Meta to Literally Every Business User: Nice Website You Got There
Meta already scrapes the web on a titanic scale, so the expanded terms seem like a maneuver to shore up the company’s legal footing as it stakes its future on web-browsing agents like its Muse AI agent. The broad terms could allow Meta to index business sites for Muse to navigate or for its advertising business, or train Muse on how real commercial operations are laid out at the same time Meta is pitching Muse as an all-purpose business agent. According to Ars Technica, the move could allow Meta to dodge many millions of dollars in content-licensing fees, while Nieman Lab reported the new terms potentially gate news organizations’ access to Meta audiences on platforms like Facebook on the contractual condition they let Meta scrape their websites and use the content. The update rolls out Oct. 30 and covers any website “associated with” any of a commercial user’s products or services (another sweeping claim). Meta defines commercial users as accounts that advertise, market, sell or list products, develop apps, create or use product catalogs, manage a Page or business Group, or use any business product, such as the Meta Business Suite, which lets companies manage all of their accounts from one console. One can imagine this would give Meta scraping rights to an impressive swathe of the open web. The new clause reads: You authorize us (or any entity acting on our behalf) to use automated software (such as web scrapers, bots, robots, spiders, crawlers, and user agents) and create test credentials to access, index, cache, analyze, collect, retrieve, or crawl the domains, web pages, or URLs (and any content available through them) that are associated with your products or services, or that are made available through your or users’ use of Meta Company Products and services, and to periodically pull updates from such domains, web pages, or URLs. It doesn’t take a genius to realize that could extend to content behind paywalls. Meta also recently implemented Meta One, a paid subscription service that’s really more of a way for Meta to charge some Facebook and Instagram users money to bypass new external link limits. Nieman Lab argued, “Put another way, Meta has begun charging users to post links to the same content that it will be permitted to crawl for free.” Meta has granted some publishers an exemption from the program, at least for now. Notably, Meta declined to answer Nieman Lab’s questions about Meta One or bypassing paywalls.
After Muse Launch, U.S. Banks Are Saying Hell No to AI Agents Moving Money
Artificial Intelligence After Muse Launch, U. Banks Are Saying Hell No to AI Agents Moving Money Fortunately, Charles Schwab CEO Rick Wurster says only a relative handful of dummies are trying to. 16, 2026, pm ET Reading time 2 minutes Meta's Muse AI mascot, frowning. © Shutterstock Read Later Read Later Comments (3) Some U. S. banks are, thankfully, blocking their clients from letting Meta’s Muse AI bot root around in their accounts. Even more thankfully, it appears relatively few people have been dumb enough to try. Speaking to Bloomberg TV on Friday, Charles Schwab CEO Rick Wurster said the brokerage is actively blocking Muse from moving money because it poses unacceptable risks to the firm and its clients. “We don’t want someone just giving their password to Muse, and letting Muse come in and take action on that client’s behalf. We can’t control it, the client can’t control it, something could go wrong and who’s liable?” Wurster said. “For the protection of the client and for the protection of us, we’re not allowing it.” Wurster told Bloomberg that he personally receives data on AI agents that were detected and rejected on a weekly basis, and that this figure has yet to cross into the hundreds. Given that Muse collects entire dossiers of data on users and everyone they digitally interact with, potentially exposes users to exploitation, and has already had serious reported privacy issues like the time it handed out a home address to a stranger, this is probably for the best. Wurster said, “I get a report on how many times we’ve blocked clients from using one of these agents in a week and it’s in the tens and twenties—per week—that the big agents are being blocked. According to Bloomberg, Wurster did encourage the use of Charley, Schwab’s in-house AI assistant unveiled last month—Charley will only handle administrative and informational tasks out of the gate, not trading. Explore more on these topics AI AI Agents Banks Facebook Finance Meta Muse Show more Copied! our newsletters Subscribe and interact with our community, get up to date with our customised Newsletters and much more. Brain Drain Is a Bigger Threat to National Cybersecurity Than AI What good is investing in offense if you’ve hobbled your own defense? Privacy & Security Webb Wright Oct 15 Meta to Literally Every Business User: Nice Website You Got There That's right: If a business uses Meta for any commercial purpose, Meta's new terms say it can do almost anything it wants with content from that business's website, like feeding it to Muse.
