IT General

TL;DR: The Samsung 34-inch Odyssey G5 ultra-wide gaming monitor is on sale for $249.99 at Amazon, down from its $399.99 list price.

Opens in a new window Credit: Samsung Samsung 34-inch Odyssey G5 $249.99 at Amazon
$399.99 Save $150 Get Deal at Amazon

Prices for Samsung’s Odyssey G5 have usually hovered around $280, but Amazon has surprised gamers with a fresh discount, dropping the price below $250 for a limited time. If you want an ultra-wide monitor for GTA 6, this might be the perfect upgrade. 

As of Nov. 2, the Samsung 34-inch Odyssey G5 (G55T) is going for $249.99 at Amazon, a hefty $150 price cut from the usual $399.99. With 38% off, that’s the lowest price we’ve seen since April (confirmed via price tracker camelcamelcamel). There's no third-party seller involved, as Amazon is fulfilling orders itself — with complimentary delivery currently scheduled for Nov. 7, or Nov. 6 with faster shipping. 

What makes the G5 a must-buy is its unusually broad 21:9 screen, packing 3440 x 1440 Ultra-WQHD resolution plus HDR10 into a 34-inch VA panel. 

SEE ALSO: The Samsung Odyssey G9 curved gaming monitor is down to $797.99 — save over $500 this weekend

If you’re waiting for Grand Theft Auto 6’s PC port to get announced before you set out to explore Leonida, this monitor is an amazing choice for sweeping across the landscapes of other huge open-world games like Red Dead Redemption 2.

The display has a pronounced 1,000R bend that curves towards you at either end, making the extra horizontal space feel less spread out and more immersive altogether. On the performance side, you're looking at a 165Hz refresh rate paired with a 1ms MPRT response time, giving fast-paced multiplayer games like Fortnite or Apex Legends plenty of headroom for fluid movement.

If you’re ever worried about fluctuating framerates and screen tearing, AMD FreeSync Premium (one of our favorite features to see in gaming monitors) will have you covered courtesy of its handy adaptive sync technology. 

TL;DR: Stay on top of projects with help from this Microsoft Project Professional 2024 lifetime license for Windows, on sale now for $39.97 (reg. $1,129.99) through Nov. 8.

Opens in a new window Credit: Microsoft Microsoft Project Professional 2024: Lifetime License for Windows $49.97
$1,129.99 Save $1,080.02   Get Deal

Between spreadsheets, calendars, notes, and the endless to-do lists, managing a project is a project in and of itself. That’s where Microsoft Project Professional 2024 comes in, offering a visual project management tool that makes it easier to map out timelines, track your progress, and determine how tasks fit together.

Right now, you can lock in a Microsoft Project Professional 2024 lifetime license for Windows for just $39.97 until Nov. 8.

Oftentimes, complicated projects need to be seen to be understood. Microsoft Project Professional 2024 makes that possible, with a user-friendly interface and prebuilt templates that help you keep your projects on track.

This lifetime license for Windows serves as your very own project management assistant on your PC. Better understand your project’s complex schedule with help from multiple built-in timelines. There’s also the option to run what-if scenarios and check out all your options.

Microsoft Project Professional uses baselines to track and compare your progress against your original plans. You can submit timesheets to see how much time has been spent on project and non-project work. You can also hover over team members’ names to check their online status and hop on a Microsoft Teams call to collaborate.

This lifetime license for Windows is tied to your device, not your Microsoft account. You can pay once and enjoy lifetime access without any recurring fees.

Score your own Microsoft Project Professional 2024 lifetime license for Windows for just $39.97 now through Nov. 8.

StackSocial prices subject to change.

Everybody loves a good smart home dashboard. There are a million different ways to make one, but they typically involve large, rectangular displays. I decided to go in an opposite direction and use an old Pixel Watch.

Netflix is getting a head start on the holidays this November, with a couple of Christmas movies joining its catalog. There’s a lot to look forward to this month, but before you dive into everything streaming in November, there are a few exciting releases to keep your eye on this week.

