Connect with us

Tech

Amazon may launch a marketplace where media sites can sell their content to AI companies

Published

on

The AI industry’s pursuit of licensable content has been a messy affair, filled with lawsuits and accusations of copyright infringement. Now, as tech companies look for legally safe sources of AI training data, Amazon is reportedly considering launching a marketplace where publishers can license their content directly to AI companies.

The Information reported Monday that the e-commerce giant has been meeting with publishing executives and alerting them to its plans to launch such a marketplace. Ahead of an AWS conference for publishers that occurred Tuesday, Amazon “circulated slides that mention a content marketplace,” wrote the outlet.

Reached by TechCrunch, an Amazon spokesperson didn’t deny the story but didn’t directly address the would-be marketplace either, saying only: “Amazon has built long-lasting, innovative relationships with publishers across many areas of our business, including AWS, Retail, Advertising, AGI, and Alexa. We are always innovating together to best serve our customers, but we have nothing specific to share on this subject at this time.” 

Amazon wouldn’t be the first major tech company to take this route. Microsoft recently launched what it calls a Publisher Content Marketplace (PCM), which it says will give publishers “a new revenue stream” while also providing AI systems with “scaled access to premium content.” Microsoft added that the PCM was designed to “empower publishers with a transparent economic framework for licensing” their content.

Advertisement

The move is a natural next step for the AI industry, which has already sought to solve the legally nebulous problem of how copyrighted material ends up in AI training data by forging deals with major news outlets and media organizations. OpenAI, for instance, has already signed content-licensing partnerships with the Associated Press, Vox Media, News Corp, and The Atlantic, among others.  

Those efforts haven’t been enough to stem the legal fallout. The fight over copyrighted material in AI algorithms has led to a monsoon of lawsuits, and the issue is still being worked out by the judicial system. New regulatory strategies to deal with the issue are being proposed all the time.

Media publishers have also fretted about the ways in which AI summaries — particularly those surfaced by Google in its search results — may be depressing traffic to their sites. One recent study claimed that such summaries have had a “devastating” impact on the number of users clicking through to websites. The Information’s report notes that publishers may view the new marketplace-based content-sharing system as a “more sustainable business [than current, more limited licensing partnerships] that will scale up revenue” as AI usage continues to escalate.

Techcrunch event

Advertisement

Boston, MA
|
June 23, 2026

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Today’s NYT Connections: Sports Edition Hints, Answers for Feb. 11 #506

Published

on

Looking for the most recent regular Connections answers? Click here for today’s Connections hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle and Strands puzzles.


Today’s Connections: Sports Edition is a tough one. Some of the words in the purple category were completely new to me. If you’re struggling with today’s puzzle but still want to solve it, read on for hints and the answers.

Connections: Sports Edition is published by The Athletic, the subscription-based sports journalism site owned by The Times. It doesn’t appear in the NYT Games app, but it does in The Athletic’s own app. Or you can play it for free online.

Advertisement

Read more: NYT Connections: Sports Edition Puzzle Comes Out of Beta

Hints for today’s Connections: Sports Edition groups

Here are four hints for the groupings in today’s Connections: Sports Edition puzzle, ranked from the easiest yellow group to the tough (and sometimes bizarre) purple group.

Yellow group hint: Step up to the plate.

Advertisement

Green group hint: College division.

Blue group hint: Robert.

Purple group hint: Goaaaaaal!

Answers for today’s Connections: Sports Edition groups

Yellow group: Involved in an at-bat.

Advertisement

Green group: A Big 12 athlete.

Blue group: Bobs.

Purple group: Soccer slang.

Read more: Wordle Cheat Sheet: Here Are the Most Popular Letters Used in English Words

Advertisement

What are today’s Connections: Sports Edition answers?

completed NYT Connections: Sports Edition puzzle for Feb. 11, 2026

The completed NYT Connections: Sports Edition puzzle for Feb. 11, 2026.

NYT/Screenshot by CNET

The yellow words in today’s Connections

The theme is involved in an at-bat. The four answers are catcher, hitter, pitcher and umpire.

The green words in today’s Connections

The theme is a Big 12 athlete. The four answers are Cyclone, Jayhawk, Sun Devil and Ute.

Advertisement

The blue words in today’s Connections

The theme is Bobs. The four answers are Beamon, Costas, Feller and Uecker.

The purple words in today’s Connections

The theme is soccer slang. The four answers are howler, screamer, sitter and worldie

Source link

Advertisement
Continue Reading

Tech

I’m a fitness writer, and these are my 16 essential home workout solutions, including the cheap way I built muscle and the massage gun I use every day

Published

on

It’s the middle of February. It’s cold and wet across most of the US, and I am feeling especially reticent to lace up my running shoes and head out into the great outdoors, or even to the gym. Last year, I was in the same position – it was cold and dark – but I didn’t even have a gym membership, having moved house and being between gyms.

As someone who, like a golden retriever, needs a certain amount of exercise once a day, how did I cope? By equipping myself to better do workouts at home, of course, using sales events (like the current Presidents’ Day sales) to do it for less.

Source link

Continue Reading

Tech

New RCSI exhibition gets to the heart of cardiovascular research

Published

on

Rebecca Graham looks at a new exhibition at RCSI University of Medicine and Health Sciences designed to educate the public about heart health and disease.

