authentication Archives

Winsage

September 28, 2026

Windows 11 preview update causes black screen after sign-in; Microsoft publishes workaround

On September 24, Microsoft reported an issue affecting devices that installed the August 27 preview update for Windows 11, causing a black screen after sign-in and preventing the desktop from loading correctly. This issue primarily impacts Azure Virtual Desktop (AVD) hosts using FSLogix with existing user profiles. The affected OS versions are Windows 11 versions 26H1, 25H2, and 24H2, and the causal update is KB5120998. Microsoft has issued interim workarounds, including a manual desktop launch and a Known Issue Rollback (KIR), which will be automatically delivered to non-enterprise devices. Affected enterprise-managed devices require manual deployment of the KIR policy. The black screen issue is part of a series of update-related problems for Windows 11 in 2026, while Windows 10 has experienced fewer issues during the same timeframe.

Tech Optimizer

September 28, 2026

The Fault Line Spreads: Azure’s September CVE Cluster Now Covers PostgreSQL and Billing

Two newly identified Critical CVEs have expanded Microsoft's September identity infrastructure vulnerabilities to over ten verified weaknesses across more than ten distinct services. The Azure Database for PostgreSQL is vulnerable to CVE-2026-85878, an Improper Authorization flaw (CWE-285) with a CVSS score of 9.9. Azure Billing is impacted by CVE-2026-62874, which presents an Insufficient Data Authenticity Verification issue (CWE-345) with a CVSS score of 10.0. Both vulnerabilities were disclosed on September 18 and validated by Tenable and MITRE. CVE-2026-85878 allows an authorized attacker to elevate privileges over the network with minimal complexity, while CVE-2026-62874 requires no authentication, enabling unauthenticated attackers to jeopardize financial integrity. The vulnerability cluster first emerged during the Patch Tuesday cycles on September 3 and September 8, with initial reports highlighting critical flaws in core services. Other September disclosures include CVE-2026-83711 (Azure AD B2C, CVSS 10.0), CVE-2026-70352 (Azure AI Language, CVSS 10.0), CVE-2026-83941 (Entra ID, CVSS 9.9), CVE-2026-62916 (Entra ID, CVSS 9.1), CVE-2026-69857 (Azure Cosmos DB, CVSS 8.5), and CVE-2026-69854 (Spring Cloud Azure, CVSS 9.0). Activity heightened between September 17 and 18 with the introduction of CVE-2026-77903 (Microsoft Dataverse, CVSS 9.0) and CVE-2026-69843 (Microsoft Fabric, CVSS 10.0). The attack surface has broadened from authentication concerns to encompass trust in AI endpoints, data storage locations, and billing verification processes. Seven out of the ten vulnerabilities are unauthenticated, and all issues were addressed through server-side fixes by Microsoft. The extensive range of affected services suggests these vulnerabilities indicate a shared architectural dependency on authentication logic.

AppWizard

September 26, 2026

20 Players Simulate Maze Runner In Minecraft Bedrock

YouTube has introduced a streamlined user authentication process that allows for a more passive sign-in method, enhancing user experience by reducing barriers to access. This change is expected to increase engagement with content, benefiting both users and businesses that rely on the platform for marketing, as it can lead to higher viewership and interaction with branded content.

AppWizard

September 26, 2026

[Minecraft] Su Has a Talent For Getting Kidnapped

YouTube has introduced a passive sign-in feature that allows users to browse the platform without full authentication, enhancing user experience by simplifying access to content. This update is expected to increase viewer engagement and retention for content creators, potentially leading to greater monetization opportunities and audience growth. The new interface prompts users to log in only when necessary, aligning with current trends in user experience design.

Winsage

September 25, 2026

Sorry Microsoft. Windows 10 is more stable than Windows 11, and your recent updates have made it obvious

Windows 11's September update, released on the 8th, has caused various issues, including problems with Remote Desktop, USB audio, and Linux/WSL applications. Failures in File History, crashes of Explorer.exe, and instability with AMD GPUs were also reported. An emergency update was issued on September 14 but did not resolve all issues. Over nine months, Windows 11 updates have resulted in numerous bugs, while Windows 10 has experienced significantly fewer issues. Specific problems with Windows 11 included black screens and authentication issues in January, Microsoft account sign-in issues in March, BitLocker recovery problems in April and May, boot failures in June, and compatibility problems in July. August saw game crashes linked to third-party drivers, and September was marked by extensive issues requiring an emergency update. Windows 10 continues to receive updates and has a commitment to Extended Security Updates until October 12, 2027. The stability of Windows 10 is attributed to fewer significant changes compared to the ongoing enhancements in Windows 11.

