In 2024, we gamed like it was 1997. Games like Metaphor: ReFantazio, Astro Bot, and the solo-developed Balatro remixed genres of console generations past (or, in Balatro’s case, remixed the very old game of poker itself) to critical and commercial success, while Capcom was one of the most successful companies of the year supported by a healthy mix of titles across different genres. With the industry’s biggest publishers increasingly chasing massive, broadly appealing games meant to be played forever, it was heartening to see old formats come back with some new tricks. And these successes could provide the blueprint needed to pull the video game industry out of its current tailspin.
Technology
2024’s best games channeled the heart and soul of the ‘90s
Persona developer Atlus has once again innovated on the turn-based RPG with Metaphor: ReFantazio. What makes Metaphor’s combat interesting in a way that’s hard to replicate with traditional turn-based RPGs is that Atlus has built a unique ability system powered by anticipation and anxiety. Characters have access to powerful summons, each with their own abilities, along with strengths and weaknesses that enemies also share. Hitting an enemy’s weakness or having your own exploited results in monumental shifts in the momentum of battle. Every attack becomes consequential, as you don’t know what will work against your foes or what they have to work against you.
Atlus has built a unique ability system powered by anticipation and anxiety.
Despite dominating with games like Final Fantasy in the late ’80s and through the ’90s, turn-based RPGs have largely been left behind. (With the notable exception of the Dragon Quest series, which consistently sells beaucoup copies in Japan.) Modern tastes have evolved to prefer the active, frenetic, and combo-dependent combat of the action RPG over the passive, implied action of turn-based games. But through the Persona series, and now with Metaphor, Atlus has proven it is uniquely equipped to make turn-based RPGs feel just as kinetic and engaging as their action-based cousins.
The poker roguelike Balatro is perhaps the game that best represents the success that can be had by melding old genres with new features. Roguelikes can be a difficult sell, especially to players unfamiliar with the genre. To get them to stick, players not only have to be okay with the idea of failure as progression but also have to be invested enough in the game’s wider world to want to keep playing through it multiple times. For every Hades, there are hundreds of games on digital storefronts that blur together into smears of generic fantasy dungeon crawlers.
[Balatro is] catnip for the players who can’t resist “number go up.”
One of the reasons Balatro became an instant success was because it didn’t have that hurdle. Poker is known all over the world and hasn’t really changed much in the centuries since its invention. Balatro took advantage of that familiarity and combined it with great humor and an ingenious progression system that made it catnip for the players who can’t resist “number go up.” More than that, Balatro feels more permissive than its roguelike cousins. The best runs in Hades are typically the result of lucking into specific boons or items, whereas Balatro is lousy with jokers, card modifiers, perks, and more that make scores get stupid fast. Balatro took home a slew of Game Awards, and it probably would have won Game of the Year if not for that one meddling robot.
Speaking of… perhaps the biggest example of 2024’s Return trend is Astro Bot. Developed by Team Asobi, Astro Bot is a full-sized, standalone expansion of the PS5 pack-in game Astro’s Playroom that takes the little robot’s adventures beyond the confines of the PS5 console and into the wider universe. At its core, though, Astro Bot is a mascot platformer reminiscent of the games from PlayStation’s earliest days like Crash Bandicoot and Spyro the Dragon. Indeed, Astro Bot pays homage to those very characters, featuring them as robots to rescue along with other characters from PlayStation’s 30-year history.
Astro Bot is stuffed with so many items and secrets to collect. That kind of mechanic can get tedious in games suited to “modern” tastes like Assassin’s Creed, as finding things feels no better than ticking off a box in the slow march to 100 percent completion. But each of Astro’s powers — like the dog jetpack or the shrinking mouse — inject whimsy into the act of collecting. And when I do find a secret, I’m rewarded with a little celebration of cheering bots that somehow never gets old.
Mascot platformers fell out of favor, especially with PlayStation studios, despite initial success. Naughty Dog and Sucker Punch have transitioned away from the lightheartedness of Crash Bandicoot and Sly Cooper to make “serious” games for “mature” audiences, and PlayStation’s recent catalog reflects that overall trend. Astro Bot is an outlier in form and tone and parlayed that uniqueness into a shower of accolades. It would be such a missed opportunity if Sony didn’t respond to that success with similar projects.
When I do find a secret, I’m rewarded with a little celebration of cheering bots that somehow never gets old.
Over the last two years, prolific layoffs and studio closures have left tens of thousands of developers unemployed, in large part because companies spent too much money on getting bigger or developing huge, expensive games that may have made sense years ago but no longer do. Companies dumped hundreds of millions of dollars and considerable development resources into the next live-service shooter in hopes of replicating Fortnite and Call of Duty’s runaway success and profits. But as those games continue to top the monthly video game spending charts, refreshed by a steady cadence of new content, the idea that a newcomer like XDefiant could compete at that same level becomes increasingly remote. This leaves studios with an expensive product nobody wants to play, along with a pipeline of upcoming games too sparse to make up the difference.
