DIGITAL LIFE

AI is already changing the way cyberattacks unfold

A new report reveals that criminals are already exploiting artificial intelligence models in unprecedented ways. This scenario concerns experts and could completely transform how companies protect their systems.

For a long time, artificial intelligence was viewed primarily as a tool to boost productivity, create content, and automate tasks. However, as these technologies evolve, they are increasingly being adopted by criminal groups for ever more sophisticated attacks. A recent report shows that this shift is already underway, indicating that cybersecurity may be entering a new era where intelligent programs face off against other equally intelligent programs.

A study highlights that language models are being used by cybercriminals in far more advanced ways than imagined just a few years ago. Rather than merely accelerating repetitive tasks, artificial intelligence has begun to play a direct role in decision-making during cyberattacks.

In practice, this means certain malicious programs can alter their own structure while running, modifying code segments to evade detection by traditional security tools.

This behavior marks a significant shift from conventional malware. Historically, antivirus software and protection platforms relied on analyzing digital signatures, known patterns, and previously cataloged behaviors to identify threats. Now, however, some programs can continuously alter these patterns, making detection far more complex.

According to experts, some groups also use language models to automatically create new routines, adapt strategies based on the target system's response, and modify execution methods to bypass defense mechanisms.

While this type of technology does not yet fully replace human involvement, it reduces the time required to plan attacks and enhances adaptability during an intrusion.

Another aspect highlighted in the report is the growing use of AI by cybercrime groups and state-sponsored organizations, demonstrating that the technology has moved beyond the experimental stage to become an integral part of actual operations. The advancement of artificial intelligence has also brought about another problem: criminals are learning to exploit AI models themselves to obtain information that facilitates the creation of malicious code.

Major commercial systems typically have security mechanisms in place to reject dangerous requests. Even so, researchers observe that some users attempt to bypass these barriers by presenting seemingly legitimate requests, such as academic exercises or information security research. This type of manipulation—known as AI-based social engineering—has become a new area of ​​focus for the companies responsible for these models.

Furthermore, experts warn of a growing underground market for AI-based tools sold to facilitate attacks such as phishing campaigns, the automated production of malicious code, and other illegal activities.

This scenario reinforces a trend already under discussion within the industry: the future of cybersecurity will increasingly depend on the use of artificial intelligence for defense as well.

Instead of relying solely on systems based on fixed rules, companies are investing in platforms capable of continuous learning, identifying unusual behaviors, and responding rapidly to novel threats.

The expectation is that the next generation of security solutions will utilize intelligent models to analyze vast amounts of data in real time, detect suspicious patterns, and react before an attack causes significant damage.

Ultimately, the transformation lies not only in the evolution of malware but in a shift in the digital battlefield itself. While the conflict once played out between hackers and traditional antivirus software, all signs point to a future confrontation between AIs trained to attack and those developed to thwart such attacks.

This technological race is just beginning, and its evolution could determine how companies, governments, and users protect their data in the years to come.

AI has already changed the nature of attacks by democratizing cybercrime, reducing execution time from days to seconds, and enabling large-scale intelligent automation. Advances in frontier AI and autonomous AI have redefined the digital threat landscape.

1. Lowering the barrier to entry...Attacks that once required advanced programming knowledge can now be executed by inexperienced criminals. Generative AI models can be instructed via simple prompts to write malware code, debug scripts, or structure entire campaigns.

2. Machine-speed attacks...AI analyzes thousands of lines of code, networks, and APIs for vulnerabilities at lightning speed, far surpassing human checking capabilities. Where humans once spent hours or days finding a flaw, AI takes only minutes.

3. Hyper-realistic social engineering...The classic phishing email riddled with grammatical errors is a thing of the past. AI now generates perfectly personalized and convincing text. Through voice cloning and video deepfakes, criminals can highly convincingly impersonate executives or technical support staff.

4. Polymorphic and autonomous malware...Criminals employ AI agents that operate continuously. They create malware capable of constantly altering its own code (polymorphism) to evade traditional defense systems. Furthermore, AI can navigate corporate networks, validate data, and exfiltrate it without human intervention. To combat a landscape where AI attacks and defends at the same speed, companies and institutions must adopt automated defenses and behavior-based intelligence, while also protecting their AI models against manipulation. You can follow key cybersecurity trends in the AI ​​era via Palo Alto Networks or read more about the impact on organizations from Microsoft. The continuous operation of AI-powered bots, which work tirelessly, represents another advantage for attackers. Threat actors use generative AI to craft phishing lures, translate content, summarize stolen data, and generate or debug code. AI tools are already capable of independently identifying thousands of critical vulnerabilities in operating systems and browsers.

mundophone

DIGITAL LIFE

New browser-based ransomware identified

Check Point Research has identified a new method of browser-based ransomware generated autonomously through an AI hallucination associated with DeepSeek model files.

