Tonight’s technology rundown is unusually practical: Microsoft corrected a high-risk server advisory, AWS continued working through a physical facility failure in Frankfurt, Threema explained a distributed denial-of-service outage, a long OLED test found that burn-in risk has not disappeared, and a real electric-aircraft flight shared the stage with a still-unconfirmed multibillion-dollar AI deal.
Listen to Jennifer’s synthesized 5 PM recap
This locally generated, non-OpenAI narration covers the same verified facts and cautions as the article.
The 60-second rundown
Microsoft fixes the record
HPC Pack 2019 administrators should verify KB5124659, build 6.3.8359, after Microsoft corrected the affected-product table for a 9.8-rated remote-code-execution flaw.
AWS Frankfurt path trouble
Direct Connect customers depending only on Equinix FR5 could still see packet loss while engineers inspected equipment after electrical isolation.
Threema’s double failure
DDoS attacks disrupted the messenger while an unrelated fault also kept its status page from updating—a reminder to keep an independent communications channel.
OLED wear remains real
A harsh 10,000-hour static-content test found image retention across every tested OLED, though newer panels were much brighter and more efficient.
Electric demonstrator flies
Heart Aerospace’s 106-foot-span X1 completed a 27-minute battery-only flight. It is a precursor, not a passenger service.
Reported—not confirmed
Bloomberg reportedly put Stripe’s planned OpenRouter purchase above $7 billion. Neither company had announced it by our cutoff.
1. Microsoft corrects a critical HPC Pack 2019 security record
Microsoft materially revised its August 2026 Security Updates CVRF document at 7:00 UTC, or 3:00 a.m. Eastern, on August 16. The important correction concerns CVE-2026-59124, a Microsoft HPC Pack remote-code-execution vulnerability.
Microsoft now lists HPC Pack 2019 Update 3 QFE, KB5124659, build 6.3.8359 as the fixed release. The flaw involves deserialization of untrusted data: an unauthenticated attacker could send a crafted payload to an affected network service and execute code. Microsoft gives it a CVSS 3.1 base score of 9.8 and says exploitation is more likely, while also saying it had not been publicly disclosed or exploited at the published checkpoint.
Scope matters
This is not a new Windows 10 or Windows 11 cumulative update. It is an actionable applicability correction for organizations running HPC Pack 2019. Administrators should confirm build 6.3.8359 or later, restrict unnecessary access to HPC management and service interfaces, and prioritize the corrected QFE.
For broader context, The IT Guys published a separate August 2026 Microsoft security-update inventory. Use that guide for the wider release; use Microsoft’s live advisory for the current HPC Pack record.
2. AWS Direct Connect paths at Equinix FR5 remain impaired
In updates on the AWS Health Dashboard and its Direct Connect Frankfurt RSS feed, AWS said electrical isolation at the Equinix FR5 colocation facility was complete and engineers had begun inspecting affected network equipment. It still did not have a full-resolution timeline at the latest checked update.
Customers whose Direct Connect connectivity depended only on FR5 could continue to experience packet loss. AWS said customers with redundant or multisite connectivity elsewhere were unaffected and advised affected customers to fail over to a VPN where practical. For Direct Connect Gateway and Transit Gateway designs, its suggested path was an AWS Site-to-Site VPN attached to the Transit Gateway.
Core Backbone’s facility incident report described a water leak, high temperatures, and an unsafe combination of water and live electrical equipment. That supports a physical-facility explanation, but Core Backbone restored its own affected service earlier; its recovery does not prove that every AWS device or circuit was ready.
Good
Multisite and redundant designs did what they were supposed to do: they isolated customers from a single facility’s trouble.
Bad
A premium private connection is still a single point of failure if every circuit, router, carrier path, or power dependency converges on the same building.
Practical move: test the VPN or alternate-region route before an outage, document who can activate it, and monitor application health—not merely whether the tunnel is “up.” This incident is attributed to facility infrastructure, not a cyberattack.
3. Threema’s DDoS outage also exposed a status-page weakness
BleepingComputer reported on August 16 that changing, large-scale DDoS attacks had disrupted secure messenger Threema and its colocation partner Nine. In Threema’s postmortem, the company said the principal outage lasted Tuesday from 19:30 to 23:30 CEST, followed by intermittent Wednesday-morning interruption before normal operation resumed at 12:23.
An unrelated technical problem prevented updates to Threema’s status page. Threema OnPrem customers were unaffected. The company says specialized upstream DDoS filtering is now active and that the status site will receive an incident history and RSS feed.
Availability is not confidentiality
The sources report no access to messages or user data. A DDoS attack overwhelms availability; it does not by itself establish that encryption failed or information was stolen. Threema also says it does not know whether it was the primary target or one of several.
Action: families, field teams, and small businesses should agree on a fallback—SMS, phone, email, or another independently hosted messenger—and store essential contacts offline. One app and that app’s status page do not make a continuity plan.
4. Modern OLEDs are brighter, but static-image wear has not vanished
Tom’s Hardware summarized a 10,000-hour OLED longevity comparison published August 16. The underlying RTINGS test compared one 2017 LG C7 with 19 OLED televisions from model years 2020 through 2023 under simulated static news-channel use. Every tested set developed image retention.
