authentication Archives

Winsage

July 4, 2026

Microsoft Edge 150 Adds Google Account Sign-In on Windows and macOS

Microsoft has introduced the ability to sign into its Edge browser using a Google account, starting with version 150 on Windows and macOS. This feature allows users to integrate their Google accounts alongside Microsoft accounts and is being rolled out gradually. System administrators can manage this feature through the NonMicrosoftAccountSignInEnabled policy, which organizations can enable or disable based on compliance and security needs. Edge 150 is the last version compatible with macOS 12 Monterey, and users are encouraged to upgrade to macOS 13 Ventura or later. The update has transitioned the Workspaces feature to a new architecture but removed the sharing function. Users can sign in to Google accounts by updating to version 150.0.4078.48 or newer and following the sign-in process in Edge Settings.

Tech Optimizer

July 3, 2026

Antivirus vs malware: Why antivirus alone is no longer enough

Antivirus software is still essential for cybersecurity, as it effectively detects and removes traditional malware infections. However, cybercriminals have evolved their tactics, using methods such as fake delivery notifications and phishing attacks that may not involve malicious software detectable by antivirus programs. Experts recommend a layered approach to online security, which includes keeping software updated, using strong passwords, enabling multi-factor authentication, being cautious with emails, backing up files, and using secure internet connections. A virtual private network (VPN) complements antivirus software by encrypting internet connections and providing additional security features. Relying solely on antivirus software is no longer sufficient for protecting against modern cyber threats.

AppWizard

July 2, 2026

Google is still working on a missing Android 17 feature behind the scenes

The anticipated App Lock feature is absent in the latest Android 17 stable release, despite earlier Canary builds suggesting its inclusion. Recent findings in the Android 17 QPR1 Beta 6 indicate that Google is still developing the feature, which will allow users to lock multiple applications simultaneously through the Settings app, improving upon the previous method of securing apps one at a time. Additionally, Google is exploring a feature that restricts app access to biometric authentication only, disabling the traditional PIN-unlock option. Although App Lock is not present in the current beta, ongoing development suggests it may be introduced in the future.

Tech Optimizer

July 2, 2026

MTAR T3D Sessions: Scaling PostgreSQL Without Replacing It

Google's sign-in mechanism for YouTube uses a passive sign-in method that employs an iframe element called passive_signin. This iframe directs users to the Google accounts login interface without leaving the current page. The URL includes parameters such as service (YouTube), uilel (user interface language set to Dutch), passive (indicating a passive sign-in), and continue (a redirect URL back to YouTube after authentication). This design simplifies the sign-in process and enhances security by reducing the exposure of sensitive information.

AppWizard

June 29, 2026

Breaking: Is Minecraft down? Several users report outages

Players are experiencing significant disruptions with Minecraft, particularly on Monday, with difficulties in logging in, launching the game, and connecting to servers. According to DownDetector, 56% of reported issues were related to login challenges, 26% to game launch failures, and 16% to server connectivity problems. The outage has affected both Bedrock and Java versions, preventing users from engaging in authentication processes and multiplayer games. Many gamers are unable to access their worlds or log in using Microsoft accounts across various devices. Mojang Studios has not yet released an official statement regarding the disruptions.

AppWizard

June 28, 2026

The Steam client was hurting PC gaming on Android — Valve’s VR headset accidentally solved it

Playing Windows games on Android has become feasible due to Winlator and open-source technologies like Wine, Box64, and DXVK. User-friendly applications such as GameHub and GameNative have emerged, enhancing mobile gaming experiences to rival dedicated handheld consoles. A major challenge was the reliance on the x86 Windows Steam client, which was resource-intensive on mobile devices. GameNative 1.0 introduced an experimental feature that eliminates the need for the desktop Steam client by using Valve's native Android libraries, improving the gaming experience significantly. Valve released Steamworks SDK version 1.63 in November 2025, which included native ARM64 libraries for Android, allowing for essential Steam functionalities without a translation layer. GameNative integrated these libraries, replacing the desktop client with a more efficient "bionic" Steam client that operates without a user interface, streamlining DRM and matchmaking processes. GameNative now supports Steam Guard TOTP sign-in, enabling smooth authentication and access to the user's Steam library. It downloads games natively, supports cloud saves, and is compatible with most single-player games with Steam DRM. The application boasts a high compatibility rate, with 221 out of 241 games in one user's library showing as compatible. GameNative 1.0 has improved performance with a Vulkan renderer and reworked controller stack. Despite its success, GameNative is not yet available on the Play Store, with nearly a million users sideloading the application. Developers aim to create a Play Store version that complies with Google's policies for easier installation.

Winsage

June 27, 2026

New Millenium RAT version infects 62,000 Windows systems worldwide

A significant evolution of the Millenium remote access trojan (RAT) has impacted over 62,000 Windows devices across more than 160 countries. The latest version, 4.*, marks a departure from previous .NET-based versions and is attributed to a threat cluster known as Y2K Operators, with the creator identified as “ShinyEnigma.” There are 62,289 infected endpoints, with 39,730 infections occurring in the first quarter of 2026. The RAT is marketed as malware-as-a-service (MaaS) and promoted through underground forums and platforms like GitHub, with accessible pricing. Millenium RAT 4 is developed in native C++ and uses the Telegram Bot API for command-and-control communications. Its capabilities include stealing browser data, collecting system information, logging keystrokes, capturing screenshots and audio, accessing Telegram and Discord data, downloading additional payloads, and executing Windows or PowerShell commands. The malware ensures persistence by replicating itself in the %APPDATA% directory and creating an autorun registry entry. The malware is distributed through social engineering tactics such as cracked software, cryptocurrency utilities, hacking toolkits, OSINT tools, exploit builders, and Roblox-related cheats. Some campaigns have trojanized malware builders, infecting cybercriminals. One campaign used PDF-themed lures with a malicious Windows shortcut to download the RAT while displaying a legitimate document. Payloads often use filenames associated with Windows components or security software to blend into infected systems. Group-IB recommends avoiding untrusted executables, applying security updates, enabling multi-factor authentication, and monitoring for unusual autorun registry entries.

Tech Optimizer

June 23, 2026

Meta pauses controversial employee-tracking program after security review

Meta has suspended its employee-tracking program after an internal security review revealed excessive accessibility to sensitive data collected from staff laptops. The program, part of the Model Capability Initiative (MCI), aimed to gather detailed information on employee interactions with work devices, including mouse movements, click locations, keystrokes, and screen content. Concerns arose regarding the privacy and security of the collected data, which included AI prompts, transcriptions, private conversations, and performance-related information. The initiative faced backlash, particularly after an engineer criticized "laptop surveillance," leading to a petition for its termination. The monitoring software was deployed on US workers’ laptops without an opt-out option, capturing comprehensive behavioral datasets. The situation highlighted significant legal and regulatory challenges, as well as the risks associated with managing sensitive data. Access controls, data minimization, and retention policies are critical to mitigate potential breaches.

Tech Optimizer

June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.

AppWizard

June 23, 2026

Reviewing Infdev+: Minecraft’s Most Ambitious Mod (ft. Yoniko)

A new feature on a leading video-sharing platform allows users to access content without the need for immediate account sign-ins, integrating a passive sign-in option. This aims to streamline the user experience and cater to the demand for instant access to videos, potentially increasing viewership and engagement metrics.