Fontes

A technical explainer is making the rounds on why editing text in existing PDFs is far harder than people expect. Unlike a normal document, a PDF does not store flowing text that reflows when changed; text is positioned as fixed drawing instructions, so altering one sentence can break spacing, fonts and page layout. The piece walks through why a seemingly simple edit often requires rebuilding parts of the file.

A runner and cyclist is asking fellow athletes for feedback on Coros GPS watches, saying their old Garmin only manages five hours of battery life and they want a modern, reasonably priced replacement. The question, aimed at people doing running, trail, cycling and gravel, invites comparisons between Coros and Garmin for endurance sport tracking.

A type designer has posted a third font demonstration in a series begun the previous day, showing new lettering work tagged with type design and illustration topics. The piece is being shared within the art community on Mastodon, where font design showcases and work-in-progress demos regularly circulate among designers and illustrators.

Microsoft has launched a new typeface called Michelangelus, created from the handwriting of Renaissance artist Michelangelo. The font draws on his letters and manuscripts, bringing his script into digital use. It is being discussed as an unusual blend of art history and modern typography, with reactions mixed between appreciation for the concept and skepticism about its practical appeal.

A remote vacancy is circulating for a social media designer with hands-on experience. The employer wants someone who can pair colours and fonts, select quality photography, and produce design work and creatives for social networks. The role is advertised under job and remote-work hashtags in Russian.

Typeface designers have created ShieldFont, a font built to resist unauthorized scraping by large language models. To the human eye it looks like a normal typeface, but behind the scenes it swaps out words so AI agents that copy text end up harvesting garbled or misleading content instead. The design is the latest example of creatives using technical workarounds to fight back against companies training AI models on their work without permission or payment.

A high-severity vulnerability, EUVD-2026-93749, was published for Google Chrome on Windows, scoring 8.8 out of 10 on the CVSS scale. The flaw is a use-after-free bug in Chrome's font handling, and versions before 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the browser sandbox. Google has issued a fix, and users are being urged to update.

A newly designed typeface appears ordinary to human readers but causes artificial intelligence systems to misread or fail to process text set in it. The font exploits weaknesses in how AI models recognize characters, raising questions about the robustness of machine vision and text recognition, and about potential adversarial uses against automated systems.

A critical vulnerability, EUVD-2026-89143, has been disclosed in Google Chrome with a CVSS score of 9.6. The flaw involves non-heap memory handling in the browser's Fonts component and could allow a remote attacker, working alongside social engineering, to potentially compromise systems. The fix is included in Chrome 154.0.8037.57, published 29 September 2026 and updated the following day. Security watchers are flagging the severity rating and urging users to update their browsers promptly.

A first public proof-of-concept is now available for CVE-2026-86950, a vulnerability in Apple's CoreGraphics. A malicious PDF with a crafted embedded font crashes unpatched iPhones and Macs, though no working exploit has been demonstrated. Apple patched the flaw on September 28 after targeted attacks, and CISA set an October 2 fix deadline for federal agencies under its Known Exploited Vulnerabilities catalog.

A newly logged vulnerability, EUVD-2026-89637, affects the Zella Theme for WordPress in versions before 2.6.3. The theme fails to perform capability or nonce checks on one of its font upload actions, which is available to unauthenticated users, potentially allowing attackers to upload files without an account. Site administrators running the theme are advised to update to version 2.6.3 or later.