Virgin Media O2 will begin switching off its 2G network in summer 2029, joining BT/EE and Vodafone in a government-coordinated UK phase-out. The move affects not only legacy phones but also smart meters, telecare alarms and other IoT devices that still rely on the 32-year-old technology.

The technology carries less than 0.5 percent of all data traffic on VMO2's mobile network and is already closed for international roaming.
Many smart meters, telecare alarms, medical devices, payment terminals, security systems, enterprise equipment and other IoT hardware still depend on 2G as a low-power, cost-effective conduit for small data volumes.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
CISA added AhsayCBS flaws CVE-2026-105134 and CVE-2026-105133 to its Known Exploited Vulnerabilities catalog on October 14, with an October 17 deadline for federal agencies. Attackers are chaining them to plant webshells and cryptominers, and Ahsay says its first patches did not fully fix them.
Apple has expanded its App Store rules to require developers to proactively prevent and remove AI-generated deepfakes and nonconsensual intimate imagery. The changes also target hidden nudify features and extend existing bans to alternative app distribution.
BeyondTrust Remote Support through 26.2.3 has a critical origin-validation flaw (CVE-2026-102764, CVSS 4.0 9.3) that attackers exploited as a zero-day on Aug. 29. CISA added it to KEV on Oct. 16 with an Oct. 19 deadline; self-hosted customers need the BT26-05-RS patch.
bbs-go through 4.4.6 has a Google One Tap login flaw (CVE-2026-111639) that skips ID-token audience checks, letting attackers replay tokens from any OAuth client to take over Google-linked accounts. VulnCheck rates it 8.1 (CVSS 3.1) and 8.6 (CVSS 4.0).
CISA added Fortinet CLI path traversal flaw CVE-2025-61624 to its Known Exploited Vulnerabilities catalog with an Oct. 19 deadline. It lets an admin with read-write rights write or delete files on FortiOS, FortiProxy, FortiPAM and FortiSwitchManager; fixed releases cover current branches.