Search online for ways to speed up Windows 11's File Explorer, and you'll find plenty of familiar advice: disable thumbnails, clear File Explorer history, switch to This PC, and turn off the Preview Pane. The same handful of recommendations kept appearing in troubleshooting guides, support articles, and forum discussions, so I decided to test them. What surprised me wasn't which tweak worked best. It was how little difference most of them made.

The right tools are critical to any project, and work gets done faster and more efficiently when everyone works in a comfortable, fun environment. This is where power tool accessories, like Milwaukee's Rover Triple Light Panel and M18 Jobsite Radio, hold their own. The Rover Triple Light Panel illuminates your workspace so you can work safely and comfortably, while the Jobsite Radio delivers excellent sound quality and volume for your favorite songs on the job. Get both at 65% off with these Home Depot Deals.

Microsoft has been pushing Windows users to shift to OneDrive after canning its old PC migration tool. Windows 11 had a better option for a while, allowing people to send files directly from one computer to another without the need to use cloud storage. But that choice is gone now with a cloud-first replacement that only offers 5GB of free storage.

Editing your PC's environment variables can save you time in Command Prompt and make your scripts more concise. It also lets you customize where Windows stores certain files. This is what you need to know about getting started adding, editing, or removing entries from your Environment Variables on Windows.

Samsung is my baby, but I don’t feel the same way about every app that comes preinstalled on it. Bixby, Samsung Shop, Samsung News, and a few others rarely make it into my daily routine. I already have alternatives that do their jobs better, so keeping both versions feels unnecessary.

The Nov. 3 midterm elections are right around the corner, and the outcome will determine the makeup of Congress and the trajectory of President Donald Trump's remaining years in office.

So if you haven't already voted, still need to mail in a ballot, or don't even know where to start, the hours are counting down. For an overview of voting deadlines, drop box and polling locations, and registration information, visit Vote.org, USA.gov, or keep reading below.

SEE ALSO: Election Day 2026 trackers: Follow election results, lawsuits, and more online How to vote by mail

More than 51 million Americans have already voted in the 2026 midterm elections. The number of people voting by mail grew substantially in 2020, and eight states now host what are known as all-mail elections or offer universal mail-in voting.

Mail ballots are sent early, with most states requiring at least a week's lead time before Nov. 3. If you were issued an absentee or mail ballot and plan to send it by mail, your ballot must be postmarked by or on election day, not after. A late postmark can void your ballot. If you never received your ballot, contact your election office ASAP.

In some states, voters can also drop off their ballots at designated drop boxes (the websites of county registrars typically list drop box locations, such as the Los Angeles County Registrar-Recorder). Around 15 states require drop box options for voters, many located at places like libraries and parks:

• California 

• Colorado 

• Delaware 

• Georgia 

• Florida 

• Kentucky 

• New Jersey

• Nevada 

• Maryland

• Michigan 

• Oregon 

• Rhode Island 

• Utah 

• Virginia 

• Washington 

Another 11 states prohibit drop boxes, so make sure your ballot gets postmarked if you are registered in these states:

• Arkansas 

• Louisiana 

• Mississippi 

• Missouri

• North Carolina 

• Oklahoma 

• South Carolina 

• South Dakota 

• Tennessee 

• Texas 

• West Virginia 

To find more rules on drop box voting, absentee voting, and voting by mail, visit your state's registrar of voters or scroll down to the state-by-state database on Vote.org.

How to vote in person

Despite a growing number of voters skipping the polls in favor of mail, many voters still cast their ballot in person. Voters are assigned to an in-person polling location based on the address they used to register to vote, and most can start voting before Nov. 3.

Polling times vary by state, with some states offering in-person voting as early as one month before election day (this practice is usually referred to as early in-person voting). Voters with disabilities may need to go to a different polling location, depending on their accommodation needs.

What to bring to the polls

Voters do not need any special equipment or documents to cast their vote. You may need to bring a form of verification to the polls, however, depending on your state. Scroll down for more information.

