• 69% of Brits don't think their bank could detect an AI deepfake impersonating them
• Four in five do at least expect ID verification to get slicker in the next five years
• Most want convenience and are only prepared to wait two extra minutes

More than two in three (69%) Brits worry their bank couldn't distinguish them from an attack designed to impersonate them, according to new Digidentity research.

With rising AI threats targeting businesses and consumers alike, four in five would now expect their bank to have AI deepfake detection tools in place when they're running selfie-based identity checks.

This comes as more and more citizens end up preferring increased security measures like vide-based identity checks – with half (53%) believing that one-time security codes sent by text are no longer sufficient.

Banks aren't fully trusted to spot a deepfake

The fallout from a successful attack can have far-reaching consequences, so it's no surprise UK citizens are scrutinizing their banks. Vicims could face months or years of disputing fraudulent debts or challenging mystery accounts opened in their names, for example.

The report comes after Bank of England governor Andrew Bailey called for social media companies to take greater responsibility for tackling scams.

But there is hope, and citizens feel fairly confident in banks' longer-term strategies. Four in five (79%) expect ID verification processes to become smoother over the next five years despite these systems ultimately having to do more heavy lifting, and with good reason. Three in five (62%) respondents said they'd only be willing to tolerate up to two additional minutes of checks.

However, there are challenges. Banks don't typically run their own verification systems, instead choosing to opt for a third party.

"Banks put their own reputation behind the identity provider they choose," Digidentity UK Country Manager Jonathan Evans wrote. "If that provider lets an imposter through, it is the bank’s relationship with its customer that suffers."

Looking ahead, banks are under the most pressure they ever have been to verify legitimate activity and block malicious attacks, but they're also under equal pressure to deliver experiences that are convenient and quick for the end user despite rising threats.

You can feel the excitement in the air. Grand Theft Auto 6 will be available to play in less than two weeks, officially launching on November 19. We're fortunate here in Australia, as we'll be able to play the much-anticipated game before the rest of the world — our Kiwi cousins get it slightly earlier, but what's a few hours when we've had to wait 13 years.

That's only possible if you download the game ahead of time. And with preloading officially kicking off today, November 10, you'll want to make sure your NBN plan is ready to download the enormous 212GB file. If it isn't, there's still time to switch to one of the fastest NBN plans before launch day, so you can begin preloading and doing your bit to help avoid breaking the Australian internet.

And now is a great time to switch regardless, as several early Black Friday NBN deals have gone live, including an offer from Telstra that's almost too good to be true.

The telco is currently offering 50% off plan fees for four months across all of its plans, making it one of the cheapest providers for introductory pricing across several speed tiers. Yes, it happened — we got cheap Telstra NBN plans before GTA 6.

With the fastest NBN plans capable of downloading GTA 6 in as little as 14 minutes, compared with 56 minutes on slower connections, switching could make all the difference.

I’ve selected my top choice for each of the four speed tiers, with prices starting at AU$69 a month for Spintel’s NBN 750 plan.

• There is tech that can turn the radiation from HDMI cables back into video
• AI reduces errors in intercepted signals by over 60%
• Digital is harder to decode than analog, but it's not impossible

Last week we discovered that your videos can give away your location thanks to airplane noises in the background that you can't even hear, and we've known for some years that Wi-Fi routers can be used to spot where people are in a room. So it's not a huge surprise to discover yet another way our tech is betraying us — and this time the culprit is the humble HDMI cable.

A post on X by Psalter shows TempestSDR, which can capture the signal from your HDMI cable and almost recreate the image on another screen, because the cable creates an electromagnetic field that can be read. The quality isn't great, but if you bring AI into the mix you can enhance it to make text readable and images clearer. An AI system especially for the task, called DeepTempest, reduces errors by over 60%.

The video below is quite alarming.

Intercepting or playing with electronic leakage isn't new: 2001's Tempest for Eliza broadcast music to your radio by sending RF signals via your monitor, displaying images that generated specific radio frequencies. What's new is the AI element.

Is it time to don the tinfoil hat?

Not yet. DeepTempest does dramatically enhance images and reduce text errors, but as you can see from the video things are still pretty indistinct — and that's when the cable you're intercepting is right next to you, so you're close enough to see the display that you're intercepting.

You're not going to see much if you're in a van across the street, even if the cable being used is really poorly shielded, unless you've got a seriously powerful scanner.

DeepTempest was developed by Federico Larroca at the University of the Republic in Montevideo, Uruguay, and it does represent a major step forward: using text capture software DeepTempest was able to reconstruct text with roughly 30% of characters being misinterpreted.

That sounds like a lot but it's not enough to render text incomprehensible to human readers. And that error rate is a whopping 60% lower than the previous state-of-the-art attack.

The word Tempest is used in these systems because it's a US National Security Agency (NSA) codename that refers to spying via electromagnetic leakage, and measures to prevent it.

Those measures are distance, shielding, filtering and masking, and they consider more than just leakage: they also include sounds and vibrations, so for example it's possible to log keystrokes via a phone's motion sensor.

The history of this is fascinating and goes back to the Second World War, where the US military's teleprinters were found to be generating detectable electromagnetic spikes that could be intercepted to capture the text. The recommendation for shielding, filtering and masking comes from the machines' supplier, Bell System, and while technology has advanced somewhat since then the advice is still sound: if you're the kind of person that security services or other shadowy organizations might be interested in, don't buy crappy cables.

Pricier cables have electromagnetic shielding, and while high-end companies used to tell us that was essential because otherwise the audio and video fidelity wouldn't be as pristine as you want… but maybe it's signal leaking out rather than in that people will be more worried about in the modern world.

• Researchers found over 1,400 exposed ARTEX instances online, with many linked to offensive security tooling
• ARTEX combines AI agents with reconnaissance capabilities and has been increasingly adopted in real-world attacks
• Some operators accidentally exposed malware, exploits, credentials, and internal infrastructure through misconfigured servers

Around 1,500 malicious instances of ARTEX were found on the internet, available to anyone who knew where to look, experts have warned.

Security researchers Censys said they identified 1,465 hosts running exposed ARTEX consoles. Of those, 155 (roughly 10%) were also running at least one tool commonly used in cyberattacks, including Cobalt Strike, Vshell, or Adaptix C2. They also found 32 publicly accessible directories on ARTEX hosts, some of which exposed exploit binaries, post-exploitation tools, and other sensitive files.

Usually, the ARTEX console does not require public-facing access, the researchers said, stressing that overall global deployment is “likely higher”.

Hijacking ARTEX

ARTEX is a legitimate penetration testing tool hijacked for malicious purposes, meaning at least some of these instances were set up by threat actors.

The story of ARTEX is similar to that of the now infamous Cobalt Strike. It was released by a developer called Autumn-27, who also authored ScopeSentry - a tool Censys describes as a “widely used Chinese asset-discovery and vulnerability-scanning platform”.

The researchers described ARTEX as an “AI agent layer on top of that recon foundation”. In other words - it is an LLM-powered version of Scope Sentry that syncs assets found by the tool’s domains, subdomains, IPs, ports, and endpoints.

ARTEX was released in late July 2026 and quickly gained popularity. On October 7, security researchers CrowdStrike reported seeing it used in malicious attacks and a day later, the developer distanced themselves from the illicit activity and stressed the tool was built for testing within authorized asset scopes. They then turned it into a closed-source tool with no further releases. However, despite the repository being taken down, Censys claims archived copies, translations, and different rebrands are still circulating.

Since then, numerous researchers observed it being used in different attacks. The CrowdStrike report described an unidentified threat actor using ARTEX to target South Korean financial institutions. The attacker, believed to be a financially-motivated Chinese actor (as opposed to being a state-sponsored one), compromised a broker-facing loan inquiry service at one bank and an employee mobile system at another. In both instances, they walked away with sensitive data.

They used ARTEX with DeepSeek v4.1-flash as their primary AI model, while also running Claude Code and Grok. The researchers found the operation in part because the attackers left publicly accessible directories where they exposed prompts, session histories, and ARTEX configuration files.

Censys later said the directories had been left exposed in mid-August, roughly seven weeks before CrowdStrike published its findings. File names also suggested they were targeting payment and gaming services, as well.

At one point Microsoft linked it to Storm-0940, a China-aligned threat actor responsible for compromising ConnectWise Cloud Backup customer environments. Apparently, the threat actors used ARTEX to automate scanning, password spraying, and OAuth application abuse, peaking at 2,900 sign-in attempts per minute at one point. Some Microsoft’s customers were allegedly seeing privileged cloud access granted in less than three hours.