The attack—validated via a laboratory proof-of-concept released on July 3, 2026—eliminates the need to install malicious applications or exploit vulnerabilities by abusing legitimate web browsing APIs to encrypt local files. This discovery signals a significant shift in how new cyberattack techniques emerge, enabling artificial intelligence to act as a bridge between scattered knowledge and malicious objectives.

The technique relies on repurposing a legitimate local file access feature to encrypt data without installing software. While analyzing approximately 3,000 files attributed to DeepSeek in public telemetry, researchers detected code that, despite inconsistencies in most functions, accurately utilized the File System Access API.

This interface, designed for legitimate web applications such as text editors or creative tools, allows a webpage to request access to a folder on the user's device. If the victim grants permission—often through social engineering—the code gains the ability to enumerate, read, exfiltrate, and encrypt the files within that directory.

The innovation in this scenario lies in the AI ​​model's ability to autonomously link a theoretical risk to a practical attack chain, without advanced human technical intervention.

Android poses higher risk compared to iOS system isolation...The implementation of this technical specification across mobile platforms exposes digital ecosystems unevenly. Full API support, introduced in Chrome version 132 for Android, allows webpages to request direct access to critical folders, such as the DCIM directory. Tests conducted by Check Point Research on Chrome version 148 confirmed that granting this permission puts personal photos, screenshots containing banking data, and identification documents at risk. In contrast, Apple’s iOS ecosystem remains immune to this specific technique, as the Safari browser does not expose the API in question to web pages, instead mediating file access through the operating system's restricted isolation model.

This disparity underscores the need for careful monitoring in environments that utilize Chromium-based browsers.

Generative AI bypasses restrictions via neutral prompts...The language model's security filters reveal vulnerabilities when faced with indirect descriptions of code. In laboratory tests, the DeepSeek V4 model refused explicit requests to create ransomware. However, formulating neutral prompts focused solely on local file interaction functionality resulted in the generation of browser-based malicious code.

The model itself described the final output as a trap built into an image manipulation interface, featuring hidden behaviors akin to ransomware. In comparative evaluations, OpenAI and Anthropic systems refused requests or limited implementations to safe variants, requiring significant manual assembly to achieve a similarly functional workflow.

We are witnessing a fundamental shift in how new cyberattacks can originate. For the first time, we see evidence that an AI model can reason about a platform's legitimate capabilities and identify a functional attack technique that, until now, existed primarily at a theoretical level. The attacker does not even need to know the API exists; simply describing the desired outcome suffices. This has profound implications for organizations integrating AI into their processes and for users who center much of their personal and professional lives around their mobile photo galleries...Rui Duro, Country Manager for Check Point Software Technologies in Portugal.

Practical recommendations for digital mitigation and protection...Responding to this type of threat requires a shift away from security assumptions focused solely on detecting binary executables. Both individual users and corporate infrastructure managers must adopt rigorous controls at the web browsing layer.

For users and citizens:

Evaluate permissions: Treat every browser request for folder access as a critical security decision.

Avoid core directories: Never grant read or write permissions for the DCIM folder or directories containing personal documents.

Isolate tests: Use temporary or empty folders when interacting with unknown web tools or those marketed as AI solutions.

Maintain safeguards: Perform regular, encrypted backups stored offline or with reputable cloud services.

For companies and organizations:

Traffic filtering: Implement security solutions focused on disrupting the delivery chain, such as anti-phishing systems capable of blocking suspicious pages before user interaction occurs.

Group policies: Restrict or monitor the use of the File System Access API in corporate environments via Chromium browser management policies.

System updates: Mandate systematic updates for browsers and operating systems to ensure the implementation of new security controls from vendors.

Implications for the global cybersecurity ecosystem...The ability of artificial intelligence to translate abstract concepts into functional prototypes alters the economics of cybercrime. The technical barrier to entry is substantially lowered, enabling the development of highly personalized, disposable malware that is difficult to classify using traditional signature-based methods. The fact that a technological hallucination resulted in a precise approximation of a real vulnerability demonstrates that the security of language models cannot rely solely on filtering malicious keywords.

