❌

Normal view

Move over, GPS: Navigation satellites in low-Earth orbit are making a comeback

16 July 2026 at 12:00

New navigation satellites in low-Earth orbit could provide 100 times stronger signal strength compared to GPS and other global navigation satellite systems operating from higher orbital altitudes—enabling greater location accuracy within dense cities, under thick foliage, and even inside buildings. Such signals would also likely prove more resilient to interference at a time when commercial flights, maritime shipping, and even various smartphone apps face increasingly widespread disruption from GPS jamming.

That vision may start to take shape when the first six production satellites of California-based Xona Space Systems are scheduled to launch in October 2026, with early service starting in 2027. Once the full constellation of 258 Pulsar satellites has been launched in the following years, Xona claims that customers will be able to accurately pinpoint their locations anywhere on Earth to within several centimeters.

“That added power means that we can get into that indoor environment that GPS can't get to today,” Adrien Perkins, co-founder and VP of engineering at Xona Space Systems, told Ars. “Our higher power allows you to get into those jamming environments a lot further than you would with GPS by itself.”

Read full article

Comments

© Xona Space Systems

Move over, GPS: Navigation satellites in low-Earth orbit are making a comeback

16 July 2026 at 12:00

New navigation satellites in low-Earth orbit could provide 100 times stronger signal strength compared to GPS and other global navigation satellite systems operating from higher orbital altitudes—enabling greater location accuracy within dense cities, under thick foliage, and even inside buildings. Such signals would also likely prove more resilient to interference at a time when commercial flights, maritime shipping, and even various smartphone apps face increasingly widespread disruption from GPS jamming.

That vision may start to take shape when the first six production satellites of California-based Xona Space Systems are scheduled to launch in October 2026, with early service starting in 2027. Once the full constellation of 258 Pulsar satellites has been launched in the following years, Xona claims that customers will be able to accurately pinpoint their locations anywhere on Earth to within several centimeters.

“That added power means that we can get into that indoor environment that GPS can't get to today,” Adrien Perkins, co-founder and VP of engineering at Xona Space Systems, told Ars. “Our higher power allows you to get into those jamming environments a lot further than you would with GPS by itself.”

Read full article

Comments

© Xona Space Systems

Move over, GPS: Navigation satellites in low-Earth orbit are making a comeback

16 July 2026 at 12:00

New navigation satellites in low-Earth orbit could provide 100 times stronger signal strength compared to GPS and other global navigation satellite systems operating from higher orbital altitudes—enabling greater location accuracy within dense cities, under thick foliage, and even inside buildings. Such signals would also likely prove more resilient to interference at a time when commercial flights, maritime shipping, and even various smartphone apps face increasingly widespread disruption from GPS jamming.

That vision may start to take shape when the first six production satellites of California-based Xona Space Systems are scheduled to launch in October 2026, with early service starting in 2027. Once the full constellation of 258 Pulsar satellites has been launched in the following years, Xona claims that customers will be able to accurately pinpoint their locations anywhere on Earth to within several centimeters.

“That added power means that we can get into that indoor environment that GPS can't get to today,” Adrien Perkins, co-founder and VP of engineering at Xona Space Systems, told Ars. “Our higher power allows you to get into those jamming environments a lot further than you would with GPS by itself.”

Read full article

Comments

© Xona Space Systems

Sheetz is quitting VMware, migrating 11,000 virtual machines

15 July 2026 at 22:41

Sheetz, a US convenience store chain, is moving its 838 locations off VMware.

Sheetz has used VMware virtualization across two Dell R440/R450-series servers at each of its locations since 2019. Now it’s migrating 12 to 14 virtual machines (VMs) in each of its stores from VMware vSphere to StorMagic’s SvHCI, “with an additional two VMs to be replaced over the coming months to transition from Windows 10 to Windows 11,” Scott Robertson, infrastructure team manager at Sheetz, told Ars Technica via email. Ultimately, Sheetz will move about 11,000 VMs from Broadcom's virtualization platform. Sheetz is still running the original Dell server hardware.

