Xteink’s X3, X4, and X4 Pro e-readers can access DRM-protected ebooks borrowed through OverDrive’s Libby (and purchased books from stores like Kobo) via the CrossPoint Reader “Protected Content” plug-in running through the device’s web server.
Aug 15, 2026 ·
The Verge
A ChainDrop variant of the Shai-Hulud npm worm infected 444 packages from multiple publishers, affecting dependencies collectively downloaded about 2 billion times a month.
Aug 15, 2026 ·
The Register
Anthropic says its text watermark for Claude will work by subtly steering “inconsequential word choices” rather than changing meaning, and reports internal testing and a controlled study found no impact on content, creativity, or readability.
Aug 15, 2026 ·The Register
Attacks on U.S. water and wastewater utilities were reported across about a dozen states, with incidents in Minnesota affecting more than 30 communities and some attacks causing “degraded water operations” along with loss of pressure that “could potentially allow untreated groundwater to seep into pipes,” plus temporary water-plant shutdowns and boil-water advisories.
Aug 14, 2026 ·
TechCrunch
Dutch officials say CVE-2026-65400 is being actively abused from the Internet on Macs with port 5900 exposed, with root access gained and a Monero crypto miner deployed on affected systems.
Aug 14, 2026 ·Ars Technica
About 1.6 million unique RingCentral email addresses were leaked online with names, physical addresses, and phone numbers after a social-engineering campaign against a limited portion of customers.
Aug 14, 2026 ·The Register
A Connecticut judge ruled that hidden “prompt injection” text in a plaintiff’s court filings—intended to be invisible to humans but readable by software—did not affect the outcome of the case and led to court sanctions for “serious litigation abuse.”
Aug 14, 2026 ·Ars Technica
A Washington state judge issued a preliminary injunction ordering Kalshi to stop offering sports bets and other wagers in Washington, finding Kalshi’s marketing and advertising of its “prediction market” bets constitute unfair and/or deceptive acts under state gambling and consumer protection law.
Aug 14, 2026 ·Ars Technica
A court in St. Louis Circuit Court ordered OSS to return Nine PBS’s archival data and/or facilitate its transfer to a new vendor after Nine PBS sought access to about 50TB of data that Iron Mountain refused to release.
Aug 14, 2026 ·Ars Technica
Ukraine’s GUR says it recovered an Nvidia Jetson Orin module from the remains of a Russian S-71 Monochrome air-launched cruise missile, suggesting AI-enabled targeting capabilities in the weapon.
Aug 14, 2026 ·The Register
August 2026 Patch Tuesday shipped 751 CVEs across Microsoft products, including 108 rated critical, and it includes an already-exploited Windows elevation-of-privilege flaw (CVE-2026-68820) in the WinSock driver (afd.sys).
Aug 14, 2026 ·
Computerworld
Snowflake Volunteer is a standalone Android app that lets everyday users lend their phone as a proxy to help others access the Tor Network under censorship, with real-time stats shown in the app dashboard (connections helped and bytes sent/received).
Aug 14, 2026 ·
ZDNet
Apple says it notified select customers across 110 countries on Thursday that they were targeted by mercenary spyware attacks, and those customers should enable iPhone, iPad, and Mac Lockdown Mode to help protect their data and device.
Aug 14, 2026 ·ZDNet
OpenAI’s ChatGPT Mac app can create an activity timeline from opt-in app and website interactions for Pro, Business, and Enterprise accounts, turning the events into text summaries and local memory files you can reference in conversations—but Computer History files are not encrypted and may be accessible to other programs under the same macOS user.
Aug 14, 2026 ·ZDNet
A US District Judge ordered Google to remove “anticompetitive friction” from how it offers third-party app store downloads in Google Play and gave it one week to fix the process after finding the link to non-Google stores is buried in confusing menus.
Aug 14, 2026 ·Ars Technica
Over 24,000 people have been sickened and two have died in a Cyclospora outbreak tied to Mexican-grown iceberg lettuce sold by Taylor Farms, prompting Sen. Elizabeth Warren to accuse the federal government’s response of being “botched” and “marred by missteps.”
Aug 14, 2026 ·Ars Technica
France’s tax authority (DGFiP) confirmed that an intruder accessed its information system in late June 2026 after identity theft and extracted data, despite the access being severed at the end of June during an audit.
Aug 14, 2026 ·The Register
Attackers used open source AI agents to carry out near-autonomous intrusions that compromised a Taiwanese government email system, the country’s nuclear safety agency, IT supply chain vendors, and at least seven energy sector companies, after deploying up to eight sub-agents across 12 attack waves to break into a government website.
Aug 14, 2026 ·The Register
A breach at Trezor’s logistics partner exposed personal data for 13,000+ customers, including names, email addresses, phone numbers, and shipping addresses for 11,742 US, UK, Sweden, Colombia, Brazil, Italy, and Portugal orders placed between May 10 and August 8.
Aug 14, 2026 ·The Register
Dicio is an on-device, privacy-by-design free and open-source Android voice assistant that can handle many basic tasks (including hands-free calling) without sending input/output to a third party.
Aug 14, 2026 ·ZDNet
