News

Sophos spots DragonForce ransomware attack leveraging three bugsThe flaws were found in SimpleHelp SMM platformThe victim was a major managed service provider (MSP)The DragonForce ransomware group is chaining multiple SimpleHelp vulnerabilities to breach systems, steal sensitive files, and deploy an encryptor, experts have warned.In a blog post, Sophos MDR researchers noted they were alerted to the incident when a “suspicious installation” of a SimpleHelp installer file was spotted on the system of a Managed Service Provider (MSP).That provider ended up suffering a ransomware infection, but one of its clients was enrolled with the company’s MDR and had XDR endpoint protection deployed, alerting the researchers.White label modelSimpleHelp is a self-hosted remote support and remote access software. In January 2025, it was found to be carrying three vulnerabilities: a multiple path traversal flaw (CVE-2024-57727), an arbitrary file upload vulnerability (CVE-2024-57728), and a privilege escalation flaw (CVE-2024-57726).Now, Sophos says DragonForce hackers are chaining these three to deploy the ransomware.“The installer was pushed via a legitimate SimpleHelp RMM instance, hosted and operated by the MSP for their clients,” the researchers explained.“The attacker also used their access through the MSP’s RMM instance to gather information on multiple customer estates managed by the MSP, including collecting device names and configuration, users, and network connections.”Sophos did not name the victim, or the third party that successfully thwarted the attack.DragonForce has been rather active in recent times. In late April 2025, it was reported the group had introduced a new business model to the ransomware scene, one which involves cooperating with other gangs.Apparently, the group was seen offering a white-label affiliate model, allowing others to use their infrastructure and malware while branding attacks under their own name.With this model, affiliates won't need to manage the infrastructure and DragonForce will take care of negotiation sites, malware development and data leak sites.You might also likeCisco security flaw exploited to build botnet of thousands of devicesTake a look at our guide to the best authenticator appWe've rounded up the best password managers

Some US retailers have reportedly cancelled Nintendo Switch 2 pre-ordersThis allegedly includes Walmart, Target, and GameStopConsider double checking the status of your pre-order if you have placed oneIf you managed to secure a Nintendo Switch 2 pre-order recently, then you might want to check your email inbox as it seems as though some retailers have started cancelling them.As reported by Vice, would-be Nintendo Switch 2 owners have been flooding the r/switch subreddit to complain that their pre-orders of the upcoming Nintendo console have been inexplicably cancelled.The majority of those reporting cancellations seem to have shopped at Walmart. "We're sorry, we had to cancel these items," reads a message in the Walmart app on one posted screenshot.In these instances there seems to be no real explanation as to why the Nintendo Switch 2 pre-order was cancelled, though I suspect that it may be due to stock issues. Some retailers likely banked on having access to much more stock than they do, leading to the need to cancel certain pre-orders.In the comments to these posts, others are reporting cancellations from Target and GameStop. Bear in mind that these cancellations are currently unverified, though it definitely wouldn't hurt to double check your order just in case.If you're unlucky enough to be affected, visit our how to pre-order the Nintendo Switch 2 guide for recommendations on how to get your hands on one.The Nintendo Switch 2 is set to launch on June 5 and demand is likely to be high. According to industry analysts, it could sell 100 million units by the end of 2029 and become the "fast-selling console ever".It costs $449.99 / £395.99 or $499.99 / £429.99 for a bundle that includes a digital copy of Mario Kart World.You might also like...It seems Hellblade 2 is finally getting a physical release to coincide with the PS5 launch this summer if this listing is correctThe Nintendo Switch 2 has been spotted at retailers ahead of its June release - but the reported stock numbers aren't hugeYes, you can use a USB mouse on Nintendo Switch 2, as demonstrated by a Koei Tecmo producer

