NewApp Digest
search bot

attacks

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Winsage
September 9, 2026

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft addressed 974 vulnerabilities in its software suite during its recent Patch Tuesday, marking a record high. The breakdown includes 723 flaws in Windows, 111 in Office, 62 in SQL, and 22 in Developer Tools, with over 110 rated as critical. Two actively exploited vulnerabilities are CVE-2026-85880 and CVE-2026-81963, both allowing local privilege elevation. Other notable vulnerabilities include CVE-2026-55007 (8.1), CVE-2026-80097 (8.6), CVE-2026-69465 (8.8), and several with CVSS scores of 9.6 and above. Microsoft has patched a total of 2,760 security flaws this year, reflecting a trend of increasing vulnerability discoveries. Despite the extensive patching, no significant spike in active exploits has been observed.
Critical Windows BitLocker Flaw Sparks Urgent Patch
Winsage
September 9, 2026

Critical Windows BitLocker Flaw Sparks Urgent Patch

On September 8, 2026, Microsoft disclosed a security vulnerability identified as CVE-2026-69449, related to a heap-based buffer overflow in the Windows BitLocker component, allowing authorized attackers to execute code on compromised machines. The vulnerability is classified as CWE-122, and is assessed as “Exploitation Less Likely.” It affects Windows 10, Windows 11, and Windows Server versions from 2012 to 2025. The fixes are included in cumulative updates KB5124008, KB5124012, KB5122878, and KB5122871. No public disclosure or observed exploitation occurred before the patch's release. The flaw allows for remote code execution through in-network attacks, primarily posing a risk to insiders. Affected systems include various versions of Windows 10, Windows 11, and Windows Server, applicable to both x64 and ARM64 architectures. Administrators should verify installed build numbers to ensure updates have been applied. The advisory does not specify which BitLocker code path is affected or the nature of the input that reaches the vulnerable buffer.
silver Android smartphone
Tech Optimizer
September 8, 2026

Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices

Microsoft has acknowledged a software bug causing persistent Windows Security pop-ups that incorrectly indicate antivirus protection is disabled. These notifications began appearing after the latest Microsoft Defender Antivirus updates, but the antivirus is functioning correctly. The issue affects various versions of Windows and Windows Server with the latest Defender updates. Microsoft has committed to resolving the issue in a future update, though no timeline has been provided. Users are advised to verify the status of their antivirus through the Windows Security app and disregard the notifications until a fix is released.
All Confirmed Enemies in Minecraft Dungeons 2
AppWizard
September 8, 2026

All Confirmed Enemies in Minecraft Dungeons 2

Minecraft Dungeons 2 introduces a new dimension called The Sift, featuring a variety of new locations, enemies, and weapons. Players will encounter both familiar and unique enemies, including: - Baby Sifter: A small hostile creature native to The Sift. - Baby Zombie: A fast zombie variant that charges at heroes. - Bearded Sifter: A ranged creature that fires tracking projectiles. - Cave Spider: A fast spider that attacks with poisonous bites. - Chicken Jockey: A baby zombie riding a chicken. - Copper Cube: Small enemies that spawn from the Copper Monstrosity boss. - Creeper: An explosive enemy that detonates near players. - Enchanter: A magical Illager that buffs allies. - Excavator: An Illager that attacks with a pickaxe. - Flame Construct: A fiery enemy that can explode. - Geomancer: An Illager that creates stone pillars and explosive formations. - Husk: A hostile undead mob. - Nester: A creature that rapidly attacks players. - Pillager: A ranged Illager that uses a crossbow. - Ravager: A large creature that charges through enemies. - Royal Guard: An armored Illager with a mace and shield. - Sculk Cube: A small creature that rolls and explodes. - Sculk Slasher: A monster with long claws that charges at heroes. - Skeleton: An undead enemy that uses bows. - Slime: An enemy that splits into smaller versions. - Spider: An enemy that slows players with webs. - Spider Jockey: A skeleton riding a spider. - Sprout: A flying tentacled creature from The Sift. - Tall Sifter: A ranged enemy that spits explosive projectiles. - Vindicator: A fast Illager with an axe. - Zombie: A slow undead enemy with various tiers. Mini-bosses include: - Warden: A powerful mini-boss that uses melee attacks and sonic booms. - Sculk Dancer: A flying mini-boss that attacks with sweeping movements. Bosses include: - Copper Monstrosity: A golem that uses electricity and summons minions. - Redstone Monstrosity: A massive boss that fires explosive projectiles. - Sculk Monstrosity: A boss that charges heroes and summons minions. - Sprout Boss: A giant variant of the Sprout. - Twisted Warden: A colossal Warden with devastating attacks. Enemies can appear in various biomes, including mountains, Taiga, Deep Dark, and The Sift. The strongest enemy is the Twisted Warden due to its high damage-dealing capabilities.
silver Android smartphone
Tech Optimizer
September 7, 2026

