Recent Posts

Pages: 1 ... 7 8 [9] 10

Patch Tuesday| Updates | Security | Privacy | Anti-virus / PayPal Data Breach Confirmed—Money Was Stolen, Passwords Now Reset

« Last post by javajolt on February 22, 2026, 06:22:02 PM »

PayPal has confirmed a data breach impacting PPWC loan users.
SOPA Images/LightRocket via Getty Images

Updated February 22 with details of previous PayPal security incidents and warnings, further advice for those impacted by the confirmed PayPal Working Capital data breach, which prompted transaction refunds and account password resets, and as a statement from a PayPal spokesperson.

Some PayPal users have started to receive email from the company confirming a data breach that exposed personal information to a threat actor who gained access to PayPal’s systems, leading to some seeing unauthorized transactions on their accounts and the resetting of passwords. Here’s what you need to know.

Data Breach Exposed Some PayPal Customer Data For Six Months

A breach notification letter, which I have verified myself, has confirmed that some PayPal users have been impacted by a data breach after a hacker gained access to PayPal systems on July 1, 2025. The hacker apparently had access until December 12, 2025 when PayPal discovered the security incident. The breach, according to the notifications, which are dated February 10, impacted some users “due to an error in its PayPal Working Capital (“PPWC”) loan application.”

Excerpt from PayPal breach notification email.
PayPal

It remains to be seen how the attacker access evolved, of course, as this remains something of a developing story and PayPal has yet to explain this in any detail beyond a “code change” being responsible. However, following publication of this article, a PayPal spokesperson provided the following statement: “When there is a potential exposure of customer information, PayPal is required to notify affected customers. In this case, PayPal’s systems were not compromised. As such, we contacted the approximately 100 customers who were potentially impacted to provide awareness on this matter.”

I am currently awaiting clarification regarding the seeming disparity between the statement saying that “PayPal’s systems were not compromised,” and the notification, which stated that following an investigation, the company had “terminated the unauthorized access to PayPal’s systems.” I will add another update if and when such a clarification is forthcoming.

PayPal breach notification.
PayPal

“Upon learning about this unauthorized activity, we promptly began an investigation and took action to address this incident, including by taking steps to prevent unauthorized actors from obtaining further personal information,” the PayPal notification stated. It would, however, be nice to know why it took a whole six months for PayPal’s security team to notice the exposure to unauthorized individuals, as mentioned in the breach notification itself. That’s a huge window of opportunity for attackers, and we should be grateful that so few accounts were potentially impacted before it was closed for good.

What Information Was Accessed By The PayPal Hacker?

What we do know, at this point, however, is that the following information was potentially accessed:

• Name

• Email address

• Phone number

• Business address

• Social Security number

• Date of birth

PayPal has also confirmed that “a few customers experienced unauthorized transactions on their account,” and we now know that this was a very small number, 100 according to the spokesperson who contacted me. PayPal confirmed that it has already issued refunds to those customers who were impacted.

I mean, it’s great that such a relatively small number of PayPal users were affected by this incident, but the nature of the information that was potentially accessed is such that I would be greatly concerned about the opportunity it provides for any attacker to exploit with the use of further, unrelated to PayPal specifically, threats. Small businesses can be especially susceptible to phishing threats, especially those that are carefully and specifically targeted at them using such information. As such, I would advise all readers to take note of the PayPal security recommendations at the end of this article, whether impacted by this incident or not. It will only take a minute or two of your time, but could be one of the best investments your business has made.

This Is Not The First PayPal Security Warning Rodeo

I have covered many previous PayPal security warnings, which have mostly concerned phishing attacks delivered by email, text, or phone, although, if you stretch back as far as 2023, there was another breach. I reported on this at the time, confirming that a total of 34,942 PayPal accounts had been accessed by attacks using a credential stuffing attack methodology. Such attacks involve threat actors deploying an automated process in an attempt to access accounts with login credentials that have been compromised in some way, often credentials that have been reused between accounts and subsequently breached at one of them. Lists of such breached credentials are readily available on the dark web.

In December, 2025, I reported how attackers were using legitimate infrastructure to bypass email authentication protections when delivering malicious messages disguised as genuine PayPal support communications. On this occasion, the PayPal billing subscriptions feature was being abused by hackers in an attempt to steal your user account credentials. At the time, a PayPal spokesperson told me: “PayPal does not tolerate fraudulent activity, and we work hard to protect our customers from consistently evolving phishing scams. We are actively mitigating this matter, and encourage people to always be vigilant online and mindful of unexpected messages. If customers suspect they are a target of a scam, we recommend they contact Customer Support directly through the PayPal app or our Contact page for assistance.”

Just a few weeks earlier, I covered how a genuine PayPal email address was being used to deliver an invoice in what became known as the “do not pay, do not phone” attack. The fake invoice was for a larger purchase that the user had not actually made; this was the bait. The hook was a fake PayPal telephone support number to call in order to put a halt to the payment while a dispute was investigated. This was what is called a TOAD attack: Telephone-Oriented Attack Delivery involving seemingly official documents, urgency leverage and an adversary-controlled phone number. PayPal was not, and is not, sitting back and doing nothing; it has explained to me that it responds to the continual evolution of scamming tactics and methods, taking measures such as a combination of manual investigations and technology to prevent fraud, including proactive actions like limiting scam accounts or declining risky transactions.

PayPal Has Terminated Attacker Access And Reset Account Passwords

PayPal has stated that it has already terminated the attacker’s access to its systems, and those impacted (who should have received a notification email by now) have had their account passwords reset. This means that you may find that you are required to set a new password when you try to log in next.

“We are offering you two years of complimentary credit monitoring and identity restoration services through Equifax,” PayPal added, which will be of cold comfort to anyone impacted, I suspect.

PayPal Security Recommendations

The breach notification also contained recommendations for those affected by the incident in the form of general security best practices. As such, these are a timely reminder for all PayPal users, not just the 100 impacted by the PayPal Working Capital breach, on how to be as safe as possible when using their accounts and the broader internet.

Use a unique username and password combination for every website and service.

I would agree that usernames are often overlooked, and we are all guilty of using the same email address for everything, but unique usernames add an extra layer of protection when it comes to credential stuffing attacks. Unique and complex passwords are a given, and you can take a password hacking test to see how yours fare.

Change your password and any associated security questions if you detect any suspicious activity on your account.

Again, sage advice that takes seconds to execute but could save you hours of hassle if your account is being compromised.

When links are present in an email, you should hover your mouse over the links to view the actual destination URL and should not click on the link if you are unsure of the destination URL or website.

Generally sound advice, although there are ways that attackers can obscure true destinations despite this. The better advice, in my never humble opinion, would be do not click links in emails or text messages and always visit a site using your browser and a known URL.

Pay attention to messages that promote urgency and require immediate action. If you are unsure or want to confirm the authenticity of urgent messages, you should visit PayPal and access your account to view any messages.

100% correct. You should always verify any such claims by visiting your account, using your browser and trusted links, which will reveal if what is being said has any truth to it. Only ever follow up with the stated support methods from the site itself.

PayPal will never ask you to provide the username and password of your PayPal account or any authentication factors, such as a one-time code, over a call, text, or an email message.

Don’t panic, follow the previous advice, and don’t give your details over the phone or in an email. It’s common sense, so follow it whether regarding PayPal or any other online account.

I would add one critical recommendation that is missing from the list: use a passkey wherever the option is available.

Although this data breach does not appear to have impacted many users, PayPal has stated that customers should remain vigilant and review their account information and transaction histories.

source

Android O.S | Apps / Every Major Android Phone Brand Ranked From Worst To Best According To Users

« Last post by javajolt on February 18, 2026, 01:13:26 AM »

The Android versus iPhone argument has been around forever, and honestly, it's getting boring. Everyone's already picked a side. What's more interesting now is what's happening inside the world of Android itself. Because if you've ever used two Android phones from different brands, you know they don't even feel like the same species.

A Samsung owner swears their phone is perfect. Someone with a Vivo thinks theirs takes better photos. Then there's that one Motorola fan who doesn't care about features as long as the battery lasts three days. Digging through tech reviews, forums, and verified buyer reviews revealed surprising, and not-so-surprising, insights. Some brands rank higher than their reputation suggests, while others boast impressive spec sheets but fall flat when it comes to software. At the end of the day, every user's chasing something different, but that's the beauty of Android — you have near-unlimited choices.

The rankings you'll see here reflect what users value most. Whether that's reliable hardware, clean software, timely updates, or accessible customer service. And if you're wondering how we pulled the data together, there's a short section that explains our methodology at the end.

Motorola

Motorola phones run a nearly stock version of Android, which means you're not dealing with bloatware or a crowded user interface. Its flagship Razr Ultra has a huge battery and great performance, showing that the company can still pull off interesting hardware. Plus, its mid-range phones are reasonably affordable, and the battery life tends to hold up across most models.

However, one problem that keeps coming up among users is the painfully slow software updates. In fact, it's a fairly common sentiment on Reddit that "you don't buy Motorola for timely updates". Many users aren't particularly interested in new features, but late security patches are a strong concern. Motorola does maintain official update channels and eventually delivers on its promises. It's just that eventually is an awfully long time for a lot of users.

Motorola fans seem to be okay with this arrangement. They've accepted that slow updates are the price you pay for everything else the brand does well (battery life, display, performance on light usage). Whether that trade-off works for you depends on how much you care about the latest Android features versus getting solid hardware at a fair price.

Huawei

Huawei launched the world's first tri-fold smartphone, the Mate XT, in September 2024. When fully unfolded, it becomes a 10.2-inch tablet, and its design earned recognition from tech reviewers. Its camera systems remain competitive, with the Mate XT featuring a 50MP primary camera that automatically adjusts aperture, a 12MP telephoto lens offering 5.5x optical zoom, and an ultra-wide lens.

While it offers impressive hardware, the real issue happens when you turn the phone on. HarmonyOS NEXT has dropped all Android compatibility, which means it won't run Android apps. The HUAWEI AppGallery provides over 20,000 apps, but most Western software isn't there. You can try workarounds, but they cause problems with notifications not arriving on time, limited file access, or apps simply not running. Yet, these limitations have not deterred users outside of China who favor the brand for its build quality.

U.S. sanctions from 2019 forced this entire shift away from Google services. Huawei reclaimed significant market share in China, holding 19% as of early 2025. Outside China, however, finding Huawei phones can be difficult, and their non-compatibility with Android could lead to a poor user experience.

Vivo

Vivo's main selling point is cameras paired with competitive pricing. The X200 Pro flagship packs a 50 MP main sensor, a 50MP ultra-wide angle, and a natural 3.7× optical zoom. Even budget models like the Y30 include quad-camera setups with ultra-wide and macro lenses. If you're purely into mobile photography, Vivo is a strong rival to camera-specific brands like Google Pixel.

User opinions on Vivo are polarized. Many have reported laggy 4K videos, random crashes, stuttering on 120Hz screen refresh, and overheating issues on some models. Some of these issues were resolved with software updates, and a good number of users are happy with the prices of mid-range models. But the biggest problem with the Vivo brand is the Funtouch OS. Vivo's Android skin forces you to agree to data collection terms before you can open basic apps like the camera or photo gallery. Users also report bloatware that cannot be uninstalled and consumes storage space, in addition to noting that Vivo phones have poor resale value, with prices dropping by half mere months after release. If you're not drawn to Vivo's specific camera processing or don't mind dealing with its software quirks, better value can be found elsewhere.

Oppo

Just like Vivo, Oppo takes cameras seriously. Oppo's Find X8 Ultra currently ranks third in DXOMARK's smartphone camera rankings, and even its mid-range phones pack impressive imaging hardware, with excellent low-light performance and powerful AI processing.

