News

The UK’s Legal Aid Agency is among the latest high profile examples of a cyber-attack resulting in a significant data breach. The incident is all the more worrying because of the sensitive nature of the data accessed in the attack.The Ministry of Justice reported in May 2025 that a “significant amount of personal data” of people who applied online to the Legal Aid Agency since 2010, including criminal records, was accessed and downloaded in a cyber-attack in April 2025.Media reports on the incident suggest that more than two million pieces of information were taken, including details of domestic abuse victims, people involved in family cases and those facing criminal prosecution.The Ministry of Justice confirmed that the data may have included addresses of applicants, dates of birth, national ID numbers, criminal history, employment and financial data such as debts and payments.The recurring problem with data beaches of highly sensitive and special category data is not just the immediate exposure and vulnerabilities caused, it is the unknown future illicit uses of the stolen data, which can be surprising and very harmful to all involved.Evolving cyber security threat landscapeThe cybersecurity threat landscape is rapidly evolving, shaped by technological innovation, global instability and sometimes opportunism by cybercriminals.The proliferation of AI, including Generative AI, AI bots, and co-pilots, is expanding the potential for digital attacks. The acceleration of AI adoption has outpaced governance frameworks, widening knowledge, solutions, and resilience gaps. In addition, cybercriminals are leveraging Generative AI to enhance social engineering attacks, making them more effective and harder to detect.Geopolitical instability is also a rising threat. State-linked Advanced Persistent Threat (APT) groups from Russia, China, Iran, and North Korea are actively engaging in cyberwarfare, targeting critical national infrastructure with sophisticated campaigns.These groups exploit supply chain vulnerabilities to maximize impact, often driven by political and economic motivations. For organizations operating globally, real-time threat intelligence and geopolitical awareness are essential, especially when working with unfamiliar partners or entering new markets.Cloud infrastructure is under growing pressure as threat actors refine their tactics. CrowdStrike reported a 75% year-on-year rise in cloud intrusions, with attackers increasingly using stealthy, staged operations to establish footholds and move laterally across hybrid IT environments.Supply chain insecurity remains a persistent concern. The 2024 Microsoft–CrowdStrike incident, which triggered one of the largest global IT outages to date, demonstrated the systemic risk of over-reliance on a few key technology providers. The fallout, which impacted a range of sectors from aviation to healthcare, underscored the urgent need to audit, monitor, and diversify supply chains, as well as share breach intelligence more effectively.On a more promising note, AI is also proving to be a valuable defense tool. It enhances anomaly detection, vulnerability classification, automated patching, and configuration management. Large Language Models (LLMs) are augmenting the threat intelligence lifecycle, from analyzing attacker behavior to powering deception technologies like honeypots. As AI becomes more embedded in cyber defense strategies, it offers the potential for faster, smarter, and more adaptive responses to emerging threats.Managing cyber risksCyberattacks of all kinds are rising. Any type of organization can be a victim. The cyberattack on the Legal Aid Agency serves as a stark reminder of the urgent need for a holistic and proactive approach to cyber security.When high profile cyberattacks occur, leaders often seek reassurance. They often request information about what can be done first or quickly. The urgent response is to go back to basics: check key data protection practices, review GDPR compliance, strengthen basic information security safeguards and encourage important suppliers to be on high alert. From a legal and operational standpoint, organizations, particularly those handling sensitive information and special category data, should prioritize the following measures:Engagement at board level: Cybersecurity is no longer just an IT issue. It is a board-level responsibility. Effective resilience depends on cross-functional collaboration among leadership, cybersecurity specialists, legal advisors, internal auditors, HR, digital forensics experts, and crisis communication teams. A multi-disciplinary response capability is essential to manage both the technical, legal and reputational dimensions of a breach.Continuous preparedness: To ensure a robust security architecture, organizations must look beyond having the right tools in place. It is vital to implement vulnerability management on a continuous basis, with timely patching protocols and a focus on regular training of employees.Data Breach Practice and Preparedness: Practice makes perfect, and simulated incident response exercises, including table-top scenarios, are critical in ensuring readiness for data breaches. It is also advisable for organizations to have a learning and development mindset and extract lessons from near-misses and close calls, rather than seeking to brush these under the carpet and quickly move on.Due diligence for AI integration: Generative AI is evolving apace, and it can be tempting for organizations to rush in to deploy it. However, innovation should work in partnership with security. Due diligence is vital. Before integrating new AI platforms or other emerging technologies, organizations should conduct comprehensive assessments of their security credentials and weigh up any additional cyber security risk exposure these systems might introduce.Third-party risk management: Cyber resilience does not end at the network perimeter. Organizations must map, monitor, and regularly audit their supply chains to identify vulnerabilities. Where high-risk vendors are identified, mitigation actions should be taken swiftly. Mitigation may include stopping working with a supplier or limiting the amount of work with them. Every business should have a strong third-party risk management framework as a cornerstone in their cybersecurity environment.Critical National Infrastructure cyberattacks like those affecting The Legal Aid Agency reminds us that cyber resilience requires ongoing commitment. Cybersecurity must be embedded across all levels of an organization, including boards, leadership teams, mission critical data sets to supply chain management.We've featured the best encryption software.This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

