News

Asus released a patch for CVE-2025-3464, a high-severity authentication bypass flawThe issue affects Armoury Crate, a centralized hub for managing ASUS and ROG hardwareThe flaw could possibly lead to full device takeoverAsus says it has fixed a high-severity vulnerability that could have allowed threat actors to bypass authentication requirements and obtain SYSTEM privileges on a Windows device.Recently, a security researcher from Cisco Talos discovered an Armoury Crate kernel-mode driver doesn’t rely on proper OS-level checks, but instead authenticates requests using a hardcoded SHA-256 hash of AsusCertServices.exe and a PID allowlist.This means that a threat actor can create a hard link from a benign executable to a placeholder file, launch the app, and then swap the link to point to the trusted Asus binary. When the driver verifies the hash, it will recognize a trusted signature, even though the attacker’s process is now using that context.Fixed with updatesThe end result is unauthorized driver access, which could lead to full device compromise. The good news is that in order to abuse this vulnerability, the threat actor must obtain system access beforehand (either through stolen/purchased credentials, or a backdoor).The vulnerability was found in Armoury Crate, an Asus application commonly pre-installed on ROG and TUF laptops and desktops.It serves as a centralized hub for managing Asus and ROG hardware, including RGB lighting, fan curves, and the performance of different peripherals - and can also be used to manage driver and firmware updates.The issue is now tracked as CVE-2025-3464, and has a severity score of 8.4/10 (high), as per NVD.All versions between 5.9.9.0 and 6.1.18.0 were said to be vulnerable, and to secure their devices, users should update to the newest version of Armoury Crate: That can be done by navigating to Settings > Update Center > Check for Updates > Update.Asus said it found no evidence that the flaw is being abused in the wild, but still “strongly recommends” users update their installations as soon as possible.Via BleepingComputerYou might also likeHaving problems with your Asus ROG Ally? A new patch for Armoury Crate might have fixed some issues... but not all of themTake a look at our guide to the best authenticator appWe've rounded up the best password managers

You can now create ChatGPT images in WhatsAppAsk it to create any image you wantUpload an image and ask it to modify itYou can now create and modify images using ChatGPT’s AI chops inside WhatsApp without having to use the ChatGPT app at all.WhatsApp, the MetaAI-owned messaging app, caused more than a little controversy recently when it added a new Meta AI button to its interface that was impossible to remove.The new button caused outrage from WhatsApp users, many of whom felt like they were being forced to use AI.“Why do they have to slap that stuff on everything?” said Reddit user Special-Oil-7447. “I'm in the EU and it’s just been dumped on me. I am going to uninstall WhatsApp today after I have loaded Signal. Vote with your feet people”, said user BrainCell 7.But Meta has not backed down, and the unpopular MetaAI button remains.Tapping it will initiate a conversation with the MetaAI chatbot, however, it's not the only AI chatbot you can use with WhatsApp.Accessing ChatGPTIf you’re a fan of AI, then there’s nothing stopping you from chatting using ChatGPT in WhatsApp so long as you know how, and what’s more, you can now use ChatGPT to generate AI images right inside WhatsApp. You can even upload a picture and get the AI to edit it, all from within WhatsApp.It’s easy. All you need to do is set up ChatGPT as one of your contacts in WhatsApp - as if it’s a person.Just add ChatGPT as a contact with the number 1-800-CHATGPT (that’s 1-800-242-8478). If you’re outside of the US, then you’ll need to add them as a US contact, which I've written about before.Now you can chat with ChatGPT as if it were one of your friends. When you start a chat with ChatGPT, you can simply say “Create an image of...” and add some details. Sit back and let ChatGPT do its AI magic.To upload an image that you want ChatGPT to edit, tap the + button, then Photos, and upload the image.ChatGPT will ask you what you would like to do with the image, and you can just use natural language to describe what you want to do.If you reach your limit for a free ChatGPT account, but you’ve got a Plus account, then WhatsApp will throw up a link so you can link to your Plus account and get more images. It couldn’t be simpler.You might also like5 of the most heartwarming uses of AI we’ve seen so farThis restoration of the world’s oldest photograph shows the difference between AI slop and ChatGPT expertiseI asked ChatGPT to help me revolutionize my productivity, and it gave me these 5 genius AI prompt ideas

Peak Design is building on the success of its innovative Travel Tripod. The photography accessory maker is launching a new Pro Tripod on Kickstarter. The latest model comes in three flavors: Pro Lite, Pro and Pro Tall. As you might expect, their prices dwarf that of the (already expensive) Travel Tripod.