Oppo receives criticism from users for its Color OS, which ships with over 20 pre-installed apps. This includes several third-party apps you probably don't want, including Oppo's own Hot Apps folder that automatically downloads more software if you agree to its terms. Many of these apps can't be uninstalled without technical workarounds, and they use up storage space while pushing notifications you didn't ask for.

Software updates depend heavily on which phone you buy. The latest flagship Find models will receive five major Android updates and six years of security patches. But most mid- and low-range phones will only receive two to three years of updates. Oppo is also more expensive than some competitors because it doesn't make its own processors, relying instead on MediaTek or Qualcomm chips.

Sony

Sony Xperia phones occupy a small but loyal niche. Fans praise the company for keeping features most brands don't offer anymore, such as the 3.5mm headphone jack across the entire lineup. Its phones support high-resolution audio, LDAC wireless codec, and Dolby Atmos, with users praising the sound quality on the Xperia III & IV. The Xperia 5 V camera is another strong point for the brand, especially with the dedicated shutter button and manual controls similar to Sony's professional camera systems.

The software support is where Sony falls short. Its current policy guarantees only two major Android updates and up to three years of security patches, although the Xperia 1 VI now offers three updates and four years of security patches. When you're paying $ 1,000 or more for a flagship phone, receiving just two Android updates feels inadequate.

Limited availability compounds the problem. Sony phones are hard to find in many markets, including much of the United States. Its global market share continues to shrink, which raises questions about long-term support even beyond its already limited updates. If audio quality or manual camera controls are your top priority, Sony is an option. But the short software support at a premium price makes it difficult to recommend for most buyers.

Honor

Coming in at 9.3mm when folded, the Honor Magic V5 is one of the world's thinnest foldable phones. Beyond foldables, though, Honor has established itself as a value-focused brand that offers strong hardware at mid-range prices. Their phones typically pack high-end Snapdragon and MediaTek processors, large batteries, and decent camera systems without premium price tags. Users especially love the long battery life and ultra-fast charging speeds.

Software support massively improved in early 2025. Honor announced its Magic series phones will receive seven years of Android updates and security patches, matching Samsung and Google's flagship models. Also, MagicOS Android skin is much cleaner than the cluttered interfaces from other Chinese manufacturers, but some users have reported bugs and poor battery optimization.

The primary drawback of the Honor brand is its limited recognition and availability. Honor phones aren't sold in the U.S., and in markets where they are available, resale values are lower than those of more established brands. Service stations aren't widely available, which can make repairs slower or more complicated depending on your location.

Nothing

Nothing launched in 2022 with transparent back panels featuring LED lights called the Glyph Interface. The lights function as notification indicators, ringtone visualizers, and fill lights for photography. The Phone 2 and new Nothing Phone 3 continue this design theme, which stands out in a market where most phones look identical. The company's Nothing OS is a skin on top of stock Android, with minimal modifications, and ships without pre-installed bloatware. However, users have complained about the unappealing monochromatic UI and buggy performance of native apps.

The software update commitment is quite impressive for a young company. Nothing promises three years of major Android updates and four years of security patches for its flagship phones. And the Phone (3) gets a whopping seven years of updates.

Being a newer brand, Nothing's service centers remain limited outside major markets like India. If something breaks, finding authorized repair shops or replacement parts takes longer than it would with established brands. Resale values also tend to be lower because the brand lacks recognition in many regions.

Xiaomi

Xiaomi's specialty is delivering flagship-level specs at mid-range prices. The brand directly positions itself to compete with industry giants, with the Xiaomi 13 Pro taking on the Samsung Galaxy S23 Ultra. Meanwhile, Apple's iPhone 17 Pro Max faces a strong contender in the Xiaomi 17 Pro Max. The Blackshark, Xiaomi's beastly gaming phone, features cooling systems, high refresh rate displays, and gaming-optimized software. Across the lineup, you get powerful processors, large batteries, high-resolution displays, and capable camera systems for less money than competitors charge for similar hardware.

It's not all perfect, though. MIUI, Xiaomi's Android skin, includes ads in system apps like the file manager, music player, and even the settings menu. Pre-installed apps clutter the interface, and while you can disable some of them, others are more difficult to remove. The company makes money from this advertising ecosystem, but it goes without saying that users find it annoying and disruptive.

Software updates also vary wildly by region — users in China often receive updates before people in other markets. Xiaomi does not provide strong support guarantees for its smartphones, offering only two years of updates and sporadic security patches. However, some select models, including flagships, are eligible for up to four years of Android updates.

OnePlus

OnePlus built its reputation on killer phones that undercut Samsung and Apple while matching performance. People consistently report getting flagship-level performance and cameras while spending much less than they would on a Samsung Galaxy or iPhone. Nowadays, the value gap has narrowed — the OnePlus 12 launched at $799, putting it closer to conventional flagship pricing.

The Oxygen OS has remained strong, though. The software runs smoothly with minimal lag, fast animations, and a clean interface that isn't much different from stock Android. Users consistently praise the responsiveness and polish. One Reddit user described OxygenOS 16 as "damn smooth and amazing," highlighting the customizations and performance.

OnePlus also offers four major Android updates and five years of security patches for flagship models, matching Samsung and Google's support timelines. The cameras have improved significantly from earlier generations, although they're still slightly behind those of Samsung and Google. OnePlus may now cost flagship prices, but you also get flagship-quality software and great hardware.

Google Pixel

Google Pixel phones offer the cleanest Android experience available. After all, they're developed by the same company that owns Android. You get software updates the moment Google releases them, often months before other manufacturers push them out. The camera consistently ranks among the best in the industry, with better night shots and portrait mode results than most competitors. Features like Magic Eraser, Best Take, and real-time translation run exclusively on Pixel devices before eventually coming to other Android phones.

Starting from the Pixel 8a, Google now commits to seven years of OS updates and security patches. The new Tensor G5 chip prioritizes AI processing, which means tasks like voice transcription, photo editing, and language processing happen faster and more accurately than on competing phones. Call screening, spam filtering, and voice-to-text transcription work seamlessly without sending data to Google's servers.

