Tech
Jury orders NSO to pay $167 million for hacking WhatsApp users
A jury has awarded WhatsApp $167 million in punitive damages in a case the company brought against Israel-based NSO Group for exploiting a software vulnerability that hijacked the phones of thousands of users.
The verdict, reached Tuesday, comes as a major victory not just for Meta-owned WhatsApp but also for privacy- and security-rights advocates who have long criticized the practices of NSO and other exploit sellers. The jury also awarded WhatsApp $444 million in compensatory damages.
Clickless exploitWhatsApp sued NSO in 2019 for an attack that targeted roughly 1,400 mobile phones belonging to attorneys, journalists, human-rights activists, political dissidents, diplomats, and senior foreign government officials. NSO, which works on behalf of governments and law enforcement authorities in various countries, exploited a critical WhatsApp vulnerability that allowed it to install NSO’s proprietary spyware Pegasus on iOS and Android devices. The clickless exploit worked by placing a call to a target's app. A target did not have to answer the call to be infected.
The company with the world’s largest aircraft now has a hypersonic rocket plane
Stratolaunch has finally found a use for the world's largest airplane.
Twice in the last five months, the company launched a hypersonic vehicle over the Pacific Ocean, accelerated it to more than five times the speed of sound, and autonomously landed at Vandenberg Space Force Base in California. Stratolaunch used the same vehicle for both flights.
This is the first time anyone in the United States has flown a reusable hypersonic rocket plane since the last flight of the X-15, the iconic rocket-powered aircraft that pushed the envelope of high-altitude, high-speed flight 60 years ago.
Trump and DOJ try to spring former county clerk Tina Peters from prison
President Donald Trump is demanding the release of Tina Peters, a former election official who parroted Trump's 2020 election conspiracy theories and is serving nine years in prison for compromising the security of election equipment.
In a post on Truth Social last night, Trump wrote that "Radical Left Colorado Attorney General Phil Weiser ignores Illegals committing Violent Crimes like Rape and Murder in his State and, instead, jailed Tina Peters, a 69-year-old Gold Star mother who worked to expose and document Democrat Election Fraud. Tina is an innocent Political Prisoner being horribly and unjustly punished in the form of Cruel and Unusual Punishment."
Trump said he is "directing the Department of Justice to take all necessary action to help secure the release of this 'hostage' being held in a Colorado prison by the Democrats, for political reasons."
Trump admin picks COVID critic to be top FDA vaccine regulator
Oncologist Vinay Prasad, a divisive critic of COVID-19 responses, will be the next top vaccine regulator at the Food and Drug Administration, agency Commissioner Martin Makary announced on social media Tuesday.
Prasad will head the FDA's Center for Biologics Evaluation and Research (CBER), which is in charge of approving and regulating vaccines and other biologics products, such as gene therapies and blood products.
"Dr. Prasad brings the kind of scientific rigor, independence, and transparency we need at CBER—a significant step forward," Makary wrote on social media.
FAA green-lights Starship launches every other week from Starbase
Although we are still waiting for SpaceX to signal when it will fly the Starship rocket again, the company got some good news from the Federal Aviation Administration on Tuesday.
After a lengthy review, the federal agency agreed to allow SpaceX to substantially increase the number of annual launches from its Starbase launch site in South Texas. Previously, the company was limited to five launches, but now it will be able to conduct up to 25 Starship launches and landings during a calendar year.
"The FAA has determined that modifying SpaceX’s vehicle operator license supporting the increased launch and landing cadence of the Starship/Super Heavy launch vehicle would not significantly impact the quality of the human environment," states the document, known as a Mitigated Finding of No Significant Impact. This finding was signed by Daniel P. Murray, executive director of the FAA's Office of Operational Safety.
Apps like Kindle are already taking advantage of court-mandated iOS App Store changes
Last week, a federal judge ruled that Apple was in "willful violation" of a court injunction that required the company to refrain from "anticompetitive conduct and anticompetitive pricing" in its tightly controlled iOS App Store. Part of the ongoing litigation between Epic Games and Apple, the injunction specifically forbade Apple from "denying developers the ability to communicate with, and direct purchasers to, other purchasing mechanisms."
Following the ruling, Apple said it would comply with the court's injunction while the company continued to appeal the decision. The day after the ruling was handed down, Apple altered several of its App Review Guidelines to grant developers permission to do things they hadn't been allowed to do before. As summarized in an email to developers, reported by MacRumors:
3.1.1: Apps on the United States storefront are not prohibited from including buttons, external links, or other calls to action when allowing users to browse NFT collections owned by others.
3.1.1(a): On the United States storefront, there is no prohibition on an app including buttons, external links, or other calls to action, and no entitlement is required to do so.
3.1.3: The prohibition on encouraging users to use a purchasing method other than in-app purchase does not apply on the United States storefront.
3.1.3(a): The External Link Account entitlement is not required for apps on the United States storefront to include buttons, external links, or other calls to action.
We're already beginning to see new versions of apps that take advantage of these changes. Case in point: Amazon's Kindle app for iPhones and iPads, which from its original launch in 2009 up until yesterday wouldn't actually let anyone buy books in the app. Users instead needed to navigate on their own to Amazon's store in Safari or on their PC and Mac and buy the books they wanted, at which point the books would be available in the Kindle app.
2025 Alfa Romeo Tonale Turbo review: Italian charm that cuts both ways
They say that with age comes wisdom, so it should come as no surprise that on the eve of Alfa Romeo’s 115th anniversary, the company that originally made its name competing in endurance races like the Targa Florio and Mille Miglia with flame-spitting sportscars is currently looking to increase its market share with a sensible, high-riding crossover.
Produced in Stellantis’ Pomigliano d'Arco assembly plant near Naples, Italy, alongside its mechanical twin, the Dodge Hornet, the Tonale plug-in hybrid introduced last year helped the Italian automaker find a foothold at a time when many of the auto conglomerate’s brands have been struggling. Now, a non-hybrid version of Alfa’s answer to models like the BMW X1 and Audi Q3 has joined the fray, sporting turbocharged power, standard all-wheel drive, and the same sharp styling at a significantly lower base price. But old habits die hard, and as I discovered over the course of a few days with the latest iteration of the Tonale, even Alfa Romeo’s most pragmatic offerings have their fair share of quirks.
The new base model comes with a double overhead-cam 2.0 L inline four-cylinder engine producing 268 hp (200 kW) and 295 lb-ft (400 Nm) of torque. The turbocharged mill is paired with a nine-speed automatic transmission and an all-wheel drive system that can send up to 50 percent of the available torque to the rear wheels. While those numbers are down a bit compared to the Tonale Hybrid, at 3,715 lbs (1,685 kg), the 2.0 L Turbo is more than 400 lbs (181 kg) lighter than the PHEV model.
Nvidia GeForce xx60 series is PC gaming’s default GPU, and a new one is out May 19
Nvidia will release the GeForce RTX 5060 on May 19 starting at $299, the company announced via press release today. The new card, a successor to popular past GPUs like the GTX 1060 and RTX 3060, will bring Nvidia's DLSS 4 and Multi Frame-Generation technology to budget-to-mainstream gaming builds—at least, it would if every single GPU launched by any company at any price wasn't instantly selling out these days.
Nvidia announced a May release for the 5060 last month when it released the RTX 5060 Ti for $379 (8GB) and $429 (16GB). Prices for that card so far haven't been as inflated as they have been for the RTX 5070 on up, but the cheapest ones you can currently get are still between $50 and $100 over that MSRP. Unless Nvidia and its partners have made dramatically more RTX 5060 cards than they've made of any other model so far, expect this card to carry a similar pricing premium for a while.
