This Patch Tuesday addresses 105 “Critical” vulnerabilities, 81 of which are remote code execution, 20 are elevation of privileges, 2 are information disclosure, and 1 security feature bypass.

The approximate number of bugs in each vulnerability category is listed below:
- 438 Elevation of Privilege Vulnerabilities
- 19 Security Feature Bypass Vulnerabilities
- 258 Remote Code Execution Vulnerabilities
- 173 Information Disclosure Vulnerabilities
- 56 Denial of Service Vulnerabilities
- 16 Spoofing Vulnerabilities

Those who remember PC gaming in the days before Steam may have fond memories of the “big box” packaging that made those games stand out as shelf eye candy and sought-after in-home collectibles. Today, PC gaming platform GOG is hoping to reignite some of the nostalgia for those days by adding downloadable 3D models and printable, foldable high-res packaging scans for a handful of PC games on the platform.

Thus far, the “Printable Big Box” collection on GOG is limited to just five games: Armikrog, Descent, Hitman: Codename 47, Myst, and Star Trek: 25th Anniversary. Players browsing those games on the GOG store will now see “3D Boxes” listed among the included “Goodies” before purchase. Owners of those games on GOG can download a ZIP file containing a version of the box art as an animated 3D object file (in an easy-to-open GLB format) and a “flat printable template” in PDF, SVG, and Adobe Illustrator formats. Those downloads allow for what GOG calls “a proper papercraft project for anyone who misses shelves full of PC game boxes.”

The physically focused expansion of the existing GOG Preservation Program comes through a partnership with Benjamin Wimmer’s Big Box Collection website, which has grown since 2015 to include over 1,000 3D scans from his private collection of physical PC games. In an interview with GOG, Wimmer said that while he appreciates the artistry of a good old-fashioned big box, he also appreciates their evolution into the “interactive cards” on modern digital storefronts that “provid[e] us art, screenshots, gameplay videos and whatnot and that not shown as a box, [it] is just good UX.”

James Danly, Deputy Secretary of Energy, said that the Iowa power plant’s restart in 2029 will “drive down electricity costs,” though he did not explain how. Just 50 megawatts will be set aside for the local power cooperative, NextEra CEO John Ketchum said during an earnings call (PDF) last year. That capacity would cover 18% of Iowa’s demand growth since 2021, the year before ChatGPT was released.

Google is reportedly looking to build up to six data centers near the Duane Arnold Energy Center, which hasn’t operated since 2020 when an intense rainstorm damaged the power plant. Rather than repair it, NextEra decided to mothball it. At the time, cheap natural gas was flooding the market, making nuclear power economically unappealing. A lot has changed in the last six years, though. After decades of little growth in demand, the sudden rise of AI coupled with broader electrification of the economy meant that utilities and power providers were suddenly scrambling to find new generating sources of electricity. New data centers are expected to nearly triple the sector’s electricity demand by 2035.

OpenAIsaid on Tuesday that its newest artificial intelligence technology had solved one of the “Millennium Problems,” a collection of important unanswered math questions meant to push the world’s leading mathematicians to new heights. The announcement is an another clear sign that A.I. is fundamentally changing the upper reaches of mathematics, which have long been viewed as a pinnacle of human achievement. The change has excited some mathematicians, while stirring concern among others.

Over the past year, A.I. systems successfully solved a wide range of problems that have bedeviled mathematicians for decades. But these problems were not as complex, nor as closely watched, as the one that OpenAI’s technology has solved over the past several days. The Millennium Problems are among the most heavily researched in the field. “This is a spectacular culmination of the arc we have seen over the past twelve months,” OpenAI researcher Sebastien Bubeck said of the company’s new solution.

The company announced that one of its latest models, which has not yet been released to the public, needed just 88 hours to solve what mathematicians call “the Navier-Stokes existence and smoothness problem.” This problem involves a series of equations that are often used to predict the weather. The equations describe the movement of water and other fluids. The Navier-Stokes problem, which has no clear practical value, asks whether these equations completely break down in certain situations. OpenAI’s proof claims to have defined just such a situation.

This would imply, at least theoretically, that the laws of physics themselves would break down under certain conditions: that, for example, water could be made to spontaneously explode. But mathematicians and physicists do not believe that this mathematical breakdown could really lead to such an outcome in the physical world. The Navier-Stokes problem was one of seven “Millennium Problems” selected by the Clay Mathematics Institute in the year 2000 as a way of tracking the progress of mathematics in the new millennium. The institute, founded by an American businessman named Landon T. Clay, offered a million dollars for the first correct solution to each problem. Before OpenAI’s announcement, only one of the problems had been solved.

