POPULARITY
Categories
For years, the checkbox to get a PC out of the Insider Program when that Windows version shipped in stable did absolutely nothing. That's no longer the case. Windows A new context menu for File Explorer heads out to Insiders along with five new preview builds There are lots of other like UX changes happening with little communication. Will Microsoft really touch (and update) all the ancient UIs in Windows 11? New Release Preview builds point at next Week D and Patch Tuesday updates: New Taskbar, New Start, new Windows Search, many minor changes throughout Hardware Now we know more about Snapdragon C ahead of IFA, where we may see the first laptops Google is holding a PixelBook reviewers event in mid-September You know that Commodore is back, but now the Amiga is back too! Lenovo surges on AI spending, but it's now engaged in financial shenanigans too. More like Spotify than Big Tech, but still bad AI Big Tech spending on AI is finally getting more scrutiny from financial/business publications It's happening: Microsoft "pulls a Teams" and will consolidate its Copilot (consumer) and Microsoft 365 Copilot (business apps) into a single app, evolve it in a "super app" OpenAI's new strategy: Get 'em while they're young Mozilla provides a progress report on Smart Window for Firefox, details new AI search partnership Alexa+ is now free on all FireTV devices in the U.S., no Prime required XBOX Resonance: A Plague Tale and more are heading to Game Pass during the second half of August XBOX August Update is here with more Achievements details, Game Hubs now support Xbox 360 titles, Game Pass subscribers can now stream a game while it installs in the background XBOX Insiders can now test Home Improvements, local save game management, and profile badges Apple makes major App Store concessions in the EU. But Epic Games says it is not enough. The new Call of Duty has a public beta on Friday, and there will be a single-player episode for the first time Tips and picks Tip of the week: Yes, Virginia, you can exit the Insider Program now App pick of the week: Brave RunAs Radio this week: Automatic Attack Disruption with Liz Tesch Brown liquor pick of the week: Red Bank Premium Blended Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: scribe.how/windows
For years, the checkbox to get a PC out of the Insider Program when that Windows version shipped in stable did absolutely nothing. That's no longer the case. Windows A new context menu for File Explorer heads out to Insiders along with five new preview builds There are lots of other like UX changes happening with little communication. Will Microsoft really touch (and update) all the ancient UIs in Windows 11? New Release Preview builds point at next Week D and Patch Tuesday updates: New Taskbar, New Start, new Windows Search, many minor changes throughout Hardware Now we know more about Snapdragon C ahead of IFA, where we may see the first laptops Google is holding a PixelBook reviewers event in mid-September You know that Commodore is back, but now the Amiga is back too! Lenovo surges on AI spending, but it's now engaged in financial shenanigans too. More like Spotify than Big Tech, but still bad AI Big Tech spending on AI is finally getting more scrutiny from financial/business publications It's happening: Microsoft "pulls a Teams" and will consolidate its Copilot (consumer) and Microsoft 365 Copilot (business apps) into a single app, evolve it in a "super app" OpenAI's new strategy: Get 'em while they're young Mozilla provides a progress report on Smart Window for Firefox, details new AI search partnership Alexa+ is now free on all FireTV devices in the U.S., no Prime required XBOX Resonance: A Plague Tale and more are heading to Game Pass during the second half of August XBOX August Update is here with more Achievements details, Game Hubs now support Xbox 360 titles, Game Pass subscribers can now stream a game while it installs in the background XBOX Insiders can now test Home Improvements, local save game management, and profile badges Apple makes major App Store concessions in the EU. But Epic Games says it is not enough. The new Call of Duty has a public beta on Friday, and there will be a single-player episode for the first time Tips and picks Tip of the week: Yes, Virginia, you can exit the Insider Program now App pick of the week: Brave RunAs Radio this week: Automatic Attack Disruption with Liz Tesch Brown liquor pick of the week: Red Bank Premium Blended Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: scribe.how/windows
For years, the checkbox to get a PC out of the Insider Program when that Windows version shipped in stable did absolutely nothing. That's no longer the case. Windows A new context menu for File Explorer heads out to Insiders along with five new preview builds There are lots of other like UX changes happening with little communication. Will Microsoft really touch (and update) all the ancient UIs in Windows 11? New Release Preview builds point at next Week D and Patch Tuesday updates: New Taskbar, New Start, new Windows Search, many minor changes throughout Hardware Now we know more about Snapdragon C ahead of IFA, where we may see the first laptops Google is holding a PixelBook reviewers event in mid-September You know that Commodore is back, but now the Amiga is back too! Lenovo surges on AI spending, but it's now engaged in financial shenanigans too. More like Spotify than Big Tech, but still bad AI Big Tech spending on AI is finally getting more scrutiny from financial/business publications It's happening: Microsoft "pulls a Teams" and will consolidate its Copilot (consumer) and Microsoft 365 Copilot (business apps) into a single app, evolve it in a "super app" OpenAI's new strategy: Get 'em while they're young Mozilla provides a progress report on Smart Window for Firefox, details new AI search partnership Alexa+ is now free on all FireTV devices in the U.S., no Prime required XBOX Resonance: A Plague Tale and more are heading to Game Pass during the second half of August XBOX August Update is here with more Achievements details, Game Hubs now support Xbox 360 titles, Game Pass subscribers can now stream a game while it installs in the background XBOX Insiders can now test Home Improvements, local save game management, and profile badges Apple makes major App Store concessions in the EU. But Epic Games says it is not enough. The new Call of Duty has a public beta on Friday, and there will be a single-player episode for the first time Tips and picks Tip of the week: Yes, Virginia, you can exit the Insider Program now App pick of the week: Brave RunAs Radio this week: Automatic Attack Disruption with Liz Tesch Brown liquor pick of the week: Red Bank Premium Blended Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: scribe.how/windows
For years, the checkbox to get a PC out of the Insider Program when that Windows version shipped in stable did absolutely nothing. That's no longer the case. Windows A new context menu for File Explorer heads out to Insiders along with five new preview builds There are lots of other like UX changes happening with little communication. Will Microsoft really touch (and update) all the ancient UIs in Windows 11? New Release Preview builds point at next Week D and Patch Tuesday updates: New Taskbar, New Start, new Windows Search, many minor changes throughout Hardware Now we know more about Snapdragon C ahead of IFA, where we may see the first laptops Google is holding a PixelBook reviewers event in mid-September You know that Commodore is back, but now the Amiga is back too! Lenovo surges on AI spending, but it's now engaged in financial shenanigans too. More like Spotify than Big Tech, but still bad AI Big Tech spending on AI is finally getting more scrutiny from financial/business publications It's happening: Microsoft "pulls a Teams" and will consolidate its Copilot (consumer) and Microsoft 365 Copilot (business apps) into a single app, evolve it in a "super app" OpenAI's new strategy: Get 'em while they're young Mozilla provides a progress report on Smart Window for Firefox, details new AI search partnership Alexa+ is now free on all FireTV devices in the U.S., no Prime required XBOX Resonance: A Plague Tale and more are heading to Game Pass during the second half of August XBOX August Update is here with more Achievements details, Game Hubs now support Xbox 360 titles, Game Pass subscribers can now stream a game while it installs in the background XBOX Insiders can now test Home Improvements, local save game management, and profile badges Apple makes major App Store concessions in the EU. But Epic Games says it is not enough. The new Call of Duty has a public beta on Friday, and there will be a single-player episode for the first time Tips and picks Tip of the week: Yes, Virginia, you can exit the Insider Program now App pick of the week: Brave RunAs Radio this week: Automatic Attack Disruption with Liz Tesch Brown liquor pick of the week: Red Bank Premium Blended Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: scribe.how/windows