The Pro Tripod is scaled up for greater stiffness and maximum height. It has stronger legs, an all-CNC-machined hub and a flanged center column. This results in double the weight capacity of the Travel Tripod, which supports 20 lbs. The new Pro Tripod and Pro Tall Tripod each support 40 lbs. Meanwhile, the Pro Lite Tripod handles a bit less at 35 lbs.

Peak Design

When packed, the Pro models take up more space than the Travel model, but they'll still easily fit in a backpack. The Pro and Pro Lite Tripods measure just under 20 inches. The Pro Tall Tripod folds down to 22.9 inches. The Pro and Pro Tall models weigh just over 4 lbs, while the Pro Lite weighs 3.7 lbs.

Peak Design is also selling new accessories for those with the most demanding needs. The tilt mod will be essential for those who need the smoothest video. It converts the Pro line's standard ball head into a fluid pan-and-tilt one. The Pro Leveling Base enables quick leveling on uneven terrain. And the Pro Spike Feet will help the tripod grip slippery or loose ground.

Peak Design

If you thought the Travel Tripod was expensive, well, brace yourself. The Pro Lite Tripod is estimated to cost $800. The Pro Tripod is expected to cost $900. And the Pro Tall Tripod will retail for approximately $1,000. They're "estimated" prices since the products are only now arriving on Kickstarter. But, as is often the case with crowdfunding, pledging early will get you a discount.

If you're aghast at the pricing, well, that's entirely understandable. But consider that Peak Design is truly targeting professionals here. It isn't uncommon to see tripods from brands like RRS and Gitzo crack the $1,000 barrier. Engadget plans to review the Pro Tripod to see how it stands up (sorry) to pro-level needs.

The Pro Lite Tripod is expected to ship in October. Meanwhile, the company is aiming for February 2026 for the Pro and Pro Tall models. You can learn more in the video below and on the Kickstarter page.

This article originally appeared on Engadget at https://www.engadget.com/cameras/peak-designs-new-tripods-take-aim-at-the-professional-set-165843064.html?src=rss

Keyview 13" Touch is a mechanical keyboard with a built-in 13-inch touchscreenIt works with phones, tablets, laptops, desktops, and even game consolesThere’s no battery or touchpad unfortunately, so you'll need to provide power and a mouseThe Keyview 13" Touch, from Aura Displays, is a compact 82-key mechanical keyboard (83 keys for the UK version) with a fun, and useful twist - it has an integrated 13-inch touchscreen attached.This isn’t the first product of its kind we’ve seen - we’ve previously covered the Maxfree K3 and the Thanko mechanical keyboard with a 10-inch monitor, both of which offer the same blend of keyboard and display in one unit.We’ve also encountered various DIY projects that produced laptops without displays, as well as notebook docking stations with built-in screens, but few of those have been as polished or feature-packed as this.RGB lighting and custom shortcutsThe Keyview 13" Touch's screen folds from 0 to 90 degrees and delivers a 1920 x 720 matte IPS display. It supports full 10-point multitouch and has a wide 178° viewing angle, making it usable for video, docs, or just as a second screen.The keyboard itself uses yellow mechanical switches and PBT keycaps. It’s fully customizable, with hot-swappable keys, RGB lighting, and support for custom shortcuts.The device includes USB-C, HDMI, two USB 3.0 ports, an SD/TF slot, and an M2 SSD bay for internal storage expansion. It also supports 60W PD fast charging.It’s compatible with macOS, Windows, Android, Linux, and ChromeOS. That means it works with laptops, desktops, full-featured USB-C phones like the Galaxy line, latest iPhones, tablets, and even game consoles.The case is made from aluminum alloy, ABS, and PC plastic. It’s solid but weighs 2.12kg, which makes it more of a backpack item than something pocketable.There’s also a built-in speaker, rated at 1W. That's nothing special, but it will be fine for notifications or quick audio tasks.There are a couple of bigger drawbacks, though - there’s no battery for starters, so you’ll need to plug it in every time you want to use it. And there’s no touchpad either, so unless your device is touch-capable, you’ll want to bring a mouse too.Still, for a certain type of user, especially those wanting to turn their phone into a capable workstation, it’s an unusual and potentially useful option. You can buy it direct from Aura now for $399.00, 20% off its usual MSRP of $499.You may also likeCheck out our list of the best mobile workstations for any budgetAnd these are the best mini PCs you can buy right nowMinisforum's NAS packs a Ryzen AI HX 370, up to 96GB RAM and 154TB storage