attributes Archives

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

AppWizard

July 23, 2026

Building a True Per-App Android Device Spoofer

Device spoofing in Android applications allows developers to manipulate device information, primarily through altering android.os.Build attributes. Existing spoofer applications often fail to modify native system API calls that retrieve genuine device information. Tweaks is a per-app spoofer integrated into AOSP and LineageOS, which changes device properties by modifying memory-mapped files under /dev/properties. It uses a private mount namespace to bind-mount modified property-context files, ensuring only the targeted application receives spoofed values while the rest of the system remains unaffected. The Tweaks app, which is platform-signed, communicates with the TweaksManagerService to write configurations and manage property overrides. The core functionality is handled by propgen, which generates property context files with spoofed values by identifying and patching properties in place. The TweaksManagerService ensures secure interactions and content-addresses generated property areas to allow sharing among apps with identical overrides. The spawn path in ProcessList.startProcess determines whether to apply spoofing based on conditions evaluated by the TweaksLocalService. Security is maintained through SELinux policies, which restrict access to spoofable properties. However, certain elements, such as /proc/self/mountinfo and /system/build.prop, still reveal authentic device information despite the spoofing capabilities of Tweaks. The source code for Tweaks and related patches is available for public access.

AppWizard

July 20, 2026

Steam Week in Review: Take cover, because it looks like more than half of Steam games will have an AI-disclosure by 2027-2028

In June 2017, Valve introduced Steam Direct, changing the platform's game release process from manual curation to a more open system. Before this, game releases were limited, with only one month—December 2016—exceeding 500 releases. By February 2025, monthly game launches on Steam surpassed 1,500. A study by Sulka Haro analyzed around 53,600 Steam titles released between mid-2023 and mid-2026, noting that in 2024, 10.9% of new games included an AI disclosure, rising to 19.9% in 2025, and reaching 30.8% by July 2026. Non-AI flagged launches increased from about 1,030 to around 1,320 per month, while AI-flagged launches grew from approximately 13 to about 530 monthly. Projections suggest that by 2027 or 2028, nearly half of all games on Steam will have an AI flag. Despite the increase in AI-flagged titles, many struggle financially and receive mediocre reviews. The gaming industry is seeing a rise in generative AI technologies, particularly in management simulation genres. Recent notable releases on Steam include Granblue Fantasy: Relink and Palworld, with anticipation for Star Wars Zero Company on August 27.

AppWizard

July 17, 2026

Minecraft 26.3 Snapshot 4

The window management, input, and platform integration library has been transitioned from GLFW to SDL3. New features include custom furnace fuels and enhancements to signs, world generation, and loot tables. Players in spectator mode can interact with portals for teleportation. Exclusive fullscreen mode on Windows may cause crashes with multiple monitors, and it crashes on Wayland. Minor tweaks have been made to blocks, items, and entities, including armadillos no longer rolling up in liquids. The Raw Input mouse setting has been removed, and mouse input will now use relative mode. Key bindings will use physical keys, and borderless fullscreen is now the default mode. Exclusive fullscreen mode is no longer supported on macOS, and the minimum window size has been set to 320 by 240 pixels. Linux systems will prefer Wayland if available. The debug overlay now supports a separate GUI scale and displays the player's speed and refresh rate. The Data Pack version is 111.0, and the Resource Pack version is 92.0. New components for cooking and brewing fuels have been added, and various bugs have been fixed to improve gameplay stability.

Winsage

July 17, 2026

July’s Patch Tuesday sees an end-of-support collision amidst a massive, record-setting patch wave

The Print Spooler flag monitors shared printers and reflects the queue status of print jobs. The win32k flags manage aspects of 32-bit application printing, including font rendering and window management, while GDI+ flags handle metafiles. Printer sharing from a print server allows clients to print in various sizes and formats, cancel jobs, and verify queue status. Printing from 32-bit applications accommodates diverse document types and ensures consistency across different outputs. Document exports maintain font and layout integrity, and EMF+ files can apply effects to large images. Storage and file systems focus on maintaining integrity through NTFS high-risk flags and File History, with a Windows Server 2025 bundle addressing boot processes and BitLocker. NTFS extended attributes are utilized for backup workflows, and unexpected shutdown simulations ensure volume recovery. File History allows for file backups with customizable options. On Server 2025, Secure Boot/BitLocker combinations can be initiated. The HID input flags manage various input devices, while the WinSock bundle includes drivers for Bluetooth and multicast. The NetAdapterCx driver requires extensive enable-disable cycles under Driver Verifier.