Voters are also allowed to bring in personal notes, a voter's guide, and even sample ballots into the polling booth.

How to find a polling place near you

Voters can find out their nearest polling location by checking their registration or calling their local registrar of voters. They can also use an online polling locator such Vote.org or the National Association of Secretaries of State (NASS).

Voting FAQ

Do I need an ID to vote?

That depends on your state. Voter ID laws vary across the country, so check with your state election officials to be sure. In some cases, you may still be able to vote without an ID by signing an identity form.

Can I track my ballot if I voted by mail?

Yes. Most states offer some form of ballot tracking for voters. Find specific information on ballot tracking via your state's registrar website or call 866-OUR-VOTE (866-687-8683).

Can my ballot be challenged?

Yes and no. Ballots can't be challenged without a real legal basis under the National Voter Registration Act. A voter purge, in which election workers "clean up" voter databases by deleting names, can't be conducted within 90 days of a federal election. If you were on the roll as of August, filled out your ballot correctly and on time, your vote should count.

Federal agents and law enforcement cannot legally seize voting machines, nullify ballots, or stop the count.

That being said, groups may still challenge swaths of ballots up until the election. If your registration is challenged at the polls, you can still cast a provisional ballot.

Are electronic voting machines safe?

Electronic voting apparatuses are overseen by the U.S. Election Assistance Commission (EAC) and thousands of election officials to ensure their safety and reliability. While recent studies have uncovered security flaws, election security researchers say they have not yet led to any kind of election interference, as suggested by some critics and conspiracy theorists.

Instead, experts suggest the biggest threat to election integrity is the spread of misinformation, which is increasingly enabled by AI.

SEE ALSO: The truth about voting machine security in the 2024 election

Can the president intervene in the election?

The administration has been casting doubt on the legitimacy of the midterm results, including claims that thousands of noncitizens are casting votes in this year's election. The majority of noncitizen voters charged with crimes have been found to be lawful residents.

Despite threats from the Trump administration, the president cannot issue an executive order or harness emergency powers to take over or nationalize the election process. Previous executive orders attempting to change the electoral process have been struck down or blocked by courts, and additional safeguards prevent the current Congress from refusing to seat newly elected officials.

Shopping for gifts for gamers is a double-edged Master Sword. On the one hand, there are so many cool games, consoles, and accessories to choose from. But that's also the tricky part: There is so much gaming-related merchandise to choose from, to the point where you might feel under-leveled for the "simple" task of picking that just-right gift — especially if they're a long-time player who already has all of the obvious gaming gear. That's where we come in.

To help you on your side quest to find a respectable present for someone who loves video games, we've compiled a massive list of more than 50 gamer gift ideas for 2025 — including a bunch of games we've played and products we've tested ourselves. If you're gifting on a budget, you'll do well with a few months' worth of their favorite video game subscription service or a copy of one of the best video games of 2025 (recommended by Mashable's own Alex Perry). Leveling up over the $100 mark expands your options to high-end peripherals, while $200 and above unlocks current-gen consoles, or if you're really nice, a whole new PC.

Of course, mega fans of specific franchises can never get too much displayable merch. We've peppered in some collectibles, stocking stuffers, and Christmas gifts that they may not have yet, like Nintendo-themed LEGOs or a Diablo-themed Tarot deck.

I broke the cardinal rule of homelabbing—open ports and reverse proxies without properly locking things down. This led to not just one, but two of my servers being compromised over the period of a few months. I’ve locked things down now, but here’s how you can tell if your homelab has been hijacked by a cryptominer.

There is a 30 percent chance this article is fake. 

It's not, of course. I am a real reporter. These are real sources. You can trust me. 

Or can you?

According to a recent study from Pew Research, around one-third of recent web content is AI-generated. Around 10 percent of ".com" sites now have AI's fingerprints on them. Fake news sources peddling misinformation or propaganda (commonly referred to as "pink slime") have long outnumbered real news publishers — and are continuing to multiply with the help of AI.  

