The website of CPUID, developer of the popular CPU-Z and HWMonitor utilities, has been compromised to serve malware:

CPUID got Compromised via Hijack !

The original website (cpuid.com) and its download links are currently malicious! It downloads a Setup.exe with a Russian languagesetup, and everything like the browser and antivirus says it's malicious. That's not normal! The file size also doesn't match the originals, just like the names of the files!

​VirusTotal confirms this find:
https://www.virustotal.com/gui/file/eefc0f986dd3ea376a4a54f80ce0dc3e6491165aefdd7d5d6005da3892ce248f
​This is caused by the Hijacked site. (Wacatac/Artemis/Tedy)
[...]

Source: https://www.reddit.com/r/pcmasterrace/comments/1sh4zuk

Introducing Magnetic Rockets! Soldiers are now equipped with rocket launchers that can fire magnets you can switch between attract or repel modes with +attack2 / right-click and remove with reload. You can even briefly interrupt the magnets with +duck / crouch!

Toggle the feature with !magnets and have fun experimenting on dedicated, rotation, and lounge servers throughout the day. Enjoy!

Amazon Wishlist change doxxes users and shares your delivery address

Amazon announced a sweeping change to its Wishlist feature that will make users’ addresses available to third-party sellers, recommending they get a ♥♥ Box to protect their privacy.

Amazon’s Lists feature lets shoppers compile items they want to buy in easily accessible groups. These lists can be private (for personal use only), or public for anyone to see, as well as shared with other users for events like wedding showers or parties.

Previously, users could block items sold by third-party sellers from their Wishlists. But starting March 25, 2026, anyone can buy you items from any seller, including third-party sellers.

This means that when someone buys you something on Amazon from a third-party seller, your shipping address will be shared with them so they can ship the item to you. This also means that parts of your address will also be visible to them during shipping for tracking updates.

[...]

Source: https://www.dexerto.com/entertainment/amazon-wishlist-change-doxxes-users-and-shares-your-delivery-address-3324823

From Amazon's email to customers (with parts bolded for emphasis):

Important note: When gifts are purchased from your shared or public lists, Amazon needs to provide your shipping address to sellers and delivery partners to fulfill these orders. During the delivery process, your address may become visible to gift purchasers through delivery updates and tracking information. To help protect your privacy, we recommend using a ♥♥ Box or non-residential address for any list you share with public audiences.

Hey everyone. As a result of some internal discussions, we have decided to restrict the usage of VScript on JA. Going forward there will be a general ban on VScript on all JA servers.

VScript is a powerful tool, and in some cases too powerful. There are several contributing factors to this decision but the primary points of issue are security and maintainability. Since JA's founding, the main assumption about mapping is that maps are generally safe from the point of view of the server operators. VScript introduces a structural shift in what mappers are capable of.

As it stands we just don't have the manpower to review every single map that we add to JA for potential issues with their scripts. Going forward we would like to encourage all mappers to try more conventional systems for map logic first.

Q: My map uses VScript. What does this mean for me?
A: Your map is still allowed on JA and we won't require a separate version, just be aware that any scripts included will not run on JA servers.

Q: Why is this necessary?
A: VScript is extremely powerful with similar capabilities as sourcemod plugins. At JA, our developers have always reviewed any plugins or extensions we upload to our servers for security, performance, stability, and maintainability concerns. The VScript update introduced a totally new vector for code to be added to our servers that we weren't prepared for. We think this is the best way to ensure we are able to maintain oversight on external code on JA.

Q: My VScript code is critical to the functionality of my map. Does this mean my map can't be on Jump Academy?
A: Talk to our developers (AI or Squid) about your map so we can review your code and come to a decision. We will be handling whitelisted maps on a case by case basis.

Notepad++ v8.8.9 release: Vulnerability-fix

Some security experts recently reported incidents of traffic hijacking affecting Notepad++. According to the investigation, traffic from WinGUp (the Notepad++ updater) was occasionally redirected to malicious servers, resulting in the download of compromised executables.

The review of the reports led to identification of a weakness in the way the updater validates the integrity and authenticity of the downloaded update file. In case an attacker is able to intercept the network traffic between the updater client and the Notepad++ update infrastructure, this weakness can be leveraged by an attacker to prompt the updater to download and executed an unwanted binary (instead of the legitimate Notepad++ update binary). To mitigate this weakness and address the hijacking’s concerns raised by the security researchers, a new security enhancement is being introduced in this release of Notepad++.

Source: https://notepad-plus-plus.org/news/v889-released