Wednesday, October 21, 2026
Today's technology news includes a certificate authority whose private encryption key was apparently the number four, an identity-theft victim who ended up in jail, and another reminder that keeping your website updated doesn't necessarily mean keeping it secure. Microsoft has repaired an astonishing number of vulnerabilities, AI assistants are learning to operate your computer, and Apple has finally produced an iPhone that unfolds into something resembling an iPad. Somewhere in all this progress, somebody might want to revisit the concept of common sense.
The Internet's Security Password Is Apparently 4
Researchers discovered that eight intermediate certificates associated with Indian certificate authority eMudhra had compromised private keys. Some were astonishingly simple numbers, including 4, 56, and 115.
Digital certificates are supposed to help establish that websites and other online services are who they claim to be. The cryptographic keys protecting them are supposed to be extraordinarily difficult to guess.
Four doesn't quite meet that standard.
Why you should care: A secure-looking website isn't necessarily trustworthy simply because your browser displays a padlock. Keep your browser and operating system updated so they can recognize and reject compromised certificates, and remember that encryption protects a connection without guaranteeing that the business on the other end is legitimate.
Read more: The Register — Certificate authority's private keys were embarrassingly weak
Your Website Is Updated. The Server Underneath It Might Not Be.
Security researchers have identified two critical vulnerabilities in PHP, the programming language used by millions of websites, including WordPress installations.
The flaws could potentially allow attackers to execute malicious code on vulnerable servers. Security patches are scheduled for release today, and reports suggest attackers may already be investigating ways to exploit the problems.
If you own a website, this is a useful reminder that the software you see when you log in is only part of what keeps it running.
Why you should care: Updating WordPress and its plugins is important, but your hosting provider is generally responsible for maintaining the PHP software underneath them. If you run a business website, confirm that your host is applying security patches and maintaining supported software versions.
Read more: The Verge — Critical PHP vulnerabilities threaten websites
Somebody Stole Her Identity. She Went to Jail.
A Pennsylvania woman says someone used her personal information to open a fraudulent Cash App account connected to a Facebook Marketplace scam.
She maintains that she never created the account, yet she spent three nights in jail and now faces criminal charges related to its alleged use.
Identity theft is frightening enough when somebody empties your bank account. Being accused of somebody else's crime takes the experience to an entirely different level.
Why you should care: Identity theft isn't limited to unauthorized purchases. Consider freezing your credit, monitoring financial accounts, and paying attention to unexpected notices from banks, payment services, and government agencies. A credit freeze helps, but it doesn't prevent every kind of account fraud.
Read more: 404 Media — Someone opened a Cash App account in her name
Microsoft Fixed 1,416 Things. Apparently, It Had a Busy Month.
Microsoft's October security updates address a reported 1,416 vulnerabilities across its software products, including Windows and Office.
Eighty-five were classified as critical, and at least one Windows vulnerability was reportedly already being exploited.
That's an extraordinary number of problems to repair in a single update cycle. It also illustrates why software maintenance isn't something to put off indefinitely.
Why you should care: Keep Windows and Microsoft applications updated. If you run a small business, make sure somebody is responsible for verifying that updates are installed and that critical software continues working afterward.
Read more: PCWorld — Microsoft's October security update
Your AI Assistant Has the Keys to Your Computer
Perplexity has announced that its Computer assistant can now operate locally on supported Apple silicon Macs, interacting with applications such as Mail, Notes, Numbers, and Keynote.
Running AI locally could help keep sensitive information on the computer rather than automatically sending it to remote servers. But there's another side to the equation: an assistant capable of interacting with your applications can also make mistakes inside them.
And in a separate experiment, a PCWorld writer discovered that his carefully constructed AI assistant could identify weaknesses in its own security restrictions.
Giving AI access to your computer is rather like hiring a personal assistant who works at the speed of light, never sleeps, and occasionally misunderstands what you meant by “clean up my files.”
