Security

Many ISP-provided routers are closed black boxes with limited functionality. In part 3 of my “Unbloated Network” project, I show how to install OpenWRT on an x86 PC to replace the Vodafone router with your own hardware. Step by step, we’ll set up the latest stable release, including image selection, Linux-based installation, and partition expansion.

Version 7.5 of the Debian-based Irish-flavored Linux distro with a strong focus on online anonymity and security, namely Tails, is now available with several updated apps and the usual set of bugs and fixes. It is also the first version that installs Thunderbird as additional software on each start.

A widespread safety mandate has inadvertently created a massive privacy vulnerability, allowing anyone with inexpensive radio equipment to track the movement patterns of vehicles.

Discord says its UK Persona age-verification test has ended, and its support docs explain how “age assurance” will work as teen-by-default settings roll out.

The FBI issued an IC3 FLASH advisory warning of increased malware-enabled ATM jackpotting in the U.S., naming Ploutus malware, sharing IOCs, and outlining mitigation steps.

Small mistake, big impact. A misplaced backslash caused a PowerShell script running on GPT to completely erase the hard drive contents for a Reddit user. A simple "typo" that could have happened to anyone reveals that it's not just vibecoding that is prone to errors.

Wavelet Lab’s xSDR is a tiny M.2 2230 A+E-key software-defined radio (SDR) module built to plug straight into laptops, tablets, embedded PCs, and other compact systems. Just drop this tiny card into a spare M.2 slot, and turn it into a portable cellular network analyzer or penetration testing tool.

Google has shipped newer Chrome 145 Stable builds after the CVE-2026-2441 zero-day fix, adding three more security patches, updating Extended Stable, and prompting a CISA KEV listing for the exploited flaw.

Windows 11 KB5077181 (OS Builds 26100.7840/26200.7840) shipped on Feb. 10, 2026. On a Lenovo LOQ test system, KB5077181 installed Feb. 11 (Build 26200.7840) and was followed by Wi-Fi instability, Bluetooth disconnects, stutter, and slow shutdowns.

Mass surveillance through a tech titan, enabled by cameras purchased by the monitored consumers themselves – this appears to be Amazon’s latest plans. Leaked emails show how Amazon aims to utilise a new Ring feature to track much more than just parcels.

Windows 10 ESU update KB5075912 (Build 19045.6937) is rolling out for February 2026, addressing a shutdown/hibernation restart issue on some Secure Launch-capable PCs and carrying Secure Boot rollout targeting data.

Google has released an emergency security update for Chrome Desktop to address CVE-2026-2441, a high-severity use-after-free vulnerability in the browser's CSS component.

70mai has unveiled the new 4K A810S two-channel dash cam in the global market with its in-house Night Owl Vision technology. The dash cam features 4K recording, a 3-inch IPS display, AI motion detection, a built-in GPS and ADAS, and WiFi 6 connectivity for high-speed transfers.

After deciding against using the ISP router in part one, it’s time to focus on hardware: what actually works best for an OpenWRT router? A mini PC, Raspberry Pi, or a traditional router? And what about the switch and access point? In this part, I’ll walk through my hardware choices, including considerations around power consumption, architecture, and cost.

Microsoft’s Windows 11 KB5077181 update (Builds 26100.7840 / 26200.7840) is reportedly triggering infinite boot loops and SENS sign-in failures. Despite officially fixing previous boot bugs, users are encountering new DHCP networking regressions and 0x800f0983 installation errors.

Provider routers are convenient—but that’s exactly their biggest problem. Poor Wi-Fi coverage, limited control, questionable privacy, and technical limitations are everyday issues for many users. In this new series, I’ll gradually replace my provider’s all-in-one device (the Vodafone Station) with a modular setup using an OpenWRT router, access point, and switch. In part 1, I’ll explain why I’m taking this approach and how the project is structured.

Microsoft warns that 2011 Secure Boot certificates expire in June 2026. Is your PC ready? We look at the OEM roadmap and how to verify your firmware status.

Meant to protect younger players, Microsoft’s age verification measures are affecting other UK gamers. Some players can’t finish a multiplayer match without having to relog into their Xbox accounts. The company is working on a fix, but hasn’t provided an ETA for a solution.

GitLab has released urgent patch updates for its Community and Enterprise editions, addressing multiple high-severity vulnerabilities including an 8.0-rated Web IDE flaw that could allow token theft and unauthorized access to private repositories.

Microsoft’s February 2026 Windows 11 updates (KB5077181 and KB5075941) add security patches, bug fixes, and new Secure Boot rollout signals ahead of certificate expirations starting in June 2026.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning after a cyberattack targeted renewable energy facilities in Poland. The incident shows security weaknesses in internet-connected systems used in energy infrastructure and has prompted global agencies to advise operators to improve their cybersecurity protections.

Microsoft has issued new guidance warning that 2011 Secure Boot certificates begin expiring in June 2026. Windows updates are rolling out 2023 replacement certificates, with some PCs requiring OEM firmware updates.

Discord will soon force all users to complete ID verification or be shut out from age-restricted servers and features. In March, chatters must upload a video showing their faces or other qualified IDs. The company outlined privacy protections following an attempted October 2025 data breach.

Microsoft is pivoting engineering teams to a new "swarming" model to fix Windows 11 performance and reliability issues after a wave of buggy 2026 updates.