Cardiovascular disease is one of the leading causes of premature death and disability in Ireland. Nearly 9,000 people die of the disease each year, and it is estimated that 80pc of these deaths are preventable.

A new exhibition at RCSI University of Medicine and Health Sciences hopes to educate the public about heart health and disease, and showcases the latest technologies for diagnosis and treatment of heart conditions.

‘Heart: more than a beat’ is the first exhibition at the Humanarium, a recently opened space in RCSI’s new research and education building on St Stephen’s Green in Dublin city centre. The space will host a rolling programme of events exploring health sciences and medical research.

Advertisement

Opening the exhibition today (10 February), the director of the Humanarium, Dr Alison Boyle said that the aim is to show “the science and stories behind every heartbeat”. She welcomed to the podium Ciarán Sloan, father of toddler James who underwent major heart surgery at just 10 months old. At the 20-week pregnancy scan, Sloan and his partner Cara McAreavey learned that James had serious heart abnormalities. Since then, the family have had a long journey of treatment and recovery.

Human side of heart research

The exhibition shows a 3D-printed model of a human heart which consultant surgeon Mr Jonathan McGuiness used to prepare for James’s surgery at Crumlin Hospital. Sloan described McGuiness as a hero to their family for his work with James. He also said the exhibition could be really helpful to parents in similar situations to themselves. “It’s not [just] medical, it shows the human side,” he said.

James’s mom Cara McAreavey talked to me about the family’s journey. She described being “blindsided” by the initial diagnosis, but later feeling so grateful that James could be operated on.

She recalled how the family, who travelled from Belfast to Crumlin for the surgery, were on the ward prepped for surgery twice only for it to be cancelled at the last minute to make way for emergencies. Though this was tough, she said they were warned this could happen by the medical team and felt grateful that James wasn’t an emergency case. She spoke with obvious pride about James’s recovery, describing him as incredibly resilient. I asked about her own feelings in all this and she said her attitude is that you either sink or swim, and she chose to swim.

Advertisement

As we spoke, three-year-old James was happily playing with his dad in the exhibition space, looking healthy and full of energy – the perfect embodiment of what this event is all about and why research into cardiovascular conditions is so important.

Cutting-edge research

Senior anatomy lecturer at RCSI, Dr Aamir Hameed spoke to me at the event about his heart device research. Hameed recently won funding under Research Ireland’s Frontier for the Future programme to develop mechanical heart support devices for small children.

Hameed is co-founder of Pumpinheart, an RCSI spin-out that has prototyped a device to treat advanced heart failure, which features in the exhibition. Hameed explained that when patients have diastolic heart failure, the heart muscles become stiff, preventing the left ventricle from filling properly, which reduces blood flow to the body and causes fluid buildup. He showed me the implantable pump that his team has developed to reduce pressure in the left ventricle and improve blood flow.

This device is at the very early stages of development. Pumpinheart raised €700,000 in seed funding and is now hoping to raise €2.5m to move to preclinical studies. Hameed said that the device provides a validated solution for a proven unmet clinical need, but funding is always a challenge, and they are looking to the US for investment. He hopes to be in a position to move to human trials in two years.

Advertisement

Hameed is also developing biosensors to work with the pump device. The idea is that sensors would provide data about the device to help prevent issues and reduce re-hospitalisations. He said that recently one of his students asked what would happen if a patient forgot to charge the device and this simple issue is one that a sensor could help prevent by causing an alert for low power.

I asked Hameed how he finds time for the research and teaching alongside the start-up and he laughed and said: “It isn’t easy … but it’s my passion.”

Keeping your heart healthy

A report from the National Office of Clinical Audit, as reported by RTÉ today, found that the number of people who called emergency services within an hour of experiencing heart attack symptoms was down last year compared to the previous year, leading to calls for renewed focus on public awareness of early signs of heart attack.

I asked Hameed about this and he said that commonly people think they can’t be having a heart attack because of preconceived notions of what a sufferer should look like, and this is particularly a problem with younger patients. He said the exhibition is helpful is teaching people about heart health. He thinks more needs to be done to help the public recognise a heart attack and to take steps to protect their heart health.

Advertisement

Journalist Maura Derrane, an ambassador for the Irish Heart Foundation, spoke at the event and encouraged people to get information about heart health from trusted sources and not from social media. She spoke about how women in particular can often ignore symptoms and that these can also be masked by menopause. She said, for example, she is more proactive about getting her cholesterol checked regularly since she turned 50. “We need to take personal responsibility for our health.”

For more information about the exhibition, visit the Humanarium website. The Humanarium is funded by Blackrock Health, AIB, Lanas and HSE Healthy Ireland.

 

By Rebecca Graham

Advertisement

Rebecca Graham is a Frontiers science journalism fellow at FutureNeuro Research Ireland Centre for Translational Brain Science in RCSI University of Medicine and Health Sciences. Frontiers is a science journalism initiative funded by the European Research Council. Rebecca is a former managing editor at Silicon Republic. 

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Source link

Advertisement
Continue Reading

Tech

FCC clears Amazon Leo to boost satellite broadband coverage and cover polar regions

Published

on

An artist’s conception shows how additional Amazon Leo satellites would provide coverage in Earth’s polar regions. (Amazon Illustration)

Amazon has won the Federal Communications Commission’s approval to go ahead with its plan to launch thousands of second-generation Amazon Leo satellites for its broadband internet network, even though the first-generation constellation is far from complete.

