A lot of people (not least Engadget’s own Sam Rutherford) have been asking Microsoft to make an Xbox-branded handheld for a long time. And it looked for a while like we might be getting exactly that in the not-so distant future. But Microsoft’s priorities have reportedly shifted to improving the widely criticised performance of Windows 11 on existing third-party PC gaming handhelds.

In an exclusive report, Windows Central claims that a dedicated Xbox handheld system, which could have launched in 2027 alongside the successor to the Xbox Series X, isn’t the company’s main area of focus right now, even if it remains keen on the idea. An internally developed handheld, for which Windows Central’s Jez Corden says he has seen a number of different codenames, is not currently being worked on, and he adds that no layoffs have taken place as a result of the strategic shift.

While a native Xbox device might be some way off, the report makes clear that Microsoft is still very much active in the handheld market. A third-party console that it has been working on with ASUS, codenamed "Project Kennan", is still targeting a 2025 launch. It's likely this device, which could be equipped with AMD’s Z2 Extreme chip, will ship with an improved Windows 11 experience better suited to a controller interface.

The software’s awkward integration in early iterations of PC handhelds like the Lenovo Legion Go and ASUS ROG Ally has been a big problem, and it’s partly why people are so excited about the SteamOS experience no longer being exclusive to the Steam Deck. The Lenovo Legion Go S started shipping with SteamOS running out of the box this week, the first handheld not made by Valve to do so.This article originally appeared on Engadget at https://www.engadget.com/gaming/xbox/we-might-not-be-getting-that-handheld-xbox-for-some-time-153844220.html?src=rss

ClaimPix exposed 5.1 million sensitive insurance files on an unsecured public databaseDocuments included personal data, vehicle details, and internal company recordsClaimPix restricted access and pledged code updates after researcher alerted themClaimPix, a company which streamlines car insurance claims, was leaking sensitive customer data on the clearweb, including people’s phone numbers, and email addresses, an expert has warned.Security researcher Jeremiah Fowler, known for hunting down misconfigured and unprotected databases, recently found one such instance containing 5.1 million files, sharing his findings with WebsitePlanet.The archive was 10TB in size, and included documents such as power of attorney, vehicle registration, estimates, repair invoices, and images of damaged vehicles with visible license plates and VIN numbers.ClaimPix leaksThe data also included insurance documents with names, postal addresses, phone numbers, and emails, and registration documents with additional details about vehicles, but also internal documents with terms, fees, and other information that should not be available to the general public.Fowler’s investigation led him to ClaimPix, a Hillside, Illinois technology company providing a self-service photo documentation platform to streamline insurance claims, damage assessments, and remote inspections. It covers multiple industries including insurance, car shipping, and contracting.ClaimPix is a relatively small, privately-held organization, that operates with fewer than 25 employees, and generates roughly $5 million in annual revenue. According to some sources, it processed more than 25,000 claims across the United States, and built partnerships with firms like Bluestar Corporate Relocation.Soon after Fowler reached out, the company restricted the database from public access, and apologized for the mishap.“We have updated policies and our code to address this issue and will be making those changes live later this evening,” ClaimPix told the researcher.A few details remain unknown: we don’t know if ClaimPix operates this archive, or if the work is outsourced to a third party. We also don’t know for how long it remained open, and if any threat actors accessed it before it was locked down. At press time, there was no evidence that the files were stolen or abused in phishing attacks.You might also likeData center firm leaks massive 38GB database containing thousands of personal records onlineTake a look at our guide to the best authenticator appWe've rounded up the best password managers

Marvel has released one final trailer for The Fantastic Four: First StepsThe first MCU Phase 6 movie launches in theaters worldwide on July 25Its latest teaser hasn't eased my worries about the potential fate of one characterThe Fantastic Four: First Steps is officially one month away (at the time of publication) from being released on July 25. And, to celebrate the countdown to launch, Marvel has debuted one final trailer that makes it look even more *ahem* fantastic than I already expected it to be.Unveiled on June 25, the Marvel Cinematic Universe (MCU) movie's new trailer puts the titular team's efforts to save their world from the planet-devouring cosmic entity known as Galactus front and center. Check it out below:Excited though I am for one of 2025's most anticipated new movies, it's only served to heighten my concerns about the possible fate of the group's strongest individual: Sue Storm.Storm, aka The Invisible Woman, is considered to be one of the most powerful beings in Marvel Comics. If she's been adapted as authentically as possible for this flick, she'll be just as potent in the MCU, too.Okay, but why would that mean she could die in First Steps? After all, Vanessa Kirby, who's playing Storm in the MCU, was among the 27-strong initial cast for Avengers: Doomsday, i.e. the next Marvel Phase 6 film that'll arrive after this movie. So, Storm must survive the events of First Steps to appear in that film, right?Anybody else worried about what's going to happen to Sue Storm? (Image credit: Marvel Studios)Not necessarily. Given she's the matriarch of Marvel's First Family and the mother of Franklin Richards (the baby we see in the latest trailer) who, if rumors are to be believed, is who Galactus is after, she'll do what any mom would do and lay her body on the line to save her first-born.It's possible, then, that Storm could sacrifice herself to not only protect Franklin and the rest of the team, but also defeat Galactus – or, at the very least, prevent him from taking Franklin. That could be a good way to set up part of Avengers: Doomsday's story, especially if Robert Downey Jr's Doctor Doom persuades Pedro Pascal's Reed Richards/Mister Fantastic to help him if it means Richards gets his wife back. Hey, stranger things have happened!#TheFantasticFour: First Steps Only in theaters July 25. Get tickets now: https://t.co/qy8qR71712 pic.twitter.com/nlsCfCUTHYJune 25, 2025The Fantastic Four: First Steps' latest teaser is the fourth of its kind to be publicly unveiled ahead of the movie's release.Indeed, First Steps' inaugural trailer achieved lift-off in early February and revealed first-looks at the group, as well as teasing the movie's Big Bad and John Malkovich's mystery character. It was followed by an official trailer in mid-April, which showed off Richards' stretchy powers and The Silver Surfer, and confirmed a big fan theory concerning Sue Storm, too. More recently, another First Steps trailer also verified two of the worst-kept secrets about the superhero flick.The Fantastic Four's latest big-screen reboot – the group's previous films are available to stream on Disney+ – will aim to be Marvel Studios' biggest money-spinner since last year's Deadpool and Wolverine. The pressure is certainly after poor box office runs for Captain America: Brave New World and Thunderbolts*.Ahead of the comic titan's final movie release of 2025, read my ultimate guide on The Fantastic Four: First Steps for more on its cast, story, and potential MCU impact.You might also likeThe Fantastic Four: First Steps' runtime has been revealed – and so have some huge spoilers about the Marvel Phase 6 movie's plotThe Fantastic Four: First Steps is reportedly getting a sequel – and it isn't the only thing I've just learned about my most anticipated Marvel movie of 2025Marvel announces The Fantastic Four: First Steps prequel story as Lego leak reveals first full look at the MCU movie's villain Galactus

