Plain-language guides on keeping your PC healthy, secure and fast - what's happening in Windows, and what to actually do about it.
Comparitech counted 2,627 claimed ransomware attacks in July to September, the highest quarter it has recorded. The newer habit is squeezing the individuals whose data was taken.
Read more →Double Counter checks whether you are using a second account by logging your IP address. Someone walked off with 12 GB of those logs, covering about 28 million Discord users.
Read more →Pwn2Own Ireland finished in Cork with 1,262,000 dollars paid out for 98 zero-days. Phones took the biggest prizes on the last day, and the manufacturers now have 90 days to ship fixes.
Read more →The certificates that let your PC trust Windows Update expire on 17 May and 19 June 2027. Machines that have skipped a long run of updates will quietly lose the ability to get any more.
Read more →A day after a ransom note arrived through the ASOS app, the retailer has explained the way in. Someone impersonated a trusted contact and talked a member of staff out of their login.
Read more →The About You page lists the conclusions Amazon's algorithms have drawn from your orders, searches, reviews and Alexa requests. One shopper's profile went around this week, and plenty of people went looking for their own.
Read more →Attackers broke into the operators running the Ghana, Sierra Leone and American Samoa domain registries, rewrote DNS records, and got certificate authorities to issue 12 certificates for Google and YouTube addresses.
Read more →Socket found 16 Firefox extensions cloning the Rabby and OKX crypto wallets. They behaved exactly like the real thing and copied your recovery phrase on the way past. Mozilla pulled all of them by 5 October.
Read more →Day one of Pwn2Own Ireland: 32 previously unknown flaws, nearly 400,000 dollars paid out, and the victims included a Philips Hue Bridge Pro, a Sonos speaker and a Lexmark printer.
Read more →Malwarebytes has tracked the BlueKit phishing service since April. It sells ready-made sign-in pages for Amazon, Apple and the banks, and it goes after session cookies, not just passwords.
Read more →Someone reached the platform ASOS uses to message customers and pushed a ransom note to their phones. ASOS says names and contact details may have been taken, not cards or passwords.
Read more →Chrome 155 arrived on 6 October with four critical bugs among the 247. None are known to be under attack yet, which makes this the easy week to restart your browser.
Read more →OpenAI is rolling out textGrain watermarking to ChatGPT and Codex output in the EU. You will not see it, and swapping a quarter of the words makes it nearly undetectable.
Read more →No break-in at Domino's. Attackers signed in with email and password pairs leaked somewhere else, which worked because those passwords had been reused.
Read more →A message asks whether your item is still available, and the screenshot shows you as the seller. Malwarebytes says the name and phone number pairing comes from old breach data.
Read more →CVE-2026-63277 is fixed in LibreOffice 26.2.5 and 26.8.0. Apache OpenOffice has the same class of bug, no finished fix yet, and the workaround is to turn Java off.
Read more →OpenAI announced a visual ad format on Sunday. It appears while an image is generating, only for people on the free tier, and testing begins in the United States later this month.
Read more →Windows chief Pavan Davuluri says the rising cost of memory is pushing Microsoft to make Windows 11 lighter, and early measurements of 26H2 suggest some of that work has already shipped.
Read more →Check Point counted 1,284 new Amazon and Prime domains registered in September, a 42 percent jump, and rated one in sixteen of them malicious or suspicious. Prime Big Deal Days runs 6 and 7 October.
Read more →Nozomi Networks has named a new botnet, Cling, that spreads through old holes in routers, DVRs and cameras and hides its orders inside traffic that looks like it came from Google.
Read more →Microsoft has confirmed that Word in Microsoft 365 version 2609 can drop a Save as PDF into a hidden cache folder under a random name instead of the location you picked. No error message, and no fix yet.
Read more →Claude users are seeing a new prompt asking permission to use their audio for model training. It is off unless you say yes, and the switch is in Settings under Privacy.
Read more →Proofpoint published a campaign on 1 October in which a fake Microsoft login window was painted onto a webpage. The password, the one-time code and the session all reached the attacker while Microsoft happily said yes.
Read more →Reuters reported on 3 October that Saif al-Din Khader, known online as Rey, has been detained in Jordan and is helping the FBI name the rest of the ShinyHunters crew. The data the group took is already gone.
Read more →The FTC published advice on 1 October for talking to children about deepfakes, along with a reminder that the Take It Down Act gives platforms two days to remove an explicit image of a minor once you ask.
Read more →Poper Blocker carries Google's Featured badge and 4.8 stars on the Chrome Web Store. Researcher James Arnott says it also ships browsing history and ChatGPT, Claude and Gemini conversations to its publisher.
Read more →Jamf Threat Labs found CloudSyncD, a backdoor hidden inside a fake Zoom installer for Macs. The trick that makes it work, a convincing password box during setup, travels perfectly well to Windows.
Read more →Microsoft confirmed on 2 October that KB5124010 breaks the Dolby Digital decoder built into Windows, so some older games, media players and productivity apps close without warning. No fix yet.
Read more →Northeastern researchers tested 21 cars and 30 manufacturer apps. Twenty-eight apps fed advertising and analytics firms, and seven sent names, locations and vehicle ID numbers.
Read more →Microsoft's 2026 Digital Defense Report says attackers are getting more out of AI than defenders are, and the gap between a flaw being found and attacked is now under a day.
Read more →Advanced Protection in Android 17 now limits accessibility powers to apps Google has verified as real accessibility tools, plus five other changes announced on 1 October.
Read more →Attackers took over the @Microsoft account, 13 million followers, and used it to promote a $Clippy crypto token. Microsoft has confirmed the hijack and removed the posts.
Read more →Version 8.30 brings encrypted on-device backups to iPhone and the desktop apps, and restores now work across platforms. Lose the recovery key and the file is a brick.
Read more →Apple patched CVE-2026-86950 on 28 September after what it called an extremely sophisticated attack on specific individuals. Two days later, working crash code went public.
Read more →CVE-2026-14157 scores 9.4 and goes off when an ASUS router is handed a crafted VPN configuration file. New firmware is out, along with BIOS updates for 13 older motherboards.
Read more →Operation KillSwitch took KillSec apart on 30 September: three arrests, five servers, 110 terabytes of stolen data, and a teenager accused of running the whole thing.
Read more →Microsoft documented a Russian group's new delivery trick: a password-protected archive, a virtual disk inside it, and a shortcut wearing a PDF icon. No copy-pasting required.
Read more →CVE-2026-84411 scores 9.8. One crafted web request, no password needed, and the attacker is root on the router. CISA put out an advisory on 29 September.