So far, Sheetz has finished migrating more than 600 stores, averaging 200 per month, according to a company announcement today. Sheetz should be finished with the migration in four months, the announcement said.

Read full article

Comments

© Sheetz

Sheetz is quitting VMware, migrating 11,000 virtual machines

15 July 2026 at 22:41

Sheetz, a US convenience store chain, is moving its 838 locations off VMware.

Sheetz has used VMware virtualization across two Dell R440/R450-series servers at each of its locations since 2019. Now it’s migrating 12 to 14 virtual machines (VMs) in each of its stores from VMware vSphere to StorMagic’s SvHCI, “with an additional two VMs to be replaced over the coming months to transition from Windows 10 to Windows 11,” Scott Robertson, infrastructure team manager at Sheetz, told Ars Technica via email. Ultimately, Sheetz will move about 11,000 VMs from Broadcom's virtualization platform. Sheetz is still running the original Dell server hardware.

So far, Sheetz has finished migrating more than 600 stores, averaging 200 per month, according to a company announcement today. Sheetz should be finished with the migration in four months, the announcement said.

Read full article

Comments

© Sheetz

Windows 0-day drops the same day Microsoft releases record number of patches

15 July 2026 at 20:59

Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that can enable low-privilege Windows accounts to make sensitive changes to administrator accounts.

The exploit, which multiple researchers say works, is sending Microsoft scrambling, yet again, to patch a zero-day released by an anonymous researcher who has complained about the software maker’s handling of their bug reports. To date, the pseudonymous NightmareEclypse has published nine such exploits, including Tuesday’s HiveLegacy. The researcher said the proof-of-concept code included in the report was stripped down to prevent attackers from using it maliciously.

A “pretty powerful primitive”

HiveLegacy is an elevation-of-privilege exploit that targets a vulnerability residing in the Windows User Profile Service. It allows users (and with more work likely processes) with limited system rights to compromise an admin user's account by modifying its classes registry hive, a resource that ensures the correct application opens when certain types of files are clicked on in Windows Explorer.

Read full article

Comments

© Getty Images

Windows 0-day drops the same day Microsoft releases record number of patches

15 July 2026 at 20:59

Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that can enable low-privilege Windows accounts to make sensitive changes to administrator accounts.

The exploit, which multiple researchers say works, is sending Microsoft scrambling, yet again, to patch a zero-day released by an anonymous researcher who has complained about the software maker’s handling of their bug reports. To date, the pseudonymous NightmareEclypse has published nine such exploits, including Tuesday’s HiveLegacy. The researcher said the proof-of-concept code included in the report was stripped down to prevent attackers from using it maliciously.

A “pretty powerful primitive”

HiveLegacy is an elevation-of-privilege exploit that targets a vulnerability residing in the Windows User Profile Service. It allows users (and with more work likely processes) with limited system rights to compromise an admin user's account by modifying its classes registry hive, a resource that ensures the correct application opens when certain types of files are clicked on in Windows Explorer.

Read full article

Comments

© Getty Images

FCC to repeal 39% TV ownership cap in boost for Trump-friendly news orgs

15 July 2026 at 19:52

The Federal Communications Commission will vote to repeal the National Television Ownership Rule that is supposed to prevent a single broadcast station owner from reaching more than 39 percent of all TV households in the US. The proposed change sets up a likely court battle over the FCC claim that it has authority to repeal a limit set by Congress.

FCC Chairman Brendan Carr has already treated the rule as more of a suggestion. In March, the Carr FCC granted a waiver allowing Nexstar Media Group to buy Tegna in a deal that let it reach over half of TV households. The Carr FCC argued that Congress gave it authority to modify or waive the rule.

Carr now plans to repeal the 39 percent limit and replace it with a "case-by-case review" of each proposed merger, the chairman announced today in an op-ed published on Breitbart. The change would make it easier for the FCC to pick and choose which station groups get to surpass the limit. Under Carr, this would likely benefit news companies that provide favorable coverage for President Trump.

