Technology

A24’s Problemista is a surreal fairy tale about finding the people who truly see you

Published

2 years ago

March 17, 2024

A24’s Problemista is a surreal fairy tale about finding the people who truly see you

Each of comedian Julio Torres’ projects has spoken to his ability to tell stories that are shaped by both his distinct imagination and a deep understanding of the hyperspecific idiosyncrasies that make odd people interesting. In SNL sketches like “Wells For Boys,” and his short-lived HBO series Los Espookys, Torres created windows into absurdist worlds meant to seem like places you might only visit in your dreams. But with A24’s Problemista — which he wrote, directed, and stars in — Torres uses his creative powers to paint a picture whose beauty is rooted in how real and emotionally honest it feels.

Inspired by Torres’ own experience immigrating to the US, Problemista tells the story of Alejandro, an aspiring toymaker from El Salvador who travels to America in hopes of fulfilling his dreams of working for Hasbro. As the only child born to artist Dolores (Catalina Saavedra), Alejandro grows up experiencing their small pocket of the world as a magical, vibrant place that nourishes his unique imagination. When a young Alejandro (Logan J. Alarcon-Poucel) wishes for a life-size, castle-like playhouse where he can contemplate his feelings, Dolores uses her talents to make his dream real — not just because she can but also because she wants him to understand that he, too, is capable of transforming ideas into reality.

Dolores also wants Alejandro to know that she’ll always love him and support his choices, which her dreams tell her will one day lead him to great things. But when the time finally comes for Alejandro to set out on his own, Dolores cannot help but feel like she’s sending him off into a world that isn’t good enough for a soul as sensitive as his.

Through both Katie Byron’s impeccably offbeat production design and voiceover narration from Isabella Rossellini, Problemista clues you into how, more than being a simple chronicle of Alejandro’s journey to America, it’s really a kind of fairy tale about a profoundly sensitive and sheltered man discovering what it means to chase one’s passions.

Getting to New York City and finding a place to stay are important steps on Alejandro’s path to Hasbro, where he hopes his ideas for social-media-obsessed Cabbage Patch Kids and psychologically manipulative Barbies might land him an entry-level gig. Hopes don’t exactly pay the bills, though. And as an immigrant, Alejandro’s ability to stay in the US is contingent upon finding a job willing to sponsor him before his time runs out. It’s necessity more than anything else that leads to Alejandro working at a cryogenics startup specializing in deep-freezing artists like Bobby (RZA) who want to wake up centuries into the future. But it seems to be fate that introduces Alejandro to Bobby’s ferociously belligerent art critic wife Elizabeth (Tilda Swinton) the very same afternoon he’s fired.

While the whimsical atmosphere of playfulness that Problemista leads with never really fades away, it becomes much more unhinged once Elizabeth enters the picture with a proposal for Alejandro to become her newest in a seemingly long line of overworked assistants. In Elizabeth — a living reality distortion field whose fuse is as short as her outfits are loud — Alejando can see a woman in mourning who ultimately wants to be seen and heard more than she actually wants to fight. But shouting is Elizabeth’s default mode, and while most people experience her rageful outbursts as ordinary temper tantrums, Alejandro visualizes them as a series of battles between a bloodthirsty monster and her helpless victims.

Though Problemista’s flights of fancy bring a levity to the film, their strength lies in how powerfully they illustrate the more complex, serious ideas Torres is exploring with his script, like the ways in which the US’s visa system makes it extraordinarily difficult for immigrants to build new lives and thrive in the country. Dealing with Elizabeth and her quest to track down a series of Bobby’s egg-focused paintings is its own kind of hell that would make anyone want to dissociate. But it pales in comparison to the anxiety Alejandro lives with knowing that he’s just days away from being deported.

Even with sympathetic case workers like Khalil (Laith Nakli) rooting for him, without money, there’s no way for Alejandro to escape from the immigration system’s never-ending fees or the overdraft charges that plague his bank account. And the more time Alejandro spends trying to navigate the unfairly designed maze of near-poverty, the more he finds himself turning to the embodiment of Craigslist (Larry Owen) to find extra low-paying side hustles.

Problemista quietly weaves many of its narrative threads together in clever ways — Elizabeth is the cave-dwelling monster who haunts Dolores’ dreams, for example, and the critic’s power to will things into existence (by bullying people) reminds Alejandro of his mother’s knack for translating rough sketches into three-dimensional works of art.

