Gaming monitors have been delivering insane refresh rates for years, but laptop screens have mostly stayed the same. Samsung Display just changed that equation at IMID 2026 in Busan, where it unveiled a 16-inch OLED panel built specifically for laptops that hits a 300Hz refresh rate.

Why does 300Hz on a laptop actually matter?

Samsung says this is the first time any self-emissive laptop display has reached 300Hz, and that’s a big deal if you use your laptop for anything beyond emails and spreadsheets. Higher refresh rates mean smoother motion, whether you’re scrolling through a webpage, editing video, or actually gaming on the go. 

Until now, you needed a hefty gaming laptop with a dedicated GPU pushing high frame rates to make a fast panel worthwhile. And while this panel is also aimed at gamers, Samsung packing this into a slim 2.5K OLED panel means that smoothness could trickle down to thinner, lighter laptops too.

What else did Samsung bring to the show?

The 16-inch panel wasn’t the only thing Samsung brought to the event. Samsung also showed off a 31.5-inch QD-OLED monitor that combines 4K resolution with a 360Hz refresh rate, something no monitor has managed to do simultaneously before. 

The company also brought a 34-inch QD-OLED gaming monitor with a 21:9 ultrawide aspect ratio and its own 360Hz refresh rate. All three panels were showcased in the Winning Game Arena, clearly aimed at showing gamers and creators what its OLED tech can do across different screen sizes.

Samsung didn’t share when this 16-inch panel will actually land in laptops you can buy, but the fact that it exists at all suggests laptop makers might finally start advertising refresh rates the same way gaming monitor brands do. If your laptop screen has ever felt sluggish compared to your monitor at home, this might be the fix you’ve been waiting for.

How can normal users increase their privacy, safety and security online?

Over the last two decades, the internet quietly rebuilt itself around a business model that depends on knowing everything about you. Every app you install or use, every account you create, every website you visit, and every form you fill out becomes another data point feeding a system designed to track, profile, and monetize you and your identity.

This process is often referred to as surveillance capitalism and creates an economy where attention and personal data are the product and you are the raw material.

The mechanics of this are almost invisible day to day. A single email address becomes the thread that ties together your shopping habits, your health searches, your location history, and your social connections.

Data brokers exist specifically to aggregate these threads, buying, selling, and cross-referencing fragments of your life until they can construct a profile more complete than most people would recognize about themselves.

None of this requires a breach or a hack – it’s simply how the default internet works. Data brokers are often the most consequential handlers of personal information that operate without consumers’ awareness or informed consent.

The result is that privacy is no longer something you can expect. It has become something you have to actively construct, piece by piece, against the grain of nearly every service you use. The harms of this model are diffused and delayed and you don’t feel the effects of a data broker profile the way you feel a stolen credit card.

The damage shows up later, as spam, as price discrimination, as identity theft, as a general erosion of control over your own digital identity.

The graphic below shows the problem of using a single identity across your online actions. When a data breach occurs, everything connected can be exposed and tied back to you.  Data brokers can use it to construct a complete picture of your life, and this valuable information is for sale.

Artificial Intelligence (AI) systems have made the problem significantly worse.

Data brokers can now use AI to link your different actions in a way that was previously thought impossible. AI’s expertise is data analysis, working through vast amounts of information to correlate your actions into a valuable profile.

In this world of surveillance capitalism, can we shift the privacy pendulum back in your favor? Is it even possible to be private, secure, and safe online?

Personas and Compartmentalization

If surveillance capitalism works by linking everything about you into one exploitable profile, the countermeasure is structural (not just legal or political): break the correlating identifiers.

This is the premise behind compartmentalization. Instead of using one set of identifiers such as one email, one phone number, one payment method, one communication handle across every context in your life, you deliberately compartmentalize activities into separate, purpose-built personas.

One persona for online shopping, a different one for dating apps, another for travel, another for marketplace listings, and even another for that newsletter you’re not sure you trust yet.