Llama.cpp on a jailbroken PS5: run any GGUF model natively on the console
main BranchesTags Go to file CodeOpen more actions menu Latest commit History 80 Commits 80 Commits Folders and files NameNameLast commit message Last commit date docs docs patches patches probes probes ps5 ps5 scripts scripts site site third_party third_party . gitignore . gitignore . gitmodules . gitmodules CHANGELOG. md CHANGELOG. md LICENSE LICENSE README. md README. md View all files Repository files navigation The Suggested list has d1 Omni 600M, d1 3B and Clef Flash. Any GGUF that carries llama. cpp's decision metadata loads the same way, and the app labels it a decision model. You need a PS5 on firmware 7.00 to 13.60, jailbroken, with these payloads loaded: Payload For kstuff-lite the kernel patches homebrew runs on required etaHEN homebrew support required ShadowMountPlus puts PS5LM on the home screen from /data/homebrew required elfldr (port 9021) temperature, power and real free space, through ps5-exporter recommended ftpsrv (port 2121) installing the app, copying models from a PC recommended Download ps5lm-app-vX. Z. zip from the latest release and unzip it. Copy the PPSA99575 folder to /data/homebrew over FTP. ShadowMountPlus adds PS5LM to the home screen. Open PS5LM, go to Models > Suggested and get a model. Or copy a . gguf to /data/PS5LM/models, or to PS5LM/models on a USB drive. Once Home says Ready, open http://<console>:8081 in a browser, or point your OpenAI or Anthropic client at it. To update, copy the new folder over the old one. Settings, models and downloads stay in /data/PS5LM. Using it from coding tools (opencode, Codex, Claude Code) is in docs/CLI. md. Building · Console notes · Porting · Research · Models that fit · Roadmap · Changelog · The original payload abhi245y, who built the native GPU app this one grew from (PS5LM Plus). llama. cpp and ggml, which do the actual work. Mihawk-99 for PS5_Vulkan and RADV on the PS5, and PS5CEMU-HAR for the driver patches in patches/mesa. BlackBearReloaded for ps5-homebrew-ui, ps5-opengl and ps5-homebrew-dev-protocol, and John Törnblom for the SDK. Marice for ps5-exporter, which the app carries. Manrope (OFL) for the type, and PocketVibe for the interface sounds. GPL-3.0-or-later, see LICENSE. llama. cpp keeps its MIT licence, Manrope its OFL. No Sony SDK files, keys, firmware or model weights are in this repository. PS5LM is not affiliated with Sony Interactive Entertainment. "PlayStation" and "PS5" are trademarks of Sony Interactive Entertainment. Topics Resources Readme GPL-3.
IEEE Offers More Services to Cities That Want to Be Smarter
More and more city governments are using advanced technologies to improve livability for their residents. Municipalities use data from smartphones and sensors for traffic enforcement, traffic control, and waste management. They also have implemented artificial intelligence and deep learning programs.Dubai, Paris, and Coral Gables, Fla., are among the cities that have invested heavily in programs to become smarter.But along with the conveniences that come with a smart city transition, there have been challenges including safety and privacy issues and eroding relationships between residents and city officials.Although many initiatives have delivered real innovations, not all have been successful. Inefficient global coordination has hindered projects with unclear standards, socioeconomic differences, and a lack of worldwide governance, leading to a disconnect between the technologies and the ability to adapt to them.Citizens’ trust in the technologies suffers because of privacy breaches, personal data leaks, and other issues.Finding solutionsSmart city projects are complex and expensive endeavors that involve politicians, citizens, technocrats, and engineers. Successful projects require citizens to be fully engaged and to have strong collaborations with the participants, especially engineers, as engineering is the cornerstone.Collaboration with universities, research institutions, and technology experts can bridge knowledge gaps on the behavior of complex socio-technical systems. What’s missing, though, is a global platform where those involved can discuss their experiences.To help solve those and other challenges, the IEEE Smart Cities Technical Community (formerly the IEEE Smart Cities Initiative) was launched in 2013 by IEEE Future Directions, which incubates emerging technologies and new applications of current ones. The technical community provides city leaders and others with credible, unbiased information