But the film sometimes feels more like an ensemble of complementary stories rather than a singular narrative (which isn’t necessarily a knock against) because of how much time the film spends with side characters, pulling the focus away from Alejandro. Together, Swinton and Torres are a storm of delightful eccentricities that belie their characters’ shared yet distinct emotional vulnerabilities. As Alejandro and Elizabeth grow closer, Problemista’s forays into the absurd become even more intense and fantastical to emphasize how they represent the truth of what something is.

Those truths are often so terrifying that people don’t want to see them. But Problemista emphasizes how healing it can be to confront them through art and by trying to build meaningful connections with others even when the task seems impossible.

Problemista also stars Greta Lee, Spike Einbinder, Kelly McCormack, Megan Stalter, Charlene Incarnate, Martine Gutierrez, and Carlos E. Navedo. The film hits theaters nationwide on March 22nd.

Technology

A Kinect for kids is outselling Xbox to become the hot toy this holiday

Published

2 hours ago

December 13, 2025

Press Room

A Kinect for kids is outselling Xbox to become the hot toy this holiday

Two years ago, the company sold about 5,000 units of the Playground. Last year, that number was roughly 150,000. This year, it’s on track for 600,000. Before its pivot, Nex did about $3 million of annual revenue and wasn’t profitable. This year, the company is projecting more than $150 million of sales and says it’s on pace to finally break even.

Technology

Fake Windows update pushes malware in new ClickFix attack

Published

3 hours ago

December 13, 2025

Press Room

Fake Windows update pushes malware in new ClickFix attack

NEWYou can now listen to Fox News articles!

Cybercriminals keep getting better at blending into the software you use every day.

Over the past few years, we’ve seen phishing pages that copy banking portals, fake browser alerts that claim your device is infected and “human verification” screens that push you to run commands you should never touch. The latest twist comes from the ongoing ClickFix campaign.

Instead of asking you to prove you are human, attackers now disguise themselves as a Windows update. It looks convincing enough that you might follow the instructions without thinking, which is exactly what they want.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

NEW SCAM SENDS FAKE MICROSOFT 365 LOGIN PAGES

The malware hides inside seemingly normal image files, using steganography to slip past traditional security tools. (Microsoft)

How the fake update works

Researchers noticed that ClickFix has upgraded its old trick. The campaign used to rely on human verification pages, but now you get a full-screen Windows update screen that looks almost identical to the real thing. Joe Security showed how the page displays fake progress bars, familiar update messages and a prompt that tells you to complete a critical security update.

If you are on Windows, the site tells you to open the Run box, copy something from your clipboard and paste it in. That “something” is a command that silently downloads a malware dropper. The final payload is usually an infostealer, which steals passwords, cookies and other data from your machine.

NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS

Fake update screens are getting harder to spot as attackers mimic Windows with near-perfect precision. (Joe Security)

The moment you paste the command, the infection chain begins. First, a file called mshta.exe reaches out to a remote server and grabs a script. To avoid detection, these URLs often use hex encoding for parts of the address and rotate their paths. The script then runs obfuscated PowerShell code filled with junk instructions to throw researchers off. Once PowerShell does its work, it decrypts a hidden .NET assembly that functions as the loader.

Why is this attack so hard to detect?

The loader hides its next stage inside what looks like a regular PNG file. ClickFix uses custom steganography, which is a technique that hides secret data inside normal-looking content. In this case, the malware sits inside the image’s pixel data. The attackers tweak color values in certain pixels, especially in the red channel, to embed pieces of shellcode. When you view the image, everything appears normal.

The script knows exactly where the hidden data sits. It extracts the pixel values, decrypts them and rebuilds the malware directly in memory. That means nothing obvious is written to disk. Security tools that rely on file scanning miss it, since the shellcode never appears as a standalone file.

Once rebuilt, the shellcode is injected into a trusted Windows process like explorer.exe. The attack uses familiar in-memory techniques such as VirtualAllocEx, WriteProcessMemory and CreateRemoteThread. Recent ClickFix activity has delivered infostealers like LummaC2 and updated versions of Rhadamanthys. These tools are built to harvest credentials and send them back to the attacker with very little noise.

Once the hidden code loads into a trusted Windows process, infostealers quietly begin harvesting your data. (Kurt “CyberGuy” Knutsson)

7 steps you can take to protect yourself from the ClickFix campaign

The best way to stay protected is to slow down for a moment and follow a few steps that cut off these attacks before they start.

1) Never run commands you didn’t ask for

If any site tells you to paste a command into Run, PowerShell or Terminal, treat it as an immediate warning sign. Real operating system updates never require you to run commands from a webpage. When you run that command, you hand full control to the attacker. If something feels off, close the page and don’t interact further.