Each persona operates as a self-contained identity with its own email address, its own phone number, its own payment method, its own browser, and its own communication handle. Crucially, these personas aren’t connected to each other or back to your actual identity in any way a data broker or advertiser could observe.

As shown in the graphic below, if a persona gets swept up in a breach, starts attracting spam, or gets sold to a marketing list, the damage is contained and is not tied back to you.

This is a fundamentally different privacy model than the one most security tools rely on. Most tools try to protect a single identity better with stronger passwords, better encryption, more careful permissions.

Compartmentalization instead assumes that any single identity is eventually going to become correlated and anticipates corrections by ensuring that no single identity is valuable due to its changeability. This process is less about building an impenetrable wall and more about not putting all your value behind one wall in the first place.

The elegance of this approach is that it doesn’t require the rest of the internet to change. You don’t need every company you interact with to suddenly adopt better data practices. You just need a layer that sits between you and them, generating and managing these personas on your behalf.

Anonyome Labs patented many of the ideas related to creation of online personas and compartmentalization, here are some examples:

How MySudo Puts This Into Practice

Compartmentalization and personas are an important advancement, but the harder problem (and the one that has occupied most of our product decisions) is making it usable by typical users and automatic enough that people can do it consistently, without a computer science degree, and without constant friction.

As shown in the graphic below MySudo was designed to implement this paradigm and enable each user to create up to 9 personas or Sudos. Each Sudo provides a different:

• Phone number that can make and receive phone calls and SMSs;
• Email inbox that can send and receive emails;
• Virtual payment card for purchasing online;
• Communication handle to enable end-to-end encrypted (E2EE) messaging, voice calling and video calling (similar to WhatsApp);
• Browser for complete separation of browsing.

MySudo comes in two form factors: 

• A mobile app for iOS and Android that allows each persona to communicate externally with phone calls, SMSs, and emails. It allows creation of individual payment cards and to have end-to-end encrypted messaging, email, voice and video. It also has a separate browser for each persona. 
• A desktop companion app for Windows and Mac that allows management of persona emails in a form factor that provides support for longer and more complex emails.  More features are coming to the MySudo desktop app soon.

MySudo is part of a growing family of privacy and security applications from Anonyome Labs that also includes a privacy focused VPN and Password Manager (coming soon).

Individual online privacy has been under surveillance and attack almost since the beginning of the web – and now users have identity-based tools to fight back.  By creating multiple personas that allow you to compartmentalize your life, you too can reap the privacy benefits.

Your identity is already being pieced together. Stop handing over the pieces.

Download MySudo now to create separate digital identities that keep your personal information private and out of reach from data brokers, scammers, and the next data breach.

Sponsored and written by ANONYOME LABS.

To tell if your data has been compromised, search your primary email addresses and phone numbers on breach lookup databases like Have I Been Pwned or CyberNews, check official state data breach registries, audit your credit reports at AnnualCreditReport.com for unauthorized accounts, and inspect your financial accounts and email settings for unrecognized logins or automated forwarding rules.

Quick Take: How to Audit Your Data Exposure

Prerequisites for Performing a Personal Data Audit

Before initiating a manual security audit, gather the necessary assets to ensure you do not miss hidden attack vectors or orphan accounts. Having these items prepared reduces the risk of overlooking connected services:

• A Master Account Inventory: A compiled list of every email address, phone number, username, and primary domain name you have used across personal, financial, and work accounts over the past five to ten years.
• Access to a Password Manager: A centralized credential vault (or secure browser storage) to review where reusable passwords may have been deployed across multiple platforms.
• Identification and Credit Documentation: Secure access to your credit monitoring portals or government-issued identification details needed to request official credit reports.
• Secondary Verification Devices: An authenticated smartphone or hardware security key ready to receive time-based one-time password (TOTP) codes as you audit and re-anchor account security.

Step-by-Step: How to Determine If Your Data Has Been Leaked

Data breaches vary significantly depending on what information was stolen. To avoid wasting time on false alarms or misdiagnosing a breach, route your investigation based on the specific exposure vector below.