RTX 5060 Ti RTX 4060 Ti RTX 5060 RTX 4060 RTX 5050 (leaked) RTX 3050 CUDA Cores 4,608 4,352 3,840 3,072 2,560 2,560 Boost Clock 2,572 MHz 2,535 MHz 2,497 MHz 2,460 MHz Unknown 1,777 MHz Memory Bus Width 128-bit 128-bit 128-bit 128-bit 128-bit 128-bit Memory bandwidth 448GB/s 288GB/s 448GB/s 272GB/s Unknown 224GB/s Memory size 8GB or 16GB GDDR7 8GB or 16GB GDDR6 8GB GDDR7 8GB GDDR6 8GB GDDR6 8GB GDDR6 TGP 180 W 160 W 145 W 115 W 130 W 130 WCompared to the RTX 4060, the RTX 5060 adds a few hundred extra CUDA cores and gets a big memory bandwidth increase thanks to the move from GDDR6 to GDDR7. But its utility at higher resolutions will continue to be limited by its 8GB of RAM, which is already becoming a problem for a handful of high-end games at 1440p and 4K.
How long will Switch 2’s Game Key Cards keep working?
Last month, Nintendo and its third-party partners revealed that many of the "physical" games on the Switch 2 would be made available only as "Digital Key Cards." Unlike traditional physical Switch games—which contain flash memory with the necessary data to play the game on the card itself—these key cards will simply enable the holder to download a copy of the game to their system and play that copy if and when the transferable key card is inserted in the system.
Already, many players are thinking ahead to what this means for their ability to play Game Key Card releases well into the future. It's not hard to find potential Switch 2 owners publicly worrying about games "disappear[ing] into the void" or becoming "effectively a worthless piece of plastic/e-waste" when Nintendo eventually disables its Switch 2 game download servers. Some go even farther, calling a Game Key Card an "eighty dollar rental" rather than a real game purchase.
While these are valid long-term concerns, I think some players are underestimating the likely timeline for when Game Key Cards will become "useless e-waste." As it stands, we already have an example of Nintendo supporting continued downloads of games purchased nearly two decades ago and counting.
Trump administration cuts off all future federal funding to Harvard
The ongoing war between the Trump administration and Harvard University has taken a new twist, with the government sending Harvard a letter that, amid what appears to be a stream-of-consciousness culture war rant, announces that the university will not be receiving any further research grants. The letter potentially suggests that Harvard could see funding restored by "complying with long-settled Federal Law," but earlier demands from the administration included conditions that went well beyond those required by law.
The letter, sent by Secretary of Education Linda McMahon, makes it somewhat difficult to tell exactly what the government wants, because most of the text is a borderline deranged rant written in florid MAGA-ese. You don't have to go beyond the first paragraph to get a sense that this is less a setting of funding conditions than an airing of grievances:
Instead of using these funds to advance the education of its students, Harvard is engaging in a systemic pattern of violating federal law. Where do many of these "students" come from, who are they, how do they get into Harvard, or even into our country—and why is there so much HATE? These are questions that must be answered, among many more, but the biggest question of all is, why will Harvard not give straightforward answers to the American public?
Does Harvard have to answer these questions to get funding restored? It's unclear.
Find my… bicycle?
We've reviewed some pretty expensive bikes here at Ars, and one of the consistent concerns we see in the comments is the fear of theft. That's a widely shared fear, based on a whole bunch of videos that describe how to hide an AirTag tracker where a potential bike thief won't notice it. There are also a number of products available that will hold a hidden AirTag in a reflector, a bike bell, or the head tube.
But Apple has also made it possible for third parties to plug their devices into its "Find My" system, and a company called Knog has made a Bluetooth bike tracker called the Scout that does just that. The Scout goes well beyond tracking, though, providing a motion-sensitive alarm system that will alert you if anybody tries to move your bike.
Meet the ScoutThe Scout can be attached to the frame using the screw holes normally used for a water bottle holder. Security screws make it considerably more difficult to remove. Once there, it uses Apple's Find My network to keep the owner apprised of the bike's location (Android users need not apply at the moment). If you're leaving your bike in a high-risk location, you can also use Knog's phone application to set an alarm that will be triggered if the bike is moved.
Musk’s politics see Tesla sales collapse in Europe
Tesla is in deep trouble in Europe. The electric vehicle maker, which once dominated EV sales in the region, is facing sales declines of more than 50 percent in France, the Netherlands, Sweden, Denmark, and the UK. Sales in Germany weren't quite as bad—they fell by 46 percent in April, with slightly smaller decreases in Portugal and Spain. Only Italy and Norway saw any kind of sales growth.
