access Archives

Winsage

May 13, 2026

Disgruntled researcher releases two more Microsoft zero-days

An anonymous researcher known as Nightmare-Eclipse has revealed two new vulnerabilities affecting Windows systems, named YellowKey and GreenPlasma, shortly after Microsoft's latest Patch Tuesday update. YellowKey is a "BitLocker bypass" that allows attackers with physical access to gain unrestricted shell access to protected machines. Experts have expressed concerns about YellowKey's potential to transform laptop theft into a serious breach notification scenario, and suggested mitigations such as implementing a BitLocker PIN and a BIOS password lock. Nightmare-Eclipse has also hinted that YellowKey could function as a backdoor allegedly introduced by Microsoft, although this claim remains unsubstantiated. GreenPlasma is a privilege escalation flaw for which partial exploit code has been released, but it currently triggers a User Account Control (UAC) consent prompt, requiring attackers to invest time in weaponizing it. There is no known mitigation for GreenPlasma, making it crucial for organizations to patch their systems promptly once Microsoft addresses the issue. Nightmare-Eclipse has previously disclosed five zero-day vulnerabilities this year, including BlueHammer, and has characterized their actions as a response to a perceived violation of trust. The researcher has indicated the existence of a "dead man's switch," suggesting that more disclosures could follow if their demands are not met.

Tech Optimizer

May 13, 2026

AI-Powered Endpoint Detection and Response: Why Modern Cybersecurity Depends on EDR

Every device connected to a corporate network, including laptops, desktops, servers, and mobile phones, can be a potential gateway for cyberattacks. AI-powered Endpoint Detection and Response (EDR) solutions are essential in modern cybersecurity strategies, utilizing behavioral analysis, real-time monitoring, and machine learning to detect, investigate, and respond to advanced threats. Traditional antivirus software, which relies on known malicious signatures, is becoming ineffective against modern attackers who use fileless attacks and custom-built malware. EDR continuously monitors endpoint activity, capturing behavioral data to identify anomalies consistent with attacks. It provides forensic capabilities to help security teams understand how breaches occur. EDR is a critical component of a multi-layered security architecture, complementing other security measures like firewalls and patch management. When choosing an EDR solution, organizations should consider real-time detection, automated response capabilities, integration with existing security tools, and ease of investigation.

AppWizard

May 13, 2026

Facebook Messenger Not Working? Troubleshoot Messages, Calls, and Notifications

To restore notifications on your smartphone, first check if 'Do Not Disturb' or 'Focus' modes are activated and disable them if they are. Next, go to your device settings, locate the Messenger app, and ensure that 'Allow Notifications' is enabled. Then, within the Messenger app, access the 'Notifications and Sounds' menu to customize specific chat alerts.

TrendTechie

May 13, 2026

На торренты слили Subnautica 2, но это старый билд

Some players have experienced outdated versions of Subnautica 2 ahead of its anticipated release on May 14. A leak has occurred, distributing older builds of the game online, leading to various theories about its source. Unknown Worlds Entertainment has confirmed the leak, stating that the circulating builds are incomplete and do not represent the final game. They warned that these unofficial builds may contain bugs and cannot be verified for safety or stability. The official release will differ significantly from the leaked versions and will launch in an "early access" format, with plans for ongoing updates and new features.

Tech Optimizer

May 13, 2026

Databricks Syncs Postgres to Lakehouse Natively

Databricks has introduced Native Lakehouse Sync, currently in public preview, which enables direct replication of data from Lakebase Postgres into Unity Catalog managed tables, simplifying data transfer without traditional pipeline complexities. This feature operates natively within Lakebase, utilizing its Write-Ahead-Log (WAL) and requiring minimal setup time. It does not negatively impact Postgres performance or incur additional costs, and schema changes are automatically propagated. Native Lakehouse Sync supports agent-first development by scaling down when idle and integrating monitoring functions. Data transferred to Unity Catalog is immediately accessible for AI-native analytics and benefits from unified governance features. Every data operation is captured as SCD Type 2 history by default, facilitating compliance and audit processes. The setup of Lakebase and activation of sync is quick, allowing existing and future tables to be available in Unity Catalog within a minute.