and educational content developed by IEEE experts.Since then, IEEE Smart Cities has launched services including its flagship International Smart Cities Conference, a media center with educational and technical resources, and a contest to recognize the best smart project completed by city officials. The platforms bring together practicing engineers, academic researchers, policymakers, and city leaders to collaborate and exchange ideas and experiences about moving toward a smart-city model.Better serving humanityIn 2021 the IEEE Power & Energy Society began managing the Smart Cities program, which is supported by the IEEE Communications, Industry Applications, and Intelligent Transportation Systems societies and other IEEE entities.Thanks to volunteers’ dedication and determination, IEEE Smart Cities launched several services. But the initiative’s structure limited the development of long-term projects and the creation of new activities.To address the situation, the IEEE Technical Activities Board (TAB) created the second-generation technical community ad hoc committee, also in 2021. It was a pilot program whereby IEEE Smart Cities formed a board of governors to oversee the community’s operations and leadership, and created a policies and procedures manual.In November 2025 IEEE Smart Cities became a TAB technical community.IEEE Smart Cities nowToday more than 7,000 volunteers collaborate on various aspects of the community within at least one of the following technical tracks:Smart grid.Smart water management.Green electronics for smart cities.Smart governance and planning.Hydrogen for smart cities.Smart and sustainable campus.Security for smart cities.Smart lighting for cities.Smart mobility for cities.Artificial intelligence for cities.New webinar series, workshops, conferences, educational resources, and other offerings are being created.Two events were launched recently: the IEEE European Technology and Engineering Management Summit, held in May 2025 in Belgium, with the next one planned for 2027; and the IEEE Sustainable Smart Lighting World Conference, scheduled for 2 to 6 December in Athens.The Smart Cities Ambassadors program aims to raise the technical community’s visibility outside IEEE by holding roundtables and other events at non-IEEE functions.IEEE Smart Cities volunteers are working on launching journals. In addition, standards are being developed in collaboration with the IEEE Standards Association, societies, and councils.The program is collaborating with the Open and Agile Smart Cities and Communities network, the Instituto de Competitividad e Innovación para el Desarrollo y Transferencia de Tecnología, and the International Project Management Association. All of those actions have the ultimate objective of boosting IEEE Smart Cities’ growth and sustainability, as well as strengthening the leadership and educational offerings to technical community volunteers.If you would like to volunteer, visit the Smart Cities website.
Roundtables: A Conversation With the Creator of AI-Designed Viruses
Available only for MIT Technology Review subscribers. session or watch below Can AI design new life forms? In 2025, Stanford University PhD student Samuel King came up with a preliminary answer when he used a generative AI model to propose genetic blueprints for microscopic viruses. It isn’t yet an example of AI-generated life, but that could be next. senior AI reporter James O'Donnell interviews King about his work, being named one of MIT Technology Review's Innovators Under 35 and new ways of seeing biology. Speakers: James O'Donnell, AI Reporter, and Samuel King, Bioengineering PhD Candidate, Stanford University/Arc Institute Recorded on Friday, October 16, 2026 He asked an AI to design viruses … and it worked. AI-designed viruses are here and already killing bacteria < Deep Dive Artificial intelligence Don’t be fooled—LLMs don’t reason Ten years after AlphaGo’s match against Go champion Lee Sedol, today’s AI still isn’t tapping into the machinery that made that win possible. ’s recursive self-improvement might not come so quickly after all AI agents are not yet creative enough to carry out genuinely innovative open-ended AI research, it seems. ’t be fooled Breathless claims about AGI and new capabilities fall apart pretty quickly under scrutiny. Benderarchive page The inside story on why OpenAI agents hacked Hugging Face The underlying models had been rewarded for cheating and communicating with each other, a new OpenAI report finds. , top stories, upcoming events, and more.