Why you should care: Before giving an AI agent access to email, documents, or system controls, understand what it can do, what it can change, and whether it requires your approval before taking consequential actions. Keep reliable backups, and don't confuse locally processed information with risk-free automation.
Read more: MacRumors — Perplexity brings locally running AI to Macs
OneDrive Is Learning to Count Higher
Microsoft is expanding the number of files that OneDrive can synchronize on qualifying Macs from 300,000 to one million.
The improvement is intended to help people and organizations managing very large document collections. A preview begins this month, with broader availability expected in 2027.
One million files sounds like an absurd amount until you've spent twenty years running a business and discover that every invoice, photograph, proposal, and document you've ever created is still sitting somewhere on your computer.
Why you should care: If your business uses Microsoft 365 on Macs, this change could eventually reduce synchronization headaches. But cloud synchronization isn't the same thing as a proper backup. Accidentally deleting or corrupting synchronized files can still create problems across multiple devices.
Read more: The Register — OneDrive expands Mac synchronization limits
Booking.com Would Like You to Be Careful With That Payment Request
European regulators have opened an investigation into whether Booking.com is doing enough to protect customers from fraudulent listings and phishing scams.
One particularly convincing scam involves criminals compromising legitimate accommodation accounts and sending travelers messages requesting additional payments.
Because the messages can appear inside an otherwise legitimate booking conversation, they may look more trustworthy than ordinary phishing emails.
Why you should care: If a hotel or vacation rental unexpectedly asks you to make an additional payment, don't immediately follow the link. Contact the property independently using verified information, particularly if the request involves a new payment method or an unusual deadline.
Read more: The Register — European regulators investigate Booking.com scams
The iPhone That Wants to Be an iPad
Early reviews of Apple's first foldable iPhone, the iPhone Duo, praise its expansive 7.6-inch interior display while questioning whether the additional size, weight, and expense are justified.
The device offers a larger workspace for reading, multitasking, and other activities that can feel cramped on a conventional phone. Apple Pencil support is also expected with an upcoming software update.
For years, we've been making phones bigger until they barely fit in our pockets. Now we've invented a way to fold them in half.
Why you should care: A foldable phone may be genuinely useful for people who frequently work with documents, spreadsheets, or multiple applications on the go. But most users should consider whether the convenience is worth paying a premium for first-generation hardware.
Read more: 9to5Mac — iPhone Duo coverage and reviews
Your iPhone Gets a Few More Things to Do
Apple's forthcoming iOS 27.2 update introduces suggested actions in Messages, improvements to FaceTime, and new smart-lock automation features.
Compatible locks will be able to alert users when doors remain open and automatically lock after they close.
These aren't exactly revolutionary developments, but they may prove more useful than many of the features technology companies spend months promoting.
Why you should care: If you use smart-home equipment, new automation capabilities may improve convenience and security. Just verify that your specific devices support the features before assuming an iOS update will magically upgrade every lock in the house.
Read more: 9to5Mac — New features coming in iOS 27.2
Spotify Wants to Move Into Your Dashboard
Spotify has introduced a standalone application for select Audi vehicles, allowing drivers to stream music directly through the car's infotainment system without relying on Apple CarPlay or Android Auto.
The company says it will continue supporting both phone-based platforms.
It's another step toward turning the dashboard into a computer that happens to have a steering wheel attached.
Why you should care: Built-in applications may reduce the frustration of wireless phone connections, although availability and functionality depend on the vehicle. For most drivers, CarPlay and Android Auto remain perfectly reasonable solutions.
Read more: The Verge — Spotify introduces a native automotive app
One Last Thing
Today's stories offer a useful reminder that technological sophistication and good judgment aren't necessarily related.
You can build an extraordinarily complicated security system and protect it with the number four. You can create an AI assistant capable of managing your computer and then discover that it has figured out how to circumvent your safeguards. And you can operate an online business without knowing who is responsible for maintaining the software underneath your website.
Technology doesn't have to be perfect. But it does need somebody paying attention.
Preferably somebody who can count past four.