The sector faces the challenge of policing not only users' stated intentions but also the unforeseen convergence of legitimate capabilities manipulated by algorithms.

Frequently Asked Questions (FAQ)

-What is browser-based ransomware?

It is an attack technique that runs directly on a malicious webpage, using social engineering to gain access permissions to local folders via legitimate APIs. The method encrypts user files without installing applications or downloading traditional executable files.

-What is the connection between DeepSeek and this new cyber threat?

Researchers identified the attack logic by analyzing code generated by models associated with DeepSeek. The system autonomously linked a legitimate browser feature to a ransomware objective after receiving neutrally phrased instructions.

-How can I protect my Android device against this specific attack?

You should reject requests for access to local folders from unknown webpages, especially if they ask for access to the DCIM directory. It is recommended to frequently update the Chrome browser and use security tools with active anti-phishing protection.

Key points...Fileless execution: The technique does not require app installation or the exploitation of native operating system flaws.

API abuse: The attack utilizes the file system access API in Chromium-based browsers.

Android vulnerability: API support in Chrome on Android allows the photo folder (DCIM) to be exposed.

Algorithmic origin: The functional workflow stemmed from an AI "hallucination" that combined legitimate permissions with malicious intent.

No active campaigns: The research served as a preventive warning; there were no recorded instances of this technique being used in actual attacks at the time of disclosure.

For more information, visit https://blog.checkpoint.com/research/when-ai-invents-the-attack-browser-native-ransomware/

mundophone

TECH

New 4D-printing method creates lighter, faster-spinning wind turbine blades

Small, vertical wind turbines could become cheaper and more efficient, thanks to a new manufacturing technique developed by researchers at Concordia.

Using a process known as 4D printing of composites, PhD candidate Emad Fakhimi and Suong Van Hoa, professor at the Concordia Centre for Composites, aim to make small wind turbines lighter, less expensive and easier to produce.

Vertical-axis wind turbines are often used on buildings and in other urban settings, but their curved blades require specialized, complex molds that can take a long time to make while also being expensive and heavy. With this “first-of-its-kind” 4D printing method, though, the researchers are able to begin with the desired blade geometry, allowing them to work backward to determine how to best arrange and orient layers.

This allows for less expensive and more efficient production of commercial aluminum turbine blades that also weigh about 80 per cent less. Testing also showed that these blades rotated faster.

Wind turbines are one source of generators of green energy. The majority of wind turbines are horizontal axis type, with very long blades and can generate a large amount of energy. Another type of wind turbine is the vertical axis wind turbine (VAWT). These are smaller wind turbines. They are usually located on the roof of buildings. The amount of energy they generate is small but may be sufficient for energy needs in a small building. The global VAWT market size accounted for $12.9 billion in 2022 and is projected to achieve a market size of $17.7 billion by 2032, growing at a CAGR of 3.2% from 2023 to 2032. According to research conducted by the National Renewable Energy Lab (NREL) in the United States, VAWTs provide more yearly energy per unit area than horizontal axis wind turbines (HAWT).

One example of the VAWT is shown in image below. This Savonius type wind turbine is of RX-SV2 turbine from R & X Technology company in Nantong, China. The company specifications mention it exhibits a nominal power output of 200 W, a rotor diameter of 0.48 m, and a weight of 15 kg. It utilizes two sets of aluminum blades, with each set comprising five individual segments. The segments are assembled around a vertical axis, facilitated by horizontal arms. It can be observed that the blades are configured with a backward twist to reach higher performance and harvest more energy. These blades may be made by roll forming, or hydraulic pressing techniques. Either of these techniques requires a mold.

Researchers at Concordia University have developed a manufacturing technique based on 4D printing of composites that could make small wind turbines lighter, cheaper and easier to fabricate. The technology uses curved blades for vertical-axis wind turbines that are fabricated from flat panels made of carbon-fibre composites. 

This novel fabrication process resulted in blades with shapes resembling those of commercially available aluminium blades, although they weighed 80 per cent less. Laboratory tests showed that vertical-axis wind turbines with such blades rotate faster than the turbines that were equipped with aluminum blades. The researchers said that the proposed technique could lower manufacturing costs and increase the applicability of lightweight composites in renewable energy and other engineering applications.

