May 31, 2026

IT News Digest: May 31, 2026: Nvidia’s Arm Laptops, ChatGPT Malware & Microsoft Backlash

This digest rounds up fresh developments across hardware, AI, security, and legal risk: major players teased new Arm laptop silicon, threat actors leveraged ChatGPT share links to deliver malware, Chrome pushed a session‑credential protection feature to GA, California sued 23andMe over a 2023 breach, a hands‑on with Google’s Gemini Spark revealed privacy limits, and Microsoft faced criticism for threatening a security researcher.

IT News Digest: May 31, 2026: Nvidia’s Arm Laptops, ChatGPT Malware & Microsoft Backlash cover

Links

7

A compact briefing on the top platform, security, and AI stories making headlines: industry teases and product rollouts, active abuse of sharing features, legal action over breached health data, and a renewed debate about the boundaries of security research.

Nvidia, Microsoft, and Arm tease an Arm‑based laptop chip

Multiple vendors are openly hinting that Nvidia will unveil its own Arm laptop processors at Computex. Microsoft, Nvidia’s GeForce channels, and Arm have each posted coordinated teasers ahead of the announcement, confirming the long‑rumored arrival of Nvidia’s Arm‑powered N1X laptop silicon.

ChatGPT share links abused to distribute malware

Security researchers have observed attackers abusing ChatGPT’s content‑sharing capability to present fake OpenAI outage pages. The counterfeit pages encourage users to download a malicious file presented as the ChatGPT desktop application, using the sharing feature as a hosting/delivery vector.

California sues 23andMe over 2023 breach exposing health data

California Attorney General Rob Bonta filed a lawsuit against 23andMe—now operating as Chrome Holding Co.—alleging the company failed to protect customers’ genetic and personal information following a 2023 breach. The action underscores regulatory scrutiny of how consumer genomics firms secure sensitive health data.

Google Chrome rolls out session cookie theft protection to all users

Google announced that Device Bound Session Credentials (DBSC) are now generally available and being deployed to all Chrome users. The feature is intended to reduce account takeover risk by protecting session cookies from theft, representing a platform‑level security update for browsers.

Hands‑on with Google’s Gemini Spark highlights real‑world limits

A hands‑on review of Google’s new AI agent, Gemini Spark, found it scanned a user’s emails, documents, and calendar to plan a birthday, yet still missed identifying the single most important person to the user. The piece illustrates how agent access to personal data can enable complex tasks while also revealing behavior and prioritization gaps.

Microsoft criticized for threatening a security researcher

Microsoft drew criticism after it threatened an independent security researcher with a criminal investigation, reigniting debate over who bears responsibility for securing software. The public dispute has reopened conversations about acceptable conduct and protection for researchers who disclose vulnerabilities.

These stories together underline three themes for technology teams: platform shifts from major vendors, continued creative misuse of sharing and agent features, and intensifying legal and policy pressures around data security and vulnerability research. Keep product teams and security stakeholders informed as these developments evolve.

Community feedback

What do you think?

Leave one reaction and join the discussion below.

0 reactions0 comments

Comments

0 comments

Stay in the loop

Get releases, product updates, and launch notes by email. One list for news and products.

Releases and updates only. No spam.