Insomniac Games hackers leak 1.3 million files after demanding $2 million ransom

On December 12, Rhysida, a ransomware group, announced it had taken 1.67 terabytes of data — over 1.3 million files — from Sony's Insomniac Games and requested $2 million. Now, the one-week deadline for Insomniac Games to pay Rhysida has passed, and the group has made good on its threat to release the stolen information, Cyber Daily reports.

The data includes internal HR documents, screenshots of employees' Slack conversations, and more, but the main focus is the yet-to-be-released Wolverine video game. The released files contain details about level design, characters and actual screenshots from the game. There's also a signed publishing agreement between Sony and Marvel that lays out three upcoming X-Men games, the first being Wolverine, with the other two still unnamed. However, it details that Sony — which plans to spend $120 million per game — must release Wolverine by September 1, 2025, with the others due by the end of 2029 and 2033, respectively. 

Rhysida claims that it took the group only 20 to 25 minutes to get the domain administrator and that money was their sole motivation. "We knew that developers making games like this would be an easy target," a Rhysida spokesperson told Cyber Daily. "Sony has launched an investigation, but it would be better in the backyard."

Notably, Rhysida's initial ransom notice allowed anyone to bid on the data, not just Insomniac Games, and it appears some of it was bought. The ransomware group stated that any unsold data was released — but only 98 percent of stolen information is publicly available. Rhysida stipulated that any data purchased must not be resold, but who knows if the new owners will follow that rule.

Rhysida only targeted Insomniac Games within Sony, but in May, a separate attack gained access to 6,800 current and former employees' personal data. The attack, which ransomware group CLOP took credit for, became public knowledge in October.

This article originally appeared on Engadget at https://www.engadget.com/insomniac-games-hackers-leak-13-million-files-after-demanding-2-million-ransom-102134429.html?src=rss

Insomniac Games hackers leak 1.3 million files after demanding $2 million ransom

On December 12, Rhysida, a ransomware group, announced it had taken 1.67 terabytes of data — over 1.3 million files — from Sony's Insomniac Games and requested $2 million. Now, the one-week deadline for Insomniac Games to pay Rhysida has passed, and the group has made good on its threat to release the stolen information, Cyber Daily reports.

The data includes internal HR documents, screenshots of employees' Slack conversations, and more, but the main focus is the yet-to-be-released Wolverine video game. The released files contain details about level design, characters and actual screenshots from the game. There's also a signed publishing agreement between Sony and Marvel that lays out three upcoming X-Men games, the first being Wolverine, with the other two still unnamed. However, it details that Sony — which plans to spend $120 million per game — must release Wolverine by September 1, 2025, with the others due by the end of 2029 and 2033, respectively. 

Rhysida claims that it took the group only 20 to 25 minutes to get the domain administrator and that money was their sole motivation. "We knew that developers making games like this would be an easy target," a Rhysida spokesperson told Cyber Daily. "Sony has launched an investigation, but it would be better in the backyard."

Notably, Rhysida's initial ransom notice allowed anyone to bid on the data, not just Insomniac Games, and it appears some of it was bought. The ransomware group stated that any unsold data was released — but only 98 percent of stolen information is publicly available. Rhysida stipulated that any data purchased must not be resold, but who knows if the new owners will follow that rule.

Rhysida only targeted Insomniac Games within Sony, but in May, a separate attack gained access to 6,800 current and former employees' personal data. The attack, which ransomware group CLOP took credit for, became public knowledge in October.

This article originally appeared on Engadget at https://www.engadget.com/insomniac-games-hackers-leak-13-million-files-after-demanding-2-million-ransom-102134429.html?src=rss

Hackers release footage from upcoming Wolverine game and 1.3 million other stolen files

On December 12, Rhysida, a ransomware group, announced it had taken 1.67 terabytes of data — over 1.3 million files — from Sony's Insomniac Games and requested $2 million. Now, the one-week deadline for Insomniac Games to pay Rhysida has passed, and the group has made good on its threat to release the stolen information, Cyber Daily reports.

The data includes internal HR documents, screenshots of employees' Slack conversations, and more, but the main focus is the yet-to-be-released Wolverine video game. The released files contain details about level design, characters and actual screenshots from the game. There's also a signed publishing agreement between Sony and Marvel that lays out three upcoming X-Men games, the first being Wolverine, with the other two still unnamed. However, it details that Sony — which plans to spend $120 million per game — must release Wolverine by September 1, 2025, with the others due by the end of 2029 and 2033, respectively. 

Rhysida claims that it took the group only 20 to 25 minutes to get the domain administrator and that money was their sole motivation. "We knew that developers making games like this would be an easy target," a Rhysida spokesperson told Cyber Daily. "Sony has launched an investigation, but it would be better in the backyard."

Notably, Rhysida's initial ransom notice allowed anyone to bid on the data, not just Insomniac Games, and it appears some of it was bought. The ransomware group stated that any unsold data was released — but only 98 percent of stolen information is publicly available. Rhysida stipulated that any data purchased must not be resold, but who knows if the new owners will follow that rule.

Rhysida only targeted Insomniac Games within Sony, but in May, a separate attack gained access to 6,800 current and former employees' personal data. The attack, which ransomware group CLOP took credit for, became public knowledge in October.

This article originally appeared on Engadget at https://www.engadget.com/insomniac-games-hackers-leak-13-million-files-after-demanding-2-million-ransom-102134429.html?src=rss

TikTok upgrades its app experience for tablets and foldables

You can now mindlessly scroll your TikTok’s ‘for you page’ on larger screens and foldable devices. The new update will be available for users worldwide and on devices like the iPad or the various foldable Android phones out there. TikTok, which is traditionally mobile-forward, said it will deliver a clear video feed of content on bigger screens with “enhanced clarity.”

The top and bottom of screens that stream TikTok videos will have a navigation bar that makes it easier to access tabs and featured videos. With this update, clips can also be watched in landscape orientation. This creates new opportunities for video creators to generate content in a horizontal format after years of a vertical-only.

TikTok also said it is going to continue experimenting with features like Topic Feeds, which would allow users to explore videos in specific categories like gaming, food or fashion. The platform has been exploring new ways to deliver content to users and it has been quietly testing the idea of an AI-powered chatbot that can recommend videos to users. While it’s still the leading app for short-form videos, creating unique ways to deliver content to its users can help set the social media company itself apart from competitors in the space, like Instagram’s Reels and YouTube Shorts.

This article originally appeared on Engadget at https://www.engadget.com/tiktok-upgrades-its-app-experience-for-tablets-and-foldables-172456485.html?src=rss

Flipboard is moving to the fediverse

Flipboard is the latest mainstream app to officially join the fediverse, the collection of decentralized services that run on the ActivityPub protocol. The news reading app, which has been experimenting with Mastodon for nearly a year, now plans to become fully interoperable with Mastodon and the rest of the fediverse.

The news reading app is starting with the accounts of about two dozen publishers, including Polygon, Medium, Semafor, Kotaku and Mental Floss, whose Flipboard content will be discoverable across the fediverse. By next month, the company expects all public Flipboard accounts will be federated, meaning anyone on an ActivityPub-powered app will be able to view their posts and interact with them.

And beginning in April, according to Flipboard CEO Mike McCue, all fediverse content will also be readily available within the Flipboard app itself. This means users will be able to use Flipboard browse content shared to Mastodon, Pixelfed (a photo sharing app kind of like Instagram), PeerTube (a decentralized video platform) and the rest of the apps that make up the fediverse.

Flipboard’s official entrance into the fediverse comes at a moment where there is increasing enthusiasm for ActivityPub within the social media industry. Last week, Meta announced that it was taking its first steps toward making Threads compatible with Mastodon and the rest of the fediverse. “I think you’ll probably have more than 150 million people in the fediverse by the end of the next year,” McCue tells Engadget, “You have millions of Flipboard users, millions of Threads users all joining this network ... it’s not going to take very long before this becomes the largest social network.”

McCue’s enthusiasm for Mastodon and the fediverse is especially notable given his once close ties to Twitter. The Flipboard CEO was a member of Twitter’s board between 2010 and 2012, and reportedly considered selling Flipboard to the company in 2015. But Elon Musk’s takeover of the company, and the disintegration of its API, prompted him to begin experimenting with Mastodon and Bluesky integrations earlier this year.