You likely have a million things to take with you when you leave the house each day — phone, wallet, keys and much more. Keeping track of it all can be tough, but a Bluetooth tracker can help by monitoring the location of at least a few of your most important items.

Right now, one of our favorites is on sale for a near record-low price. The Samsung Galaxy SmartTag 2 is down to just $19 a pop on Amazon, a 38-percent discount from its standard price. We've seen it slightly cheaper recently, but only by a couple of dollars. The main catch here is that only the white option has this steep of a discount. If you want more than one, consider the four-pack option, on sale for $88.

The Samsung Galaxy SmartTag 2 is a solid purchase due to features like being IP67-rated water- and dust-resistant, a sizeable keychain hoop and over 16 months of battery life. It also emits a ring louder than competitors like the AirTag or Tile. The only snag is that you must have a Samsung device in order to use it.

Follow @EngadgetDeals on X for the latest tech deals and buying advice.This article originally appeared on Engadget at https://www.engadget.com/deals/samsung-smarttag-2-trackers-are-38-percent-off-ahead-of-prime-day-130753759.html?src=rss

Nvidia could have a new spin on its RTX 5090 graphics cardThis is rumored to be a new version of the RTX 5090 D for ChinaA leaker says it'll pack a 'surprise', but the truth could be more mundaneNvidia is rumored to be planning a new variant on its Blackwell flagship graphics card, potentially an RTX 5090 DD model – and it could come with a 'surprise' according to one leaker.Tom's Hardware flagged up two separate mentions of this potential GPU (add seasoning with all this) on X, the first of which came from MEGAsizeGPU, who mentioned the RTX 5090 DD and how it will be for China only.5090 DDGB202-240PG145 SKU 40*for China market onlyJune 18, 2025So, the theory is that this is a follow-up to the RTX 5090 D (single D, not double D) for China, a different spin on the standard Blackwell flagship which was produced for that country to get around US export regulations.Except the goalposts on those restrictions have been moved, and now rule out the RTX 5090 D itself as too powerful (for AI usage) to be shipped to China. It looks like the idea now is to further cut down the graphics card to again make it feasible to supply to Asia, and call it the RTX 5090 DD.The purported cut-down specs were supplied by another regular on the GPU leaking scene on X, Kopite7kimi, as you can see below.RTX 5090 DD?PG145-SKU40GB202-240-K*-A121760FP32384-bit GDDR7 24G 28Gbps575Wand there's a surprise.June 18, 2025The key changes are a slightly lower-tier GPU chip (GB202-240, rather than GB202-250 as seen in the original 5090 D), and the video RAM has been dropped to 24GB with a narrower 384-bit memory bus.That means a 25% hit on the memory bandwidth compared to the RTX 5090 D, but the core count and TDP remain the same (the latter is interesting, and I'll return to why shortly).Tom's Hardware takes it as read that these two rumors are fully aligned – and they are from what we can see spec-wise – but note that Kopite7kimi has a question mark heading up their post on X, which begins: 'RTX 5090 DD?'However, this is likely referring to questioning the name, and whether this will really be called the RTX 5090 DD, rather than doubting whether this is actually a new spin on a China-only graphics card. Although we should never take anything for granted from the rumor mill, and maybe the latter could be the case.At any rate, the most intriguing bit here is Kopite7kimi's mention of a "surprise" from Nvidia with this GPU.Analysis: Let the guessing games begin(Image credit: Future / John Loeffler)When it comes to the name, yes, making it 'DD' sounds rather implausible, but remember – this is the company that brought you the RTX 4070 Ti Super graphics cards (and similarly clunky bouts of unimaginativeness in the past besides).As mentioned, the surprise is what we really want to know about, and Kopite7kimi doesn't elaborate on what that might be with any kind of a vague hint, even. So, we're left to guess on that score.Tom's Hardware theorizes that the surprise could be further cut-backs to the AI powers of the graphics card delivered via the firmware, and that sounds entirely possible. But equally it sounds entirely dull, and the way the leaker teases that "there's a surprise" feels like it's phrased to stoke a bit of excitement here. A minor chop to AI capabilities hardly qualifies in that respect, but what else could Nvidia possibly have up its sleeve here?For me, this hints that Nvidia is planning a move like cutting the price of the RTX 5090 DD. Or perhaps, most excitingly, offering it outside of China, too? Yeah, okay, that seems unlikely (although as noted, with that question mark, it could be that Kopite7kimi isn't fully sure this is the mentioned Chinese variant). Perhaps more realistically, we could be looking at a fair old bump in clock speeds (hence the TDP staying the same, with the spec being cut down in some key areas).Hopefully, we'll find out soon enough what Nvidia might be up to here, if anything, as this could all turn out to be so much smoke from the rumor mill (or plans from Team Green that never come to fruition).You might also likeAMD looks like it’s losing the GPU war based on new Steam survey, with Nvidia’s RTX 5060 Ti proving itself to be popular alreadyRumored Nvidia RTX 5080 Super specs disappoint some gamers, but I don’t think there’s anything to worry about with this GPUAMD could be working on a faster RX 9070 Extreme graphics card

