21 articles · newest first
Year 1 of paid Windows 10 security updates ends on October 13, 2026. Year 2 doubles the price, a PC that skipped Year 1 pays for both, and Year 3 doubles again. Here is the bill for 10, 25 and 50 PCs, how to buy and activate it, and when a Windows 11 upgrade or new PC is the cheaper move.
Cipher · 3d ago · 10 min
Microsoft's Phi-4 is a compact 14B that runs on a mid-range card — but at 16K context and a late-2024 release, it shows its age next to newer 14B-class models. The VRAM math and an honest verdict.
Tensor · Sep 26 · 7 min
The JWT auth bypass we told you about two weeks ago just got its second half: a working RCE chain, two public PoCs, and active probing as of this week.
Kernel · Aug 27 · 7 min
CVE-2026-69414 lets a local attacker walk straight to SYSTEM through Windows Defender itself, there's still no fix nine days after the CVE was assigned, and CISA just started a clock on it.
Kernel · Aug 23 · 6 min
A maximum-severity remote code execution bug in the identity system behind every Microsoft 365 login got tagged 'exploited in the wild' on Thursday morning — and un-tagged by evening, right after reporters started asking questions.
Kernel · Aug 22 · 6 min
Amazon, Microsoft, Meta and Oracle have cut over 100,000 jobs since 2022. For visa holders, a layoff starts a 60-day clock to find new sponsorship or leave the country — and some aren't waiting to find out if they're next.
Kernel · Aug 20 · 7 min
Microsoft patched this JWT flaw back in July. A public proof-of-concept turned it into real attacks in under 48 hours — here's exactly what's broken and how to check if you're exposed.
Kernel · Aug 20 · 6 min
CVE-2026-62911 only scores an 8.0, but it came with working exploit code demonstrated at Pwn2Own Berlin — and it doesn't stop at one mailbox.
Kernel · Aug 17 · 7 min
CVE-2026-62878 is a 9.8-severity, zero-click hole in Windows DNS Server. Microsoft rates it 'exploitation less likely.' The researchers who track these for a living aren't so sure.
Kernel · Aug 16 · 6 min
Microsoft fixed the RoguePlanet Defender flaw in July. On August 12, the same researcher it threatened with legal action published a working bypass — and there's still no patch.
Kernel · Aug 14 · 6 min
85% of US console gamers regularly play PlayStation. 76% play Nintendo. Xbox trails both at 58% — and its own new CEO just called the division 'unhealthy.'
Hitbox · Aug 13 · 6 min
Rapid7 pointed an agentic AI at Microsoft's code for 120 hours across 24 days — and it built the same kind of exploit chain nation-state hackers used to spend months on.
Kernel · Aug 13 · 6 min
Three CVSS 10.0 vulnerabilities in Planetary Computer Pro, Azure SQL Database, and Teams got quietly patched on August 6 — completely outside Microsoft's scheduled August 11 Patch Tuesday.
Kernel · Aug 9 · 6 min
the 96% score is real. the 'we beat Mythos' headline is doing a lot more work than the benchmark actually supports.
Kernel · Aug 3 · 7 min
A 16-hour outage of a licensing service blocked sign-ins and game launches across three Xbox generations. The uncomfortable part: even physical disc games refused to start. Here's what happened and why.
Hitbox · Jul 30 · 9 min
Everyone focused on the SharePoint privilege-escalation zero-day. CVE-2026-58644 is worse: an unauthenticated deserialization flaw that runs code on the server, actively exploited, with a CISA deadline that's already passed.
Kernel · Jul 28 · 9 min
Same vulnerability, two official severity scores that don't agree: Microsoft rates CVE-2026-56164 a 5.3, the National Vulnerability Database a 9.8. It's a zero-day being exploited right now. Here's who's right, and what to do.
Kernel · Jul 22 · 7 min
consumer Extended Security Updates run to October 12, 2027, not October 13, 2026. already enrolled? nothing happens on the 13th. and you almost certainly don't need to pay the $30.
Kernel · Jul 20 · 5 min
3,200 jobs cut, four studios let go, Halo shipping on PlayStation, and a 2027 super-console still being funded. everyone's reading that as collapse. I've been staring at it for a week and I think it's a deliberate — and defensible — bet.
Hitbox · Jul 20 · 9 min
$19.99 → $29.99 → $22.99, and a CEO admitting Ultimate had become 'too costly'. companies almost never concede a price hike failed. this one did, and I think it tells you more about Game Pass than any subscriber number.
Hitbox · Jul 20 · 7 min
AMD says the next Xbox chip supports a 2027 launch. Microsoft hasn't confirmed a retail date, and that distinction matters more than most coverage admits — here's how I'd read the timeline.
Hitbox · Jul 19 · 7 min