Microsoft has expanded a confirmed Windows restart-on-shutdown bug to include some Windows 10 systems with Virtual Secure Mode enabled. Here’s what’s affected and what’s fixed so far.

Despite several name changes, OpenClaw remains one of the most hyped AI tools. After all, it turns a PC into a fully autonomous AI agent. However, the tool can easily burn through hundreds of dollars in API tokens per day. Even worse, serious security flaws have been discovered.

Moltbook, a Reddit-style forum for AI agents, is going viral as researchers report exposed emails, DMs, and agent tokens... raising authenticity concerns.

Steam workshops can keep a game feeling fresh without official updates. Sadly for People Playground, one mod took advantage of this freedom by destroying competing downloads. The game’s developer has taken the workshop offline while it evaluates the damage caused by the virus.

Microsoft says Windows 11’s January 2026 KB5074109 update is triggering boot failures mainly on a limited set of physical (mostly commercial) PCs that were left in an “improper state.”

Madhu Gottumukkala, Acting Director of the Cybersecurity and Infrastructure Security Agency, triggered internal security alerts by uploading sensitive documents to ChatGPT. The incident raises questions about data security at CISA.

Windows 11 KB5074109 removes four legacy modem drivers, disabling dial-up and telephony modems that rely on them as a security hardening move.

While the ThinkPad series of laptops has always lent itself to customization, the Intel processors powering them have limited complete control over the device due in part to Intel’s Management Engine. However, thanks to the work of dedicated security researchers, there is a method to build a fully open-source laptop, from the BIOS up.

Microsoft has released an out-of-band security update to fix an actively exploited Microsoft Office vulnerability tracked as CVE-2026-21509. The flaw allows attackers to bypass Office security protections via malicious documents and has been added to CISA’s Known Exploited Vulnerabilities catalog.

Reolink has announced the TrackFlex Floodlight WiFi surveillance camera with local AI video search. The latest member in the Floodlight series features a 2-in-1 dual-lens design, which offers 360° coverage with 6x hybrid zoom. Other features include dual-band Wi-Fi 6, auto-tracking, 24/7 continuous recording, and app-based controls.

Two years of work lost with a single click—that is how Professor Marcel Bucher describes his experience in an article in Nature. He concludes that ChatGPT is a threat to consistent productivity. However, the chatbot offers a backup function that the researcher apparently failed to utilize.

NASA has tested a cybersecurity system built using blockchain technology. The technology was tested using an Alta-X drone. This blockchain system is aimed at providing improved protection for flight data.

While Apple and Google stress that they cannot unlock customer devices, the situation is different with Windows encryption: Microsoft routinely hands over BitLocker keys from the cloud to law enforcement agencies.

A range of TP-Link security cameras are affected by a security vulnerability, according to a recent statement from the brand. A list of over 60 Vigi models has appeared on a support page, which details the issue. Impacted users are advised to download the relevant software update as soon as possible.

Stop Windows 11 battery drain with the new KB5074109 update. Patch 114 security vulnerabilities and fix NPU power issues on your laptop.

Researchers from Vienna have discovered a massive security vulnerability in WhatsApp, enabling them to identify 3.5 billion users. The lack of query limits allowed for the large-scale collection of usernames, profile pictures and status messages.

In an ironic turn of events, a notorious hacking forum was hacked, resulting in a breach compromising roughly 324,000 accounts. Some of these accounts had public IP addresses tied to them, meaning that law enforcement could use this information to catch malicious actors.

Malwarebytes has confirmed a massive data leak exposing personal information from 17.5 million Instagram accounts. The leaked data could be used for phishing and account takeovers, and users are urged to enable 2FA and stay alert for fake Meta messages.

Reports are spreading that Microsoft Defender is blocking the popular community tool MAS, flagging it as a fake. In contrast, our own tests demonstrate that the script works flawlessly. Have affected users perhaps fallen victim to DNS tampering?

Ultra-Wideband (UWB) devices aim to make homes more intelligent without compromising security. The Aqara Smart Lock U400 detects approaching household members and unlocks automatically. Digital keys stored in smartphones facilitate a hands-free alternative to fingerprint scanning or codes.

Rainbow Six Siege has reportedly been hacked again. This time, hackers are banning players and writing custom messages inside the game.

Together with Ben Edelman, YouTuber MegaLag proves a systematic obfuscation tactic that deliberately deceives testers and redirects commissions unnoticed. The "dieselgate" principle is applied: honey identifies testers and disables manipulative features.

Murena has started taking pre-orders for the Hiroh privacy phone. The privacy-first device has a physical hardware kill switch for the camera and microphone, and comes with an AMOLED display and a 108 MP camera. It runs /e/OS, a customized version of Android stripped of data-collecting code.

Once again, several high-profile crimes have taken place during this year's holidays. Hackers pulled off a major coup with a supply chain attack on Trust Wallet, which apparently involved up to $7 million in cryptocurrencies.

A talk at 39C3 has revealed serious security flaws in Xplora smartwatches. Researchers from a German university show how a universal key provides access to the communication of all kids with Xplora watches, and why the manufacturer's previous updates haven’t fixed this.

Hackers may use multiple methods to steal accounts in Ubisoft games like Rainbow Six Siege. A cybersecurity resource describes how the publisher’s help desk has been a liability. Bribery and social engineering have been popular routes to compromise customer support agents.