(Presented by State of Statecraft: A security and intelligence conference that brings together multiple disciplines, backgrounds, and nationalities to share research into the covert activities of nation-states and other malign actors.) Three Buddy Problem - Episode 109: The buddies dig into a new White House memo handing vetted private companies real offensive cyber authorities, and Costin explains why a stack of ransomware takedown cases has been sitting on a shelf waiting for exactly this. Plus, a tiny 12 KB Windows backdoor found on one machine with a dead C2, the mercenary outfits quietly living inside telcos, and why Google continues to flounder in the race for AI dominance. Cast: Costin Raiu, Ryan Naraine and Juan Andres Guerrero-Saade Timestamps: 0:00 Introductory banter 0:58 State of Statecraft, and a late CFP window 3:24 The White House offensive hacking memo 6:37 "Hack back" is the wrong frame for what's being authorized 11:20 Ransomware cases sitting on the shelf 17:01 The million-dollar bond and who can realistically play 22:29 Where DPRK crypto theft falls under the new definitions 28:15 Would TLP Black take a contract? 36:55 Gen Digital's 12 KB backdoor hiding its C2 in desktop.ini whitespace 46:57 Passive DNS, registration patterns, and pivoting on a dead domain 57:32 Feeding a one-off find back into detection engineering 1:02:14 Metador, Mafalda, and the mercenaries who love telcos 1:17:07 Armored Likho and what "Western APT" really means 1:28:16 The IOC market, private reporting, and CTI's matching problem 1:58:10 Google's culture problem, the weekly model churn, and Patch Tuesday math
We got your Patch Tuesday notes. Attackers target Microsoft SharePoint vulnerability following PoC release. Cyberattack on CEVA Logistics causes ongoing supply chain disruptions. Wesco confirms data breach following extortion claims. Akira ransomware bypasses EDR in Safe Mode. California announces AI cybersecurity fund. N2K's Lead Analyst Ethan Cook shares about cyber weapons for space. Dave Bittner sits down with Michael Leland, VP and Field CTO at Island, at Black Hat USA to discuss the growing risks of the AI supply chain. And fasten your seatbelts and ignore the fake Wi-Fi. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On today's Industry Voices, Dave Bittner sits down with Michael Leland, VP and Field CTO at Island, at Black Hat USA to discuss the growing risks of the AI supply chain, including AgentBaiting, where fake AI Skills and MCP servers were used to deliver malware, and hidden instructions that can influence AI agents. If you enjoyed the conversation, be sure to check out the full interview here. Selected Reading Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review (Qualys) Shattering the Dream - When a Job Offer Becomes a Zero-Day Attack (Check Point Research) Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability CSO Online ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact (SecurityWeek) Hackers leverage new Microsoft SharePoint exploit in attacks (BleepingComputer) The CEVA Logistics data breach is having major knock-on effects across Europe - here's what we know (TechRadar) Wesco confirms security incident after ExfilSquad claims data theft (BleepingComputer) Akira Hits Safe Mode: Ransomware Rebooting Around EDR (Huntress) California Building ‘AI Cyber Defense Fund' to Protect Critical Infrastructure From Hackers (Gizmodo) Laser weapons for space? US officials see threat, opportunity (BREAKING DEFENSE) DEF CON dingus suspected of trying to take over Delta in-flight Wi-Fi (The Register) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Microsoft's AI investments reveal a bizarre financial loop where billions pour into infrastructure, yet profits remain elusive. The hosts break down why the industry's most hyped tech might just be a high-stakes game of circular accounting. Plus, a developer has resurrected Microsoft Word for Windows 1.1a to run natively on Windows 11! Lastly, Stardock's latest utility replaces Alt + Tab for $7.99. Windows 25H2: new touchpad gestures, Windows Hello ESS improvements, Widgets improvements, Windows Search improvements, more 26H1: Windows Update calendar-based pausing, Picture Password EOL, Point in time restore, multi-camera support, user folder customization in Setup, etc. Over 420 bug fixes, but that's over 200 less than last month Follow-up on Microsoft's AI spending. It's much worse than we knew - And also much worse than we know now Yes, Microsoft Edge is going all-in on Manifest V3 Proton Drive - Now with a CLI and business features, and it's coming soon to Linux A developer ported Word for Windows 1.1 to x64 AI Gemini now has one billion users. But how many pay? - Plus the new Pixel phones are one step sideways, one step back OpenAI brings ChatGPT to Linux (!) Xbox and gaming A new Xbox Elite Series 3 controller leak shows it will have a mini display Microsoft tests new console features with Xbox Insiders Id Software brings a new episode to Quake to mark 30th anniversary! Minecraft is coming to Switch 2 Here comes GTA VI A Valve partner was hacked, Steam Machine customers warned Nintendo revenues decline 9.5 percent to ¥518 billion Tips and picks Tip of the week: View Git status directly in File Explorer App pick of the week: AltTabby RunAs Radio this week: The Content Management System Landscape with Matt Garrepy Brown liquor pick of the week: Sideshow Lincoln Straight Bottled-in-Bond Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: helixsleep.com/windows cirasync.com/Windows cachefly.com/twit
Microsoft's AI investments reveal a bizarre financial loop where billions pour into infrastructure, yet profits remain elusive. The hosts break down why the industry's most hyped tech might just be a high-stakes game of circular accounting. Plus, a developer has resurrected Microsoft Word for Windows 1.1a to run natively on Windows 11! Lastly, Stardock's latest utility replaces Alt + Tab for $7.99. Windows 25H2: new touchpad gestures, Windows Hello ESS improvements, Widgets improvements, Windows Search improvements, more 26H1: Windows Update calendar-based pausing, Picture Password EOL, Point in time restore, multi-camera support, user folder customization in Setup, etc. Over 420 bug fixes, but that's over 200 less than last month Follow-up on Microsoft's AI spending. It's much worse than we knew - And also much worse than we know now Yes, Microsoft Edge is going all-in on Manifest V3 Proton Drive - Now with a CLI and business features, and it's coming soon to Linux A developer ported Word for Windows 1.1 to x64 AI Gemini now has one billion users. But how many pay? - Plus the new Pixel phones are one step sideways, one step back OpenAI brings ChatGPT to Linux (!) Xbox and gaming A new Xbox Elite Series 3 controller leak shows it will have a mini display Microsoft tests new console features with Xbox Insiders Id Software brings a new episode to Quake to mark 30th anniversary! Minecraft is coming to Switch 2 Here comes GTA VI A Valve partner was hacked, Steam Machine customers warned Nintendo revenues decline 9.5 percent to ¥518 billion Tips and picks Tip of the week: View Git status directly in File Explorer App pick of the week: AltTabby RunAs Radio this week: The Content Management System Landscape with Matt Garrepy Brown liquor pick of the week: Sideshow Lincoln Straight Bottled-in-Bond Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: helixsleep.com/windows cirasync.com/Windows cachefly.com/twit
Microsoft's AI investments reveal a bizarre financial loop where billions pour into infrastructure, yet profits remain elusive. The hosts break down why the industry's most hyped tech might just be a high-stakes game of circular accounting. Plus, a developer has resurrected Microsoft Word for Windows 1.1a to run natively on Windows 11! Lastly, Stardock's latest utility replaces Alt + Tab for $7.99. Windows 25H2: new touchpad gestures, Windows Hello ESS improvements, Widgets improvements, Windows Search improvements, more 26H1: Windows Update calendar-based pausing, Picture Password EOL, Point in time restore, multi-camera support, user folder customization in Setup, etc. Over 420 bug fixes, but that's over 200 less than last month Follow-up on Microsoft's AI spending. It's much worse than we knew - And also much worse than we know now Yes, Microsoft Edge is going all-in on Manifest V3 Proton Drive - Now with a CLI and business features, and it's coming soon to Linux A developer ported Word for Windows 1.1 to x64 AI Gemini now has one billion users. But how many pay? - Plus the new Pixel phones are one step sideways, one step back OpenAI brings ChatGPT to Linux (!) Xbox and gaming A new Xbox Elite Series 3 controller leak shows it will have a mini display Microsoft tests new console features with Xbox Insiders Id Software brings a new episode to Quake to mark 30th anniversary! Minecraft is coming to Switch 2 Here comes GTA VI A Valve partner was hacked, Steam Machine customers warned Nintendo revenues decline 9.5 percent to ¥518 billion Tips and picks Tip of the week: View Git status directly in File Explorer App pick of the week: AltTabby RunAs Radio this week: The Content Management System Landscape with Matt Garrepy Brown liquor pick of the week: Sideshow Lincoln Straight Bottled-in-Bond Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: helixsleep.com/windows cirasync.com/Windows cachefly.com/twit