Simulation App Speeds Up Electric Truck Battery Design
This article is brought to you by COMSOL.These days, no one blinks an eye at two-day, one-day, and even same-day package deliveries. Despite the plethora of localized fulfillment and distribution centers that have cropped up to meet the demand, delivery trucks still need to make considerably long drives, often over highways. To reduce fuel and maintenance costs as well as carbon emissions, companies are investing in electric trucks for their delivery fleets. While turning to electric trucks is a promising solution, the battery packs incorporated into these automotive designs often fall short in the lifetime needed to make long-distance highway travel feasible.To help overcome the issue of battery lifetime, a consortium of universities and industry partners incorporated multiscale simulation and a custom simulation app into the battery manufacturing process. The organizations involved in this project were Aurobay, Resolvent, the European Commission, the Technical University of Denmark (DTU), Vinnova (the Swedish Agency for Innovation Systems), Innovation Fund Denmark, and Volvo Group Trucks Operations.The simulation app, built by Resolvent, a Denmark-based engineering consultancy that specializes in green energy, enables the R&D department at Volvo to easily test battery lifetime performance.LaserWho?The Multiscale Simulation of Laser Welding for Optimal Battery Pack Manufacturing project — referred to as “LaserBATMAN” — was initiated in May 2022 and wrapped up in May 2025 (Ref. 1). Although BATMAN here refers to battery manufacturing and not the famous masked superhero, the goals for the project also strove for greatness.The LaserBATMAN project aimed to optimize two key performance metrics for battery packs: robustness and lifetime (Ref. 1). One element of the battery manufacturing process that affects both of these metrics is the laser welding used in component joining processes (for example, to connect battery cells in a pack via a busbar). If done correctly, laser welding can positively impact battery life, but if done incorrectly, laser welding can increase the risk of battery degradation. Computational modeling can be used to analyze and predict the effects of welding and joining processes at different stages of the manufacturing process.Martin Refslund Nielsen, former chief commercial officer and partner at Resolvent, explained that for this type of multiphysics and multiscale problem, “COMSOL Multiphysics is just the right tool.”R&D Workflow for Multiscale Model and AppThe Resolvent team used the COMSOL Multiphysics software to study how laser welding affects the electrochemistry and degradation of battery cells. At least, that’s how the project started.“Ambitions grew,” Nielsen said, explaining that the team ended up modeling the performance of the entire battery, from cell to pack level, and even “turned [the model] into a design tool in the end”, in reference to the app.After training the deep neural network of the battery model, the team built a custom simulation app to efficiently optimize busbar tabs in the configuration of a battery pack.First, the team built an electrochemical model of a battery cell by inputting the formulas for the relevant chemical reaction kinetics (Figure 2). The resulting cell-layer model was then fed input data, and the output data was used to train a deep neural network (DNN). With this reduced-order model, the team was able to quickly gain insight into cell behavior.After training the DNN of the battery model, the team built a custom simulation app to efficiently optimize busbar tabs in the configuration of a battery pack. Figure 2: The Resolvent battery model.COMSOLA “Tool Within a Tool” for Busbar Weld DesignThe different features of the simulation app, as described by Nielsen, include its options to input dimensions for the pack geometry (Figure 3), the number of cells, and operating conditions such as ambient temperature and charge–discharge current profiles. The app also makes it possible to apply a simple charging current and load customized cycles. Users are then able to see how the battery performs with each set of specific inputs. Figure 3. The battery pack model developed by Resolvent.COMSOLAnother important aspect of Resolvent’s app is the Busbar Weld Design Tool button, which Nielsen described as “a tool within a tool.” This button can be used to efficiently calculate busbar weld performance after a number of cycles. After clicking the button, a window opens with options for setting different parameters, including the shape of the weld, busbar thickness, and penetration depth of the laser (Figure 4).“[This button] is interesting from a robust design perspective,” said Nielsen. Users can apply a variant to the input parameters to see what happens in production if the weld does not reach far enough into the busbar. Figure 4. Resolvent’s simulation app, showing how certain parameters can be customized. The model shows how the busbar weld is affected by a cooling airflow.COMSOL“We certainly get deep technical insight here, and we can dimension the design in the sweet spot. Deep technical insight is also key to optimizing product performance,” Nielsen said. For example, if the results suggest better cooling, the team could potentially reduce the design by two battery cells and retain the same performance, easily quantifying the tradeoff between cooling and setup.Predicting Pack PerformanceThe app’s user interface also includes a Compute Battery button, which can be used to see the temperature of the weld in a given state, the state of charge, and the solid–electrolyte interface (SEI) layer thickness (Figure 5). The results can help the engineering team further determine if there is room for optimization in the design. For instance, a user can apply a cooling flow in the app and see if turbulence or standing air occurs.As explained by Nielsen, simulation apps offer more consistent analysis and reporting, and the intuitiveness of custom apps makes it easier to share knowledge. “We are in a much better place to optimize performance and increase robustness,” said Nielsen. Figure 5. Temperature in the given state (left), state of charge (middle), and SEI layer thickness (right) in the battery pack.COMSOLThe custom simulation app developed by the LaserBATMAN consortium can be used to help produce more robust battery designs with ranges that can support highway travel over longer distances with fewer failures — all while promoting the use of green energy. A heroic project indeed.References“LaserBATMAN,” University of Skovde, accessed 08/21/2025, https://www.his.se/en/research/virtual-engineering/virtual-manufacturing-processes/LaserBatman/.R. Nielsen, “Keynote: Optimizing Lifetime and Robustness of Electric Truck Batteries with Simulation Apps,” COMSOL Conference 2024 Florence, October 2024.