Vertical-axis wind turbines are currently widely used in buildings and urban areas, but the manufacture of their curved blades requires special procedures and expensive moulds. This makes the fabrication process lengthy and adds additional weight to the turbines. To solve the problem, the scientists developed a one-of-a-kind “inverse” design procedure.

Instead of starting with a specific layup, which refers to the arrangement and orientation of the carbon-fibre layers, and observing the resulting shape, the scientists first designed the blade geometry and, then, figured out how the layers were supposed to be oriented to create it.

Flat carbon or epoxy laminates deform into curved shapes during cooling after being cured. The curvature is achieved through carefully engineered differences in material properties across the layers.

The final assembly of the vertical axis wind turbine blades. Credit: Polymer Composites 

80% lighter wind turbine blades made from flat panels using new 4D-printing tech...Researchers at Concordia University have developed a new way to make small wind turbines, which could make them lighter, less expensive, and easier to build. Their recent study describes a 4D printing method that turns flat carbon fiber panels into curved blades for vertical-axis wind turbines, without the need for complex molds.

Ph.D. candidate Emad Fakhimi and Professor Suong Van Hoa from the Concordia Center for Composites led the project. Their approach could make it easier to produce blades for rooftop and city wind turbines and also boost their performance.

New design method removes the need for complex molds...Vertical-axis wind turbines are becoming more common in cities because they work well in shifting winds and fit easily onto buildings. But making their curved blades has still been difficult.

Traditional manufacturing uses specialized forming processes and custom molds to achieve the desired shape. These molds make production more expensive, take more time, and add extra weight to the blades.

To solve these problems, the Concordia team developed a new “inverse” design process. Rather than starting with the carbon fiber layout and seeing what shape it made, they began by deciding on the blade shape they wanted.

They then worked backward to figure out exactly how to arrange and position the carbon fiber layers so the blade would take on the right shape during manufacturing.

The new method uses 4D printing, which means materials can change shape after they are made. The team began with flat carbon or epoxy composite sheets. After curing and cooling, these sheets bent on their own into the needed curved shape. This happens because the different layers in the composite are designed with varying properties.

By planning the layers ahead of time, the team could make turbine blades without needing extra shaping steps.

The simplified production method eliminates the need for heavy molds while maintaining the exact blade shape required for the turbines to work well.

Lightweight blades deliver stronger performance...Tests showed that the finished composite blades were very similar in shape to commercial aluminum turbine blades.

The biggest advantage came from their weight. The composite blades were 80% lighter than similar aluminum blades, making them easier to fabricate and install.

Lab tests also showed better turbine performance. Turbines with the composite blades spun faster than those with aluminum blades, which suggests the lighter design could help generate more energy in similar conditions.

The researchers believe the manufacturing approach could cut production costs for small wind turbines and help more people use lightweight renewable energy technology.

Since this method uses simple manufacturing and composite materials, it could also work for other engineering projects that need curved, lightweight parts.

Beyond renewable energy, this inverse design approach could help engineers make complex composite parts with fewer steps, using less material and lowering costs. As more industries look for lighter, more efficient structures, this new process could be a practical alternative to traditional mold-based methods.

Source: Concordia University

TECH

Google dismantles NetNut network linked to cybercrime

Disabled Google accounts and associated Google services used by NetNut for malware command and control (C2), which directly violates Google’s Terms of Service and Acceptable Use Policy. 

Google has announced a coordinated operation with the FBI and Lumen Technologies to disrupt the NetNut network, a residential proxy infrastructure associated with cybercrime activities.

According to Google, this network exploited at least 2 million home devices—including smart TVs and Android TV boxes—to route malicious traffic and mask the origin of attacks.

Google’s Threat Intelligence Group states it has blocked accounts and services used to control the operation and shared technical information with authorities and industry partners. Google Play Protect has also begun detecting and disabling applications known to incorporate SDKs linked to NetNut.

The scale of the problem is significant: in a single week in June 2026, Google identified 316 distinct groups—ranging from cybercriminals to espionage operations—using the network's exit nodes to mask their origins. Part of this infrastructure is linked to the Popa botnet, which researchers describe as a network connected to Mirai variants.

The company also warns of the risks associated with applications that promise financial gain in exchange for sharing "unused bandwidth"—a model frequently used to enroll devices in proxy networks without the user's knowledge.