AppWizard

May 13, 2026

This city-smashing monster sim is the first game I’ve ever played where my reward for beating a level is getting a nuke dropped on my head

You Are the Monster allows players to choose a monstrous avatar and wreak havoc in a city environment. The game features intuitive controls, enabling players to easily destroy objects by walking into them. Civilians in the game react with fear and confusion as they attempt to escape the chaos. The game launched in early access on June 18 and has been refined over six months based on community feedback. One notable suggestion from players is to introduce larger monsters for an enhanced experience.

Winsage

May 13, 2026

Windows BitLocker zero-day gives access to protected drives, PoC released

A cybersecurity researcher known as Chaotic Eclipse has released proof-of-concept exploits for two unpatched vulnerabilities in Microsoft Windows: YellowKey, a BitLocker bypass, and GreenPlasma, a privilege-escalation flaw. The YellowKey vulnerability affects Windows 11 and Windows Server 2022/2025, allowing unauthorized access to BitLocker-protected volumes by exploiting the Windows Recovery Environment. The exploit can be executed using specially crafted 'FsTx' files on a USB drive or directly on the EFI partition. Independent researcher Kevin Beaumont has validated the exploit, which can bypass BitLocker protections even in a Trusted Platform Module (TPM) environment. The GreenPlasma vulnerability allows unprivileged users to create arbitrary memory-section objects, potentially leading to privilege escalation. Chaotic Eclipse has expressed dissatisfaction with Microsoft's handling of bug reports, prompting the public disclosure of these vulnerabilities. Microsoft has stated its commitment to investigating security issues and updating affected devices.

AppWizard

May 13, 2026

Minecraft 26.2 Snapshot 7 patch notes: Friends List, Music Disc, and more

Mojang has released the seventh snapshot for Minecraft Java Edition 26.2, introducing several new features: - A Friends List has been added, accessible via a new button and keybind ("O"), with tabs for managing friends and pending requests. Player presence is indicated, and notifications for friend request activities are included. Privacy settings can be managed in Online Options, though there are known desynchronization issues. - Players can now convert singleplayer worlds to online multiplayer through a new Multiplayer Options screen, offering two connection methods: Invite to World and Request to Join World. The previous Open to LAN screen has been replaced. - A new music disc titled Bounce by fingerspit is available in Mineshaft Chest Minecarts in Sulfur Cave biomes, along with five new background music tracks and activated biome music for Sulfur Caves. - Changes to Potent Sulfur include randomized geyser eruption times and the ability to erupt when a Lava block is placed underneath. Noxious Gas can spread through non-collidable blocks, and erupting Potent Sulfur can propel entities. - Bug fixes include resolving game crashes during legacy world upgrades, addressing issues with Wardens and Sulfur Spikes, enabling bucketed Sulfur Cubes to despawn, and correcting the TNT explosion advancement trigger.

AppWizard

May 13, 2026

Minecraft Java finally gets a Friends List and Peer-to-Peer multiplayer

Minecraft Java has released Snapshot 26.2, specifically Snapshot 7, which introduces a Friends List feature to enhance the multiplayer experience. This feature allows players to connect with others more easily and includes functionalities such as sending and receiving friend requests, viewing friend statuses, and customizing privacy options. The Friends List can be accessed from the Title Screen and Pause Menu, with a default keybind set to "O". Additionally, Mojang has implemented Peer-to-Peer networking, enabling players to open singleplayer worlds for online multiplayer. The update also includes new musical additions and adjustments to Potent Sulfur.

AppWizard

May 13, 2026

Minecraft Java Edition will finally let you party up with your pals, without the need for mods

The Java Edition of Minecraft is introducing new social features, including a friends list system and peer-to-peer connectivity, directly into the game. The Minecraft 26.2 Snapshot 7 update allows players to open private worlds to friends through a 'Multiplayer Options' menu, enabling invitations and access requests. The friends list can be accessed from the title screen and pause menu. These features are exclusive to the Java Edition, and while they may reduce the need for the Essential Mod, some players may continue to use it due to the early stages of the new connectivity features. Access to these updates is currently limited to the Minecraft Snapshot preview system.