The approval would add more than 4,500 satellites to the previously authorized constellation of 3,232 Gen 1 spacecraft, expanding coverage to the entire globe, including the poles.

Amazon Leo Gen 1 performance is impressive on its own, but lots to look forward to with Leo Gen 2: More capacity, more coverage (including polar) and additional throughput — good for customers everywhere, and especially important for big enterprise/gov customers who want max performance to move large amounts of data through our network,” Rajeev Badyal, vice president of technology for Amazon Leo, said today in a LinkedIn posting.

The upgraded constellation will have added capability for offering high-speed services such as satellite TV and 5G via the Ku-band and V-band. SpaceX’s Starlink network, which is the dominant player in the market for satellite broadband services, already makes use of those frequency bands.

Advertisement

While the FCC approved Amazon’s use of most of the frequencies it asked for, it deferred Amazon’s request to operate in the 20.2-21.2 GHz and 30.3-31.0 GHz ranges of the Ka-band. The agency also brushed aside challenges to Amazon’s requests from Iridium and Viasat.

Over the past year, Amazon has launched 180 Gen 1 satellites, and another 32 are due to be sent into low Earth orbit by a European-built Ariane 6 rocket this week. That tally is far short of the 1,616 satellites that the FCC is requiring Amazon to launch by the end of July. Last month, Amazon asked the FCC to extend the deadline for that halfway-point milestone to 2028. The company pledged to have all 3,232 Gen 1 satellites in orbit by mid-2029, as required.

In today’s grant of approval, the FCC said that half of the newly authorized satellites must be launched by February 2032, and that all of them must be put into operation by February 2035.

Advertisement

Source link

Continue Reading

Tech

OpenAI upgrades its Responses API to support agent skills and a complete terminal shell

Published

on

Until recently, the practice of building AI agents has been a bit like training a long-distance runner with a thirty-second memory.

Yes, you could give your AI models tools and instructions, but after a few dozen interactions — several laps around the track, to extend our running analogy — it would inevitably lose context and start hallucinating.

With OpenAI’s latest updates to its Responses API — the application programming interface that allows developers on OpenAI’s platform to access multiple agentic tools like web search and file search with a single call — the company is signaling that the era of the limited agent is waning.

The updates announced today include Server-side Compaction, Hosted Shell Containers, and implementing the new “Skills” standard for agents.

Advertisement

With these three major updates, OpenAI is effectively handing agents a permanent desk, a terminal, and a memory that doesn’t fade and should help agents evolve furhter into reliable, long-term digital workers.

Technology: overcoming ‘context amnesia’

The most significant technical hurdle for autonomous agents has always been the “clutter” of long-running tasks. Every time an agent calls a tool or runs a script, the conversation history grows.

Eventually, the model hits its token limit, and the developer is forced to truncate the history—often deleting the very “reasoning” the agent needs to finish the job.

OpenAI’s answer is Server-side Compaction. Unlike simple truncation, compaction allows agents to run for hours or even days.

Advertisement

Early data from e-commerce platform Triple Whale suggests this is a breakthrough in stability: their agent, Moby, successfully navigated a session involving 5 million tokens and 150 tool calls without a drop in accuracy.

In practical terms, this means the model can “summarize” its own past actions into a compressed state, keeping the essential context alive while clearing the noise. It transforms the model from a forgetful assistant into a persistent system process.

Managed cloud sandboxes

The introduction of the Shell Tool moves OpenAI into the realm of managed compute. Developers can now opt for container_auto, which provisions an OpenAI-hosted Debian 12 environment.

This isn’t just a code interpreter: it gives each agent its own full terminal environment pre-loaded with:

Advertisement
  • Native execution environments including Python 3.11, Node.js 22, Java 17, Go 1.23, and Ruby 3.1.

  • Persistent storage via /mnt/data, allowing agents to generate, save, and download artifacts.

  • Networking capabilities that allow agents to reach out to the internet to install libraries or interact with third-party APIs.

The Hosted Shell and its persistent /mnt/data storage provide a managed environment where agents can perform complex data transformations using Python or Java without requiring the team to build and maintain custom ETL (Extract, Transform, Load) middleware for every AI project.

By leveraging these hosted containers, data engineers can implement high-performance data processing tasks while minimizing the “multiple responsibilities” that come with managing bespoke infrastructure, removing the overhead of building and securing their own sandboxes. OpenAI is essentially saying: “Give us the instructions; we’ll provide the computer.”

OpenAI’s Skills vs. Anthropic’s Skills

Both OpenAI and Anthropic now support “skills,” instructions for agents to run specific operations, and have converged on the same open standard — a SKILL.md (markdown) manifest with YAML frontmatter.

A skill built for either can theoretically be moved to VS Code, Cursor, or any other platform that adopts the specification

Advertisement

Indeed, the hit new open source AI agent OpenClaw adopted this exact SKILL.md manifest and folder-based packaging, allowing it to inherit a wealth of specialized procedural knowledge originally designed for Claude.