Read full article

Comments

© Getty Images | Heather Diehl

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

14 July 2026 at 23:20

An industry-wide standard Microsoft invented to protect Windows, and later Linux, devices from firmware infections has been trivial to bypass for 13 of its 14 years of existence. The discovery was made by researchers at security firm ESET after identifying 11 firmware images, at least one from 2013, that were known to be defective but remained signed by the software company anyway.

The images are known as shims, which were invented to extend Secure Boot to Linux devices and utility software. Using a technique simple enough to be performed by novice hackers, these old, forgotten shims can be used to completely circumvent the protection, which is embedded into the UEFI (Unified Extensible Firmware Interface) of the device's motherboard. The gaffe is the result of the failure by Microsoft, which oversees the signing of shims, to revoke the publicly available images once vulnerabilities were found in them.

Threat extends to Windows and Linux users

The threat extends to Windows and Linux users alike, since the shim can be installed on devices running both operating systems. From there, an attacker can subvert the mandated chain of digitally signed firmware to install malicious firmware that loads early in the boot process and persists after either the OS is reinstalled or a hard drive is replaced.

Read full article

Comments

© Getty Images

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

14 July 2026 at 23:20

An industry-wide standard Microsoft invented to protect Windows, and later Linux, devices from firmware infections has been trivial to bypass for 13 of its 14 years of existence. The discovery was made by researchers at security firm ESET after identifying 11 firmware images, at least one from 2013, that were known to be defective but remained signed by the software company anyway.

The images are known as shims, which were invented to extend Secure Boot to Linux devices and utility software. Using a technique simple enough to be performed by novice hackers, these old, forgotten shims can be used to completely circumvent the protection, which is embedded into the UEFI (Unified Extensible Firmware Interface) of the device's motherboard. The gaffe is the result of the failure by Microsoft, which oversees the signing of shims, to revoke the publicly available images once vulnerabilities were found in them.

Threat extends to Windows and Linux users

The threat extends to Windows and Linux users alike, since the shim can be installed on devices running both operating systems. From there, an attacker can subvert the mandated chain of digitally signed firmware to install malicious firmware that loads early in the boot process and persists after either the OS is reinstalled or a hard drive is replaced.

Read full article

Comments

© Getty Images

The US government warns that Russia state hackers are coming after your router

13 July 2026 at 22:03

The federal government is warning users of home and small office routers to secure their devices as Russia state hackers continue to mass-compromise them for use in obscuring nefarious actions against sensitive organizations in the public and private sectors.

Both the Russian and Chinese governments have been compromising routers for years, sometimes in prolonged tugs-of-war to wrest control of devices the other has already commandeered. The US government has occasionally issued covert commands and taken other steps to disinfect routers. Google and other companies have also worked to disrupt the massive botnets that control compromised routers in lockstep. The actions to date are little more than whack-a-mole exercises as the operators simply replace their botnets with new ones.

Proxy networks: The go-to tool

“Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple critical infrastructure sector networks,” the Cybersecurity and Infrastructure Security Agency said Monday. The hacking groups are tracked under various names, including Berserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard, and Static Tundra. The advisory was co-issued by governments from around the world, including Australia, Denmark, New Zealand, and the UK.

Read full article

Comments

© Getty Images | BernardaSv

Now, defenders are embracing the prompt injection, too

13 July 2026 at 16:06

Prompt injections, the malicious commands attackers embed into content to entice large language models to follow them, have been attackers’ go-to tool for turning AI platforms against their users. A well-phrased command sneaked into an email or calendar invitation is often all it takes to cause the LLM to exfiltrate sensitive data or follow other harmful actions.

Now, defenders are embracing the prompt injection, too.

