Master your digital world with smarter guides

8 min read | Updated: October 29, 2026 | First published: October 29, 2026 | Sources: OpenAI Help - Memory in ChatGPT, Data controls in ChatGPT, ChatGPT release notes (Privacy Center, September 21, 2026) | By Guerni Ala Eddine TL;DR: ChatGPT on a personal Free / Plus / Pro account can remember you across chats, and by default it can use new conversations to improve the model for everyone . That is not a CVE and not a claim that your account is hacked. It is two switches plus a memory list most people never open. OpenAI's own help (updated through 2026) puts Memory under Settings → Personalization, and training under Settings → Data controls. Temporary chat stays out of history and is not used for training, but OpenAI may keep it up to 30 days for safety. This guide is the two-minute check - not a "delete ChatGPT" lecture. Quick answer - what do I click? On chatgpt.com (signed in): profile → Settings → Data controls → turn off Improve the model ...

8 min read | Updated: October 29, 2026 | First published: October 29, 2026 | Sources: Microsoft MSRC CVE-2026-70242, Microsoft Learn Office security updates October 13, 2026, Automox Patch Tuesday analysis | By Guerni Ala Eddine TL;DR: A fully patched Windows PC can still be running an old Outlook. Microsoft's October 13, 2026 Office security updates fix several Critical Outlook remote-code-execution bugs, including CVE-2026-70242 (CVSS 9.8). Microsoft's own vector is network, no privileges, no user interaction : a crafted message can execute when classic desktop Outlook shows it in the Reading Pane - no click, no attachment open. Microsoft rates exploitation Less Likely , lists exploit maturity as unproven, and has not reported in-the-wild use. Office updates arrive from the Office CDN, not Windows Update, so "Windows is up to date" is the wrong check. This guide is the two-minute Office build check against Microsoft's published floors. Quick answe...

8 min read | Updated: October 28, 2026 | First published: October 28, 2026 | Sources: Microsoft MSRC CVE-2026-80097, Enclave via Help Net Security, The Hacker News | By Guerni Ala Eddine TL;DR: Microsoft Authenticator on Android does more than show six-digit codes. It also acts as a broker that hands work-account tokens to Teams, Outlook, and other Microsoft apps. Researchers at Enclave found that before build 6.2606.4246 , a malicious app on the same phone - with no special Android permissions - could impersonate a trusted Microsoft app and receive those tokens. Microsoft tracks this as CVE-2026-80097 (CVSS 8.6, Important, elevation of privilege), patched in the September 8, 2026 advisory. Microsoft's own scoring says the attack is local, needs user interaction, and lists exploit maturity as unproven; Microsoft has not reported in-the-wild use. Enclave's lab write-up, covered on October 27, 2026, showed mailbox, files, calendar, Teams, and even passkey-management t...

9 min read | Updated: October 27, 2026 | First published: October 27, 2026 | Sources: Plex security notice, CISA KEV, The Hacker News | By Guerni Ala Eddine TL;DR: Plex Media Server versions before build 1.43.3.10861 can be chained into unauthenticated remote code execution - a cluster the community calls Plex2Shell (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656). Plex patched the issues in August 2026. On October 16 a public write-up appeared; Plex said on October 19 the flaws are "actively and widely exploited" against internet-facing servers, with compromised machines used for cryptocurrency miners and proxy software. CISA added all four CVEs to its Known Exploited Vulnerabilities catalog on October 20. If your server is older than 1.43.3.10861 and reachable from the internet, Plex's own advice is to assume it may already be compromised. This guide is the two-minute version check, the official update path for Windows, NAS, Linux, and Docke...

9 min read | Updated: October 27, 2026 | First published: October 27, 2026 | Sources: Apple Newsroom, Apple statement to MacRumors, iFixit teardown, Apple repair pricing, AppleCare fees | By Guerni Ala Eddine TL;DR: Apple's first foldable iPhone, the iPhone Duo, went on sale Friday, October 23, 2026. Within hours, owners in the United States, Australia, China, Canada, and India posted the same fault: a crack along the inner display hinge, often with a bright stuck-pixel line across one half of the screen, sometimes after a pop or a tight hinge. On October 26, Apple told MacRumors it is "aware of an issue impacting the inner display on a small number of iPhone Duo units" and that affected owners should contact AppleCare for a replacement. Apple has not published a cause or a manufacturing fix. iFixit's teardown maps the reported cracks to a stress point just below the hinge flex-cable gap. Out of warranty, inner-display damage is listed at $999 in the Unite...

Figure 1 — The 8 p.m. evidence session: a wired test, your ISP's broadband label, and the log that turns a feeling into a case. Quick Answer: Test your speed the way the FCC's own rules measure it — wired if possible, during peak hours (7–11 p.m.), across three evenings — and compare the results to the "Broadband Facts" label your ISP is legally required to publish. The label's typical speed is the number that matters, not the one in the ad. If three evenings of honest tests sit below your label's typical speed, you don't have a complaint — you have evidence : a free FCC complaint forces your provider to answer, in writing, within 30 days. Evergreen guide — verified October 26, 2026. The measurement method, the Broadband Facts label requirement (mandatory since April 2024), and the FCC informal complaint process are stable consumer rights. The FCC approved revisions to the label rules in July 2026 to make them easier to read — the fundamentals below ...