But the way out of this precipitous (and avoidable) decline doesn’t necessarily mean giving up on the big multiplayer or open-world projects. Capcom, for example, has proven that “por qué no los dos” can be a winning strategy. The company has boasted record profits the last seven years with a diverse catalog composed of heavy hitters like Monster Hunter, Resident Evil remakes, and Street Fighter, along with smaller, weirder games like Dragon’s Dogma 2 and Kunitsu-gami: Path of The Goddess. Contrast that with Square Enix reporting less-than-expected profits after it failed to make Foamstars happen on top of releasing three different AAA Final Fantasy titles in a 12-month period. Capcom has the right idea and is doubling down on it, stating that it plans on “re-activating dormant IPs that haven’t had a new title launch recently” after revealing new entries in its Okami and Onimusha series.
But more than just appealing to gamer nostalgia, these success stories — which also extend to survival horror and Metroidvanias — offer a healthier alternative to the trends the big publishers and studios are pursuing. (Nintendo, of course, is always exempt from these generalizations.) While there will always be an appetite for big online shooters or bespoke open-world games with hours of Hollywood-acted voice and motion performance, these breakout releases of 2024 prove (or should at least remind decision-makers) that there is so much worth to also be found in smaller, quirkier, and most importantly, cheaper projects. If the big publishers want to staunch the bleeding of the last two miserable years, they could take the lessons Capcom, Balatro, Metaphor, and Astro Bot provide.
Technology
A Kinect for kids is outselling Xbox to become the hot toy this holiday
Two years ago, the company sold about 5,000 units of the Playground. Last year, that number was roughly 150,000. This year, it’s on track for 600,000. Before its pivot, Nex did about $3 million of annual revenue and wasn’t profitable. This year, the company is projecting more than $150 million of sales and says it’s on pace to finally break even.
Technology
Fake Windows update pushes malware in new ClickFix attack
NEWYou can now listen to Fox News articles!
Cybercriminals keep getting better at blending into the software you use every day.
Over the past few years, we’ve seen phishing pages that copy banking portals, fake browser alerts that claim your device is infected and “human verification” screens that push you to run commands you should never touch. The latest twist comes from the ongoing ClickFix campaign.
Instead of asking you to prove you are human, attackers now disguise themselves as a Windows update. It looks convincing enough that you might follow the instructions without thinking, which is exactly what they want.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
NEW SCAM SENDS FAKE MICROSOFT 365 LOGIN PAGES
The malware hides inside seemingly normal image files, using steganography to slip past traditional security tools. (Microsoft)
How the fake update works
Researchers noticed that ClickFix has upgraded its old trick. The campaign used to rely on human verification pages, but now you get a full-screen Windows update screen that looks almost identical to the real thing. Joe Security showed how the page displays fake progress bars, familiar update messages and a prompt that tells you to complete a critical security update.
If you are on Windows, the site tells you to open the Run box, copy something from your clipboard and paste it in. That “something” is a command that silently downloads a malware dropper. The final payload is usually an infostealer, which steals passwords, cookies and other data from your machine.
NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS
Fake update screens are getting harder to spot as attackers mimic Windows with near-perfect precision. (Joe Security)
The moment you paste the command, the infection chain begins. First, a file called mshta.exe reaches out to a remote server and grabs a script. To avoid detection, these URLs often use hex encoding for parts of the address and rotate their paths. The script then runs obfuscated PowerShell code filled with junk instructions to throw researchers off. Once PowerShell does its work, it decrypts a hidden .NET assembly that functions as the loader.
Why is this attack so hard to detect?
The loader hides its next stage inside what looks like a regular PNG file. ClickFix uses custom steganography, which is a technique that hides secret data inside normal-looking content. In this case, the malware sits inside the image’s pixel data. The attackers tweak color values in certain pixels, especially in the red channel, to embed pieces of shellcode. When you view the image, everything appears normal.
The script knows exactly where the hidden data sits. It extracts the pixel values, decrypts them and rebuilds the malware directly in memory. That means nothing obvious is written to disk. Security tools that rely on file scanning miss it, since the shellcode never appears as a standalone file.
Once rebuilt, the shellcode is injected into a trusted Windows process like explorer.exe. The attack uses familiar in-memory techniques such as VirtualAllocEx, WriteProcessMemory and CreateRemoteThread. Recent ClickFix activity has delivered infostealers like LummaC2 and updated versions of Rhadamanthys. These tools are built to harvest credentials and send them back to the attacker with very little noise.
Once the hidden code loads into a trusted Windows process, infostealers quietly begin harvesting your data. (Kurt “CyberGuy” Knutsson)
7 steps you can take to protect yourself from the ClickFix campaign
The best way to stay protected is to slow down for a moment and follow a few steps that cut off these attacks before they start.
1) Never run commands you didn’t ask for
If any site tells you to paste a command into Run, PowerShell or Terminal, treat it as an immediate warning sign. Real operating system updates never require you to run commands from a webpage. When you run that command, you hand full control to the attacker. If something feels off, close the page and don’t interact further.
2) Keep Windows updates inside Windows
Updates should only come from the Windows Settings app or through official system notifications. A browser tab or pop-up pretending to be a Windows update is always fake. If you see anything outside the normal update flow asking for your action, ignore it and check the real Windows Update page yourself.
