Security

Windows 10 ESU update KB5075912 (Build 19045.6937) is rolling out for February 2026, addressing a shutdown/hibernation restart issue on some Secure Launch-capable PCs and carrying Secure Boot rollout targeting data.

Google has released an emergency security update for Chrome Desktop to address CVE-2026-2441, a high-severity use-after-free vulnerability in the browser's CSS component.

70mai has unveiled the new 4K A810S two-channel dash cam in the global market with its in-house Night Owl Vision technology. The dash cam features 4K recording, a 3-inch IPS display, AI motion detection, a built-in GPS and ADAS, and WiFi 6 connectivity for high-speed transfers.

After deciding against using the ISP router in part one, it’s time to focus on hardware: what actually works best for an OpenWRT router? A mini PC, Raspberry Pi, or a traditional router? And what about the switch and access point? In this part, I’ll walk through my hardware choices, including considerations around power consumption, architecture, and cost.

Microsoft’s Windows 11 KB5077181 update (Builds 26100.7840 / 26200.7840) is reportedly triggering infinite boot loops and SENS sign-in failures. Despite officially fixing previous boot bugs, users are encountering new DHCP networking regressions and 0x800f0983 installation errors.

Provider routers are convenient—but that’s exactly their biggest problem. Poor Wi-Fi coverage, limited control, questionable privacy, and technical limitations are everyday issues for many users. In this new series, I’ll gradually replace my provider’s all-in-one device (the Vodafone Station) with a modular setup using an OpenWRT router, access point, and switch. In part 1, I’ll explain why I’m taking this approach and how the project is structured.

Microsoft warns that 2011 Secure Boot certificates expire in June 2026. Is your PC ready? We look at the OEM roadmap and how to verify your firmware status.

Meant to protect younger players, Microsoft’s age verification measures are affecting other UK gamers. Some players can’t finish a multiplayer match without having to relog into their Xbox accounts. The company is working on a fix, but hasn’t provided an ETA for a solution.

GitLab has released urgent patch updates for its Community and Enterprise editions, addressing multiple high-severity vulnerabilities including an 8.0-rated Web IDE flaw that could allow token theft and unauthorized access to private repositories.

Microsoft’s February 2026 Windows 11 updates (KB5077181 and KB5075941) add security patches, bug fixes, and new Secure Boot rollout signals ahead of certificate expirations starting in June 2026.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning after a cyberattack targeted renewable energy facilities in Poland. The incident shows security weaknesses in internet-connected systems used in energy infrastructure and has prompted global agencies to advise operators to improve their cybersecurity protections.

Microsoft has issued new guidance warning that 2011 Secure Boot certificates begin expiring in June 2026. Windows updates are rolling out 2023 replacement certificates, with some PCs requiring OEM firmware updates.

Discord will soon force all users to complete ID verification or be shut out from age-restricted servers and features. In March, chatters must upload a video showing their faces or other qualified IDs. The company outlined privacy protections following an attempted October 2025 data breach.

Microsoft is pivoting engineering teams to a new "swarming" model to fix Windows 11 performance and reliability issues after a wave of buggy 2026 updates.

Microsoft has expanded a confirmed Windows restart-on-shutdown bug to include some Windows 10 systems with Virtual Secure Mode enabled. Here’s what’s affected and what’s fixed so far.

Despite several name changes, OpenClaw remains one of the most hyped AI tools. After all, it turns a PC into a fully autonomous AI agent. However, the tool can easily burn through hundreds of dollars in API tokens per day. Even worse, serious security flaws have been discovered.

Moltbook, a Reddit-style forum for AI agents, is going viral as researchers report exposed emails, DMs, and agent tokens... raising authenticity concerns.

Steam workshops can keep a game feeling fresh without official updates. Sadly for People Playground, one mod took advantage of this freedom by destroying competing downloads. The game’s developer has taken the workshop offline while it evaluates the damage caused by the virus.

Microsoft says Windows 11’s January 2026 KB5074109 update is triggering boot failures mainly on a limited set of physical (mostly commercial) PCs that were left in an “improper state.”

Madhu Gottumukkala, Acting Director of the Cybersecurity and Infrastructure Security Agency, triggered internal security alerts by uploading sensitive documents to ChatGPT. The incident raises questions about data security at CISA.

Windows 11 KB5074109 removes four legacy modem drivers, disabling dial-up and telephony modems that rely on them as a security hardening move.

While the ThinkPad series of laptops has always lent itself to customization, the Intel processors powering them have limited complete control over the device due in part to Intel’s Management Engine. However, thanks to the work of dedicated security researchers, there is a method to build a fully open-source laptop, from the BIOS up.

Microsoft has released an out-of-band security update to fix an actively exploited Microsoft Office vulnerability tracked as CVE-2026-21509. The flaw allows attackers to bypass Office security protections via malicious documents and has been added to CISA’s Known Exploited Vulnerabilities catalog.

Reolink has announced the TrackFlex Floodlight WiFi surveillance camera with local AI video search. The latest member in the Floodlight series features a 2-in-1 dual-lens design, which offers 360° coverage with 6x hybrid zoom. Other features include dual-band Wi-Fi 6, auto-tracking, 24/7 continuous recording, and app-based controls.