The result is more nuanced than “new OLED is no better.” Tested 2023 panels averaged 28% higher sustained brightness in a 10% window, more than twice the full-screen brightness, and roughly 27% better efficiency than the 2017 set. That gives manufacturers and owners more headroom to run a bright-looking image at less punishing settings.
Read the test honestly
The static-news workload is deliberately harsher than normal mixed viewing, and the model-year samples were uneven—only two 2023 sets were included. It demonstrates cumulative-wear risk; it does not predict when a specific family television will show permanent damage.
For buyers: OLED remains excellent for varied films, games, and television. For a 24/7 security monitor, dashboard, airport-style board, or one channel with permanent graphics, lower brightness, enabled pixel-care functions, rotating content, or another panel technology may be the safer fit.
5. The world’s largest electric aircraft demonstrator completes a real flight
Popular Science reported that Heart Aerospace’s X1 demonstrator completed a 27-minute battery-only flight with one pilot. The aircraft has a 106-foot wingspan, weighs more than 25,000 pounds, and reached 1,100 feet. Heart’s announcement calls it the world’s largest fully electric aircraft to fly.
X1 is a technology demonstrator for the proposed 30-seat hybrid-electric ES-30, which Heart hopes to place in service in 2031. The company’s longer-term concept combines battery propulsion for short segments with a combustion range extender for longer routes.
Good
A large battery-powered demonstrator left the ground and completed a controlled flight. That is measurable engineering progress.
Caution
No passengers were aboard. Certification, commercial reliability, battery degradation, route economics, and the 2031 schedule remain unproven. A promotional “electricity cost” excludes crew, airports, insurance, maintenance, battery replacement, and most of an airline’s real expense.
6. Stripe’s reported $7B-plus OpenRouter deal is still a report
TechCrunch reported at 4:57 p.m. Eastern that Bloomberg had described a finalized agreement for Stripe to acquire AI-model gateway OpenRouter for more than $7 billion. OpenRouter says its platform gives customers a single access layer to more than 400 AI models and claims 8 million users.
If confirmed, the deal would put a major payments company much closer to the routing, metering, and billing layer between businesses and AI models. It could make model choice and billing simpler, but it could also increase dependence on one commercial intermediary.
Do not skip the word “reported”
Neither Stripe nor OpenRouter had publicly announced the transaction by our cutoff. Stripe declined to comment on rumor or speculation. The purchase price, closing status, model count, and user count should therefore be treated as reported or company-supplied claims, not settled facts.
What to do tonight
- HPC Pack 2019: verify KB5124659 and build 6.3.8359 or later; restrict unnecessary service exposure.
- Cloud connectivity: test an independent VPN or alternate-region failover and verify the application, not just the tunnel.
- Communications: choose a fallback channel that does not depend on the same provider or status system.
- OLED screens: keep pixel-care protections enabled and avoid maximum-brightness static graphics for long periods.
- AI deal news: wait for company announcements or filings before treating the Stripe–OpenRouter report as completed.
- Compromised Microsoft 365 mailbox? Follow The IT Guys’ containment guide before fraud spreads.
Apple and Windows watch
No Apple security advisory or macOS system release dated August 16 was verified on Apple’s security-releases index by the 5 p.m. cutoff. Microsoft’s Windows Message Center likewise did not show a same-day Windows production cumulative or out-of-band update. The actionable Microsoft item tonight is the corrected HPC Pack applicability record—not a fresh Windows desktop patch.
Frequently asked questions
Do all Windows users need KB5124659?
No. It is for Microsoft HPC Pack 2019. Home Windows PCs should continue following normal Windows Update guidance, but they are not the target of this specific correction.
Was the AWS Frankfurt problem a cyberattack?
AWS described a facility-infrastructure issue. Independent reporting described water, high temperatures, and electrical-safety concerns. No checked source attributed the incident to a cyberattack.
Did the Threema DDoS attackers read messages?
The checked sources reported service disruption, not message access. DDoS attacks target availability. That does not prove a confidentiality breach, though organizations should still review the provider’s final postmortem.
Should I avoid OLED completely?
No. OLED can be an excellent choice for varied home entertainment. The warning is strongest for very bright, static content displayed for long periods. Match the panel technology and settings to the workload.
Can passengers book Heart Aerospace’s electric plane?
No. X1 is a one-pilot demonstrator. The proposed 30-seat ES-30 remains a future program subject to certification, testing, economics, and schedule risk.
Did Stripe definitely buy OpenRouter?
Not based on public confirmation at our cutoff. Bloomberg reported an agreement, relayed by TechCrunch, while the companies had not announced it. Treat it as a developing business story.
Sources and methodology
This edition uses same-day reporting and official advisories checked through 5:05 p.m. Eastern on August 16, 2026. Company claims are identified as claims; status pages describe operational checkpoints, not guarantees; and older incident facts are included only when an August 16 report materially advanced the story. Direct sources appear in each section. For yesterday’s context, read the August 15 technology recap.
Published by Jennifer Hudsen for The IT Guys. News and security guidance can change after publication; follow the linked vendor advisories for the latest status.