1,400 Patches & AI Milestones

Welcome back to another week in tech — and what a week it’s been. From a record-breaking Microsoft update to hotel-room spy tactics straight out of a thriller, there’s plenty to get your head around. Here are the stories that matter most to you.

Microsoft Drops a Jaw-Dropping 1,400+ Security Fixes

Let’s start with the one that affects pretty much everyone. Microsoft’s latest round of security updates — released this week — patches more than 1,400 vulnerabilities across Windows and its wider software catalogue. To put that in perspective, last September’s update was considered extraordinary at nearly 1,000 fixes. This one blows that out of the water.

Some of these flaws are serious enough that attackers could exploit them without you doing anything wrong — no dodgy downloads, no suspicious emails. You just need to be running an unpatched version of Windows.

What this means for you: Get Windows Update running tonight if you haven’t already. Don’t put it off — with this many fixes on the table, the risk of staying unpatched is very real.

Hotel Hackers Are Breaking Into Rooms to Compromise Laptops

This one reads like a spy novel but it’s entirely real. A Chinese state-linked hacking group targeted executives attending an agricultural industry conference on Hainan Island earlier this year. Rather than trying to hack their way in remotely, the attackers physically broke into hotel rooms while executives were at dinner, booted their laptops from a USB stick, and installed a backdoor — all without leaving obvious signs of tampering.

The troubling bit? The fix that would have prevented this attack was already available. It involves configuring laptops to prevent booting from external devices, and requiring a pre-boot password. Many organisations simply hadn’t enabled it.

This is a stark reminder that physical security matters just as much as digital security. If you travel for work — especially internationally — your device is only as safe as the room it’s left in.

What this means for you: If you use a laptop for work, check that it requires a password before it even starts up, and consider encrypting your drive (BitLocker on Windows, FileVault on Mac). A VPN like NordVPN is also essential when you’re connecting on unfamiliar networks abroad.

A Ransomware Negotiator Who Was Actually on the Attackers’ Side

Here’s a disturbing one for any business that deals with ransomware incidents. US federal investigators are looking into executives at two separate ransomware negotiation firms — companies you’d hire to help manage a ransomware attack — who allegedly had suspiciously cosy relationships with the ShinyHunters hacking group. One executive is suspected of actually helping the gang run a site designed to pressure victims into paying up.

The ShinyHunters group has been in the news for a while, but this twist adds a deeply uncomfortable layer. The very people some organisations trusted to help them during a crisis may have been working against them.

What this means for you: If your small business ever faces a ransomware incident, vet any third-party negotiator or incident response firm carefully — look for established reputations and independent reviews. More importantly, strong preventative measures (good backups, a solid password manager like NordPass, and up-to-date security software) are far better than needing a negotiator in the first place.

OpenAI Declares We’ve Entered the AGI Era

On a slightly more optimistic note, OpenAI made a headline-grabbing announcement this week with the release of GPT-6 Astra, which the company is calling its most capable model yet. OpenAI is going as far as claiming this marks the beginning of the AGI era — artificial general intelligence, meaning systems that can outperform humans across a broad range of real-world tasks.

Bold claim, and one the tech world will be debating for months. What’s more immediately relevant is that these advances are already filtering into the everyday productivity tools many of us use — think smarter writing assistants like Grammarly or more capable AI features in apps like Notion.

What this means for you: AI tools are getting genuinely more useful, not just more hyped — it’s worth exploring what’s now available to help you save time in your day-to-day work.

That’s your week in IT. The big takeaway? Keep your software patched, lock down your devices physically as well as digitally, and be careful who you trust when things go wrong. See you next week.