Shared technical intelligence on NetNut software development kits (SDKs) and backend C2 infrastructure with platform providers, law enforcement, and research firms to help drive ecosystem-wide awareness and enforcement.

We ensured Google Play Protect, Android’s built-in security protection, automatically warned users and disabled applications known to incorporate NetNut SDKs, and the system will continue to protect users against future install attempts. These efforts to help keep the broader digital ecosystem safe supplement the protections we have to safeguard Android users on certified devices.

We believe our coordinated actions have caused significant degradation to NetNut’s proxy network and its business operations, reducing the available pool of devices for the proxy operator by millions. In addition to selling access to the network under the NetNut brand, NetNut has a robust reseller program that allows whitelabeling of its network. Google has high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet. While we expect this disruption to have a larger ripple effect across the residential proxy ecosystem, observations after the disruption of IPIDEA proved that individual networks can appear resilient. What we have observed is that when faced with the degradation of their own botnet, proxy operators begin buying capacity from their competitors, effectively becoming a reseller. We recognize that creating a lasting disruption in this fluid ecosystem means we must scale our efforts to target the infrastructure of several interconnected providers. We will continue to observe the composition of the NetNut network and map out how its peers adapt to this action.

NetNut is among the largest and most popular residential proxy networks. Estimating the size of residential proxy networks is extremely challenging, but Google Threat Intelligence Group (GTIG) estimates the size of the NetNut network to be at least 2 million devices, distributed across the world. Public reporting by KrebsOnSecurity and others, confirmed by Google, illustrates that NetNut populates its botnet by distributing SDKs for devices commonly found in homes, such as smart TVs and streaming boxes. GTIG has also identified NetNut botnet plugin components for large-scale botnets such as Badbox 2.0.

Residential proxy networks sell the ability to route traffic through IP addresses owned by internet service providers (ISPs), allowing attackers to mask malicious activity by hijacking these IP addresses. A robust residential proxy network requires controlling millions of residential IP addresses to sell to customers for use. To accomplish this, operators need code running on home devices to enroll them into the malicious network as exit nodes. Home devices become part of proxy networks either because they are pre-installed with malware before purchase or because users unknowingly download applications containing hidden proxy code. This creates serious risks for unsuspecting device owners, as their home IP addresses can be used by attackers as a launchpad for hacking and other unauthorized activities. Consequently, users can have their legitimate traffic flagged as suspicious, or blocked by their service providers.

In a single week during June 2026, GTIG observed 316 distinct threat clusters using suspected NetNut exit nodes, including cybercriminal and espionage groups. These bad actors can use NetNut to mask their origin IP address when accessing victim environments, accessing their own infrastructure, and conducting password spray attacks. Furthermore, when a consumer device becomes an exit node, unauthorized network traffic passes through it. This means bad actors can access other private devices on the same home network, effectively exposing them to Internet threats. Public reports by Synthient, Spur, Nokia Deepfield, and others have documented the use of NetNut to infect devices with variants of Mirai DDoS botnets.

Consumers should be extremely wary of applications that offer payment in exchange for "unused bandwidth" or "sharing your internet." These applications are primary ways for malicious proxy networks to grow, and could open security vulnerabilities on the device’s home network. We urge users to stick to official app stores, review permissions for third-party VPNs and proxies, and ensure built-in security protections like Google Play Protect are active.

Consumers should be careful when purchasing connected devices, such as set top boxes, to make sure they are from reputable manufacturers. For example, to help you confirm whether or not a device is built with the official Android TV OS and Play Protect certified, our Android TV website provides the most up-to-date list of partners. You can also take these steps to check if your Android device is Play Protect certified.

mundophone

DIGITAL LIFE

WhatsApp account hijacking spreads malware globally

A new global cybercrime campaign detected in June 2026 is using WhatsApp account hijacking to spread malicious VBScript files among trusted contacts. The threat affects users of WhatsApp Desktop and WhatsApp Web across multiple continents, with an increasing focus on the European market through the use of multiple languages, including Portuguese. By taking control of legitimate profiles, attackers bypass standard defenses that rely on user skepticism, facilitating the installation of remote monitoring and management software to gain full control over affected systems.

Attackers use previously compromised legitimate profiles to send messages containing malicious attachments to existing contacts on the platform. This approach maximizes the likelihood that the victim will open the document, as the message appears to come from a colleague or friend.

