A bug reported to Rootshell revealed that ICQ's authentication servers could be accessed using any account's UIN paired with a 9-character password, bypassing the real password entirely. The developer of a Linux ICQ client discovered the flaw after a user mistyped a password but was still logged in, tracing it to a buffer overflow in Mirabilis's server-side password check. Rootshell confirmed the bug and published exploit details, including sample code and a 'password' like '123456789' that overruns the 8-character buffer.
opennet.ru
· 2026-10-13
Google's Inactive Account Manager, launched in 2013, lets users set their account to delete or forward data to up to 10 trusted contacts after three, six or 12 months of inactivity. Without this setup, Google automatically flags accounts for deletion after two years of inactivity, detected via sign-ins or app usage. Family members can also contact Google directly to request deactivation of a deceased relative's account early, though they won't receive any of the account's data.
engadget.com
· 2026-10-12
A reviewer testing new Android-powered Googlebooks from Asus and HP describes setup as fast and simple, taking just minutes to register biometrics, sign into a Google account, and import apps from a phone. But after setup, connecting the laptop to a phone for features like file sharing and app casting proved unreliable, often requiring repeated toggling of settings, restarts, and reconnecting after switching Wi-Fi networks.
theverge.com
· 2026-10-12
Apple's support materials outline steps users should take before changing the country or region tied to their Apple Account, including re-downloading purchased apps, music, books and videos beforehand since content availability varies by region. Users are also advised to have a valid local payment method ready, as Apple requires one to confirm the change, and may need to wait until physically relocating if no compatible payment option is available.
engadget.com
· 2026-10-10
A security researcher found that Telegram Desktop's local inter-process communication, used to hand clicked links to an already-running instance, fails to escape its command separator character. This let a maliciously crafted tg:// link be split into multiple injected commands, one of which could trigger an internal scheme that reads a named file and sends it to a chat without asking the user for confirmation. The flaw, tracked as CVE-2026-107181 and rated 8.1/High, was confirmed on Windows up to version 6.9.3 and fixed in Telegram Desktop 7.2.9.
beaksec.github.io
· 2026-10-10
Many high-income individuals are choosing to cut back on maxing out their 401(k) plans, reallocating funds to brokerage accounts and IRAs for greater flexibility and control. For example, Charlie Dice plans to lower her contributions and access her savings earlier, challenging traditional retirement saving advice. This trend reflects a shift in investment priorities among affluent savers seeking more options and early access to funds.
entrepreneur.com
· 2026-10-07
A developer describes multiple attempts to post a link to their open-source GitHub project on Reddit, with each new account being banned for reasons ranging from posting links too early, to writing comments too quickly, to having posts flagged as AI-generated. Even creating a dedicated community for the project resulted in deletion and a ban. The writer says moderators and other users eventually advised accumulating around 1,000 karma points before attempting to post any links.
orchidfiles.com
· 2026-10-07
Security firm Island discovered a phishing campaign using fake ChatGPT, Gemini, Claude and Perplexity sites that target advertising agency staff and media buyers. The sites exploit the recent launch of Meta's Muse AI agent and use browser-in-browser techniques to fake Google login windows, capturing credentials and MFA codes to hijack high-value ad accounts.
bleepingcomputer.com
· 2026-10-06
Daniel Rhyne, a former infrastructure engineer, received a 32-month prison sentence after remotely accessing his employer's network, locking thousands of devices, deleting admin accounts, and demanding a ransom. His actions included changing passwords, shutting down servers, and sending threatening emails to co-workers in late 2023.
bleepingcomputer.com
· 2026-10-06
Online researchers claim to have traced two earlier X accounts, both using the handle @hilbertspaess, to Jacob Coxon, the former Anthropic employee who recently warned AI could threaten humanity. The archived posts, dating from 2021 to 2024, include comments dismissing climate change concerns and mocking efforts to protect the rainforest. One investigator compiled the tweets into a searchable database.
futurism.com
· 2026-10-01
Apple has partnered with the American Academy of Pediatrics to release a guide aimed at helping families manage children's screen time. The guide outlines six steps, including setting up Child Accounts, configuring app and website safety settings, scheduling device use, and managing who kids can communicate with. It follows Apple's recent rollout of new child safety features in iOS 27.
9to5mac.com
· 2026-09-29
Sony's Japan store is limiting PS5 Pro purchase lottery entries to buyers with a Japan-registered PSN account who have logged at least 60 hours of play on PS4 or PS5 in the past two years. Applications open October 7, with sales to lottery winners starting October 26 and a purchase deadline of November 2 at MSRP.
tomshardware.com
· 2026-09-29
GoKawiil