Building your system with some extra capacity makes managing it a bit easier.

When does the 20 percent buffer come in handy?

Eoneren/Getty Images

Why should I spend more on solar if I don’t always need it?

Jeremy Poland/Getty Images

Does the extra 20 percent really make a difference?

Kangestudio/Getty Images

Nvidia will invest $1 billion in South Korean internet company Naver to help finance an AI data center under construction in South Korea, the chipmaker announced late Friday. The funding will allow Naver to more than triple the size of the facility from 55 megawatts to 200 megawatts, with US private equity firm Brookfield agreeing to a nonbinding term sheet to fund up to $9 billion for the project. The site will run on Nvidia’s AI computing hardware.

Separately, Nvidia announced a long-term commercial partnership with SK Group that it described as worth more than $500 billion. The figure includes money Nvidia will spend buying memory chips from SK Hynix, the world’s largest supplier of high-bandwidth memory, as well as purchases by SK Group of Nvidia’s supercomputers. SK Telecom will build more than 2 gigawatts of AI data centers on the Korean Peninsula, with the first facility due to open next year.

The announcements coincide with a visit to Silicon Valley by South Korean President Lee Jae Myung, and additional tech deals between Korean and American companies are reportedly in the works. Nvidia CEO Jensen Huang told Bloomberg Television that South Korea is in a “golden age,” pointing to the country’s booming semiconductor and industrial businesses as reasons to invest. Nvidia will also help SK Hynix design future high-bandwidth memory chips, an effort to guarantee access to the component that remains in short supply because of the global buildout of AI data centers.

The Korea deals are the latest in a year-long investment spree in which Nvidia has committed more than $40 billion to AI equity positions, including $30 billion in OpenAI. Earlier this week the chipmaker signed a separate agreement with Amkor Technology to bolster chip packaging, and it recently completed a trip to Japan that included deals with Toyota and Japanese robotics firms. Critics have described the pattern as circular financing, in which Nvidia invests in companies that then buy its hardware, a structure the chipmaker has replicated with data center operators, neoclouds, and now sovereign AI partners.

For South Korea, the deals represent a bet that its semiconductor industry can remain central to the AI buildout even as geopolitical tensions reshape chip supply chains. Samsung and SK Hynix are the only two companies in the world capable of producing the advanced memory chips that Nvidia’s processors require, and locking in a design partnership with Nvidia gives SK Hynix a structural advantage over its rival. Huang has argued that every country should create its own sovereign AI capability, and South Korea, with its chipmaking expertise and abundant engineering talent, is among the best positioned to do so.

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers.

BleepingComputer learned of the campaign from a reader, who told us threat actors are creating random Steam accounts to post what appears to be helpful fixes for people’s posts about games crashing, lost inventory items, and other technical issues.

The threat actors reply to posts, telling other members to open PowerShell as an administrator and run a command to fix the issue. However, when executing the command, it quietly downloads an XMRig miner executable and launches it on the computer.

These types of attacks are known as ClickFix, a social engineering tactic that displays fake errors, verification prompts, or troubleshooting instructions to trick victims into manually executing malicious commands.

Although ClickFix attacks require interaction from the victim, they are effective because they present users with what appears to be both a legitimate solution for a problem they are having.

Since the victim manually launches the command, the attack can also bypass some security protections that would otherwise automatically block executed malicious code.

Fake Windows optimization installs malware

The PowerShell script distributed in the Steam campaign masquerades as a Windows optimization utility named “msf utility \ PC Opt.”

When launched, it displays messages claiming to perform numerous maintenance tasks, including cleaning temporary files, flushing the DNS cache, updating drivers, checking the disk, turning off unnecessary startup items, scanning for malware, repairing the Windows image, and running System File Checker.

However, most of these functions do not perform the tasks they claim. Instead, they display fake progress messages and pause for a random period between 1.5 and 8 seconds to make the utility appear legitimate.

The actual malicious activity is hidden in a function named ‘Advanced-Optimization’, which first disables TLS certificate validation and checks that it is running with administrator privileges. If it is not, the script displays an error stating that administrator rights are required and exits.

Once running with elevated privileges, the script creates the ‘C:\Windows\Background’ directory and adds it as an exclusion to Microsoft Defender’s scanning functions.

It also attempts to stop an existing scheduled task named ‘XMRig-[computer name]’ and terminates matching processes named ‘xmrig’ or ‘system’ that are running from the installation directory. It also attempts to delete any XMRig configuration files stored as C:\Windows\Background\config.json.

It is unclear whether this cleanup is intended to remove leftovers from an earlier install of the same malware or another miner already present on the device.