The One UI 8 beta is live now in certain countriesGalaxy S25 phones are the first devices eligible for itThe software could launch in full in JulyWe were already expecting the beta program for One UI 8 (based on Android 16) to start over the next few days, and Samsung has now announced that it's gone live across several countries, including the US, the UK, Germany, and South Korea.As per the official announcement, the software update brings with it "a new era of software intelligence", including multimodal AI – which essentially means enhancements to the AI tools already on phones with One UI 7.The Samsung Galaxy S25 phones are the first in line for the beta program, and while it may well extend to other devices at a later date, Samsung hasn't said anything about this yet. The company does say that it's worked closely with Google so that the One UI update schedule can get closer to the main Android update schedule.There's some information here about upcoming foldables from Samsung. While they're not mentioned by name, Samsung does say One UI 8 will launch in full alongside "new foldable devices" – and we're expecting the Galaxy Z Fold 7, Galaxy Z Flip 7, and tri-fold Galaxy G Fold to show up sometime in July.How to get involvedBreaking! 🔥The One UI 8 Beta Program is live in the UK and Germany for the Galaxy S25 series! pic.twitter.com/Wf2kOAlc4zMay 28, 2025There are standard disclaimers that apply with any beta: you run this early software at your own risk, and you should expect some bugs and odd behavior in return for being able to test out new features ahead of everyone else.If you're a Galaxy S25 owner and you're in a country where the One UI 8 beta is live, you can get involved by heading to the Samsung Members app on your phone, and signing in with your Samsung account. You should then see an invite to the beta program.Follow that invite and you'll get instructions for installing the beta, which won't cost you anything. Alternatively, you're free to wait until One UI 8 is pushed out officially, most probably in July. Based on everything we've heard so far, Google seems likely to launch Android 16 in June after its own beta test.Among the One UI 8 highlights flagged up by Samsung, we've got support for the Auracast upgrade for multiple Bluetooth connections, an enhanced Quick Share panel, and an update for the Samsung Reminder app that adds "more convenient and intuitive features" for keeping your reminders organized.You might also likeOne UI 8 could include its own Running CoachThe software will roll out to watches tooHere's what to expect from the One UI 8 update

Adidas confirms suffering major cyberattackCustomer data was included in the breachThis is the latest in a number of retail incidents, so customers should be on their guardAdidas has confirmed it is the latest retail giant to fall victim to a cyberattack, with customer data at risk following an ‘unauthorized’ party stealing information from a third-party customer service provider.The affected data primarily consists of contact information of customers who contacted the Adidas help desk - with passwords, credit card information, or any other type of payment data not involved.“Adidas is in the process of informing potentially affected consumers as well as appropriate data protection and law enforcement authorities consistent with applicable law. We remain fully committed to protecting the privacy and security of our consumers, and sincerely regret any inconvenience or concern caused by this incident,” the company confirmed.Save up to 68% on identity theft protection for TechRadar readers! TechRadar editors praise Aura's upfront pricing and simplicity. Aura also includes a password manager, VPN, and antivirus to make its security solution an even more compelling deal.Preferred partner (What does this mean?)View DealA string of attacks2025 has seen a number of high-profile cyberattacks on retailers, with three massive UK retailers targeted. Luxury department store Harrods became the latest victim following attacks on Marks and Spencer and supermarket Co-op - some of which had to take systems offline in order to protect the organisation - although there is no official link between the incidents.British retailers aren’t the only ones at risk either, with fashion brand Dior also suffering an attack that led to customer data being leaked. Any customer who is concerned about their data being accessed by cybercriminals or unauthorised parties should make sure to be vigilant and monitor their accounts. In particular, customers are at risk of identity theft or fraud.“The surge of attacks is driven by a perfect storm of factors: the rapid digitisation of industries, increased reliance on third-party systems, and the rise of financially motivated, highly organised cybercriminal groups,” warns Spencer Starkey, Executive VP of EMEA at SonicWall."In sectors like retail, sprawling digital ecosystems, outdated infrastructure, and fragmented cyber defences create easy entry points. Threat actors are also leveraging increasingly sophisticated social engineering and exploiting identity-based vulnerabilities, as we saw in the recent attacks on Marks & Spencer and the Legal Aid Agency."You might also likeTake a look at our picks for the best malware removal software aroundCheck out our choice for best antivirus softwarePowerSchool hit by cyberattack which saw student and teacher data stolen