Read more →Five flaws, bulletin TV-2026-1010, and version 15.82 closes all of them. The worst one lets a connection do things the person at the keyboard had switched off.
Read more →Microsoft's release health page for 26H2 lists three open issues. Only one is likely to touch a home PC, and it is the one that kills the sound.
Read more →Proofpoint followed a scam from a password-reset email all the way to a man on the phone claiming to be an FBI agent. The middle part involves a bounced cheque and gift cards in hundred-dollar lots.
Read more →Huntress found attackers using OpenAI's own Custom GPT feature as the opening move: a fake model called Plus 5.6, hosted on the real ChatGPT site, that talks you into pasting a PowerShell command.
Read more →CVE-2026-102331 scores 9.6 out of 10. It sits in the part of Chrome that talks to your graphics card, and a crafted page could use it to get out of the sandbox.
Read more →Version 26H2 started rolling out on 29 September. If your machine is on 24H2 or 25H2 it arrives as KB5121794, a small switch rather than a download you have to sit through.
Read more →K7 Security Labs pulled apart TokenGrabberBuilder, a kit that lets anyone with no real skill generate their own Windows password stealer and choose where the stolen data gets delivered.
Read more →The Defense Manpower Data Center says unauthorised users were in its file-sharing system from October 2025 until July 2026. Social Security numbers were in there, stored without encryption.
Read more →Netskope has mapped the tech support scam kit behind those full-screen Defender warnings: more than 250 Google Ads campaigns, 284 ordinary websites carrying the ads, and a fake online shop called ShopEase in the middle of it.
Read more →A known issue opened on 25 September covers Windows 11 24H2, 25H2, 26H1 and 26H2: after August's preview update, some PCs sign in to a black screen and no desktop. The way out takes ten seconds.
Read more →Ontinue's teardown of Lunex, a stealer rented out to several criminal crews, describes a signed AMD driver used to blind security software and a backdoor registered inside the browser itself.
Read more →KB5002907 was meant to nudge stale Microsoft 365 Apps back into line. It also landed on paid-for Office 2016 and 2019, which started reporting themselves as unlicensed. Microsoft has paused it.
Read more →New vouching and employer controls are aimed at AI-generated profiles with invented job histories. Useful, but a verified badge is a signal rather than a guarantee.
Read more →The company disclosed it on Friday. The links were unlisted rather than public, some of the material is still out there, and OpenAI says it cannot tell the people affected who they are.
Read more →ShipmentsFree promises up to $100 a month back on postage. The Better Business Bureau has logged 529 complaints in three years, many of them from people who never realised they had subscribed.
Read more →Cameron Wagenius got 70 months on 25 September for hacking and extorting telecoms. The way in was cloud accounts with no two-factor, which is the part worth borrowing.
Read more →Three big US payroll platforms are browser-only. Someone built Windows installers for all three, and what they actually install is a silent remote-control tool.
Read more →The man who ran the Rydox marketplace has pleaded guilty in Pittsburgh. The stock he sold came off ordinary home PCs, which is the part that outlives the shop.
Read more →Calendar, People and Files stop working on 16 December. Microsoft installed them automatically, but on an unmanaged home PC it will not remove them for you.
Read more →Rasmus Moorats reported the bugs in April. OnePlus confirmed them in May, warned him off publishing, then went quiet. He published on 24 September with no patch in sight.
Read more →Gambit Security got into the attacker's own server and found AI agents breaking into retailers on their own, planting card skimmers on 119 checkout pages.
Read more →RemControl arrives through fake Google Play pages advertising an IPTV app, then blocks the uninstall screen in thirty languages. It targets banks in Italy, France, Spain, Poland, Portugal and Canada.
Read more →third-party.com has stood in for other people's websites in developer documentation since the nineties. Someone owns it, and it is now serving a fake Cloudflare check to Windows users.
Read more →Eleven critical flaws, most of them in the parts of Chrome that draw the page. Nothing here is an emergency, which is exactly why the update tends to sit there.
Read more →Cisco Talos found a Windows implant that asks DeepSeek, Qwen, Mistral and Gemini what to do next and follows the majority. Nobody has been attacked with it yet.
Read more →Volexity has published what those September Chrome and Windows patches were actually stopping: cloned news sites that took over a PC with no clicks at all.
Read more →Microsoft seized 50 sites belonging to EvilTokens and UK police arrested two men. The trick it sold works on Microsoft's own login page and walks straight past two-factor.
Read more →KB5124010 repairs the backup feature that quietly stopped working in September, along with Bluetooth and camera bugs. It is an optional preview update, so it sits there until you click.
Read more →Ireland's data regulator ruled that three Google location settings were neither lawful nor properly explained. The interesting part is which settings, and whether yours are still on.
Read more →Microsoft has published build numbers for Office LTSC 2019, 2021 and 2024 to go with the Office 2016 fix. One awkward case is still unresolved.
Read more →BigDiskBuster fills your free disk space so Microsoft Defender can never install its daily updates. Protection still shows as on, and there is no patch.
Read more →D-Link's DIR-822A has two unpatched holes, one of them a perfect-score bug in the service that hands out addresses on your home network. Working exploit code is already public.
Read more →ShinyHunters took over Clop's leak site and is threatening to publish the names of companies that quietly paid to keep their breaches secret, along with the amounts.
Read more →ChainScript arrives through a ClickFix page, poses as Spotify, Zoom or Teams, and asks the Polygon blockchain where to phone home, so its operators can move house without rebuilding the malware.
Read more →Nine days after users started reporting it, Microsoft has put the File History failure on the record. Eight updates across Windows 10 and 11 are affected and there is still no fix.
Read more →A new Windows 11 recovery option adds a real hardware erase for PCs you are selling or recycling, and Microsoft's own documentation spells out what the fast option leaves behind.
Read more →BragJack showed a single malicious extension hijacking the built-in AI assistants in Chrome, Edge, Opera Neon, Comet and Claude in Chrome. Google and Microsoft have patched their parts.
Read more →Seven agencies across four countries name a North Korean crew that used fake recruiters and take-home coding tests to get onto 30,000 computers and drain 7,000 crypto accounts.
Read more →Fast Startup means a normal shut down hibernates the Windows kernel into a file instead of closing it, so a misbehaving driver survives the power-off. Restart is the one that clears it.
Read more →A public service announcement issued on 17 September counts nearly 61,000 complaints in 19 months. The most expensive version of the scam involves a video call from a man in a real uniform, in a room built to look like a government office.
Read more →LastPass and Delphos Labs found fake GitHub repositories impersonating LastPass and around 39 other companies, handing out an infostealer alongside a Microsoft-signed driver that switches off 145 security products.