Kaspersky’s Global Research and Analysis Team (GReAT) identified the operation and confirmed that the primary objective is to compromise Windows operating systems using legitimate administrative tools configured for malicious purposes.

Initial geographic distribution revealed a high volume of infections in Asian countries—with Malaysia leading the number of recorded cases, followed by Singapore, Taiwan, and Vietnam—as well as in Brazil. However, the inclusion of metadata and scripts translated into French, German, English, and Portuguese confirms that Europe is one of the criminal group's strategic targets. The files are disguised as invoices, payment receipts, bank statements, and debt notifications to encourage users in corporate environments to open them.

The code underlying this threat hides within structured comments and metadata that mimic official Microsoft operating system components. Once activated by the user, the file executes a sequence of encoded commands via Windows Script Host, running in the background without triggering visible alerts. The initial script creates a temporary directory at the local path `C:\Users\Public\Documents` to download additional payloads from external command-and-control servers.

Fareed Radzi, a security researcher on Kaspersky’s GReAT team, explains the sophistication of the social engineering employed in this campaign.

In this campaign, attackers exploit the trust inherent in messaging platforms by using compromised WhatsApp accounts to send malicious attachments that appear to originate from known contacts, making recipients far more likely to interact with them. File names are carefully disguised as routine business documents—such as invoices and payment notices—and localized into multiple languages ​​to support a broad dissemination strategy. Once opened, they trigger a multi-stage infection chain that silently downloads and executes additional malicious components from external infrastructure.

The final phase of the attack involves the silent installation of a remote monitoring and management software package. While legitimate in corporate technical support contexts, this application grants attackers full administrative privileges, enabling the exfiltration of sensitive data, credential monitoring, and the potential introduction of ransomware into the company's internal network.

Protection against social engineering attacks requires a combination of strict filtering policies and identity validation outside the messaging platform itself. System administrators should implement local rules to prevent script execution on work computers.

Key mitigation guidelines include:

-Restricting extensions: Block the direct execution of files with .vbs, .vbe, .exe, .bat, .cmd, .js, and .ps1 extensions from public user folders.

-Software Restriction Policies (SRP): Configure Windows AppLocker or Group Policies to prevent WhatsApp Desktop from launching unauthorized subprocesses.

-Out-of-band validation: Verify the legitimacy of any invoice or document received via chat platforms through a phone call or corporate email. Network monitoring: Implement detection systems that identify unusual connections from local computers to uncatalogued external servers.

mundophone

 

TECH

6G could spell the end of apps as we use them today

The next major shift in mobile technology may not lie in faster video downloads or quicker website loading times. 6G is taking shape as a network capable of understanding context, connecting devices, and distributing artificial intelligence in real time. If predictions hold true, the way we use our phones could change profoundly by the end of this decade, with fewer apps and more digital agents acting on our behalf.

During the 2026 Mobile World Congress in Shanghai, the conversation around telecommunications took on a more ambitious tone. The industry is no longer talking solely about speed, antennas, and coverage; the focus has shifted to the convergence of artificial intelligence, advanced computing, and next-generation mobile networks.

Against this backdrop, Qualcomm unveiled a plan projecting the first commercial uses of 6G in 2029. The promise goes beyond a more powerful internet; the goal is to create the first mobile architecture with AI embedded from the network core all the way to the user's device.

Geopolitical factors are also driving pressure to accelerate this timeline. In the United States, 6G is now viewed as strategic infrastructure essential for national security, economic competitiveness, and technological influence. Pre-commercial demonstrations are expected to take place during the 2028 Los Angeles Olympic Games.

To achieve this, Qualcomm is collaborating with a network of 58 global partners, including carriers, equipment manufacturers, device makers, and companies specializing in advanced technologies.

The end of apps as we know them... The most significant shift may lie in the relationship between the user and the mobile phone. Today, almost everything relies on opening an app, tapping the screen, performing a search, or manually triggering a function. With 6G, this model may begin to fade.

The industry envisions a seamless digital environment where autonomous AI agents operate in the background. These would be far more than mere chatbots or voice assistants. They would function as systems capable of understanding needs, cross-referencing information, and acting according to the context.

Instead of opening an app to organize a schedule, find a route, compare prices, or reply to messages, the user could rely on an intelligent layer that coordinates these tasks almost invisibly.

For this to work, the network will need to support millions of digital agents operating simultaneously without overloading antennas, servers, or personal devices.

