
DT Swiss’ DEG DF upgrade kit is compatible with all Ratchet DEG hubs. DT Swiss

There’s always been a battle to minimise pedal kickback on mountain bikes, with high-pivot designs a popular option for frame designers.

However, in recent years, there’s been a shift toward components to combat the issue, with Ochain and e*thirteen’s Sidekick Hub already offering solutions.

DT Swiss DEG DF upgrade kit on table
The DT Swiss DEG DF upgrade kit is available with or without the ratchet tool. DT Swiss

DT Swiss DEG DF offers a simplified solution, needing only the threaded ring and two ratchets to be replaced in an existing Ratchet DEG hub to achieve up to 20º of dead space before the freehub engages.

The brand says there’s no need for extra components, with the wheels’ rotation during freewheeling and the drag from the pressure of the springs on the ratchets forcing the system backwards to reset or disengaged mode.

e*Thirteen Side Kick hub
It differs from e*thirteen’s design, which uses a floating ‘pusher’ to control when the pawls reengage with the ratchet. Nick Clark / Our Media

DT Swiss says the 0º degree option is best for cross-country, the 10º option for all-mountain riding, and the 20º option for enduro and downhill applications.

The system comes with a new 90t ratchet for the DEG DF that has a 4º engagement angle, and a 60t ratchet on the DEG DF Hybrid that has a 6º engagement angle.

The brand says it’s easy to set up the system and replace the ratchets for tuning.

What is pedal kickback?

Male mountain biker in red top riding the Atherton A.130.3 mountain bike
Pedal kickback can make your suspension less effective. Scott Windsor / Our Media

Most full-suspension bikes are designed with anti-squat in their suspension design to give better climbing efficiency, but this causes chain growth when the bike is compressed, and the cassette and chainring move away from each other.

If the cassette can’t rotate forwards because the rear wheel is locked up, the crank will be forced to rotate backwards – hence the term, pedal kickback.

Not only is this unsettling to the ride, but it can also cause the suspension to become harsh and lose sensitivity, meaning there’s less grip on offer.

No Nissan Ariya for model-year 2026 as automaker cancels imports

Last week we drove the new Nissan Leaf, an inexpensive compact electric vehicle. Now equipped with things like active battery thermal management, the new Leaf is actually Nissan’s second modern EV, after the debut a couple of years ago of the Ariya SUV. But if you want an Ariya, you ought to hurry—the model has been cut from Nissan USA’s offerings for model-year 2026, according to a report in Automotive News.

According to a letter sent by Nissan to its dealers, obtained by the trade publication, “This decision enables the company to reallocate resources and optimize its EV portfolio as the automotive landscape continues to evolve.” Whether the Ariya returns for MY27 is unclear and probably depends both on the state of the US EV market by then as well as Nissan’s own finances.

The blame? The 15 percent import tariff levied by President Trump, which is one straw too many for the financially beleaguered automaker, as the Ariya is built in Japan at Nissan’s Tochigi plant and must be shipped across the ocean to fulfill US orders.

Read full article

Comments