authorization Archives

AppWizard

August 12, 2026

Modders are working on porting Xbox and PC Game Pass to Linux

Xodus is an open-source project aimed at enabling Linux and macOS users to access Xbox PC and PC Game Pass subscriptions without Windows. Developed by the team behind the Heroic Game Launcher, Xodus builds on existing functionalities to allow gameplay from various platforms. The project has successfully created an Xbox authorization system for users to log in, verify licenses, and identify available Game Pass titles. However, challenges remain in launching games, requiring reverse engineering of Microsoft technologies like the Game Development Kit (GDK) and MSIXVC format. Compatibility issues are anticipated, particularly with older Universal Windows Platform (UWP) games, such as Forza Horizon 3. Additionally, launching games will necessitate the use of Linux technologies like Wine, DXVK, or VKD3D-Proton, complicating full compatibility with the Game Pass catalog.

AppWizard

August 11, 2026

Xodus Cracks Xbox Authentication and Game Package Decryption to Bring PC Game Pass to Linux

Developers of the Heroic Games Launcher have announced Xodus, an open-source project aimed at enabling access to PC Game Pass on Linux and macOS. Launched on August 10, 2026, Xodus has successfully addressed Xbox identity authentication and the decryption of MSIXVC packages, allowing local play of Game Pass titles for Linux and macOS users. Currently, the only way to access Game Pass on non-Windows devices is through Xbox Cloud Gaming, which requires a Game Pass Ultimate subscription and introduces latency. Xodus employs a layered architecture, including an Xbox Authentication Library (xal-rs) for managing Microsoft account sign-ins and license verification, and a reimplementation of the xgameruntime.dll for license checks and Xbox service access. The project can retrieve MSIXVC game packages using a valid Game Pass subscription and decrypt executables for local storage. However, it does not yet support UWP-based titles and lacks a user-friendly interface for general users. The project is under pressure due to Microsoft's upcoming transition to the MSIXVC2 package format, which Xodus does not currently support. Xodus is in early development with only a command-line interface available, and the team is working on emulating the GDK Gaming Services layer necessary for game initialization. The project is legal as it reimplements Xbox runtime behavior without enabling piracy, but it faces risks if Microsoft alters its authentication infrastructure.

AppWizard

August 11, 2026

Xodus: Project to Run Xbox PC Games on Linux and Mac Hits Important Milestone

Gaming on Linux is experiencing a resurgence, with projects like Xodus aiming to enable Xbox PC games, including Game Pass titles, on Linux and Mac. Xodus is developed by a team of three, including a contributor from the Heroic Games Launcher. They have made progress in authorization and game downloads and are working on replicating Game Development Kit (GDK) functionality for Xbox services. The project currently uses technologies like Proton, dxvk, or Wine for game performance, focusing on GDK and MSIXVC format games, while older UWP titles are not supported. The Xodus project has a GitHub page and a Discord server for community engagement.

AppWizard

August 10, 2026

Linux May Soon Get PC Game Pass via Open-Source Project

Xbox has reduced the pricing of its Game Pass offering, attracting interest from open-source developers, particularly those working on the Heroic Games Launcher. A new open-source project called Xodus aims to bring PC Game Pass games to Linux and macOS by utilizing Valve's Proton and custom runtimes. Previously, Linux gamers had limited access to Game Pass titles, mainly through Xbox Cloud streaming, which faced latency issues. Xodus plans to support third-party launchers like Heroic, Lutris, and Bottles, allowing users to install and launch games via Steam. The development team has made progress in authorization and game downloads and is now focusing on game SDK development to ensure effective gameplay on Linux.

AppWizard

August 4, 2026

The next Xbox could play every Xbox game ever made

Microsoft's upcoming console, Project Helix, aims to support a vast library of games, including titles from the original Xbox, Xbox 360, Xbox One, and Xbox Series X/S, as well as new releases for Helix. The console may not include a disc drive, complicating the concept of backwards compatibility. A leaked memo indicates that Xbox 360 games will also be available on PC and run on Helix, allowing access to five generations of Xbox games on one platform. Microsoft is seeking cooperation from game publishers to facilitate the transition of Xbox discs to digital formats, requiring individual authorization for original Xbox and Xbox 360 titles. Publishers can benefit financially by repackaging older titles and converting physical disc owners into digital customers. The success of Project Helix hinges on publisher consent, as licensing issues could impact the availability of older titles.

AppWizard

July 30, 2026

Binance Android app removed from Google Play in Spain and Latvia over MiCA rules

Binance's Android app has been removed from Google Play in Spain and Latvia due to the lack of a Crypto-Asset Service Provider (CASP) authorization, which is required for crypto exchanges serving EU users. Binance withdrew its MiCA application in Greece before the July 1 deadline. The app is still available on Google Play in several other countries, including Poland, and can be downloaded from alternative Android stores.

TrendTechie

July 29, 2026

WinBitTorrent: обернул qBittorrent в WinUI 3, красивый интерфейс и новые фишки

WinBitTorrent is a new torrent client developed using the qbittorrent-nox engine (version 5.2.3 with libtorrent 2.0.13) but features a native application interface built on WinUI 3 and the Windows App SDK 2.2, using .NET 8 and the MVVM pattern. It communicates with the engine through its Web API and can operate in both local and remote modes. Unique features include in-app torrent search with providers like RuTracker and The Pirate Bay, a movie catalog via TMDB, and a customizable context menu. WinBitTorrent is free and open-source, with an auto-update system in place.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

Winsage

July 20, 2026

LG Monitors Spotted Installing Adware-Like App on Windows PCs

LG monitors connected to Windows PCs can trigger the automatic installation of the LG Monitor App Installer, which promotes paid subscriptions to McAfee antivirus software without user consent. This app appears shortly after Windows Update installs relevant LG packages, displaying McAfee promotions frequently. The app is designed to launch at startup and operates outside the Windows App Sandbox, raising cybersecurity concerns. Reports indicate that this issue affects both newer and older LG monitor models. Microsoft allows manufacturers to link Store applications with device metadata, enabling such installations without clear user choice. Users can remove the app through Windows Settings, but doing so may block other useful applications. LG and Microsoft have not publicly addressed these concerns.

Winsage

July 15, 2026

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. The exploit requires standard user credentials and a third username, potentially an administrator account. It can mount the target user hive in the current user classes root and is designed to reduce the risk of public exploitation. The exploit works across all supported desktop and server versions of Windows, including those updated with the July 2026 Patch Tuesday release. Microsoft is investigating the findings related to LegacyHive. Microsoft has patched 622 vulnerabilities, including two privilege escalation flaws in SharePoint Server (CVE-2026-56164, CVSS score: 5.3) and Active Directory Federation Services (CVE-2026-56155, CVSS score: 7.8), which are actively exploited threats. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included these vulnerabilities in its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to implement fixes by specified deadlines. CISA has also noted active exploitation of several SharePoint Server vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, which allow unauthorized access to vulnerable instances. CVE-2026-56164 enables attackers to send crafted network requests to access functions that should require authorization, leading to privilege escalation without prior authentication. Additionally, CVE-2026-55040 (CVSS score: 9.1) allows remote unauthenticated attackers to bypass authentication on a vulnerable SharePoint server, enabling unauthorized operations.