In this future, the mobile phone might cease to be the absolute center of the experience. Smartwatches, earbuds, augmented reality glasses, and personal sensors could play a decisive role.

These devices would act as the eyes and ears of the AI ​​agents. Cameras, microphones, and sensors would capture environmental information, allowing the system to understand where the user is, what they are doing, and what kind of help they need.

Interaction would no longer depend solely on the screen. Voice, gestures, eye movements, and natural commands could become the new interface.

The challenge is immense because these devices have clear physical limitations. Battery life, heat generation, weight, and size prevent complex AI models from always running locally.

Not everything will stay on the phone, nor will everything move to the cloud...The proposed solution involves a distributed computing model. Some simple tasks would be processed directly on the device, offering greater privacy and immediate response times. More complex activities would be sent to servers located near network antennas. Even more demanding requests would be sent to large data centers.

This division would allow the AI ​​to function without perceptible interruptions. A simple request could be handled on the device itself, while heavier analysis would be split between the network and the cloud.

The system would also feature layers of agents. The first would reside on the device, capturing commands and immediate data. The second would operate at the network "edge"—near the antennas—coordinating local tasks. The third would function on central servers, balancing loads and connecting larger models.

One of the most disruptive ideas behind 6G is transforming the network itself into a sort of urban radar. By analyzing radio waves reflected by objects, vehicles, and people, the infrastructure could detect movements in physical space in real time.

This would enable the creation of constantly updated digital twins of entire cities. The technology could assist with traffic management, accident prevention, drone detection, and public infrastructure maintenance.

In the industrial sector, connected robots could instantly share information about their environment. If a machine moved a part within a factory, all other machines would know about it without requiring human intervention.

Technical, financial, and regulatory obstacles remain. Countries with uneven infrastructure, such as Argentina and Brazil, will need to tackle challenges regarding investment, spectrum allocation, and the modernization of existing networks. Even so, the direction seems clear.

6G will not merely be a new generation of mobile internet. It could serve as the foundation for an era in which artificial intelligence moves beyond apps to permeate the environment, connecting objects, people, and decisions in real time.

 

mundophone

 

TECH

Compact smartphone with keyboard: Clicks Communicator featured in hands-on video

The Clicks Communicator is one of the most unusual smartphones on the market, as the device combines an almost square 4-inch touchscreen with a keyboard that also functions as a touchpad. Clicks is now showcasing the BlackBerry-style smartphone for the first time in a hands-on video.

The Clicks Communicator has been available for pre-order since spring. The smartphone, priced at $499, is expected to ship toward the end of the year. The manufacturer is now demonstrating the smartphone for the first time in a more comprehensive hands-on video that shows some of the Clicks Communicator’s more unusual features in detail.

First and foremost, the video showcases the Android skin, which displays favorite apps and widgets in a list view. Under favorites, all apps are displayed in an alphabetically sorted list. The Clicks Communicator features three microphones, high-quality stereo speakers, and a 3.5 mm headphone jack. Since communication is a priority for the manufacturer, Clicks says this also applies to call quality, even in hands-free mode.

To ensure high-quality audio, the Clicks Communicator features two speakers at the top and two front-facing ones below the keyboard, enhancing the stereo sound experience. It includes three microphones: one at the top, one on the back, and another below the keyboard. There is also a 3.5mm jack for wired headphones.

The back cover is easily removable without tools, providing access to the SIM card and the microSD card slot (supporting up to 2 TB); however, the battery is not removable, even though it is easily accessible.

At the end of the video, Jeff emphasizes that this is still a pre-production unit, so the final design will be refined based on suggestions and requests from the community. In future videos, he will demonstrate other new features, such as a touch-sensitive keyboard, a messaging hub, and more.

The keyboard has a few hidden features. In the video, Clicks only shows the fingerprint sensor, which is built into the spacebar. The shortcut button and the touchpad functionality, made possible by the keyboards touch-sensitive surface, will be demonstrated in future videos. At the very least, the video shows how the back cover can be removed without any tools to insert a SIM card or a microSD card, or to replace the battery.

Clicks confirms that everything is currently on track and that shipments are expected to begin in the fourth quarter. The smartphone is expected to stand out not only for its compact design and keyboard, but also for its support of magnetic Qi2 chargers, as well as a 50 MP main camera and a 24 MP selfie camera. However, the manufacturer has not yet provided any details about the built-in processor.

mundophone