Step 1: Query Aggregated Data Breach Databases

Threat actors frequently dump or trade stolen databases on illicit forums, paste sites, and dark web marketplaces. Breach aggregators collect these compromised datasets, index the hashed credentials, and allow users to search their exposure without exposing sensitive details.

Navigate to an established breach repository such as the CyberNews Personal Data Leak Checker or Have I Been Pwned. Input your primary and secondary email addresses along with phone numbers tied to key online accounts. Review the returned query report to identify which specific services suffered a breach, the exact date of exposure, and what data classes (e.g., plain-text passwords, salt hashes, credit card details, or physical addresses) were included in the leak.

Expected Outcome: You will receive a list of historic and recent database breaches linked to your contact details, highlighting precisely which credentials must be rotated immediately.

Step 2: Search Official State and Corporate Breach Notifications

Companies are legally bound by consumer protection statutes to notify affected customers when a security incident compromises personal identification or financial records. However, physical mail notices and corporate emails can easily be overlooked or filtered into spam folders.

Consult official public breach repositories, such as the California Department of Justice data breach guidelines and public disclosure log, which track corporate security incidents impacting consumers. Cross-reference these logs against major services you use—including medical portals, credit issuers, retail vendors, and educational institutions. Additionally, search your email inbox for keywords like “Notice of Data Breach,” “Security Incident,” or “Unlawful Access.”

Expected Outcome: You will verify whether a vendor holding your sensitive records has formally declared a breach, giving you specific legal timelines and instructions regarding offered credit monitoring services.

Step 3: Inspect Email Account Rules and Inbox Settings

When attackers gain stealthy access to an email account, they rarely change the password immediately. Instead, they create automated inbox rules to redirect incoming mail, hide password reset requests, or intercept financial confirmations without alerting the owner.

Log into your primary email account, open the general account settings, and locate the “Rules,” “Filters,” or “Forwarding and POP/IMAP” tab. Audit every rule to verify that no unknown external email address is secretly receiving a copy of your messages. Check the “Trash” and “Archive” folders for automated filters designed to mark incoming security alerts from banks or social media platforms as read and deleted.

Expected Outcome: You will ensure that your central recovery vector (your primary email account) is not silently routing security alerts and password reset codes directly to a malicious actor.

Step 4: Audit Financial Statements and Credit Bureau Files

Financial identity theft often begins with small, innocuous transactions. Fraudsters run micro-charges—frequently between $0.50 and $3.00—to confirm that a stolen payment card or bank routing number is active before executing larger fraudulent purchases or line-of-credit applications.

Log into your checking, savings, and credit card accounts to review line-item transactions over the past 30 to 60 days. If you find any unfamiliar charge, even for a minimal amount, contact your card issuer immediately to report account compromise. Next, access your free credit reports from Equifax, Experian, and TransUnion via AnnualCreditReport.com. Inspect the “Hard Inquiries” and “Open Accounts” sections for credit lines, personal loans, or store cards that you did not explicitly apply for.

Expected Outcome: You will detect early indicators of financial identity theft and spot unauthorized credit applications before they damage your overall credit standing. If you regularly use credit cards for online transactions, reviewing baseline features and security protocols by understanding different types of credit cards can help you spot anomalous account behavior faster.

Step 5: Review Active Sessions and Connected OAuth Applications

Modern account compromises increasingly rely on session hijacking—where attackers steal active session cookies or leverage third-party OAuth application tokens to bypass traditional password authentication entirely.

Open the security panel of your core accounts (e.g., Google, Apple, Microsoft, social networks, and password managers). Locate the “Active Sessions,” “Devices,” or “Where You’re Logged In” section. Terminate any session linked to an unrecognized device, outdated operating system, or unfamiliar geographic location. Next, navigate to “Connected Apps” or “Third-Party Permissions” and revoke access for any legacy application or service you no longer actively use.

Expected Outcome: Invalidating active session tokens immediately severs an attacker’s persistent backdoor access, forcing any unauthorized party to re-authenticate from scratch.