Two years of work lost with a single click—that is how Professor Marcel Bucher describes his experience in an article in Nature. He concludes that ChatGPT is a threat to consistent productivity. However, the chatbot offers a backup function that the researcher apparently failed to utilize.

NASA has tested a cybersecurity system built using blockchain technology. The technology was tested using an Alta-X drone. This blockchain system is aimed at providing improved protection for flight data.

While Apple and Google stress that they cannot unlock customer devices, the situation is different with Windows encryption: Microsoft routinely hands over BitLocker keys from the cloud to law enforcement agencies.

A range of TP-Link security cameras are affected by a security vulnerability, according to a recent statement from the brand. A list of over 60 Vigi models has appeared on a support page, which details the issue. Impacted users are advised to download the relevant software update as soon as possible.

Stop Windows 11 battery drain with the new KB5074109 update. Patch 114 security vulnerabilities and fix NPU power issues on your laptop.

Researchers from Vienna have discovered a massive security vulnerability in WhatsApp, enabling them to identify 3.5 billion users. The lack of query limits allowed for the large-scale collection of usernames, profile pictures and status messages.

In an ironic turn of events, a notorious hacking forum was hacked, resulting in a breach compromising roughly 324,000 accounts. Some of these accounts had public IP addresses tied to them, meaning that law enforcement could use this information to catch malicious actors.

Malwarebytes has confirmed a massive data leak exposing personal information from 17.5 million Instagram accounts. The leaked data could be used for phishing and account takeovers, and users are urged to enable 2FA and stay alert for fake Meta messages.

Reports are spreading that Microsoft Defender is blocking the popular community tool MAS, flagging it as a fake. In contrast, our own tests demonstrate that the script works flawlessly. Have affected users perhaps fallen victim to DNS tampering?

Ultra-Wideband (UWB) devices aim to make homes more intelligent without compromising security. The Aqara Smart Lock U400 detects approaching household members and unlocks automatically. Digital keys stored in smartphones facilitate a hands-free alternative to fingerprint scanning or codes.

Rainbow Six Siege has reportedly been hacked again. This time, hackers are banning players and writing custom messages inside the game.

Together with Ben Edelman, YouTuber MegaLag proves a systematic obfuscation tactic that deliberately deceives testers and redirects commissions unnoticed. The "dieselgate" principle is applied: honey identifies testers and disables manipulative features.

Murena has started taking pre-orders for the Hiroh privacy phone. The privacy-first device has a physical hardware kill switch for the camera and microphone, and comes with an AMOLED display and a 108 MP camera. It runs /e/OS, a customized version of Android stripped of data-collecting code.

Once again, several high-profile crimes have taken place during this year's holidays. Hackers pulled off a major coup with a supply chain attack on Trust Wallet, which apparently involved up to $7 million in cryptocurrencies.

A talk at 39C3 has revealed serious security flaws in Xplora smartwatches. Researchers from a German university show how a universal key provides access to the communication of all kids with Xplora watches, and why the manufacturer's previous updates haven’t fixed this.

Hackers may use multiple methods to steal accounts in Ubisoft games like Rainbow Six Siege. A cybersecurity resource describes how the publisher’s help desk has been a liability. Bribery and social engineering have been popular routes to compromise customer support agents.

Servers for Ubisoft’s popular first-person shooter game are currently offline on consoles and PC. A suspected hack granted some Rainbow Six Siege players huge bundles of in-game currency. Other players have witnessed mass bans, prompting Ubisoft to take action while investigating.

Two NATO states have published intelligence reports that describe a new weapon against Elon Musk's Starlink satellites. This system is intended to release clouds of shrapnel (high density pellets) in orbit. In an emergency, this would jeopardize all types space travel.

Phreeli, a new privacy-focused MVNO, has just launched and promises the utmost respect for users' privacy. With names, addresses, and emails optional, this network's sign-up requirements are in stark contrast to the current industry standard.

A writer for a French website is urging gamers to keep all PlayStation Network details private. An ID number was all a hacker needed to log in twice to the journalist’s account. Even with 2FA active, PSN support requires minimal information to grant strangers access.

Physical disc owners have more reason to avoid the digital gaming age. Complaints continue about hackers compromising Microsoft accounts filled with Xbox games. Even if gamers can prove their identities, they may need to start from scratch and repurchase every title.

Gnome has officially banned the use of AI-generated code in its shell extensions, but the justification is more pragmatic than it is ideological. As of the announcement, any code submitted for consideration in the Gnome Extensions Library that has obvious evidence of AI or sloppy, inconsistent code will be rejected during the code review process.

The A119M Pro is a new dash cam from Viofo, offering a 4K front camera. The single-channel camera is equipped with a Sony IMX678 1/1.8” 8 MP lens based on Sony Starvis 2 sensor tech, which is said to offer 4K 30 fps recording. Other features include super night vision, Wi-Fi 6 connectivity, GPS, HDR, and voice control support.

CheckMag When a bored student discovered a mysterious device on the school's Wi-Fi network, questions arose about the hidden IoT infrastructure in public service buildings. Unsurprisingly, the true nature of these devices raises privacy concerns and, ironically, questions their safety.

Researchers at the University of Vienna have uncovered vulnerabilities within WhatsApp and Signal that allow undetectable user tracking through round-trip time (RTT) measurements. A simple program now available on GitHub demonstrates how easily this weakness can be exploited.