Microsoft's AI investments reveal a bizarre financial loop where billions pour into infrastructure, yet profits remain elusive. The hosts break down why the industry's most hyped tech might just be a high-stakes game of circular accounting. Plus, a developer has resurrected Microsoft Word for Windows 1.1a to run natively on Windows 11! Lastly, Stardock's latest utility replaces Alt + Tab for $7.99. Windows 25H2: new touchpad gestures, Windows Hello ESS improvements, Widgets improvements, Windows Search improvements, more 26H1: Windows Update calendar-based pausing, Picture Password EOL, Point in time restore, multi-camera support, user folder customization in Setup, etc. Over 420 bug fixes, but that's over 200 less than last month Follow-up on Microsoft's AI spending. It's much worse than we knew - And also much worse than we know now Yes, Microsoft Edge is going all-in on Manifest V3 Proton Drive - Now with a CLI and business features, and it's coming soon to Linux A developer ported Word for Windows 1.1 to x64 AI Gemini now has one billion users. But how many pay? - Plus the new Pixel phones are one step sideways, one step back OpenAI brings ChatGPT to Linux (!) Xbox and gaming A new Xbox Elite Series 3 controller leak shows it will have a mini display Microsoft tests new console features with Xbox Insiders Id Software brings a new episode to Quake to mark 30th anniversary! Minecraft is coming to Switch 2 Here comes GTA VI A Valve partner was hacked, Steam Machine customers warned Nintendo revenues decline 9.5 percent to ¥518 billion Tips and picks Tip of the week: View Git status directly in File Explorer App pick of the week: AltTabby RunAs Radio this week: The Content Management System Landscape with Matt Garrepy Brown liquor pick of the week: Sideshow Lincoln Straight Bottled-in-Bond Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: helixsleep.com/windows cirasync.com/Windows cachefly.com/twit
Microsoft's AI investments reveal a bizarre financial loop where billions pour into infrastructure, yet profits remain elusive. The hosts break down why the industry's most hyped tech might just be a high-stakes game of circular accounting. Plus, a developer has resurrected Microsoft Word for Windows 1.1a to run natively on Windows 11! Lastly, Stardock's latest utility replaces Alt + Tab for $7.99. Windows 25H2: new touchpad gestures, Windows Hello ESS improvements, Widgets improvements, Windows Search improvements, more 26H1: Windows Update calendar-based pausing, Picture Password EOL, Point in time restore, multi-camera support, user folder customization in Setup, etc. Over 420 bug fixes, but that's over 200 less than last month Follow-up on Microsoft's AI spending. It's much worse than we knew - And also much worse than we know now Yes, Microsoft Edge is going all-in on Manifest V3 Proton Drive - Now with a CLI and business features, and it's coming soon to Linux A developer ported Word for Windows 1.1 to x64 AI Gemini now has one billion users. But how many pay? - Plus the new Pixel phones are one step sideways, one step back OpenAI brings ChatGPT to Linux (!) Xbox and gaming A new Xbox Elite Series 3 controller leak shows it will have a mini display Microsoft tests new console features with Xbox Insiders Id Software brings a new episode to Quake to mark 30th anniversary! Minecraft is coming to Switch 2 Here comes GTA VI A Valve partner was hacked, Steam Machine customers warned Nintendo revenues decline 9.5 percent to ¥518 billion Tips and picks Tip of the week: View Git status directly in File Explorer App pick of the week: AltTabby RunAs Radio this week: The Content Management System Landscape with Matt Garrepy Brown liquor pick of the week: Sideshow Lincoln Straight Bottled-in-Bond Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: helixsleep.com/windows cirasync.com/Windows cachefly.com/twit
Microsoft's AI investments reveal a bizarre financial loop where billions pour into infrastructure, yet profits remain elusive. The hosts break down why the industry's most hyped tech might just be a high-stakes game of circular accounting. Plus, a developer has resurrected Microsoft Word for Windows 1.1a to run natively on Windows 11! Lastly, Stardock's latest utility replaces Alt + Tab for $7.99. Windows 25H2: new touchpad gestures, Windows Hello ESS improvements, Widgets improvements, Windows Search improvements, more 26H1: Windows Update calendar-based pausing, Picture Password EOL, Point in time restore, multi-camera support, user folder customization in Setup, etc. Over 420 bug fixes, but that's over 200 less than last month Follow-up on Microsoft's AI spending. It's much worse than we knew - And also much worse than we know now Yes, Microsoft Edge is going all-in on Manifest V3 Proton Drive - Now with a CLI and business features, and it's coming soon to Linux A developer ported Word for Windows 1.1 to x64 AI Gemini now has one billion users. But how many pay? - Plus the new Pixel phones are one step sideways, one step back OpenAI brings ChatGPT to Linux (!) Xbox and gaming A new Xbox Elite Series 3 controller leak shows it will have a mini display Microsoft tests new console features with Xbox Insiders Id Software brings a new episode to Quake to mark 30th anniversary! Minecraft is coming to Switch 2 Here comes GTA VI A Valve partner was hacked, Steam Machine customers warned Nintendo revenues decline 9.5 percent to ¥518 billion Tips and picks Tip of the week: View Git status directly in File Explorer App pick of the week: AltTabby RunAs Radio this week: The Content Management System Landscape with Matt Garrepy Brown liquor pick of the week: Sideshow Lincoln Straight Bottled-in-Bond Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: helixsleep.com/windows cirasync.com/Windows cachefly.com/twit
Referências do EpisódioZOOMSDAY - How A Security Found a Nation-State Vulnerability in Zoom in One DayAugust 2026 Security Updates Patch Tuesday - August 2026Microsoft and Adobe Patch Tuesday, August 2026 Security Update ReviewMicrosoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)Shattering the Dream – When a Job Offer Becomes a Zero-Day AttackMicrosoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-daysShieldBreak: New Windows Zero-Day Bypasses Microsoft's RoguePlanet PatchSAP Security Patch Day - August 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilitySonicWall Email Security Affected By Multiple VulnerabilitiesSonicWall GMS Security Affected By Multiple VulnerabilitiesMozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private RepoRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
August 2026 delivers the second-largest Patch Tuesday on record with nearly 400 CVEs, and Landon Miles, Jason Kikta, and Serena DiPenti sort out which ones actually matter. They start with the only actively exploited vulnerability of the month, CVE-2026-68820, a use-after-free in the Windows AFD driver that trades a race condition for SYSTEM privileges. Serena breaks down CVE-2026-62832, a User Profile Service privilege escalation that lets an attacker load another user's registry hive with no user interaction required.Then there's the perfect 10.0 in Microsoft Teams that nobody needs to patch. Jason explains how cloud CVEs ended up in Patch Tuesday releases, why a third of this month's critical count requires zero customer action, and why the industry needs a separate disclosure mechanism before monthly CVE volume becomes pure noise. The crew also covers an ugly macOS screen sharing vulnerability that allowed authentication without credentials, the Linux kernel community's shift to issuing CVEs at scale, fresh takes from Black Hat and DEF CON on AI-driven vulnerability discovery, and why frontier models are forcing patching decisions to happen by policy instead of one CVE at a time.Patch your stuff. See you next month.