The headwinds were already looking unfavorable for Tesla even before CEO Elon Musk threw his lot in with Donald Trump and his authoritarian makeover of the US government. A small and outdated product portfolio was already looking stale compared to the influx of EVs from Chinese brands and European automakers, but Musk's hard-right turn and the US government's ongoing antagonism toward the rest of the world has soured the brand entirely. And a recent styling refresh for the Model Y has failed to arrest the slide.
The UK has been one of Tesla's biggest markets in Europe, and it's seeing something of an EV boom, with 8.1 percent more BEVs registered in April 2025 than the year before, even as overall car sales have dropped by 10.4 percent year on year. But Tesla's sales fell by 62 percent—the automaker registered just 512 cars all month. For context, 120,331 new cars were registered in the UK last month, of which 24,558 were BEVs.
Data centers say Trump’s crackdown on renewables bad for business, AI
The US data center industry has warned that the Trump administration’s crackdown on renewable energy could slow its growth and undermine Washington’s goal to win the global artificial intelligence race.
Renewables have become a flashpoint since Donald Trump re-entered the White House, with his administration suspending clean energy developments on federal land, pausing federal loans, and last month canceling high-profile projects such as Equinor’s $5 billion Empire Wind site.
For tech companies struggling to secure reliable energy supplies to power and train AI, a clampdown on renewables could create power bottlenecks, drive up costs, and push operators towards dirtier energy, experts said.
Lighter, cheaper Surface Laptop saves a little money but gives up a lot
Microsoft is releasing a pair of new Surface devices today, both models that undercut last year's Surface Laptop and Surface Pro on price but also take a pretty big step down in specs. One of the devices is a new 12-inch Surface Pro tablet, which we've covered in more detail here. The other is a new 13-inch Surface Laptop, whose specs and price straddle the narrow gap between the current seventh-generation Surface Laptop and the original price of the aging Surface Laptop Go 3.
The new Surface Laptop starts at $899, and preorders open today. It will be available on May 20.
The new laptop shares many specs in common with last year’s entry-level seventh-generation Surface Laptop, including an Arm-based Qualcomm Snapdragon X Plus processor, 16GB of RAM, and support for Windows 11’s expanded Copilot+ capabilities. It’s also smaller and lighter than the 13.8-inch Surface Laptop. But the CPU has eight cores instead of 10 or 12, the screen is smaller and lower resolution, and you’re more limited in your upgrade options; we’ve outlined the key differences in the table below.
Microsoft’s 12-inch Surface Pro is cheaper but unfixes a decade-old design problem
Microsoft is introducing a pair of new Surface devices today, both aimed slightly down-market from the 11th-generation Surface Pro tablet and 7th-generation Surface Laptop that the company released last spring. One is a 13-inch Surface Laptop, which we've covered in more detail here. The second (and more notably changed) device is a new 12-inch Surface Pro tablet, which is the first significant design change we've seen in the Surface Pro lineup since the first ARM-based Surface Pro X was released in 2019.
Preorders for both new Surface devices begin today, and they begin shipping on May 20. The 12-inch Surface Pro starts at $799, and the keyboard cover remains a separate purchase, available for $149.
The 12-inch Surface Pro is a cheaper alternative to the $939-and-up 13-inch Surface Pro (which Microsoft is continuing to sell), and the smallest Surface Microsoft has tried since the 10.5-inch underspecced Surface Go series. In addition to the smaller screen, the base model includes a bunch of other minor downgrades from the flagship 13-inch tablet, as outlined in the table below. But it's also nearly half a pound lighter, and its 8-core Qualcomm Snapdragon X Plus processor should still deliver solid performance and compatibility with the extra Windows 11 features available on Copilot+ PCs.
Tuesday Telescope: After spacewalking, an astronaut strikes lightning
Most astronauts these days are fairly anonymous, and chances are you have never heard of Nichole Ayers. And that's OK.
