actors Archives

Winsage

September 7, 2026

Windows 11 wants your trust. Microsoft keeps testing it

Microsoft is facing significant security and reliability issues, particularly related to system startup, BitLocker recovery, and updating Secure Boot certificates. Users have expressed confusion over these complexities, especially regarding Microsoft Defender Antivirus errors. These problems stem from a tumultuous period before the launch of Windows 11, including changes to the TPM requirement and the extension of Windows 10's life. Despite increased security patches, underlying issues remain, leading to user skepticism about the reliability of Windows systems.

Tech Optimizer

September 3, 2026

Avast Antivirus Zero-Day PoC Lets Attackers Dump SAM Database and Gain SYSTEM Shell

A public proof-of-concept (PoC) repository has revealed a local privilege escalation zero-day vulnerability in GenDigital's Avast Antivirus, allowing attackers with local execution access to extract the Windows Security Account Manager (SAM) database and execute a shell with NT AUTHORITYSYSTEM privileges. The flaw is located in the Avast Sandbox component and could enable a complete local takeover of the system. The PoC is compatible with any version of Avast Antivirus and has been tested on fully patched versions of Avast and Windows 11 25H2. The repository does not provide a formal release, CVE identifier, or patch details. The vulnerability may also affect other GenDigital products like AVG and Norton. Security teams are advised to monitor for suspicious activities related to Avast services and restrict local administrator access. Organizations should inventory their deployed versions and apply vendor-provided updates as they become available.

AppWizard

September 1, 2026

How to make sure your Android phone is secure

Android devices have various features to enhance security and privacy. A 2025 Pew Research Center study found that nearly 75% of Americans have faced online scams, which have become more sophisticated, including vishing scams using AI-generated deepfakes. Android offers tools to mitigate these risks, such as AI-driven scam detection and theft protection. To safeguard devices, users should keep their software updated by checking Settings > About Phone for the current version and navigating to Settings > System > Software Updates for updates. App updates can be managed through the Google Play Store under Settings > Network preferences > Auto-update apps. Securing Google accounts with two-factor authentication is recommended, which can be set up via the Google Account management page. Automatic backups can be enabled in Settings > Google > Backup. The Find Hub app helps track lost devices and can be configured in Settings > Location and Settings > Security. Android includes scam detection tools that alert users to potential scams in calls and texts, which can be activated in the Phone app settings. Privacy settings can be managed by adjusting app permissions in Settings > Apps and using the Permission manager in Security & Privacy. Users can opt out of data sharing with advertisers by navigating to Settings > Google > Ads. Google Play Protect scans for harmful apps and should remain enabled for safety. Theft protection features, such as Theft Detection Lock and Remote Lock, can be activated in Settings > Google > Personal & device safety.

Winsage

August 30, 2026

5 Windows Security Settings You Should Never Skip Over

Microsoft has over 1.4 billion active devices each month, making it a target for security vulnerabilities. Users can enhance their security using built-in features without third-party software. Key security measures include: - Windows Hello: Enables secure login via PIN or biometric methods. Activation steps: Settings > Accounts > Sign-in options > Select method > Set up. - Windows Firewall: Protects against malicious internet traffic. Activation steps: Settings > Privacy & security > Windows Security > Firewall & network protection > Toggle on Microsoft Defender Firewall for Public, Domain, and Private networks. - Microsoft Defender: Pre-installed antivirus solution. Ensure it is operational by enabling Real-time protection and Controlled folder access. Activation steps: Settings > Privacy & security > Windows Security > Virus & threat protection > Manage settings. - Microsoft Account: Linking a Microsoft account provides benefits like cross-device syncing and advanced security features. Steps to link: Settings > Accounts > Your info > Sign in with a Microsoft account. - Device Encryption: Protects sensitive information using BitLocker. Activation steps: Settings > Privacy & security > Device encryption > Toggle on. - Find My Device: Allows users to locate their device if lost. Activation steps: Settings > Privacy & security > Location > Toggle on Location services > Find my device > Toggle on Find my device.