A strong, sharp effect

Researchers from Tracebit on Monday said they found that placing prompt injections alongside passwords, cryptographic keys, and other secrets stored on Amazon Web Services was often all that was needed to shut down attacks from AI hacking agents. The prompts direct the attacking LLM to perform an action forbidden by its guardrails, the safety barriers AI developers erect to prevent it from taking harmful actions. The LLM responds by shutting down.

Read full article

Comments

© Getty Images

MIT Engineers Unleash New ‘Aerial-Aquatic’ Robot That Can Swim Underwater and Fly Like a Bird

12 July 2026 at 15:08

Engineers have developed a new robot that can swim underwater, then rise to the surface and take flight, in an aerial-aquatic feat that mimics some of nature’s most formidable fliers and swimmers.

Developed by researchers at the Massachusetts Institute of Technology (MIT) and the Swiss Federal Institute of Technology Lausanne (EPFL), the new robot’s capabilities could help launch a new generation of aerial-aquatic exploration vehicles.

Dubbed the “Flapping-Wing Aerial-Aquatic Vehicle” (FAAV), this lightweight robotic platform weighs less than 300 grams and can transition seamlessly between water and air with its very flexible flapping wings. Now, the team’s findings, published in the journal Science, could help scientists better understand how diving birds, which include puffins, petrels, loons, and gulls, are so adept at navigating two vastly different environments.

Such capabilities, the team says, could also pave the way toward advanced drones in the coming years that could transform ocean research.

Inspired by Diving Birds

Departing from conventional modern designs employed for aircraft or underwater vehicles, the team based their design on diving birds, which evolved to fly over water, then plunge beneath the waves to hunt for food, before surfacing and resuming flight.

aerial-aquatic robot
MIT’s new aerial aquatic robot seen launching from water into the air (Image Credit: Raphael Zufferey/MIT)

One problem when it comes to replicating these abilities in robots involves the density of water, which is around 1,000 times denser than air. Because of this, the engineering team had to carefully balance the flexibility of the robotic wings in their design, along with flapping frequency, tail angle, and other factors that allowed the robot to move efficiently through both environments without requiring propellers or separate propulsion systems.

Finding the Sweet Spot for Transmedium Travel

Experiments were undertaken by the team in the lab and in Switzerland’s Lake Geneva, and helped the team determine that the robot achieved best performance with medium-sized wings that flap at approximately five times per second. Under such conditions, the robot was able to swim one meter per second, then by pitching upward at a 70-degree angle, it could break through the surface, and continue this same movement to propel itself through the air.

Although the robot still has some limitations compared to the avian examples that inspired it, interestingly, it does appear to have one advantage: unlike diving birds, which paddle using their feet to achieve aquatic launches into the air, the new robot has no such requirement, and can transition from water to air relying only on its wings and adjustable tail.

Future Drones with “Aerial-Aquatic” Abilities

In the future, drones equipped with such capabilities could be leveraged to monitor marine ecosystems in a variety of ways. The team also says it could help to observe environmental concerns, such as water near glaciers or offshore infrastructure, or even collect data from hazardous locations that are either too difficult or simply too costly for ships to reach.

“Our dream vision is for oceanographers, marine biologists, and members of coastal communities to launch this robot from a boat, or from shore, and it would fly close to the area of interest, such as an iceberg or a port facility, or over a pod of whales,” according to Raphael Zufferey, assistant professor of mechanical engineering at MIT.

“It would dive into the water to take a measurement or collect a sample, and fly back to deliver the data at a fraction of the cost of traditional methods. Then it could go back out to dive for more,” Zufferey recently told MIT News.

Drawing from movements in nature influenced by evolution, the researchers hope their bird-inspired design may eventually help scientists by introducing cost-effective, but formidable new tools to help obtain information from some of the most challenging environments, all with help from robots that can do what only nature’s diving birds could once achieve.

The achievement is detailed in a new paper, “Leaping out of the water: aerial-aquatic locomotion with flapping wings,” which appeared in the journal Science.

