AI news you can use — August 19, 2026
Hacked WordPress sites are showing fake CAPTCHA prompts that install malware
Security researchers at Check Point uncovered an operation running on roughly 2,000 hacked WordPress sites. Visitors see what looks like a normal "verify you're human" box, but instead of a checkbox it asks them to copy a command and run it on their own computer. Anyone who follows the instructions installs a bundle that encrypts files, steals saved passwords and documents, and takes a screenshot every 30 seconds. Researchers recovered around 31,000 victim screenshots from the attackers' own exposed server. Most of the hacked sites were running years-old versions of WordPress and its plugins — one had not been updated since 2021 — and more than 6,000 people have been infected so far, most of them in the US.
Why it matters: A real CAPTCHA never asks you to paste anything into your computer. If a website tells you to copy a command, open a Windows box, or press a key combination to "prove you're human," close the tab — that is the whole attack. And if you run a WordPress site, update WordPress and every plugin this week, and delete plugins you no longer use; outdated plugins are how these sites were taken over in the first place.
A medical billing company confirms 3.7 million patients had records stolen
CareCloud, which handles billing and records for medical practices, confirmed that data on more than 3.7 million people was taken after intruders reached one of its cloud environments in March. The stolen information includes names, addresses, dates of birth, Social Security numbers, driver's license numbers, health insurance details and medical information, and for a smaller group, full payment card details. Most affected people never dealt with the company directly — it works behind the scenes for the practices they visit.
Why it matters: You can be in this breach without ever having heard of the company. Because Social Security numbers were taken, the strongest move is a free credit freeze at all three bureaus — Equifax, Experian and TransUnion — which blocks new accounts being opened in your name and can be lifted any time you need credit. Watch your mail for a notification letter, and treat any call or email about "your medical bill" with suspicion for the next several months.
Windows 11 24H2 stops getting security updates on October 13
Microsoft has confirmed that Windows 11 version 24H2 Home and Pro reach end of updates on October 13, 2026. After that date those machines stop receiving monthly security patches, bug fixes and technical support. The replacement, Windows 11 version 25H2, is free, and home PCs that are not managed by an IT department will be upgraded automatically — though the update can be paused or postponed, which is exactly how machines end up stranded.
Why it matters: An unpatched PC is the easiest target there is, and two months goes quickly. Open Settings, go to Windows Update, and check which version you are on and whether the 25H2 update is waiting. If you have been postponing it, stop postponing it. Business PCs on Enterprise or Education editions have until October 2027, but everyone else should be moved before mid-October.
Alexa+ is now free on Fire TV, with no Prime membership needed
Amazon is upgrading all compatible Fire TV devices in the US to Alexa+ at no extra cost, regardless of whether the owner has a Prime membership. The conversational version of Alexa handles open-ended questions, smart home commands and recommendations, and the upgrade happens automatically — nothing to download or sign up for. Non-Prime customers previously paid $19.99 a month for it. Eligible hardware includes current Fire TV Sticks, the Fire TV Cube, Amazon Ember TVs, and some Hisense and Panasonic sets with Alexa+ built in. A Prime membership or a paid Alexa+ plan is still required for extras like Alexa Routines, certain Ring camera clips, and the advanced home automation modes.
Why it matters: If you were paying a monthly fee for Alexa+ without Prime, that charge should go away for TV use — worth checking your Amazon subscriptions to confirm you are not still being billed. It is also a reminder that voice assistants are getting a lot more capable in the background of devices you already own, which means they are listening for more than a wake word and a weather question.
Firefox is testing an AI window that lets you pick the model
Mozilla opened a beta of Smart Window, an AI layer inside Firefox aimed at picking work back up rather than starting it. It answers questions with current web information and shows its sources, suggests groupings for related tabs and flags duplicates, and gives visual previews of pages from your history so you can find that thing you had open last Tuesday. It is in beta in English for users in the US and Canada. Mozilla says the feature is optional: you choose when to use it, what browsing context it can see, and which AI model runs behind it, and it can be switched off entirely in Firefox's AI controls.
Why it matters: The choice of model and the control over what the AI can see are the parts worth paying attention to — most browsers making the same move decide both for you. If you use Firefox and the beta appears, look at the AI controls before switching it on, so you know which tabs and history it is allowed to read.