Verification: Confirming Whether Exposure Is Active or Historical

Not all data breach results require the same immediate panic. Distinguishing between a historical, static database leak and an active, ongoing account intrusion dictates your response speed and tactical priorities.

To verify if an exposure is active:

• Check Real-Time Sign-In Logs: Review the timestamps and IP addresses in your account security logs. If an IP address from an unfamiliar region logged in within the past 24 hours, the compromise is live and active.
• Test Existing Credentials: If your password no longer works and you have not recently changed it, an attacker may have already taken over the account and altered the recovery email or phone number.
• Evaluate Password Reuse Scope: A entry in a breach database from five years ago may be harmless if you have changed that password since. However, if that old password is still used across active services today, treat every single one of those destination accounts as actively vulnerable. Implementing robust credential management habits and evaluating whether are password managers really safe will significantly reduce your attack surface during cross-platform exposures.

Troubleshooting: What to Do When Signs Point to Compromise

If your diagnostic audit reveals active unauthorized access, execute this recovery escalation path to re-establish control over your identity and accounts.

Failure Point 1: You Are Locked Out of Your Primary Account

Fix: Initiate the service provider’s account recovery workflow immediately. Use a trusted, known device and network connection previously associated with the account. If the recovery email or phone number was altered, select “Try another way” to supply account creation dates, previous passwords, or identity verification documents. If the account contains financial or billing information, contact customer support by phone to place an administrative hold on the profile while identity verification takes place.

Failure Point 2: Password Resets Fail to Stop Unauthorized Sign-Ins

Fix: Changing your password does not always terminate active browser sessions if an attacker holds a persistent session cookie or OAuth token. According to Lunar Cyber’s breach monitoring analysis, modern infostealer malware extracts session tokens and browser state data, enabling bad actors to bypass standard password resets. After changing your password, explicitly click “Log out of all other sessions” or “Revoke all active tokens” across all settings menus. Run an up-to-date malware scan on your local machine to eliminate active infostealer Trojans that may be capturing keypresses or browser session files in real time.

Failure Point 3: Your Social Security Number or Government ID Was Exposed

Fix: Password resets cannot safeguard physical identity attributes like Social Security numbers or driver’s license numbers. Take formal legal and credit protection measures immediately: submit an official report via IdentityTheft.gov, follow established legal identity theft response protocols, and contact each of the three nationwide credit bureaus (Equifax, Experian, TransUnion) to initiate a full credit freeze. You can also explore placing a credit freeze or fraud alert depending on the severity of the document exposure.

While public breach lookup services and account security audits are essential components of digital hygiene, they possess inherent structural limitations that every user should understand:

• Reporting Lag Times: Breach aggregators rely on public dumps, security research contributions, or threat intelligence feeds. Months or even years can elapse between an actual security breach and its publication on public lookup platforms.
• Private Threat Intelligence Gaps: Proprietary databases stolen by sophisticated threat actors are often sold privately or leveraged exclusively for targeted spear-phishing and extortion, meaning they will never appear in searchable public repositories.
• Session Token Exploits: Modern credential theft extends far beyond static text passwords. If malware steals local browser session cookies, breach tools searching for leaked text credentials will show no alert, even while your active sessions are being accessed.
• Enterprise and Business Scope: Individual consumer tools only check personal identifiers. Organization-level breaches often require specialized monitoring focused on protecting customer data, internal access logs, and API endpoint security.

Key Takeaways for Long-Term Data Security

Maintaining long-term digital privacy requires moving from reactive panic to proactive operational security. Apply these key practices to keep your exposure minimal:

Frequently Asked Questions

[xssfox] recently found a Cricut Maker in an e-waste disposal. A quick scan over the device indicated it was in moderately good condition, with merely some perished rollers to contend with. The device was salvaged, with the awareness that Cricut is plenty good at disabling and locking down machines when it wishes. However, those measures didn’t stop [xssfox] from bringing it back to life.

The suspicion was that the machine had been locked out after the original owner received a warranty replacement or similar. Whatever the reason, the rollers would have to be repaired and the machine unlocked if it were ever to cut (Cricut?) again. Hooking the machine up to Cricut software showed that it was “deactivated”, so there was work to do.