But sometimes it's worth pausing for a moment to reflect on just how accomplished these people are. Ayers, 36, flew the supersonic F-22 stealth aircraft in the international war against the Islamic State and rose to become a major in the US Air Force before being selected as a NASA astronaut in 2021. Oh, yeah, she also completed a master's degree in computational and applied mathematics at Rice University.
For her first spaceflight, Ayers launched on the Crew-10 mission to the International Space Station in March. This flight got a fair amount of media attention, but that was largely because the arrival of Crew-10 allowed the Crew Dragon spacecraft to which Butch Wilmore and Suni Williams were assigned to return home. Since then, Ayers has spent 50 days in space, astronauting. This included a spacewalk last week, her first, alongside veteran astronaut Anne McClain.
Man pleads guilty to using malicious AI software to hack Disney employee
A California man has pleaded guilty to hacking an employee of The Walt Disney Company by tricking the person into running a malicious version of a widely used open source AI image-generation tool.
Ryan Mitchell Kramer, 25, pleaded guilty to one count of accessing a computer and obtaining information and one count of threatening to damage a protected computer, the US Attorney for the Central District of California said Monday. In a plea agreement, Kramer said he published an app on GitHub for creating AI-generated art. The program contained malicious code that gave access to computers that installed it. Kramer operated using the moniker NullBulge.
Not the ComfyUI you’re looking forAccording to researchers at VPNMentor, the program Kramer used was ComfyUI_LLMVISION, which purported to be an extension for the legitimate ComfyUI image generator and had functions added to it for copying passwords, payment card data, and other sensitive information from machines that installed it. The fake extension then sent the data to a Discord server that Kramer operated. To better disguise the malicious code, it was folded into files that used the names OpenAI and Anthropic.
Heartbreaking video shows deadly risk of skipping measles vaccine
In a hard-to-watch video, a healthy-looking 4-year-old boy lies on a bed as doctors lift his eyelids to watch his big brown eyes erratically swirl and roll backward. His head jerks, and his little limbs weakly twitch and spasm. A small bit of foam pushes past his lips.
The video, captured by neurologists in India and published today in JAMA Neurology, shows what it looks like when the measles virus is allowed to ravage a child's brain. (The video can be viewed here.)
The boy was never vaccinated and developed a rare complication from measles called subacute sclerosing panencephalitis (SSPE). The condition occurs when the measles virus quietly sneaks into the central nervous system. It often lurks for years after an initial infection before it begins wreaking havoc, triggering damaging inflammation, destroying neurons, and causing brain lesions.
Signal clone used by Trump official stops operations after report it was hacked
A messaging service used by former National Security Advisor Mike Waltz has temporarily shut down while the company investigates an apparent hack. The messaging app is used to access and archive Signal messages but is not made by Signal itself.
404 Media reported yesterday that a hacker stole data "from TeleMessage, an obscure Israeli company that sells modified versions of Signal and other messaging apps to the US government to archive messages." 404 Media interviewed the hacker and reported that the data stolen "contains the contents of some direct messages and group chats sent using [TeleMessage's] Signal clone, as well as modified versions of WhatsApp, Telegram, and WeChat."
TeleMessage is based in Israel and was acquired in February 2024 by Smarsh, a company headquartered in Portland, Oregon. Smarsh provided a statement to Ars today saying it has temporarily shut down all TeleMessage services.
OpenAI scraps controversial plan to become for-profit after mounting pressure
On Monday, ChatGPT-maker OpenAI announced it will remain under the control of its founding nonprofit board, scrapping its controversial plan to split off its commercial operations as a for-profit company after mounting pressure from critics.
In an official OpenAI blog post announcing the latest restructuring decision, CEO Sam Altman wrote: "We made the decision for the nonprofit to stay in control after hearing from civic leaders and having discussions with the offices of the Attorneys General of California and Delaware."
The move represents a significant shift in OpenAI's proposed restructuring. While the most recent previous version of the company's plan (which we covered in December) would have established OpenAI as a Public Benefit Corporation with the nonprofit merely holding shares and having limited influence, the revised approach keeps the nonprofit firmly in control of operations.
