addresses Archives

Winsage

September 15, 2026

Microsoft account refuseniks have another way of installing Windows

A workaround has been discovered for Windows 11 Home Edition users that allows them to bypass the requirement for a Microsoft account during setup. Users can click the "Learn more" hyperlink during the account prompt in the Out-of-Box Experience (OOBE) to proceed without signing in. This method has been demonstrated by a user named "Bob Pony" and is currently functional, although it may not last long as Microsoft typically addresses such loopholes. The workaround is exclusive to the Home Edition, and users of Windows 11 Pro have different options available.

Winsage

September 15, 2026

Microsoft Releases Emergency Windows 11 Updates to Address Security Vulnerabilities

Microsoft has released out-of-band updates for Windows 11 versions 26H1, 25H2, and 24H2 to address security vulnerabilities and improve system performance. The KB5129194 patch for version 26H1 fixes a critical elevation-of-privilege vulnerability (CVE-2026-62721) related to the Windows User-Mode Power Service (UMPS). The KB5129195 update for versions 25H2 and 24H2 also addresses a similar UMPS vulnerability and resolves a connection issue with Remote Desktop Services. Additionally, the updates fix problems with multichannel audio features on certain USB Audio Class 1.0 devices. These updates include enhancements from the September 2026 Patch Tuesday release, such as Taskbar customization, a faster Windows Search experience, and new Start Menu options. Users with unmanaged PCs will receive these updates automatically but can also check for updates manually.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

AppWizard

September 14, 2026

LG denies secretly recording users as TV privacy concerns grow

LG asserts that its smart TVs do not secretly record or transmit user conversations, clarifying that listening for a wake word does not mean recording conversations. Audio without the wake word is discarded locally and not sent to LG servers. The company uses technology that listens for a specific wake word and processes audio only after recognition. LG's Automatic Content Recognition (ACR) technology, which enhances user experience, relies on audio fingerprinting and requires user consent to activate. Users can disable ACR in TV settings. This privacy debate follows a previous incident involving unsolicited promotional pop-ups from LG monitors, which led to intervention from Microsoft.

AppWizard

September 14, 2026

How to recover the Google Maps speedometer on Android Auto: the ultimate trick

The Google Maps speedometer has disappeared for many Android Auto users due to a cache conflict, resulting in the speed overlay vanishing from screens. This issue is linked to internal desynchronization between the mobile app and the car's infotainment system, causing crashes for users. The problem is not due to changes on Google’s servers but rather the accumulation of temporary data that prevents crucial elements from loading correctly. Reports indicate that this issue affects users across various Android versions, including Android 14. A temporary solution involves performing a clean reset of the Google Maps and Android Auto apps by clearing their cache and data. If the problem persists, users may need to check for updates or wait for a fix from Google. Additionally, maintaining updated location permissions and the car’s system is recommended. Waze is suggested as an alternative for speed accuracy during this issue.

Winsage

September 13, 2026

KTVB

Cookies and data, including IP addresses, are used to deliver and maintain Google services, monitor outages, protect against spam and fraud, and measure audience engagement. When users accept all cookies, additional uses include developing new services, placing and measuring advertisements, and displaying personalized content. If users decline all cookies, only non-personalized content and ads will be shown, influenced by current content and general location. Personalized content may include tailored video recommendations and customized homepages based on user activity. Further information on managing privacy settings is available at g.co/privacytools.

Tech Optimizer

September 13, 2026

Top 10 Best Endpoint Encryption Software in 2026

The landscape of encryption engines has stabilized, with Microsoft BitLocker and Apple FileVault being the primary solutions. As of 2026, the emphasis is on management rather than just acquiring encryption technology. Key management elements include audit proofing, key escrow and recovery, policy enforcement, and pre-boot options. Native encryption solutions lack features such as fleet-wide compliance proof, centralized key escrow, consistent policy enforcement, advanced pre-boot authentication, and removable-media encryption. Various management models are available for different environments, including: 1. Microsoft BitLocker with Intune: Free for Windows Pro/Enterprise, integrates with Entra ID for key management. 2. Sophos: Manages both BitLocker and FileVault from a single console. 3. ESET: Offers lightweight management and removable-media protection. 4. Trend Micro: Integrates encryption with DLP capabilities. 5. Check Point: Provides advanced pre-boot options and policy management. 6. Trellix: Comprehensive enterprise encryption suite with a complex management interface. 7. WinMagic: Focuses on cross-platform encryption and strong pre-boot options. 8. Broadcom (Symantec): Manages native engines within its broader security framework. 9. Dell: OEM-integrated encryption management for Dell hardware. 10. Kaspersky: Provides encryption management but is restricted in the U.S. Key considerations before deploying encryption include ensuring key escrow is in place, conducting recovery tests, and being mindful of removable media and server encryption. Common mistakes include using outdated freeware and not verifying key escrow. Organizations should request auditor reports for compliance verification and confirm claims of compatibility and pre-boot functionality. Native encryption engines are free, while management layers typically charge on a per-endpoint basis.

Winsage

September 13, 2026

Microsoft reveals why 32-bit Windows was limited to 4GB RAM, and it wasn’t a technical limit

32-bit Windows is commonly thought to be limited to 4GB of RAM due to its 32-bit address space, but this overlooks the role of Physical Address Extension (PAE), which allows access to more than 4GB of RAM on compatible processors. PAE enables 32-bit x86 processors to use 36-bit physical addresses. Windows allocates a 4GB virtual address space to each 32-bit application, with 2GB reserved for the application and 2GB for system use. Windows Server 2003 SP1 Enterprise can support up to 64GB of RAM, while the Datacenter edition can handle 128GB. Microsoft did not extend this capability to consumer editions due to the complexities and potential issues with hardware drivers, which often assume a 32-bit framework. Modifying drivers for PAE can be challenging, as incorrect assumptions about physical and virtual addresses can lead to memory corruption. To mitigate risks, Microsoft capped physical address space at 4GB in Windows XP SP2 and Windows Server 2003 SP1 Standard Edition. Server environments typically have more controlled hardware selections, allowing for the use of drivers that are tested for compatibility with addresses exceeding 4GB. Microsoft began discouraging the production of 32-bit systems in 2020 and ended 32-bit edition production with Windows 11.

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.

Winsage

September 12, 2026

Your Windows 11 PC Can Now Reinstall Windows From the Cloud

Microsoft introduced a feature called Cloud Rebuild with the release of Build 26220.9343 to the Beta channel on September 8, 2026. This tool allows users to download a fresh installation of Windows 11 from the internet, restoring the operating system and its drivers without needing removable media. The recovery process is conducted through the Windows Recovery Environment (WinRE), and users can access it by booting into WinRE or through Settings. For Cloud Rebuild to work, a healthy WinRE, internet access, a compatible networking driver, and local administrator credentials are required. The feature also enables the storage of Wi-Fi profiles in WinRE, allowing wireless-only setups to utilize cloud recovery. Cloud Rebuild is compatible with enterprise management tools like Intune and Windows Autopilot, but it is currently only available to Beta channel Insider participants for non-production evaluation.