Software

Windows Drops 7 eMudhra Certificates: What to Install

Microsoft out-of-band updates remove seven eMudhra-linked root certificates from Windows. KB numbers and who needs to install them by hand.

Microsoft Authenticator Android Bug Leaked Work Tokens

A zero-permission Android app could pose as Teams and get work account tokens from Microsoft Authenticator. The fix is out; here is what to check.

Google Docs Can Now Edit Markdown Files Natively

Google Docs now opens .md files without converting them, with comments, live editing and rendered previews in Drive. Here is how it works.

Tailscale Confirms SSH Flaws, Patch Due Within a Day

Tailscale calls the Tailworm SSH issues serious privilege escalation bugs and is targeting a fix by Oct 27. Here is what to change on your tailnet now.

Instagram Tests 90-Minute Horizontal Videos

Instagram is testing Features, horizontal videos up to 90 minutes, to take on YouTube. There is no ad revenue share for creators yet.

Microsoft Offers Buyouts to Staff in US, India, UK

Microsoft launched a Voluntary Exit Offer for staff at level 70 and below in the US, India, UK and Canada. Reports say about 60,000 are eligible.

Two Critical Wasmtime Flaws Allow Sandbox Escape

Two CVSS 9.9 Cranelift bugs in Wasmtime can let malicious WebAssembly escape the sandbox. Fixed versions and what to update.

Mac Terminal Tools Still Trust the Bad eMudhra Certs

Apple now blocks the leaked eMudhra certificates in Safari and apps, but curl, git and python3 on Mac still trust them. Here's the fix for admins.

Unpatched Tailscale SSH Flaws: What to Change Now

A researcher's Tailworm report claims Tailscale SSH can give a hacked device root on other servers. No patch yet. Here's what to lock down now.

Denmark Ends Collabora Trial to Replace MS Office

Denmark's digitalisation ministry dropped its Collabora pilot after file import and formatting problems. Here's what it means for Office switchers.

Instagram Finally Lands on Apple TV With Reels

Instagram now has an Apple TV app for Reels, longer videos and live shows. It needs tvOS 26 or later. Here is what it does and what to check first.

Millions of Old Popcorn Time Installs Were Hijackable

Eye Security pushed 2M+ updates to disable a forgotten Popcorn Time updater that ran unsigned code as SYSTEM. Uninstall the app if you still have it.