TechCapsules

Researchers discovered that Zyxel GS1900 switches still vulnerable to a zero‑day exploit despite receiving the vendor’s earlier 2.90 Patch 2 firmware. The flaw, now tracked as CVE‑2026‑107441, allows unauthenticated attackers to execute root‑level commands via the web management interface by exploiting an out‑of‑bounds write. Zyxel released Patch 3 to fix the issue, but the advisory lacks guidance on mitigating already compromised devices. GreyNoise reported 996 switches were targeted, with attackers extracting configurations and credentials.

Bitcoin Cash developers are evaluating CHIP‑2026‑06, a Cash Improvement Proposal that introduces an `OP_SIGHASH` opcode to support post‑quantum and hybrid signature schemes. The opcode exposes the transaction sighash already computed during verification, enabling smaller contracts and preserving existing address formats. Hybrid keys combine classical and post‑quantum algorithms, allowing secure migration without new output types. The proposal could lock in on November 15, 2026, with mainnet activation slated for May 15, 2027.

The Legend of Zelda: Ocarina of Time remake, released today, now features a fully credited English voice cast. Matthew Mercer returns as Ganondorf, Erica Mendez voices Zelda/Sheik, and Lisa Reimold portrays Navi. The remake adds spoken dialogue to cutscenes, a first for the 1998 original, while Link remains silent as usual. IGN confirmed the complete list, including voice actors for Great Deku Tree, Saria, and others, marking a significant expansion of the franchise’s audio experience.

In Phantom Blade Zero, medicine upgrades become available midway through the game when players reach the Green Serpent House in Pangzhen’s Backstreets and speak with Xie Xiaorong. The upgrades, accessed via the general “Upgrade Equipment” menu, require Remnant Dust and Healer’s Memories, with higher levels demanding rarer memories. Upgrades are permanent, so players should prioritize current medicine items. The system is essential for enhancing healing power and item usage, and unlocking further Serpent Houses later in the main quest. [...]

Apple plans to launch the MacBook Neo 2 in early 2027, with suppliers forecasting 16 million units—double the 8 million sold in 2026. The original Neo, released in March 2026, set a record for the best‑ever sales week among first‑time Mac buyers. Digitimes reports the company expects the successor to outperform its predecessor, citing longer sales windows and heightened demand. Apple’s strategy signals confidence that the Neo line will drive significant revenue growth in the coming year.

Sony reported a strong Q2 2026 earnings call, citing Spider‑Man: Brand New Day’s box‑office success and a revised, higher annual profit outlook. CFO Lin Tao confirmed that the next‑generation PlayStation console is “progressing as scheduled,” with solid progress and sufficient memory supply secured. PS5 sales reached 97.9 million units, while Sony offset rising memory costs through cost cuts and price hikes, boosting operating income by 89 percent. The company plans to intensify investment in the forthcoming platform, slated for [...]

Apple will enforce content checks on iCloud links shared via the “Anyone with the Link” option starting with the 27.3 update for iOS, iPadOS, macOS, and visionOS. The scan removes end‑to‑end encryption for publicly shared files and photos, even if Advanced Data Protection is enabled. Apple can move, refuse, modify, or delete material it deems harmful and may suspend or ban accounts, block replacement accounts, or refer cases to law enforcement. The policy does not affect “People [...]

CERT‑In has identified an AI‑driven threat actor, dubbed Crafty Falcon, that is targeting Indian BFSI organizations, cryptocurrency exchanges, and digital asset providers. The attackers employ publicly available AI‑powered tools such as ARTEX, PentAGI, Cairn, and CyberStrikeAI to launch automated, high‑speed attack chains, generate tailored scripts, and adapt payloads in real time. The campaigns exploit exposed APIs and privileged endpoints, enabling rapid fraudulent fund transfers, log deletion, and endpoint tampering. CERT‑In’s alert follows a prior warning on similar [...]