This architectural compatibility has fueled a community-driven “skills boom” on platforms like ClawHub, which now hosts over 3,000 community-built extensions ranging from smart home integrations to complex enterprise workflow automations.

This cross-pollination demonstrates that the “Skill” has become a portable, versioned asset rather than a vendor-locked feature. Because OpenClaw supports multiple models — including OpenAI’s GPT-5 series and local Llama instances — developers can now write a skill once and deploy it across a heterogeneous landscape of agents.

But the underlying strategies of OpenAI and Anthropic reveal divergent visions for the future of work.

Advertisement

OpenAI’s approach prioritizes a “programmable substrate” optimized for developer velocity. By bundling the shell, the memory, and the skills into the Responses API, they offer a “turnkey” experience for building complex agents rapidly.

Already, enterprise AI search startup Glean reported a jump in tool accuracy from 73% to 85% by using OpenAI’s Skills framework.

By pairing the open standard with its proprietary Responses API, the company provides a high-performance, turnkey substrate.

It isn’t just reading the skill; it is hosting it inside a managed Debian 12 shell, handling the networking policies, and applying server-side compaction to ensure the agent doesn’t lose its way during a five-million-token session. This is the “high-performance” choice for engineers who need to deploy long-running, autonomous workers without the overhead of building a bespoke execution environment.

Advertisement

Anthropic, meanwhile, has focused on the “expertise marketplace.” Their strength lies in a mature directory of pre-packaged partner playbooks from the likes of Atlassian, Figma, and Stripe.

Implications for enterprise technical decision-makers

For engineers focused on “rapid deployment and fine-tuning,” the combination of Server-side Compaction and Skills provides a massive productivity boost

Instead of building custom state management for every agent run, engineers can leverage built-in compaction to handle multi-hour tasks.

Skills allow for “packaged IP,” where specific fine-tuning or specialized procedural knowledge can be modularized and reused across different internal projects.

Advertisement

For those tasked with moving AI from a “chat box” into a production-grade workflow—OpenAI’s announcement marks the end of the “bespoke infrastructure” era.

Historically, orchestrating an agent required significant manual scaffolding: developers had to build custom state-management logic to handle long conversations and secure, ephemeral sandboxes to execute code.

The challenge is no longer “How do I give this agent a terminal?” but “Which skills are authorized for which users?” and “How do we audit the artifacts produced in the hosted filesystem?” OpenAI has provided the engine and the chassis; the orchestrator’s job is now to define the rules of the road.

For security operations (SecOps) managers, giving an AI model a shell and network access is a high-stakes evolution. OpenAI’s use of Domain Secrets and Org Allowlists provides a defense-in-depth strategy, ensuring that agents can call APIs without exposing raw credentials to the model’s context.

Advertisement

But as agents become easier to deploy via “Skills,” SecOps must be vigilant about “malicious skills” that could introduce prompt injection vulnerabilities or unauthorized data exfiltration paths.

How should enterprises decide?

OpenAI is no longer just selling a “brain” (the model); it is selling the “office” (the container), the “memory” (compaction), and the “training manual” (skills). For enterprise leaders, the choice is becoming clear:

Choose OpenAI’s Responses API if your agents require heavy-duty, stateful execution. If you need a managed cloud container that can run for hours and handle 5M+ tokens without context degradation, OpenAI’s integrated stack is the “High-Performance OS” for the agentskills.io standard.

Choose Anthropic if your strategy relies on immediate partner connectivity. If your workflow centers on existing, pre-packaged integrations from a wide directory of third-party vendors, Anthropic’s mature ecosystem provides a more “plug-and-play” experience for the same open standard.

Advertisement

Ultimately, this convergence signals that AI has moved out of the “walled garden” era. By standardizing on agentskills.io, the industry is turning “prompt spaghetti” into a shared, versioned, and truly portable architecture for the future of digital work.

Update Feb. 10, 6:52 pm ET: this article has since been updated to correct errors in an earlier version regarding the portability of OpenAI’s Skills compared to Anthropic’s. We regret the errors.

Source link

Advertisement
Continue Reading

Tech

Curious about retro gaming? From bespoke consoles to marvelous upscalers, I can’t recommend these products enough

Published

on

It’s certainly easy to feel jaded by the modern gaming space.

Great games continue to release apace; this month along has already seen bangers in Nioh 3 and Romeo is a Dead Man. Yet when many big-budget AAA games boil down to that samey open-world format, or developers experience huge layoffs weeks after releasing a new title, it can all leave one feeling mightily cynical at the state of things.

Advertisement

Source link

Continue Reading

Tech

Salesforce Workers Circulate Open Letter Urging CEO Marc Benioff to Denounce ICE

Published

on

Employees at Salesforce are circulating an internal letter to chief executive Marc Benioff calling on him to denounce recent actions by US Immigration and Customs Enforcement, prohibit the use of Salesforce software by immigration agents, and back federal legislation that would significantly reform the agency.

The letter specifically cites the “recent killings of Renee Good and Alex Pretti in Minneapolis” as catalysts, calling them the “devastating indictment of a system that has discarded human decency.” It’s unclear how many signatories the letter has received so far.

The letter, which has not been reported on previously, is being organized amid Salesforce’s annual leadership kickoff event this week in Las Vegas. During an appearance at the event earlier today, Benioff asked international employees to stand to thank them for attending. He then joked that ICE agents were in the building monitoring them, according to current and former Salesforce employees who spoke to WIRED.