The Download: failed social media bans, and extending pets’ lives
This is today's edition of The Download, our weekday that provides a daily dose of what's going on in the world of technology. Kids are outsmarting social media bans. That’s not a problem we need to solve. —Michal Luria, Aliya Bhatia, and Danah Boyd Social media bans are stacking up. In July, France joined Australia in restricting minors from accessing social media—barring children under 15 from major platforms, before the ban was blocked ’s top court on human rights grounds. The UK aims to forbid kids under 16 from accessing Facebook, TikTok, and other platforms in early 2027, and the EU has announced its own plan to prohibit social media for kids under 15. But early lessons from Australia, which enacted a ban in 2024, show that these sorts of age restrictions are easily circumvented. Here’s what we ought to do instead to keep kids safe. Can’t bear to say goodbye to your pet? Biotech’s got you covered. —Jessica Hamzelou I don’t remember much about Peppy, my first and only pet cat. What I do vividly remember, though, is the day she went missing. I was 10 years old, and I searched everywhere for her, scouting nearby fields and woods until sunset. Almost 30 years later, pet owners have an expanding set of options to potentially prolong their years with their furry companions. The possibilities include drugs, cloning, and even cryonics. But is that a good thing? Read the full story on the promises and pitfalls of pet life extension. This story is from The Checkup, our weekly biotech . to receive it in your inbox every Thursday. 10 Climate Tech Companies to Watch: Form Energy and its iron batteries Form Energy is one of MIT Technology Review’s 10 Climate Tech Companies to Watch 2026, available exclusively to subscribers. As wind and solar power grow, utilities need cheaper ways to store electricity for longer periods. Form Energy aims to meet that need with batteries that can store energy for 100 hours. The company has developed a new type of battery using iron, a far more abundant and cheaper metal than those used in many existing batteries. It uses a process that Form calls “reversible rusting,” in which iron turns to rust as the battery discharges and back to iron when it charges. Form Energy hopes to make renewable power more reliable. —Jonathan W. Rosen Subscribers can now access the full 10 Climate Tech Companies to Watch, spanning everything from electric buses to portable rubber dams.
Ultramarine 1 Flash
An open model for professional work Ultramarine 1 Flash is Fable-class on knowledge work spanning finance, law, consulting, and operations. It is also 60x cheaper than Fable. GLM-5.3 Flash32.7M Ultramarine 1 Flash30.5M −6.5% Output tokens generated across all six benchmarks, reasoning included. Where GLM-5.3 Flash’s score is a public one, its tokens come from our own runs closest to that score. Fable-class model for cents per task Ultramarine 1 Flash sits on the cost-quality frontier at the most attractive price point. At $0.13 per task, it outscores Claude Fable 5 (max) and GPT-5.6 Sol (max), at $8.19 and $2.09 per task, and comes within three points of Claude Opus 5.5 (max) and GPT-6 Sol (max) at $6.96 and $1.26 per task. We measure this on PI Knowledge Work, a carefully built internal benchmark whose scores correlate strongly with the Artificial Analysis Intelligence Index (r = 0.81). Its tasks ask the model to deliver finished Excel workbooks, PowerPoint decks, and Word documents, and to work inside live business systems such as ERP and MES. A rubric written for each task scores the result on substance, accuracy, and presentation. Every model works in the same harness, and costs are at each developer's official API pricing. Read our technical report for more on the kind of professional data and evaluations that trained this model. Crafted with a sense of client readiness Ultramarine 1 Flash writes clean, simple, straightforward prose and has a strong sense of visual and information hierarchy. It is built to adhere to the same rules required of analysts in professional services. Nucor through the steel cycle Five periods of segment sales and earnings in one table, with every subtotal and total reconciling. Steel mills earnings fell from $7.2bn in 2022 to $2.4bn in 2025, while their share of sales rose from 58% to 62%.