The spec sheet states that the 4,700mAh battery is good enough, but some users on Reddit tell a different story. The battery life is simply not good enough. The Google Pixel 10 barely makes it through a full day with moderate use. Some users also report overheating during heavy usage, likely due to the Tensor chip.

Samsung

Xiaomi skipped the 16 series to match iPhone releases. Google Pixel 10 wants to be the iPhone for Android users. But only Samsung truly competes head-to-head with Apple, matching and often surpassing the iPhone. Samsung ranked first in customer satisfaction among cellphone manufacturers in 2025 and holds the largest Android market share globally. The flagship Galaxy S25 series and foldables, such as the Z Fold 6, consistently earn praise for display quality, camera performance, battery life, and overall value for money.

Samsung's service network is the most extensive of any Android manufacturer, with authorized repair centers globally and readily available replacement parts. The software support matches Google's commitment of seven years of Android updates and security patches for flagship devices. One UI includes features like DeX mode that turns your phone into a desktop computer, Good Lock for deep customization, and a complete ecosystem of watches, earbuds, tablets, and smart home devices that sync seamlessly.

The biggest barrier to entry is the pricing. The Galaxy S25 Ultra starts at $1,299, and the Z Fold 7 costs up to $2,419. Mid-range A-series phones offer better value but receive fewer years of updates. Samsung delivers the most comprehensive Android package, featuring excellent hardware, mature software, extensive service coverage, and long-term support that justifies the premium pricing for users who can afford it.

How we ranked these brands

First, we determined major Android phone brands based on global and U.S. market share data, then evaluated user sentiment from multiple sources. Reddit discussions gave us direct feedback from Android users on their preferences, experiences with different brands, and recommendations for high-end devices. We also analyzed user reviews and comment sections on tech blogs and dedicated mobile phone review sites, where real users share their experiences with devices.

Finally, we factored in ratings and reviews from verified purchasers on Amazon and phone stores to capture feedback from everyday consumers. This combination of market presence, forum discussions, professional review feedback, and verified purchase ratings gave us a complete picture of how users actually perceive each brand's strengths and weaknesses beyond marketing claims.

source

Android O.S | Apps / How To Deep Clean Your Android Device The Right Way

« Last post by javajolt on February 18, 2026, 12:26:25 AM »

People use smartphones everywhere, without necessarily realizing they're exposing the handsets to all sorts of germs and dirt. In addition to collecting dirt while in use, phones can accumulate dust and lint while sitting in purses or pockets. That's why it's important to give our handsets a deep clean regularly, while also ensuring the cleaning process is safe for the device's components. In what follows, we'll tell you everything you need to know to clean your Android phone thoroughly.

Many people may use protective accessories with their Android devices. These should be included in the cleaning process. You won't remove the screen protector from the display, but you will want to take the handset out of the case. Then, you'll want to clean the case separately (skip this step if you don't use one). You may want to start the cleaning procedure with the case. Power off the handset, remove any connected charging cables or headphones, and take it out of the case. Place the handset on a secure surface so it doesn't slip, and clean the case.

Since cases are made of all sorts of materials, the cleaning procedure will vary. You'll want microfiber cloths on hand for the job, one for using cleaning solutions, and one for drying the case at the end. For plastic, you can use soap and warm water or an ammonia-free spray cleaner. Bleach can be used on plastic cases if needed, but not on silicone. On that note, silicone and rubber cases can be cleaned with dish soap and water. Baking soda can come in handy if the silicone case is stained or dirty. Wood and leather cases can be cleaned with wood or leather cleaner, but you should spray the solution on a microfiber cloth, not the case.

How to clean the screen of your Android phone

Once the case is cleaned and dried, you may leave it to air-dry while you clean the handset. Both Google and Samsung advise users to use soft, lint-free cloths for wiping the entire phone. A microfiber cloth may be the best choice for the job. It should remove dust and smudges from the screen, rear panel, cameras, and sides. You'll want to be careful with the screen protector when cleaning the phone, with Google explicitly advising Pixel 10 Pro Fold users not to remove the protective film or pick at the edges.

A separate, damp cloth can be used to remove any visible markings, like makeup or color transfers. Samsung notes that you can dampen the corner of a microfiber cloth with distilled water for grime that's harder to remove. For the display, you can use screen wipes or eyeglass cleaner, according to Google, while soap and bleach-free cleaning wipes work on the back and sides of Pixel phones. You can use similar tools to clean Android phones from other vendors, not just Pixel and Galaxy devices.

Users who want to disinfect their devices can use alcohol-based wipes (70% isopropyl), according to Google. Samsung also lists hypochlorous acid-based solutions or solutions that contain "more than 70% ethanol or isopropyl alcohol." Bleach should not be used on any surface of the phone. Regardless of the substance, you should not spray or spill the solutions directly onto your phone. Instead, use a microfiber cloth to apply the disinfectant and then clean the display, the cameras, the sides, and the back. A dry microfiber can be used immediately after that to dry the phone.

You'll want to pay attention to the phone's ports, whether it's the USB-C port (or a different connector), the speaker, or the 3.5 mm headphone port (if your phone still has one). Dust can accumulate in these openings and interfere with normal function. You may find the phone doesn't charge, or the sound isn't as crisp as it used to be. Do not use any liquids to remove any dust from those openings. Also, smartphone vendors including Apple, Google, and Samsung advise against using compressed air when cleaning phones. Apple and Samsung suggest using gentle brushes to remove any debris from speakers. Brushes should be clean and dry. The charging port may be trickier. You can use a toothpick to try to remove any visible lint, but you should be very gentle about it.

The entire deep clean process should not take very long, but you may not want to repeat it every day. That said, you can clean the display and case every day with a dry microfiber. This will remove smudges and fingerprints. You can then do a periodic deep clean when needed. As for disinfecting the Android handset, it's up to the user to decide when to do that.