Read more →Gyazo was breached on 11 September through its image upload server. Helpfeel is asking every user to change their password, and the stolen image records include enough to rebuild the URLs of uploads.
Read more →Microsoft has released KB5002665 for the September update that silently broke pasting in Excel. It only applies to .msi-based Office 2016, and everyone else still needs the Paste Special workaround.
Read more →Cofense traced a phishing email dressed as an OpenAI payment failure. The button routes through a real Google address before it reaches the fake sign-in page, so hovering over the link tells you nothing.
Read more →Zimperium's researchers published their work on RatHat, which turns one Accessibility permission into full control of a phone and sends the layout of your apps to a mainstream AI assistant to work out its next move.
Read more →Windows 11 version 24H2 Home and Pro reach end of updates on 13 October 2026. The replacement is 25H2, most machines will be offered it automatically, and there is no paid extension.
Read more →Microsoft has resolved the bug behind the 'Microsoft Defender Antivirus is turned off' notifications. The fix is Defender update 4.18.26080.4, released 17 September, and it installs itself.
Read more →NightmareStresser's domains were taken down on 15 September. It had over 566,000 registered accounts, and the traffic it sold came from hacked home routers and cameras.
Read more →PC-to-PC Migration has been pulled from Windows 11 Release Preview builds after more than a year in testing. Microsoft now points you at Windows Backup, which goes through OneDrive and its 5 GB free tier.
Read more →Malwarebytes took apart a fake Avast renewal site aimed at Belgium. The design and the French were perfect; two handover comments in the source gave away how it was built, and what the form wanted was a phone number.
Read more →Elastic Security Labs published its research on KREMLIN, which writes an extension called AVSync straight into Chrome and Edge and forges the browser's own signatures so the thing looks approved.
Read more →Nadella, Nvidia's Jensen Huang and Windows chief Pavan Davuluri will share a stage in San Francisco to talk about local AI, Surface and the RTX Spark. No new version of Windows is coming.
Read more →Parliament passed a law on 16 September creating prison terms of seven to 12 years for running a fraudulent call centre, days after Ruslan Kravchenko was voted out over allegations his office was paid to shield them.
Read more →404 Media revealed Project Lily, an OpenAI programme in which hundreds of contractors read and score real user conversations. Training on your chats is on by default, and there is a switch to turn it off.
Read more →Google's September Pixel bulletin landed on 16 September. CVE-2026-58704 is a permission bypass in the cellular modem, and Google says there are indications it is under limited, targeted exploitation.
Read more →Extradited from South Africa on 11 September, the men are accused of running fake relationships on dating sites from 2011 to 2021 and then extorting victims who stopped paying.
Read more →Google is routing search result links through google.com/goto redirects. The destination is encoded until you click, which quietly retires one of the few safety checks ordinary users have.
Read more →Attackers took over u/hbomax and ran 108 ads pointing at lookalike sites that asked visitors to paste a command into PowerShell. The payload was a password stealer.
Read more →KB5129195 and KB5129236 went out on 14 September to fix Remote Desktop, virtual machine folder sharing and multichannel USB audio. The AMD black screens and the File History fault are still there.
Read more →Every command-line trick for creating a local account during setup has been blocked. A small "Learn more" link on Microsoft's own sign-in screen still walks you straight to one.
Read more →Passkeys went live across GOV.UK One Login on 14 September. Nearly one sign-in in ten already uses one, and the same option is sitting unused on most people's other accounts.
Read more →Socket researchers found that the "Twitch Enhanced Viewer | JeetBot" extension forwarded every viewer's session token to proxy servers in clear text. Removing it is not enough on its own.
Read more →Revolut confirmed on 14 September that it fulfilled data requests emailed from a real government domain by an impostor. Passport scans, verification selfies and full transaction histories went out.
Read more →Apple started taking iPhone 18 Pro pre-orders on Saturday 12 September. Domain researchers counted more than 200 fraudulent iPhone sites appearing within a day, many of them not yet on browser blocklists.
Read more →Windows 11 Release Preview builds released on 10 September add a setting that remaps the Copilot key to Right Ctrl or the Context Menu key. It reaches everyone in October's update.
Read more →Since KB5124008 landed on 8 September, File History has been failing on a lot of PCs with a "reconnect a drive" error while the drive sits there plugged in. Microsoft has not acknowledged it.
Read more →KB5124008 removes wmic.exe from Windows 11 for good. It was deprecated back in 2021 and had a long second career helping ransomware destroy shadow copies before encrypting files.
Read more →Florida confirmed on 11 September that attackers reached its DAVID driver database using the login of a single Plant City police employee, stored on that person's own device. ShinyHunters claims more than 200,000 records.
Read more →Release Preview builds 26100.9539 and 26200.9539, out on 10 September, carry an unusually long list of Bluetooth repairs: connection state, the radio toggle, headset microphones, LE Audio stuttering and a streaming crash.
Read more →Late on 11 September Microsoft added USB audio failures to the known issues list for KB5124008. Affected devices show a Code 10 error or simply produce no sound, and there is no fix yet.
Read more →Trezor and Brevo have published the numbers behind this week's newsletter phishing: 347,000 addresses mailed, 2,500 clicks, 138 customer accounts reached through a flaw in how Brevo handled single sign-on invitations.
Read more →Bitdefender found thousands of deceptive apps sitting in Google Play's Early Access section, where listings carry no ratings and no reviews. The ads promise payouts; the apps deliver adverts.
Read more →Zimperium published its analysis of Mantax Otax on 9 September. It combines ransomware with full surveillance, steals one-time codes, and only ever arrives as an APK from outside Google Play.
Read more →KB5002914, part of the 8 September Patch Tuesday, breaks pasting and fill-down in Excel 2016 through 2024. Microsoft added it to the known issues list on 10 September and has no fix yet.
Read more →Shadowserver has been counting exposed Plex Media Servers on vulnerable versions since 4 September, and the figure has not budged off 36,000. The flaws still have no CVE numbers attached.
Read more →In August, ShinyHunters claimed 284 million records from the healthcare distributor McKesson and asked for about $55 million. Nothing was paid. Have I Been Pwned has now indexed the published data at 6,404,340 people.
Read more →The US Treasury sanctioned Xinbi Guarantee on 9 September. The Chinese-language marketplace had moved more than $24 billion since 2022 selling ready-made fraud sites, stolen data, laundering and, in some listings, people.
Read more →A BBC investigation found extortionists filing bogus copyright claims against Instagram accounts, waiting for the automatic suspension, then asking for money on Telegram to withdraw them. Meta does not verify a complaint when it is filed.
