• VulnCheck CTO Jacob Baines reported Zbtlink routers shipped with a built‑in backdoor dubbed ENDLESSDOORS, allowing remote root commands and reverse shells
• Zbtlink denied malicious intent, calling it an after‑sales maintenance feature, but quietly pulled vulnerable firmware and promised patches
• Researchers warn all firmware images are hijackable; mitigation advice is to replace devices or enforce strict egress controls and treat LAN as untrusted

Chinese networking firm Zbtlink has been accused of shipping its products with a backdoor - and while the company denies the allegations, it has still apparently moved to address the issue.

CTO of cybersecurity company VulnCheck, Jacob Baines, recently published an in-depth report stating a Zbtlink device he runs “continuously attempts to reach a command-and-control server on the internet.”

“Zbtlink routers phone home, waiting for orders. Not because they were hacked. Because they were shipped that way.”

Detention and escape attempts

Baines dubbed the flaw “ENDLESSDOORS” and says it was uploaded to GitHub in early 2015 and “never touched again”. “It can send the client individual shell commands or tell the client to spawn a reverse bash shell.”

“The vocabulary of this protocol is two phrases: run this as root, and give me a root shell,” he further explained, saying that anyone along the path can hijack the client/server communication. VulnCheck researchers tried it, and apparently - succeeded.

Baines said that every firmware on the company’s download page (roughly two dozen images) is all “hijackable in the same way”, and said the company decided not to “responsibly disclose” the vulnerability since that assumes the vendor did not intend the behavior. "That assumption doesn't hold here."

In response to the allegations, Zbtlink told The Register VulnCheck mischaracterized the code.

“This feature is solely intended for after‑sales maintenance and serves no other purposes,” the company told the publication. “It is generally retained only on sample units to assist customers with software debugging and will not be included in mass‑production shipments.”

The Register didn’t see it as a credible explanation since, in the meantime, the company posted a warning on its downloads page:

“We have detected firmware security vulnerabilities affecting selected router firmware releases. As a precautionary measure, the impacted firmware versions have been temporarily taken down from download channels. Our engineering team is working intensively to develop and validate secured patched firmware.” This warning was allegedly posted sometime in the past seven days.

Baines gave a list of suggestions how to mitigate the risk but ended up saying that “for anything carrying real traffic, our advice is to replace the device, or at minimum move it behind strict egress control and treat its LAN as untrusted.”

• Google’s automated systems mistakenly flagged hundreds of Blogger sites as malicious
• Company admitted a bug caused false malware labels, promising a fix
• Users advised to request reviews, avoid migrating content

Hundreds of Blogger websites were locked down, and some apparently deleted as well, after Google’s automated security systems erroneously flagged them as malicious.

A user posted a new message on Google’s forum saying the huge number of reports regarding locked blogs are all for the same reason - Malware and Similar Malicious Content.

The nature of the lockdown “suggests misclassification by automated systems”, the post reads, adding that the team has “already been notified of this issue.”

Aware of a bug""

Those affected will see a red padlock in their dashboard and a warning saying the blog was locked:

"This blog was removed for violating Blogger's Community Guidelines. If you wish to request a review of the blog, click 'Request Review' below," the notice reads.

At press time, the forum post had more than 500 “I have the same question” votes, and more than 200 replies.

In a statement given to BleepingComputer, Google said it was aware of a bug that falsely labeled many sites as malicious, and that it was working on a fix.

"We are aware of a bug that incorrectly flagged some Blogger-hosted sites as malware for less than a day. We are working on a fix to resolve the issue as quickly as possible," the company said.

To make matters even worse, Google said that if users don’t file an appeal, that their blogs can be permanently deleted.

Users are advised not to create new blogs and migrate content, since that is in violation with Google’s TOS. They are also advised against deleting their Blogger profile or service from their Google account, since this will irrevocably delete the blogs. They can, however, back up their blogs if they are afraid of losing the content.

The full extent of the issue is unknown, but according to BleepingComputer, the number of users on the platform exceeds 200,000.

• OpenAI disrupted a major scam campaign in Cambodia’s Poipet, banning accounts and blocking new registrations
• Criminals used ChatGPT to run romance fraud, fake investments, bogus police scams, and even operations linked to human trafficking
• AI was leveraged for fake personas, fraudulent messages, job lures, and worker administration; OpenAI shared findings with authorities after evidence of hundreds of victims losing thousands of dollars

OpenAI said it disrupted a major scam campaign coming out of Southeast Asia by banning accounts used by the operation and making it difficult to open new ones.

In a blog post, the ChatGPT maker said it was tipped off about the existence of the campaign by WhatsApp.

After investigating further, the company found that a group of criminals in Cambodia used its AI tool in different scam campaigns - romance fraud, fake investment scams, or bogus police investigations. It also used AI to help with day-to-day operations and, most worryingly, for things that could be related to human trafficking and forced criminality.

Detention and escape attempts

OpenAI did not say if the group had a name, just that it operated out of Poipet, “a city in Banteay Meanchey province that public reporting⁠ has repeatedly⁠ linked⁠ to online scam compounds and trafficking operations.”

The group used AI to create fake personas, to help draft fraudulent emails and chat messages, and to create posters for fake jobs which were probably used to lure people into human trafficking or forced labor.

The tool was also used for worker administration, since the operators maintained records of employee debts, salary deductions, disciplinary fines, and loan repayments. They also used the tool to translate discussions about immigration status, work permits, visa overstays, and recruitment incentives.

“Some conversations also referenced apparent detention, escape attempts, and potential criminal liability for people who had been trafficked and forced to work in scam operations,” OpenAI said. “While these conversations do not allow us to determine the circumstances of any particular individual, they are consistent with extensive public reporting⁠ describing⁠ the activities of organized crime groups in Southeast Asia.”

The company could not say how many people fell victim, or how much money this group has stolen, but said it found evidence of “hundreds” of victims losing “thousands of dollars.” These findings were shared with relevant authorities.

Via The Hacker News

• Microsoft is eating humble pie over its unrealistic RAM recommendations
• It has deleted articles that pushed 32GB as an ideal or 'no-worries' loadout
• Apple is also feeling the heat in the RAM crisis, with rumors that it's struggling to secure an alternative source of memory supply from China

There are some fresh twists with the RAM crisis hitting some big tech companies, as Microsoft has backtracked on its previous memory recommendations, and even Apple is apparently finding it difficult to cope with the scarcity of memory.

Let's discuss Microsoft first, and as Windows Latest pointed out, the company has been busy backpedalling on previous memory recommendations now that the RAM crisis – which just keeps getting worse – has made those suggestions look foolish.

Microsoft previously had support documents in its Windows Learning Center which have now been removed, and Windows Latest highlights two of them. One was about optimizing your gaming PC, and it advised that "32GB is ideal for serious players who run the most demanding titles" (albeit the article also said 16GB was "plenty" for most games).

Another piece said that 32GB of RAM was the "no-worries zone", and that article was also quietly deleted as there was some backlash against this, given that it was published when the price of system memory had become ridiculous. (And buying a 32GB kit was very much a worry for your wallet).

The links to those articles now redirect to the home page of the Learning Center, and Microsoft is evidently trying to forget about pushing 32GB of RAM as an 'ideal' or 'worry-free' target for memory on your PC.

More broadly, since Copilot+ PCs were launched and the AI features for these devices made them require 16GB, Microsoft has obviously been keen to have that as a baseline memory configuration. Except now, a change of stance is necessary, as with the RAM crisis reaching alarming new heights, Microsoft has been forced to enact huge price hikes with its Surface devices.

And of course, the latest twist with that Surface hardware is that Microsoft has brought back 8GB models with last year's Surface Pro and Surface Laptop. Which makes it kind of difficult to push 16GB as a minimum, let alone make suggestions that 32GB is where it's really at for properly smooth performance.

The abandonment of these Learning Center articles is hardly surprising, then, and Microsoft is also addressing how speedily Windows 11 runs with 8GB of memory (not quickly enough currently). One of its promises with fixing the OS was better performance with a leaner RAM loadout, and Microsoft just made it clear that the company is now actively working to make Windows 11 run better with 8GB before the end of the year.

This has become a vital goal, really, when you consider that Apple has pulled off a commendable showing of performance with its MacBook Neo that packs 8GB of RAM. That was effectively a gauntlet thrown down for Microsoft – something of a declaration that macOS is coming to try to take Windows 11's market share – and one that the Windows maker had to respond to (which became clear enough when Microsoft went on the attack against the Neo).

Apple turnover: China play rumored to end in a fumble

Speaking of Apple, Microsoft isn't the only tech giant being buffeted by the rising costs caused by the RAM storm. While it has had a big success with the Neo, the challenge for Tim Cook's firm – soon to be John Ternus's, of course – is to maintain that momentum, and by all accounts, that's proving a tricky task.

Recent Mac price hikes have caused a good deal of pain – taking some of the wind out of the good ship Neo's sails – and Apple is trying to secure its RAM supply lines for the future, with rumors abounding that it's turning to Chinese chip makers to find extra production capacity.

The latest speculation, however, is that according to a report from Digital Daily (a Korean tech site, via Wccftech), Apple has floundered in negotiations with Chinese memory giant CXMT.

Apparently CXMT has strong enough domestic demand that it doesn't have to offer more attractive pricing to Apple. Essentially, CXMT is holding the line and has "insisted on prices that were higher or similar to those offered by Samsung or SK Hynix" (bear in mind there may be nuances lost with the translation of the article).

You get the message, though: Apple is failing to obtain better deals on mobile DRAM, which includes LPDDR5X, for its iPhones (and that RAM is also used in its MacBooks, of course). And CXMT was supposed to be an escape route from the difficulties of getting enough RAM inventory from Samsung and SK Hynix (and also Micron, a key supplier for Apple), but it seems like a dead-end for now.

At least if this report is correct, but analyst Tim Culpan has also written a short post which backs up the notion that Apple is in trouble here. Culpan writes: "Apple and its suppliers are scrambling to get enough memory chips for its upcoming release of new iPhone models."

'Scrambling' is a word that evokes quite a sense of panic, and indeed with the iPhone 18 models – and the foldable offering – not much more than a month away from launch now (in theory), I'd bet there are some heated words flying here and there. Culpan notes: "Assemblers are working with Apple to rush shipments of DRAM used in mobile devices."

That report is specifically about smartphones, mind, but this same situation applies to mobile RAM that's also used in MacBooks.

The overall theme is more RAM misery all round, which is hardly a surprise given all the negative news we've been hearing on the grapevine of late. GPU pricing has been the latest round of doom and gloom over the past week or two, and I don't think the pessimistic news is going to stop flowing for the foreseeable.