As of 2026, the 60-year-old science fiction franchise boasts a fandom of carbon units — sorry, humans — that spans at least three generations. What began, in 1966, as a five-year space mission on the U.S.S. Enterprise to “boldly go where no man has gone before” now represents an anthology of space travel across more than 25 series and films in parts of two centuries. Where once it was James T. Kirk or bust, it’s not unusual to find fans who prefer other captains, like Picard, Janeway or Sisko. There are so many series to keep track of that fans often communicate using country code-like abbreviations for each installment: TOS (the original series), TNG (“The Next Generation”), DS9 (“Deep Space Nine”), ENT (“Enterprise”) and so on.

Outside the Trekiverse, disparities in generational slang, politics and social mores are practically a foregone conclusion. But “Star Trek” functions as connective tissue between fans past and present. Some of that tissue is just shared references: There will always be captain’s logs, timelines by stardate, warp factors one through 10, phasers and photon torpedoes and, every now and then, a doctor who insists, “I’m a doctor, not a ____!” The Vulcan salute has become a general symbol of geek-recognize-geek, but real Trekkies (or Trekkers, as some prefer) know that “Live long and prosper” is only half the message; the recipient is meant to say “Peace and long life” in response. But the series’ staying power, and the ease with which each generation finds its way into them, is an indication that fans of all ages share not only language, but values, in common.

That sanction was the latest salvo between the EU government and a US tech company for infringing on its Digital Markets Act. The debate centers on the DMA requirement that major tech brands “must not treat their own services more favorably in ranking than third-party services.”

[…] According to Reuters, Google’s revised search results “will highlight one specialized search engine at the top of the page, followed by two others with fewer details. A carousel of hotels, airlines and restaurants, for example, will sit below them with key features such as real-time prices stripped out.” Those specialized engines include sites like Expedia or Hotels.com, also known as vertical search services, so European users may soon see those aggregators and comparison sites prioritized more highly than individual businesses’ websites in their results.

Reuters noted that “the rankings will be determined by Google’s algorithm,” meaning the tech company still holds a lot of control over how results are displayed. The EC had given Google 60 days to comply with its rules, but the company has not specified an exact timeline for when European users will start seeing the changes.

DeepSeek, for example, distilled frontier U.S. models to generate synthetic training data for its R1 and R3 models, including four different versions of Claude, two versions of Gemini, five versions of ChatGPT and Grok 4. Those models helped train DeepSeek’s capabilities in areas like agentic functioning, question and answer optimization, creative and occupational writing and others.

Another Chinese company, Moonshot AI, allegedly distilled 18 different U.S. models — including Fable 5, Anthropic’s current, most advanced commercially available model — to train its Kimi-K2 and Kimi K3 models. The company used millions of queries meant to extract enhanced capabilities in areas like agentic reasoning, coding and data analysis, computer vision, larger logical frameworks, visual processing and others.

Chinese AI companies manage a sophisticated set of tools and systems that route requests and prompts through multiple pathways to avoid detection. The advisory lists common tactics observed by Chinese companies, including spreading requests across different accounts, models and platforms, using native APIs, remote cloud providers, and third-party aggregators to obfuscate user metadata, and leveraging proxies and gray tech markets to get around geographic restrictions, terms of use and safeguards built into frontier models.

Muse, as the agent is known, exists in a chat interface, similar to a text thread. It’s designed to be more proactive and long-running than typical chatbots. Users can name their agent, create an avatar and customize how it communicates. The Muse agent runs on a dedicated virtual machine in Meta’s cloud, using a built-in browser that’s visible to the user.

Meta is offering a free tier of Muse, as well as two subscription options, at $20 per month and $100 per month. “For the vast majority of users, they should be able to do what they need to within the free tier,” Wang told Axios. “But for real power users, you know, those subscription tiers help us cover the computer costs.” There is no advertising within Muse, but Wang said the company is exploring commerce opportunities that could generate additional revenue. Initially Muse will be available in the U.S. and works on iOS, Android and the web, with support coming soon for Meta’s AI glasses.

The legislation, which is being drafted and released Tuesday for targeted consultation, would require platforms to send notifications to new and existing users so they can choose their default feed. […] The measures, set to be introduced to the Parliament of Australia this year, will also require AI chatbots, online games and other digital services to take action to protect under-18s from addictive design features.

Telluride just managed one of its best-kept secrets in years, per The Hollywood Reporter. On Sunday night, festival-goers filed into a 650-seat theater with their phones locked away, having no idea what they were about to see, told only that it ran nearly three hours, hadn’t been shown anywhere, and that its principal creators would be in the audience. The surprise premiere they went on to enjoy is a new documentary from co-directors Nathan Fielder and Lance Oppenheim about Theranos founder Elizabeth Holmes.

Called “You Can See Everything,” the film is said to capture Holmes and her husband, Billy Evans, in the 34 days before she reported to federal prison in May 2023 to begin an 11-year sentence for defrauding investors about her blood-testing technology. Since then, her legal fight has limped along without success. Her appeals to overturn the conviction and shorten her sentence were rejected in February of last year. She then went a different route last year, asking President Trump to commute her sentence. That clemency petition is still listed as pending, meaning it’s officially been opened and remains under review.