Exposing their own infrastructure

Now, Censys says ARTEX is being paired with other offensive tools. At least 70 hosts were seen running both ARTEX and CyberStrikeAI, and others were seen deploying PentAGI, HexStrike AI, and RedAmon. Ironically enough, the researchers also found some actors had inadvertently exposed sensitive information through poorly secured directories. One installation exposed the operator’s entire home directory, including SSH configuration files and shellac command history, while others contained Windows lateral movement tools, malware implants, reverse-shell scripts, and exploit code.

Censys also stressed that not all of the exposed instances are malicious. They also said that roughly 650 of the detected hosts belonged to two groups of identically configured hosting infrastructure, leaving approximately 815 unique installations.

• Attackers are actively exploiting the Plex2Shell vulnerability chain to compromise internet-exposed NAS devices
• QNAP urges immediate updates, as older Plex Media Server versions allow remote code execution and full device takeover
• Systems exposed before patching may already be compromised and require credential resets and full remediation

QNAP has issued a security advisory warning users to install the latest version of the Plex Media Server app on their Network Attached Storage (NAS) devices.

It says older versions are being actively abused in the wild using the dreaded Plex2Shell vulnerability chain.

“Plex has confirmed that these vulnerabilities are being actively and widely exploited,” the company said in the advisory. “QNAP urges all users running Plex Media Server on a QNAP NAS to update immediately and to review their devices as described below.

What is a QNAP NAS and what does it have to do with a flaw in Plex?

A Network Attached Storage device is a dedicated system allowing users to store, back up, and share files across a network. Essentially it’s a series of hard drives connected to a local network for easy access. Consumers and businesses alike often use it as an alternative to subscription-based cloud storage models, and sometimes even to stream audio and video files.

One popular way to do that is via a software application called Plex Media Server, which allows users to organize and stream their personal collection of movies, TV shows, music, and other multimedia content. By installing Plex on their NAS, and a compatible player app on a smartphone and similar device, users can access their media libraries over a local network or remotely via the internet.

This last part - via the internet - is where trouble was recently found.

Earlier in November 2026, Plex disclosed having fixed four vulnerabilities in Media Server versions 1.43.2 and older: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656. Separately, these four are relatively dangerous. Chained together, they allow unauthenticated threat actors to execute arbitrary code with the highest privileges, remotely. In other words, they can use Plex Media Server to take over the QNAP NAS and, if they choose to, access and steal sensitive content found there. These four have been given the nickname Plex2Shell.

Plex released a fix in September 2026, and a proof-of-concept (PoC) exploit was made available a few weeks later. Since then, multiple security companies reported seeing Plex2Shell abused in the wild, mostly to install proxy software and cryptocurrency miners. The latter might not be particularly useful, given that most miners require powerful GPU units, but the former could prove lucrative.

Patching Plex

A proxy network allows cybercriminals to route their traffic through legitimate residential infrastructure, helping them not just to hide their identities and whereabouts, but also to launch disruptive Distributed Denial of Service (DDoS) attacks. As such, residential proxy services are always in demand, and can earn their operators a hefty sum.

The US Cybersecurity and Infrastructure Security Agency (CISA) added all four bugs to its Known Exploited Vulnerabilities (KEV) catalog on October 20, and gave Federal Civilian Executive Branch (FCEB) agencies a mere three-day window to apply the fix or stop using Plex entirely.

That being said, Plex addressed the flaws in Media Server version 1.43.3 (build 1.43.3.10861), which can now be downloaded via QNAP’s App center. The company confirmed that the bugs exist only in Plex Media Server, QTS and QuTS operating systems were not affected. Still, Plex said if the NAS device was reachable from the internet while running older versions of the software, updating is not enough and the NAS should be treated as compromised.

Those users are advised to complete a clean reinstall, compromise check, and credential reset.

The exact number of internet-accessible QNAP NAS devices is difficult to determine, but according to figures from BitSight, there are tens of thousands of them, right now. That does not mean all of them are vulnerable (many might not be running Plex Media Server to begin with), but the theoretical attack surface is quite large.

Via BleepingComputer

• Windows 11 is getting two further sizeable changes with the interface
• One involves the introduction of an App Updates panel in Settings to help manage third-party software updates more effectively
• The other is an integration of Copilot AI functionality in the taskbar's search box, although this will be an opt-in only feature – however, some users remain cynical about Microsoft's motives here

Microsoft has already made some major changes to Windows 11's interface, and a couple more are now in the pipeline – a hub for managing app updates in Settings, and a more divisive change to bring Copilot functionality to the search box in the taskbar.

First off, the less controversial idea that's apparently being mulled. As discovered by Windows Latest, this is an App Updates panel which is in a recent preview build of the OS (and has been present in testing in the past, it should be noted).

This is in Settings and consists of a hub where third-party apps in Windows 11 can be managed, and you can see what needs updating at a glance – rather than getting individual notifications from apps bugging you at random times, or an update only being actioned when you open the software. (The problem in the latter case being that if you don't use something for ages, you might miss a crucial security fix for an app, leaving your system potentially vulnerable).

Essentially, this is about giving third-party apps the same level of support as software from the Microsoft Store in terms of staying on top of updates, and it's a useful piece of functionality.

If it makes the cut for the release version of Windows 11, that is, and note that developers need to register their app for inclusion – with no software having done so as yet (so this is still relatively early testing).

The other interface introduction that's inbound for Windows 11 as flagged by Windows Central is part of the major revamp for Windows search, and it brings Copilot into the mix. Specifically, Microsoft is going to integrate Copilot functionality with search – but only for those who want it present.

In other words, it will be off by default, and you will need to actively turn on the option to have Copilot AI functionality in the search box.

Windows Central highlighted a Microsoft blog post on 'hybrid intelligence' from last month which explained that: "We will also begin adding the option to integrate the new Copilot with Search on the taskbar, so you can get quick answers inline from Search, and if you want to have a richer conversation, you can jump from Search directly to the full Copilot app. This experience will be opt-in, and will first start rolling out to select markets later this year."

Analysis: Ask Copilot returns – but there are doubters as to Microsoft's intentions here

This Copilot experience rollout could start soon, then, and it will likely be very similar to the 'Ask Copilot' functionality that Microsoft has played around with in testing in the past, effectively acting as a replacement for the search box. Evidently, that felt like too radical a move – it was also an opt-in feature, mind, it's worth noting – so with the new tack, the search box remains, but Copilot can optionally be integrated.

Obviously, the Ask Copilot concept was a very visible addition of AI, and this way, Microsoft is keeping it a lot more low-profile. That's a sensible approach, of course, given that the company has previously promised to cut back on AI clutter in Windows 11 as part of the broad drive to fix the OS which has been happening throughout this year.

While the App Updates panel is certainly a welcome move, this Copilot integration has proved divisive. On the one hand, there's a good deal of predictably negative feeling towards any AI addition for Windows 11, even one that is opt-in only.

Part of the reasoning here is that people are generally suspicious of Microsoft's motives and what'll happen in the future. In other words, a feature gets introduced as opt-in only, but later becomes the default (requiring opting out) – and finally it's baked in as a concrete part of the interface (with no option toggle at all). Despite the 'fix Windows 11' initiative and that whole new leaf which is a genuine effort to improve the OS across many fronts, trust in Microsoft is so low with some folks that they can't help but think the worst of the company.

One Redditor warns: "Opt-in always becomes 'opt-out' later. Be wary of this folks. New search UI looks less trash than the old one though."

Another agrees: "Yup they love to make things mandatory after no one uses a feature."

On the other side of the fence, there are those who are pleased that Microsoft has taken the opt-in route with this functionality.

Another Redditor posts: "Microsoft letting consumers pick if they want Copilot or not is inspiring. Take note of this Apple, and let users delete Apple Intelligence models natively."

Personally, taking into account all the good work that has been done with Windows 11 this year, I think we need to give Microsoft the benefit of the doubt here – especially given those promises about not pushing AI features unduly in Windows 11.

That said, longer-term, who knows where Windows 11 is going with AI agents, and I don't for a minute believe that AI isn't the future of Microsoft's desktop OS – or at least that remains the current thinking of the execs, anyway.