It's not bad news for everyone, though. A source in the semiconductor industry told Digital Daily that: "With the general-purpose DRAM floor remaining unbroken and Samsung and SK Hynix monopolizing the lead in high-value AI memory such as HBM4, the operating profit margins and global market control of the domestic semiconductor sector are expected to rise even more steeply in the second half of the year."

So, it's a familiar story: profits will be on the up and up for memory makers, while consumers will be suffering the pain of the hikes. Apple's purported rush for RAM supplies as the clock runs down on the iPhone launch window is a particularly worrying sounding story, one that doesn't bode well in terms of avoiding more Mac (and iPhone) price rises in the future. Neither can we rule out more Surface price rises, or other laptops for that matter.

• runZero disclosed 12+ new flaws in BMCs from HPE, Supermicro, Dell, Lenovo, Huawei, and others at Black Hat
• Scans found 86k internet‑exposed BMCs and 120k internal devices
• Researchers warn BMCs form a widespread, under‑patched parallel attack surface

Security researchers have discovered more than a dozen new vulnerabilities in Baseboard management controllers (BMC), hardware components found in thousands of the world’s most popular enterprise servers.

BMCs are specialized chips built into servers that allow administrators to remotely monitor and manage hardware regardless of the operating system, and even when the hardware is turned off. They provide out-of-band management capabilities such as remote console access, firmware updates, hardware health monitoring, and power control, and have been a pivotal component since their introduction in the late 1990s.

Earlier this week, during the Black Hat security conference in Las Vegas, security expert HD Moore of runZero disclosed finding more than a dozen flaws in BMCs sold by HPE, Supermicro, Avocent, Huawei, Lenovo, Dell, and others - and to make matters worse, some of the flaws disclosed in the past remain active even today.

Parallel attack surface

“The end result is a pervasive, under-monitored, under-patched parallel attack surface that is both Internet-exposed and widespread inside corporate networks, and is much more exploitable than many folks realize,” Moore told the publication.

To assess the associated risks, Moore ran two scans - one looking at internet-connected BMCs in general, and another internally surveying devices in corporate networks. The first one found 86,000 exposed BMCs, more than half of which (54%) carried at least one of the flaws he found.

The internal scan, counting more than 120,000 BMCs, found almost a third (29%) carrying at least one critical vulnerability.

Details about the flaws will remain under lock and key until the manufacturers address them, Moore explained, saying that many of them cannot be exploited without prior authentication. However, for many (well-equipped) threat actors, that often isn’t a problem, since a number of smaller pre-authentication flaws exist as well, which could be abused.

Via Ars Technica

• Three in four European businesses fear a US tech 'kill switch' as much as they fear a ransomware attack
• Less than half have a continuity plan in place that is tested and documented
• Email and cloud file storage are the two services European businesses have sought sovereign alternatives for

Most European businesses use some form of US-based software in their day-to-day operations. But as tensions across the Atlantic mount, almost 75% of European businesses fear the introduction of a US tech ‘kill switch’.

This is according to new data from Proton, which surveyed 1,500 businesses in the UK, France, and Germany. The data also shows that more than half (54.5%) of European businesses would not survive for more than one day if they lost access to US cloud and digital services.

One in four of those surveyed predicted the losses from a single day of downtime could be as much as €100,000, with half predicting losses of more than €50,000.

Geopolitical tensions have become operational risk

US President Donald Trump has become increasingly critical of his allies across the Atlantic since returning to the Presidency. He has repeatedly questioned NATO contributions, threatening to withdraw unless Europe upped its spending.

But Trump has also criticized European tech regulations for “robbing American companies and, in turn, the American taxpayer”. He has vowed to investigate the European Union for fining US tech companies for anti-competitive practices and GDPR violations, and has placed numerous tariffs on trade partners.

Many US tech companies poured funding into Trump's presidential campaign, with others making voluntary contributions to curry favor immediately after his inauguration. Many complained of the fines levied against them by EU regulations, and Trump has turned this into a sticking point for negotiations with Europe.

The fear is that Trump could use Section 301 of the Trade Act of 1974 to deem the fines from such regulations to be unfair, and stop US companies from paying them, effectively allowing US companies to violate regulations without repercussions. In return, Europe would flip the ‘kill switch’ and stop US companies from operating in their territory.

"The kill switch is no longer an abstract geopolitical concern but a business continuity crisis. The study captures a clear shift in how European businesses perceive operational risk,” said Raphaël Auphan, Chief Operating Officer at Proton.

“The fact that concern about a government-imposed kill switch is virtually indistinguishable from concern about ransomware tells something significant: geopolitical risk applied to digital dependence is no longer a boardroom abstraction. It is joining the same threat register as criminal attacks, with the same sense of urgency and the same expectation that it could materialise without warning."

A sovereign alternative

The EU has already begun taking steps towards developing European alternatives to the cloud, productivity, and other services that many businesses rely on today. A Tech Sovereignty Package, launched in June this year, seeks to reduce the reliance on US hyperscalers and Chinese tech manufacturing.

While the Proton data shows that a majority of European businesses (67.8%) would switch to a sovereign provider if the kill switch was flipped, the availability of European cloud providers is not quite at the same level as rival US services.

But steps are being taken to address this shortfall. Proton has launched a business continuity solution to help businesses continue operating during outages caused by ransomware attacks, software outages, and even a US tech kill switch.

• Researchers Talal Haj Bakry and Tommy Mysk found three WebKit flaws leaking real IPs despite iCloud Private Relay
• DNS prefetching, WebAuthn origin requests, and WebTransport bypass proxy settings, exposing users across all Apple browsers
• Tor and Psylo browsers issued fixes; Apple has not confirmed a patch but is reviewing the report

WebKit, Apple’s engine that powers all web browsers in its ecosystem, contained multiple flaws that helped leak the IP addresses of users who paid to keep them hidden.

This is according to security researchers Talal Haj Bakry and Tommy Mysk who noted they had found “three WebKit features that bypass the proxy configuration and send traffic directly from the device instead,” they wrote.

“DNS prefetching resolves hostnames through the device’s normal DNS path, which reveals the user’s real DNS servers instead of the proxy’s. Available since iOS 26.0; WebAuthn Related Origin Requests make the operating system’s credential service fetch a validation file directly from the device. This exposes the device’s real IP address. Available since iOS 18.0; WebTransport opens a direct HTTP/3 connection and bypasses the proxy, which also exposes the device’s real IP address. Available since iOS 26.4," the researchers said.

Private Relay

While the bugs are in WebKit, the leaks come via Private Relay - a privacy feature available with iCloud+ that hides a user’s IP address and encrypts Safari web traffic. Private Relay does not work like a VPN, and does not mask the traffic flowing through other apps and programs - it just handles browser traffic.

Since WebKit is mandatory for all browsers running in Apple’s ecosystem, the vulnerability affects all of them. Some, including Tor and Mysk’s very own Psylo browsers, have already issued fixes.

Apple, on the other hand, has not yet confirmed a fix, or even that it was working on one. It did say, according to 404 Media, that it was looking into the research report.

The researchers built a dedicated website where users can check if Private Relay is working as intended or still leaking the actual IP address into the wild.

• Smart glasses bans are being introduced and considered
• There are growing concerns over smart glasses privacy
• Could hardware changes solve people's concerns?

I’ve written a lot about the high likelihood of major smart glasses regulation being introduced in various regions as the technology garners more and more bad press, and as expected, we’re starting to see bans and other restrictions take shape.

No nation has yet to all-out ban smart glasses, but a few have outlawed their use in certain scenarios while others are investigating harsher measures. Some private companies, such as event organizers, have also banned smart glasses on their premises and at their conferences.

Of course, this is bad news for smart specs owners who now could be facing restrictions on where they can/can’t wear their intelligent eyewear. For anyone considering adding smart glasses to their technology arsenal, these possible restrictions should be taken into account when making your final purchase decision.

So where are we starting to see smart glasses bans? Here’s a selection of the countries investigating and introducing anti-intelligent eyewear rules.

United States

Generally, smart glasses can be worn freely in the US; however, New York State has banned them from being used in any of its courts. Smart glasses with recording capabilities could be seen as an attempt to intimidate those involved in the case, and some cases contain sensitive private information where unauthorized recordings could impose serious risks.

Other states have introduced less widespread bans in courts — including Philadelphia, Hawaii, and North Carolina.

Meanwhile, the US Air Force includes in its rules for service members that they are “Unauthorized to wear mirrored lenses or smart glasses with photo, video or artificial intelligence capabilities while in uniform.” This seems like more of a presentation thing than an anti-smart specs rule (especially given the inclusion of mirrored specs), but it does mean you can’t wear intelligent eyewear in uniform regardless.

Further, attendees of conventions such as major hacker conference DEF CON 34 have been barred from wearing Meta glasses or similar. These bans focus on the possibility of glasses recording folks without their knowledge — with organizers arguing the recording light some glasses offer isn’t the most obvious.

UK

In the UK, things are much the same. Courts don’t ban their use, though after one person was being coached by their glasses’ AI mid-trial, their usage is generally advised against. There are also recording restrictions in UK courts, so while glasses aren’t explicitly banned, using them to snap photos or videos would be against the rules — the same as it would be for using your phone or a regular camera.

We have seen companies like Monopoly Events ban camera glasses from its Comic-Cons after secret filming complaints, and there’s a petition to the Government to ban the sale and promotion of smart specs in the country. These petitions don’t always go anywhere, but it shows there’s at least some public unrest over smart specs, and that could lead to rule changes.

EU

The European Data Protection Board is currently drafting a report on smart glasses, with it expected to land sometime in the next few months. However, while more general EU rules are being discussed, some individual members are making their own individual decisions on the tech.

Germany’s data protection authority commissioner has warned camera glasses could be banned under existing laws prohibiting recording devices hidden in everyday objects.

Netherlands digital rights activists have expressed frustration at smart glasses' ability to record people without their knowledge, while France’s privacy regulator, the National Commission on Informatics and Liberty, has highlighted the privacy risks camera glasses pose.

South Korea

Rounding things off, we have a different kind of ban in South Korea, with the country specifically restricting smart glasses access in exam halls after cases of students being caught trying to cheat using intelligent eyewear.

Smart devices are generally banned from exam rooms in most schools across the globe to prevent cheating, though given the importance of South Korea’s College Scholastic Ability Test, their very explicit ban makes sense so as to remove any possible confusion over whether students can even bring smart specs into the room with them.

Could things change?

Of course, very few bans have been brought in yet, but they could be unless things change on the hardware side.

A big concern is over privacy for non-glasses wearers caught in the gaze of someone's camera — especially if they don't know they’re being recorded. An obvious fix here would be to make smart glasses much more obvious when they're recording — perhaps brighter camera lights, a loud audible camera sound when snapping a photo, some kind of audio indicator when video is being recorded.