U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions. Heleket’s support agent on Telegram claims, despite all evidence to the contrary, that it is not affiliated with Cryptomus. K. issued sanctions (PDF) against Cryptomus — previously known as Certa Payments and Xeltox Enterprises — for processing payments that benefit the Russian government and its financial institutions. The sanctions freeze any Cryptomus assets at U. K. banks, and bar British companies from offering it any business, virtual or otherwise. Also targeted in these sanctions were the virtual payment platforms VexPay, TokenSpot, and the Tsunami Payments service. As explained in our December 2024 investigation, “How Cryptocurrency Turns to Cash in Russian Banks,” Cryptomus has been a key payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The company has changed its name several times since emerging in 2022, most recently to “Heleket” last year after Canada levied a record CAD $176 million fine against the platform for anti-money laundering violations. The blockchain data-crunching firm Chainalysis said the U. K. sanctions target the broader infrastructure supporting Russia’s wartime economy. “Cryptomus and Heleket have emerged as major payment hubs for illicit activity,” Chainalysis wrote in an October 8 blog post. “Together, these services received more illicit funds across tracked categories than the mixers in our dataset and the number of illicit counterparties surged to more than 900 in a single month in late 2025.” The Cryptomus support bot on Telegram, responding on Oct. 8 to an inquiry . In April 2026, the blockchain analysis firm TRM Labs found Cryptomus had processed more than $7 billion in transactions since its inception in 2022, including transactions associated with child sexual abuse material vendors, terrorist financing networks, and human trafficking operations. TRM noted that Cryptomus’s transaction volume cratered after the platform instituted new “know your customer” or KYC rules, and that the cryptocurrency platform responded to the Canadian fines a parallel service that continued to offer no-KYC payment processing. Richard Sanders is a blockchain analyst and investigator who spent months mapping out Cryptomus’s payment infrastructure and transacting with its customers. K. sanctions on Cryptomus are important because Canada’s sanctions against the platform were ultimately unenforceable and uncollectible. “A fine doesn’t stop a cryptocurrency payment processor from processing payments,” Sanders wrote on LinkedIn. “Sanctions kill the operation.
Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild. CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions. Windows 10 users might be wondering if they can still expect security updates after this month. Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback. A few months ago, Microsoft quietly extended that support for another year (until October 2027). At least 78 of the flaws fixed this month are rated “critical,” meaning they could be exploited with little or no action , and most of those critical bugs allow an attacker to execute code of their choice on the vulnerable system. While Microsoft said there are no signs anyone is exploiting it yet, a security feature bypass in the . NET Framework (CVE-2026-108398) was publicly disclosed prior to today, potentially giving attackers advance time to work out how to exploit the bug. Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs. “We’ve now crossed the 4,000 CVE mark with two months left to go,” he said. Microsoft credits large language models for the high volume of bug discovery, and presumably AI gets credit for many of the patches used to fix these flaw. Meanwhile, security experts have been warning that these unusually large patch volleys from Microsoft are placing extra strain on corporate security teams, which often have to test individual updates before deploying them across a network to ensure the fixes don’t cause problems for other software. Tyler Reguly, associate director of security research and development at Fortra, notes that just 26 Microsoft vulnerabilities appeared in the “Known Exploited Vulnerabilities” (KEV) catalog maintained by the U. Cybersecurity & Infrastructure Security Agency (CISA) so far this year, and security teams would do well to prioritize patching those 26 vulnerabilities first. “Security leaders should focus on exploitable risk, and ask whether their teams have the clarity, capacity and support to act,” Reguly said.