Benioff’s remarks sparked immediate backlash among employees. “Lots of people are furious,” says one source, who asked to remain anonymous for fear of retaliation. Another source tells WIRED that the internal pushback today was significantly more forceful than after Benioff made other controversial comments last fall supporting President Trump’s call to deploy the National Guard to San Francisco to address crime.

Advertisement

Salesforce did not immediately respond to a request for comment from WIRED. Business Insider and 404 Media previously reported on Benioff’s remarks and the reaction to them inside Salesforce.

“We are deeply troubled by leaked documentation revealing that Salesforce has pitched AI technology to U.S. Immigration and Customs Enforcement to help the agency ‘expeditiously’ hire 10,000 new agents and vet tip-line reports,” the letter reads. “Providing ‘Agentforce’ infrastructure to scale a mass deportation agenda that currently detains 66,000 people—73 percent of whom have no criminal record—represents a fundamental betrayal of our commitment to the ethical use of technology.”

The letter argues that Benioff’s voice “carries unique weight in Washington,” pointing to an episode last fall when Trump called off an ICE deployment in San Francisco after what appeared to be outreach from Bay Area tech leaders, including Benioff and Nvidia CEO Jensen Huang. It urges Benioff to use that influence as a “corporate statesman” to issue a public statement condemning what it calls ICE’s unconstitutional conduct and to commit Salesforce to clear “red lines” barring the use of its cloud and AI products for state violence.

Benioff has weighed in on both national and local political issues for years. He supported Democratic presidential candidate Hillary Clinton in 2016 and later became one of the most high-profile backers of Proposition C, a failed San Francisco ballot measure that would have raised taxes to fund programs to address homelessness. In 2020, he donated to the primary campaigns of some Democratic presidential candidates, including Kamala Harris.

Advertisement

But since Trump returned to the White House in January, Benioff has signaled greater support for some Republican leaders. In one interview, he said he strives to stay nonpartisan because he also owns Time magazine. But he also joked that, while he declined to contribute to Trump’s inauguration fund directly, he had “donated” a photo of the president on the magazine’s cover, which named him its 2024 Person of the Year. “He can use the Time magazine cover for free,” Benioff said in the interview with Fortune.

Benioff also faced backlash from Salesforce employees last fall when he suggested the National Guard should be sent to San Francisco to tackle crime ahead of the company’s annual conference in the city. He later apologized for the remarks, explaining they stemmed from genuine concerns about safety. He later reversed his stance and joined Nvidia’s Huang in asking Trump to refrain from sending troops.

Source link

Advertisement
Continue Reading

Tech

White House Eyes Data Center Agreements Amid Energy Price Spikes

Published

on

An anonymous reader shares a report: The Trump administration wants some of the world’s largest technology companies to publicly commit to a new compact governing the rapid expansion of AI data centers, according to two administration officials granted anonymity to discuss private conversations.

A draft of the compact obtained by POLITICO lays out commitments designed to ensure energy-hungry data centers do not raise household electricity prices, strain water supplies or undermine grid reliability, and that the companies driving demand also carry the cost of building new infrastructure.

The proposed pact, which is not final and could be subject to change, is framed as a voluntary agreement between President Donald Trump and major U.S. tech companies and data center developers. It could bind OpenAI, Microsoft, Google, Amazon, Facebook parent Meta and other AI giants to a broad set of energy, water and community principles. None of these companies immediately responded to a request for comment.

Source link

Advertisement
Continue Reading

Tech

Microsoft February 2026 Patch Tuesday fixes 6 zero-days, 58 flaws

Published

on

Patch Tuesday

Today is Microsoft’s February 2026 Patch Tuesday with security updates for 58 flaws, including 6 actively exploited and three publicly disclosed zero-day vulnerabilities.

This Patch Tuesday also addresses five “Critical” vulnerabilities, 3 of which are elevation of privileges flaws and 2 information disclosure flaws.

The number of bugs in each vulnerability category is listed below:

Wiz
  • 25 Elevation of Privilege vulnerabilities
  • 5 Security Feature Bypass vulnerabilities
  • 12 Remote Code Execution vulnerabilities
  • 6 Information Disclosure vulnerabilities
  • 3 Denial of Service vulnerabilities
  • 7 Spoofing vulnerabilities

When BleepingComputer reports on Patch Tuesday security updates, we only count those released by Microsoft today. Therefore, the number of flaws does not include 3 Microsoft Edge flaws fixed earlier this month.

As part of these updates, Microsoft has also begun to roll out updated Secure Boot certificates to replace the original 2011 certificates that are expiring in late June 2026.

Advertisement

“With this update, Windows quality updates include a broad set of targeting data that identifies devices and their ability to receive new Secure Boot certificates,” explains Microsoft in the Windows 11 update notes.

“Devices will receive the new certificates only after they show sufficient successful update signals, which helps ensures a safe and phased rollout.”

To learn more about the non-security updates released today, you can review our dedicated articles on the Windows 11 KB5077181 & KB5075941 cumulative updates and the Windows 10 KB5075912 extended security update.

6 actively exploited zero-days

This month’s Patch Tuesday fixes six actively exploited vulnerabilities, three of which are publicly disclosed.