3) Use a reputable antivirus
Choose a security suite that can detect both file-based and in-memory threats. Stealthy attacks like ClickFix avoid leaving obvious files for scanners to pick up. Tools with behavioral detection, sandboxing and script monitoring give you a much better chance of spotting unusual activity early.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
4) Use a password manager
Password managers create strong, unique passwords for every account you use. They also autofill only on legitimate websites, which helps you catch fake login pages. If a manager refuses to fill out your credentials, take a second look at the URL before entering anything manually.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.
5) Use a personal data removal service
Many attacks start by targeting emails and personal details already exposed online. Data removal services help shrink your digital footprint by requesting takedowns from data broker sites that collect and sell your information. They can’t erase everything, but reducing your exposure means fewer attackers have easy access to your details.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
6) Check URLs before trusting anything
A convincing layout doesn’t mean it is legitimate. Always look at the domain name first. If it doesn’t match the official site or uses odd spelling or extra characters, close it. Attackers rely on the fact that people recognize a page’s design but ignore the address bar.
7) Close suspicious full-screen pages
Fake update pages often run in full-screen mode to hide the browser interface and make the page look like part of your computer. If a site suddenly goes full screen without your permission, exit with Esc or Alt+Tab. Once you’re out, scan your system and don’t return to that page.
Kurt’s key takeaway
ClickFix works because it leans on user interaction. Nothing happens unless you follow the instructions on the screen. That makes the fake Windows update page especially dangerous, because it taps into something most people trust. If you are used to Windows updates freezing your screen, you may not question a prompt that appears during the process. Cybercriminals know this. They copy trusted interfaces to lower your guard and then rely on you to run the final command. The technical tricks that follow are complex, but the starting point is simple. They need you to help them.
Do you ever copy commands from a website without thinking twice about what they do? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Parents call for New York governor to sign landmark AI safety bill
A group of more than 150 parents sent a letter on Friday to New York governor Kathy Hochul, urging her to sign the Responsible AI Safety and Education (RAISE) Act without changes. The RAISE Act is a buzzy bill that would require developers of large AI models — like Meta, OpenAI, Deepseek, and Google — to create safety plans and follow transparency rules about reporting safety incidents.
The bill passed in both the New York State Senate and the Assembly in June. But this week, Hochul reportedly proposed a near-total rewrite of the RAISE Act that would make it more favorable to tech companies, akin to some of the changes made to California’s SB 53 after large AI companies weighed in on it.
Many AI companies, unsurprisingly, are squarely against the legislation. The AI Alliance, which counts
Meta, IBM, Intel, Oracle, Snowflake, Uber, AMD, Databricks, and Hugging Face among its members, sent a letter in June to New York lawmakers detailing their “deep concern” about the RAISE Act, calling it “unworkable.” And Leading the Future, the pro-AI super PAC backed by Perplexity AI, Andreessen Horowitz (a16z), OpenAI president Greg Brockman, and Palantir co-founder Joe Lonsdale, has been targeting New York State Assemblymember Alex Bores, who co-sponsored the RAISE Act, with recent ads.
Two organizations, ParentsTogether Action and the Tech Oversight Project, put together Friday’s letter to Hochul, which states that some of the signees had “lost children to the harms of AI chatbots and social media.” The signatories called the RAISE Act as it stands now “minimalist guardrails” that should be made law.
They also highlighted that the bill, as passed by the New York State Legislature, “does not regulate all AI developers – only the very largest companies, the ones spending hundreds of millions of dollars a year.” They would be required to disclose large-scale safety incidents to the attorney general and publish safety plans. The developers would also be prohibited from releasing a frontier model “if doing so would create an unreasonable risk of critical harm,” which is defined as the death or serious injury of 100 people or more, or $1 billion or more in damages to rights in money or property stemming from the creation of a chemical, biological, radiological, or nuclear weapon; or an AI model that “acts with no meaningful human intervention” and “would, if committed by a human,” fall under certain crimes.
“Big Tech’s deep-pocketed opposition to these basic protections looks familiar because we have
seen this pattern of avoidance and evasion before,” the letter states. “Widespread damage to young people —
including to their mental health, emotional stability, and ability to function in school — has been
widely documented ever since the biggest technology companies decided to push algorithmic
social media platforms without transparency, oversight, or responsibility.”
-
Alaska1 week agoHowling Mat-Su winds leave thousands without power
-
Texas1 week agoTexas Tech football vs BYU live updates, start time, TV channel for Big 12 title
-
Ohio1 week ago
Who do the Ohio State Buckeyes hire as the next offensive coordinator?
-
Washington5 days agoLIVE UPDATES: Mudslide, road closures across Western Washington
-
Iowa6 days agoMatt Campbell reportedly bringing longtime Iowa State staffer to Penn State as 1st hire
-
Miami, FL7 days agoUrban Meyer, Brady Quinn get in heated exchange during Alabama, Notre Dame, Miami CFP discussion
-
Cleveland, OH6 days agoMan shot, killed at downtown Cleveland nightclub: EMS
-
World6 days ago
Chiefs’ offensive line woes deepen as Wanya Morris exits with knee injury against Texans