Micah Hanks is the Editor-in-Chief and Co-Founder of The Debrief. A longtime reporter on science, defense, and technology with a focus on space and astronomy, he can be reached at micah@thedebrief.org. Follow him on X @MicahHanks, and at micahhanks.com.

Patch for Windows Defender 0-day could allow attackers to fill hard disk

9 July 2026 at 21:52

A patch Microsoft released on Wednesday to fix a zero-day vulnerability in its Defender security engine may cause Windows machines to write files large enough to completely consume available disk space, the researcher who discovered the flaw said.

RoguePlanet, tracked as CVE-2026-50656, came to public notice in June when NightmareEclipse, the pseudonymous name used by a researcher, disclosed it along with code for exploiting it. The vulnerability allows remote attackers to gain administrative control of Windows 10 and Windows 11 machines, even when real-time protection has been disabled. Over the past few months, the anonymous researcher has published a handful of other zero-days that have sent Microsoft scrambling to develop patches.

Writing files of unlimited size

Microsoft said Wednesday that it patched RoguePlanet with an update to the Microsoft Malware Protection Engine, which is used by the Defender antivirus app. The fix will automatically be downloaded and installed without users having to take any action. Wednesday’s update also includes “defense-in-depth updates to help improve security-related features.”

Read full article

Comments

© Photo Illustration by Igor Golovniov/SOPA Images/LightRocket via Getty Images

Allstate accuses Broadcom of auditing it because it quit VMware, CA

Allstate Insurance Company has accused Broadcom of haphazardly issuing audits against it because the insurance firm decided not to renew its contracts with VMware and CA Technologies.

The allegations were made in relation to a lawsuit that VMware filed against Allstate in December 2025, according to The Register. In the complaint, Broadcom alleges that Allstate failed to comply with license audits, which Broadcom claims its contract with Allstate requires.

In a June 12 filing, Allstate suggested that Broadcom issued the audits in response to Allstate deciding to end business with its companies. Allstate's statement reads:

Read full article

Comments

© Samuel Boivin/NurPhoto via Getty Images

“A Potential Minefield” in Earth’s Orbit Has Scientists Sounding the Alarm Over Hidden Objects Threatening Critical Satellites

9 July 2026 at 14:16

For many years, scientists have been tracking even the tiniest fragments of space debris orbiting our planet to keep tabs on whether these small leftovers from decades of spaceflight might become a problem, whether for astronauts or for populations here on Earth.

Now, in new research, scientists say they have uncovered dozens of previously undetected fragments of space debris orbiting high above Earth, revealing a hidden population of tiny objects that some liken to a “potential minefield” in space that could pose a growing hazard to some of the world’s most important satellites.

The findings, published in the Journal of the Astronautical Sciences, were carried out by an international team led by researchers at the University of Warwick, who found 25 faint objects in geosynchronous orbit—roughly 36,000 kilometers (22,400 miles) above Earth’s equator.

Close to 80 percent of these newly detected objects had been absent from catalogs available to the public that track such debris, meaning that there could be even more unrecognized leftovers from past space missions circling the Earth than experts realize.

A Problem in Geosynchronous Orbit

Home to a steadily growing number of satellites that we rely on daily for activities here on Earth, geosynchronous orbit is where satellites that govern communication systems, television broadcasting, weather forecasting, and environmental monitoring all reside.

Objects at this altitude remain synchronized with our planet’s rotation, which means that they inhabit what is considered some of the most valuable real estate in space around the Earth.

“Pieces of space junk can be moving very quickly relative to one another, as much as several kilometers every second,” says Dr. James Blake of the University of Warwick’s Centre for Space Domain Awareness, who served as the new study’s lead author. “The energies involved are really high, and even small debris can cause a lot of damage to very expensive satellites, so small things really matter.”

Archival Imagery Reveals New Concerns

Blake and his colleagues didn’t have to collect new observations to make these discoveries: they were able to discover evidence of undocumented orbital debris simply by looking at archival images obtained by the 2.54-meter Isaac Newton Telescope in the Canary Islands.