Advertisement

Microsoft classifies a zero-day flaw as publicly disclosed or actively exploited while no official fix is available.

The six actively exploited zero-days are:

CVE-2026-21510 – Windows Shell Security Feature Bypass Vulnerability

Microsoft has patched an actively exploited Windows security feature bypass that can be triggered by opening a specially crafted link or shortcut file.

Advertisement

“To successfully exploit this vulnerability, an attacker must convince a user to open a malicious link or shortcut file.” explains Microsoft.

“An attacker could bypass Windows SmartScreen and Windows Shell security prompts by exploiting improper handling in Windows Shell components, allowing attacker‑controlled content to execute without user warning or consent,” continued Microsoft.

While Microsoft has not shared further details, it likely allows attackers to bypass the Mark of the Web (MoTW) security warnings.

Microsoft has attributed the discovery of the flaw to Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC), Office Product Group Security Team, Google Threat Intelligence Group, and an anonymous researcher.

Advertisement

CVE-2026-21513 – MSHTML Framework Security Feature Bypass Vulnerability

Microsoft has patched an actively exploited MSHTML security feature bypass flaw in Windows.

“Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network,” explains Microsoft.

There are no details on how this was exploited.

Advertisement

This flaw was once again attributed to Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC), Office Product Group Security Team, and Google Threat Intelligence Group.

CVE-2026-21514 – Microsoft Word Security Feature Bypass Vulnerability

Microsoft has patched a security feature bypass flaw in Microsoft Word that is actively exploited.

“An attacker must send a user a malicious Office file and convince them to open it,” warns Microsoft’s advisory.

Advertisement

“This update addresses a vulnerability that bypasses OLE mitigations in Microsoft 365 and Microsoft Office which protect users from vulnerable COM/OLE control,” continues Microsoft.

Microsoft says that the flaw cannot be exploited in the Office Preview Pane.

The flaw was again attributed to Microsoft Threat Intelligence Center (MSTIC), Microsoft Security Response Center (MSRC), Office Product Group Security Team, Google Threat Intelligence Group, and an anonymous researcher.

As no details have been released, it is unclear if CVE-2026-21510, CVE-2026-21513, and CVE-2026-21514 were exploited in the same campaign.

Advertisement

CVE-2026-21519 – Desktop Window Manager Elevation of Privilege Vulnerability

Microsoft has patched an actively exploited elevation of privileges flaw in the Desktop Window Manager.

“An attacker who successfully exploited this vulnerability could gain SYSTEM privileges,” warns Microsoft.

No details have been shared on how it was exploited.

Advertisement

Microsoft has attributed the discovery of the flaw to Microsoft Threat Intelligence Center (MSTIC) & Microsoft Security Response Center (MSRC).

CVE-2026-21525 – Windows Remote Access Connection Manager Denial of Service Vulnerability

Microsoft fixed an actively exploited denial of service flaw in the Windows Remote Access Connection Manager.

“Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally,’ explains Microsoft.

Advertisement

Microsoft has attributed the discovery of the flaw to the ACROS Security team with 0patch.

ACROS CEO Mitja Kolsek told BleepingComputer that the exploit was found in a public malware repository but is unsure how it is being exploited in attacks.

“We found an exploit for this issue in December 2025 in a public malware repository while searching for an exploit for CVE-2025-59230,” Kolsek told BleepingComputer.

“This issue turned out to be a 0day at the time, so we patched it (blog.0patch.com/2025/12/free-micropatches-for-windows-remote.html) and reported it to Microsoft. We don’t have any information on it having been exploited, but the quality of the combined exploit for both issues suggested professional work.”

Advertisement

CVE-2026-21533 – Windows Remote Desktop Services Elevation of Privilege Vulnerability

Microsoft has fixed an elevation of privileges in Windows Remote Desktop Services.

“Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally,” explains Microsoft.

Microsoft has attributed the discovery of the flaw to the Advanced Research Team at CrowdStrike.

Advertisement

CrowdStrike told BleepingComputer that the exploit they observed allows threat actors to add a new user to the Administrator group.

“The CVE-2026-21533 exploit binary modifies a service configuration key, replacing it with an attacker-controlled key, which could enable adversaries to escalate privileges to add a new user to the Administrator group,” Adam Meyers, Head of Counter Adversary Operations, CrowdStrike, told BleepingComputer.

“While CrowdStrike does not currently attribute this activity to a specific target or adversary, threat actors possessing the exploit binaries will likely accelerate their attempts to use or sell CVE-2026-21533 in the near term.”

Of the six zero-days, CVE-2026-21513, CVE-2026-21510, and CVE-2026-21514 were publicly disclosed.

Advertisement

Recent updates from other companies

Other vendors who released updates or advisories in February 2026 include:

While not a security update, Microsoft has started rolling out built-in Sysmon functionality in Windows 11 insider builds, which many Windows admins will find useful.

The February 2026 Patch Tuesday Security Updates

Below is the complete list of resolved vulnerabilities in the February 2026 Patch Tuesday updates.

To access the full description of each vulnerability and the systems it affects, you can view the full report here.