• Crédit Mutuel Arkéa confirms cyberattack led to the theft of roughly $133 million from the bank itself
• Attackers reportedly converted stolen funds into cryptocurrency and laundered them across multiple services and blockchains
• Bank says customer assets were unaffected, while investigators continue probing the third-party compromise

Crédit Mutuel Arkéa, a major French banking and financial services group, has confirmed it recently suffered a cyberattack that resulted in the theft of around $133 million.

The stolen money apparently did not belong to customers, but rather to the bank itself, and was converted into cryptocurrency to be siphoned out more easily.

The attack was first spotted by ZachXBT, a cryptocurrency analyst and blockchain fraud investigator who issued an alert on November 2 2026. “An EU entity is suspected of losing $106M+ from multiple centralized exchange accounts yesterday (Nov 1),” he said at the time. “The suspected stolen funds were withdrawn as USDC & USDT by an illicit actor.”

Blockchain as the tech of choice for both sides

It appears the attackers converted fiat currency into different cryptos before sending them out. As ZachXBT explained, the threat actor was “aggressively swapping” USDC (a stablecoin currency, one whose value is pegged to that of the US dollar) for ETH (Ethereum) and transferring the tokens to instant exchanges such as WellWallet and Keyrex. Some of the funds were converted to XMR (Monero, a known privacy-first token whose transactions are notoriously difficult to track) via Wagyu, and later bridged “across multiple chains.”

The irony is pbvious - blockchain and cryptocurrencies are often perceived as the go-to platforms for financial fraud and while many defend it by saying the fraud conducted via fiat is magnitudes larger, the fact remains the crooks transferred dollars to cryptos during theft.

On the other hand, the attack was not even discovered (at least publicly) until it hit the public blockchain where analysts like ZachXBT were able to see it and report on it.

A day later, ZachXBT issued an update, saying he identified an additional $27M+ of withdrawals, bringing the total amount stolen to $133M+.

“My working theory is a large financial institution in Western Europe was exploited and it’s currently being covered up,” he said. “No proper incident disclosure has resulted in $30M+ being laundered away which could have been frozen by EU law enforcement,” he added, suggesting that Crédit Mutuel Arkéa handled the situation poorly.

In his reports, however, he never mentions the name of the organization targeted. Crédit Mutuel Arkéa released a brief statement on November 4, saying it suffered an attack which it later managed to contain.

“As soon as this attack was detected [...] the decision was made, as a precautionary measure, to temporarily suspend certain transactions in order to secure operations and prevent any further fraudulent movements,” the announcement reads.

“This incident is closed and is now under control. Operations are being gradually resumed over the course of the morning, after the group and its subsidiaries ensured that checks had been carried out and enhanced security measures had been put in place.”

Not Lazarus

In an FAQ published a day later, the company said the attackers “went through the platform of one of our service providers and thus reached Crédit Mutuel Arkéa directly.” It did not want to say which service provider that is, but ruled out Fortuneo since that name was apparently being mentioned in local press.

The attackers used Arkéa's own account to carry out transactions with other banking players, it said, confirming that customer funds are safe and unaffected.

“We would like to reassure all our customers that this incident has no consequences for their assets. It only led to a delayed execution of certain transfer operations,” the FAQ further states.

The bank did not want to confirm the amount of money that was stolen, but commenting on ZachXBT’s $133 million figure, said it can “simply validate the order of magnitude.” In other words - it’s a close estimate.

So far no threat actors claimed responsibility for this attack, and chances are none will. ZachXBT believes this was not the work of notorious North Korean actors Lazarus Group.

Via BleepingComputer

• Iris Ohyama discloses breach affecting 7.7 million individuals after attackers compromised its ecommerce platform
• Exposed data included personal details and some encrypted passwords, prompting password reset recommendations
• Company continues investigating the attack, with no ransom demand, attribution, or confirmed misuse reported

Major Japanese consumer goods manufacturer Iris Ohyama has confirmed suffering a cyberattack which saw it lose data on 7.7 million people.

The company first disclosed the breach on October 29, 2026 when it confirmed “unauthorized access on the e-commerce site” Iris Plaza. At the time, the company said its investigation was ongoing, and that it would temporarily suspend the site to ensure customer safety. While it was looking into possible data leaks, it stressed that credit card information was not taken.

A week later, Iris Ohyama came forward with a more detailed report, in which it said that on October 28, if found “suspicious files” on an external cloud service it used. The subsequently launched investigation confirmed that the attackers stole sensitive data on 7.7 million people, which included member data on approximately 5.8 million people, and non-member data on 1.9 million.

Member data included names, addresses, phone numbers, email addresses, genders, dates of birth, and encrypted passwords (for some users). The non-member data was limited to names, addresses, phone numbers, and email addresses.

Hashed passwords and stolen credentials

The fact that the passwords were encrypted is good news, since it means the accounts cannot be accessed that easily. However, the company did not say which encryption or hashing method it used, so it is possible that the attackers could break some of them offline. It is thus no wonder the company warned users to update their login credentials, especially for those who use the same password for other services.

Those that do use the same passwords across various platforms are also at risk of having all of them compromised, since threat actors are known for trying out the stolen combinations across a multitude of services.

We don’t know who targeted Iris Ohyama, and to what end. No threat actors have yet claimed responsibility for this attack, the data has not yet leaked to the dark web, and we’ve found no evidence it was used in phishing or social engineering attacks.

In a statement given to BleepingComputer, the company said it received no direct communication from the threat actors, no ransom demands, and did not know who they were.

We also don’t know which third-party cloud service Iris Ohyama used, which malware was used, or how it was planted there. In the meantime, the company notified the country’s data protection watchdog agency, as well as local law enforcement authorities.

Targeting Japanese organizations

Over the last few months, Japanese organizations have experienced a barrage of cyberattacks, targeting firms of different sizes and in different industries. Just last month, we reported on an attack on GMO, a data breach incident at Japanese Burger King, and a malware attack on Daiichi Kosho. The GMO attack was particularly worrisome, since the company urged its customers to “unplug any cords connected to your PC”.

Burger King Japan also recently lost sensitive data on 11.18 million customers, most of which were using the company’s official smartphone app, while a malware attack on Daiichi Kosho’s supply chain resulted in the compromise of 8.7 million of both customers and employees.

All of these are large organizations and major enterprises, and Iris Ohyama is no exception. The company is a large consumer goods manufacturer, known for household appliances and everyday products, and has been around for decades offering air conditioners, vacuum cleaners, kitchenware, lighting, pet food and accessories, as well as different food products like rice and water.

For the financial year 2025, the company reported an annual revenue of $1.53 billion, with a headcount of more than 6,300. It also has a substantial international presence, with manufacturing and distribution operations in the US, Europe, China, and South Korea.

• A new Linux script called 'Ram Altman' is a tongue-in-cheek creation
• It emails Sam Altman with a report of the unused RAM in your PC, also known as the RAM he missed out on
• The joke follows a controversial comment Altman made recently about how it's 'quite terrible' that everyone has a load of RAM sitting in their own PC, rather than in data centers

Someone has planted their tongue firmly in cheek and knocked up a little script that reports the amount of RAM being used in your Linux PC via email to Sam Altman.

Okay, so this script on GitHub (spotted by Respawn First) doesn't actually email Sam Altman – though it could be used to message someone (theoretically the OpenAI CEO if you had his private email somehow). However, the creator makes it clear that they don't intend to have this tool used to spam people (as you'd hope).

It's a joke, of course, and one made at the expense of Altman after he recently commented that it's "quite terrible to have everybody have a bunch of the world's limited supply of DRAM sitting in their own computer."

That comment sparked developer Iain Kay to craft this open source script which is called 'Ram Altman' and is: "A bash script that writes to Sam Altman once a day to report the RAM he missed."

The Linux utility is designed to "track total, used and available RAM, plus your standing with the global allocation authorities," with the developer noting that it sends at most one email per day.

As mentioned, you are not supposed to be setting this up to actually spam someone with emails about your RAM usage, not unless it's a willing participant who will enjoy the (daily) joke, such as the "friend who has been waiting for DDR5 prices to come down" as the dev observes.

The email content around the RAM report is rotated with 10 messages, eight different subject lines, and six sign-offs, all to ensure that the "joke gets old at a carefully managed pace."

No email is sent if you have less than 10% of your system RAM free, incidentally, as the creator judges that your machine has "suffered enough" and doesn't need another task on its memory plate.

Should you not wish to bother with an installation, but want to see the joke messages anyway, they're up on a website here. As ever, run any third-party software on your PC at your own risk.