Even legit websites and social platforms can steer you toward misinformation, scams, and other online dangers. A platform built to keep you hooked to an endless feed, fed by engagement and seeking to capture your attention, is a recipe for bots, phishing, and disinformation campaigns. Social media "experts" — sometimes entirely AI-generated people, other times real humans with ulterior motives — are building followings in the millions. In this increasingly confusing environment, here's how to get to the truth.

Why fake sources are proliferating 

"High quality misinformation and deception were largely the domain of nation-states and well resourced groups," explained Donnie Hasseltine, chief information security officer at Arkstone Defense. Now, anyone can fake a site, build a bot, or amplify a misleading claim in an instant.

In addition to a decline in platform moderation, access to increasingly sophisticated AI models, mainly through open source markets, has completely changed how information is published, explained Zohaib Ahmed, CEO of deepfake detector Resemble.AI. 

Likened to the "Wild West" by Ahmed, bad actors now have access to a host of AI models and tools without built-in safeguards to prove or disprove authenticity. They can avoid automatic detection built into mainstream models like Claude or ChatGPT, uploading troves of user and site data to build sophisticated spoofs without alerting developers. 

Source: Pew Research Center Credit: Cole Kan/Mashable/ Getty

The technology has generated a ballooning market for affordable "scam kits." Such kits cover "everything from advertising to writing blog posts and content on social media, to how features are being built in the product, how video calls are being done and how images are being uploaded onto social media platforms," Ahmed said. With a few hundred dollars, scammers can spoof entire sites, make convincing log-in portals, and build natural-looking engagement that makes it feel more real. 

It's not just relegated to pink slime, either. You may encounter "url hijackers" or "typosquatting" for instance. These webpages closely mimic URLs for reputable sites — including news sites like "abcnews.com.co" or known organizations like FIFA — banking on users not looking too close. Others may spoof sites where it's common to exchange money or place bets. These domains may siphon off your personal information or try to steal your money outright. 

The same happens on social media sites and chatrooms: X accounts meant to look like real people, dodgy TikTok Shop links that take users off site, suspicious links dropped in gaming chats by players you thought were your friends. 

Why old advice may not work, and what else you can do 

"The traditional signals of authenticity are fading," explained Eyal Elazar, head of market intelligence for e-commerce security business Riskified. "Only a few years ago, verifying something online relied on recognizable visual or contextual cues: a weirdly spelled URL, pixelated image artifacts, a robotic cadence in a video, or the sheer logistical effort required to pull off a coordinated hoax. Today, AI can effortlessly clean up misspelled URLs, blurry images, and stiff video voices."

Because users are up against a modern world of AI-powered websites and bot accounts, they also need new advice for scouring through the muck. 

Check URLs and profile names to prove a website or account's veracity

The OG way to ensure you're on a legit site still works and is very simple: Check the URL.

First, look for the padlock icon or other indicator the browser has verified your connection. For Google Chrome users, select the menu icon to the left of the URL. You should see "Connection is secure." 

Second, look for "https://" not "http://". The "s" designation means a site has been authenticated. 

These security components are still essential components of the internet, explained Ron Kerbs, CEO of AI fraud prevention company Kidas.  

Third, double-check the URL's spelling, says Ahmed. Keep an eye out for symbols in the place of letters and non-English characters masquerading as the English alphabet. Hover over a URL to see the full text. 

If you're still unsure, search the URL on Google. You can also cross-reference URLs on Google's site status page or use an online URL scanning tool, Ahmed recommends. 

Many mainstream browsers now include built-in safety checks that flag when a website doesn't meet these security parameters. Pay attention to them, and only follow through on visiting a site if you know its origins. 

But bear in mind that social media accounts do not play by these rules, experts warn. 

To verify an account is legit, start with the platform's own verification tools, like the classic check mark. Be sure to click through to the profile itself, not just how it appears on your feed. Many platforms allow custom characters in display names, which help users fake verified check marks on first glance. Other platforms, like X, let users buy verification, so use additional means to confirm those accounts.