Read more →Group-IB has found the Gigabud trojan installing a second app that builds a hidden Android work profile, then cloning the victim's bank app into it. The fraud comes from a space where the malware alarm never rang.
Read more →CERT/CC has published an advisory on the Skullcandy Dime 3. Anyone in Bluetooth range can pair with them uninvited and listen through the microphone. A fixed firmware exists; owners have no way to get it.
Read more →An attacker got into 120 accounts at the email marketing provider Brevo and mailed phishing to those companies' customers. Trezor, BitBox and CoinTracking users received it, and it passed every authenticity check going.
Read more →German researchers at Nebty have mapped DoppelCart, a network of nearly 119,000 counterfeit online stores cloning more than 44,000 real brands. The stolen card details go out live, while you are still typing.
Read more →Two weeks ago we said to skip the optional update that first brought the movable taskbar, because it was wrecking custom cursors and resetting wallpapers. KB5124008 arrived on 8 September with both fixes listed by name.
Read more →Barracuda has picked apart a phishing campaign that routes you through Microsoft Teams and then has your own browser assemble the fake sign-in page from data in memory. There is no malicious website to block, because there is no website.
Read more →ShieldCrash is a working demonstration that September's fix for a Microsoft Defender privilege flaw left a route open. It works on fully updated Windows 10 and 11, and there is no patch for it yet.
Read more →Chrome 153 arrived on 8 September carrying 230 security fixes, one of which closes a V8 flaw attackers are already using. It is the seventh exploited Chrome zero-day of the year and the second in five days.
Read more →Microsoft's September update landed on 8 September as the largest set of security fixes it has ever shipped. Two of them close flaws attackers were exploiting before a patch existed, and CISA added both to its urgent list the same day.
Read more →Microsoft's Bing Wallpaper app spent 8 September setting desktops to a full-page advert for an eleven-film Harry Potter box set. It is an optional app, which is the good news, because you can simply remove it.
Read more →The DFIR Report has mapped an eleven-year-old operation it calls BengalSEO: hundreds of decoy pages engineered to rank on Bing for things like a Bitdefender login, funnelling people to fake support numbers or a hidden crypto miner.
Read more →Gamers Nexus and Level1Techs put a bench full of LG OLEDs through packet captures and firmware analysis. The sets catalogued every device on the network, logged the neighbours' Wi-Fi names, and captured clean microphone audio while apparently in standby.
Read more →Check Point published a flaw on 8 September that let an attacker's instructions ride along inside somebody else's ChatGPT session. OpenAI has closed it. The connector setting it exposed is still worth changing.
Read more →Chrome 153 reaches the stable channel on 8 September and begins a fortnightly release schedule instead of a monthly one. Mozilla made the same move on 1 September. Neither means more features, and that is rather the point.
Read more →Kinryu Labs found an Advance Passenger Information System database holding 220.8 million passenger and crew records, open to anyone who chained two misconfigurations. If you flew through Vietnam since 2017, you may be in it.
Read more →CloudSEK got inside the control panel of a phishing service called BigBear 2.0 and found 5,137 stolen Microsoft 365 records. The clever part is a few lines of JavaScript that make your passkey disappear from the sign-in page.
Read more →Adobe shipped an emergency fix for StyleSmuggler on 7 September as APSB26-146. It now has a CVE number and a severity score of 10 out of 10. Attacks began three days earlier, which is the part that still matters to shoppers.
Read more →At IFA in Berlin a Windows vice president promised gains in boot time, Windows Hello responsiveness and memory use on 8GB PCs. No figures came with it. Here's what's actually behind the promise.
Read more →Sansec went public on 5 September about StyleSmuggler, a flaw that lets anyone run code on a Magento store with no login at all. Fully updated shops are affected. You cannot fix somebody else's checkout, but you can change how you pay at it.
Read more →Huntress found three unrelated victims infected through a doctored copy of ScreenConnect. One got there by searching for a Geek Squad refund. The modified client then pushes the same malware to the next machine that connects.
Read more →Mathspace has told 1,079,819 people in Australia and New Zealand that their names and email addresses were taken. The patch that would have stopped it had been available for four days before the attacker walked in.
Read more →RouterOS was patched on 3 September with the details deliberately held back. CERT Polska says routers with SSH reachable from the internet have been taken over without a password since at least 2 September.
Read more →A breach at shipping partner ShipMonk turns out to include orders from 2019 to 2021 that should have been erased years ago. That adds 67,000 people, and the exposed field that matters is the home address.
Read more →Netskope traced a campaign running on hacked WordPress and PrestaShop sites that keeps its payload inside a blockchain smart contract, where nobody can take it down. The sites themselves give you no reason to be suspicious.
Read more →Elastic Security Labs has taken apart REVSTEALER, a stealer sold since February. The theft is over in seconds, but four separate programs stay behind, and one of them switches off Windows Update and Defender.
Read more →Microsoft is switching text predictions off by default in Word and classic Outlook. The feature stays exactly where it was, but from now on you have to ask for it.
Read more →Microsoft has described a campaign that split words like 'funding' with invisible Unicode characters so email filters could not read them. At its peak it pushed 2.37 million messages in a single day.
Read more →Plex has patched a set of security flaws it is not describing yet, in Media Server 1.43.3 and Desktop 1.115.0, and took the unusual step of mailing owners directly. The CVE numbers are still pending.
Read more →A dark web service called Nexus advertised searchable copies of more than 153 million US and Canadian driving licences, apparently taken from identity-checking firm IDScan.net. The FBI is investigating and the lawsuits have started.
Read more →From version 0.8, Tendvane runs as a normal program. Windows asks for permission only when an action really needs it, once per session, and never for scans or reports. Here is what changed, why, and what you will notice.
Read more →August's Windows security update stops Teams and the new Outlook launching on ARM PCs like the Surface Pro 11. Microsoft's workaround is a Store package with a name that gives nothing away.
Read more →Two new Windows 11 APIs will hand an app an age bracket and a yes or no on whether it has been verified. Not your birthday, and only to apps Microsoft has registered.
Read more →The FTC warned on 1 September about cloned car dealer sites: same logos, same listings, same customer testimonials. Buyers send a deposit and arrive at a dealership that has never heard of them.
Read more →Both of KB5120998's personalisation bugs are now confirmed on Microsoft's release health page. Neither can be fixed by hand, and the explanation for the cursor one is oddly specific.
Read more →Google shipped 152.0.7977.82 after confirming an exploit for CVE-2026-85046 exists in the wild. The bug is in V8, which means an ordinary web page is the whole attack.