For users, they’ll want better control over what is and isn’t accessed by smart glasses makers when using their tech, and more certainty about which images are and aren’t shared, or which videos can or can’t be seen by contractors.

We’ll have to wait and see how the situation develops, though I’m not sure how much longer smart specs can go before we see serious regulations.

• Virtual Mac on iPad gets macOS running on compatible iPads
• It requires a jailbroken tablet and specific versions of iPadOS
• Its many limitations mean I don’t think it’s worth the hassle

For years, people have been wondering if Apple is ever going to “merge” iPadOS and macOS into some unholy mutant operating system. While Apple has repeatedly and resoundingly denied that’s ever going to happen, one intrepid developer has taken it upon themselves to do the hard work instead. And while the result lets you run full-fat macOS on your iPad Pro or iPad Air, I wouldn’t recommend it to anyone but the hardiest of souls.

Dubbed Virtual Mac on iPad, this GitHub project ports macOS onto Apple’s best iPads. That means it’s nothing like Apple’s Sidecar feature, which lets you use an iPad as a second display for a Mac. In the case of Sidecar, the Mac is doing all the processing. With Virtual Mac on iPad, however, it’s your iPad that’s actually running the operating system.

Unfortunately, getting that to actually happen is more than a little convoluted. You can’t even get started unless you’ve jailbroken your iPad, which means hacking it so it can run apps and systems not authorized by Apple. As well as that, the jailbroken iPad must be running iPadOS 16 to iPadOS 16.3.1 — nothing more, nothing less — in order to harness an exploit that was patched in subsequent editions. The requirements so far will probably be enough to put a lot of people off.

If you’ve persevered, you’ll need to add a specified repository to your device and install Virtual Mac on iPad from there. But you’ll need to be aware that even with macOS successfully set up, you won’t be able to log into your Apple Account — since you’re using a jailbroken device with an unofficial port of macOS, you’ll run into problems if you try to sign in, putting features like Find My and iCloud syncing out of reach.

Is it worth it?

Why would you go to all this effort to run macOS on your iPad? Well, there are a few reasons, including accessing Mac-only apps and getting a more portable platform to run macOS on.

But I certainly don’t think it’s a good idea. Apple’s iPadOS and macOS systems have been designed for very different use cases, and simply shoehorning a platform designed for a Mac onto an iPad isn’t a guarantee of success.

For one thing, macOS is made for large screens and input devices like mice and keyboards, while iPadOS works best on smaller screens operated by your fingers and thumbs. Sure, there’s some crossover — I’m aware that you can use mice and keyboards with an iPad, for example — but that doesn’t escape the fact that Virtual Mac on iPad puts the Mac’s operating system on a device it was never intended for.

As well as that, it requires a lot of effort for seemingly very small rewards. There are only a handful of cases where installing Virtual Mac on iPad is worthwhile, at least in my opinion: accessing apps like Xcode and Terminal that aren’t available in iPadOS, for example, or getting macOS on the most portable device possible.

But Apple’s best MacBooks are still lightweight and easy to carry around, and with a touchscreen MacBook Pro rumored to be just around the corner and Sidecar already a thing, the need for something like Virtual Mac on iPad feels limited. Is it worthwhile to go to all this trouble just for an ounce more portability? I’m sure it is for some people, but that number is likely to be vanishingly small.

At the end of the day, I know there will be some people for whom this is a welcome development. But its complicated installation process and limited use case just reinforce for me that Apple is absolutely right not to merge iPadOS and macOS. They’re meant to be separate, just as Apple intended.

• A former FBI counterintelligence supervisor is accused of memorizing seed phrases from bureau systems
• The agent moved roughly $1 million out of wallets tied to a foreign adversary without having to resort to any sort of hacking
• Investigators recovered ChatGPT conversations in which he asked how to invest the money and how to gain EU residency, and the chatbot's replies recited his age, wife, child, and property plans back to him

Patrick Steven Yaroch, a supervisory special agent in the FBI's Counterintelligence and Espionage Division, has been arrested and charged with interstate transportation and receipt of stolen goods.

An affidavit filed in the Eastern District of Virginia, claims Yaroch took roughly a million dollars in cryptocurrency from wallets he encountered while investigating a foreign adversary and then used ChatGPT to determine what to do with it.

The theft, as described, required no technical sophistication whatsoever: Yaroch held a Top Secret clearance with SCI access and had spent 2017 to 2025 on a national security squad at the FBI's Boston division working against a single adversarial nation, which NBC News reports was Russia.

An atypical heist with the alleged mastermind acting out of "frustration"

Patrick Steven Yaroch encountered the cryptocurrency wallets tied to his work in November 2024. He had researched how wallets work, created one of his own, searched the FBI's holdings for the relevant account information, and memorized the recovery seed phrases.

He then made roughly 10-12 transfers to his own wallet. No encryption was broken, and no protocol was exploited because none was in place for a man with his security clearance; he simply read a phrase off an internal system and remembered it.

The incident is particularly interesting because he self-reported, effectively turning himself in to his colleagues: on July 28 2026, he contacted a Justice Department employee he had worked with in Boston over Signal, asking to meet. They met at FBI headquarters the next day, where Yaroch reportedly began breaking down almost immediately, and the conversation moved to the other man's office.

He said the situation was "eating him up inside" and that he wanted to give all the money back. He filed an online self-report to the FBI's Security Division and told headquarters personnel he had screwed up. When agents arrived at his Ashburn home that evening, he told them, unprompted and in blunter terms, that he had messed up.

His defense, as per the affidavit, however, is slightly different from what one would expect: His stated motive was not greed. He told his colleagues he had grown frustrated that the FBI could not or would not act against those accounts, described himself as "spinning out of control" at the time, and said he decided to take matters into his own hands.

Despite this, he seemingly had a change of heart after cooperating earlier, asking for a paper containing his wallet seed phrases, which he had volunteered to agents, while declining to continue the interview without a lawyer while asking for time over the next two days.

This culminated in agents obtaining warrants, executing them on July 31 with SWAT securing the house, and recovering an iPhone, a Trezor hardware wallet, the handwritten seed phrases, a Portuguese power of attorney dated June 15, and three passports, one of them diplomatic.

Ironically, the most potentially damning evidence of his intentions comes from his conversations with AI, still on his phone and directly linked to him.

His conversations with ChatGPT convey a very different thought process: On May 28, he asked how to invest or spend a million dollars to maximize profit and return. On June 4, he asked what someone with about a million dollars should do to leave the United States and become a resident or citizen of an EU country. On June 17 he asked whether an American connecting through Turkey needs a visa. On June 26 he asked for help drafting an email to an executive about a job opening and life in Greece.

There is more evidence that he might already have acted based on the answers he received: prosecutors have found a power of attorney authorizing two Portuguese lawyers to register him with the country's tax authority and obtain a Portuguese tax identification number, and unreported foreign travel to Germany in May, Portugal later that month, and Grenada in early July, all in breach of bureau reporting rules.

His current investments seem to be equally erratically reasoned: On July 23, five days before he first confessed, Yaroch moved roughly $1.02 million into Suilend, a lending protocol on the Sui blockchain, reaching it through the Slush wallet app, which he then deleted. He parked the funds there to earn interest. When asked why he chose that service, he said he liked its logo, a water droplet.

When agents looked, the position was worth $933,756, roughly 8% below its level a week earlier. His Kraken account held another $188,570, including about $5,000 in a token called Squid and $1.67 in Bitcoin. Agents ultimately swept $925,426 into government wallets, leaving about $165,582 behind because it was dollars and could not be moved to a crypto wallet.

Yaroch is charged under sections 2314 and 2315 of the federal criminal code, the general provisions on transporting and receiving stolen goods. He is not charged with espionage, with computer fraud, or with theft of government property.

The wallets were not the government's, and that might change how they are treated legally, even as it raises important questions about the security protocols at federal agencies regarding cryptocurrencies, since they both monitor and have seized increasingly large amounts of them over the past few years.

In Yaroch's case, if the allegations hold, government protocols failed to identify the theft for nearly eighteen months before the person responsible reported himself, making the case for a potential review by federal agencies about how they handle such matters.

It's time for your guide to today's Wordle answer, featuring my commentary on the latest puzzle, plus a selection of hints designed to help you keep your streak going.

Don't think you need any clues for Wordle today? No problem, just skip to my daily column. But remember: failure in this game is only ever six guesses away.

Want more word-based fun? TechRadar's Quordle today page contains hints and answers for that game, and you can also take a look at our NYT Strands today and NYT Connections today pages for our verdict on two of the New York Times' other brainteasers.

SPOILER WARNING: Today's Wordle answer and hints are below, so don't read on if you don't want to see them.

Wordle hints (game #1874) - clue #1 - Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Wordle hints (game #1874) - clue #2 - first letter

G is the eighth most common starting letter, featuring in 115 Wordle answers. It's often paired with an R to make GR--- or an L to make GL---, but I'm not revealing whether that's the case today.

Wordle hints (game #1874) - clue #3 - repeated letters

Repeated letters are quite common in the game, with 748 of the 2,309 Wordle answers containing one. However, it's still more likely that a Wordle doesn't have one.

Wordle hints (game #1874) - clue #4 - ending letter

E is the most common letter to end a Wordle answer by far. That's one of the reasons why many of the best start words, including SLATE, CRANE, CRATE and STARE, all end with one.

Wordle hints (game #1874) - clue #5 - last chance

Still looking for more Wordle hints today? Here's an extra one for game #1874.

• Today's Wordle answer is a complaint.

If you just want to know today's Wordle answer now, simply scroll down – but I'd always recommend trying to solve it on your own first. We've got lots of Wordle tips and tricks to help you, including a guide to the best Wordle start words.

If you don't want to know today's answer then DO NOT SCROLL ANY FURTHER BECAUSE IT IS PRINTED BELOW. So don't say you weren't warned!

Today's Wordle answer (game #1874)

• NYT average score: 3.7
• My score: 4
• WordleBot's score: 3
• My skill score: 92
• My luck score: 38
• My start word performance: SANER (125 remaining answers)
• WordleBot's start word performance: SLATE (121)
• Tomorrow's start word: SANER

Today's Wordle answer (game #1874) is… GRIPE.

Anyone got a touch of déjà vu today? Don't worry, it's not just you.

However, though GRIPE has appeared as a Wordle answer before, it's unlikely that you'll remember it — that was back in December 2021 (game #187). Instead, you'll be thinking of GRAPE, which was the solution a little under two weeks ago, on 26 July.

This is the kind of probabilistic anomaly that occurs in Wordle every so often; with more than 2,000 words in the mix, it's inevitable that you'll sometimes get very similar words in close proximity.

