Attackers are combining two newly disclosed MikroTik RouterOS vulnerabilities, an SSH authentication bypass (CVE-2026-67276) and a privilege escalation bug (CVE-2026-86060), to seize full control of routers with SSH exposed to the internet. Poland's CERT, which found the flaws with AI assistance, calls the combined exploit 'MikroTrick' and confirms it is being used in real-world attacks. MikroTik patched the issues in RouterOS versions released September 3, alongside a related bandwidth-test flaw that can leak memory or crash devices.
The RIAA reported that US recorded music revenue rose 6.9% in H1 2026 versus H1 2025, with physical formats up 25.9%—vinyl grew 17.7% and CDs jumped 58.6%. Streaming still dominates overall revenue at $4.9 billion, but the outsized physical growth stands out amid rising anger over digital ownership issues.
Huawei launched the Mate XT 2 in China, its third trifold phone, switching to an inward-folding design similar to Samsung's Galaxy Z TriFold rather than the accordion style of prior models. The device also introduces a privacy OLED screen, akin to the one on Samsung's Galaxy S26 Ultra, that narrows viewing angles to shield content from onlookers when enabled as a paid option.
ConnectWise disclosed a new security flaw in its ScreenConnect remote access platform affecting file transfer behavior in both cloud and on-premises deployments. The vulnerability has no CVE identifier yet and no official patch, though the company says a fix is coming later this week. In the meantime, ConnectWise published manual mitigation steps requiring administrators to disable file transfer permissions across user roles.
Google Photos is expanding two features: a virtual wardrobe tool that scans users' photos to catalog clothing items and suggest outfit combinations, complete with an AI-generated try-on preview, and Manual Photo Stacks, which lets Android users group selected photos together for easier organization. The wardrobe tool had a slow initial rollout since April but is now being pushed more broadly across the US, while Manual Photo Stacks finally arrives on Android after being available on iOS for nearly a year.
A fresh round of testing pits the Radeon RX 9070 XT against the GeForce RTX 5070, replacing the earlier RTX 5070 Ti comparison now that pricing has shifted. The 9070 XT sells for roughly $730-$750 while the RTX 5070 starts near $800, giving Nvidia's card about a 9% price premium. Across games like 007 First Light, the 9070 XT posted performance leads of 36% to 46% over the RTX 5070.
The Swiss Federal Chancellery is spending CHF 9 million to test the openDesk open-source suite as a replacement for Microsoft 365 across 3,000 federal employees, roughly 7% of the workforce, with migration targeted for completion by end of 2027. The pilot follows a proof-of-concept with 172 employees that rated document editing and email positively but flagged limitations in large-scale video conferencing, and it will run alongside Microsoft 365 rather than replace it immediately.
A blog operator built network and header-based rules on a Cloudflare Worker to sort incoming traffic without relying on JavaScript, and found that 277 of 372 requests bearing browser User-Agent strings were actually not genuine browsers—74.5% of the total. Comparing this edge-based counting with Cloudflare Web Analytics page loads over two days revealed persistent gaps between the two measurement methods, exposing bugs in the HTML-acceptance check and missing provenance markers, both since fixed.
Ahead of Apple's September 9 event, where the company is expected to unveil the iPhone 18 Pro, Pro Max and a foldable iPhone Ultra, a rumored dark cherry red color option for the Pro models has inspired a fan-made AI video ad. The creator clearly labeled the clip as AI-generated rather than presenting it as a leak.
A veteran branding professional contends that many well-crafted marketing campaigns fail not because of poor creative work, but because employees deliver poor service once customers arrive. The piece argues that increased foot traffic from ad campaigns often doesn't convert into sales when staff aren't engaged or properly trained to serve those customers.
Emerging thinking on productivity challenges the old model of high performers sacrificing sleep, family, and hobbies to maximize work output. Instead, the ability to rest deliberately is being framed as equally important as the ability to focus, forming a key part of sustained achievement.
A new open-source tool called Engrim gives AI coding assistants persistent, project-level memory stored in a local SQLite database rather than tied to any single vendor's cloud. It lets developers switch between tools like Claude Code, Cursor, Windsurf and Google Antigravity mid-project while retaining architectural decisions and constraints, using a hybrid search combining SQLite FTS5 keyword search with lightweight vector embeddings. The creator reports it was validated over 105 sessions on a 50,000-line trading codebase with zero regressions and no loss of context across model switches.
GoKawiil