Read more →The group behind last week's Manchester Airports breach has put the data on its leak site: 640 GB once unpacked, 8.8 million email addresses now searchable on Have I Been Pwned, and nearly 200,000 records about trips still to come this year.
Read more →Since 1 September, X users have been receiving reset codes they did not request. X says attackers are mass-triggering the reset form now that X Money is widely available, and that no accounts have been breached. The real danger is the fake email that arrives in the same wave.
Read more →An ad campaign on Facebook, Instagram and TikTok promised free television to Spanish speakers and delivered StreamRat, an Android trojan that watches the screen, logs what you type and lets its operators drive the phone. About 570,000 people saw the ads.
Read more →Type a file name, get web results. That has been the deal for years. A new setting in KB5120998 turns off web and Microsoft Store suggestions, and it is no longer Europe only.
Read more →Police and CrowdStrike cut off Sality on 31 August after 23 years. Its last job was swapping crypto wallet addresses in people's clipboards, and the infections themselves are still sitting on those PCs.
Read more →No password was stolen and no inbox was broken into. Someone registered Lenovo IDs using other people's email addresses, and Dropbox accepted that as proof of who they were.
Read more →From 13 October, eligible Windows 11 PCs get kernel protection turned on automatically. It closes off a whole class of attack, and a handful of ageing drivers are going to complain.
Read more →Some PCs are seeing Microsoft Defender quarantine the Tendvane download as 'Trojan:Win32/Wacatac' or 'Ulthar'. It is a false positive from a machine-learning heuristic, not an infection. Here is why it happens, how to check for yourself, and the fixes under way. Updated 4 September.
Read more →Driver, .NET and firmware updates now wait and install alongside Patch Tuesday rather than each demanding its own reboot. It covers 24H2, 25H2 and 26H1 and is rolling out gradually.
Read more →Microsoft sold Windows 10 holdouts another year of security updates. Nvidia isn't matching it. October 2026 brings the final Game Ready driver, then quarterly security fixes only until 2029.
Read more →Google deleted every remaining Manifest V2 extension from the Chrome Web Store on 31 August. Anything still sitting on your PC stays there, but you can never install it again.
Read more →Microsoft published research on 28 August into TerminalFix, a ClickFix variant that hides its payload inside PNG images. The part that matters to you is which box it tells you to paste into.
Read more →Adebola Festus Adekunle and Mudasiru Afeez Olawale were extradited from Nigeria on 27 August. Prosecutors say boys aged 13 to 17 were the targets. The lesson to pass on is short and it is not technical.
Read more →Version 152 automatically revokes notification permission from any site SmartScreen flags as a scam or phishing page. Drop is retired in the same release.
Read more →The full-screen prompt that only ever offered 'Remind me in 3 days' now carries an 'Opt out of backup' option on stable 25H2. It ends the nagging, and it does less than the wording suggests.
Read more →Anthropic spent the weekend signing Claude users out, deleting their saved cards and refunding charges they never made. Nothing was breached at Anthropic. The theft happened on the customers' own PCs.
Read more →A screenshot doing the rounds points at Settings, Privacy and security, Text and image generation as proof that Windows is quietly burning resources. It is a permissions list, and the activity count in the screenshot reads zero.
Read more →Version 1.94 adds Email Aliases: five throwaway addresses that forward to your real inbox. Switch one off and that shop's mail stops at the door, without touching the address everyone else uses.
Read more →The scary red notification is a Microsoft Defender bug. Microsoft's own release-health records now list it as affecting every supported version of Windows back to Windows 10, and the fix is still pending.
Read more →This year's Windows 11 feature update reached the Release Preview channel on 27 August as build 26300.9278. It is an enablement package, so the download is tiny and almost nothing changes on the day.
Read more →VulnCheck found two hidden services in the firmware of ZBT routers sold worldwide under a dozen other brand names, including an $88 model bought on Amazon. Both hand a stranger full control.
Read more →Socket found 19 Chrome and Edge add-ons that turned malicious after they got popular. The biggest had around 80,000 users and existed to empty crypto wallets and harvest passwords.
Read more →McKesson says attackers reached data through third-party applications. The group claiming the theft says it has 284 million records covering medications, diagnoses and Social Security numbers.
Read more →A listing offering Malwarebytes customer support turned up on BuzzFeed. It wasn't Malwarebytes, and the same phone number had already been used to impersonate McAfee and Norton.
Read more →Android 17 switches on Encrypted Client Hello, which hides website names from your broadband provider and whoever runs the Wi-Fi. It also stops apps quietly mapping the devices on your home network.
Read more →Manchester Airports Group says attackers took data on roughly 8.7 million customers. Most of it is email addresses typed into the airport Wi-Fi login screen, plus some number plates and postcodes.
Read more →KB5120998 arrived with a movable taskbar, a resizable Start menu and 35 other changes. It is optional, and early installers report black wallpapers and a stuck Windows 98 mouse pointer.
Read more →Fake recruiters on Indeed are asking applicants to sideload an Android app called MyInterview. It's a dropper, the payload is spyware, and it fights back when you try to remove it.
Read more →Ubiquiti patched 22 flaws in its UniFi range, three of them scoring a perfect 10 out of 10. One lets a stranger run commands on your camera system without a password.
Read more →Extortionists dumped what looked like 25 million Carhartt customer records. Have I Been Pwned filtered out the fakes and found 12.9 million real names, phone numbers and addresses.
Read more →The RGB lighting driver behind ARC Raiders and MARVEL Tokon crashes is now blocked automatically. No registry editing needed, but the fix takes up to 24 hours to arrive and needs a restart.
Read more →PowerToys 0.101 adds Window Hopper, which does what Alt+Tab won't: switch between windows of the app you're already in. Free, from Microsoft, and it works on Windows 10 too.
Read more →Chasing the GTA 6 leaker, Take-Two has subpoenaed Microsoft and Discord for identifying data on every member of three servers - including MachineGuid values that pin down individual Windows installs.
Read more →A stolen iPhone is useless without your passcode, so a paid criminal service now has an AI voice agent phone the owner, claim to be Apple, and ask for it. Researchers pulled the scripts.
Read more →Chrome 152 is one of the biggest security batches the browser has shipped: 327 fixes, ten of them critical. None are known to be under attack, but the update only lands when you restart.
Read more →Researchers hid instructions inside encrypted text on a web page. Asked to summarise it, Grok decrypted them itself and then sent the user's name, location and whole conversation to a stranger's server.
Read more →AliExpress was caught running a silent tone through visitors' browsers and measuring how each machine handled it. A developer only noticed because it broke his Bluetooth headphones.