The fact that GRAPE appeared so recently may have slightly lowered the average score — which currently sits at 3.7. That's because it will have removed one option from the possibles pool, depending on how people's games played out. That said, I don't think many will have faced a GRIPE/GRAPE dilemma anyway, because most popular start words include an A, so that will already have been ruled out.

As was the case with my game: SANER gave me the E and R, both as yellows, and removed several thousands possible answers including GRAPE. I still had 125 of them, though, but DROIT turned the R green and added a yellow I to further whittle them down to seven.

At this point I started looking for words that fit, and came up with all seven of them: PRICE, GRIPE, BRIBE, PRIME, GRIME, CRIME and PRIZE. That was a much easier task than it might sound, because there are only so many letters that can go before a green R, and it was almost certain that the I would go after it. DRI--, PRI--, CRI--… you get the idea; it was not a taxing thing for even my tired brain.

The more challenging thing was to find a word that would narrow them down and guarantee me a four. And it was one that I failed at: the best I could do was CLAMP, which might have left me a 50/50 of GRIPE and PRIZE but which would otherwise do the trick. The 'Bot suggested CAMPY, which would have made the four certain whatever the answer, so it beat me on that front.

Inevitably, I was left with that 50/50, but today guessed correctly and avoided a five that I wouldn't really have deserved. I'll settle for that.

Yesterday's Wordle hints (game #1873)

In a different time zone where it's still Wednesday? Don't worry — I can give you some clues for Wordle #1873, too.

• Wordle yesterday had vowels in two places*

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

• The first letter in yesterday's Wordle answer was P.

P is a very common first letter among Wordle answers. It's the fifth most common in the alphabet and begins 141 solutions in total.

• There were no repeated letters in yesterday's Wordle.

Repeated letters are quite common in the game, with 748 of the 2,309 Wordle answers containing one. However, it's still more likely that a Wordle doesn't have one.

• The last letter in yesterday's Wordle was T.

T is a very common letter to end a Wordle answer – in fact only E and Y are more likely in that position.

Still looking for more Wordle hints? Here's an extra one for game #1873.

• Yesterday's Wordle answer is to suggest an idea or theory.

Yesterday's Wordle answer (game #1873)

• NYT average score: 3.4
• My score: 4
• WordleBot's score: 4
• My skill score: 92
• My luck score: 56
• My start word performance: SANER (72 remaining answers)
• WordleBot's start word performance: SLATE (32)
• Tomorrow's start word: SANER

Yesterday's Wordle answer (game #1873) was… POSIT.

POSIT is a nice word. It has a useful meaning — to suggest a theory or idea — that fits in well with the detective and mystery TV shows and games that I enjoy, and also a pleasant sound.

In fact, it feels to me like it should be the name of a small, furry animal ("What's that over there?" "Oh don't worry, it's only a cute little posit.") Or maybe that's just because it sounds like a cross between a possum and a rabbit. Anyway, I like it as a Wordle word — as, seemingly, does the wider public, because it has an incredibly low average score of 3.4.

That's a little surprising to me, because WordleBot and I contrived to score fours again. I didn't do anything particularly good or bad, just played in a standard fashion that saw me move from 72 words to five to one; no drama, just an everyday Wordle. But it still took me four goes, whereas others are clearly solving in in three or perhaps even two.

How to explain that? I'm not sure that I can, beyond that four or the five letters are very common, while P is very common at the start of words. Some of the most popular start words will have made some headway, giving players a couple of yellows, and many will have followed up with whichever out of O, S, I and T were not in their opener. Maybe that was enough to make it an easy solve on the third attempt…

Whatever the reason, it's seemingly the easiest game since SONAR more than a week ago, which means I have to view my four as a failure. Hopefully you all did better than me.

Wordle answers: The past 50

I've been playing Wordle every day for more than four years now and have tracked all of the previous answers so I can help you improve your game. Here are the last 50 solutions starting with yesterday's answer, or check out my past Wordle answers page for the full list.

• Wordle #1873, Wednesday 5 August: POSIT
• Wordle #1872, Tuesday 4 August: MOTIF
• Wordle #1871, Monday 3 August: REPLY
• Wordle #1870, Sunday 2 August: PENAL
• Wordle #1869, Saturday 1 August: SLUSH
• Wordle #1868, Friday 31 July: PURSE
• Wordle #1867, Thursday 30 July: FLUME
• Wordle #1866, Wednesday 29 July: VALVE
• Wordle #1865, Tuesday 28 July: SONAR
• Wordle #1864, Monday 27 July: POSER
• Wordle #1863, Sunday 26 July: GRAPE
• Wordle #1862, Saturday 25 July: ALOHA
• Wordle #1861, Friday 24 July: PUTTY
• Wordle #1860, Thursday 23 July: ORBIT
• Wordle #1859, Wednesday 22 July: LORRY
• Wordle #1858, Tuesday 21 July: SHILL
• Wordle #1857, Monday 20 July: DIVER
• Wordle #1856, Sunday 19 July: CHURN
• Wordle #1855, Saturday 18 July: BOOTH
• Wordle #1854, Friday 17 July: LEGAL
• Wordle #1853, Thursday 16 July: BUTTE
• Wordle #1852, Wednesday 15 July: PSHAW
• Wordle #1851, Tuesday 14 July: STEAK
• Wordle #1850, Monday 13 July: STOUT
• Wordle #1849, Sunday 12 July: CLACK
• Wordle #1848, Saturday 11 July: AVIAN
• Wordle #1847, Friday 10 July: CANAL
• Wordle #1846, Thursday 9 July: AMEND
• Wordle #1845, Wednesday 8 July: DEMON
• Wordle #1844, Tuesday 7 July: SLING
• Wordle #1843, Monday 6 July: TODDY
• Wordle #1842, Sunday 5 July: SWAMI
• Wordle #1841, Saturday 4 July: PIZZA
• Wordle #1840, Friday 3 July: BATON
• Wordle #1839, Thursday 2 July: MAVEN
• Wordle #1838, Wednesday 1 July: DEMUR
• Wordle #1837, Tuesday 30 June: PUPPY
• Wordle #1836, Monday 29 June: CRUDE
• Wordle #1835, Sunday 28 June: EMCEE
• Wordle #1834, Saturday 27 June: SCOOP
• Wordle #1833, Friday 26 June: ACUTE
• Wordle #1832, Thursday 25 June: UNITY
• Wordle #1831, Wednesday 24 June: QUEER
• Wordle #1830, Tuesday 23 June: CURRY
• Wordle #1829, Monday 22 June: OVATE
• Wordle #1828, Sunday 21 June: ALIBI
• Wordle #1827, Saturday 20 June: DRAKE
• Wordle #1826, Friday 19 June: EMOJI
• Wordle #1825, Thursday 18 June: ENTRY
• Wordle #1824, Wednesday 17 June: TOKEN

What is Wordle?

If you're on this page then you almost certainly know what Wordle is already, and indeed have probably been playing it for a while. And even if you've not been playing it, you must surely have heard of it by now, because it's the viral word game phenomenon that took the world by storm in 2022 and is still going strong in 2026.

We've got a full guide to the game in our What is Wordle page, but if you just want a refresher then here are the basics.

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1655) — hint #1 — Vowels

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1655) — hint #2 — repeated letters

Quordle today (game #1655) — hint #3 — uncommon letters

Quordle today (game #1655) — hint #4 — starting letters (1)

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1655) — hint #5 — starting letters (2)

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1655) — the answers

The answers to today's Quordle, game #1655, are…

• AMUSE
• BRAND
• CEDAR
• BLURB

After seeing the two B-words immediately I made a wrong guess with my third word.

Fortunately, the letters I had left meant that after guessing “pause” AMUSE was the only alternative, while CEDAR was just a case of rearranging five letters.

Daily Sequence today (game #1655) — the answers

The answers to today's Quordle Daily Sequence, game #1655, are…

• WEARY
• THREE
• SUNNY
• TOPIC

Quordle answers: The past 20

• Quordle #1654, Wednesday, 5 August: MOUND, WRONG, STOOD, WEIRD
• Quordle #1653, Tuesday, 4 August: GOOEY, TARDY, HUMAN, CHALK
• Quordle #1652, Monday, 3 August: FUNGI, MUDDY, DEBUT, MANIA
• Quordle #1651, Sunday, 2 August: BOOTH, EASEL, REACH, MAKER
• Quordle #1650, Saturday, 1 August: OMEGA, BIRCH, SMOCK, EERIE
• Quordle #1649, Friday, 31 July: MANIA, SINGE, STOOL, LOFTY
• Quordle #1648, Thursday, 30 July: MODAL, IDLER, CHUMP, LUMPY
• Quordle #1647, Wednesday, 29 July: GAWKY, ALLOY, AUDIT, LATCH
• Quordle #1646, Tuesday, 28 July: SMITE, ROACH, RUDDY, GLOBE
• Quordle #1645, Monday, 27 July: TAFFY, FIGHT, GUILD, WAGER
• Quordle #1644, Sunday, 26 July: STOMP, LIMIT, FUNKY, STEAD
• Quordle #1643, Saturday, 25 July: SALON, SHEEN, BURST, GOURD
• Quordle #1642, Friday, 24 July: DOLLY, EDIFY, LAGER, PRANK
• Quordle #1641, Thursday, 23 July: LADEN, EVICT, WOVEN, SHIRE
• Quordle #1640, Wednesday, 22 July: COYLY, SINGE, AWASH, AWOKE
• Quordle #1639, Tuesday, 21 July: TRUSS, AXIAL, SWINE, THING
• Quordle #1638, Monday, 20 July: ICING, SLICK, GAILY, RISEN
• Quordle #1637, Sunday, 19 July: SPURT, ACRID, THRUM, BLEEP
• Quordle #1636, Saturday, 18 July: KNAVE, TIGHT, BLEAT, CHAOS
• Quordle #1635, Friday, 17 July: CUMIN, PALER, GRASS, INBOX

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #886) - hint #1 - today's theme

NYT Strands today (game #886) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• WRATH
• LION
• GOON
• FLOW
• HATRED
• BEER

NYT Strands today (game #886) - hint #3 - spangram letters

NYT Strands today (game #886) - hint #4 - spangram position

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #886) - the answers

The answers to today's Strands, game #886, are…

• CHERRY
• REDBUD
• DOGWOOD
• HAWTHORN
• MAGNOLIA
• SPANGRAM: FLOWERINGTREE

• My rating: Hard
• My score: 1 hint

This game came to me in stages.

First I managed to find CHERRY while searching for non-game words, then in the belief that we were looking for fruit trees I took a hint and was given REDBUD, which changed my thinking completely.