AppWizard

September 24, 2026

HSBC decides Samsung Secure Folder and Android’s Private Space are no place for a banking app

HSBC has restricted its Android app from functioning within Samsung's Secure Folder and Android's Private Space, causing many customers to lose access to online banking services. The bank described this as a "proportionate security control" to mitigate risks, stating that customers must use the app outside these environments. Feedback from users has been largely negative, with complaints about abrupt access loss and inadequate communication regarding the changes. Customers are unable to utilize web banking due to the app's requirement for multifactor authentication, and some have raised concerns about HSBC's compliance with the Financial Conduct Authority's Consumer Duty. HSBC has advised customers to access the app outside of protected spaces and mentioned the option of using a Physical Secure Key for desktop banking.

Winsage

September 24, 2026

Microsoft: September Windows updates break Always On VPN connections

Microsoft has informed IT administrators about potential connection challenges with the Always On VPN after the September 2026 Windows 11 security updates. Users may face difficulties connecting to their organization's network, particularly if the VPN is set to automatically attempt an alternative connection method upon failure. Symptoms include connections remaining in a 'Connecting' state or displaying the error message: 'The specified port is already in use.' Affected versions include Windows 11, version 26H1 (KB5124012), version 25H2 (KB5124008), and version 24H2 (KB5124008). A temporary workaround involves adjusting the Always On VPN profile from automatic protocol selection to a single protocol (SSTP or IKEv2). Microsoft is also addressing various other issues related to Hyper-V, Remote Desktop Services, USB audio, and the File History backup feature.

AppWizard

September 23, 2026

2026 Android Casino Tech: Flagship Real-Money Play

Global mobile gaming revenue reached .6 billion in 2024, with projections indicating it will surpass 0 billion by the close of 2026. By 2026, the average flagship Android device will have 12GB of RAM, enhancing slot loading times and live dealer streaming. A 120Hz refresh rate can reduce perceived input lag by approximately 40% compared to 60Hz panels. As of early 2026, mobile users constitute 61% of all online gambling traffic globally. High-end devices like Samsung’s Galaxy S26 Ultra and Google’s Pixel 10 Pro feature vapor chamber cooling for sustained gaming performance. The global luxury goods market reached .5 trillion in 2024, with 9% of that total spent on digital entertainment. Flagship devices with Snapdragon 8 Gen 4 chipsets deliver live dealer feeds in 1080p and provide OLED screens for enhanced visual quality. A 5,000mAh battery supports three-hour gaming sessions and can recharge to 60% in about 20 minutes. Understanding wagering requirements and game weighting is crucial for maximizing bonuses. Progressive web apps ensure reliable performance on unstable connections, while flagship devices offer hardware-level encryption and biometric authentication for security.

Winsage

September 23, 2026

PAYLOAD ransomware hijacks Windows Group Policy in encryption-less attacks

A sophisticated PAYLOAD ransomware attack targeted an unnamed manufacturing organization in the Middle East, exploiting vulnerabilities in Microsoft Active Directory Group Policy. The attackers accessed the network through a compromised domain account via FortiGate SSL VPN on April 11, escalated privileges to domain administrator by April 13, and created a malicious Group Policy Object (GPO) named "PAYLOAD." This GPO was linked at the root of the domain, allowing it to affect nearly all domain-joined Windows workstations. The attackers distributed ransom notes, altered desktop images, displayed ransom messages at login, and disabled local administrator accounts. A second GPO, "win Firewall Off," was deployed to disable Windows Firewall across all profiles. The malicious policies activated on April 14 after systems were rebooted, causing widespread disruption. The attackers also exfiltrated data from file servers and published it on the dark web, while Kaspersky found no evidence of Windows file encryption or active malware processes. Recommendations for organizations include monitoring GPO creation, checking for unexpected changes, implementing multi-factor authentication for VPN access, and protecting privileged accounts.

AppWizard

September 23, 2026

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

A newly identified strain of Android malware, RatHat, utilizes generative AI to manipulate infected devices in real time. It is linked to threat actors believed to be operating out of China. RatHat serializes the device’s live Accessibility tree into XML format and communicates with a generative AI assistant to return screen coordinates, identify text, and issue navigation commands. The malware employs WebView-based HTML overlays to capture login credentials from banking and cryptocurrency applications and can infiltrate payment apps like WeChat and Alipay to extract PINs. It also features an SMS receiver and notification listener to intercept OTPs and 2FA codes. RatHat is disseminated through smishing, malvertising campaigns, and misleading third-party forums. It employs anti-analysis techniques such as container tampering, manifest bombing, DEX bytecode poisoning, string encryption, and anti-debugging. Once installed, it gains Accessibility access, activates Developer Options, and enables Wireless Debugging, allowing it to connect to the device's local ADB service and launch control agents with shell-level privileges. The malware captures raw touch coordinates to reconstruct PINs and unlock patterns, bypassing screenshot protections. It also includes persistence mechanisms that prevent uninstallation by presenting a fake Google Play failure overlay and automatically reinstalling itself if removed.