Read more →INTERPOL's Operation Jackal IV named 263 suspects across 22 countries. Buried in the results is the reason a fake investment site looks so professional: somebody sells them as a service.
Read more →Two-step verification moves from six digits to a proper alphanumeric password, and you can finally have more than one passkey if you use both Android and iOS.
Read more →Since October 2025 the File Explorer preview pane has refused to show anything that came from the internet. A new "Preview anyway" button lets you override it one file at a time.
Read more →ToxicPanda 2.0 now goes after 349 banking, wallet and crypto apps across 16 countries. Its first move after landing on a phone is to ask for VPN permission and cut off Google Play.
Read more →The August .NET updates reject Calibri, Cambria, Constantia and Corbel when a program tries to print or export a PDF. Microsoft has confirmed it. Changing the document font gets you printing again.
Read more →Microsoft has named a cause for the August update's game crashes: drivers installed by hardware that glows. There is now an official workaround, and it may switch your lights off.
Read more →Order confirmations now say "Household item" instead of naming the product. The item name was how most people spotted a fake, and Amazon is one of the most impersonated brands in the US.
Read more →Kaspersky documented the first case of malware found on an Android car head unit. It arrived through the unit's own update system and turns the car into a proxy for other people's traffic.
Read more →Point-in-Time Restore is on by default on Home and unmanaged Pro PCs with a 200 GB system drive. It keeps three days of whole-system snapshots, and restoring one asks for your BitLocker key.
Read more →Sophos went through a year of its own incident cases involving AI tools. Claude's name turned up in 26 of 38. One case was an extension sitting in the Chrome Web Store looking thoroughly well reviewed.
Read more →Allure Security traced roughly 2,200 domains posing as banks that were never real, nearly all built from the same cheap web template. They exist so a scammer can show you a balance.
Read more →A 22 MB download called Microsoft Recommended Search Settings installs a Bing extension into Chrome, Firefox, Brave and Edge, then sends you to the Rewards page. Nobody is being forced to run it yet.
Read more →OneDrive Photos has vanished from the Start menu and Windows Search as of Friday. The app itself hasn't gone anywhere, and you still can't remove it on its own.
Read more →The FTC put out an alert on Thursday about brushing scams: a cheap item you never ordered, delivered so a seller can post a fake review under your name.
Read more →Researchers rewrote the expiry date a Visa card sends to a card reader and pushed real purchases through in actual shops. Mastercard, Amex and Discover rejected the same trick.
Read more →ClarityCheck sells reverse face lookups. Its image store sat online without a password: 450 GB and more than 9 million photos of people who mostly never knew they were in it.
Read more →A registry tweak called MSI mode is doing the rounds again, promising smoother frame rates. The setting is real, the risk is real too - here is what it actually does and how to try it without gambling your screen.
Read more →An experimental Insider build adds per-app camera, microphone and location switches for ordinary desktop programs, replacing the single all-or-nothing toggle.
Read more →Six days inside an Amazon cloud account in March cost 3,756,469 people their Social Security numbers, medical records and banking details. Letters went out in July.
Read more →Hunt.io reconstructed a 35-day campaign against Dahua IP cameras from an exposed server. One backdoor account it planted survives a factory reset.
Read more →A network of 41 fake download sites shows a genuine link when you hover and hijacks the click with JavaScript. What arrives is a signed installer for something you didn't ask for.
Read more →Microsoft opened an official known-issue entry for KB5121003 on Wednesday evening. Games freezing is one symptom; PCs restarting without warning is the other.
Read more →Xfinity Shield launched this week with WiFi Motion - movement detection using the radio signal between your gateway and your devices. It's free and opt-in; the terms are the bit to read.
Read more →A bad Microsoft Defender definition update made scans crash out with 'Threat service has stopped' on Tuesday. New definitions fix it, and they arrive on their own.
Read more →Tuesday's Chrome update closes 15 holes, two of them critical bugs in the graphics code that allow code execution outside the sandbox. Restarting the browser is the part people skip.
Read more →Home and Pro editions of Windows 11 version 24H2 stop getting security updates on 13 October. The move to 25H2 is one reboot, and it's mostly automatic.
Read more →CVE-2026-33824 lets an attacker run code on Windows over the network with no password and no click. Microsoft fixed it in April; attackers found it anyway.
Read more →Microsoft is testing a faster File Explorer and a context menu with a real settings page behind it - including an option to bring back the Windows 10 look.
Read more →A developer typed his own company's domain into the search box and watched Google suggest a live credential. 'Anyone with the link' means more than most people assume.
Read more →A break-in at logistics giant CEVA is still producing customer notices weeks later - Steam hardware buyers, now Pokemon Center. What leaked is exactly what a convincing delivery scam needs.
Read more →The FTC has settled with bill-payment firm Doxo for $2.1 million over search ads that impersonated people's actual billers, and published a warning about the wider tactic.
Read more →CISA says ransomware gangs are exploiting CVE-2025-60710, a privilege bug in Windows Task Host. Microsoft fixed it nine months ago, which is really the whole story.
Read more →France's tax administration confirmed an intruder extracted data on 678,000 people and businesses using a staff login. The fields taken are exactly what makes a fake tax email believable.
Read more →WMIC is gone from 24H2 and 25H2, and this time it can't be added back. Home users won't miss it - but the reason it was dangerous is worth knowing.
Read more →An attack called 'Download More RAM' rewrites the tiny config chip on a memory stick from software. That's enough to switch off antivirus and re-enable banned drivers. Secure Boot is what stops it.
Read more →The volunteers behind uBlock Origin's filter lists stopped fighting Meta's anti-adblock tricks on August 10. Ad blockers were also filtering out fraud, which is why this matters.
Read more →Evooo1Bot breaks into routers through 18 known flaws, some nearly two decades old, and turns them into relays so other people's traffic leaves from your address.
Read more →Windows is writing new Secure Boot certificates into your PC's firmware, and that needs several reboots plus a long dark pause. Whatever you do, don't hold the power button.
Read more →Windows 11's KB5121003 broke compatibility with inpoutx64.sys, a third-party driver that hitches a ride with hardware utilities. ARC Raiders and The Finals are crashing because of it.
Read more →Ukrainian police raided 94 fraudulent call centres in a single operation, seizing 3,336 computers and 5,238 SIM cards. The scripts inside show why the second scam call knows so much about you.
Read more →A new feature called Scam Alert reads incoming messages from strangers on your phone, not on Meta's servers, and flags the ones that follow known scam patterns. It's in limited testing for now.
Read more →Microsoft 365 Apps on Windows 10 stop at Version 2608, rolling out now. Security fixes continue to October 10, 2028 - but no new features, and support will tell you to upgrade.