Top 10 Best Endpoint Detection & Response (EDR) Solutions in 2026

Endpoint detection and response (EDR) continuously records process, file, registry, and network activity on endpoints, applying behavioral analytics to identify attacker techniques while providing tools for investigation and containment. Several EDR platforms have emerged, each catering to different organizational needs: 1. CrowdStrike: Best overall for its rich telemetry and elite threat intelligence. 2. SentinelOne: Best for autonomous response, featuring strong containment and rollback capabilities. 3. Microsoft Defender for Endpoint: Best value for organizations already using Microsoft 365 E5. 4. Palo Alto Cortex XDR: Best for native data fusion across endpoint, network, and cloud telemetry. 5. Sophos: Best for generalist IT teams due to its user-friendly interface. 6. Trend Micro: Best for server and workload coverage, focusing on cloud and hybrid environments. 7. Bitdefender: Best mid-market value with strong detection capabilities at an accessible price. 8. Trellix: Best for organizations already using Trellix products, offering integrated solutions. 9. Huntress Managed EDR: Best for managed endpoint security, ideal for teams lacking full staffing. 10. Cisco Secure Endpoint: Best for Cisco environments, integrating well with Cisco security solutions. Key differentiators among these platforms include the analyst burden, alert management efficiency, and the impact of retention policies on investigation quality. The evaluation of EDR solutions should consider detection depth, response capabilities, operational costs, and the specific needs of the organization.
Here’s what we know about Blink, Russia’s Gen Z location-sharing app that publicly attacks VK’s Max messenger but sends user data to the tech giant
AppWizard
September 7, 2026

Here’s what we know about Blink, Russia’s Gen Z location-sharing app that publicly attacks VK’s Max messenger but sends user data to the tech giant

Recent investigations have revealed that the Russian messaging application Blink sends user data directly to VK servers, despite publicly opposing VK. The app continuously tracks users' movements and transmits location data to MyTracker, an analytics system owned by VK, every few seconds. Additionally, Blink's main feature, Blink Maps, is hosted on VK's servers. Eight senior Blink employees and a former CEO have connections to VK, either having transitioned from VK to Blink or still maintaining roles at VK.
"Iran unveils second homegrown antivirus to counter malware and cyberattacks"
Tech Optimizer
September 6, 2026

“Iran unveils second homegrown antivirus to counter malware and cyberattacks”

Iran has introduced its second domestically developed antivirus software, Ayyza, which utilizes artificial intelligence and machine learning to detect known and unknown cyber threats. The antivirus is designed to protect against malware, viruses, Trojans, ransomware, and advanced persistent threats (APTs). Ayyza's detection engine is developed in-house and operates at the Windows kernel level to enhance detection accuracy and speed while minimizing hardware resource consumption. It can receive updates offline or via Iran’s National Information Network. Ayyza's machine-learning capabilities allow it to identify emerging threats, including previously unknown malware and zero-day vulnerabilities. The company has also created complementary security tools, such as privileged access management (PAM) systems and data leakage prevention tools, to enhance overall cybersecurity. The company's products are currently used in various Iranian infrastructures, including banking, financial, and governmental systems.
Windows 11's next security feature may cost you gaming performance
Winsage
September 5, 2026

Windows 11’s next security feature may cost you gaming performance

Memory Integrity enhances Windows 11 security by allowing only verified kernel-mode code to load, blocking unsigned rootkits and improving defenses against driver-based kernel attacks. It requires specific hardware for optimal functionality. The combination of Hypervisor-Protected Code Integrity (HVCI) and Virtualization-Based Security (VBS) may result in a performance decrease in gaming, with reported slowdowns of up to 15 percent. Microsoft acknowledged in 2022 that these features might impact gaming performance and advised gamers to consider temporarily disabling them for better performance, especially on older hardware. Tom’s Hardware reiterated this recommendation to balance security and user experience.
silver Android smartphone
Tech Optimizer
September 4, 2026

Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices

Microsoft has acknowledged a software bug in its Windows operating system that causes misleading pop-up notifications, indicating that antivirus protection is disabled. These alerts began appearing after the latest Microsoft Defender Antivirus updates, despite the antivirus functioning correctly. The notifications can occur at startup and intermittently, and cannot be silenced through standard notification controls. The issue affects various versions of Windows and Windows Server with the latest Defender updates. Microsoft is working on a resolution, but no timeline has been provided. Users are advised to verify their antivirus status through the Windows Security app and can ignore the notifications if real-time protection is confirmed as active.
Search