Microsoft has acknowledged installation issues with the May 2026 Security Update for Windows 11, specifically error code 0x800f0922, affecting devices on versions 24H2 and 25H2 after installing update (KB5089549) released on May 12. The failures occur during the reboot phase, often around 35 percent, primarily on devices with 10MB or less free space in the EFI System Partition (ESP). For consumer and unmanaged business devices, Microsoft has implemented a Known Issue Rollback (KIR), and restarting the computer may resolve the issue. For managed devices, network administrators must manually deploy a Group Policy workaround. Microsoft suggests modifying a Registry value to decrease reserved padding in the EFI partition as a potential fix, along with restarting the computer and checking for updates. A permanent solution is planned for a future Windows update.
Google has introduced a new feature in AI Studio that enables users to create native Android applications from text descriptions, automatically generating Kotlin code and using Jetpack Compose for the user interface. Developers can build Android apps directly in the browser without needing to install Android Studio or additional libraries. AI Studio includes a built-in Android Emulator for real-time testing and allows immediate installation of applications on Android devices via USB. Users can publish builds to Google Play's internal test track and export projects as ZIP archives or push them to GitHub. The service is ideal for developing simple utilities and applications that utilize various Android hardware features. Future updates will include support for Firebase and other tools.
On May 14, 2026, PostgreSQL released critical security updates for versions 18.4, 17.10, 16.14, 15.18, and 14.23, addressing 11 Common Vulnerabilities and Exposures (CVEs) related to stack buffer overflows, SQL injection, memory disclosure, and denial-of-service vulnerabilities. The most critical vulnerability, CVE-2026-6637, has a CVSS score of 8.8 and allows remote, unprivileged database users to execute arbitrary code. Other notable vulnerabilities include CVE-2026-6473, which affects memory allocation leading to potential memory corruption, and CVE-2026-6475, which allows overwriting sensitive OS-level files. Additional vulnerabilities include SQL injection flaws and authentication issues, with various CVSS scores ranging from 3.7 to 7.5. The updates can be implemented without a database dump, and PostgreSQL 14 will reach its end-of-life on November 12, 2026.
A proof-of-concept exploit has been developed for CVE-2026-2005, a remote code execution vulnerability in the pgcrypto extension of PostgreSQL. This vulnerability, stemming from legacy code, allows attackers to trigger a heap-based buffer overflow through specially crafted PGP messages, enabling arbitrary memory read and write operations. Successful exploitation can escalate privileges to PostgreSQL superuser status and execute commands on the operating system. The exploit targets PostgreSQL instances compiled from a specific vulnerable commit and circumvents protections like Address Space Layout Randomization (ASLR). It involves corrupting heap memory structures, leading to a controlled pointer leak that reveals the heap layout. Security researcher Varik Matevosyan has published the PoC on GitHub, demonstrating the exploitation process. The exploit requires a compatible PostgreSQL binary and utilizes Python-based tools for interaction. Organizations are advised to review their PostgreSQL deployments, disable unnecessary extensions, and apply security updates to mitigate risks.
Nvidia has issued a security bulletin regarding vulnerabilities in its GPU drivers, urging users to update to the latest versions for products including GeForce, Quadro, and Tesla GPUs. Users with Nvidia GPU drivers older than version 596.36 are advised to update to protect against vulnerabilities related to kernel-mode driver issues and resource management, which include time-of-check/time-of-use vulnerabilities, improper GPU resource access, and driver-lock leaks. The potential risks include denial of service, privilege escalation, information disclosure, data tampering, and code execution, with Nvidia classifying these vulnerabilities as "High." Users can check their current driver version in the Nvidia Control Panel or the Nvidia App and should visit Nvidia's driver page to download the latest updates.
Android 17 will introduce a new "Metric Style" notification template for Live Updates, enhancing user experience by allowing health, fitness, timers, and travel applications to present vital information more accessibly. The Metric Style template can showcase up to three distinct data points simultaneously on the Always-On Display, lock screen, and status bar, focusing on real-time raw data rather than milestones. It features three display modes: a glanceable view prioritizing the most relevant metric, an expanded view showing all metrics side-by-side, and a collapsed view condensing information into a single line. This standardization provides app developers with a reliable framework for delivering critical information directly on the lock screen and status bar. Google has not confirmed whether this feature will be included in the first stable Android 17 update or a subsequent QPR release.
Google has introduced AI-powered features in Google AI Studio to simplify Android app development. Users can describe their app ideas in plain language, and the AI translates these into functional Android applications via a web browser. The platform generates the app's framework, user interface, and core functionalities using Kotlin and Jetpack Compose, supporting features like GPS, Bluetooth, and NFC.
AI Studio includes an in-browser Android Emulator for building and testing apps, along with Android Debug Bridge integration for direct deployment to devices. Currently, the tools are aimed at personal utilities and lightweight projects, with plans for broader sharing options in the future. The platform can automatically create Play Console records, package Android App Bundles, and upload builds for testing, reducing manual steps. Developers can also export projects as zip files for further work in Android Studio or GitHub. Future expansions will include support for Firebase services.
Additionally, Google has introduced the "Ask Play" feature for app discovery, allowing users to search using conversational prompts instead of keywords, and plans to integrate Android applications within Gemini interactions across mobile and web platforms.
A group of Minecraft enthusiasts has completed a digital archaeology project, mapping and archiving the oldest anarchy server, 2b2t, resulting in 24 terabytes of data. This data will be released as a torrent in the coming weeks. The 2b2t server has been operational for 16 years and is known for its lack of rules and bans. The team successfully archived various areas of the server, including:
- Overworld area of 1,024,000² blocks (December 25, 2025 – April 13, 2026)
- Overworld area of 512,000² blocks (November 11, 2024 – December 12, 2024)
- End area of 256,000² blocks (January 23, 2026 – February 15, 2026)
- Nether area of 100,000² blocks (June 9, 2025 – June 14, 2025)
The team plans to release high-resolution renders and data analysis tables alongside the archive. Open-source tools for the archive are available on GitHub, and updates can be followed via Discord and Patreon.
Google is enhancing the Car App Library with new features for developers, including expanded headers, spotlight sections, new progress bars, grid item variations, chips, compact items, interactive headers, and a mini-player component for easier playback control. The updates are available in versions 1.8.0-beta01 and 1.9.0-alpha01, with early access encouraged for developers. Popular media apps like Spotify, Amazon Music, and YouTube Music are integrating these features. Upcoming support for video playback in vehicles will roll out later this year for devices on Android 17 or higher. Future updates will allow for a templated experience that transitions into the full app interface when parked, along with agentic and voice-based interactions. Additionally, Maps SDK support for Cars with Google Built-in will enable seamless rendering of map-based content in applications.