Prime Day 2025 is coming soon on July 8-11, but you don't have to wait to grab good tech deals — and that goes for everyone, not just Prime members. Early deals have already started popping up on Amazon, and one of the best at the moment is on an Engadget-approved air purifier. The Levoit Core 400S air purifier is on sale for $185, which is $37 off its usual price and not too far off of the lowest price we've seen.

The Levoit Core 400S is our current pick for the best air purifier overall. Sure, it might not have the prettiest design of all the options we have tested and the companion app might have a little too much going on. But the Core 400S does its job and does it well.

This smart air purifier is slated to clean the atmosphere in spaces of up to 1,733 square feet in as little as one hour. The Core 400S has a cylindrical shape with vents at the top and a touch display that shows air quality readings. You'll be able to get a sense of the current air quality in your space at a glance with a color-changing ring that will light up in blue, green, orange or red. The 360-degree filtration system is said to be capable of capturing over 99.9 percent of pollutants as small as 0.3 microns, such as dust, pet dander and pollen.

There is an auto mode that should suffice for maintaining air quality, but the Core 400S is compatible with Alexa and Google Assistant voice controls too. The fan isn't too loud, even when it's operating at maximum speed — the volume topped out at 62dB in our testing. Meanwhile, at $50 each, the air filter replacements aren't too expensive compared with those from many of Levoit's competitors.This article originally appeared on Engadget at https://www.engadget.com/deals/early-prime-day-deal-our-favorite-air-purifier-is-37-off-143224190.html?src=rss

Summer Game Fest might be in the rear-view mirror, but the gaming showcases are still coming. Capcom has announced that its next Spotlight livestream will take place on June 26. Planned to last around 40 minutes, the showcase will focus on upcoming titles Pragmata and Resident Evil Requiem, which was announced during Summer Game Fest proper earlier this month. As well as news, the event will include developer interviews.

Capcom is also promoting Monster Hunter Wilds and Street Fighter 6 as featured games, so expect new information on updates or fresh content for those existing titles in the showcase. We already know that the Title 2 Update for Monster Hunter Wilds is due at the end of the month, which will add new monsters and a new seasonal event.

The last Capcom Spotlight took place in February, where Capcom announced the remaster of Onimusha 2: Samurai’s Destiny. We wouldn’t expect any new game announcements this time, but it could happen. More exciting is the possibility of new footage of Resident Evil Requiem, which was arguably the biggest announcement of SGF 2025. We know we’ll be playing as a new character, named Grace Ashcroft, and that you’ll be able to choose between a first and third-person perspective throughout the game.

Engadget’s Mat Smith got to play Pragmata at SGF, where he called it a “satisfying sci-fi shooter” and came away impressed by the elegance of its dual-protagonist gameplay. Capcom first announced the game way back in 2020, so it’s a long time coming.

The next Capcom Spotlight livestream will kick off on June 26 at 6pm ET.This article originally appeared on Engadget at https://www.engadget.com/gaming/resident-evil-requiem-headlines-the-next-capcom-spotlight-livestream-143001469.html?src=rss