He now believes that momentum for the fediverse is so strong, Twitter may ultimately end up supporting ActivityPub too. “More and more companies will have to look at ActivityPub,” he predicts. “I wouldn’t be surprised if Twitter ultimately decides they’re going to have to do this.”

This article originally appeared on Engadget at https://www.engadget.com/flipboard-is-moving-to-the-fediverse-170426320.html?src=rss

NordVPN comes to the Apple TV

Apple’s recently-released tvOS 17 update allows for native VPN apps and big-name providers are wasting no time. ExpressVPN dropped an app a couple of weeks ago and now the same is true of one of its primary competitors. NordVPN now has an official Apple TV app available for download.

This is the real deal and works with your current NordVPN subscription, if you have one. The setup is simple. Just download the app and sign in. If you’re new to the service, download the app and create an account. Once connected, you’ll have access to the company’s global array of secure servers.

The app encrypts all network traffic and uses the company’s NordLynx protocol to speed up the connection, which should offer an optimized streaming experience with minimal buffering. Of course, this will likely depend on the locations of your actual network connection and virtual network connection.

Back when Apple first announced that native VPNs would be coming to tvOS 17, NordVPN expressed doubts, telling The Verge that the company was “concerned that there may be some limitations.” It looks like it got over those doubts.

So, why would you even want or need a dedicated VPN on your Apple streaming box? There are a couple of reasons, all of which involve traveling with the diminutive device. You can customize settings, like preferred server location, which helps get around geographic restrictions regarding streaming content. Nobody’s gonna stop you from binging Foundation while on vacation. Even without geo-restrictions, bringing your Apple TV into a hotel room will allow you to stream whatever you want instead of relying on, gag, cable.

Before tvOS 17, you couldn’t configure a VPN on these devices. You’d have to install a VPN client on the router, which is notoriously complicated. Kudos to Apple on this one. NordVPN isn’t the only available VPN on the Apple TV App Store. There’s the aforementioned ExpressVPN, PureVPN and several more. You can install VPN apps on Apple TV HD and Apple TV 4K devices, running tvOS 17 or later.

Speaking of tvOS 17, the company just dropped an update. The latest and greatest tvOS 17.2 brings a redesigned interface and the ability to answer FaceTime calls directly from the TV.

This article originally appeared on Engadget at https://www.engadget.com/nordvpn-comes-to-the-apple-tv-162030095.html?src=rss

Here’s everything you should do to up your security before next year

Be honest: How many times this year have you skipped or scrolled past a much-needed update? Maybe you just wanted to log into Twitter, er, X without setting up multifactor authentication. Putting off these minor inconveniences adds up, and it could lead to an insecure tech setup just waiting to be exploited by an attacker.

So, now you're probably spending a few days sleeping in your childhood bed, and wondering when Uncle Dave will stop talking to you about buying gold stocks. There's never been a better time to take care of the less-than-riveting admin work of locking down your digital life. Here's a quick holiday checklist you and your loved ones (including Dave) can spend an hour doing during your holiday downtime to set up for a more secure year.

Update all your apps and devices

For the most current patches and options, you’ll need to start this security check up by updating all your devices and apps. The companies behind the tech have already done a lot of the work to keep you safe, but it’s your job to make sure that you’re taking full advantage of those updates. I’d recommend starting with operating system updates then apps second because there’s usually some new features reliant on the latest OS within other software. While you’re there, set up automatic updates so that you don’t have to worry about doing this manually in the future.

An attendee interacts with a display at the 23andMe booth at the RootsTech annual genealogical event in Salt Lake City, Utah, U.S., February 28, 2019.  REUTERS/George Frey
REUTERS / Reuters

Sign up for or update your password manager

Strong passwords are your first line of defense to keep your accounts safe, but they’re almost impossible to memorize and keep track of. Download a password manager to store this information for you, so that your passwords can be unguessable gibberish that you’ll actually use. Long term, it’s important to change these passwords every 90 days or so, and never to repeat across accounts. A password manager will help remind you of that, and even generate new password ideas for you. Unique and regularly-changing passwords help prevent attacks like credential stuffing, as we’ve seen make headlines in the recent 23andMe data breach.