Advertisement


Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Advertisement


Advertisement



Advertisement


Tag CVE ID CVE Title Severity
.NET CVE-2026-21218 .NET Spoofing Vulnerability Important
Azure Arc CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability Critical
Azure Compute Gallery CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability Critical
Azure Compute Gallery CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability Critical
Azure DevOps Server CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability Important
Azure Front Door (AFD) CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability Critical
Azure Function CVE-2026-21532 Azure Function Information Disclosure Vulnerability Critical
Azure HDInsights CVE-2026-21529 Azure HDInsight Spoofing Vulnerability Important
Azure IoT SDK CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability Important
Azure Local CVE-2026-21228 Azure Local Remote Code Execution Vulnerability Important
Azure SDK CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability Important
Desktop Window Manager CVE-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability Important
Github Copilot CVE-2026-21516 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability Important
GitHub Copilot and Visual Studio CVE-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability Important
GitHub Copilot and Visual Studio CVE-2026-21256 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability Important
GitHub Copilot and Visual Studio CVE-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability Important
GitHub Copilot and Visual Studio Code CVE-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability Important
Mailslot File System CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability Important
Microsoft Defender for Linux CVE-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability Important
Microsoft Edge (Chromium-based) CVE-2026-1861 Chromium: CVE-2026-1861 Heap buffer overflow in libvpx Unknown
Microsoft Edge (Chromium-based) CVE-2026-1862 Chromium: CVE-2026-1862 Type Confusion in V8 Unknown
Microsoft Edge for Android CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Moderate
Microsoft Exchange Server CVE-2026-21527 Microsoft Exchange Server Spoofing Vulnerability Important
Microsoft Graphics Component CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability Important
Microsoft Graphics Component CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability Important
Microsoft Office Excel CVE-2026-21261 Microsoft Excel Information Disclosure Vulnerability Important
Microsoft Office Excel CVE-2026-21258 Microsoft Excel Information Disclosure Vulnerability Important
Microsoft Office Excel CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability Important
Microsoft Office Outlook CVE-2026-21260 Microsoft Outlook Spoofing Vulnerability Important
Microsoft Office Outlook CVE-2026-21511 Microsoft Outlook Spoofing Vulnerability Important
Microsoft Office Word CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability Important
MSHTML Framework CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability Important
Power BI CVE-2026-21229 Power BI Remote Code Execution Vulnerability Important
Role: Windows Hyper-V CVE-2026-21244 Windows Hyper-V Remote Code Execution Vulnerability Important
Role: Windows Hyper-V CVE-2026-21255 Windows Hyper-V Security Feature Bypass Vulnerability Important
Role: Windows Hyper-V CVE-2026-21248 Windows Hyper-V Remote Code Execution Vulnerability Important
Role: Windows Hyper-V CVE-2026-21247 Windows Hyper-V Remote Code Execution Vulnerability Important
Windows Ancillary Function Driver for WinSock CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important
Windows Ancillary Function Driver for WinSock CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important
Windows Ancillary Function Driver for WinSock CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important
Windows App for Mac CVE-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability Important
Windows Cluster Client Failover CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability Important
Windows Connected Devices Platform Service CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Important
Windows GDI+ CVE-2026-20846 GDI+ Denial of Service Vulnerability Important
Windows HTTP.sys CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability Important
Windows HTTP.sys CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability Important
Windows HTTP.sys CVE-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability Important
Windows Kernel CVE-2026-21231 Windows Kernel Elevation of Privilege Vulnerability Important
Windows Kernel CVE-2026-21222 Windows Kernel Information Disclosure Vulnerability Important
Windows Kernel CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability Important
Windows Kernel CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability Important
Windows LDAP – Lightweight Directory Access Protocol CVE-2026-21243 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Important
Windows Notepad App CVE-2026-20841 Windows Notepad App Remote Code Execution Vulnerability Important
Windows NTLM CVE-2026-21249 Windows NTLM Spoofing Vulnerability Important
Windows Remote Access Connection Manager CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability Moderate
Windows Remote Desktop CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important
Windows Shell CVE-2026-21510 Windows Shell Security Feature Bypass Vulnerability Important
Windows Storage CVE-2026-21508 Windows Storage Elevation of Privilege Vulnerability Important
Windows Subsystem for Linux CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important
Windows Subsystem for Linux CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important
Windows Win32K – GRFX CVE-2023-2804 Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo Important

Update 2/10/26: Added information about how CVE-2026-21533 and CVE-2026-21525 are exploited.

Modern IT infrastructure moves faster than manual workflows can handle.

In this new Tines guide, learn how your team can reduce hidden manual delays, improve reliability through automated response, and build and scale intelligent workflows on top of tools you already use.

Advertisement

Source link

Continue Reading

Tech

Steam Frame release date, rumours and everything we know

Published

on

2026 is set to be a huge year for Valve, as the brand behind Steam and the brilliant Steam Deck is set to launch exciting new additions to its hardware line-up.

There’s the Steam Machine, Steam Controller and, notably, the Steam Frame which is Valve’s first foray into VR headsets. Although Valve is yet to reveal how much the Steam Frame will cost, nor when we’ll be able to get our hands on the headset, its specs have been revealed.

Keep reading to learn more about the upcoming Steam Frame, including its rumoured price and release date to its confirmed tech specs. Make sure you also visit our list of the best game consoles to enhance your gaming set-up. 