Spotting “tree” and “flower” I managed to put together the spangram and then complete the board. Like the act of gardening and maintaining a FLOWERINGTREE it felt like a long, but rewarding process.

Yesterday's NYT Strands answers (Wednesday, August 5, game #885)

• IDEA
• THOUGHT
• OPINION
• PLAN
• NOTION
• CONCEPT
• SPANGRAM: BRAINSTORMING

• Securonix uncovers SMOKE#SCREEN, a campaign tricking users into installing weaponized ScreenConnect via fake Zoom/Adobe updates and business docs
• Attackers gain persistent remote access, evolving tactics to disable protections and abuse trusted services like Dropbox/Cloudflare for delivery
• Victims observed on Windows and macOS; businesses urged to verify updates via official sites and train staff against unexpected installs

Security experts Securonix Threat Research have uncovered a new malicious campaign that tricks users into installing legitimate remote monitoring and management (RMM) software.

Dubbed SMOKE#SCREEN, the campaign uses fake Zoom and Adobe update messages, as well as a whole swathe of fraudulent business-related documents (document review requests, system maintenance tools, invoices, and similar), to convince the victims to run malicious files.

Victims who don’t see through the ruse and run the files end up installing ConnectWise ScreenConnect, a legitimate RMM tool that many IT teams use to provide technical support to their coworkers and clients. However, it is also one of the more abused solutions in the criminal cyber-underworld, since it can often fly under the radar of security products.

Dangerous evolution

After installation, attackers can remotely access compromised devices, potentially allowing them to steal data, install additional threats, or move deeper into an organization’s network.

At first glance, SMOKE#SCREEN looks like a fairly standard “phishing - install legitimate RMM - remote access” campaign. However, what makes it unique is how it evolved over time, Securonix explained. Earlier versions focused on hiding the malicious activity, while newer versions attempted to disable security protections and avoid detection by security software. The attackers also used trusted services such as Dropbox and Cloudflare to deliver their files, making the activity harder to block.

Victims were observed on both Windows and macOS ecosystems, it was added.

“The SMOKE#SCREEN campaign demonstrates a capable, actively maintained, and rapidly adapting threat actor who has built a diversified toolkit around a single objective: gaining persistent, legitimate-looking remote access to victim systems through weaponized ScreenConnect deployments,” the researchers explained.

“The use of multiple social engineering themes, rotating payload hashes, cross-platform coverage, and a live staging server that doubles as a ScreenConnect relay indicates a well-resourced actor with deliberate operational security practices.”

To minimize the risk of compromise, businesses should disable receiving software updates delivered through emails, verify update requests through official websites, and instruct their employees to be cautious when opening attachments or installing tools they were not expecting.

Via The Hacker News

• Huntress flags phishing emails spoofing Bank of America, pushing victims into different infection chains on Windows vs. macOS
• Windows users were tricked into installing ScreenConnect RMM via fake “Account Guard,” while macOS users faced credential‑harvesting forms for identity theft
• Emails mimicked Bank of America branding but came from unrelated domains; users advised to verify sender addresses to spot scams

Bank of America customers have been warned to take extra caution after experts warned of hackers spoofing the bank into trick you into downloading unwanted software and granting them access to your computer.

Security researchers Huntress revealed how it received a phishing email in their honeypot (an address set up primarily to catch scammers) claiming to have come from Bank of America.

Obviously, the message came from a domain completely unrelated to the company, but looked almost identical to the real thing, with the company logos, color schemes, and other details, meticulously imitated.

Just another ScreenConnect scam

In the email, the researchers were warned that their account was about to be “restricted” unless they “confirmed” certain information.

Depending on the platform from which the victim views the email, both the infection chain and the end goal are different. For Windows users, victims are invited to install “Account Guard”, which is described as a “powerful tool designed to protect your financial data, prevent unauthorized transactions, and other cyber threats”.

This is no guard - this is a Visual Basic script that leads to an installation of the ScreenConnect Remote Monitoring and Management (RMM) tool. ScreenConnect is not malicious itself - it is a legitimate tool - but it is also one of the most abused software out there, leveraged to grant attackers unabated access to victim computers without triggering any alarms.

For macOS users, on the other hand, the goal is different. Instead of trying to deploy malware, the attackers try to steal sensitive data. First, the victims are asked to log in to their banking account (twice - the first attempt is scripted to fail, in case the victim purposely submits the wrong password the first time).

Then, once they “log in”, the second web page asks the victims to “confirm” their details - full name, mailing address, government ID details, Social Security number (SSN), and the payment card details. This is more than enough information for an identity theft attack, or even wire fraud.

Huntress is now warning all Bank of America users to double-check the sender address for any email claiming to be from the bank, since that is the best way to know if the email is legitimate, or a scam.

• Gigabyte graphics cards are rumored to be set for a big price rise
• It could be a hike of 20% to 40%, and other rumors are also pointing to major price hikes for GPUs more broadly
• This means now is likely a good time to make a purchase, particularly with certain cards which have avoided the worst of the hikes so far

Desktop GPU prices are set to rise if the rumor mill is right – with yet another prediction to that end being aired – and while graphics cards are already costly in some cases, now might be the time to buy certain models, based on a fresh roundup of average pricing.

First off, let's deal with the latest gloom nugget from the grapevine regarding GPU pricing, courtesy of @momomo_us on X (via Wccftech) who picked up a notice from CFD (a Japanese components supplier) warning of substantial price hikes on Gigabyte graphics cards.

The claimed rise (add seasoning, of course) is in the order of 20% to 40%, so at the latter end of that scale, we're looking at prices shooting up by almost a half in some cases. Existing orders from retailers buying boards from CFD may even be cancelled, the notice states.

I perhaps wouldn't put as much stock in this, except that it echoes a rash of recent reports contending that large price hikes are about to happen in the GPU world, which makes it all the more believable.

Only yesterday I reported on the situation in South Korea where RTX 5000 models are rumored to be getting price increases of up to 30%. So again, that's a hefty hike, and it follows other speculation about Nvidia charging its partners more for video RAM (which will push up costs, of course).

This apparent Gigabyte move will affect both Nvidia and AMD graphics cards in Japan, and there have been rumors about Team Red having Radeon price hikes in the pipeline due to more expensive VRAM, too. That only makes sense, as if VRAM is getting more costly for Nvidia, it will be for AMD too. And while some of these reports are based on regional activity, the cost issues will surely apply globally – none of these markets exist in a bubble.

Analysis: I think it's time to buy – especially with certain GPUs

The RAM crisis has a lot to answer for, and it very much looks like graphics card prices are going to be jacked up considerably during the remainder of 2026, with video memory being the primary driver here. Given that, it seems that if you are thinking about a GPU upgrade, now is likely the time to go for it, rather than waiting and being hit by price hikes.

That's especially true if you're considering a 16GB graphics card (as more gamers are these days), as the products with more VRAM are going to get hit the hardest for price rises as memory modules become even more expensive.

If we want a snapshot of the current GPU market as price tags stand, fortunately enough, TechSpot has just furnished us with an extensive (multi-region) pricing roundup as of the end of July which highlights some key points.

Firstly, low-end GPUs are still relatively unscathed, with offerings like the RTX 5050 and RTX 5060 8GB, and the 8GB spin on the 5060 Ti, not having been bumped up by all that much in the RAM crisis thus far. However, as for the 16GB incarnation of the RTX 5060 Ti, that has seen major price bumps, reinforcing that observation on 16GB pain (this card is up over 40% since November 2025 in the US, for example – and shows a 14% rise since April 2026).

In the tier above that, the RTX 5070 is holding at a reasonable price, and even if the sub-MSRP levels of late last year are well and truly gone, it remains a decent buy. (As long as you can stomach 12GB of VRAM at this price bracket, of course – and that's one of the reasons why this GPU hasn't been hit so hard, no doubt).

Above this level, Nvidia GPUs have witnessed some of the nastier price increases, as you've probably noticed.

On the AMD side, matters look more promising, particularly in the case of the Radeon RX 9070 and RX 9070 XT, with TechSpot finding that the 16GB models in the RDNA 4 family haven't suffered as much as Nvidia's GeForce offerings. The price of both these 9070 models has remained steady over the last few months, and in many regions, they're only up 10% or so compared to late 2025. (The 9070 XT is an exception in the US, mind, where it has risen by closing on 20% since last year).

If you're inclined towards one of these Radeon mid-rangers, or Nvidia's RTX 5070, I'd strongly suggest you buy now rather than wait based on what we're hearing from the rumor mill. Lower-priced graphics cards are likely worth grabbing, too, because they may be heading upwards in the pricing stakes before long – although notably the RX 9060 XT with 16GB has already become a good deal more costly, much like its RTX 5060 Ti 16GB rival.

As noted, Nvidia's higher-end graphics cards (RTX 5070 Ti and upwards) have already been hit with alarming price hikes, but they're likely to get even worse. So, this could be a case of keeping your wallet shut and holding out for possibly a lengthy time, as I can't really recommend them even at the current pricing.

The trouble is, we don't know how long the RAM crisis will continue, and some of the guesswork on that front is very bleak indeed – suggesting it might be the rest of this decade effectively. At this point, I'm inclined to believe we're in it for the long haul with PC component pricing woes, which is why I think it's best to buy a GPU now, at least with the mentioned models, assuming you're in a position to do so.

• Forescout’s Vedere Labs found 15 flaws in TP‑Link Omada business networking gear, exploitable for RCE when chained with prior CVEs
• Weak trust shortcuts in zero‑touch provisioning exposed devices to client‑side code execution, hijacking, spoofing, and encrypted comms compromise
• TP‑Link released firmware updates; admins should patch immediately, with 1,800+ Omada controllers exposed online

TP-Link has patched more than a dozen vulnerabilities across multiple business networking products which could have been chained to achieve remote code execution (RCE).

Security researchers at Vedere Labs from Forescout found the flaws and published an in-depth report on the issues, which particularly affect TP-Link Omada, the company’s business networking platform for centrally managing enterprise and small-business network infrastructure.

It includes cloud-managed Wi-Fi access points, routers, switches, gateways, and controllers, all of which can be monitored and configured from a single interface.

Enabling "concrete attacks"

These support zero-touch provisioning (ZTP), a mechanism that allows IT managers to deploy and maintain devices without needing to configure each one manually and on site.

However, ZTP has to establish trust between a factory-fresh device, and a controller with no human involved, so TP-Link used different shortcuts: from hard-coded keys and certificates shared across multiple devices, to default credentials, and from guessable serial numbers as “identity”, to weak session-key randomness.