The malware then creates a temporary outbound Windows Firewall rule allowing connections to ‘msfconfig[.]icu‘ over TCP port 443 and downloads the XMRig miner payload from https://msfconfig[.]icu:443/tmp/system.txt into a randomly named temporary file.

Before installing it, the script verifies that the downloaded file is not empty and is a valid executable. If so, it moves the file to C:\Windows\Background\system.exe.

So it launches every time Windows starts, it will create a new scheduled task named “XMRig-[computer name],” that launches the system.exe executable with SYSTEM privileges.

As a general rule, users should never run PowerShell commands provided by unknown users in discussion forums, even when the commands are presented as fixes for a problem they are currently experiencing.

Those who executed the command should check for the ‘C:\Windows\Background’ directory, a Microsoft Defender exclusion for that path, and a scheduled task beginning with ‘XMRig-‘.

If these signs of compromise are detected, you should immediately run an antivirus program to scan for malware and remove anything it finds.

If it does not detect the miner, you should manually stop and remove the XMRig-[computer name] scheduled task, remove the Microsoft Defender exclusion for C:\Windows\Background, and delete the folder and its contents.

Ultimately, it may be safer to reinstall the operating system, as there is no way to know whether the downloaded payload performed additional malicious actions while it was running.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

Modern electric vehicles retain an average of 97 percent of their original range after three years and 95 percent after five years, according to a new analysis by EV data company Recurrent. For a 2026 model with a rated range of 325 miles, that means roughly 309 miles would remain after half a decade of driving. A separate Recurrent study found that the battery replacement rate for EVs built from 2022 onward is just three in every thousand vehicles.

A study from vehicle data company Geotab, drawing on more than 22,700 vehicles, reached a similar conclusion, finding an average annual degradation rate of just over two percent. Viet Nguyen-Tien, an EV researcher at the London School of Economics, told The Wall Street Journal that improvements in battery chemistry, thermal regulation, and battery-management systems have made today’s batteries far more durable than those in early-generation models like the Nissan Leaf, which developed a reputation for rapid degradation after its 2010 launch. In a 2026 AAA survey, 56 percent of people who said they were unlikely to buy an EV cited the high cost of repairing or replacing the battery as their top concern.

The data suggests that concern is increasingly unfounded, but it has not translated into sales. Cox Automotive estimates that Americans bought roughly 75,000 new EVs in June, down nearly 28 percent from a year earlier, giving electric vehicles just over five percent of total new-vehicle sales during the month. A Deloitte survey from earlier this year found that only seven percent of Americans want their next car to be electric, and used EV sales told a different story, rising more than 20 percent in June compared with the previous year, according to Cox Automotive.

The sales decline is largely a policy story. The Trump administration allowed the $7,500 federal EV tax credit to expire last September and rolled back emissions regulations, a shift that Ford CEO Jim Farley warned at the time could cut demand for EVs in half. Several automakers have since cancelled or paused EV models in the US market, and while Edmunds reported that rising gas prices had started nudging consumer interest upward earlier this year, the shift was not enough to reverse the broader trend.

The gap between what the technology can do and what consumers believe it can do is now the central obstacle for the American EV market. The batteries work, the replacement rates are negligible, and the used market is growing, but new sales are falling because federal policy removed the price incentive that made EVs competitive with combustion alternatives. Until that changes, the industry is left selling a product that has answered its biggest technical question to a market that either has not heard the answer or no longer has the financial reason to care.

Motorola has revealed the Moto Pad 70, a new mid-range Android tablet with a large display, stylus support, 5G connectivity, and a sizeable battery.

The tablet will launch in India on August 8 through Flipkart. Its 12.1-inch 2.5K display, included Moto Pen, 10,200mAh battery, and 68W charging give it several features that could appeal to people considering Apple’s base iPad. However, the mid-range Dimensity 6400 processor means it is unlikely to match the iPad in raw performance.

Could it be a cheaper iPad alternative?

Motorola appears to be competing on value rather than processing power. The 12.1-inch screen is larger than the display on Apple’s standard iPad, while support for up to 800 nits of brightness and wide DCI-P3 colour coverage should make it suitable for streaming, reading, and creative work.

The included Moto Pen adds to the tablet’s value. It supports pressure sensitivity, tilt detection, and palm rejection, giving buyers a ready-made setup for note-taking and drawing without another accessory purchase. Motorola will also offer a magnetic keyboard case for writing and lighter office work.

A 10,200mAh battery should help it last through long viewing or study sessions, while 68W charging is unusually fast for a tablet in this class. Motorola has managed to fit it into a 6.29mm body weighing 530 grams, so the large battery has not made it especially thick or heavy. Quad speakers with Dolby Atmos and 5G connectivity add to its appeal as an entertainment device.

