Author: The Tech Guy

Technical details and proof-of-concept (PoC) exploit code targeting a newly patched critical-severity vulnerability in NGINX are now available. Tracked as CVE-2026-42945 (CVSS score of 9.2), the issue was patched in the widely used web server this week as part of F5’s latest quarterly patch release, 16 years after it was introduced. The bug is described as a heap buffer overflow in the ngx_http_rewrite_module component that could be exploited to trigger a restart, creating a denial-of-service (DoS) condition. Remote code execution (RCE) is also possible if Address Space Layout Randomization (ASLR) is disabled, F5 warned. According to Depthfirst, CVE-2026-42945 impacts NGINX…

For most of us, a locust swarm sounds like an utter nightmare. For roboticists, it’s inspiration.Nature abounds with creatures that cooperate with a “hive mind.” From bees gathering pollen to schools of sardines grouping to avoid predators, individuals seamlessly move together in ever-changing configurations. Roboticists inspired by these dynamics have designed microrobots—often no more than the width of a human hair—to mimic their behavior.These tiny machines show promise in medicine and environmental cleanup. They easily sail through blood vessels to remove blood clots, deliver chemotherapy to tumors, and bring medicines to the eye and gut. In the wild, they remove…

ChatGPT can now take care of your personal finances, which definitely sounds like a good idea. In the US, subscribers to ChatGPT Pro can now connect accounts from over 12,000 financial institutions, thanks to a partnership OpenAI has established with the financial connection service Plaid. Once you connect your account(s) to ChatGPT, you’ll see a dashboard of your portfolio performance, spending, subscriptions, and upcoming payments. ChatGPT can answer questions about your spending or plans to save money with context from your actual financial situation. You can manage the connections to your accounts at any time and remove any of them,…

DealHunt / Android AuthorityWhen it comes to securing our homes or businesses, having reliable surveillance is essential. If you’re weighing up your options, you might be interested to know that the Ring Floodlight Cam Pro is now available at its lowest price ever.DealHunt / Android AuthorityThis top-of-the-line security solution is currently priced at $229.99, making it an attractive option for those looking to enhance their security setup.The Ring Floodlight Cam Pro is packed with impressive features. It boasts Retinal 4K video, providing crystal-clear visuals that capture every detail. The wide-angle view ensures that nothing escapes your attention, while 10x enhanced…

OpenAI has disclosed the impact of the recent TanStack supply chain attack, warning that credential material was exfiltrated from internal source code repositories. The open source web application development stack TanStack was hit on May 11, when the TeamPCP hacking group exploited security weaknesses in the package publishing process to release 84 malicious artifacts across 42 packages. Over 170 packages across several high-profile NPM and PyPI namespaces were compromised on the same day as part of a coordinated campaign. Developer devices were infected with the Shai-Hulud worm. OpenAI was one of the organizations affected downstream. Two employee devices were infected…

Sign up to see the future, today Can’t-miss innovations from the bleeding edge of science and tech It looks like Elon Musk has an even bigger sycophant than his AI model Grok. According to a new analysis by The Washington Post, the world’s richest man appears to be obsessed with an anonymous account on X named “XFreeze” that he’s interacted with more than any other user on the platform this year. And naturally, the main thing XFreeze posts about is Musk.  The account, which WaPo traced to a man in India, constantly lavishes the site’s owner with praise: boosting his…

Why you can trust TechRadar We spend hours testing every product or service we review, so you can be sure you’re buying the best. Find out more about how we test. Adobe InDesign is the industry-standard desktop publishing and page layout software. And it’s been that way for many years now, ever since the tool stole the crown of QuarkXpress to become the best DTP software.So, with some new updates, I wanted to take a look at some of the new features I feel will be valuable to most of our workflows. As changes do occur to the software over…

Streaming devices aren’t meant to last forever, and your Fire TV Stick is no different. But that doesn’t mean you have to replace it the moment things start feeling slow. In most cases, it’s the cache buildup, unused apps, and outdated software that’s responsible for the slowdown rather than the hardware. Thankfully, a bit of optimization is all it takes to make your old Fire TV Stick run like new again. And the good news is doing this doesn’t take much time or effort. Related These 5 Fire TV features made my streaming setup much more useful A few Fire…

I installed my first HTIB, or “home theater in a box,” in 1995. It was a 5.1 Sony system that, as the number implies, consisted of two front speakers, a center channel speaker, two rear surrounds, and a subwoofer. I immediately popped on the DVD of my favorite action flick at the time, Blade, and it sounded better at home than in theaters. I was gobsmacked! Those days seem long gone now, but there are many reasons in 2026 to move back to physical media, and I’m ready to explore them. Now, thanks to Netflix, I haven’t watched a DVD…

Microsoft Exchange Server users are urged to immediately mitigate a newly disclosed zero-day vulnerability that has been exploited in attacks. Microsoft this week patched 137 vulnerabilities with its Patch Tuesday updates and the cybersecurity industry was surprised to see that the latest updates did not address any zero-days. However, a zero-day was disclosed just 48 hours later, on May 14. The Exchange zero-day, tracked as CVE-2026-42897, has been described as a spoofing and XSS issue affecting Exchange Server Subscription Edition, 2016, and 2019.  “Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized…