Master your digital world with smarter guides

9 min read | Updated: October 31, 2026 | First published: October 31, 2026 | Sources: FTC press release October 29, 2026; FTC Consumer Advice on government impersonation | By Guerni Ala Eddine TL;DR: On October 29, 2026 the U.S. FTC said 19 fake FTC websites were taken down and more than $80 million had gone back to consumers under the Impersonation Rule. Imposter scams are the top fraud category Americans report. This is not a Chrome build and not a ChatGPT setting. The protection is a habit: hang up, do not click, type ftc.gov or ReportFraud.ftc.gov yourself. Real FTC, SSA, IRS, and Medicare will not demand gift cards, crypto, or a wire, and will not threaten to arrest you on a surprise call. This guide is that check - not a promise that every loss is recoverable. Quick answer - what do I do right now? If anyone claiming FTC / SSA / IRS / Medicare wants money, a code, or "verify to keep benefits": hang up. Do not press keys on a robocall. Do not open their...

Figure 1 — One dissolving tag, every warning gone: the Windows zero-day that silences the defenses protecting your downloads. Quick Answer: CVE-2026-96951 is a Windows Shell zero-day Microsoft confirms is already being exploited (CVSS 8.8). It strips the invisible "Mark of the Web" tag from files you download — so the warning screens, Protected View, and macro blocks that depend on that tag all stay silent for a crafted file. There is no registry workaround: the only fix is the October 13, 2026 Windows update — and the fix is identical in the US, the EU, and everywhere else on Earth . Check your build (run winver ), keep Edge current too (Microsoft added it to the advisory in its Oct 26 revision), and if you're behind, this guide shows you exactly what to do — plus how to see the tag itself, with your own eyes, in two PowerShell commands. Hot vulnerability guide — verified against Microsoft's Security Update Guide and CISA's Known Exploited Vulnerabilities ca...

8 min read | Updated: October 31, 2026 | First published: October 31, 2026 | Sources: Chrome Releases 27 Oct 2026 (desktop 156.0.8078.73/.74, Android 156.0.8078.73), CVE-2026-118321 | By Guerni Ala Eddine TL;DR: Google shipped Chrome 156.0.8078.73 on 27 October 2026 (Android the same day; Windows/Mac also .74). CVE-2026-118321 is High: on Android, a crafted web page could run code outside Chrome's sandbox before that build. That is a different hole than last week's SMS of Death. The OS patch date does not update Chrome. CISA has not listed this CVE as exploited. This guide is the two-minute version check - Play Store on the phone, chrome://settings/help on the PC - not a claim that a page you opened yesterday owned you. Quick answer - what do I tap right now? Phone: Google Play Store → search Google Chrome (publisher: Google LLC) → Update if it is there. Then Chrome menu → Settings → About Chrome. You want 156.0.8078.73 or later . PC: type chrome...

8 min read | Updated: October 30, 2026 | First published: October 30, 2026 | Sources: Android Security Bulletin October 2026, Google Android Help, SMS of Death write-up 29 Oct 2026 | By Guerni Ala Eddine TL;DR: A researcher published "SMS of Death" on 29 October 2026: one silent WAP Push text can crash Android's calling process with no tap. In his tests, live calls dropped - including emergency calls - and the message never landed in Messages. Twitter is shouting "Google refused to patch it." That is half the story. Google's bug-bounty desk called it a non-security issue and issued no CVE. The same write-up says Android still shipped a telephony crash-catch in the October 2026 security release for Android 14-17. This guide is the two-minute patch-date check - not a horror thread and not a copy of the sending tool. Quick answer - what do I tap right now? Settings → About phone (on many Samsungs: About phone → Software information) → Android ...

8 min read | Updated: October 29, 2026 | First published: October 29, 2026 | Sources: OpenAI Help - Memory in ChatGPT, Data controls in ChatGPT, ChatGPT release notes (Privacy Center, September 21, 2026) | By Guerni Ala Eddine TL;DR: ChatGPT on a personal Free / Plus / Pro account can remember you across chats, and by default it can use new conversations to improve the model for everyone . That is not a CVE and not a claim that your account is hacked. It is two switches plus a memory list most people never open. OpenAI's own help (updated through 2026) puts Memory under Settings → Personalization, and training under Settings → Data controls. Temporary chat stays out of history and is not used for training, but OpenAI may keep it up to 30 days for safety. This guide is the two-minute check - not a "delete ChatGPT" lecture. Quick answer - what do I click? On chatgpt.com (signed in): profile → Settings → Data controls → turn off Improve the model ...

8 min read | Updated: October 29, 2026 | First published: October 29, 2026 | Sources: Microsoft MSRC CVE-2026-70242, Microsoft Learn Office security updates October 13, 2026, Automox Patch Tuesday analysis | By Guerni Ala Eddine TL;DR: A fully patched Windows PC can still be running an old Outlook. Microsoft's October 13, 2026 Office security updates fix several Critical Outlook remote-code-execution bugs, including CVE-2026-70242 (CVSS 9.8). Microsoft's own vector is network, no privileges, no user interaction : a crafted message can execute when classic desktop Outlook shows it in the Reading Pane - no click, no attachment open. Microsoft rates exploitation Less Likely , lists exploit maturity as unproven, and has not reported in-the-wild use. Office updates arrive from the Office CDN, not Windows Update, so "Windows is up to date" is the wrong check. This guide is the two-minute Office build check against Microsoft's published floors. Quick answe...

8 min read | Updated: October 28, 2026 | First published: October 28, 2026 | Sources: Microsoft MSRC CVE-2026-80097, Enclave via Help Net Security, The Hacker News | By Guerni Ala Eddine TL;DR: Microsoft Authenticator on Android does more than show six-digit codes. It also acts as a broker that hands work-account tokens to Teams, Outlook, and other Microsoft apps. Researchers at Enclave found that before build 6.2606.4246 , a malicious app on the same phone - with no special Android permissions - could impersonate a trusted Microsoft app and receive those tokens. Microsoft tracks this as CVE-2026-80097 (CVSS 8.6, Important, elevation of privilege), patched in the September 8, 2026 advisory. Microsoft's own scoring says the attack is local, needs user interaction, and lists exploit maturity as unproven; Microsoft has not reported in-the-wild use. Enclave's lab write-up, covered on October 27, 2026, showed mailbox, files, calendar, Teams, and even passkey-management t...