Make sure you’re using MFA or, ideally, passkeys

Strong passwords are important, but it's well-known that they aren’t enough to keep unauthorized actors out of your account. Most people are familiar with using a text message code to grant access to an account. If you’re taking time out of your day to set this up, however, I would recommend using a third-party authenticator app or a hardware key for more secure options. Or, for companies that have switched to allowing passkeys at login, that’s usually your best bet.

This will be one of the more tedious parts of the checklist, so if you can’t sit down and knock out your major logins now, at least push yourself to make these changes each time you log into a website over the next couple of weeks. Being stuck with family for the holiday might not be your preferred opportunity to make this change, but there's sure to be an upcoming major snowstorm or bout seasonal depression just screaming to be harnessed for your technological well-being.

Consider a VPN, or at least a more secure browser

A strong VPN will keep your web browsing private. Whether it’s free or paid for, defaulting to using a VPN adds an extra layer of security to the work you’re doing online. Most have options to use it across different devices, or to run automatically on startup so that you can set it up once and forget about it. I would also recommend switching over to a secure browser like Tor that runs on a privacy-first platform for more sensitive online matters. Of course there’s a catch: VPNs and Tor can both slow down your browsing, or break certain website features. Updates to the services have helped over time, but even if you use it for just a portion of web browsing, some protection is better than none.

A blue glass globe-shaped paperweight rests on print headlines covering  aspects of Internet and computer-related crime.
RapidEye via Getty Images

Get up to date on the latest hacks and attack vectors

Keeping up with security news will help you determine what accounts need special attention versus where you can go on autopilot. Once you know whether a breach may have occurred or a password has been leaked, you can quickly make changes to accommodate. Websites already exist to see if you’ve been in a data breach, and most companies have an obligation to tell you if they’ve been impacted. When you also stay up to date on the latest scams and attacks, you know what red flags to look out for in your own inbox to stay proactive.

Tell brokers to stop selling your data

It’s surprisingly easy to stop companies from trading your privacy for cash. On top of getting in the habit of not sharing your cookies or granting location data, you can opt out of working with the top three major data brokers. Axiom, Oracle and Epsilon all have slightly different variations of the same form to fill out so that information like your home address and relatives’ names aren’t being sold for profit. This is a good start to getting your online privacy back, however, it can be more of a headache than just one opt out form.

You have to do this frequently to make sure your information hasn’t been readded to any of the broker sites, and if your information has already been sold to marketing companies, it’s too late to undo it. There are subscription service sites that can help track and continuously delete whatever information pops up for you, but starting with just Axiom, Oracle and Epsilon will still be a free, worthwhile step toward more privacy.

A Samsung rugged SSD
Samsung

Back up everything

Get an external hard drive or connect to the cloud and keep all of your data backed up. Do this regularly, so that even if your device quits or gets ransomed by an attacker, you aren't completely screwed. I’d recommend opting for something that can be set up automatically, so that you don’t have to keep constant track of it. That could look like spending the 99 cents per month on extra iCloud storage (or Google Drive or another in-house cloud tool) so that your phone gets backed up each night while you’re asleep. Windows and Mac also both do auto updates to an external drive on desktop, so you can set it and forget it.

Alternatively, you could install backup software onto a device so that it’s taken care of by a third party, but that may be less intuitive to set up. Just don’t forget to clean up your data storage every once in a while, too, so that you’re not holding onto useless screenshots or pictures of your ex from years ago that are taking up valuable space.

Make a plan to check in on your security settings more frequently

It’s overwhelming to play catch up. Going through a list like this can seem intimidating if you haven’t worried about it before. If you set up automatic updates and backups, it’ll take some of those repeat tasks off your plate. But since you’ll already, hopefully, be setting new passwords once a quarter, you can do a quick check up on your other security measures too. See if you’ve been a victim of a breach or identity theft, keep telling data brokers to get their hands off your information and find out if new VPNs or other software has been released that could make your security setup more seamless. Making it a part of the routine is much easier than annual sprees, and can help you catch a cybersecurity problem before it becomes unmanageable.

This article originally appeared on Engadget at https://www.engadget.com/heres-everything-you-should-do-to-up-your-security-before-next-year-143009276.html?src=rss

US lawmakers call for DOJ probe into Apple’s blocking of Beeper’s iMessage app

A bipartisan group of US senators and representatives have urged the Department of Justice to investigate whether Apple violated antitrust laws by attempting to block Beeper Mini's access to iMessage. Senators Amy Klobuchar (D-MN) and Mike Lee (R-UT), along with Representatives Jerry Nadler (D-NY) and Ken Buck (R-CO), have asked an assistant attorney general to look into “potentially anticompetitive conduct” by Apple.

There have been a number of efforts in recent months to provide Android users with access to iMessage via workarounds. Earlier this month, Beeper said it was able to reverse engineer the iMessage protocol and support it on Android devices. Within a couple of days, Beeper Mini's iMessage integration was acting up and Apple (without elaborating too much) soon confirmed it had blocked an iMessage exploit.

It didn't take long for Beeper to find yet another way to get iMessage working on Android, though this time it required an Apple ID. Last week, the company said it suspected Apple was "deliberately blocking iMessages from being delivered" to around five percent of Beeper Mini users and that it was working on a solution.

The back and forth between Beeper and Apple caught the attention of Sen. Elizabeth Warren (D-MA). "Green bubble texts are less secure. So why would Apple block a new app allowing Android users to chat with iPhone users on iMessage? Big Tech executives are protecting profits by squashing competitors," Warren wrote on X. "Chatting between different platforms should be easy and secure." 

Last year, Apple CEO Tim Cook responded to a question about improving iOS-Android communication compatibility by telling a journalist to "buy your mom an iPhone." 

"Interoperability and interconnection have long been key drivers of competition and consumer choice in communications services," lawmakers noted in their letter to the DOJ. "But consumers will never benefit from competition if dominant firms are allowed to snuff out that competition at its incipiency."

As such, the officials are "concerned that Apple's recent actions to disable Beeper Mini harm competition, eliminate choices for consumers and will discourage future innovation and investment in interoperable messaging services. We also fear these types of tactics may more broadly chill future investment and innovation from those that seek to compete with existing digital gatekeepers. Thus, we refer this matter to the Antitrust Division to investigate whether this potentially anticompetitive conduct by Apple violated the antitrust laws."

Apple has made at least one commitment to improving messaging interoperability. The company has pledged to support the RCS protocol starting in 2024, after years of Google openly pressuring Apple to do so. Adopting RCS will mean that messaging between iPhone and Android will be more secure than SMS and allow for higher-quality media sharing.

This article originally appeared on Engadget at https://www.engadget.com/us-lawmakers-call-for-doj-probe-into-apples-blocking-of-beepers-imessage-app-122554473.html?src=rss

The Morning After: Apple tests App Store discounts

Apple says it’s testing a new App Store feature called contingent pricing to lure customers into cheaper subscriptions based on their other purchases. This contingent pricing model will let developers offer discounts to customers who already have subscriptions to other services, be it those developers’ own apps or connected partner apps.

According to 9to5Mac, Apple says these bundled discounts will be highly visible to customers both on the App Store and “in off-platform marketing channels” — so elsewhere too. It’s starting with a select group of participants before rolling out to more developers “in the coming months.”

It’s been a year of increased scrutiny into Apple’s App Store and how it handles in-app purchases. Just this fall, Apple asked the Supreme Court to reverse the previous ruling that required it to allow developers to use outside payment systems, circumventing Apple’s 30 percent transaction fee. This is a way, of sorts, to get back in developers’ good graces.

— Mat Smith

The biggest stories you might have missed

These tomatoes were lost on the International Space Station for almost a year

Activision Blizzard will pay $54 million to settle California’s gender discrimination lawsuit

Amazon boosts its satellite internet network with the help of space lasers

A One Piece anime remake is in the works from Netflix

​​You can get these reports delivered daily direct to your inbox. Subscribe right here!

Baldur’s Gate 3 will never come to Xbox Game Pass

So says developer Larian Studios.