Meta's AI models join the sandbox escape club. China's telecom footprint in the U.S. may be larger than expected. The White House keeps its AI safety playbook under wraps. AI coding tools introduce new GitHub risks. ENISA expands its CVE role. A critical Paperclip flaw enables code execution. Crypto wallet fears fuel phishing attacks. Researchers uncover a backdoor in Chinese-made routers. The Snowflake hacker pleads guilty. Our guest is Dustin Childs, Head of Threat Awareness of TrendAI's Zero Day Initiative, discussing the new Patch Tuesday era. AI takes your word for it. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Dustin Childs, Head of Threat Awareness of TrendAI's Zero Day Initiative, discussing the new Patch Tuesday era. Be sure to check Dustin out on the AI Security Briefing podcast. Selected Reading Meta AI Hacked External Systems During Cybersecurity Testing (SecurityWeek) Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says (The Record) Secret White House AI Safety Framework Draws Criticism (BankInfo Security) Few Federal Agencies Trust Their Own AI Agent Security (BankInfo Security) Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows (Hackread) ENISA scales up its role in the CVE Program (enisa) Critical Paperclip Flaw Allowed Admin Access, Code Execution (SecurityWeek) COLDCARD security audit phishing attack installs remote access tool (Bleeping Computer) Chinese-made Zbtlink routers have backdoor, researchers say (Reuters) Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millions (US Department of Justice) “I'm Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails (Hackread) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends
New Windows zero-day, Coca-Cola's Fairlife hit by ransomware, and a core WordPress RCE David Shipley covers a new Windows zero-day disclosure from "Nightmare Eclipse" called LegacyHive, a local privilege escalation flaw in the Windows User Profile Service that could be weaponized despite a stripped-back public release, as Microsoft investigates and sets a Patch Tuesday record with 570 fixes including two exploited zero-days. Coca-Cola suspended U.S. production at its Fairlife dairy unit after a ransomware attack, with scope still being assessed and the Food and Ag ISAC warning the sector has seen about 205 attacks this year. Abbott faces two separate breach claims: ShinyHunters alleges vishing-led SSO compromise and massive data theft from legacy systems, while Shadowbytes claims access via LabCentral credentials, which Abbott disputes as non-sensitive. The episode also highlights Conti leak revelations about healthcare targeting and details a core WordPress bug chain (WP_2Shell) enabling unauthenticated RCE, now patched in 6.9.5 and 7.0.2. 00:00 Sponsor NordLayer 00:36 Headlines Preview 01:05 Windows Zero Day LegacyHive 03:35 Record Patch Tuesday 04:22 Fairlife Ransomware Shutdown 05:49 Abbott Dual Breach Probes 08:09 Conti Leaks Healthcare Cruelty 09:33 WordPress Core RCE WP 2Shell 11:29 Wrap Up And Listener Notes 12:06 Sponsor Message NordLayer
PEBCAK Podcast: Information Security News by Some All Around Good People
Welcome to this week's episode of the PEBCAK Podcast! We've got four amazing stories this week so sit back, relax, and keep being awesome! Be sure to stick around for our Dad Joke of the Week. (DJOW) Follow us on Instagram @pebcakpodcast Please share this podcast with someone you know! It helps us grow the podcast and we really appreciate it! Simple 6 signup link https://simple6.co/r/CFUR98 Kalshi's flight-cancellation betting market Kalshi filed with the CFTC to let traders bet on airline flight-cancellation rates, even as the company fights insider-trading scandals and nearly 20 gambling-related lawsuits. https://www.inc.com/moses-jeanfrancois/kalshi-wants-to-make-money-off-of-canceled-flights-new-sky-trading-plan/91374679 Kalshi's self-certification filing would let users trade "yes/no" contracts on whether a set percentage of flights at a given airport get canceled in a window, using FlightAware data (DOT stats as backup); preemptive cancellations count, delays/diversions don't — this comes as Kalshi is also defending nearly 20 federal/state suits (including one joined by NY AG Letitia James) arguing its sports contracts are unlicensed gambling, and after it fined three Congressional candidates for insider trading in April. Trump's teleprompter operator under CFTC investigation The CFTC is investigating Trump's longtime teleprompter operator, Gabriel Perez, for allegedly using advance knowledge of the president's speeches to win big on Kalshi's "mention markets." https://www.cftc.gov/filings/ptc/ptc0714269602.pdf https://apnews.com/article/trump-teleprompter-insider-trading-kalshi-ccd6d0ec68e1eb15d100ad770d91abae Perez, who's run Trump's teleprompter since 2016 and reportedly made over $100,000 (Kalshi says north of $90,000 in frozen profits) betting on "mention markets" tied to specific words Trump would say in speeches, was put on unpaid leave after Kalshi's surveillance team flagged the trades and referred the case to the CFTC — the White House called it "a disgrace," and it marks the first known case of a sitting administration employee investigated for prediction-market insider trading. Microsoft's record-breaking July Patch Tuesday Microsoft's July 2026 Patch Tuesday fixed a record 570 flaws — including three zero-days — while a researcher dropped a new unpatched Windows PoC exploit within hours. https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2026-patch-tuesday-fixes-massive-570-flaws-3-zero-days/ https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/ https://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.html The 570-flaw haul (59 critical) included two actively-exploited zero-days — an AD FS elevation-of-privilege bug (CVE-2026-56155) and a SharePoint elevation-of-privilege flaw (CVE-2026-56164), both now on CISA's KEV list — plus a publicly disclosed BitLocker bypass; hours after patches dropped, researcher "Chaotic Eclipse" released a working PoC called LegacyHive targeting Windows' Profile Service that functions even on fully patched systems, continuing a months-long, increasingly public feud with Microsoft over disclosure timing. China's AI companion chatbot crackdown China enacted rules banning "emotional reliance" on AI companion chatbots and virtual relationships with minors, part of a broader push tied to the country's fertility concerns. https://www.wsj.com/tech/ai/china-wants-more-babiesso-its-cracking-down-on-chatbot-love-affairs-65cd6c82 The new rules require companion-chatbot makers to get regulatory pre-approval, alert a user's emergency contact if they detect an emotional crisis, and have already pushed ByteDance's Doubao, Alibaba's Qwen, and Tencent's Yuanbao to shut down custom AI-persona features; researchers cited by WSJ say Beijing's underlying worry is that people bonding with chatbots could "take them out of the marriage market," tying directly into China's fertility push. UK's midnight social media curfew for teens The UK is proposing a default midnight-to-6am social media curfew for 16- and 17-year-olds, with autoplay and infinite scroll switched off by default too. https://www.reuters.com/technology/uk-plans-default-midnight-social-media-curfew-16-17-year-olds-2026-07-14/ The curfew (opt-out, not mandatory) follows last month's full under-16 social media ban and is expected to take effect by spring 2027; a government trial of 300+ teens found it delivered the most consistent sleep benefits of the options tested, though critics like Shadow Education Secretary Laura Trott called an easily-switched-off curfew pointless. Dad Joke of the Week (DJOW) Find the hosts on LinkedIn: Chris - https://www.linkedin.com/in/chlouie/ Brian - https://www.linkedin.com/in/briandeitch-sase/
(Presented by Thinkst Canary: Most Companies find out way too late that they've been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching 'em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.) Three Buddy Problem - Episode 105: We discuss a fascinating Hugging Face breach, where an autonomous AI agent broke out of the sandboxes, moved laterally through production, and generated 17,000 alerts before anyone caught it, and how frontier model guardrails locked the defenders out of their own investigation. Plus, China's big AI showcase, Xi's pitch for open models and global distribution, a record 622-CVE Microsoft Patch Tuesday, and 13 years of dwell time in the Daxin backdoor. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu. Timestamps: 0:00 Introductory banter 3:51 Hugging Face discloses end-to-end agentic hack 9:42 Why Hugging Face couldn't use frontier models 13:28 AI guardrails hampering defenders 16:22 Codex vs Claude for real malware work 23:43 Flash attacks vs. going low and slow 30:27 Was it targeted, or did Hugging Face pwn itself? 38:11 Long-horizon coherence: what GLM 5.2 still can't do 41:27 Kimi K3 leapfrogs, and Xi's AI speech 52:15 Exceptionalism vs. distribution 1:11:05 Gold Eagle: the White House vulnerability clearinghouse 1:15:05 Microsoft patches 622 CVEs — a record 1:20:29 APT corner: Daxin resurfaces after 13 years of dwell time 1:29:45 Balochistan police, and Microsoft's attribution-free wiper 1:34:26 Denis Obrezkov, leaked Kaspersky records, and the wrong questions 1:46:01 Magnet Forensics sues over a burned iPhone bug 1:57:57 Shout-outs
This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft--662 bugs--and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced.