A study published in Antimicrobial Resistance & Infection Control in early 2026 found that cleaning mobile phones belonging to healthcare workers with 70% isopropanol leads to a "significant reduction in microbiological contamination." A 2024 study published in South African Medical Journal also showed that using a 70% isopropyl alcohol solution to clean the phones belonging to healthcare workers in a paediatric intensive care unit was 67% more effective than ultraviolet light disinfection at killing pathogens. These studies indicate that periodic phone disinfection will remove more than grime and lint.

source

Apple / Apple patches zero-day flaw that could let attackers take control of devices

« Last post by javajolt on February 16, 2026, 11:26:46 PM »

Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, and Safari, fixing, in particular, a zero-day flaw that is actively exploited in targeted attacks.

Exploiting this zero-day flaw would allow cybercriminals to run any code they want on the affected device, potentially installing spyware or backdoors without the owner noticing.

Installing these updates as soon as possible keeps your personal information—and everything else on your Apple devices—safe from such an attack.

CVE-2026-20700

The zero-day vulnerability tracked as CVE-2026-20700, is a memory corruption issue in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3 and iPadOS 26.3. An attacker with memory write capability may be able to execute arbitrary code.

Apple says the vulnerability was used as part of an infection chain combined with CVE-2025-14174 and CVE-2025-43529 against devices running iOS versions prior to iOS 26.

Those two vulnerabilities were already patched in the December 2025 update.

Updates for your particular device

The table below shows which updates are available and points you to the relevant security content for that operating system (OS).

How to update your Apple devices

How to update your iPhone or iPad

For iOS and iPadOS users, here’s how to check if you’re using the latest software version:

• Go to Settings > General > Software Update. You will see if there are updates available and be guided through installing them.

Turn on Automatic Updates if you haven’t already—you’ll find it on the same screen.

How to update macOS on any version

To update macOS on any supported Mac, use the Software Update feature, which Apple designed to work consistently across all recent versions. Here are the steps:

• Click the Apple menu in the upper-left corner of your screen.

• Choose System Settings (or System Preferences on older versions).

• Select General in the sidebar, then click Software Update on the right. On older macOS, just look for Software Update directly.

• Your Mac will check for updates automatically. If updates are available, click Update Now (or Upgrade Now for major new versions) and follow the on-screen instructions. Before you upgrade to macOS Tahoe 26, please read these instructions.

• Enter your administrator password if prompted, then let your Mac finish the update (it might need to restart during this process).

• Make sure your Mac stays plugged in and connected to the internet until the update is done.

How to update Apple Watch

Ensure your iPhone is paired with your Apple Watch and connected to Wi-Fi, then:

• Keep your Apple Watch on its charger and close to your iPhone.

• Open the Watch app on your iPhone.

• Tap General > Software Update.

• If an update appears, tap Download and Install.

• Enter your iPhone passcode or Apple ID password if prompted.

Your Apple Watch will automatically restart during the update process. Make sure it remains near your iPhone and on charge until the update completes.

How to update Apple TV

Turn on your Apple TV and make sure it’s connected to the internet, then:

• Open the Settings app on Apple TV.

• Navigate to System > Software Updates.

• Select Update Software.

• If an update appears, select Download and Install.

The Apple TV will download the update and restart as needed. Keep your device connected to power and Wi-Fi until the process finishes.

How to update your Safari browser

Safari updates are included with macOS updates, so installing the latest version of macOS will also update Safari. To check manually:

• Open the Apple menu > System Settings > General > Software Update.

• If you see a Safari update listed separately, click Update Now to install it.

• Restart your Mac when prompted.

If you’re on an older macOS version that’s still supported (like Sonoma or Sequoia), Apple may offer Safari updates independently through Software Update.

More advice to stay safe

The most important fix—however inconvenient it may be—is to upgrade to iOS 26.3 (or the latest available version for your device). Not doing so means missing an accumulating list of security fixes, leaving your device vulnerable to newly found vulnerabilities.

But here are some other useful tips:

• Make it a habit to restart your device on a regular basis.

• Do not open unsolicited links and attachments without verifying with the trusted sender.

• Remember: Apple threat notifications will never ask users to click links, open files, install apps or ask for account passwords or verification codes.

• For Apple Mail users, these vulnerabilities create risk when viewing HTML-formatted emails containing malicious web content.

• Malwarebytes for iOS can help keep your device secure, with Trusted Advisor alerting you when important updates are available.

•If you are a high-value target, or you want the extra level of security, consider using Apple’s Lockdown Mode.

source

Intel / Intel's new Wi-Fi driver for Windows 10 and 11 brings new network features

« Last post by javajolt on February 12, 2026, 07:56:15 PM »

Intel has released a new Wi-Fi driver for supported Intel network cards and operating systems. Version 24.20.0 introduces a new setting that manages how the driver selects the access point when roaming (switching between access points). It allows you to prioritize access points depending on the channel load or switch back to typical parameters, such as signal strength. This theoretically allows switching to a network with better connection stability and speed.

In addition, the latest release improves the overall stability and connectivity reliability, plus various "minor issues."

• New option in Advanced settings to toggle the Channel‑Load usage for AP selection during roaming.

• Improved system stability and more reliable connectivity.

• Enhanced Wi-Fi sensing functionality.

This software version 24.20.0 has been updated to include functional updates. There may be other minor issues addressed that will impact performance, stability, or vendor-specific functionality not listed above. Users are encouraged to update to the latest version for the best performance.

Intel"s new Wi-Fi driver is available for the following network cards:

Intel Wireless Driver 24.20.0 supports 64-bit Windows versions, including Windows 11 and 10. 32-bit Windows 10 is not supported. Note that although the driver still supports Windows 10, official Wi-Fi 7 support is only present on Windows 11 version 24H2 and newer. Therefore, if you want to use the latest Wi-Fi standard, you have to leave Windows 10 behind.

You can download the latest Wi-Fi driver from Intel"s official website using this link.

source

Patch Tuesday| Updates | Security | Privacy | Anti-virus / Microsoft February 2026 Patch Tuesday fixes 6 zero-days, 58 flaws

« Last post by javajolt on February 11, 2026, 04:31:42 PM »

Today is Microsoft's February 2026 Patch Tuesday with security updates for 58 flaws, including 6 actively exploited and three publicly disclosed zero-day vulnerabilities.