2) Keep Windows updates inside Windows

Updates should only come from the Windows Settings app or through official system notifications. A browser tab or pop-up pretending to be a Windows update is always fake. If you see anything outside the normal update flow asking for your action, ignore it and check the real Windows Update page yourself.

3) Use a reputable antivirus

Choose a security suite that can detect both file-based and in-memory threats. Stealthy attacks like ClickFix avoid leaving obvious files for scanners to pick up. Tools with behavioral detection, sandboxing and script monitoring give you a much better chance of spotting unusual activity early.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

4) Use a password manager

Password managers create strong, unique passwords for every account you use. They also autofill only on legitimate websites, which helps you catch fake login pages. If a manager refuses to fill out your credentials, take a second look at the URL before entering anything manually.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.

5) Use a personal data removal service

Many attacks start by targeting emails and personal details already exposed online. Data removal services help shrink your digital footprint by requesting takedowns from data broker sites that collect and sell your information. They can’t erase everything, but reducing your exposure means fewer attackers have easy access to your details.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

6) Check URLs before trusting anything

A convincing layout doesn’t mean it is legitimate. Always look at the domain name first. If it doesn’t match the official site or uses odd spelling or extra characters, close it. Attackers rely on the fact that people recognize a page’s design but ignore the address bar.

7) Close suspicious full-screen pages

Fake update pages often run in full-screen mode to hide the browser interface and make the page look like part of your computer. If a site suddenly goes full screen without your permission, exit with Esc or Alt+Tab. Once you’re out, scan your system and don’t return to that page.

Kurt’s key takeaway

ClickFix works because it leans on user interaction. Nothing happens unless you follow the instructions on the screen. That makes the fake Windows update page especially dangerous, because it taps into something most people trust. If you are used to Windows updates freezing your screen, you may not question a prompt that appears during the process. Cybercriminals know this. They copy trusted interfaces to lower your guard and then rely on you to run the final command. The technical tricks that follow are complex, but the starting point is simple. They need you to help them.

Do you ever copy commands from a website without thinking twice about what they do? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

Parents call for New York governor to sign landmark AI safety bill

Published

14 hours ago

December 13, 2025

Press Room

Parents call for New York governor to sign landmark AI safety bill

A group of more than 150 parents sent a letter on Friday to New York governor Kathy Hochul, urging her to sign the Responsible AI Safety and Education (RAISE) Act without changes. The RAISE Act is a buzzy bill that would require developers of large AI models — like Meta, OpenAI, Deepseek, and Google — to create safety plans and follow transparency rules about reporting safety incidents.

The bill passed in both the New York State Senate and the Assembly in June. But this week, Hochul reportedly proposed a near-total rewrite of the RAISE Act that would make it more favorable to tech companies, akin to some of the changes made to California’s SB 53 after large AI companies weighed in on it.

Many AI companies, unsurprisingly, are squarely against the legislation. The AI Alliance, which counts
Meta, IBM, Intel, Oracle, Snowflake, Uber, AMD, Databricks, and Hugging Face among its members, sent a letter in June to New York lawmakers detailing their “deep concern” about the RAISE Act, calling it “unworkable.” And Leading the Future, the pro-AI super PAC backed by Perplexity AI, Andreessen Horowitz (a16z), OpenAI president Greg Brockman, and Palantir co-founder Joe Lonsdale, has been targeting New York State Assemblymember Alex Bores, who co-sponsored the RAISE Act, with recent ads.

Two organizations, ParentsTogether Action and the Tech Oversight Project, put together Friday’s letter to Hochul, which states that some of the signees had “lost children to the harms of AI chatbots and social media.” The signatories called the RAISE Act as it stands now “minimalist guardrails” that should be made law.

They also highlighted that the bill, as passed by the New York State Legislature, “does not regulate all AI developers – only the very largest companies, the ones spending hundreds of millions of dollars a year.” They would be required to disclose large-scale safety incidents to the attorney general and publish safety plans. The developers would also be prohibited from releasing a frontier model “if doing so would create an unreasonable risk of critical harm,” which is defined as the death or serious injury of 100 people or more, or $1 billion or more in damages to rights in money or property stemming from the creation of a chemical, biological, radiological, or nuclear weapon; or an AI model that “acts with no meaningful human intervention” and “would, if committed by a human,” fall under certain crimes.

“Big Tech’s deep-pocketed opposition to these basic protections looks familiar because we have
seen this pattern of avoidance and evasion before,” the letter states. “Widespread damage to young people —
including to their mental health, emotional stability, and ability to function in school — has been
widely documented ever since the biggest technology companies decided to push algorithmic
social media platforms without transparency, oversight, or responsibility.”