Be on alert for AI-generated influencer content, too. Look for AI content labels in captions, comments, and on profiles. Use the tips below to see if they've skirted detection (many do).

Credit: Cole Kan/Mashable/Getty Use the SIFT Method to check for legitimacy

A site or account may seem legit on the surface, but its content could be far from it. Basic security measures aren't prevention for misinformation or manipulative content posted to verified platforms, experts say. 

"You close the door, someone gets in through the window," Kerbs said. Users should use multiple layers additional methods beyond URL scanning to verify that what they're looking at is real.

Traditional recommendations for vetting news sources, for example, include the SIFT method. It's an oft-referred to media literacy skill designed by misinformation researcher Mike Caufield and stands for:

• Stop your scroll 

• Investigate the source 

• Find other coverage 

• Trace back the origins

Zoning Method 

Other news literacy groups, like the News Literacy Project, suggest a strategy of "zoning," or  categorizing content, including websites and social media accounts, by their purpose. 

"Identify the type of information you are looking at and determine its purpose. Is it news that’s meant to inform you? Or an opinion that’s trying to persuade you? Or is it a paid ad that’s encouraging you to buy something?" said Chuck Salter, president and CEO of the News Literacy Project. Salter recommends online users zone first before making judgements about trust. "You need to understand the main intent." 

Salter also recommends a fact-checking concept called "lateral reading," in which you verify a source by searching what others are saying about it. 

This can be used to fact check social media accounts, too. Before resharing, check the algorithm. How do others feel about this page? 

Methods like SIFT and zoning are fairly simple and very effective ways to spot misinformation. But we're up against platforms actively working to steal our attention span and keep us glued to their platforms. We are urged to use integrated generative AI tools intended to reduce friction, but which can reduce users' critical thinking, experts say. Young people are at particular risk, Salter explained, and often fail to properly "zone" content without help. 

We may need to simplify our toolkit even further. 

Easy tips to use every day when scanning online

For one, never trust a screenshot, said Roei Sherman, senior director of research at cloud security firm Mitiga. A common way to spread misinformation, faked screenshots feed off of the attention economy: Get enough people to share the eye-grabbing headline or quote, and you'll convince a good amount of people it's true, especially if a generally reliable source is slapped on top. 

Second rule of thumb: If a post feels like rage bait, it's probably rage bait. Scammers and propagandists stoke emotional responses to get your clicks, Rubinson explains. Try not to engage. 

And lastly, if an account is asking you to leave the platform you're on, exercise caution. Fake accounts often steer users off of moderated platforms toward other websites with looser content guidelines or toward completely unregulated areas of the internet. It's why many social media giants, like TikTok, have specific rules against the promotion of off-platform sites.

Use established fact-checkers 

If it's best to check a claim with multiple sources, it's even better to check the claim with an authority that makes fact-checking its job. Long before AI, these sites existed as nonpartisan sources for political claims. Now, they've expanded to cover just about anything going viral. 

• Politifact

• FactCheck.org / SciCheck​

• Snopes.com​

• Washington Post Fact Checker​

• Poynter

• NewsGuard AI False Claims Monitor and Reality Check newsletter

Browser extensions can help you fact-check quickly

Some cybersecurity experts recommend browser extensions that can automatically scan a page for AI-generated content and give an assessment of its trustworthiness. These are a good starting point, but like most detector tech, are not infallible, experts like Marijus Briedis, chief technology officer at NordVPN, warn.

• Resemble.AI Deepfake Detector: Scans all images, video, and audio and returns a verdict on whether or not AI was used. A free account includes four website scans per day.

• NewsGuard: Provides a trust and reliability rating for news sites, based on nonpartisan criteria. 

• McAfee Web Advisor: The free version of the cybersecurity's fraud tool, Web Advisor scans for malicious sites, including hidden adware, spyware, and phishing scams.  