Offering a new perspective on these archival photos, the team employed a new image processing technique known as “blind stacking,” along with advanced image-processing algorithms, to detect fragments in orbit as small as five centimeters. The detections were significant, as they are now counted among the faintest examples of debris ever observed in geosynchronous orbit.

Naturally, a question arises: how many more examples of tiny debris might be lurking up there?

Tiny Tumbling Troublemakers in Space

Additional analysis of the brightness of these objects revealed another concerning reality: based on variances in the light they reflect, it was evident that many of these objects are tumbling as they make their way through space.

The team’s findings offer a wakeup call in terms of just how much undetected debris may be drifting—or even tumbling—through geosynchronous orbit. However, there is also a positive side to the situation: the team’s discoveries also showcase our growing ability to make such detections if we know how to look for such minuscule objects.

Still, the findings underscore the challenges presented by monitoring orbital debris in a space above the Earth where such materials could potentially linger for centuries, since atmospheric drag in this region of orbit is essentially nonexistent.

“The debris in the neighborhood of the geostationary belt is a potential minefield,” said co-author Dr. Stuart Eves of SJE Space Ltd. “No one in their right mind would enter a terrestrial minefield without a mine detector. Similarly, no one in their right mind should launch a satellite to GEO without an adequate debris survey.”

A Call for International Collaboration

With the project’s reach beyond Europe to include collaboration with researchers in Australia and Japan, the team says that international cooperation will be necessary to track potentially dangerous orbital debris—especially as more and more satellites are being placed in orbit above the Earth.

Increasingly sensitive surveys will be essential for understanding and mitigating the risks posed by even the smallest fragments of space junk, the team says.

“There are a finite number of orbital slots in the GEO belt,” Blake adds, “so it’s important that we know how much debris is out there, how it behaves, what risks are posed to the active satellites we rely on. Surveys for faint debris help us build a clearer picture.”

The team’s findings were detailed in a new study, “DebrisWatch II: Digging Deeper for Geosynchronous Debris,” which appeared in The Journal of the Astronautical Sciences.

Micah Hanks is the Editor-in-Chief and Co-Founder of The Debrief. A longtime reporter on science, defense, and technology with a focus on space and astronomy, he can be reached at micah@thedebrief.org. Follow him on X @MicahHanks, and at micahhanks.com.

Google pays $250K for Linux vulnerability allowing guest VM escapes

8 July 2026 at 20:01

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity flaws to surface this week in the open source operating system.

The vulnerability resides in KVM, which is, in essence, a virtual machine app included in the kernel of many Linux distributions. The vulnerability, tracked as CVE-2026-53359, allows guest virtual machines—such as those used in cloud platforms to isolate one user’s instance from the host OS and other user instances—to break out of that container.

Januscape: A threat to cloud platforms

The vulnerability affects KVM running on both AMD and Intel processors. It exploits bugs residing in the KVM guest-side, the portion of the VM that consists of only resources like the OS or drivers present in the guest VM, rather than resources present on the host machine. The threat went unnoticed in the Linux kernel for 16 years.

Read full article

Comments

© Getty Images

Aussie gov't tells volunteers to throw out thousands of functioning test routers

8 July 2026 at 19:10

Last week, thousands of SamKnows routers were bricked after a government program ran its course.

In 2020, as part of a program conducted by the Australian Competition & Consumer Commission (ACCC), the Australian government's chief competition regulator, thousands of volunteers received routers to help test and report on the typical speed and performance of broadband plans in Australia. (More specifically, the Measuring Broadband Australia (MBA) program targeted fixed-line broadband services provided over the NBN, Australia's government-owned wholesale open-access broadband network, as well as services delivered over other access networks.)

According to the final report that the ACCC distributed, the routers are whiteboxes that were “supplied by SamKnows” and that “perform tests to measure internet performance using test servers maintained by SamKnows and hosted in Australia.”

Read full article

Comments

© Getty

❌