TMA
Larian Studios

According to Larian Studios founder Swen Vincke in an interview with IGN, Game of the Year, Baldur’s Gate 3, won’t come to Microsoft’s Game Pass. Vincke also noted this was always the plan, and the title had never been considered for Microsoft’s subscription gaming platform. Vincke says Baldur’s Gate 3 is a “big game” available for a “fair price.” He also touted the title’s lack of microtransactions and its complete story, saying “you get what you pay for.”

Continue reading.

Meta Quest headsets join the exciting world of Microsoft Office apps

Mmm, virtual Word.

Meta Quest users can now write reports, edit spreadsheets and create presentations — if they even want to do any of those tasks on a VR headset. Support for the basic Microsoft Office suite has arrived on the original Oculus Quest, the Meta Quest 2, the Quest Pro and the Quest 3. Users can now download Microsoft Word, Excel and PowerPoint from the Meta Quest store for free. That said, typing on the Quest’s onscreen keyboard is not particularly easy, so you might want to bring your Bluetooth keyboard along for virtual office hours.

Continue reading.

Engadget Podcast: RIP E3

And diving into The Game Awards.

This week, Engadget Senior Editor Jessica Conditt joins Cherlynn and Devindra to talk about the death of E3 and what it means for the gaming industry. They also explore some of the highlights (and low points) of last week’s Game Awards, which couldn’t quite balance celebrating video games and functioning as a marketing tool. We’re particularly excited for Light No Fire, the next ambitious game from the folks behind No Man’s Sky. (Oh, you should check out Jessica’s video on the subject.)

Listen here.

The Chinese EV with 650 miles of range

From a 150kWh battery.

TMA
Nio

Chinese manufacturer Nio is about to start selling an EV with a “semi-solid state” 150kWh battery (140kWh usable). That’s the biggest battery of any passenger EV so far. Nio CEO William Li drove a prototype version of the ET7 1,044km (650 miles) in 14 hours, a distance surpassing many gas-powered vehicles. The ET7’s 150kWh battery will only be available on a lease separate from the car, much as we’ve seen with some cars sold in Europe. We’re unlikely to see this specific battery pack in the US, however. With the Biden administration’s latest rules, some US cars, like Tesla’s Model 3 Long Range, that use specific Chinese battery components will no longer receive the full $7,500 tax credit.

Continue reading.

This article originally appeared on Engadget at https://www.engadget.com/the-morning-after-apple-tests-app-store-discounts-121517653.html?src=rss

Beats headphones and earbuds are up to 49 percent off right now

The winter months are ripe with long journeys — whether through a road trip to a relative's house or a flight somewhere warm — and require good quality music to get through them. Achieving this is quite a bit cheaper right now, with the Beats Studio Buds dropping to an all-time low of $80 from $150. The 47 percent discount is available on every color, from Black to Sunset Pink. 

Beats Studio Buds are a solid option for noise-canceling earbuds and — even more so now — are much more affordable than competitors like AirPods. They have IPX4 sweat and water resistance, three soft ear tip sizes and eight hours of battery life or 24 hours with the charging case. Android users can download the Beats app to see stats and updates, while this technology is built in for iOS users. 

The Studio Buds aren't Beats' only good deal to check out right now. The Beats Fit Pro is 20 percent off, dropping to $160 from $200 in every color except Moon. The secure wing-tipped earbuds can last six hours on a single charge or 24 hours with the case and add adaptive EQ to the list of listening modes. Plus, they're also IPX4 sweat and water-resistant. 

Then there's the Beats Studio Pro headphones, available for $180, down from $350 — a 49 percent discount. The sale price increases to $205 when adding in two years of AppleCare+. The Studio Pro headphones have 40 hours of battery life and can get another four hours with just a 10-minute charge. The on-ear buttons can activate Siri, accept calls or control the music. The Beats Fit Pro and Studio Pro are both only $10 off their all-time low prices. 

Follow @EngadgetDeals on Twitter and subscribe to the Engadget Deals newsletter for the latest tech deals and buying advice.

This article originally appeared on Engadget at https://www.engadget.com/beats-headphones-and-earbuds-are-up-to-49-percent-off-right-now-112029335.html?src=rss