Now, Forescout says 15 vulnerabilities its researchers discovered all allow for different ways of exploiting these shortcuts, meaning a flaw anywhere in the onboarding chain can compromise every device that goes through it. These bugs would need to be combined with two previously disclosed command-injection flaws, though.

“The vulnerabilities fall into four impact categories: client-side code execution, information disclosure, device hijacking and spoofing, and compromise of encrypted communications,” Forescout said. “Combined with two previously disclosed CVEs (CVE-2025-7850 and CVE-2025-7851), these flaws enable concrete attacks that let attackers infiltrate networks through controllers and client devices.”

Out of the 15 discovered flaws, 11 received CVE identifiers, and the rest did not receive a tracking number.

Forescout said there are more than 1,800 Omada controllers accessible from the wider internet. If you are using any of the devices from the platform, you should head over to TP-Link’s download portal and grab the latest firmware for your device model.

• ZeroBEC observes Greatness PhaaS evolving to bypass MFA and phish Microsoft 365, iCloud, Yahoo, and Google Workspace accounts
• Attackers spoofed RingCentral emails post‑ShinyHunters breach, luring victims to fake Microsoft 365 logins that capture authentication tokens
• Greatness is sold on Telegram for $289/month, enabling access to Outlook, Teams, SharePoint, OneDrive, and more across multiple regions

Microsoft 365 users have been getting phishing emails spoofing RingCentral, designed to steal their accounts even if they were protected by multi-factor authentication (MFA), experts have warned.

Security researchers ZeroBEC claim to have observed a phishing-as-a-service (PhaaS) platform called Greatness evolve to also target MFA accounts, as well.

Greatness used to be a simple credential phishing platform. However, in recent times, it evolved to target not just Microsoft 365 accounts, but also those of iCloud, Yahoo, and Google Workspace.

Grabbing MFA-approved authentication tokens

ZeroBEC notes that RingCentral recently suffered a data breach at the hands of the infamous ShinyHunters hackers, meaning there is a good chance (although not confirmed) that the threat actors exfiltrated a list of emails belonging to RingCentral customers from that attack, and used it in this attack.

Now, RingCentral customers have been getting emails that look as if they are coming from the company itself, despite being mailed from an unknown mail server, and despite failing SPF and DMARC checks. The emails are the standard fake voicemail and performance-review notifications which, if clicked, redirect the victim to attacker-owned infrastructure spoofing the Microsoft 365 login page.

Through this malicious landing page, Greatness operators are able to capture MFA-approved authentication tokens, bypassing the login process entirely and moving straight into victim accounts.

From there, they would enumerate Outlook mailboxes, Teams conversations, and SharePoint sites. They would also access OneDrive files, contacts, calendars, and registered applications through Microsoft Graph.

The number of victims is unknown at the time, but ZeroBEC says Greatness has been active for at least four years now, targeting users in the US, UK, Australia, Canada, and South Africa.

According to BleepingComputer, the platform is being advertised for sale on Telegram channels with “thousands of subscribers”, and is currently being offered for a monthly fee of $289.

Via BleepingComputer

• Aikido researchers uncovers ChainDrop, a Shai‑Hulud variant infecting 1,300+ npm packages with an infostealer
• Attackers compromised GitHub accounts tied to popular libraries (Keyv, Cacheable, flat‑cache, file‑entry‑cache) and pushed tainted releases with 2B monthly downloads
• Malware exfiltrates developer/cloud credentials and secrets to a public GitHub repo; admins should treat affected systems as compromised even after removal

Another Shai-Hulud variant has been discovered in the wild, infecting more than 1,300 npm packages with an infostealer.

Security researchers Aikido reported finding “at least 868 packages (across 1381 versions) that have been compromised by the worm.”

Shai-Hulud is a self-propagating supply chain malware that targets software developers by compromising open-source packages and CI/CD pipelines. It steals credentials, API keys, and access tokens and then uses those stolen secrets to publish additional malicious packages.

What to do in case of an infection

In May 2026, actors claiming to be associated with the TeamPCP group publicly released the Shai-Hulud worm's source code, saying they were “open sourcing the carnage” and inviting other threat actors to adopt and modify the code. Since then, there were multiple copycat campaigns and variants, including this one which Aikido dubbed ‘ChainDrop’.

Aikido said the attackers compromised the GitHub account of the person maintaining Keyv and Cacheable, widely used open source JavaScript libraries for caching data in Node.js applications. From there, they were able to move into other popular utilities such as flat-cache and file-entry-cache, as well as packages associated with organizations such as Deliveroo, Ornikar, OneReach, Picsart, Qlik, and ServiceTitan.

The malware was pushed directly into the projects’ main branches, and then generated additional package releases. The compromised packages have a combined 2 billion monthly downloads.

Aikido says the infostealer grabs developer and cloud credentials, encrypts them, and then sends them to a public GitHub repository called “Shai-Hulud: Here We Go Again.”

It also steals local configuration files, GitHub PATs, workflow tokens, and other ghp_, gho_, and ghs_ tokens, certain npm tokens, GitHub Actions secrets, AWS credentials, Kubernetes secrets, and more.

The researchers are saying system admins who installed a tainted package should treat their developer workstation or CI/CD runner as compromised, even if they removed the package.

Memorizing all of the past Wordle answers is nearly impossible – after all, there have now been more than 1,800 of them. And even though Wordle answers do now repeat (see below), it can still be helpful to know what's gone before.

That's partly because the early evidence is that answers are not all that likely to appear twice; we've only had three repeats since Wordle changed its strategy in early February, so new words are still more common than old ones.

But even outside of that, it can be interesting to see what happened in the past. Plus, knowing the kind of words that might appear can help you decide what to play today.

What you need then, is a list of past Wordle answers, and that's what I've made for you here. It's organized by month and you can simply search the page to see whether the word you're thinking of has already been used. It won't be a guarantee that it won't appear again, but it might help.

So pick one of the best Wordle starting words, take a look at today's Wordle answer if you need to and keep this list close when you're playing.

Past Wordle answers: The full list

Below you'll find a list of every Wordle so far – all 1,873 of them (and counting!)

I've first organized the answers alphabetically, and then by month starting with the most recent. You can use the menus on the side (on desktop) or above (on mobile) to jump straight to the month you want. This year, 2025 and 2024 are on this page, and there's a second page with 2023, 2022 and 2021 on it (and the alphabetical list is on both pages).

If you're trying to find out whether a specific word has already been an answer, there are easy ways to search for it:

• Windows: click CTRL+F
• macOS: click CMD+F
• iOS: click Share (the box with the arrow), then 'Find on page'
• Android: click the three dots in the top-right then 'Find in page'

In each case, simply type in the word you're looking for, and if it has already been an answer you can use the arrows to navigate to it.

Right, on with the list…

Past Wordle answers: alphabetical list

ABACK | ABASE | ABATE | ABBEY | ABBOT | ABHOR | ABIDE | ABOUT | ABOVE | ABYSS | ACORN | ACRID | ACTOR | ACUTE* | ADAGE | ADAPT | ADEPT | ADMIN | ADMIT | ADOBE | ADOPT | ADORE | ADULT | AFFIX | AFOOT | AFTER | AGAIN | AGAPE | AGATE | AGENT | AGILE | AGING | AGLOW | AGONY | AGREE* | AHEAD | AISLE | ALARM | ALBUM | ALERT | ALIBI | ALIEN | ALIGN | ALIKE | ALIVE | ALLEY | ALLOT | ALLOW | ALLOY | ALOFT | ALOHA | ALONE | ALONG | ALOOF | ALOUD | ALPHA | ALTAR | ALTER | AMASS | AMAZE | AMBER | AMBLE | AMEND | AMISS | AMONG | AMPLE | AMPLY | AMUSE | ANGEL | ANGER | ANGLE | ANGRY | ANGST | ANKLE | ANNEX | ANNOY | ANODE | ANTIC | ANVIL | AORTA | APART | APHID | APPLE | APPLY | APRON | APTLY | ARBOR | ARDOR | ARGUE | ARISE | AROMA | ARROW | ARTSY | ASCOT | ASHEN | ASIDE | ASKEW | ASSAY | ASSET | ATLAS | ATOLL | ATONE | ATRIA | ATTIC | AUDIO | AUDIT | AVAIL | AVERT | AVIAN | AVOID | AWAIT | AWAKE* | AWARD | AWARE | AWASH | AWFUL | AWOKE | AXIOM | AZURE | BACON | BADGE | BADLY | BAGEL | BAKER | BALER | BALMY | BALSA | BANAL | BANJO | BARGE | BARON | BASIC | BASIL | BASIN | BASIS | BASTE | BATCH | BATHE | BATON* | BATTY | BAWDY | BAYOU | BEACH | BEADY | BEARD | BEAST | BEAUT | BEEFY | BEFIT | BEGET | BEGIN | BEGUN | BEING | BELCH | BELIE | BELLE | BELLY | BELOW | BENCH | BERET | BERTH | BESET | BEVEL | BICEP | BILGE | BINGE | BIOME | BIRCH | BIRTH | BLACK | BLADE | BLAME | BLAND | BLANK | BLARE | BLAST | BLAZE | BLEAK | BLEAT | BLEED | BLEEP | BLEND | BLIMP | BLINK | BLISS | BLOCK | BLOKE | BLOND | BLOOM | BLOWN | BLUFF | BLUNT | BLURB | BLURT | BLUSH | BOARD | BOAST | BONGO | BONUS | BOOBY | BOOST | BOOTH | BOOTY | BOOZE | BOOZY | BORAX | BORNE | BOSSY | BOUGH | BOXER | BRACE | BRAID | BRAIN | BRAKE | BRAND | BRASH | BRASS | BRAVE | BRAVO | BRAWN | BREAD | BREAK* | BREED | BRIAR | BRIBE | BRIDE | BRIEF | BRINE | BRING* | BRINK | BRINY | BRISK | BROAD | BROIL | BROKE | BROOD | BROOK | BROOM | BROTH | BROWN | BRUSH | BRUTE | BUDDY | BUDGE | BUGGY | BUGLE | BUILD | BUILT | BULGE | BULKY | BULLY | BUNCH | BUNNY | BURLY | BURNT | BUTTE | BUYER | BYLAW | CABLE | CACAO | CACHE | CACTI | CADET | CAMEL | CAMEO | CANAL | CANDY | CANNY | CANOE | CANON | CAPER | CARAT | CARGO | CAROL | CAROM | CARRY | CARVE | CATCH | CATER | CATTY | CAULK | CAUSE | CEASE | CEDAR | CELLO | CHAFE | CHAIN | CHAIR | CHALK | CHAMP | CHANT | CHAOS | CHARD | CHARM | CHART | CHASE | CHASM | CHEAP | CHEAT | CHECK | CHEEK | CHEER | CHEST | CHIDE | CHIEF | CHILD | CHILI | CHILL | CHIME | CHIRP | CHOCK | CHOIR | CHOKE | CHORD | CHORE | CHOSE | CHUCK | CHUMP | CHUNK | CHURN | CHUTE | CIDER | CIGAR* | CINCH | CIRCA | CIVIC | CIVIL | CLACK | CLAMP | CLANG | CLASH | CLASP | CLASS | CLEAN | CLEAR | CLEFT | CLERK | CLICK | CLIFF | CLIMB | CLING | CLINK | CLOAK | CLOCK* | CLONE | CLOSE | CLOTH | CLOUD | CLOVE | CLOWN | CLUCK | CLUMP | CLUNG | COACH | COAST | COCOA | COLIC | COLON | COMET* | COMFY | COMMA | CONCH | CONDO | CONIC | CORAL | CORER | CORNY | COUCH | COULD | COUNT | COURT | COVEN | COVER | COVET | COWER | COYLY | CRAFT | CRAMP | CRANE | CRANK | CRASS | CRATE | CRAVE | CRAWL | CRAZE | CRAZY | CREAK | CREAM | CREDO | CREED | CREPE | CREPT | CREST | CRIME | CRIMP | CRISP | CROAK | CROCK | CRONE | CROOK | CROSS | CROWD | CROWN | CRUDE | CRUEL | CRUMB | CRUSH | CRUST | CRYPT | CUBIC | CUBIT | CUMIN | CURIO | CURLY | CURRY | CURSE | CURVE | CYBER | CYCLE | CYNIC | DADDY | DAISY | DALLY | DANCE | DANDY | DATUM | DAUNT | DEATH | DEBIT | DEBUG | DEBUT | DECAL | DECAY | DECOR | DECOY | DECRY | DEFER | DEITY | DELAY | DELTA | DELVE | DEMON | DEMUR | DENIM | DENSE | DEPOT | DEPTH | DETER | DETOX | DEUCE | DEVIL | DIARY | DICEY | DIGIT | DINER | DINGO | DINGY | DIRGE | DISCO | DITTO | DITTY | DIVER | DIVOT | DIZZY | DODGE | DODGY | DOGMA | DOING | DOLLY | DONOR | DONUT | DOPEY | DOUBT | DOUGH | DOWDY | DOWEL | DOWRY | DOZEN | DRAFT | DRAIN | DRAKE | DRAMA | DRAPE | DRAWN | DREAD | DREAM | DRIFT | DRILL | DRINK | DRIVE | DROLL | DRONE | DROOL | DROOP | DROVE | DRUNK | DRYER | DUCHY | DUMMY | DUSKY | DUSTY | DUTCH | DUVET | DWARF | DWELL | DWELT | EAGER | EAGLE | EARLY | EARTH | EASEL | EATEN | EBONY | EDICT | EDIFY | EERIE | EGRET | EIGHT | EJECT | ELATE | ELBOW | ELDER | ELFIN | ELITE | ELOPE | ELUDE | EMAIL | EMBED | EMBER | EMCEE | EMOJI | EMPTY | ENACT | ENDOW | ENEMA | ENJOY | ENNUI | ENSUE | ENTER | ENTRY | ENVOY | EPOCH | EPOXY | EQUAL | EQUIP | ERASE | ERODE | ERROR | ERUPT | ESSAY | ETHER | ETHIC | ETHOS | ETUDE | EVADE | EVENT | EVERY | EVOKE | EXACT | EXALT | EXCEL | EXERT | EXILE | EXIST | EXPEL | EXTOL | EXTRA | EXULT | FABLE | FACET | FAINT | FAITH | FALSE | FANCY | FARCE | FAULT | FAVOR | FEAST | FEIGN | FERAL | FERRY | FETCH | FETID | FEVER | FEWER | FIBER | FIELD | FIEND | FIERY | FIFTH | FIFTY | FILET | FILLY | FINAL | FINCH | FINER | FIRST | FISHY | FIXER | FIZZY | FJORD | FLAIL | FLAIR | FLAKE | FLAKY | FLAME | FLANK | FLARE | FLASH | FLASK | FLESH | FLICK | FLING | FLINT | FLIRT | FLOAT | FLOCK | FLOOD | FLOOR | FLORA | FLOSS | FLOUR | FLOUT | FLOWN | FLUFF | FLUKE | FLUME* | FLUNG | FLUNK | FLUTE | FLYER | FOAMY | FOCAL | FOCUS | FOGGY | FOIST | FOLIO | FOLLY | FORAY | FORCE | FORGE | FORGO | FORTE | FORTH | FORTY | FORUM | FOUND | FOYER | FRAIL | FRAME | FRANK | FREAK | FRESH | FRIED | FRILL | FRITZ | FROCK | FROND | FRONT | FROST | FROTH | FROWN | FROZE | FRUIT | FUGUE | FULLY | FUNGI | FUNKY | FUNNY | FUZZY | GAMER | GAMMA | GAMUT | GAUDY | GAUGE | GAUNT | GAUZE | GAVEL | GAWKY | GECKO | GEESE | GENIE | GENRE | GHOST | GHOUL | GIANT | GIDDY | GIRTH | GIVEN | GIZMO | GLADE | GLAND | GLARE | GLASS | GLAZE | GLEAM | GLEAN | GLIDE | GLINT | GLOAT | GLOBE | GLOOM | GLORY | GLOSS | GLOVE | GLYPH | GNASH | GNOME | GOFER | GOING | GOLEM | GONER | GOODY | GOOEY | GOOFY | GOOSE | GORGE | GOUGE | GRACE | GRADE* | GRAFT | GRAIL | GRAIN | GRAND | GRANT | GRAPE | GRAPH | GRASP | GRASS | GRATE | GRAVE | GRAVY | GREAT | GREED | GREEN | GREET | GRIEF | GRIFT | GRIME | GRIMY | GRIND | GRIPE | GROAN | GROIN | GROOM | GROSS | GROUP | GROUT | GROVE | GROWL | GROWN | GRUEL | GRUFF | GUANO | GUARD | GUAVA | GUESS | GUEST | GUIDE | GUILD | GUILE | GUISE | GULLY | GUMBO | GUMMY | GUNKY | GUPPY | GUSTY | HABIT | HAIRY | HALVE | HANDY | HAPPY | HARDY | HARSH | HASTE | HASTY | HATCH | HATER | HAUNT | HAVEN | HAVOC | HAZEL | HEADY | HEARD | HEART | HEATH | HEAVE | HEAVY | HEFTY | HEIST | HELIX | HELLO | HENCE | HERON | HILLY | HINGE | HIPPO | HITCH | HOARD | HOBBY | HOIST | HOLLY | HOMER | HONEY | HORDE | HORSE | HOTEL | HOUND | HOUSE | HOVEL | HOVER | HOWDY | HUMAN | HUMID | HUMOR | HUMPH | HUNCH | HUNKY | HURRY | HUTCH | HYDRA | HYENA | HYPER | ICING | IDEAL | IDIOM | IDLER | IGLOO | IMAGE | IMBUE | IMPEL | INANE | INBOX | INCUR | INDEX | INDIE | INEPT | INERT | INFER | INLAY | INLET | INNER | INPUT | INTER | INTRO | IONIC | IRATE | IRONY | ISLET | ISSUE | ITCHY | IVORY* | JAUNT | JAZZY | JELLY | JERKY | JEWEL | JIFFY | JOINT | JOKER | JOLLY | JOUST | JUDGE | JUICE | JUMBO | JUMPY | KARMA | KAYAK | KAZOO | KEBAB | KEFIR | KHAKI | KIOSK | KNACK | KNAVE | KNEAD | KNEEL | KNELL | KNELT | KNIFE | KNOCK | KNOLL | KNOWN | KOALA | KRILL | LABEL | LABOR | LADEN | LADLE | LAGER | LANCE | LANKY | LAPEL | LAPSE | LARGE | LARVA | LASER | LASSO | LATCH | LATER | LATHE | LATTE | LAUGH | LAYER | LEACH | LEAFY | LEAKY | LEAPT | LEARN | LEASE | LEASH | LEAST | LEAVE | LEDGE | LEECH | LEERY | LEFTY | LEGAL | LEGGY | LEMON | LEMUR | LEVEL | LEVER | LIBEL | LIGHT | LIKEN | LILAC | LIMBO | LIMIT | LINEN* | LINER | LINGO | LITHE | LIVER | LIVID | LLAMA | LOATH | LOBBY | LOCAL | LOCUS | LODGE | LOFTY | LOGIC | LOOPY | LORIS | LORRY | LOSER | LOUSE | LOUSY | LOVER | LOWER | LOWLY | LOYAL | LUCID | LUCKY | LUMPY | LUNAR | LUNCH | LUNGE | LURID | LUSTY | LYING | MACAW | MACHO | MADAM | MADLY | MAFIA | MAGIC | MAGMA | MAIZE | MAJOR | MAKER | MAMBO | MANGA | MANGO | MANIA | MANIC | MANLY | MANOR | MAPLE | MARCH | MARRY | MARSH | MASON | MASSE | MATCH | MATEY | MATTE | MAUVE | MAVEN | MAXIM | MAYBE | MAYOR | MEALY | MEANT | MEDAL | MEDIA | MEDIC | MELON | MERCY | MERGE | MERIT | MERRY | METAL | METER | METRO | MICRO | MIDGE | MIDST | MIGHT | MIMIC | MINCE | MINER | MINTY | MINUS | MIRTH | MISER | MODAL | MODEL | MODEM | MOGUL | MOIST | MOLAR | MOLDY | MOMMY | MONEY | MONTH | MOOCH | MOOSE | MORAL | MORPH | MOSSY | MOTEL | MOTIF | MOTOR | MOTTO | MOULT | MOUNT | MOURN | MOUSE | MOUTH | MOVER | MOVIE | MUCKY | MUGGY | MULCH | MUMMY | MUNCH | MURAL | MUSHY | MUSIC | MUSTY | MYRRH | NADIR | NAIVE | NANNY | NASAL | NASTY | NATAL | NAVAL | NAVEL | NEEDY | NEIGH | NERDY | NERVE | NERVY | NEVER | NEWLY | NICER | NICHE | NIECE | NIGHT | NINJA | NINTH | NOBLE | NOBLY | NOISE | NOISY | NOMAD | NORTH | NOTCH | NOVEL | NUDGE | NURSE | NYLON | NYMPH | OASIS | OCCUR | OCEAN | OCTET | ODDLY | OFFAL | OFFER | OFTEN | OLDER | OLIVE | OMEGA | ONION | ONSET | OOMPH | OPERA | OPINE | ORBIT | ORDER | ORGAN | OTHER | OTTER | OUGHT | OUNCE | OUTDO | OUTER | OVATE | OVERT | OWNER | OXIDE | OZONE | PAINT | PANEL | PANIC | PAPAL | PAPER | PARER | PARKA | PARRY | PARTY | PASTA | PATCH | PATIO | PATSY | PATTY | PAUSE | PEACE | PEACH | PEARL | PECAN | PEDAL | PENAL | PENNE | PERCH | PERIL | PERKY | PESKY | PETAL | PETTY | PHASE | PHONE | PHONY | PHOTO | PIANO | PICKY | PIECE | PIETY | PILOT | PINCH | PINEY | PINKY | PINTO | PIOUS | PIPER | PIQUE | PITCH | PITHY | PIXEL | PIXIE | PIZZA | PLACE | PLAID | PLAIN | PLAIT | PLANE | PLANK | PLANT | PLATE | PLAZA | PLEAD | PLEAT | PLUCK | PLUMB | PLUME | PLUMP | PLUNK | POINT | POISE | POKER | POLAR | POLKA | POLYP | POPPY | PORCH | POSER | POSSE | POUND | POUTY | POWER | PRANK | PREEN | PRESS | PRICE | PRICK | PRIDE | PRIME | PRIMO | PRIMP | PRINT | PRIOR | PRISM | PRIZE | PROBE | PRONE | PRONG | PROOF | PROSE | PROUD | PROVE | PROWL | PROXY | PRUDE | PRUNE | PSALM | PSHAW | PUFFY | PULPY | PUPIL | PUPPY | PURGE | PURSE | PUTTY | QUACK | QUAIL | QUAKE | QUALM | QUARK | QUART | QUASH | QUEEN | QUEER | QUELL | QUERY | QUEST | QUEUE | QUICK | QUIET | QUILL | QUILT | QUIRK | QUITE | QUOTA | QUOTE | RABID | RACER | RADIO | RAINY | RAISE | RAMEN | RANCH | RANGE | RAPID | RATIO | RATTY | RAYON | REACH | REACT | READY | REALM | REBEL | REBUS | REBUT | RECAP | RECUR | REFER | REGAL | REHAB | RELAX | RELAY | RELIC | REMIT | RENEW | REPAY | REPEL | REPLY | RERUN | RESIN | RETCH | RETRO | RETRY | REUSE | REVEL | REVUE | RHINO | RHYME | RIDER | RIDGE | RIGHT | RIGID | RIPER | RISEN | RISER | RIVAL | RIVET | ROACH | ROBIN | ROBOT | ROCKY | RODEO | ROGUE | ROOMY | ROOST | ROUGE | ROUGH | ROUND | ROUSE | ROUTE | ROVER | ROWDY | ROWER | ROYAL | RUDDY | RUDER | RUGBY | RUMBA | RUPEE | RURAL | RUSTY | SAINT | SALAD | SALLY | SALSA | SALTY | SANDY* | SASSY | SATIN | SAUCY | SAUNA | SAUTE | SAVOR | SAVVY | SCALD | SCALE | SCANT | SCARE | SCARF | SCENE | SCENT | SCOFF | SCOLD | SCONE | SCOOP | SCOPE | SCORE | SCORN | SCOUR | SCOUT | SCOWL | SCRAM | SCRAP | SCRUB | SCRUM | SEDAN | SEEDY | SEGUE | SENSE | SEPIA | SERIF | SERUM | SERVE | SEVEN | SEVER | SHADE | SHAFT | SHAKE | SHAKY | SHALL | SHAME | SHANK | SHAPE | SHARD | SHARE | SHARP | SHAVE | SHAWL | SHEAR | SHEEP | SHEET | SHELF | SHELL | SHIFT | SHILL | SHINE | SHIRE | SHIRK | SHOAL | SHORE | SHORN | SHORT | SHOUT | SHOVE | SHOWN | SHOWY | SHRED | SHRUB | SHRUG | SHUCK | SHUNT | SHUSH | SHYLY | SIEGE | SIGHT | SILLY | SINCE | SINGE | SIREN | SISSY | SITAR | SIXTH | SKATE | SKIER | SKIFF | SKILL | SKIMP | SKIRT | SKULL | SKUNK | SLANG | SLATE | SLEEK | SLEEP | SLICE | SLICK | SLIME | SLING | SLOPE | SLOSH | SLOTH | SLUMP | SLUNG | SLUSH | SMALL | SMART | SMASH | SMEAR | SMELL | SMELT | SMILE* | SMIRK | SMITE | SMITH | SMOCK | SMOKE | SNACK | SNAFU | SNAIL | SNAKE | SNAKY | SNARE | SNARL | SNEAK | SNIDE | SNOOP | SNORE | SNORT | SNOUT | SOBER | SOGGY | SOLAR | SOLID | SOLVE | SONAR | SONIC | SORRY | SOUND | SOUTH | SOWER | SPACE | SPADE | SPARE | SPARK | SPASM | SPATE | SPEAK | SPEAR | SPECK | SPEED | SPELL | SPELT | SPEND | SPENT | SPICE | SPICY | SPIEL | SPIKE | SPILL | SPINE | SPINY | SPIRE | SPITE | SPLAT | SPLIT | SPOIL | SPOKE | SPOOF | SPOOL | SPOON | SPORE | SPORT | SPOUT | SPRAY | SPRIG | SPURT | SQUAD* | SQUAT | SQUID | STACK | STAFF | STAGE | STAID | STAIN | STAIR | STAKE | STALE | STALL | STAMP | STAND* | STANK | STARE | STARK | START | STASH | STATE | STEAD | STEAK | STEAM | STEED | STEEL | STEEP | STEIN | STERN | STICK | STIFF | STILL | STILT | STING | STINK | STINT | STOCK | STOIC | STOLE | STOMP | STONE | STONY | STOOD | STOOL | STORE | STORK | STORM | STORY | STOUT* | STOVE | STRAP | STRAW | STRAY | STRUT | STUDY | STUFF | STUMP | STUNG | STUNT | STYLE | SUAVE | SUEDE | SUGAR | SUITE | SULKY | SULLY | SUMAC | SUNNY | SUPER | SURER | SURGE | SURLY | SUSHI | SWAMI | SWAMP | SWATH | SWEAT | SWEEP | SWEET | SWELL | SWILL | SWINE | SWING | SWIRL | SWISH | SWOON | SWOOP | SWORD | SWORN | SWUNG | SYRUP | TABBY | TABLE | TABOO | TACIT | TACKY | TAFFY | TAKEN | TALLY | TALON | TANGY | TAPER | TAPIR | TARDY | TASTE | TASTY | TAUNT | TAUPE | TAWNY | TEACH | TEARY | TEASE | TEDDY | TEETH | TEMPO | TENOR | TENTH | TEPID | TERSE | TESTY | THANK | THEFT | THEIR | THEME | THERE | THESE | THICK | THIEF | THIGH | THING | THINK | THIRD | THORN | THOSE | THREE | THREW | THROB | THROW | THRUM | THUMB* | THUMP | THYME | TIARA | TIBIA | TIDAL | TIGER | TILDE | TIMER | TINGE | TIPSY | TITAN | TITHE | TITLE | TIZZY | TOADY | TOAST | TODAY | TODDY | TOKEN | TONIC | TOOTH | TOPAZ | TOPIC | TORCH | TORSO | TOTAL | TOTEM | TOUCH | TOUGH | TOWEL | TOWER | TOXIC | TOXIN | TRACE | TRACK | TRACT | TRADE | TRAIL | TRAIN | TRAIT | TRASH | TRAWL | TREAT | TREND | TRIAD | TRIAL | TRICE | TRICK | TRIPE | TRITE | TROLL | TROOP | TROPE | TROUT | TROVE | TRUCK | TRULY | TRUSS | TRUST | TRUTH | TRYST | TUBER | TULIP | TUNIC | TURBO | TUTOR | TWANG | TWEAK | TWEED | TWEET | TWICE | TWINE | TWIRL | TWIST | UDDER | ULCER | ULTRA | UMBRA | UNCLE | UNION | UNDER | UNDID | UNDUE | UNFED | UNFIT | UNIFY | UNITE | UNITY | UNLIT | UNMET | UNTIE | UNTIL | UNZIP | UPPER | UPSET | URBAN | USAGE | USHER | USING | USUAL | USURP | UTTER | UVULA | VAGUE | VALET | VALID | VALUE | VALVE | VAPID | VAULT | VEGAN | VENOM | VENUE | VERGE | VERSE | VERVE | VIDEO | VIGOR | VILLA | VINYL | VIOLA | VIRAL | VISIT | VISOR | VITAL | VIVID | VIXEN | VOCAL | VODKA | VOGUE | VOICE | VOILA | VOTER | VOUCH | VOWEL | VYING | WACKY | WAFER | WAGON | WAIST | WALTZ | WASTE | WATCH | WATER | WAVER | WAXEN | WEARY | WEAVE | WEDGE | WEEDY | WEIGH | WEIRD | WHACK | WHALE | WHARF | WHEAT | WHEEL | WHELP | WHERE | WHICH | WHIFF | WHILE | WHINE | WHINY | WHIRL | WHISK | WHITE | WHOLE | WHOOP | WHOSE | WIDEN | WIDTH | WIELD | WINCE | WINDY | WISER | WITCH | WITTY | WOKEN | WOMAN | WOMEN | WOOER | WORDY | WORLD | WORRY | WORSE | WORST | WOULD | WOUND | WOVEN | WRATH | WREAK | WRECK | WRIST | WRITE | WRONG | WROTE | WRUNG | YACHT | YEARN | YEAST | YIELD | YOUNG | YOUTH | ZEBRA | ZESTY

Past Wordle answers: Repeated answers

Past Wordle answers: August 2026

Past Wordle answers: July 2026

Past Wordle answers: June 2026

Past Wordle answers: May 2026

Past Wordle answers: April 2026

Past Wordle answers: March 2026

Past Wordle answers: February 2026

Past Wordle answers: January 2026

Past Wordle answers: December 2025

Past Wordle answers: November 2025

Past Wordle answers: October 2025

Past Wordle answers: September 2025

Past Wordle answers: August 2025

Past Wordle answers: July 2025

Past Wordle answers: June 2025

Past Wordle answers: May 2025

Past Wordle answers: April 2025

Past Wordle answers: March 2025

Past Wordle answers: February 2025

Past Wordle answers: January 2025

Past Wordle answers: December 2024

Past Wordle answers: November 2024

Past Wordle answers: October 2024

Past Wordle answers: September 2024

Past Wordle answers: August 2024

Past Wordle answers: July 2024

Past Wordle answers: June 2024

Past Wordle answers: May 2024

Past Wordle answers: April 2024