AppWizard

July 14, 2026

Survival is Optional, Death is Inevitable: Celestial Return Launches Today on PC

Metaphor Games and Shoreline Games have released a dice-based narrative RPG titled Celestial Return, now available on PC via Steam. The game features players as Detective Howard in the neon-lit Netherveil City, with plans to expand to PlayStation, Xbox, and Nintendo consoles by Q1 2027, including support for three new languages. Players use dice as a currency to navigate the game's narrative, which is influenced by their choices and character attributes. The game includes features like a gameplay loop focused on dice management, a branching narrative, and a unique visual style combining manga and American comics.

TrendTechie

July 10, 2026

Выпуск qBittorrent 5.2.3

qBittorrent 5.2.3 was released on July 7, 2026. It is an open-source torrent client developed using the Qt toolkit, available for Linux, Windows, and macOS under the GPLv2+ license. The project began with version 4.0 in November 2017, followed by versions 5.0 in September 2024, 5.1 in April 2025, and 5.2 in May 2026. Notable features include an integrated search engine, RSS feed subscriptions, remote management, sequential downloading, and advanced settings for torrents. The 5.2.3 update focuses on bug fixes and improvements, including corrections to plugin counting, file renaming issues in Windows, RSS feed intervals, HTML link parsing, peer address input analysis, web seed encoding, torrent tracker conversion, database transaction failures, transfer filter clearing, MIME header encoding, and updated libraries for performance enhancement.

AppWizard

July 9, 2026

PC gamers have days left to pick up 2016 award winner for free

GOG is currently offering a free giveaway of the 2016 point-and-click adventure game Silence. In the game, players control 16-year-old Noah, who searches for his lost sister Renie in a war-torn realm between life and death. The game takes approximately 6.5 hours to complete, with completionists potentially spending up to 12 hours. Silence received mixed reviews but won awards for Best Sound, Best Story, and Best Graphics at the Deutscher Entwicklerpreis. The giveaway lasts for about 40 hours, and players can claim the game by creating a free GOG account. The game is DRM-free, allowing offline play.

AppWizard

July 7, 2026

Minecraft 26.3 Snapshot 3

In version 26.3, two new features have been introduced: the Cushion and the Straw Bed. The Cushion allows players to sit around a campfire and is available in 16 colors, crafted from three wool slabs of the same color. It can be placed on any flat surface, aligns horizontally to the grid, and overlaps with most objects. The Straw Bed enables players to sleep without setting a spawn point, can be used only once, and is destroyed after a single night's sleep. It is crafted from three hay bales, yielding four beds, and a new statistic tracks how many times players have slept in a Straw Bed. Additionally, the Data Pack version is now 110.0, and the Resource Pack version is 91.0. New commands for post effects have been added, and various gameplay mechanics have been updated, including changes to bed rules and loot tables. New block textures and sound events for the Straw Bed and Cushion have also been introduced, along with numerous bug fixes.

Winsage

July 6, 2026

Microsoft just broke custom folder icons in Windows, and the reason is a bug from 2003

Microsoft has updated Windows to stop trusting untrusted desktop.ini files, a change aimed at addressing a long-standing security vulnerability that has existed since 2003. This decision affects the display of custom folder icons, as Windows will now ignore customization metadata from potentially unsafe sources. Users can still use custom folder icons if the desktop.ini file and icon resources come from trusted locations. A workaround allows users to manually create a desktop.ini file with the desired icon while following new security protocols.