Read more →A researcher published 'ShieldBreak', a working bypass of the RoguePlanet patch that hands over full control of a Windows PC. There's no fix yet - but the word 'local' matters a lot here.
Read more →A game designer's complaint that VLC needed 33 seconds to start a song went viral. VideoLAN says Microsoft Defender quarantined VLC's plugin cache - and there are three ways to fix it.
Read more →Americans reported losing more than $95 million last year to scams that started with a social media ad. The FTC's reminder: platforms don't vet most advertisers, so a slick 'sale' can be a fake store.
Read more →The 'AI Sidebar' add-on was pulled in January for siphoning ChatGPT and DeepSeek conversations. Netskope found it quietly reinstated, rebuilding trust with clean updates before slipping malicious code back in.
Read more →Researchers found 737 fake VPN extensions on the Chrome Web Store impersonating Proton, NordVPN and Surfshark. Instead of protecting your traffic, they funnel your whole browser session through proxies run by one operator.
Read more →A scary red alert is popping up minutes after boot on PCs that installed the August update, claiming Defender is off when it's actually running fine. It's a Windows bug, not an infection - here's how to check.
Read more →Microsoft's August 11 update patches more than 400 flaws, and one was being exploited in real attacks before the fix existed. Here's the one that matters and how to install it safely.
Read more →A campaign spotted on August 11 uses fake CNN, Avast and Stremio download pages to install O&O Syspectr - a genuine, signed remote-control tool. Because it's legitimate software, antivirus waves it through and the attacker gets full control of your PC.
Read more →A full-screen pop-up says your Amazon account or Apple ID was just charged $149.99 and gives a number to call right away. It's a callback scam - and the same number shows up on both versions. Here's the tell.
Read more →The Better Business Bureau is warning about official-looking postcards claiming hundreds of dollars in gas or grocery cards are being held in your name. Pay the small 'processing fee' and the cards never come - but more charges do.
Read more →As of August 1, California's DROP portal lets residents send a single request that forces every registered data broker to delete their information. Here's how it works - and what people in other states can still do.
Read more →Connor Moucka admitted to the 2024 Snowflake attacks that exposed records on 100 million-plus people. There was no clever exploit - just old stolen passwords and accounts without two-factor turned on.
Read more →A federal court sentenced Maksim Silnikau for running the Ransom Cartel ransomware crew. But his older work is the part home users will recognise: he helped pioneer the fake-virus scare pop-up that's still fooling people today.
Read more →Researchers showed three ways malware can hijack the passkeys Google syncs across your devices. The catch: every one needs malware already on your PC first. Passkeys are still worth using - here's the honest picture.
Read more →Microsoft says a Russian state-linked group is tampering with hotel and conference Wi-Fi to push fake login pages and bogus 'update' prompts. It's called CaptiveCrunch. The one habit that keeps you clear of it.
Read more →A trojanised advertising script watched visitors' clipboards and swapped any Bitcoin or Ethereum address for the attacker's own. No antivirus flagged it. A good reminder to always check what you paste.
Read more →A message from someone you know asks you to vote in a contest, then to enter a six-digit code. That code links the scammer's phone to your WhatsApp. No password needed - here's the one rule that stops it.
Read more →Google is building a protection that stops sneaky extensions from taking over your new-tab page and search engine on home PCs - and, crucially, from making themselves impossible to remove. Here's what's changing.
Read more →A sextortion campaign is borrowing the ShinyHunters name and real leaked email addresses to demand $2,000 in Bitcoin within 48 hours. There's no recording and no malware behind it - here's the calm response.
Read more →Scam pages promising free V-Bucks, a '$50' collab, or a tool to value your locker all funnel to one thing: a fake Epic Games login. Worth a two-minute chat with the Fortnite player in your house.
Read more →Adobe killed Flash Player back in 2020, but plenty of people still go looking for it. A new campaign uses a fake 'AGE Flash Player' installer to drop AtlasRAT, a trojan that logs your keystrokes and hands your PC to a stranger.
Read more →Researchers found a network of more than 120 near-identical fake Walmart shops, all built to grab your credit card at checkout. The bait is premium liquor at 40-70% off. The giveaway is hiding in the address bar.
Read more →KB5101684, the end-of-month preview build, gives the Start menu and taskbar a real performance boost, tidies up File Explorer, and adds fingerprint support for external readers. It's optional and carries no security fixes - here's whether to grab it.
Read more →The FTC warned this week about people posing as the VA and offering to help veterans apply for benefits for a fee. The VA never charges to apply, and only the VA can decide who qualifies.
Read more →Check Point traced more than 70 copycat websites impersonating popular Windows utilities like PowerToys and CrystalDiskMark. They rank above the real pages, behave at first, then swap the download for a password stealer.
Read more →The FTC warned this week that fake letters from 'law firms' claim a stranger with your last name died and left you an unclaimed life insurance policy. There's no policy - just a hunt for your Social Security number and bank details.
Read more →A campaign called FakeAgent used sponsored Bing ads to send people searching for the Claude desktop app to a fake download page hosted on the genuine claude.ai domain. The file installed a password-stealing trojan. Two habits keep you clear of it.
Read more →A growing form of digital stalking needs no malware at all - just two minutes with your unlocked device. An abuser signs Chrome into their own Google account, flips on sync, and your history and saved passwords flow to them. Here's the 60-second check.
Read more →Microsoft is ending updates for the OneDrive sync app on Windows 10 version 21H2 and earlier on August 15, 2026 - no more fixes or security patches. Machines on 22H2 are fine until 2028. A free version bump keeps you covered.
Read more →The microtask platform Paidwork was breached in March. An 11GB dump of 23.3 million accounts is now circulating, and unlike most leaks it includes bank account numbers and transaction records. Here's what to do.
Read more →Researchers are tracking a campaign that hides a password stealer inside fake games, mods and cracks. Open the installer and it quietly grabs your saved logins, browser data and crypto wallets.
Read more →Attackers walked into Chick-fil-A One loyalty accounts in June using passwords stolen from other sites. No hacking of Chick-fil-A required - just people reusing the same password. Here's how to shut that door.
Read more →The certificates behind Secure Boot were issued in 2011 and have started expiring. For most PCs the swap is automatic and invisible; on some older machines it can trigger a BitLocker recovery prompt.
Read more →A November 2025 breach of the AI music app surfaced publicly last week. Have I Been Pwned added 55.3 million accounts on July 20 - emails, some phone numbers, and tens of thousands of partial payment records.
Read more →The 2026 feature update won't be the usual multi-gigabyte, multi-restart ordeal. If you're on 24H2 or 25H2 it arrives as a 174 KB switch that flips features already on your PC.