With open weight models fast approaching the power and utility of closed AI giants, enterprises face tough choices about privacy, sovereignty, and who they can trust. Explore why the next tech revolution might depend on which models stay truly open—and who gets to keep using them. Mozilla's inaugural 'State of Open Source AI' Report with CTO Raffi Krikorian - https://stateofopensource.ai/ Apple sues OpenAI, alleging it stole trade Secrets Google's Demis Hassabis says it's time for a global AI watchdog — led by the US Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days White House details 'Gold Eagle' clearinghouse for AI cyber threats Introducing GPT-Live From Chatbot to Command Center OpenAI may have made a fatal misstep in copyright fight with news orgs A Green Being (@a_green_being) on X What xAI Grok Build CLI actually sends to xAI - a wire-level analysis (grok 0.2.93) Musk promises purge after Grok Build caught sending entire repos to the cloud PrismML — Announcing Bonsai 27B: The First 27B-Class Model to Run on a Phone Fidji Simo steps down from leading OpenAI's AGI work due to illness OpenAI has folded safety into research again. Its head of safety is leaving. We built a vulnerability vending machine: AI tokens in, zero-days out Australia demands AI companies must produce more energy than they consume, stop 'theft' of content White House not ruling out action on open-source AI models The Hard-Line Activists Ramping Up for the War With AI - WSJ Super Dario: One More Week How to stop Claude from saying load-bearing | jola.dev History of LLMs: Complete Timeline & Evolution (1950-2026) No, You Shouldn't Avoid Fruits and Vegetables Due to Cyclospora Google creator profiles Dust jacket Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau Guest: Raffi Krikorian Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT gusto.com/machines monarch.com with code IM XBOW.com
With open weight models fast approaching the power and utility of closed AI giants, enterprises face tough choices about privacy, sovereignty, and who they can trust. Explore why the next tech revolution might depend on which models stay truly open—and who gets to keep using them. Mozilla's inaugural 'State of Open Source AI' Report with CTO Raffi Krikorian - https://stateofopensource.ai/ Apple sues OpenAI, alleging it stole trade Secrets Google's Demis Hassabis says it's time for a global AI watchdog — led by the US Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days White House details 'Gold Eagle' clearinghouse for AI cyber threats Introducing GPT-Live From Chatbot to Command Center OpenAI may have made a fatal misstep in copyright fight with news orgs A Green Being (@a_green_being) on X What xAI Grok Build CLI actually sends to xAI - a wire-level analysis (grok 0.2.93) Musk promises purge after Grok Build caught sending entire repos to the cloud PrismML — Announcing Bonsai 27B: The First 27B-Class Model to Run on a Phone Fidji Simo steps down from leading OpenAI's AGI work due to illness OpenAI has folded safety into research again. Its head of safety is leaving. We built a vulnerability vending machine: AI tokens in, zero-days out Australia demands AI companies must produce more energy than they consume, stop 'theft' of content White House not ruling out action on open-source AI models The Hard-Line Activists Ramping Up for the War With AI - WSJ Super Dario: One More Week How to stop Claude from saying load-bearing | jola.dev History of LLMs: Complete Timeline & Evolution (1950-2026) No, You Shouldn't Avoid Fruits and Vegetables Due to Cyclospora Google creator profiles Dust jacket Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau Guest: Raffi Krikorian Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT gusto.com/machines monarch.com with code IM XBOW.com
With open weight models fast approaching the power and utility of closed AI giants, enterprises face tough choices about privacy, sovereignty, and who they can trust. Explore why the next tech revolution might depend on which models stay truly open—and who gets to keep using them. Mozilla's inaugural 'State of Open Source AI' Report with CTO Raffi Krikorian - https://stateofopensource.ai/ Apple sues OpenAI, alleging it stole trade Secrets Google's Demis Hassabis says it's time for a global AI watchdog — led by the US Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days White House details 'Gold Eagle' clearinghouse for AI cyber threats Introducing GPT-Live From Chatbot to Command Center OpenAI may have made a fatal misstep in copyright fight with news orgs A Green Being (@a_green_being) on X What xAI Grok Build CLI actually sends to xAI - a wire-level analysis (grok 0.2.93) Musk promises purge after Grok Build caught sending entire repos to the cloud PrismML — Announcing Bonsai 27B: The First 27B-Class Model to Run on a Phone Fidji Simo steps down from leading OpenAI's AGI work due to illness OpenAI has folded safety into research again. Its head of safety is leaving. We built a vulnerability vending machine: AI tokens in, zero-days out Australia demands AI companies must produce more energy than they consume, stop 'theft' of content White House not ruling out action on open-source AI models The Hard-Line Activists Ramping Up for the War With AI - WSJ Super Dario: One More Week How to stop Claude from saying load-bearing | jola.dev History of LLMs: Complete Timeline & Evolution (1950-2026) No, You Shouldn't Avoid Fruits and Vegetables Due to Cyclospora Google creator profiles Dust jacket Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau Guest: Raffi Krikorian Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT gusto.com/machines monarch.com with code IM XBOW.com
With open weight models fast approaching the power and utility of closed AI giants, enterprises face tough choices about privacy, sovereignty, and who they can trust. Explore why the next tech revolution might depend on which models stay truly open—and who gets to keep using them. Mozilla's inaugural 'State of Open Source AI' Report with CTO Raffi Krikorian - https://stateofopensource.ai/ Apple sues OpenAI, alleging it stole trade Secrets Google's Demis Hassabis says it's time for a global AI watchdog — led by the US Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days White House details 'Gold Eagle' clearinghouse for AI cyber threats Introducing GPT-Live From Chatbot to Command Center OpenAI may have made a fatal misstep in copyright fight with news orgs A Green Being (@a_green_being) on X What xAI Grok Build CLI actually sends to xAI - a wire-level analysis (grok 0.2.93) Musk promises purge after Grok Build caught sending entire repos to the cloud PrismML — Announcing Bonsai 27B: The First 27B-Class Model to Run on a Phone Fidji Simo steps down from leading OpenAI's AGI work due to illness OpenAI has folded safety into research again. Its head of safety is leaving. We built a vulnerability vending machine: AI tokens in, zero-days out Australia demands AI companies must produce more energy than they consume, stop 'theft' of content White House not ruling out action on open-source AI models The Hard-Line Activists Ramping Up for the War With AI - WSJ Super Dario: One More Week How to stop Claude from saying load-bearing | jola.dev History of LLMs: Complete Timeline & Evolution (1950-2026) No, You Shouldn't Avoid Fruits and Vegetables Due to Cyclospora Google creator profiles Dust jacket Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau Guest: Raffi Krikorian Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT gusto.com/machines monarch.com with code IM XBOW.com
With open weight models fast approaching the power and utility of closed AI giants, enterprises face tough choices about privacy, sovereignty, and who they can trust. Explore why the next tech revolution might depend on which models stay truly open—and who gets to keep using them. Mozilla's inaugural 'State of Open Source AI' Report with CTO Raffi Krikorian - https://stateofopensource.ai/ Apple sues OpenAI, alleging it stole trade Secrets Google's Demis Hassabis says it's time for a global AI watchdog — led by the US Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days White House details 'Gold Eagle' clearinghouse for AI cyber threats Introducing GPT-Live From Chatbot to Command Center OpenAI may have made a fatal misstep in copyright fight with news orgs A Green Being (@a_green_being) on X What xAI Grok Build CLI actually sends to xAI - a wire-level analysis (grok 0.2.93) Musk promises purge after Grok Build caught sending entire repos to the cloud PrismML — Announcing Bonsai 27B: The First 27B-Class Model to Run on a Phone Fidji Simo steps down from leading OpenAI's AGI work due to illness OpenAI has folded safety into research again. Its head of safety is leaving. We built a vulnerability vending machine: AI tokens in, zero-days out Australia demands AI companies must produce more energy than they consume, stop 'theft' of content White House not ruling out action on open-source AI models The Hard-Line Activists Ramping Up for the War With AI - WSJ Super Dario: One More Week How to stop Claude from saying load-bearing | jola.dev History of LLMs: Complete Timeline & Evolution (1950-2026) No, You Shouldn't Avoid Fruits and Vegetables Due to Cyclospora Google creator profiles Dust jacket Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau Guest: Raffi Krikorian Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT gusto.com/machines monarch.com with code IM XBOW.com
AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience
Patch Tuesday. SonicWall urges immediate patching of actively exploited vulnerabilities. The White House launches an AI-backed vulnerability clearinghouse. The Air Force contends with widespread cybersecurity quarantines. The UK and EU blame Russia for last year's cyberattack on Poland's power grid. Meta faces accusations of AI-assisted layoffs. NATO allies collaborate in space. The Pentagon offers paid cyber apprenticeships. Spanish police dismantle a cybercrime and money-laundering network. Our guest is Clark Frogley, Global Head of Fraud at Quantexa and former FBI agent, discussing the fraud-as-a-service economy and what banks are missing. Grok Build users data is cloudy with a chance of uploads. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Clark Frogley, Global Head of Fraud at Quantexa and former FBI agent, as he is discussing the fraud-as-a-service economy and what banks are missing. Selected Reading Microsoft Patches a Record 570 Security Flaws (Krebs on Security) Adobe Patches Critical ColdFusion Vulnerabilities (SecurityWeek) Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow (SecurityWeek) ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell (SecurityWeek) Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates (SecurityWeek) SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now (Bleeping Computer) White House announces ‘Gold Eagle' AI clearinghouse for cyber vulnerabilities (Nextgov/FCW) Air Force network lockouts hit troops and civilians (Federal News Network) NATO Allies join forces to develop high-end space capabilities (NATO) EU and UK officially blame Russian spies for cyberattack on Poland's power grid (The Register) Meta used AI to target workers with medical conditions for layoffs, lawsuit claims (Reuters) Pentagon opens application window for paid cyber apprenticeships (DefenseScoop) Spanish Police take down €140 million cyber fraud ring, arrest four (Bleeping Computer) Musk promises purge after Grok Build caught sending entire repos to the cloud (The Register) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices
Microsoft's July 2026 Patch Tuesday just shattered records with hundreds of bug fixes, and AI is the force behind the surge. Are we witnessing the beginning of a safer Windows, or is this flood of vulnerabilities the new normal? Plus, Tony Redmond's epic book has a new name (was Office 365 for IT Pros) and is now a bundle of four books. Windows Patch Tuesday is here! Point in Time Restore, quieter Widgets, Windows Update improvements, Screen tint, and more The biggest Patch Tuesday in history, by far: a record 570 fixes for security flaws, and a huge 3X increase from the then-record flaws fixed last month. (Some say the number is 622. Math is hard.) And this is on top of 468 Microsoft Edge/Chromium flaws that were fixed by Google this month too. Yikes. Microsoft discusses how it's improving Windows security with AI Windows Insider Program: Improved Windows Search is next on the docket, heading out to Experimental this week. Question: When do these things hit stable? Microsoft releases Snapdragon X2 versions of its Surface for Business Pro and Laptop models AI Apple sues OpenAI for stealing trade secrets Surprised there was no talk of "thermonuclear war" OpenAI's response is hilarious, and it is already prepping its first hardware device OpenAI just announced the rumored super app, which is a combination of ChatGPT, Work, Codex, and an in-app web browser, which replaces the standalone Atlas web browser. Also, GPT-5.6. In keeping with recent history, Anthropic announced its in-app web browser for Claude less than 24 hours later Reminder that Microsoft acknowledged that it, too, is working on an AI super app at Build Apple releases public betas of its OS 27 releases and, shocker, Siri is really good Now Spotify has an AI chatbot so I can tell it how much I hate Spotify Xbox and gaming Obsidian is working on a new Fallout game, duh. A quiet time after last week's terribleness Tips and picks Tip of the week: Microsoft 365 for IT Pros (2027 edition) is here! App pick of the week: MusicBee RunAs Radio this week: Finding Security Vulnerabilities using AI with Sami Laiho Brown liquor pick of the week: Sanctuary Single Malt Whisky Reserve Edition Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT helixsleep.com/windows
Microsoft's July 2026 Patch Tuesday just shattered records with hundreds of bug fixes, and AI is the force behind the surge. Are we witnessing the beginning of a safer Windows, or is this flood of vulnerabilities the new normal? Plus, Tony Redmond's epic book has a new name (was Office 365 for IT Pros) and is now a bundle of four books. Windows Patch Tuesday is here! Point in Time Restore, quieter Widgets, Windows Update improvements, Screen tint, and more The biggest Patch Tuesday in history, by far: a record 570 fixes for security flaws, and a huge 3X increase from the then-record flaws fixed last month. (Some say the number is 622. Math is hard.) And this is on top of 468 Microsoft Edge/Chromium flaws that were fixed by Google this month too. Yikes. Microsoft discusses how it's improving Windows security with AI Windows Insider Program: Improved Windows Search is next on the docket, heading out to Experimental this week. Question: When do these things hit stable? Microsoft releases Snapdragon X2 versions of its Surface for Business Pro and Laptop models AI Apple sues OpenAI for stealing trade secrets Surprised there was no talk of "thermonuclear war" OpenAI's response is hilarious, and it is already prepping its first hardware device OpenAI just announced the rumored super app, which is a combination of ChatGPT, Work, Codex, and an in-app web browser, which replaces the standalone Atlas web browser. Also, GPT-5.6. In keeping with recent history, Anthropic announced its in-app web browser for Claude less than 24 hours later Reminder that Microsoft acknowledged that it, too, is working on an AI super app at Build Apple releases public betas of its OS 27 releases and, shocker, Siri is really good Now Spotify has an AI chatbot so I can tell it how much I hate Spotify Xbox and gaming Obsidian is working on a new Fallout game, duh. A quiet time after last week's terribleness Tips and picks Tip of the week: Microsoft 365 for IT Pros (2027 edition) is here! App pick of the week: MusicBee RunAs Radio this week: Finding Security Vulnerabilities using AI with Sami Laiho Brown liquor pick of the week: Sanctuary Single Malt Whisky Reserve Edition Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT helixsleep.com/windows
AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience
AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience
Microsoft's July 2026 Patch Tuesday just shattered records with hundreds of bug fixes, and AI is the force behind the surge. Are we witnessing the beginning of a safer Windows, or is this flood of vulnerabilities the new normal? Plus, Tony Redmond's epic book has a new name (was Office 365 for IT Pros) and is now a bundle of four books. Windows Patch Tuesday is here! Point in Time Restore, quieter Widgets, Windows Update improvements, Screen tint, and more The biggest Patch Tuesday in history, by far: a record 570 fixes for security flaws, and a huge 3X increase from the then-record flaws fixed last month. (Some say the number is 622. Math is hard.) And this is on top of 468 Microsoft Edge/Chromium flaws that were fixed by Google this month too. Yikes. Microsoft discusses how it's improving Windows security with AI Windows Insider Program: Improved Windows Search is next on the docket, heading out to Experimental this week. Question: When do these things hit stable? Microsoft releases Snapdragon X2 versions of its Surface for Business Pro and Laptop models AI Apple sues OpenAI for stealing trade secrets Surprised there was no talk of "thermonuclear war" OpenAI's response is hilarious, and it is already prepping its first hardware device OpenAI just announced the rumored super app, which is a combination of ChatGPT, Work, Codex, and an in-app web browser, which replaces the standalone Atlas web browser. Also, GPT-5.6. In keeping with recent history, Anthropic announced its in-app web browser for Claude less than 24 hours later Reminder that Microsoft acknowledged that it, too, is working on an AI super app at Build Apple releases public betas of its OS 27 releases and, shocker, Siri is really good Now Spotify has an AI chatbot so I can tell it how much I hate Spotify Xbox and gaming Obsidian is working on a new Fallout game, duh. A quiet time after last week's terribleness Tips and picks Tip of the week: Microsoft 365 for IT Pros (2027 edition) is here! App pick of the week: MusicBee RunAs Radio this week: Finding Security Vulnerabilities using AI with Sami Laiho Brown liquor pick of the week: Sanctuary Single Malt Whisky Reserve Edition Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT helixsleep.com/windows
AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience
Microsoft's July 2026 Patch Tuesday just shattered records with hundreds of bug fixes, and AI is the force behind the surge. Are we witnessing the beginning of a safer Windows, or is this flood of vulnerabilities the new normal? Plus, Tony Redmond's epic book has a new name (was Office 365 for IT Pros) and is now a bundle of four books. Windows Patch Tuesday is here! Point in Time Restore, quieter Widgets, Windows Update improvements, Screen tint, and more The biggest Patch Tuesday in history, by far: a record 570 fixes for security flaws, and a huge 3X increase from the then-record flaws fixed last month. (Some say the number is 622. Math is hard.) And this is on top of 468 Microsoft Edge/Chromium flaws that were fixed by Google this month too. Yikes. Microsoft discusses how it's improving Windows security with AI Windows Insider Program: Improved Windows Search is next on the docket, heading out to Experimental this week. Question: When do these things hit stable? Microsoft releases Snapdragon X2 versions of its Surface for Business Pro and Laptop models AI Apple sues OpenAI for stealing trade secrets Surprised there was no talk of "thermonuclear war" OpenAI's response is hilarious, and it is already prepping its first hardware device OpenAI just announced the rumored super app, which is a combination of ChatGPT, Work, Codex, and an in-app web browser, which replaces the standalone Atlas web browser. Also, GPT-5.6. In keeping with recent history, Anthropic announced its in-app web browser for Claude less than 24 hours later Reminder that Microsoft acknowledged that it, too, is working on an AI super app at Build Apple releases public betas of its OS 27 releases and, shocker, Siri is really good Now Spotify has an AI chatbot so I can tell it how much I hate Spotify Xbox and gaming Obsidian is working on a new Fallout game, duh. A quiet time after last week's terribleness Tips and picks Tip of the week: Microsoft 365 for IT Pros (2027 edition) is here! App pick of the week: MusicBee RunAs Radio this week: Finding Security Vulnerabilities using AI with Sami Laiho Brown liquor pick of the week: Sanctuary Single Malt Whisky Reserve Edition Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT helixsleep.com/windows
This week, Microsoft has just released the biggest Patch Tuesday in its history with 570 security vulnerabilities fixed, AI is forcing IT teams to rethink how quickly they deploy updates, and we're seeing yet another reminder that patching isn't always straightforward when one Windows update is already being blocked on some Dell systems. We'll also look at new attacks targeting password manager users, another major third-party breach, more fallout from Broadcom's VMware strategy, some interesting AI news from OpenAI and Anthropic, and much more. Reference Links: https://www.rorymon.com/blog/a-record-breaking-570-flaws-and-microsoft-wants-you-to-patch-faster/
Microsoft's July 2026 Patch Tuesday just shattered records with hundreds of bug fixes, and AI is the force behind the surge. Are we witnessing the beginning of a safer Windows, or is this flood of vulnerabilities the new normal? Plus, Tony Redmond's epic book has a new name (was Office 365 for IT Pros) and is now a bundle of four books. Windows Patch Tuesday is here! Point in Time Restore, quieter Widgets, Windows Update improvements, Screen tint, and more The biggest Patch Tuesday in history, by far: a record 570 fixes for security flaws, and a huge 3X increase from the then-record flaws fixed last month. (Some say the number is 622. Math is hard.) And this is on top of 468 Microsoft Edge/Chromium flaws that were fixed by Google this month too. Yikes. Microsoft discusses how it's improving Windows security with AI Windows Insider Program: Improved Windows Search is next on the docket, heading out to Experimental this week. Question: When do these things hit stable? Microsoft releases Snapdragon X2 versions of its Surface for Business Pro and Laptop models AI Apple sues OpenAI for stealing trade secrets Surprised there was no talk of "thermonuclear war" OpenAI's response is hilarious, and it is already prepping its first hardware device OpenAI just announced the rumored super app, which is a combination of ChatGPT, Work, Codex, and an in-app web browser, which replaces the standalone Atlas web browser. Also, GPT-5.6. In keeping with recent history, Anthropic announced its in-app web browser for Claude less than 24 hours later Reminder that Microsoft acknowledged that it, too, is working on an AI super app at Build Apple releases public betas of its OS 27 releases and, shocker, Siri is really good Now Spotify has an AI chatbot so I can tell it how much I hate Spotify Xbox and gaming Obsidian is working on a new Fallout game, duh. A quiet time after last week's terribleness Tips and picks Tip of the week: Microsoft 365 for IT Pros (2027 edition) is here! App pick of the week: MusicBee RunAs Radio this week: Finding Security Vulnerabilities using AI with Sami Laiho Brown liquor pick of the week: Sanctuary Single Malt Whisky Reserve Edition Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT helixsleep.com/windows
570 vulnerabilities. That's July's Patch Tuesday count, nearly triple last month and a record by a wide margin. Jason Kikta is joined by host Landon Miles and offensive-security researcher Serena DiPenti for the July 2026 rundown:An Active Directory Federation Services bug (CVE-2026-56155) already exploited in the wild, rated a deceptively low 7.8A 9.8 DHCP client flaw (CVE-2026-49181) that reaches every Windows endpoint on the networkAn RDP bug you can shut down with a single setting, no patch requiredA SharePoint deserialization flaw (CVE-2026-50522) reachable by anyone with site-owner accessA 9.9 Hyper-V escape that lets one compromised VM take the whole hostA BitLocker bypass (6.1) worth knowing if you manage laptops in the fieldPlus why hacker summer camp turns every July into a bug dump, and what a 570-CVE release says about how much AI is really driving vulnerability discovery.
Windows 12 is stalled and the real reasons go far beyond software. The conversation unpacks how soaring hardware prices, AI chaos, and market confusion have Microsoft in a holding pattern. Also, Paul finally took a sledgehammer to the subscription services he pays for, and more is on the way. Plus, one of Paul's favorite Markdown editors supports authorship on Windows now and an integrated Search/Outline view on Mac, iPad, and iPad.Windows Week D is here with a preview of July's Patch Tuesday Point-in-time restore is now generally available in Windows 11, sort of Quieter widgets, which is nice! Plus, Screen tint, Windows Update improvements, more Tied to this, sort of, something wonderful is happening to the Windows 11 Field Guide Five new builds, plus some 26H2 news (and still no news about what 26H1 becomes, see below...) Mostly minor fit-and-finish improvements So... what about Windows 12? The history is interesting, and Copilot+ PC was what Paul originally thought Windows 12 would be. But now we're talking agentic capabilities that will handle local/cloud/hybrid orchestration per last week's discussion, and maybe that will be it. We knew that Surface Laptop and Surface Pro would come in 8 GB configurations. But they're available now with just 256 GB of storage and the prices are $950 and $850 and up, respectively. Plus all the usual Surface limitations, like one color choice. (16 GB is $1150 and $1050, respectively, so $300 more.) Once again, it's time to just get a Lenovo IdeaPad Slim 5x for $850. It has 16 GB of RAM and 512 GB of storage and is awesome. Tim Cook just admitted that Apple will raise hardware prices because of the component crisis. If this is hitting Apple hard, the rest of the industry is screwed. AI Cory Doctorow's new book is out and let's just say his new neologism isn't as catchy as enshittification Reverse centaur (groan) Surprisingly centrist view on the pros and cons of AI Highlights the Microsoft financial shenanigans I point out every quarter: Microsoft "invests" $10 billion of "tokens" in OpenAI, but there's no volume discount and Microsoft books the transaction as $10 billion in AI revenues as OpenAI simply uses its infrastructure. It gave $10 billion to OpenAI so that it could spend $10 billion on Azure. Google Home Speaker is the Gemini speaker and it's now shipping to first customers as Google discontinues Nest Audio and Nest Mini speakers. Can we trust this company with hardware? And why are there no Apple or Google home theater setups? Adobe brings its creative agent to Firefly and the biggest apps in Creative Cloud XBOX & gaming No movement yet on the massive changes we expect in XBOX soon Microsoft has "dozens" of gaming IP-based movies and TV shows in the works XBOX Insiders can now test updates to Gamertags, Game Hub, and Wish List Call of Duty: Black Ops 1 and 2 are being ported to modern PS consoles. Sadly, not remakes or remasters. GTA VI will cost $79.99 and up - Arrives in November, can preorder on June 25 Steam Machine to cost $1049 and up, and that's with no controller Tips & picks Tip of the week: How to save $100 a month App pick of the week: iA Writer RunAs Radio this week: Securing Developers with Tanya Janca Brown liquor pick of the week: Glen Breton Rare 10 These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/989 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Sponsor: webroot.com/twit