Performance is where the Pad 70 lags behind

The Dimensity 6400 should be sufficient for browsing, streaming, video calls, note-taking, and everyday multitasking. It will struggle to compete with Apple’s chips in demanding games, video editing, creative apps, and heavier workloads.

Motorola is also promising only two major Android upgrades, although security updates will continue until 2030. The Moto Pad 70 closely resembles the Lenovo Idea Tab Plus, which launched last September for around 300 euros. Indian pricing is often lower than a direct conversion would suggest, so Motorola could position it comfortably below the base iPad.

At the right price, its large screen, included stylus, 5G support, and fast charging could make the performance trade-off easier to accept. Currently, it is unclear if the company plans to launch this tablet outside of India.

A hot potato: After introducing Windows 11, Microsoft forced the entire PC ecosystem to turn the Trusted Platform Module (TPM) into a standard component for every new motherboard or CPU. Now, Redmond is exploiting the now-pervasive device to further strengthen the Windows activation process in the enterprise market.

Microsoft recently announced a brand-new addition to Key Management Service (KMS), a standard feature for mass activation of Windows devices in enterprises and other large-scale organizations. The KMS feature will soon rely on hardware-based security, using TPM’s encryption “brain” to verify the legitimacy of the server hosting KMS data.

Redmond explained that attackers have traditionally abused KMS to spoof the activation process, which is both a security issue and a way for individual users to avoid paying for a new Windows license. The new “TPM-based attestation” option will use the TPM for verifying the cryptographic proof of the integrity of a KMS server.

TPM-based attestation will first check the hardware identity of the KMS host, proving that the server has been verified by Microsoft as a legitimate hardware device. Then, the feature will confirm that the KMS host has not been tampered with in any way. Finally, the TPM chiplet will let the now-verified KMS host manage the mass activation requests required by the organization.

TPM-based attestation will become a mandatory requirement for KMS activation starting with the next Windows Server release, Microsoft stated. The corporation will begin to pressure business customers by sharing its “readiness messaging” in Windows Server 2025, starting from August 2026. Sysadmins will need to adapt and prepare their organizations in time, checking whether their KMS infrastructure is ready for hardware-based activation security.

“As Windows security continues to evolve, trusted activation infrastructure will play an increasingly important role,” Microsoft stated. “KMS Hardware Secured helps position your environment for the future while aligning with Microsoft’s continued investment in hardware-rooted trust.”

Popular tools designed to activate pirate copies of Windows have used KMS-based methods for quite some time. In 2025, Microsoft stopped the workaround employed in the so-called “KMS38” activation method, although “pure” KMS activation should still work as expected.

The elusive Massgrave collective provides open-source tools for “unofficial” Windows activation procedures, including an Online KMS method that needs to “phone home” to a fake KMS server every six months. TPM-based attestation might very much be the end of Online KMS-based piracy, although we will have to wait and see how the story actually ends. Massgrave recently introduced the new TSforge Activation method, which can allegedly bypass Microsoft’s entire DRM architecture for software product activation.

EPISODE 14 The morning coffee in Mission Control is interrupted by a hesitant tapping at the door. Our current office temp has an issue.

“It’s the printer,” she says, apologetically. “It makes a noise.”

“When it’s printing, or all the time?” the PFY asks.

“Sort of both. It starts making the noise before it starts printing, then keeps making the noise for about 20 seconds after.”

The PFY and I pop out and take a look, and the printer is indeed making a tiny squeaking noise, from the time it wakes up until the time it lapses back into low-power mode.

“I know it’s hardly noticeable, but the office is so quiet…” she says.

“Leave it with us,” I say.

“So you can fix it?”

“A machine with an extortionately priced service contract, voided the moment we open a panel that we’re not authorized to open?” I ask. “Not a chance!”

“Oh,” she says, disappointedly.

“But what we can do,” I say, moving a bunch of paper from my rarely used desk phone and pressing a speed dial button, “is log a fault.”

Barely 15 minutes later, I have negotiated the tricky maze of passages, all alike, which comprise the printer company’s ancient IVR system, and am speaking to an actual engineer.

“… and what’s the serial number?” he asks.

I rattle off the sequence of numbers that I took a snapshot of earlier.

“Oh no, that sounds like the controller serial number,” he sighs. “I need the printer serial number. It’s on the back panel of the machine, underneath the sticker with our support number on it. If you want to ring back when you get that I ca-“

“It’s OK, I have that here,” I say, having been to this particular rodeo a time or two before.

Ploy #1 in the Printer Engineer playbook is to ask for the serial number. If the user actually has the serial number, ask for some other number, i.e. the FULL model number, the total page count, a 40-digit service number from the sticker – where the last two digits are mysteriously missing, etc. When they can’t supply it, get them to ring back, endure another 15 minutes of ambiguous and clunky IVR, and then hopefully get fielded to some other engineer.

I rattle off the new number, the model number, the revision number – which is helpfully located on the base of the machine. Like I said, not the first time we’ve ridden this bronco…

“And what seems to be the problem?” the engineer asks, unable to shake us.

“It’s probably the fuser unit,” I say.

“It’s probably the fuser unit, or it is the fuser unit?” he asks.

“I can’t be sure – I’m no printer scientist,” I admit. “Could you make it in this morning?”

Ploy #2. You can never make it when they want you to make it.

“Oh… this morning I’m fully booked up.”

“This afternoon then?” I ask.

“Let me see. Hmmm. No, it looks like I’ve got a couple of calls outside the city.”

“Tomorrow morning?”

“Hmmmmmmmmm, no, but I can possibly make it tomorrow between 1 and 3pm – if that works.”

“OK,” I sigh. “I suppose we can make that work.”

“And I’ll need a park for the van.”

“Right. I’ll get one coned off outside the building.”

…

“OK,” I say to the temp. “He’ll be here tomorrow at 3:45.”

“He said between 1 and 3,” she points out.

Ploy #3. Turn up late and leave a note asking the user to rebook.

We all know the rules.

… The next day, 3:40pm …

“And here he comes,” the PFY says, as we watch a small white van pull up beside the road cones we installed early this morning. The driver gets out, moves the cones, along with the “DANGER, SINK HOLE” sign that we had made – complete with branding from the local council.

Scant minutes later, he’s in the main office, looking at the printer.

“I thought you said it was a fuser unit?” he states.

“No, no, I said it was probably the fuser unit,” I counter.

“It’s got nothing to do with the fuser unit,” he replies.

“My bad,” I say. “But then would you have turned up if I’d told you it was a squeaky bearing?”

“Yes.”

“Yes, but would you then have said that you’d need to order some replacement bearings?”

“I do need to order some replacement bearings.”

“And in a week’s time, will you ring us back, say the bearings are discontinued, that this particular printer model is end of line, and that for the sake of compatibility we’d need to replace this printer and every other printer in the building for an eye-wateringly large price?”

Ploy #4. The Upsell.

“This printer model is end of line. We don’t have spares either,” he admits.

“So,” I say, “what I need you to do is this: take this printer up to the fourth floor, tell them that you’re upgrading their printer with this one, which has 32-bit color, blacker blacks, a memory expansion, and an advanced feeder mechanism – then bring their one down here.”

“It’s the same printer,” he replies. “They’re all exactly the same.”

“Yes, but only you, me, my assistant – and now our temp – know this.”

“No, I don’t think I could do th-“

“20 quid,” I say, waving a note in his eyeline.

“Be back in five,” he says, pocketing the cash faster than a FIFA official.

True to his word, he’s back in five, pushing a printer in front of him.

“Pleasure doing business with you,” he says, parking the printer in front of me and grabbing his tool kit.

…

“Are you sure that he actually replaced the printer?” the temp asks, as the PFY wheels the printer out of the main office to Mission Control. “Only, our printer had a red smudge on the front panel… and I think the replacement printer did too.”

Ploy #5. Take the money and run.

“We’ll only know by listening,” I say.

“Listening for what?” she asks.

“Shh!” I whisper.

And the temp’s right, the office is quiet. So quiet you could hear a slight squeaking noise from a worn bearing. Or, off in the distance, the sound of a large multifunction printer hitting a small white van from a great height…

• Ukraine Central Research Institute has unveiled Marichka, a closed neural network intended to cut brigade-level planning decisions from six to 12 hours down to minutes
• The system calculates force ratios, estimates losses, and models courses of action on an interactive map, but has so far only been trialed on test data, with classified document integration still pending
• Marichka adds another layer to Ukraine’s tech stack for battlefield planning: the country already fields Delta for situational awareness and works with Palantir at multiple levels

Ukraine’s Central Research Institute of the Armed Forces has presented Marichka, a closed neural network designed to compress the operational planning cycle at brigade level and above from hours to minutes.

The system, still in testing, is built to collect and verify battlefield information, then calculate force ratios and estimate required resources and likely losses, presenting commanders with modeled options on an interactive map. Military standards currently allow a regiment or brigade commander six to 12 hours and roughly 20 documents to reach the same point.