Windows 11 has a new feature hidden in testingIt’s the ‘Windows Health and Optimized Experiences’ serviceJudging from clues in the code, this could be about getting Copilot to help achieve better battery longevity with laptopsWindows 11 could be getting a new feature which possibly taps Copilot in order to provide better battery life for laptops, although it should be noted that this is a very wispy, early-stage rumor.The rumor was uncovered in a recent Windows 11 preview, but it’s just the initial groundwork for a potential feature, and it’s far from clear what this capability will be – except that it’s about optimizing Windows 11.Windows Latest picked up on a post on X from regular leaker Albacore, which observed that the Windows 11 preview build that debuted in the Canary (earliest testing) channel this week introduces a new service.The new "Windows Health and Optimized Experiences" (whesvc) service introduced in this week's Windows 11 Canary build is LUA drivenWhy does it feel like every new system component is some sort of awkward glue that wouldn't need to exist if the dev understood existing frameworks? pic.twitter.com/LJvzfbAiBaMay 25, 2025This is the ‘Windows Health and Optimized Experiences’ service, and as Windows Latest pointed out, it contains references that suggest it examines battery-related telemetry.In other words, it looks like this is a feature that could collect data on the power usage of a laptop, and how various factors are putting a strain on the battery (CPU usage, screen brightness and so forth).Now, here’s where the interesting bit comes in – or the jump to a conclusion, depending on which way you look at it. Namely that the code references ‘efficiency Copilot’ which suggests that the AI assistant will somehow be wrapped up in this service.Put two and two together, and what we could be witnessing here is the inception of a new feature that lets Copilot monitor the power efficiency of your laptop, and perhaps adjust settings to achieve the best battery life possible.Analysis: A seemingly good use of Copilot(Image credit: Future)As noted, this is a considerable leap to a conclusion which may be way off the mark, and the service could be for something entirely different. Whatever it is, it will likely be related to battery optimization, mind you – if anything ever comes of it at all (Microsoft could simply scrap the idea before, or during, testing).However, it makes sense to me that this is a useful way in which the intelligence of Copilot could be utilized. Either to get the AI to automatically fine-tune parts of Windows 11 in the background to maintain battery longevity, or to offer the user recommendations of changes to implement to provide better efficiency (possibly based on their type of usage of the notebook).This could extend to power-efficiency on desktop PCs, too, as well as laptops, because it doesn’t hurt to keep a desktop running on as little wattage as necessary. Every bit of saved power adds up, after all, probably to an appreciable amount when it comes to a yearly utility bill.If this feature is indeed inbound, it probably won’t arrive for some time yet. Letting Copilot loose in this way opens up the possibility for mistakes to be made by the AI, so that’d be something Microsoft would need to guard closely against. It’d also point to the safer way of simply delivering suggestions as being the model for this functionality, rather than having Copilot automatically tinkering with Windows 11 in the background.A final thought here: if this does happen, what’s the betting it’ll be for Copilot+ PCs only, and not all Windows 11 laptops? Okay, so we’re getting ahead of ourselves with the speculation here, but Microsoft definitely wants to make a more convincing case for Copilot+ devices, and this could be part of that recipe.You might also like...Windows 11 is getting more AI shortcuts, but is Microsoft in danger of cluttering up the OS with AI creep?Can’t upgrade to Windows 11? This Linux project wants to save your old PC from the scrapheap when Windows 10 support endsBeen hiding from Windows 11 24H2 due to the fuss about all the bugs? There’s nowhere to run now as Microsoft’s made the update compulsory