Windows 12 is stalled and the real reasons go far beyond software. The conversation unpacks how soaring hardware prices, AI chaos, and market confusion have Microsoft in a holding pattern. Also, Paul finally took a sledgehammer to the subscription services he pays for, and more is on the way. Plus, one of Paul's favorite Markdown editors supports authorship on Windows now and an integrated Search/Outline view on Mac, iPad, and iPad.Windows Week D is here with a preview of July's Patch Tuesday Point-in-time restore is now generally available in Windows 11, sort of Quieter widgets, which is nice! Plus, Screen tint, Windows Update improvements, more Tied to this, sort of, something wonderful is happening to the Windows 11 Field Guide Five new builds, plus some 26H2 news (and still no news about what 26H1 becomes, see below...) Mostly minor fit-and-finish improvements So... what about Windows 12? The history is interesting, and Copilot+ PC was what Paul originally thought Windows 12 would be. But now we're talking agentic capabilities that will handle local/cloud/hybrid orchestration per last week's discussion, and maybe that will be it. We knew that Surface Laptop and Surface Pro would come in 8 GB configurations. But they're available now with just 256 GB of storage and the prices are $950 and $850 and up, respectively. Plus all the usual Surface limitations, like one color choice. (16 GB is $1150 and $1050, respectively, so $300 more.) Once again, it's time to just get a Lenovo IdeaPad Slim 5x for $850. It has 16 GB of RAM and 512 GB of storage and is awesome. Tim Cook just admitted that Apple will raise hardware prices because of the component crisis. If this is hitting Apple hard, the rest of the industry is screwed. AI Cory Doctorow's new book is out and let's just say his new neologism isn't as catchy as enshittification Reverse centaur (groan) Surprisingly centrist view on the pros and cons of AI Highlights the Microsoft financial shenanigans I point out every quarter: Microsoft "invests" $10 billion of "tokens" in OpenAI, but there's no volume discount and Microsoft books the transaction as $10 billion in AI revenues as OpenAI simply uses its infrastructure. It gave $10 billion to OpenAI so that it could spend $10 billion on Azure. Google Home Speaker is the Gemini speaker and it's now shipping to first customers as Google discontinues Nest Audio and Nest Mini speakers. Can we trust this company with hardware? And why are there no Apple or Google home theater setups? Adobe brings its creative agent to Firefly and the biggest apps in Creative Cloud XBOX & gaming No movement yet on the massive changes we expect in XBOX soon Microsoft has "dozens" of gaming IP-based movies and TV shows in the works XBOX Insiders can now test updates to Gamertags, Game Hub, and Wish List Call of Duty: Black Ops 1 and 2 are being ported to modern PS consoles. Sadly, not remakes or remasters. GTA VI will cost $79.99 and up - Arrives in November, can preorder on June 25 Steam Machine to cost $1049 and up, and that's with no controller Tips & picks Tip of the week: How to save $100 a month App pick of the week: iA Writer RunAs Radio this week: Securing Developers with Tanya Janca Brown liquor pick of the week: Glen Breton Rare 10 These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/989 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Sponsor: webroot.com/twit
Windows 12 is stalled and the real reasons go far beyond software. The conversation unpacks how soaring hardware prices, AI chaos, and market confusion have Microsoft in a holding pattern. Also, Paul finally took a sledgehammer to the subscription services he pays for, and more is on the way. Plus, one of Paul's favorite Markdown editors supports authorship on Windows now and an integrated Search/Outline view on Mac, iPad, and iPad.Windows Week D is here with a preview of July's Patch Tuesday Point-in-time restore is now generally available in Windows 11, sort of Quieter widgets, which is nice! Plus, Screen tint, Windows Update improvements, more Tied to this, sort of, something wonderful is happening to the Windows 11 Field Guide Five new builds, plus some 26H2 news (and still no news about what 26H1 becomes, see below...) Mostly minor fit-and-finish improvements So... what about Windows 12? The history is interesting, and Copilot+ PC was what Paul originally thought Windows 12 would be. But now we're talking agentic capabilities that will handle local/cloud/hybrid orchestration per last week's discussion, and maybe that will be it. We knew that Surface Laptop and Surface Pro would come in 8 GB configurations. But they're available now with just 256 GB of storage and the prices are $950 and $850 and up, respectively. Plus all the usual Surface limitations, like one color choice. (16 GB is $1150 and $1050, respectively, so $300 more.) Once again, it's time to just get a Lenovo IdeaPad Slim 5x for $850. It has 16 GB of RAM and 512 GB of storage and is awesome. Tim Cook just admitted that Apple will raise hardware prices because of the component crisis. If this is hitting Apple hard, the rest of the industry is screwed. AI Cory Doctorow's new book is out and let's just say his new neologism isn't as catchy as enshittification Reverse centaur (groan) Surprisingly centrist view on the pros and cons of AI Highlights the Microsoft financial shenanigans I point out every quarter: Microsoft "invests" $10 billion of "tokens" in OpenAI, but there's no volume discount and Microsoft books the transaction as $10 billion in AI revenues as OpenAI simply uses its infrastructure. It gave $10 billion to OpenAI so that it could spend $10 billion on Azure. Google Home Speaker is the Gemini speaker and it's now shipping to first customers as Google discontinues Nest Audio and Nest Mini speakers. Can we trust this company with hardware? And why are there no Apple or Google home theater setups? Adobe brings its creative agent to Firefly and the biggest apps in Creative Cloud XBOX & gaming No movement yet on the massive changes we expect in XBOX soon Microsoft has "dozens" of gaming IP-based movies and TV shows in the works XBOX Insiders can now test updates to Gamertags, Game Hub, and Wish List Call of Duty: Black Ops 1 and 2 are being ported to modern PS consoles. Sadly, not remakes or remasters. GTA VI will cost $79.99 and up - Arrives in November, can preorder on June 25 Steam Machine to cost $1049 and up, and that's with no controller Tips & picks Tip of the week: How to save $100 a month App pick of the week: iA Writer RunAs Radio this week: Securing Developers with Tanya Janca Brown liquor pick of the week: Glen Breton Rare 10 These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/989 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Sponsor: webroot.com/twit
This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records while adversaries and defenders race to outpace each other. The conversation gets real about whether AI is fixing our broken software or just making attacks easier for everyone. Rootkits found in more than 400 ArchLinux User Repository packages. The US government requests Anthropic to remove Mythos and Fable. CISA responds to AI-driven attacks with new patching requirements. NPM to switch to more secure install defaults. Will it help. Our listeners react to last week's PHP commentary. June shows that AI has arrived for vulnerability discover Show Notes - https://www.grc.com/sn/SN-1083-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: meter.com/securitynow canary.tools/twit - use code: TWIT joindeleteme.com/twit-biz zscaler.com/security adaptivesecurity.com
Is AI or “Nightmare Eclipse” the cause of the huge patch drop? Plus an $80 foldable mouse you'll love.Starring Tom Merritt and Sarah Lane.Links to stories discussed in this episode can be found here. Hosted on Acast. See acast.com/privacy for more information.
Patch Tuesday goes big. Congress looks to harden critical infrastructure. A new Windows zero-day drops. Mobile AI creates security blind spots. AI agents fall for phishing. Browser extensions expose millions. Spammers hide behind Google Cloud Storage. CISA crowns its cyber champions. Our guest is Joe Sykora, CEO from Coro, discussing the MSP space and how to address it. Relentless robocalls retreat. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On today's Industry Voices segment, we are joined by Joe Sykora, CEO from Coro, discussing the MSP space and how to address it. If you enjoyed this conversation be sure to check out the full interview here. Selected Reading Microsoft's biggest-ever Patch Tuesday fixes 206 bugs, including 3 zero-days (Malwarebytes) ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact (SecurityWeek) Adobe Patches 123 Vulnerabilities (SecurityWeek) Warner proposes overhaul of critical infrastructure cyber plans as AI threats rise (Nextgov/FCW) New Windows Zero-Day Exploit 'RoguePlanet' Released (SecurityWeek) Lookout Study Reveals 93% of CISOs Blinded by False AI Confidence as 59% of Mobile AI Traffic Flows "Dark" (Lookout) Phishing for Lobsters: How We Tricked OpenClaw into Spilling Secrets (Varonis) MaXSS & Spyder: How two Chrome extensions allow websites to compromise over 10 million browsers (Rebora) How Spammers Are Hiding Behind Google and the New York Times (Comparitech) CISA names winners of seventh annual President's Cup cybersecurity competition (Industrial Cyber) U.S. Consumers Received Just Over 4.1 Billion Robocalls in May, According to YouMail Robocall Index (PR Newswire) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices