Researchers cited by BleepingComputer found attackers exploiting known vulnerabilities in D-Link ShareCenter NAS, Ubiquiti UniFi Video NVR, and SAP NetWeaver Visual Composer to install the Pawns.app bandwidth-sharing software on compromised devices. Hikvision and Dahua DVR/NVR units were also targeted, though the exact flaws used weren't identified, and in some cases attackers set up SSH key authentication to retain persistent access.
it.slashdot.org
· 2026-10-16
Microsoft has rolled out an updated Photos app for Windows 11 Insiders featuring a new native editor and viewer, plus a redesigned gallery. The editor adds tools like Crop, Enhance, Repair, Stylize, and a new Relight feature for fixing lighting, alongside AI-powered object removal and support for HDR, HEIC, and WebP formats. Microsoft claims the editor launches 25% faster and the viewer opens photos up to 30% faster for HEIC files, with wider release to all users expected later this year.
techspot.com
· 2026-10-16
Burger King Japan disclosed that unauthorized third parties accessed a server managing its official app's member data between October 2 and 7, 2026, exposing 11.18 million records including names, birth dates, gender, emails, phone numbers and order history. The company said it blocked the intrusion upon discovery, completed a follow-up investigation on October 13, and reported the incident to Japan's Personal Information Protection Commission.
bleepingcomputer.com
· 2026-10-16
Apple's iOS 18.2 update introduced a Categories feature in the Mail app that automatically sorts incoming messages into Primary, Transactions, Updates and Promotions tabs. The feature is enabled by default, but users can turn it off to restore the app's previous single-inbox layout, and can manually reassign emails that land in the wrong category.
cnet.com
· 2026-10-16
Microsoft says its October KB5127648 security update for Windows 11, version 24H2 and later, can leave the Smart App Control option grayed out so it can't be switched on if it was previously off. Devices that already had Smart App Control enabled are unaffected. No permanent fix exists yet, but Microsoft has published registry edits and Group Policy settings administrators can use to restore the toggle.
bleepingcomputer.com
· 2026-10-16
Sill is a free Mac menu bar utility that mirrors a single window or the entire desktop to an iPhone or iPad, letting users interact with it via touch, trackpad, keyboard or Apple Pencil. It captures the screen with ScreenCaptureKit, encodes video using the Mac's hardware HEVC encoder, and sends input back over the same network, USB, Direct Wireless Connection, or a personal VPN like Tailscale, without any account or intermediary server.
github.com
· 2026-10-16
Google has begun rolling out its Universal Cart feature in the US, letting shoppers track products from multiple retailers in one saved cart within Search and the Gemini app. The tool monitors over 60 billion listings for price drops and stock alerts, suggests promotions and optimal credit cards via Google Wallet, and lets users check out through the Universal Commerce Protocol using Google Pay or complete purchases on the merchant's site. The feature, previewed at Google I/O in May, launches just before Black Friday.
cnet.com
· 2026-10-15
Sonos has released version 27.2 of its app, updating to version 90.1 on iOS to support Apple's upcoming foldable iPhone Duo in both folded and unfolded states. The company announced the release on Reddit, noting it is available now via the App Store and can be installed manually. It follows the broader Sonos 27 update, which redesigned the app and added speaker features.
9to5mac.com
· 2026-10-15
A contributor to Entrepreneur, founder of the self-improvement app RiseGuide, argues that execution rather than originality determines product success. The piece cites Webvan's 1999 collapse despite raising over a billion dollars, and Sam Walton's admittedly copied Walmart concept, as evidence that strong delivery and distribution beat novel ideas. RiseGuide, which the author says has surpassed one million downloads and serves over 400,000 monthly users, is presented as a case built on execution rather than a unique concept.
entrepreneur.com
· 2026-10-15
Google has launched Universal Cart, a feature first shown at Google I/O in May, for US users. It lets shoppers save products found through Search or the Gemini app into one cart across multiple retailers, with alerts for price drops and restocks, and payment suggestions based on card perks and promo codes. Checkout runs through Google's Universal Commerce Protocol, an open standard it introduced earlier this year for linking AI agents with retailers.
techcrunch.com
· 2026-10-15
GreyNoise says it found at least 143 compromised devices across 34 countries silently enrolled in the Pawns.app residential proxy network without owner consent. The attacker exploited known flaws including CVE-2024-3272/3273 in D-Link ShareCenter NAS, CVE-2021-44228 in Ubiquiti UniFi Video NVR, and CVE-2025-31324 in SAP NetWeaver Visual Composer, and also targeted Hikvision and Dahua DVR/NVR devices. In some cases SSH keys were added for persistent backup access.
bleepingcomputer.com
· 2026-10-15
Apple opens iPhone Duo pre-orders Friday, October 16 at 8:00 a.m. ET/5:00 a.m. PT. Shoppers who want faster checkout can pre-select color, storage and purchase or lease options through its 'Get Ready' tool, but must finalize those choices by 9 p.m. PT Thursday, October 15.
9to5mac.com
· 2026-10-15
GoKawiil