This Patch Tuesday also addresses five "Critical" vulnerabilities, 3 of which are elevation of privileges flaws and 2 information disclosure flaws.

The number of bugs in each vulnerability category is listed below:

■ 25 Elevation of Privilege vulnerabilities

■ 5 Security Feature Bypass vulnerabilities

■ 12 Remote Code Execution vulnerabilities

■ 6 Information Disclosure vulnerabilities

■ 3 Denial of Service vulnerabilities

■ 7 Spoofing vulnerabilities

When BleepingComputer reports on Patch Tuesday security updates, we only count those released by Microsoft today. Therefore, the number of flaws does not include 3 Microsoft Edge flaws fixed earlier this month.

As part of these updates, Microsoft has also begun to roll out updated Secure Boot certificates to replace the original 2011 certificates that are expiring in late June 2026.

"With this update, Windows quality updates include a broad set of targeting data that identifies devices and their ability to receive new Secure Boot certificates," explains Microsoft in the Windows 11 update notes.

"Devices will receive the new certificates only after they show sufficient successful update signals, which helps ensures a safe and phased rollout."

To learn more about the non-security updates released today, you can review our dedicated articles on the Windows 11 KB5077181 & KB5075941 cumulative updates and the Windows 10 KB5075912 extended security update.

6 actively exploited zero-days

This month's Patch Tuesday fixes six actively exploited vulnerabilities, three of which are publicly disclosed.

Microsoft classifies a zero-day flaw as publicly disclosed or actively exploited while no official fix is available.

The six actively exploited zero-days are:

CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability

Microsoft has patched an actively exploited Windows security feature bypass that can be triggered by opening a specially crafted link or shortcut file.

"To successfully exploit this vulnerability, an attacker must convince a user to open a malicious link or shortcut file." explains Microsoft.

"An attacker could bypass Windows SmartScreen and Windows Shell security prompts by exploiting improper handling in Windows Shell components, allowing attacker‑controlled content to execute without user warning or consent," continued Microsoft.

While Microsoft has not shared further details, it likely allows attackers to bypass the Mark of the Web (MoTW) security warnings.

Microsoft has attributed the discovery of the flaw to Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC), Office Product Group Security Team, Google Threat Intelligence Group, and an anonymous researcher.

CVE-2026-21513 - MSHTML Framework Security Feature Bypass Vulnerability

Microsoft has patched an actively exploited MSHTML security feature bypass flaw in Windows.

"Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network," explains Microsoft.

There are no details on how this was exploited.

This flaw was once again attributed to Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC), Office Product Group Security Team, and Google Threat Intelligence Group.

CVE-2026-21514 - Microsoft Word Security Feature Bypass Vulnerability

Microsoft has patched a security feature bypass flaw in Microsoft Word that is actively exploited.

"An attacker must send a user a malicious Office file and convince them to open it," warns Microsoft's advisory.

"This update addresses a vulnerability that bypasses OLE mitigations in Microsoft 365 and Microsoft Office which protect users from vulnerable COM/OLE control," continues Microsoft.

Microsoft says that the flaw cannot be exploited in the Office Preview Pane.

The flaw was again attributed to Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC), Office Product Group Security Team, Google Threat Intelligence Group, and an anonymous researcher.

As no details have been released, it is unclear if CVE-2026-21510, CVE-2026-21513, and CVE-2026-21514 were exploited in the same campaign.

CVE-2026-21519 - Desktop Window Manager Elevation of Privilege Vulnerability

Microsoft has patched an actively exploited elevation of privileges flaw in the Desktop Window Manager.

"An attacker who successfully exploited this vulnerability could gain SYSTEM privileges," warns Microsoft.

No details have been shared on how it was exploited.

Microsoft has attributed the discovery of the flaw to Microsoft Threat Intelligence Center (MSTIC) & Microsoft Security Response Center (MSRC).

CVE-2026-21525 - Windows Remote Access Connection Manager Denial of Service Vulnerability

Microsoft fixed an actively exploited denial of service flaw in the Windows Remote Access Connection Manager.

"Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally,' explains Microsoft.

Microsoft has attributed the discovery of the flaw to the ACROS Security team with 0patch.

ACROS CEO Mitja Kolsek told BleepingComputer that the exploit was found in a public malware repository but is unsure how it is being exploited in attacks.

"We found an exploit for this issue in December 2025 in a public malware repository while searching for an exploit for CVE-2025-59230," Kolsek told BleepingComputer.

"This issue turned out to be a 0day at the time, so we patched it (blog.0patch.com/2025/12/free-micropatches-for-windows-remote.html) and reported it to Microsoft. We don't have any information on it having been exploited, but the quality of the combined exploit for both issues suggested professional work."

CVE-2026-21533 - Windows Remote Desktop Services Elevation of Privilege Vulnerability

Microsoft has fixed an elevation of privileges in Windows Remote Desktop Services.

"Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally," explains Microsoft.

Microsoft has attributed the discovery of the flaw to the Advanced Research Team at CrowdStrike.

CrowdStrike told BleepingComputer that the exploit they observed allows threat actors to add a new user to the Administrator group.

"The CVE-2026-21533 exploit binary modifies a service configuration key, replacing it with an attacker-controlled key, which could enable adversaries to escalate privileges to add a new user to the Administrator group," Adam Meyers, Head of Counter Adversary Operations, CrowdStrike, told BleepingComputer.

"While CrowdStrike does not currently attribute this activity to a specific target or adversary, threat actors possessing the exploit binaries will likely accelerate their attempts to use or sell CVE-2026-21533 in the near term."

Of the six zero-days, CVE-2026-21513, CVE-2026-21510, and CVE-2026-21514 were publicly disclosed.

Recent updates from other companies

Other vendors who released updates or advisories in February 2026 include:

■ Adobe released security updates for Audition, After Effects, InDesign, Substance 3D, Adobe Lightroom Classic, and other software. None of the flaws are exploited.

■ BeyondTrust released security updates for a critical RCE flaw in its Remote Support (RS) and Privileged Remote Access (PRA) software.

■ CISA issued a new binding operational directive requiring federal agencies to remove network edge devices that have reached the end of support.

■ Cisco released security updates for Secure Web Appliance, Cisco Meeting Management, and more.

■ Fortinet released security updates for FortiOS and FortiSandbox.

■ Google has released Android's February security bulletin, which includes no security fixes.

■ n8n fixed critical vulnerabilities that act as a patch bypass for the previously fixed CVE-2025-68613 RCE flaw.

■ SAP released the February security updates for multiple products, including fixes for two critical vulnerabilities.

While not a security update, Microsoft has started rolling out built-in Sysmon functionality in Windows 11 insider builds, which many Windows admins will find useful.

The February 2026 Patch Tuesday Security Updates

Below is the complete list of resolved vulnerabilities in the February 2026 Patch Tuesday updates.

To access the full description of each vulnerability and the systems it affects, you can view the full report here.

Update 2/10/26: Added information about how CVE-2026-21533 and CVE-2026-21525 are exploited.

source

Patch Tuesday| Updates | Security | Privacy | Anti-virus / Microsoft releases Windows 11 26H1 for select and upcoming CPUs

« Last post by javajolt on February 11, 2026, 04:07:49 PM »

Microsoft has announced Windows 11 26H1, but it's not for existing PCs. Instead, it will ship on devices with Snapdragon X2 processors and possibly other rumored ARM chips.

Microsoft insists Windows 11 is still following an annual update cadence, which means Windows 11 26H2 is likely on track.

According to Microsoft, Windows 11 26H1 is based on a new platform release to support the upcoming ARM chips.

In a press release, Microsoft says it worked with OEMs and IHVs to support new device innovations and development via a new Windows Update.

"That means that this release is not being made available through broad channels but is only intended for those who purchase these new devices. At this time, devices with Qualcomm Snapdragon® X2 Series processors will come with Windows 11, version 26H1," Microsoft noted.

"Organizations should continue to purchase, deploy, and manage devices running broadly released versions of Windows 11 (e.g. versions 24H2 and 25H2) with confidence."

Microsoft also has an FAQ that clarifies version 26H1 is not a feature update for version 25H2, and that "there is no need to pause device purchases or OS deployments, and no changes are required to existing enterprise rollout plans."

Devices running Windows 11 26H1 won't get specific new features, as changes will be shared across platform releases, but version 26H1 should offer better performance or battery life on new ARM PCs.

All other PCs should get Windows 11 26H2 later this year, but Microsoft hasn't confirmed the fall release yet.

source

Google | Alphabet | Gmail | Meta | YouTube | Telegram / Google has just crossed the quantum threshold: thus begins the era of error-free

« Last post by javajolt on February 10, 2026, 02:30:06 PM »

Quantum computers have just cleared a hurdle that many physicists once doubted they could overcome. In new experiments, the Google Quantum AI team showed that when they bundle more qubits together in the right pattern, the combined logical qubit actually makes fewer mistakes.

In technical terms, they have gone below the error correction threshold that future large-scale quantum machines will need.

Why should anyone outside a physics lab care about a tiny drop in error rates deep inside a metal box cooled almost to absolute zero? The answer has a lot to do with cleaner energy systems, new materials, and the race to cut climate pollution.

What did scientists actually achieve?

Quantum chips rely on fragile qubits that lose their information very quickly. Every tiny vibration or stray signal can nudge them off course, which is why today’s devices are still too noisy for real-world climate or chemistry problems.

To fight this, researchers use quantum error correction. Instead of trusting a single qubit, they spread one unit of information across many physical qubits and treat the whole patch as one logical qubit. When the physical qubits are good enough, adding more of them actually protects the logical qubit from noise.

That cut-off point is known as the surface-code threshold. In their latest work, Google’s Willow processor, a superconducting chip with qubits in a square grid, finally operated below that limit, and when the team enlarged their code from three-by-three qubits to five-by-five and then seven-by-seven, the logical error rate fell by about a factor of two at each step.

In simple terms, scaling up reduced the errors instead of multiplying them. One of the resulting logical qubits even lived more than twice as long as the best single qubit that helped build it.

For the quantum community, that shift signals that fault tolerant machines now look less like science fiction and more like a long but concrete engineering project.

Why this matters for climate solutions

At first glance, small changes in error rates inside a cryogenic chip sound far removed from air pollution, food prices, or the size of the electric bill. Yet many of the hardest climate and energy questions depend on solving extremely demanding computational problems.

Climate models that simulate oceans, clouds, forests, and cities already push some of the world’s largest supercomputers to their limits. Optimization problems that decide how to route power from thousands of solar panels, wind farms, batteries, and electric vehicles without blackouts or wasted energy are equally tough.

Quantum algorithms are being explored for better weather and climate prediction, power-grid optimization, and material discovery for batteries and solar cells.

Analysts expect that fault-tolerant quantum hardware could speed up the design of low-carbon technologies and industrial processes. One study by McKinsey, for example, estimated that quantum-enhanced climate technologies might unlock additional emissions cuts of several gigatons of carbon dioxide per year by the mid 2030s.

That kind of potential does not mean quantum computers will magically solve climate change. It does mean they could become powerful helpers for engineers and scientists who are already working on cleaner cement, more efficient catalysts, better carbon capture materials, and smarter, more flexible grids.

The energy footprint puzzle

There is also a catch. Quantum processors like Willow run just a fraction of a degree above absolute zero, inside dilution refrigerators that use a lot of electricity, and studies of quantum data centers show that cooling often consumes far more energy than the computation itself.

At the same time, early comparisons indicate that small quantum systems can already use much less power than today’s largest supercomputers for some tasks, so researchers are testing more efficient cooling, qubit types that work at higher temperatures, and ways to reuse waste heat.

Still a long road ahead

Google’s new result still uses only one logical qubit, so it remains a proof of concept rather than a practical machine. To run meaningful chemistry, climate, or grid simulations, researchers will need many interacting logical qubits and error rates that keep dropping as systems grow.

Even so, crossing the error threshold changes the conversation. Instead of asking whether quantum error correction can ever work, scientists are now focused on how fast it can scale and how to align that growth with planetary limits and climate goals.

For people who care about the environment, the message is measured but hopeful. Reliable quantum computers are not a silver bullet, yet they are slowly moving from lab curiosity toward a tool that could support cleaner technologies, more resilient energy systems, and better understanding of a warming planet.

The study was published in Nature.

source

Google | Alphabet | Gmail | Meta | YouTube | Telegram / Google just dropped a bombshell about Gmail and everyone needs to pay attention

« Last post by javajolt on February 10, 2026, 01:56:12 PM »

For those who use Gmail, a major change is on the way, prompting a decision users must make.
(Dreamstime/TNS)TNS

It’s a major shift that deserves careful consideration.

Google has just announced two huge changes to Gmail.

Though one might be expected to some, the other comes out of left field, and as a result, more than 2 billion users of the world’s most popular email platform will find themselves at a crossroads and must make a major decision.

The changes come as one of the largest shifts in Gmail in more than two decades since it launched.

The company spoke about the new upgrades in its recent announcement, revealing that the AI upgrades that had been restricted to paid accounts will now be free.

So AI Overviews, Help Me Write and Suggested Replies will be available to all.

“Today we’re bringing @Gmail into the Gemini era,” the company shared , “making it a personal, proactive inbox assistant to help you manage your life, not just your messages. Explore the new features launching today, many of which are made possible by Gemini 3.”

Google added, “as always, you’re in control, and can choose to turn these new @Gmail features on or off.”

With that comes the first decision, where AI processing your emails means sharing the content and metadata of those emails with Google’s Gemini.

This means you would have to share all the contents of your inbox.

It’s all meant to organize messages and suggest actions, while the new tools will make Gmail act more like a personal assistant, which aims towards helping users better manage their inbox.

Users are able to turn the new features on or off, as it gives people a way to choose how they’d want their email to run. Some might choose the AI assistants while others might want to keep it the traditional way, as is.

Here’s the other upgrade, which seemingly comes as a surprise.

Google now gives users the option to change their primary Gmail address without changing to a new account.

Even if you choose to change your primary Gmail address, users are able to keep all their data while the old email address still works.

Think of this as a way to start over, especially if you’re still using your old email address from high school or college, or if you have an embarrassing email address you wished never existed and wanted to change.

For users who choose this path, it’s best to think of this as a fresh start.

But before jumping to make the change in a haste, keep in mind that there are a few things to consider.

You can only undergo a limited number of changes over a limited period of time.

So, with these new options comes a decision users must make.

For users, deciding whether to go the AI route involves heavy consideration of privacy and security since it requires the tools to read your messages.

This is important because Google has often warned that accounts are under attack from hackers attempting all sorts of trickery to steal passwords and other compromising information, breaking into accounts.

All in all, it’s a lot to think about.

source

Apple / Apple’s new iOS setting addresses a hidden layer of location tracking

« Last post by javajolt on February 10, 2026, 07:27:07 AM »

Most iPhone owners have hopefully learned to manage app permissions by now, including allowing location access. But there’s another layer of location tracking that operates outside these controls. Your cellular carrier has been collecting your location data all along, and until now, there was nothing you could do about it.

Apple just changed this in iOS 26.3 with a new setting called “limit precise location.”

How Apple’s anti-carrier tracking system works

Cellular networks track your phone’s location based on the cell towers it connects to, in a process known as triangulation. In cities where towers are densely packed, triangulation is precise enough to track you down to a street address.

This tracking is different from app-based location monitoring, because your phone’s privacy settings have historically been powerless to stop it. Toggle Location Services off entirely, and your carrier still knows where you are.

The new setting reduces the precision of location data shared with carriers. Rather than a street address, carriers would see only the neighborhood where a device is located. It doesn’t affect emergency calls, though, which still transmit precise coordinates to first responders. Apps like Apple’s “Find My” service, which locates your devices, or its navigation services, aren’t affected because they work using the phone’s location sharing feature.

Why is Apple doing this? Apple hasn’t said, but the move comes after years of carriers mishandling location data.

Unfortunately, cellular network operators have played fast and free with this data. In April 2024, the FCC fined Sprint and T-Mobile (which have since merged), along with AT&T and Verizon nearly $200 million combined for illegally sharing this location data. They sold access to customers’ location information to third party aggregators, who then sold it on to third parties without customer consent.

This turned into a privacy horror story for customers. One aggregator, LocationSmart, had a free demo on its website that reportedly allowed anyone to pinpoint the location of most mobile phones in North America.

Limited rollout

The feature only works with devices equipped with Apple’s custom C1 or C1X modems. That means just three devices: the iPhone Air, iPhone 16e, and the cellular iPad Pro with M5 chip. The iPhone 17, which uses Qualcomm silicon, is excluded. Apple can only control what its own modems transmit.

Carrier support is equally narrow. In the US, only Boost Mobile is participating in the feature at launch, while Verizon, AT&T, and T-Mobile are notable absences from the list given their past record. In Germany, Telekom is on the participant list, while both EE and BT are involved in the UK. In Thailand, AIS and True are on the list. There are no other carriers taking part as of today though.

Android also offers some support

Google also introduced a similar capability with Android 15’s Location Privacy hardware abstraction layer (HAL) last year. It faces the same constraint, though: modem vendors must cooperate, and most have not. Apple and Google don’t get to control the modems in most phones. This kind of privacy protection requires vertical integration that few manufacturers possess and few carriers seem eager to enable.

Most people think controlling app permissions means they’re in control of their location. This feature highlights something many users didn’t know existed: a separate layer of tracking handled by cellular networks, and one that still offers users very limited control.

source