There's a sample email given on the GitHub page:

"Hi Sam,

Please don't be alarmed, but there is 8.6 GiB of RAM on my desk that isn't in a data center. That's 56.2% of what's installed here, and as far as I can tell it has no plans today.

Hoarding responsibly,

A concerned RAM owner."

Analysis: large language misjudgement

This is a well-observed piece of humorous coding, so full credit to Iain Kay in that respect. Of course, as the developer acknowledges, Sam Altman very quickly walked back his "quite terrible" comment (which it was in a very literal sense, certainly for the OpenAI CEO who has faced monumental amounts of flak for the utterance).

If you recall, Altman was quoted from a podcast, and the CEO has since argued that he was taken out of context. Now, many folks aren't having that and feel this is just his attempt to weasel out of the ensuing controversy, although I can see both sides of the coin here.

Altman's comment was made in a discussion about people running local AI models and using lots of RAM for that, rather than using the likes of ChatGPT or other cloud-based LLMs. The problem is he doesn't specifically say that, and instead uses the term "everybody" having a bunch of RAM sat in their PCs, but I don't think it's a stretch to see that he really meant those using local AIs (the direct competition for his product, as it were) as he later clarified.

Still, he didn't say that, and the way he phrased this, and the lack of understanding of how much anger such a broad and sweeping comment would provoke, remains quite breathtaking. It's the sort of classic and stereotyped blunder out-of-touch-with-reality tech CEOs can typically make, and in that way, the fiery feedback was inevitable in the current climate of ridiculous PC component inflation caused by AI demand.

As one Redditor says: "Can [this script] also report how much unused RAM is sitting in warehouses that OpenAI stockpiled to keep out of the market and can't use yet because they don't have a way to power any of it?" (There are similar rumors along these lines about GPUs, too, and graphics card price hikes).

I doubt that this 'Ram Altman' script is the last the CEO will be hearing of this affair.

Over the last few years, Zoom has probably had one of the most intriguing journeys in the business world.

After booming during the pandemic, the company has since expanded its offerings to cover a huge range of enterprise needs, with contact center services alongside traditional video conferencing and expanding AI tools.

As the company looks ahead to its new AI-enabled evolution, I went to the Zoom Experience Centre in London to find out more.

Refusal to compromise

“When we look at EMEA, we think the landscape is shifting in how organizations think about the technology they rely on,” Louise Newbury-Smith, Zoom’s Head of UKI, explains.

“For years, the pattern has been pretty similar, an organization would adopt a platform and then have to manipulate their own way of working around that platform - we really want to reverse that.”

“There is still some of that friction…(but) what’s changing is that organizations are starting to refuse to compromise - they want platforms to work the way they want to work.”

Zoom opened its UK data center in November 2025, greatly improving the situation for organizations in the region, as data residency choices which didn't exist before are now in place, meaning the likes of local councils, NHS trusts and financial services firms can store their data locally.

Newbury-Smith notes that the EMEA region is not a secondary market for Zoom, but high growth opportunity, a point echoed by Nick Tidd, Head of Global Channel GTM, who said the region offers, “a truly remarkable opportunity for our customers and for our partners, when you look across the product portfolio.”

This opportunity is hooked onto AI, particularly the growing importance of the context layer, a situation where Zoom is ideally placed, Tidd says.

“Think of how Zoom is positioned across the product portfolio - capturing all of those conversations…(and) putting them into the context to capture them in the workflow is where we are very different to others.”

This move was expanded by Leo Boulton, Zoom’s Head of Product, Solution and Industry Marketing, who ran us through the company’s recent releases and product announcements, highlighting the importance of context in Zoom’s concept of “conversation to completion” in its new Unified Context Layer.

“Conversations come natural to us - the way that we work is through conversations, it’s just a natural part of how humans are,” he noted, “so getting the job done should also be a natural thing - not something that requires a change in behavior, but something that should naturally just be part of our everyday work.”

If this doesn’t happen, workers will resist change, Boulton notes - particularly when it comes to AI, which is why Zoom is looking to embed intelligence into work itself.

Context has become a critical part of improving AI performance and usefulness in recent months, and Zoom wants to ensure its tools are as up to date as possible - but this requires some key elements.

“Before AI can truly understand how people work and operate, we have to guarantee it has the highest-quality raw materials,” Boulton points out. “The conversation must be crisp, clear and understood with genuine eye contact – because only with the best ingredients can AI deliver the most value.”

Zoom has been working hard to improve the quality and fidelity of its audio and video for calls and meetings, including the upcoming launch of a real-time “voice smoothing” tool known as “touch up my voice” and a pose correction tool enabling for greater eye-to-eye contact to boost interpersonal connections.

The better your agents understand your business, the more effectively they can work for you, Boulton notes, as he demonstrated how users will soon be able to benefit from a live assist feature which offers proactive suggestions during a call, such as telling you to speak slower or faster.

Zoom Chat is also getting a significant upgrade, making it what Boulton said should be a shared space where people and agents will interact and work together.

“We don’t expect our customers to live entirely inside Zoom,” he said. “True adoption only happens when tools feel natural, which is why our context layer is open by design – bringing the intelligence directly into whatever interface people already choose to work in.”

So it’s clear that Zoom wants to be so much more than your classic video conferencing and chat platform - and its ability to get the most out of your information could make it a very handy tech partner going forward.

“The direction is super clear,” Newbury-Smith concludes, “we're building and serving our customers where they are.”

Lenovo's ThinkPad X1 Carbon range has long been a favorite of ours, as well as a popular choice among business users. The Gen 14 Aura Edition builds on that reputation with modern hardware and a focus on productivity. It's an expensive laptop, but there's a big saving available at Newegg in time for Black Friday.

• Best for: Business professionals, executives, and remote workers who want a premium laptop for demanding everyday work.

• The deal: Newegg has reduced the price of the ThinkPad X1 Carbon Gen 14 Aura Edition laptop by $500 for Black Friday, bringing it down from $2,899 to $2,399.

Why we recommend it

Lenovo's X1 Carbon is designed for business users who spend much of their working day on a laptop. Its 1920 x 1200 IPS display provides more vertical space than a conventional Full HD screen, and the anti-glare coating and 500-nit brightness will help in brightly lit environments.

The Intel processor supports vPro technology for business management and security, and the integrated graphics are well suited to business tasks.

We gave the previous generation laptop a five-star review and an Editor's Choice award and our expert Collin praised its portability and AI-enhanced performance. He called it "a top choice for constantly moving business professionals."

He also said: "This computer is intended for the business professional whose day-to-day work depends on their needs. Still, one thing is for sure: they need something reliable, able to jump in and out of work, portable enough to go from place to place, has a great port selection for what may come and whatever they may need, and the ease of use that comes with a ThinkPad. It might be one of the best Lenovo ThinkPad laptops around — and it's definitely my favorite yet."

Price context & historical value

Lenovo's laptop is firmly in premium territory and expensive as a result. That said, a $500 saving is not to be sniffed at, especially when you're getting an Intel Core Ultra 7 365 vPro processor, 32GB of fast LPDDR5X RAM, a 1TB SSD, and a 14-inch touchscreen.

It's cheaper at Newegg than it is at Lenovo and given the specifications, I'd definitely recommend it.

Should you buy it?

✅ Buy Lenovo's ThinkPad X1 Carbon Gen 14 Aura Edition laptop if...

You want a premium business laptop with strong productivity specifications, enterprise-oriented features, and a touchscreen for working on the move.

❌ Skip Lenovo's ThinkPad X1 Carbon Gen 14 Aura Edition laptop if...

Your requirements are limited to browsing, email, and basic office applications. A considerably cheaper laptop will handle those tasks perfectly well.

• Shop all Windows laptops at Newegg for Black Friday

• Adobe for Startups enables new companies founded within the last five years to get its products for free
• Eligible companies will get 12 months of free access to Adobe’s AI-heavy tools
• Firefly Pro Plus, Acrobat Studio, and Semrush are available with the offer

Adobe is launching a new free suite of tools for new businesses, aiming to deliver easy solutions to founders that won’t break their startup budget.

Adobe for Startups will be open to eligible companies founded in the past five years, who will be able to use Firefly Pro Plus, Acrobat Studio including Adobe Express Premium, and Semrush completely free for 12 months.

Marketing the incentive as a way to build branding as early as possible, Adobe is inviting any business founded within the past five years and with under $15 million in funding to apply.

Creation, productivity, marketing

Approved applications to Adobe for Startups will get Adobe Firefly Pro Plus, its all-in-one creative AI studio, which lets you ideate into images, video, and audio. With Acrobat Studio, AI Assistant and Adobe Express Premium are provided for easy content creation and publishing.

Meanwhile, Semrush gives you access to search intelligence and marketing options, illustrating how you business is found online and how it can be optimized.

While program terms and criteria may differ depending on business location, Adobe for Startups offers a useful software platform for growth – and it will help ensure that startups are looking at Adobe's creative AI offering rather than those of competitors like Canva.

As workers look for more ways to be productive at home and in the office, wearable technology has often proved a useful tool, offering quite literally a new dimension for users.

Augmented Reality (AR) headsets have been around for a few years, with Microsoft, Meta and Apple all among the big players getting involved - but these headsets have often proved clunky and overbearing.

AR glasses have instead offered a new opportunity for those looking for some extra assistance in everyday life - I went to try out the new Snap Specs ahead of their UK launch.

First impressions

Let’s get the obvious out of the way first - tech-enabled glasses (specifically those made by Meta) are under the microscope somewhat at the current moment in time, with rulings over what they can and can’t do emerging in courts across the world.

Snap has explicitly looked to offer a whole new kind of experience, with the new sixth-generation Snap Specs much more obviously an accessory - it’s pretty obvious when wearing them that (unless you’ve gone full Nathan Barley) these aren’t a typical pair of glasses.

The smooth black material is nice to touch, and sits against your face with no issues. Configuring the glasses takes only a few seconds, with control of the device mainly in AR, with two buttons on the arms of the glasses helping with recording and resetting if needed.

Unlike other AR glasses, the big selling point of Snap Specs is that they don’t need to be tethered to a smartphone, so you can wear them wherever you want - with a portable charging pad helping to top up battery life when needed.

As the Snap Specs are still fairly new, a lot of the app showcases and demos I saw looked to show off how AR can help entertain or educate - but there were some work use cases too.

My glasses came loaded with Google Docs, with typing carried out on a virtual keyboard which could prove perfect if you need to write up some quick thoughts or emails when away from your desk. You might get a few odd looks while typing in mid-air, but when inspiration strikes, needs must - and it can also connect to a Bluetooth keyboard if you’d prefer.

The glasses are also able to capture video clips up to 30 seconds and still images, useful for creative workers across the spectrum - whether you’re getting a picture of a billboard idea, or seeing something in the wild that would be perfect for your next piece of artwork, you can quickly grab an image or video without needing to whip out your phone.

Snap Specs also features a built-in browser, which does everything you would hope - but also doubles as a media viewer, so whether you need to work on or review a new presentation or promotional video, or just want to catch up on some YouTube, the glasses can be a useful tool.

The voice AI assistant was also fast and effective when answering my questions (even if I doubted its accuracy on finding the nearest tube station to our location), and using Google Maps with a heads-up display was an absolute game-changer, although again it might depend on how you feel walking down the street wearing a £2,000 pair of glasses.

Perhaps the most striking demo was the translation tool - when looking at someone speaking in a foreign language, their speech would be instantly translated and shown in a speech bubble overlaying them - essentially like subtitles when watching a TV show. This could be an incredible tool for business meetings in foreign countries, and might well be the killer app for technology such as Snap Specs.

So will the £1,999 Snap Specs be the future of work? Given that the more fun demos I saw involved playing dominoes, improving my football skills, a drawing tutorial and enjoying an interactive Harry Potter experience involving a pet owl and the sorting hat, I’m not sure it’s there just yet - but I can’t wait to see where the technology goes next.

TP-Link Archer 8 Ultra: One-minute review

It’s taken quite a while for Wi-Fi 7 to become a mainstream technology – even Apple hasn’t adopted it right across its product range yet – but TP-Link has just launched the first Wi-Fi 8 router in the somewhat imposing form of its new Archer 8 Ultra.

In fact, the final technical details for Wi-Fi 8 probably won’t be announced until 2028, but the key features of the new standard are well known, allowing TP-Link and other manufacturers to prepare new products that will introduce the new technology over the next couple of years. It’s also planning to release a number of mesh routers and range extenders that will use Wi-Fi 8 in 2027 as well.

It’s safe to say that a state-of-the-art router with Wi-Fi 8 will be massive overkill for most home users – after all, the Archer’s tri-band Wi-Fi and top speed of 19Gbps will leave most home broadband services trailing in its wake.

And, of course, it comes with a state-of-the art price tag too. However, the Archer 8 Ultra is a good opportunity to look at the new features that will shape the next generation of Wi-Fi technology.

TP-Link Archer 8 Ultra review: Price & release date

• How much does it cost? Pre-order for £699 (around $950), then £899.99 (around $1,199)
• When is it available? Released on November 15, 2026
• Where can you get it? Available in US, EU, UK

The Archer 8 Ultra is currently available for pre-order from TP-Link’s website, and will be officially launched on November 15, 2026.

The US pricing hasn’t been confirmed at the time of writing, but there’s a special offer for pre-orders in the UK for £699 (around $950), with the price rising to £899.99 (approx. $1,199) following the launch in November. There are currently no rival Wi-Fi 8 routers to compare it with, but that pricing makes the Archer 8 Ultra twice as expensive as a high-end, current-gen Wi-Fi 7 model.

• Value: 4/5

TP-Link Archer 8 Ultra review: Specs

TP-Link Archer 8 Ultra review: Design

• Solid build quality
• Very good selection of ports
• App is easy to use

Wi-Fi 8 focuses on extending range and signal power in order to improve reliability.

This means that the Archer 8 Ultra needs to provide some pretty heavyweight hardware. It’s built like a tank, consisting of a matte-black obelisk that stands 245mm high, 98mm wide and 226mm deep, and it houses no less than 18 internal antennae to help beam the Wi-Fi signal far and wide.

It also provides an impressive set of ports and connectors, including two 10Gbps ports that can handle the latest high-speed fibre broadband, and also double up for a wired network connection (LAN) for devices such as a PC or gaming console that needs maximum performance.

There are also four additional 2.5Gbps ports for additional wired connections and, somewhat oddly, a single 1Gbps port as well.

TP-Link’s Tether app is also well designed, allowing you to scan a QR code in order to quickly connect to the router’s new network. By default, the app creates two separate networks, with one network reserved for the high-speed 6.0GHz band that is supported by newer computers and mobile devices.

The second network combines the 2.4GHz and 5.0GHz bands in order to provide compatibility with older computers and mobile devices. That setup should suit most users, but more advanced users can connect to the Archer 8 Ultra via a web browser interface that provides greater control over your network settings.

• Design: 5/5

TP-Link Archer 8 Ultra review: Features

The new Wi-Fi 8 standard is a big step forward, and is awash with jargon and buzzwords, such as MAPC (multi-access point co-ordination), ELR (enhanced long range), and DRU (distributed resource units), and you can find out more about these on the TP-Link website.

But the TLDR version is that Wi-Fi 8 shifts the focus away from sheer speed and instead concentrates on improving both range and reliability for larger homes and offices, as well as public and outdoor venues that may have dozens or even hundreds of connected devices spread over a very wide area.

Of course, the 19Gbps speed of the Archer 8 Ultra certainly sounds impressive, but it’s not actually any faster than the top speed of 46Gbps that is already possible with current-generation Wi-Fi 7 devices.

Wi-Fi 8 also uses the same frequency bands – 2.4GHz, 5.0GHz and 6.0GHz – that are available with Wi-Fi 7 as well. This ensures that the Archer 8 Ultra will be backwards-compatible with existing computers and mobile devices that use Wi-Fi 7.

However, those buzzwords that we just mentioned are designed to improve the range and reliability of the Archer 8 Ultra, so that a single router can cover an area of 3,600sq.ft (although some regions may quote this as 3,000sq.ft due to differences in local regulations).

It’s also designed to support up to 200 connected devices, and includes a Multi-Floor Mode that can automatically configure the Archer network to work efficiently within homes, offices, and other buildings where people and devices may be spread across multiple floors and levels. Suffice it to say that if you live in a modest two-bedroom house or apartment, then the Archer 8 Ultra will definitely be what The Sisters Of Mercy refer to as ‘a slight case of overbombing’.

• Features: 5/5

TP-Link Archer 8 Ultra review: Performance

• Tri-band Wi-Fi 8
• Very few - if any - Wi-Fi 8 devices yet
• Still fantastic performance with Wi-Fi 7 devices

I’ve not come across any PCs or mobile devices that currently support Wi-Fi 8 but, as mentioned, Wi-Fi 8 does use the same frequency bands as Wi-Fi 7, so I was able to get some idea of the performance offered by the Archer 8 Ultra using an existing laptop with Wi-Fi 7.

The extended range and reliability of Wi-Fi 8 makes it a good option in my office, as I have a deadspot in one particular office at the back of the building. Unsurprisingly, both of the Wi-Fi networks set up by the Archer 8 Ultra were easily able to cruise along at the maximum 150Mbps provided by my office network when running the Ookla SpeedTest and for downloading large game files from Steam while connected to nearby devices in the same room.

And it didn’t bat an eyelid as I picked up my laptop and walked along the corridor to the Wi-Fi deadspot in the furthest back office.

The one disadvantage of the high-speed 6GHz band is that it has a shorter range than the 2.4GHz and 5.0GHz bands – which is why those bands are still used even on next-gen routers such as this.

However, the range and reliability of Wi-Fi 8 ensured that the 6.0GHz band was able to reach my back office and maintain full speed with no trouble at all.

Of course, it’s still early days for Wi-Fi 8, so the Archer 8 Ultra won’t be an essential purchase for many people right now, but it’s a fascinating look at a future world where we will be surrounded by Wi-Fi all around us, both at home and in the wider world outside (more so than we currently are).

• Performance: 5/5

Should I buy the TP-Link Archer 8 Ultra?

Buy it if…

Don’t buy it if…

Also consider

• Read TechRadar’s reviews guarantee
• First reviewed: November 2026

Even as a tech journalist who spends all day, (almost) every day playing around with gadgets and apps, there's still plenty that I miss: like, for example, the ability to view how much time you've been spending on YouTube from inside the mobile app.

It works like Digital Wellbeing (on Android) or Screen Time (on iOS), but specifically for YouTube. You can dig into how much time you've spent on YouTube today and over the past week, with an average for the last seven days.

This has actually been around for years, and it's available whether or not you're signed up for YouTube Premium — though when I checked up on my stats, I was glad that I've been paying the monthly fee, if only to avoid hours and hours of ads.

First step — turning on Watch History

The 'time watched' statistics we're talking about here will only appear if you've got YouTube Watch History turned on. You can check this inside the mobile app by tapping your profile picture (bottom right), then the cog icon, then Manage all history (you can find the same settings on the web here).

To see what you've watched most recently, you can tap your profile picture then History in the mobile app, or choose History from the left-hand navigation menu on the web. There are tools here for searching through your history, deleting the entire record of everything you've ever watched, and putting your Watch History on pause.

It is of course entirely up to you whether or not you enable Watch History. The downsides are Google knows more about you, and it can be hard to get out of recommendation rabbit holes; on the plus side, you will get served videos to watch that might be at least vaguely related to your interests (it's great for discovering new music, for example).

More of your Watch History can be got at through the comprehensive Google Takeout service, which you can find on the web here. Select the YouTube entry, and Google will gladly give you a CSV file detailing every single video you've ever watched on the platform, as long as you've always had Watch History turned on.

Note that the 'time watched' stats don't include videos you've deleted from your Watch History, or that you've watched in incognito mode. However, they do include the YouTube viewing you've done across all your devices (as long as you were signed in), except for inside the YouTube Music apps and on the YouTube TV platform.

Finding your own stats

You can find your viewing stats inside the YouTube mobile app for Android or iOS by tapping your profile avatar (bottom right), then tapping on the cog icon (top right), and choosing Time management. You can't get these stats through YouTube on the web at the moment, which seems a bit of an oversight.

There's not much in the way of a breakdown of what you've been watching, but you can see your running totals and average for the past seven days. There's also a stat about how your viewing compares to the week prior, so you can see if your spending more or less time on the platform week-to-week.

I was honestly surprised by my stats: almost five hours a day on average at the moment. Okay, I do play a lot of lo-fi music videos while I'm working, but that's still an awful lot of content compared to hours in the day — and it extends to tech reviews, explainer videos, and of course all the podcasts that have recently shifted to video.

I've written before about how essential I find YouTube Premium, and the revelation of how much time I actually spend on the site and in the app has more than justified the monthly outlay for me personally — I can't imagine the number of ads I'd have had to sit through otherwise. In fact, YouTube Premium tells you how many ad-free videos you've watched on this page (570 hours and counting for me).

You'll see the time management screen also gives you some controls if you want to limit the amount of clips you're watching day to day. There are toggle switches for setting up reminders around bedtime and taking breaks, and for putting a limit on how much time you spend watching YouTube Shorts each day.

• Hackers have shared data concerning Russian casualties in its war with Ukraine on a Russian state website, while also stealing 23TB of data
• Russian state statistics agency Rosstat admitted its servers were targeted over the Halloween weekend
• The organization’s electronic document management system was also hacked and exfiltrated

Russian casualty figures in its war with Ukraine have been kept under wraps since 2024, but have now been displayed on the website of Russian state statistics agency Rosstat following a major breach of security.

Rosstat admitted to a breach over the weekend of October 29 to November 1, 2026, but has yet to admit to any form of exfiltration - despite hacker groups Belarusian CyberPartisans and Silent Crow confirming around 23TB of data was taken.

As well as the casualty figures, the Silent Crow group and its collaborators have boasted of hacking and stealing a document management system, and also claimed to have taken control of vehicles.

Specialized units

The details of what is being considered a successful hack by its perpetrators were published on Telegram. The Silent Crow account explained that “access was gained to a large part of the IT infrastructure of the department, including the central office, regional units and the Main Interregional Center for the Processing and Dissemination of Statistical Information.”

Rosstat reported that its information resources were targeted over the Halloween weekend, says Kommersant (translated from Russian). “The infrastructure worked normally: monitoring systems in a timely manner alerted about suspicious activity, which allowed to quickly start the response.”

The organization’s confirmation added: “Compromising databases and leakage of information protected by law has not been identified.”

Cybersecurity experts, on-site experts, and “specialized units in the field of information security and law enforcement agencies are establishing the vector of the attack and identify the sources of the threat,” the department added.

During its prolonged access to Rosstat's servers, the Cyberguerillas BY and Silent Crow groups revealed human casualties to Russian military personnel since the beginning of the war in Ukraine as 1,584,910.

It also revealed a loss of 587,409 UAVs, demonstrating that this is a classification of combat asset that is in far greater use than tanks, artillery, and manned aircraft.

In supporting its claim of stealing 23TB of data across electronic document management and other databases, the group stated (translated) “The scale of the incident goes far beyond the compromise of individual servers or user accounts. After all, it is about penetration into the infrastructure of the federal department with access to central and regional systems, internal circuits and data sets of public and official value.”

Access to domain controllers of Rosstat unlocked access to the organization’s main data, eventually allowing the hackers to compromise virtualization systems like VMware ESXi, along with infrastructure management systems.

The casualty figures are not likely to be verified by official sources in Russia.

• Windows 11 27H2 is underway and will be a "full OS swap" according to anonymous sources
• Microsoft will stop short of launching it as Windows 12 (but the report doesn't fully rule that idea out)
• Testing will begin a lot earlier with 27H2 next year, compared to the typical June timeframe when Microsoft kicked off previews with 26H2 and 25H2

The next major version of Windows 11 arriving next year will pack some big changes, and what will theoretically be the 27H2 update is set to be very different from the last couple of annual updates for Microsoft's OS, which have been very minor affairs.

The Verge reports that the usual anonymous sources claim that Microsoft is already preparing Windows 11 27H2, and it will be a "full OS swap" with significant upgrades in the same vein as the last major update for the operating system, which debuted in 2024 (and ushered in a new underlying platform for Windows 11).

We're told that there will be a "big focus on quality" with 27H2, and that despite what'll evidently be some sizeable changes, it won't be released as Windows 12.

To mark the big change, we'll be treated to a new default Windows 11 wallpaper (try to contain your excitement), moving away from the 'Bloom' background which has been in place since the OS first launched. Presumably the sequel won't be 'Wilt'. In all seriousness, The Verge shares a design, and the new take is in a similar vein, with blue ribbons amidst wispy clouds. (A hint of the future direction of Windows for consumers, perhaps?).

Microsoft also intends to start testing 27H2 a lot earlier than with the previous two annual releases, which of course only makes sense as with more work involved, it'll require more extensive vetting. Windows Insiders (testers) will get their hands on the first 27H2 build considerably earlier than June, which was when Microsoft kicked off testing with 26H2 and 25H2.

It's also worth noting that in theory, the foundations of 27H2 were laid right back at the start of the year, in moves which already suggested that it's a hefty piece of work.

Analysis: something still bugs me

The Verge report labels next year's big update as Windows 11 27H2, but doesn't completely rule out the idea that Microsoft might still consider a switch to call it Windows 12. It sounds like the naming hasn't been quite finalized at this point.

However, it doesn't seem likely, and going for Windows 12 would be too bold a move, I think, as Microsoft really needs to be seen to 'fix Windows 11' as it has promised before looking at the next-gen platform. I don't think the fixing work is nearly done at this point, although Microsoft has made a lot of commendable progress over the course of this year.

Yes, I'm going to bring up the subject of quality assurance (QA) once again, and regular readers of TechRadar will likely recall that I've gone on about this throughout 2026. It's especially relevant if 27H2 is going to be a big update, and you cast your mind back to remember what happened with the last major annual release.

I doubt you'd forget the 24H2 update because it was one of the worst Windows releases I can ever recall for bugginess. There were lots of significant changes – which, as already mentioned, included Germanium, a fresh underlying platform for the OS – and a nightmarish slew of bugs crept in as a result.

This absolutely must not happen with the 27H2 update. Microsoft is trying to reinvent Windows 11, and the reputation of the OS therein, so it's critical to ensure that it doesn't send users trudging into a quagmire of glitches and uncertainty, repeating the miserable march that 24H2 became.

Sadly, I think there's a clear danger that this scenario could come to pass. I still think Microsoft needs to revamp its QA and general testing processes, because even with breaking down Windows 11's feature additions into smaller, more drip-fed chunks, allowing for simple minor annual updates as has been the case in 2025 and 2026, we've still witnessed too much in the way of bugginess.

Stamping all this out should be a key part of the formula to fix Windows 11, alongside performance boosting and memory optimization, as Microsoft moves towards 27H2. It mystifies me that it isn't – and I presume that's the case because there's been no mention of changing QA procedures from Microsoft (only talk of consulting testers more regarding how to change Windows 11 – though of course that's still a great move in itself).

So, Microsoft, if 27H2 is going to be a big update, don't make it a perilous one – get your testing house in order. I do wonder if the hope is that AI advances are going to come to the rescue here, in which case, we could be looking at something doubly perilous, but hey – at least tell us you have a plan to fight back against the bugs, Microsoft. Don't you?

• Microsoft fixes high-severity Paint vulnerability that could allow remote code execution through crafted image files
• Security updates are delivered through the Microsoft Store, leaving some users temporarily stuck on vulnerable versions
• Users should verify their Paint version and install the latest update as soon as it becomes available

Microsoft has addressed a high-severity vulnerability in Paint that allowed threat actors to run malicious code remotely. However, fixing the issue doesn’t seem to be a straightforward process for users, as the patched version, surprisingly, remains unavailable for download for some people.

Tracked as CVE-2026-83844 and with a severity score of 8.1/10 (high), this bug was described by the National Vulnerability Database (NVD) as an “out-of-bounds read in Windows Paint [that] allows an unauthorized attacker to execute code over a network.”

In theory, a threat actor could create a special image that, if opened via paint, can trigger the flaw and execute malicious code on an affected system.

How to patch Paint

The bad news is that Microsoft added AI into Paint, which makes the idea of malicious packages triggered through the app a lot more viable. The good news is that Microsoft did not publish technical details about the flaw, explaining how one might pull off this kind of attack, and given that there are no confirmed cases of in-the-wild exploitation, or publicly available exploit code, all of this still remains in theoretical domain.

CISA’s Known Exploited Vulnerabilities (KEV) catalog does not have this bug listed, meaning there are no confirmed cases of attacks, especially against government entities.

Whether or not the bug remains theoretical depends on two main things: how potent the bug is, and how easy it is to leverage. With that in mind, it’s worth mentioning that Microsoft classified the attack vector for this flaw as “Network, with no privileges required”, meaning threat actors with previously obtained low-privilege access could use this bug to escalate their privileges or deploy dangerous malware. Both scenarios could lead to credential theft, wire fraud, or even ransomware attacks.

On the other hand, it marked the bug’s complexity as “High”, suggesting that exploiting it is not that easy of a feat. That could limit abuse to state-sponsored actors, or for-profit hacking groups with deeper pockets and plenty of resources.

It is also worth mentioning that Microsoft moved Paint from Windows to a standalone Microsoft Store app. Consequently, the security fix isn't distributed through the regular Windows Update mechanism, and users must update Paint through the Microsoft Store themselves (unless automatic app updates are enabled).

The company apparently included a fix in Paint version 11.2605.91.0. However, Neowin reports that despite releasing a newer version, Microsoft was still offering a vulnerable one on its app Store - 11.2605.81.0. The problem was apparently evident to multiple people, enough for them to open a discussion on Reddit. One user even shared a PowerShell output showing that Paint remained on a vulnerable version, despite them checking for updates through the store.

Different people, different versions

We looked for Paint in the Microsoft Store at press time, and saw version 11.2609.401.0 being offered, with November 5 being the date of the newest update. Neowin also said that for some Reddit users, this was the version carrying the fix, instead. It is possible that Microsoft opted for a staggered release instead of a global rollout, which is why some people were late to be offered the patch.

To make sure your systems are secure, simply looking at Microsoft Store might not be enough. Instead, users should double-check their Paint version using PowerShell, using this command: Get-AppxPackage Microsoft.Paint | Select-Object Name, Version. Those that still see the older version should keep an eye on Microsoft Store for the patch and follow Microsoft’s Security Update Guide for the vulnerability. Those who are worried about being targeted could set up temporary restrictions on certain image attachments or remove Paint entirely from the system.

Via Cybernews

• AI-themed phishing campaigns found using fake OpenAI, Anthropic, and SpaceX events to steal corporate credentials
• Attackers combine device-code phishing, reverse proxies, and MFA bypass techniques targeting Microsoft and Google accounts
• Researchers warn employee interest in AI tools is increasingly being exploited as a high-success phishing lure

If you suddenly get invited to an exclusive SpaceX event and even offered free access to Grok Heavy, kindly turn it down, as this is most likely part of a new phishing attack that’s been circulating around the web.

A report from security researchers Push Security found threat actors are using different AI-themed lures to get people to share their corporate login credentials.

As per Push’s report, threat actors were recently seen creating fraudulent websites for nonexistent events: an OpenAI Academy livestream, a private SpaceX briefing on AI marketing, an Anthropic presentation at AWS re:Invent, and similar.

People who landed on these pages were told they can get free goodies, as well: a free ChatGPT Pro subscription, access to Grok Heavy, and even shares of SpaceX. However, to claim these rewards, the victims were first told to log in - using either their Microsoft, or Google account.

And this is where the scam lies. Instead of actually logging in and getting the rewards, all victims would be doing is sharing their login credentials with the hackers.

"Employees want access to the latest AI tools, making them excellent bait for attacks," Push Security said in its analysis of the campaign.

Kali365 and VoidProxy

Push says threat actors are using two phishing-as-a-service (PhaaS) platforms in this campaign, called Kali365 and VoidProxy. Depending which route they choose (Microsoft or Google), they get served a different path, both ending in credential exposure.

Those that choose to continue with their Microsoft credentials trigger an attack through Kali365. The victim receives a device code and instructions to enter it on Microsoft’s legitimate device login page. Once the victim signs in and approves the request, Microsoft issues an authentication token to the attacker’s Kali365 session. The fake event page then redirects the victim to a fake Microsoft sign-in page operated by VoidProxy, which captures additional credentials and session cookies.

Those that choose “Continue with Google” trigger a different technique. Here, the victim is shown a reverse-proxied version of Google’s legitimate sign-in page, operated by VoidProxy. The proxy relays the authentication process while capturing the victim's password, MFA response, and session cookie, which allows the attackers to grab an authenticated session without needing to move past MFA.

Push doesn’t know exactly how the links are distributed. It’s safe to assume they’re being moved through phishing emails, social channels, or Telegram groups. What we do know is that the attackers are using Google and Zapier to shorten the links and redirect the visitors, in order to avoid being detected by security scanners and URL reputation systems.

Abusing the trends

"All of these detection evasion techniques, plus the MFA-bypassing AiTM and device code phishing payloads, mean this attack is designed to get around or through the controls that most organizations rely on to stop phishing attacks today," Push said.