AppWizard

August 29, 2026

Star Citizen spinoff Squadron 42 has been delayed yet again, citing everyone going gaga for GTA 6, even if it isn’t coming to PC yet

Squadron 42, the single-player spinoff of Star Citizen, has been postponed to 2027 due to the anticipated release of GTA 6. The new release window is set for Q2 of 2027, following an initial plan for Q4 2026. A select group of original backers and content creators will have the opportunity to experience the game on October 9th and 10th. The game features a notable cast, including Gary Oldman, Gillian Anderson, Mark Hamill, Andy Serkis, Henry Cavill, and Eric Wareheim.

AppWizard

August 29, 2026

Rockstar considered having four protagonists in Grand Theft Auto 6, but the studio ‘worried about diluting the amount of player time’ with each character

Rockstar has reduced the number of playable characters in Grand Theft Auto 6 from three to two, prioritizing a more intimate narrative experience. The decision was influenced by concerns about diluting player connection with characters if more were introduced. The focus on two protagonists aims to foster a strong emotional bond and chemistry between them, enhancing player engagement. The game features a world three times larger than Red Dead Redemption 2 and a nuanced honor system, but the central partnership between the two characters is expected to define this installment.

AppWizard

August 26, 2026

Beware of fake Indeed interview apps used to install spyware

Scammers are exploiting the Indeed platform to target job seekers by using counterfeit Android "interview" applications. Users in the UK and Brazil reported being instructed by supposed employers to download fraudulent apps like MyInterview, which compromised their devices. These scammers post fake job listings and prompt applicants to install apps that mimic Indeed's login page and establish a VPN connection. The malicious apps, classified as Trojan.Droppers, can install additional untrusted software and gain control over devices, complicating uninstallation efforts. Indeed confirmed that their interview process does not require downloading any separate app and warned job seekers against such scams. Indicators of compromise include specific MD5 hashes and package names associated with the Trojan droppers and dropped malware payloads.

Tech Optimizer

August 23, 2026

Antivirus software tips from Ely Computer Centre director

Antivirus software does not guarantee complete safety for computers, especially if the software is no longer supported. As software ages, it becomes vulnerable to security risks, and once support ends, new vulnerabilities are not addressed. Microsoft ended support for Windows 10 in October 2025, meaning users will not receive security updates, increasing the risk of exploitation. Users can identify Windows 10 by checking if the Start button has four black squares. Upgrading to Windows 11 may not be possible for older computers due to hardware limitations, and replacing outdated devices is often recommended. Seeking professional advice is advisable if there is uncertainty about the operating system or upgrade options.

Winsage

August 22, 2026

Hackers abuse FTP server banners to deliver new Windows malware

Threat actors are exploiting FTP banners to conceal commands for deploying two undocumented remote access trojans (RATs), E4del and PINHOLE. This method was first observed by MalwareHunterTeam in July 2026, using shortcut files (.LNK) and FTP server banners as dead-drop resolvers to retrieve malicious commands. SOCRadar confirmed that this technique has been weaponized since early July 2026 and remains active, with new infrastructure identified as recently as August 2026. The attacks typically start with a ZIP archive leading to an LNK-based infection chain, likely initiated through phishing tactics. E4del is a Node.js-based RAT disguised within a digitally signed Electron application mimicking Discord, capable of executing commands, capturing screenshots, streaming desktops, and downloading additional payloads. It also includes a module for privilege escalation. PINHOLE retrieves its command and control configuration from Pinterest and SurveyMonkey, designed to leave a minimal footprint and employing shellcode fluctuation. It supports 14 commands, including file management and credential theft, but had only recorded 11 execution events at the time of analysis. SOCRadar notes that while using FTP banners is a novel approach, it is less stealthy than traditional web-based dead-drop resolvers. They provide indicators of compromise to help identify malicious infrastructure and infected machines.

Winsage

August 22, 2026

Tested: Windows 11 has fully removed the legacy tool abused by cybercriminals for malware and ransomware, called WMIC

Windows 11 will remove the Windows Management Instrumentation Command-line (WMIC) tool in the upcoming September 2026 Update, marking its complete elimination after being deprecated in earlier versions. Testing of early builds shows that WMIC is no longer accessible, with attempts to use it resulting in a "command not recognized" error. Previously, WMIC was available as an optional feature, but it will no longer be included or reactivatable in the new update. Microsoft stated that this removal aims to improve the security and reliability of Windows, as WMIC has been exploited by cybercriminals for attacks. The September 2026 Update will also introduce other enhancements, including the ability to disable Bing in Windows Search and improvements in app speed.