• DuckDuckGo Scam Blocker: The privacy-forward browser has built in scam blockers that also flag known scam sites, including shopping sites and fake cryptocurrency exchanges.

Want more tech and digital culture news delivered to your inbox daily or sent straight to your device? Sign up for Mashable's Top Stories newsletter or get Mashable push alerts today.

Bose is one of the most trusted audio brands, and you can't go wrong with its high-quality products. They aren't cheap, but you don't have to pay full price for Bose headphones and Bluetooth speakers if you take advantage of these limited-time Amazon deals. Now's the time to upgrade your sound with the Bose SoundLink Plus Bluetooth speaker and QuietComfort Headphones (2nd Gen) going at massive markdowns.

I was so excited when it came time for me to buy my first TV, and I unfortunately let that excitement get away from me a little bit. I ended up with the opportunity to get a fairly new curved Samsung TV for an absolute bargain. Back then, the technology was still new, and I got swept up in all the marketing jargon. I didn't know that it would end up making watching TV in my living room so incredibly frustrating.

ChatGPT is preparing to give users one fewer tab to think about.

OpenAI plans to merge ChatGPT's Chat and Work tabs into a single experience, bringing everyday conversations and more complex tasks into the same place. The company outlined the change in an email to users, according to TechCrunch, with a limited test planned before a wider rollout.

Currently, OpenAI describes Chat as the place for everyday questions and conversational help, while Work handles longer tasks, including research, analyzing information, and creating documents, presentations, and websites. The desktop app also includes a separate Codex experience for coding, which will remain separate after the merger.

SEE ALSO: CapCut is adding a ChatGPT plugin. See it in action.

"This will enable you to move from exploring an idea to having ChatGPT carry it through, all in one place," OpenAI reportedly said in the email. Users will be able to bring in files and plugins while reviewing and guiding its work.

The interface change also comes with an update that paid subscribers may want to keep an eye on.

Starting in December, Plus, Pro, and Business plans will have a shared usage allowance across ChatGPT and Codex, according to OpenAI's updated support page. Usage will be measured in tokens, the units of information AI models process and generate. More demanding tasks and advanced models will generally consume more of that allowance.

There is an exception, though. OpenAI says Instant chat won't draw from the shared allowance. The company expects most users won’t have to wait for their limits to reset more often than they currently do. Subscribers will be able to check their combined remaining usage and reset times in Settings under Usage. Once they reach a limit, the listed options include waiting for a reset, upgrading, or buying credits for eligible features.

The rollout will test whether bringing those tools into the main chat increases their use. If asking a quick question turns into handing off an entire project, subscribers may find themselves paying closer attention to what their plan covers.

Disclosure: Mashable's parent company, Ziff Davis, sued OpenAI in April 2025, alleging copyright infringement related to the training and operation of its AI systems.

I thought the early Black Friday headphones deals were starting out strong a couple of weeks ago, but I doubted the power of early November.

Though we still have a little over three weeks to go until Black Friday proper on Nov. 27, headphones brands have decided Black Friday starts now, if their price cuts are anything to go by. Take, for instance, the 45% discount on the second-generation Bose QuietComfort headphones (released just this past August, btw). Prefer a flagship model? No problem, the Sony WH-1000XM6 — our top pick for premium sound — are available for $82 off.

SEE ALSO: Everything to know about Black Friday 2026: Best deals, sale dates, how to shop smart, and more

As someone who tests headphones year-round and is heading into her sixth year covering Black Friday at Mashable, I only write about deals that are actual deals. That means double-checking accurate list prices, using my price history knowledge from looking at headphone product listings literally every time I open my work laptop, and using price tracking tools where there may be gaps in my knowledge. This year, my criteria also include an awareness of price increases that have affected nearly every area of tech.

With all of that in mind, those two aforementioned deals — and the ones you'll find below — are the absolute best headphones deals you'll find ahead of Black Friday. And when more inevitably crop up as the shopping holiday draws closer, you'll be sure to find them on this list.