Fielder apparently lived in the couple’s guest house during filming — the access they provided sounds shocking — but some of the buzz also ties to an A-list actress who becomes part of the story itself. A24 is set to release the film in October.

Gamers Nexus partnered with fellow YouTubers Level1Techs and independent security researchers for the investigation, which involved testing retail LG OLEDs. Packet captures showed the TVs scanning the local area network for nearby hardware like phones or smartwatches, as well as logging location data and details of nearby Wi-Fi networks, and feeding the information back to LG Ad Solutions. Perhaps more concerningly, the TVs were capable of recording microphone audio when in standby; this continued even after the TV was disconnected from the internet, with audio files stored offline and uploaded once a connection was restored.

AlphaGenome Atlas, as DeepMind calls the database, is a precomputed catalogue of what each substitution of a single DNA base is likely to do to the machinery that switches genes on and off. Until now researchers had to run such a model one variant at a time or had to test variants in the laboratory, a process that was painstakingly slow. It would have taken many human lifetimes to discover the consequences of all 9 billion possible single-letter mutations. The Atlas promises to make the job of biologists and medical researchers considerably easier, potentially speeding up the understanding of genetic diseases and the hunt for possible cures.

Pushmeet Kohli, DeepMind’s vice president for research and head of its AI for science team, told reporters on a briefing call that this was the first time any researcher in the world could reach a comprehensive map of human genetic variation “by simply opening a browser.” Kohli also framed the release as helping to complete the unfinished business of the Human Genome Project, which in 2003 succeeded in mapping the entire human DNA sequence. “As the saying goes, we bought the book,” he said, “but we did not understand how to read it.”

Atlas is available for non-commercial use from today through a website Google DeepMind has set up for it. The company said it would be available for commercial use through a licensing arrangement through Google Cloud “soon.” Kohli said that Google DeepMind’s sister company,ÂIsomorphic Labs, which is using AI for drug discovery, would have access to Atlas but that it would also require a commercial license for access. He did not specify exactly what the terms would be for commercial licensing. A paper describing the Atlas and how it was created is being released on bioRxiv, a repository for biomedical preprint academic papers.

A 2012 reading high of 501 on PISA’s index had declined to a score of 466 last year. The test is widely regarded as the world’s leading gauge of educational performance and its results are closely scrutinized by governments and educators. “In reading, more screen time and less reading for pleasure have gone hand in hand with weaker results,” OECD head Mathias Cormann told a press conference. “We’re also seeing more hasty reading, students rushing through a text and giving a quick wrong answer.”

Reading scores fell more sharply in students from better-off backgrounds, the study added. Hindered by falling reading standards, average teenage science and maths skills were also at their lowest this century. Science fell from a 2009 high of 506 on the index to 486, while maths was down from 502 to 469 in the same period. East Asia was the best-performing region. Chinese cities that participated in the test, Japan, Korea, Singapore and Taiwan had the best educational systems with Britain and Estonia the only countries outside the region that made it into the top 10 in reading, mathematics and science.

Border Patrol is running secretive predictive policing units that analyze Americans’ financial activity and other data, then feed that intelligence to local police who pull people over who are not suspected of any specific crime, but which the government thinks may be worth searching, 404 Media has found. The units, the name of which 404 Media is revealing here for the first time, are called Predictive Intelligence Targeting Teams (PITT). In one case, a PITT analyzed the financial activity of a man who was driving across Montana, and local authorities stopped him under the pretense of an obstructed license plate and charged him with a DUI.

404 Media identified one PITT in the Spokane Sector, Washington, which polices the U.S. border with Canada, and another in the Laredo Sector, Texas, which polices the border with Mexico. The findings add to an Associated Press investigation from last year which found Border Patrol was using automatic license plate readers (ALPRs) as part of the same wide-spanning predictive policing program. “The bottom line is genuine probable cause cannot be synthetically generated,” Jake Laperruque, deputy director of the Security and Surveillance Project at the Center For Democracy & Technology, told 404 Media in an email. Here Border Patrol seems to be “using parallel construction to cloak the reason behind its car stops in secrecy. If we can’t meaningfully review and evaluate these systems, we can’t trust them,” he added.

[…] The DHS document obtained by 404 Media shows that Border Patrol is analyzing the financial activity of Americans to find people to pull over. The Associated Press’s investigation found the predictive policing program is also heavily using ALPRs to track potential targets’ movements. It is not clear how exactly Border Patrol is monitoring Americans’ financial activity. Customs and Border Protection (CBP) declined to answer what financial activity the agency was monitoring, and whether it obtained a warrant or not.