YouTube is following in the potentially dangerous steps of Meta and X (formerly Twitter) by relaxing its content moderation policies. New internal training materials viewed by The New York Times instruct moderators to leave videos live if up to half its content violates YouTube's policies, an increase from a quarter of it. The platform introduced the new policy in mid-December, a month after President Trump was re-elected.

The new guidelines reflect what YouTube deems as "public interest." These areas include discussing or debating elections, movements, race, gender, immigration and more. "Recognizing that the definition of 'public interest' is always evolving, we update our guidance for these exceptions to reflect the new types of discussion we see on the platform today," Nicole Bell, a YouTube spokesperson, told The New York Times. "Our goal remains the same: to protect free expression on YouTube while mitigating egregious harm."

The platform has reportedly removed 22 percent more videos due to hateful and abusive content than last year. It's not clear how many videos were reported or would have been removed under the previous guidelines.

YouTube reportedly told moderators to now value keeping content up if it's a debate between freedom of expression and risk. For example, they were shown a video called "RFK Jr. Delivers SLEDGEHAMMER Blows to Gene-Altering JABS" which falsely stated that Covid vaccines can change people's genes. However, YouTube told the moderators that public interest "outweighs the harm risk" and the video should stay up. It has since been removed, though the reason why is unclear.

Other videos allowed to remain online included one with a slur aimed at a transgender person and one in which a commentator discussed a graphic demise for former South Korean president Yoon Suk Yeol.

Engadget has reached out to YouTube for comment.This article originally appeared on Engadget at https://www.engadget.com/entertainment/youtube/youtube-now-allows-more-harmful-misinformation-on-its-platform-133002902.html?src=rss

North Korean hackers have been impersonating job applicants These applicants gain employment in western firmsNew research suggests these campaigns have been going on since 2016

North Korean hackers have been making the headlines recently by fraudulently gaining employment in western firms. Research from Sophos’s Counter Threat Unit (CTU) has been tracking this as the Nickel Tapestry campaign, identifying infrastructure links that suggest money-making schemes have been operating since 2016.The research shows that the campaign is increasingly targeting European and Japanese organizations - probably thanks to increased awareness amongst American companies. These fraudulent job applicants have been observed impersonating Japanese, Vietnamese, and Singaporean professionals, as well as American personas.Previous research has shown that North Korean hackers are posing as software development recruiters to target freelancers, spreading malware through the recruitment scams and stealing cryptocurrency from victims.

Save up to 68% for TechRadar readers! TechRadar editors praise Aura's upfront pricing and simplicity. Aura also includes a password manager, VPN, and antivirus to make its security solution an even more compelling deal.Preferred partner (What does this mean?)View Deal

Dual objectives

The salaries earned by the hackers seem to help fund the government interests of the Democratic People’s Republic of Korea - and record breaking crypto scams have also successfully earned the Lazarus hacking group $1.5 billion. Around $300 million of this was successfully converted by the group into unrecoverable funds from this one incident alone, so these campaigns are lucrative for the state.That’s not all though, as the fraudulent workers have also been observed stealing credentials and exfiltrating data, as well as deliberately gaining employment in industries with sensitive data, like defense, aerospace, and cybersecurity.These roles allow the workers to use remote access software and AI generated writing, CV building, image editing, and video enhancing tools to impersonate legitimate workers and circumvent default systems.Organizations are urged to remain vigilant and to check candidate identities thoroughly, and review their CVs and addresses thoroughly, even suggesting in-person interviews where possible.As remote positions become increasingly popular, companies should “monitor for traditional insider threat activity, suspicious usage of legitimate tools, and impossible travel alerts to detect activity often associated with fraudulent workers” Sophos confirms.

You might also like

Take a look at our picks for the best malware removal software aroundCheck out our choice for best antivirus softwarePowerSchool hit by cyberattack which saw student and teacher data stolen