Best early Black Friday headphones deal Opens in a new window Credit: Bose Bose QuietComfort (2nd gen) $199 at Amazon
$359 Save $160   Get Deal at Amazon Why we like it

The second gen Bose QuietComfort headphones are one of my favorite headphone releases of 2026. Though the $359 price tag does sit on the higher end of mid-range, these headphones eke ever closer to the performance of the QC Ultra headphones, which cost $459. Their all-day comfort, spatial audio, and excellent ANC are reasons to invest, especially at this price point. Though audiophiles will probably be happier with the Sony XM4C (you can read my full breakdown of how these two headphones compare), at the time of writing, the Sony headphones clock in at $248, making the Bose headphones the best buy ahead of Black Friday.

Check out our full review of the Bose QuietComfort (2nd gen) headphones.

More early Black Friday headphones deals

• Sony WH-CH530 — $48 $69.99 (save $21.99)

• Sony WH-CH720N — $88 $179.99 (save $91.99)

• Marshall Major V — $89.99 $159.99 (save $70)

• Sony WH-CH730N — $128 $179.99 (save $51.99)

• Nothing Headphone (a) — $129 $199 (save $70)

• Nothing Headphone (1) — $199 $299 (save $100)

• Marshall Monitor III — $199.99 $279.99 (save $80)

• Sennheiser Momentum 4 — $199.99 $299.99 (save $100)

• Sony WH-1000XM5 — $198 $399.99 (save $201.99)

• Sony WH-1000XM4C — $248 $299.99 (save $51.99 with on-page coupon)

• Bose QuietComfort Ultra (2nd gen) — $369 $449 (save $80)

• Sony WH-1000XM6 — $378 $459.99 (save $81.99)

• Apple AirPods Max 2 — $449 $549 (save $100)

Cloud-based LLMs such as Claude and ChatGPT may be impressive, but your prompts are all processed on someone else's servers. Local LLMs offer privacy, but the more capable models require powerful hardware to run. Even if you can only run small LLMs at home, you can make them much more accurate by giving them offline access to Wikipedia and other data.

I have a bad habit of opening certain apps whenever I pick up my phone — even when I have no real reason to check them. I’ve tried ignoring notifications and setting app timers, but neither has stopped me from going back for another scroll. I’ve scrolled straight through lunchtime without even realizing it.

Many websites and online platforms use Cloudflare in order to properly handle web traffic. Cloudflare has become so ubiquitous that the few times the company's services have gone down, a significant portion of the internet goes down with it. 

Hackers are very aware of this and are now rolling out new cyber attacks that impersonate Cloudflare in order to trick unsuspecting internet users into giving these cyber criminals unauthorized access to their computers.

One such attack, according to reports, weaponizes Cloudflare's verification pages, often found on websites to prove a user is human and not a bot, in a ClickFix campaign. The newly discovered attack was recently discovered by cybersecurity researchers at the SANS Technology Institute's Internet Storm Center. 

ClickFix campaigns are cyber attacks that rely on social engineering tactics. There are no software or hardware security flaws involved. There isn't even a harmful file that a user was tricked into downloading. An unsuspecting victim is simply tricked into copying and executing malicious commands on their own device, which can download malware or provide the hacker with access.

SEE ALSO: Hackers find a way to turn users' own AI agents and Downloads folders against them

In this specific newly discovered attack, users visit a website that has already been compromised by the hacker. After clicking the Cloudflare verification box to prove they are human, the user is told that the process is taking longer than usual. The user does not know that this Cloudflare verification box is a fake, set up by the hacker.

The prompt informs the user that to speed up the process, they need to follow the directions on the screen and run a specific command. This is where the hacker then gains access.

According to the report, a different set of instructions appears to users based on whether they access the website through a PC running Windows or a Mac. The report lists requests that appear intended to track information such as the visitor's location and IP address.

The report states that this attack has been rolled out across multiple compromised websites.

Users should know of the ordinary verification methods, such as clicking verification boxes or completing a CAPTCHA. A user should never open up their terminal or Run box to complete a human-verification check.