The rollers were not a difficult replacement, but the hacking would take a little work. Examining the motherboard didn’t reveal any obvious EEPROMs, and the microcontroller was not one [xssfox] had the debugger to work with. Thus, attention turned to intercepting communications between the machine and the host PC over USB. This revealed the machine sending its serial number to the Cricut PC software in plain text with no checksums or encryption at all. Unlocking the machine was as easy as installing an RP2040 in between the Cricut Maker and the host PC. It was programmed to relay packets between the two and spoof the serial number in the process.

[xssfox] suspects a software-only solution may be possible, too, though hasn’t implemented one yet. We’ve featured her work before, too, like her efforts to spoof emergency traffic light preemption signals.

Broadcom is in talks with lenders to raise more than $60bn in debt, Bloomberg reported on Thursday. The money would finance AI chips for Anthropic and other companies. Bloomberg cited people with knowledge of the matter.

The figures under discussion could take the total as high as $100bn. Talks are continuing and the terms may change.

Blackstone and Apollo Global Management are in talks to take part, the same people said. Spokespeople for Broadcom, Anthropic, Apollo and Blackstone declined to comment.

How the financing is structured

The package has two parts. A junior tranche of roughly $30bn sits alongside a senior-secured tranche of about $60bn to $70bn, according to Bloomberg.

Broadcom would guarantee a portion of the senior tranche. A special-purpose vehicle would issue the debt.

A special-purpose vehicle is a separate legal entity created to hold specific assets and the borrowing against them. The debt sits on the vehicle’s books rather than on the balance sheet of the company that set it up. Investors in the vehicle have a claim on the assets inside it.

Anthropic does not buy the chips under this arrangement. Investors finance the purchase, then lease the hardware to the company.

The first deal in the partnership

Broadcom, Apollo and Blackstone formed the AI XPV partnership in June. Its opening transaction raised $35bn to expand Anthropic’s computing capacity, using Broadcom custom chips and networking equipment. Reuters reported the terms. TNW covered it in May, when Apollo and Blackstone shopped it to investors.

In that transaction Broadcom backstopped most of the debt while Apollo and Blackstone financed the chip purchases. Bloomberg reports that the backstop allowed the senior tranches to obtain investment-grade ratings, which lowered the borrowing costs.

The new financing could follow the same shape, according to Bloomberg’s sources, and may arrive in stages rather than at once.

The 20 gigawatt target

The partnership intends to finance more than 20 gigawatts of computing power for leading AI labs by 2028. Bloomberg puts the cost at hundreds of billions of dollars. That capacity would roughly equal the output of 20 nuclear plants.

The first $35bn commitment would add one gigawatt, Reuters reported. On those figures the partnership has funded about a twentieth of its stated target.

Where Broadcom sits

Broadcom designs custom chips for Alphabet and Meta, and has supply agreements with Anthropic and OpenAI. Its chief executive said in March that the company expects AI chip sales to exceed $100bn next year.

Broadcom holds an Apple agreement worth more than $30bn. It signed a $200bn deal with Samsung in July covering memory, foundry and advanced packaging through 2030. Reuters notes that technology companies use Broadcom custom silicon to reduce their reliance on Nvidia.

Broadcom shares rose as much as 1.1% in late trading after Bloomberg published, having briefly declined first. The stock had gained 5.2% this year to Thursday’s close.

Broadcom, Apollo and Blackstone announced the AI XPV partnership in a joint release in June. The three said it would help finance computing infrastructure. Bloomberg reported in May that Apollo and Blackstone were weighing a $35bn financing for Broadcom, and reported the deal complete in June.

Anthropic’s other borrowing

Anthropic is raising money in several places at once. An investment firm is lending about $1.3bn towards a Texas data centre that will house its systems. The company is also finalising a revolving credit facility ahead of its listing, targeting more than $10bn.