Read more →Scammers are impersonating Federal Trade Commission staff, texting photos of fake ID badges and promising to recover cash you already lost - then talking you into sending more. Here's the tell.
Read more →A wave of fraud runs through unsolicited FaceTime calls: a fake 'bank' or 'Apple support' agent invents an emergency, then talks you into handing over codes or moving money. Here's the rule that ends it.
Read more →A few days after blocking July's update on some Dell laptops over shutdowns and overheating, Microsoft has shipped the repair. Here's who needs KB5121767 and who can safely ignore it.
Read more →A flaw in how WinRAR handles archive recovery files can let a booby-trapped download run code on your PC. The fix is version 7.23 - but WinRAR never updates itself, so most people are still exposed.
Read more →Nearly 300 fake GitHub pages are impersonating trusted apps - crypto wallets, security tools, games - and ranking in search results. Click the download and you get a password stealer instead.
Read more →A wave of fake Facebook 'account suspended for fraudulent activity' warnings is doing the rounds. They funnel you to a lookalike login page that grabs your password and even your 2FA code. Here's the tell.
Read more →A Windows 11 bug quietly let one hidden system file balloon to hundreds of gigabytes - up to 500GB on the worst-hit PCs. The July update fixes it. Here's how to check if yours was affected.
Read more →Microsoft is deliberately holding back the July update on some Intel-based Dell PCs after it caused shutdowns, overheating and battery drain. Here's what's happening and why you shouldn't force it.
Read more →Microsoft's July 14 update fixed a record 570 flaws, including three zero-days. Two are already being used in attacks, and one is a BitLocker bypass that home users should care about. Here's what to do.
Read more →A convincing fake Microsoft support site offers a Windows 11 24H2 'update' and delivers password-stealing malware that slips past antivirus - not one of 69 engines flagged it. Here's the rule that keeps you safe.
Read more →A researcher found a serious hole in Microsoft Defender itself, nicknamed RoguePlanet. Microsoft patched it out of band on July 9 - and for once, you barely have to lift a finger.
Read more →A U.S. government-backed advisory found several Tenda router models ship with a secret admin password baked into the firmware. There's no patch. If you own one, do this today.
Read more →The car insurer confirmed a breach exposing 6.9 million people's names, driver's license numbers and, for some, Social Security numbers. It's the year's biggest license-data spill. Here's the sensible response.
Read more →A new trick called ConsentFix hijacks a Microsoft 365 account in seconds - no password typed, no software installed, and it sails right past two-factor. Here's the one move it needs from you, and how to refuse it.
Read more →A recovery feature testing in Windows 11 26H2 reinstalls Windows from the cloud with no USB stick, pulling the image and your device drivers straight from Windows Update. Here's what it means.
Read more →With Windows 10 winding down, many people find their PC is 'not supported' - usually over TPM 2.0. Often it's just switched off. Here's how to check and turn it on.
Read more →Ransomware, a dead SSD or a stolen laptop all end the same way if you have no backup. The 3-2-1 rule is the simple habit that saves your files - here's how to actually do it.
Read more →Free Windows 10 security updates now run to October 2027, but you have to opt in. Here's the exact click-path, the three enrollment options, and the one requirement to check first.
Read more →New Microsoft accounts now ship without a password at all, and passkeys work on ordinary Windows PCs. They're faster than a password and can't be phished. Here's how to add one.
Read more →Google has rushed out an emergency fix for CVE-2026-11645, a flaw in Chrome's V8 engine that attackers are already using. Here's how to force the update in two minutes.
Read more →A full-screen warning, a blaring alarm, a phone number to call 'support.' It's designed to panic you. Real security software never works like this. Here's how to shut it down safely.
Read more →Infostealer malware quietly grabs every password saved in your browser and sends it to criminals. A dedicated password manager and passkeys shut the door. Here's the fix.
Read more →Task scams are among the fastest-growing frauds of 2026. They dangle easy pay for trivial work, then ask you to deposit your own money. One rule defuses all of them.
Read more →Microsoft quietly extended the consumer Extended Security Updates program by another year. Here's who qualifies, the three ways to enroll, and what it does and doesn't cover.
Read more →Fake QR stickers on parking meters, menus and 'booking' emails are draining accounts in 2026. The tell is simple once you know it. Here's what to check before you scan.
Read more →Generally available since June 24, it snapshots your whole PC every 24 hours and rolls it back in minutes - files included. Excellent, but the 72-hour limit means it is not a backup.
Read more →On June 23, LastPass told users about another breach. The good news: vaults weren't touched. The catch: your contact details leaked, so brace for targeted phishing.
Read more →Mirai-style botnets spent 2026 mass-infecting home routers, many of them end-of-life models that will never be patched. Here's how to check your firmware and when to just replace it.
Read more →ClickFix shows a fake full-screen Windows update and tricks you into pasting a command that installs a password stealer. It surged again in 2026 - here's how to spot and avoid it.
Read more →Ransomware crews load legitimately-signed but vulnerable drivers to switch off your antivirus before encrypting your files. 'EDR killers' are now standard kit - here's what home users can do.
Read more →A few seconds of audio is enough to clone a loved one's voice and fake an emergency call. The FBI's advice is simple, and a family 'safe word' makes these calls fall apart.
Read more →Beyond the cosmetic Recycle Bin glitch, KB5094126 was dropping some machines (mostly HP) into a BSOD or BitLocker recovery screen. Two steps protect you before you patch.
Read more →Microsoft's June update fixed a record number of flaws but introduced Recycle Bin glitches, BitLocker lockouts and Office crashes. Here's what's affected and how to patch safely.
Read more →A 'SMART failure predicted' message is your drive's early warning that it may be dying. Do this immediately - and learn the one thing you should never do.
Read more →Check Point counted 698 ransomware attacks in May 2026, up 48% year over year. Most hit businesses, but the fallout reaches everyone. One habit keeps you safe.
Read more →A convincing fake ChatGPT page infects people who search for the app - a credential stealer on Windows, Odyssey Stealer on Mac. The fix is a simple habit.
Read more →The headline feature of the May 2026 update isn't a fix - it's a controller-first, full-screen gaming mode for ordinary PCs, plus a faster File Explorer and smarter search.
Read more →Fake toll-payment texts drove a 40% jump in government-imposter scams in 2026. The message rushes you to a lookalike payment page. Here's the tell and what to do.
Read more →KB5089549 was rolling back on some PCs with error 0x800f0922 - not a broken machine, but a full EFI boot partition. Here's what happened and the one-line fix.
Read more →