It’s now been five years since the first version of ChatGPT was released, and since then the tool has captivated people from all walks of life, and was successfully used in countless phishing campaigns. In the past we’ve reported on campaigns involving Claude installation pages promoted through search advertisements, as well as malicious links disguised as legitimate AI content (shared conversations, downloadable artifacts, and custom GPTs).

In July 2026, ANY.RUN reported fake event invitations impersonating Meta, OpenAI, and Anthropic, hosted on legitimate Zoom event pages. More recently, Cofense observed a campaign revolving around fake Anthropic invitations distributed through GoTo Webinar.

As these tools get better, and as they penetrate deeper into every aspect of our private and business lives, they will be abused by threat actors more and more.

Via BleepingComputer

I’ve been a PC gamer since the early 1990s, and over the past three and a bit decades I’ve never once regretted my allegiance to those awkward beige boxes that have brought so much joy into the lives of myself and so many other people.

Yes, they can be expensive. Sure, they're more complex and frustrating than consoles. There have been times I’ve sat down to play a game, only for hours to pass as I try to fix game-breaking crashes, reinstall drivers, or just generally swear at Windows; but at the end of the day, I was always convinced that the PC remained the greatest gaming platform in the world.

PCs (and I’m including my beloved Amiga A500+ here) were always miles ahead of consoles when it came to graphics and audio, and the ability to upgrade components meant you could remain at the cutting edge for years. Upgrading and even building your own PC was fiddly and expensive, but it was also fun and rewarding. I still get a thrill when I first power-up a newly built rig and see it successfully boot.

The openness of the platform (despite Microsoft’s best efforts) meant I could buy games from where ever I wanted (one of the main reasons, I believe, why PC games are usually cheaper than console games), and play obscure indie games that would never be published on consoles due to licensing costs (which is another reason why PC games are cheaper); and, with some tweaking and a bit of (perfectly ethical and legal) emulation, backwards compatibility has never been a problem. The likes of GOG should get a shoutout as well for keeping very old PC games running on new hardware.

And right now in 2026, I'm lucky enough to have access to the most powerful PC gaming hardware ever, on which to play some of the best and most graphically impressive PC games ever made. I should be feeling like there’s never been a better time to be a PC gamer. Instead, however, it feels like PC gaming has never been worse.

Thanks for the memory

Why am I so down on the current state of PC gaming? For a start, while PC gaming hardware has never been better, it’s also never been so expensive — and that makes it less accessible for most people. The price of graphics cards has skyrocketed, and SSDs and RAM, once two of the cheapest and most effective ways of upgrading your PC, are now ridiculously expensive.

According to PC Part Picker, the average price of two sticks of 16GB DDR5 memory has leapt from around $150 to over $600 in the space of 18 months. Meanwhile, 64GB of the stuff has gone from around $250 to over $1,250 — and this isn’t even for the fastest models.

Even older DDR4 isn’t immune, with 16GB rising over 18 months from $50 on average to around $170, again according to PC Part Picker.

People are getting priced out of PC gaming, or being prevented from even considering it; and as a PC gamer, that’s heart-breaking. I’m incredibly fortunate that my job has enabled me to build a PC with an RTX 5090 and 96GB of DDR5 RAM, but there’s no joy in writing about things that so few people will be able to experience.

With prices of gaming components, PCs, laptops, and even consoles climbing ever higher, sales are understandably dropping. And with the costs of developing games exploding, we’ve also seen huge amounts of very talented game developers lose their jobs, and entire companies, such as BioWare, close down.

Perhaps worst of all, this past week I’ve found myself agreeing with something Elon Musk — someone I genuinely think is an awful human being — said. I need a lie down. And a pint (probably not in that order). I’m in a PC gaming funk, but who — or what — is to blame?

AI. It’s AI’s fault

Now it would be far too easy, simplistic, and perhaps even lazy to say this is all AI’s fault. But it’s all AI’s fault. Screw AI.

The AI goldrush has seen an explosion in the number of data centers required to run and train large language models (LLMs) used by AIs, and these need a lot of memory, which has led to a global shortage and made prices for components that use memory, such as RAM, graphics cards and storage, skyrocket.

I, like many other PC gamers, have been watching all of this in horror for a while now, but things really came into sharp relief this week when Sam Altman, CEO of OpenAI, one of the biggest culprits of the RAMpocalypse, was quoted as saying on the Cheeky Pint podcast (via IGN) that "it's quite terrible to have everybody have a bunch of the world's limited supply of DRAM sitting in their own computer."

A lot of people took that as Altman accusing us PC gamers of being greedy by wanting RAM for our rigs, and to say that didn’t go down well would be an understatement.

Now, I usually have a policy of ignoring the rubbish Altman spews out (it does wonders for my blood pressure); but I have to admit, when I saw the quote, it riled me up. PC gamers having to endure the RAMpocalypse is bad enough, but to be blamed for it, especially when all we want to do is play games, was too much.

Then, in a real-life example of the ‘worst person you know just made a great point’ meme, the world’s richest man, terrible Diablo player, and failed truck salesman, Elon Musk, piped up to say “The people deserve to have their RAM too!”

I’m not naïve enough to think that Musk is seriously on the side of ‘the people’, but when one of the most widely-mocked individuals on the internet gets some begrudging props for coming out against something you said, that’s not a good sign.

Sure enough, Altman backpeddled, saying he was “taken out of context”, and he was actually complaining about people running local AI models. In a way, I’m inclined to believe that — as CEO he has a vested interest in stopping people using their own models and instead using OpenAI’s, but the damage was done.

Regardless of context, it was a tone-deaf thing to say — almost as bad as Nvidia’s 'GeForce 8800 GTX — 20 Years of a Legend' tech demo, which was released this week. Nvidia once was loved, or at least respected, by a lot of PC gamers for making genuinely excellent graphics cards and pushing the PC gaming industry forward with various innovations over the years.

Sadly, it has also become incredibly successful due to AI — so successful that it often feels like it's lost interest in the PC gaming industry that made its name, with rumors swirling that it’s ending production of the RTX 5090, while doing nothing about the rising costs of its components thanks to an AI bubble which it's benefitting from and contributing to.

So, when it launched a demo that invited players to relive a time when PC gaming was actually fun and affordable, by allowing them to virtually install its iconic GeForce 8800 GTX graphics card into a retro Windows Vista PC, it felt like Nvidia had misjudged the mood. To make matters worse, Nvidia recommends you have an RTX 5080 to play it — a GPU that is incredibly expensive and hard to find due to the memory shortage, and which is also rumored to be for the chop.

“Oh well,” some of us PC gamers might have thought, “at least we still have perpetual underdog AMD in our corner.” Except, AMD CEO Lisa Su has just been quoted as saying that “We are a data center first company.”

As Nvidia’s closest competitor, AMD was supposed to keep Team Green on its toes, while having a more consumer-friendly approach (being more open to open-source, and not limiting its latest tech to just its own GPUs, for example). Instead, it looks like AMD has had a heel-turn worthy of WWC’s most dramatic betrayals.

To be honest, I’ve been wondering what’s going on with AMD for a while, as it was rather quiet this year in the consumer GPU space; but this turn to the AI-powered dark side still hurts.

Could we really see the two major GPU makers stop making graphics cards altogether? It’s too bleak a future to imagine, but after a week like this, I can’t help but wonder.

What can we do?

I don’t want this to just be a wall of depressing text that would make even Roger Waters think ‘that’s a bit much’, so is there a glimmer of hope to be had? Is there anything any of us can do?

At Computex 2026 this year in Taiwan, I was perplexed by how almost every PC maker was going on about AI-in-everything with a fervor that I’ve just not seen replicated by consumers. I was worried that I was just out of touch.

But there’s been a growing backlash against rampant AI that’s given me hope. I’m not against all forms of AI, but AI that takes work from humans, that plagiarizes human art (including depressing walls of texts written by aging tech journalists), that diminishes creativity and sucks up resources… that AI I would love to see the end of, and I’m not the only one.

Boycotting games made with AI, and avoiding companies that don’t use AI responsibly, can hopefully show companies that this isn’t a magic money tree that they should neglect their customers for. Look at what’s happening with the current stock-market rout on AI companies, where it seems voters were rebelling against rampant AI data center expansion and an administration that seemed all too happy to let tech companies cross lines and drop ethics all in the name of AI (sorry, SI) supremacy.

I don’t want to seen an economic meltdown; but a wake-up call to the likes of Nvidia and AMD, to let them know that the customers who made them — primarily PC gamers like me — aren’t to be taken for granted, would certainly be welcome.