Its own figures show the scale involved. Anthropic booked second-quarter revenue above $11.5bn against $787m a year earlier. Its annualised run rate reached $65bn by the end of July, Bloomberg has reported. The company recorded a net loss of almost $42bn in 2025, roughly five times the $8.3bn it lost the year before.

It raised $65bn in May at a $965bn valuation. It has separately agreed a compute deal with SpaceX that could be worth tens of billions over three years.

It expects its IPO to match or exceed SpaceX’s record $75bn raise, and could file publicly as soon as the end of this month. SpaceX’s final figure reached $86.2bn once the overallotment option was exercised.

Anthropic is working with Morgan Stanley, Goldman Sachs and JPMorgan on the listing. US initial public offerings had raised $160.6bn through 19 August, against the 2021 record of $195.2bn.

The wider financing market

Similar structures have appeared across the industry this month. Nvidia announced that a coalition including BlackRock and Goldman Sachs was lining up more than $500bn for the AI build-out.

Regulators have begun to place these vehicles. SEC staff agreed this month that data centre securitisation falls outside Dodd-Frank risk retention rules, in a response tied to Nvidia’s programme.

Reuters reports that Alphabet, Amazon and Microsoft have all turned to debt markets to fund AI expansion. All three expect spending to stay high through 2026.

Bloomberg reported on 15 August that bond traders were weighing about $70bn of what it described as shadow credit backstops from AI companies. Broadcom’s guarantee on the senior tranche is that kind of commitment.

What has not been confirmed

None of the four companies has commented, and Bloomberg’s sources spoke on condition of anonymity because the information is private.

Bloomberg’s sources did not settle the split between the $30bn junior tranche and the senior tranche. They gave no figure for the portion Broadcom would guarantee. They did not set a timetable for issuance, or name any lender beyond Apollo and Blackstone.

The 20 gigawatt figure is the partnership’s own target for 2028. The partnership has financed one gigawatt of it so far.

OpenAI has released a plugin for the integration.

Mac users can now give ChatGPT their entire Messages history and have it write texts. Hand OpenAI your house keys while you’re at it.

Since January 2026, users have been able to hand over all of their Apple Health data to OpenAI, in return for medical advice that can be dangerously wrong. Despite earning at least one more lawsuit because of that, OpenAI is pressing ahead, and has now chosen to take on Messages on the Mac.

A new Messages plugin for ChatGPT is intended to search your messages, which could be handy. It’s meant to summarize message threads, which could be a blessing.

But it’s also meant to write messages for you, because it’s arduous to type out six words and an emoji. OpenAI insists that it’s fine letting ChatGPT write your messages, ignoring the whole soulless aspect of that, because you have to approve a message before it’s sent.

Yet ChatGPT’s own video shows that there is an option to “Always allow sending to this chat.” So it appears that, no, you don’t have to approve each message.

Then according to Bloomberg, OpenAI noted that the plugin can only work if the user chooses to use it. The company further emphasized that this is all done on device, plus it does not create an index of users’ messages.

Yet reportedly during sign up to the plugin, ChatGPT notifies the user that it will access their on-device Messages history. So whether it builds an index or not, if you use the plugin, it has full access to everything you’ve sent on Messages.

And then under the right conditions, it can send Messages for you. So now you’re trusting all of that potentially private information to OpenAI and assuming it won’t do anything with it.

OpenAI would be one of the firms that ripped off all authors of all books in the world in order to train its AI, and then sell your information back to you.

Apple has not commented on OpenAI’s launch, but it may be significant that the plugin is for the Mac and not, as yet, the iPhone. OpenAI says that it uses AppleScript the Mac’s Accessibility features to perform these tasks, and there is no AppleScript for iPhone.

Whether or not Apple’s iOS privacy features would mean ChatGPT couldn’t take over Messages as it now can on the Mac, don’t use it. It is taking the privacy and security of Apple’s Messages, and potentially undoing all of that just to have the ability to quick search through messages.

That is genuinely a benefit, if you have enough Messages threads to make searching manually a chore. But if you do need this feature, you’re getting it anyway with the forthcoming Siri AI.