Last updated: February 10th 2026 with updates from Valve on pricing and launch date

Advertisement

Steam Frame at a Glance

  • Set to launch within the first half of 2026
  • Exact launch date and pricing is still yet to be determined by Valve
  • Delayed announcements blamed on RAM prices and shortages crisis
  • Wireless VR headset
  • Available in two sizes: 256GB and 1TB
  • Runs on 2024’s mobile flagship processor, Snapdragon 8 Gen 3
  • Eye-tracking technology
  • Powered by SteamOS
  • Comes equipped with dual controllers for playing non-VR games

Advertisement

Steam Frame price rumours

Despite announcing the hardware back in November 2025, Valve has still not disclosed how much the Steam Frame, nor any of the upcoming devices, will cost. However, Valve has now addressed this in a recent statement (February 4th) and, as predicted, the ongoing memory shortages are to blame for the lack of information.

Essentially, Valve said that due to the limited availability and rising prices of critical components, the brand needs to “revisit [its] exact shipping schedule and pricing”. So, while Valve had originally expected to have revealed the price and launch date by now, the crisis has delayed this. This perhaps isn’t surprising, as RAM prices have been dominating headlines for the past few weeks, and the lack of update from Valve was starting to raise eyebrows.

It’s worth noting that Valve hasn’t explicitly stated that it needs to increase the price of any upcoming Steam hardware, although of course we didn’t know for sure what the RRP was going to be in the first place. While it’s unavoidable that the Steam Frame will cost more than we hoped, this does remain unconfirmed.

Steam Frame and controllers Steam Frame and controllers
Steam Frame and controllers. Image Credit (Valve)

If you’ve been keeping track of the rumours surrounding the Steam Frame, then you’ll likely have seen that listings for the VR headset and the Steam Machine were discovered on a Czech online retailer, Smarty. While there wasn’t any price on the listing, internet sleuths inspected the site and found prices within its code. Seriously. 

As reported by The Mysticle’s YouTube, the Steam Frame was listed for 17900 CZK (256GB) and 21990 CZK (1TB). That roughly converts to around $860 and $1060. Of course, we don’t know whether that was an accurate price in the first place and we definitely don’t know whether the price would remain the same now that Valve has publicly addressed its delayed pricing reveal and need to address the price again. 

Advertisement

Advertisement

Essentially, we’ll simply have to just wait for Valve to determine the pricing strategy and reveal it to us.

Steam Frame release date rumours

When Valve originally unveiled the Steam Frame, the brand said we would expect the new launches in “early 2026”. However, since that initial announcement, there’s been speculation that the ongoing RAM price crisis would delay the hardware. While this was mostly internet rumours, Valve has recently confirmed it did indeed have to revisit its shipping strategy, alongside the price too. 

While Valve has stated that the “goal of shipping all three products [Steam Frame, Steam Machine and Steam Controller] in the first half of the year has not changed”, the brand says that it needs to try to land on concrete pricing and launch dates, although this is difficult as the circumstances surrounding both can change so quickly. 

Advertisement

We appreciate Valve providing this update, but for now it seems we’re no closer to knowing when we can expect the long awaited Steam hardware.

Steam Frame specs

Sure, both the release date and price for the Steam Frame are still at large, but Valve has unveiled all the specs for the upcoming VR headset. While Valve has been careful to caveat that some of the specifications are subject to change ahead of availability, the initial specs are undoubtedly exciting. 

First and foremost, the Steam Frame is a PC and runs SteamOS powered by the Snapdragon 8 Gen 3 mobile processor. That means it’s the first of its kind that can handle the entire Steam Library, allowing you to play both VR and non-VR games without needing to connect to your PC. 

Advertisement

Advertisement

Essentially, the headset uses a 6GHz wireless adapter for streaming and dual radios: one for audio and visual streaming and another for connecting to your Wi-Fi.

Steam Frame ControllersSteam Frame Controllers

Plus, the Steam Frame comes equipped with dual controllers which are fitted with all the familiar inputs you need for non-VR games, such as the D-Pad, ABXY, thumbsticks and more. Speaking of the thumbsticks, they’re the same found in the upcoming Steam Controller and are magnetic for improved feel and responsiveness.

The Steam Frame also introduces Foveated Streaming which Valve explains that foveate streaming uses eye tracking data so that the PC only streams high resolution data in the area you’re looking at. As it’s a system-level feature, it applies to all games. The headset also uses eye tracking to ensure the best quality pixels are saved for only where you’re looking, which should theoretically help the Steam Frame run more efficiently too. Even so, it’s worth noting each panel is a 2160 x 2160 LCD too.

Technical specifications aside, the Steam Frame promises to be easy to use with no set-up required. Valve explains the Steam Frame is equipped with four high-res cameras that provide both controller and headset tracking, with infrared LEDs to track in dark environments too.

Advertisement

Advertisement

Finally, if you’re a glasses wearer then you might be wondering whether it’s possible to don the Steam Frame while wearing glasses. Valve has stated that your ability to comfortably wear glasses while the Steam Frame will depend on the width of the frames. However, Valve has teased that it’s “looking into making prescription lens inserts available ahead of launch”, although that’s all the information we have on that. 

Source link

Advertisement
Continue Reading

Trending

Copyright © 2025