NewApp Digest
search bot

breach

Don't Kill Them All make you keep orc calm so orc not smash resources—big smart, neat game, like demo much
AppWizard
June 18, 2026

Don’t Kill Them All make you keep orc calm so orc not smash resources—big smart, neat game, like demo much

In the game Don't Kill Them All, players lead a band of orcs who must balance aggression with resource management. The gameplay involves managing the orcs' rage to avoid negative consequences while maintaining order. The game features a humorous narrative focused on the orcs' self-serving motives and has a charming art style. Despite its innovative concept, the player count is currently low, remaining in the double digits, which raises concerns about its visibility and marketing in the gaming landscape.
Windows SprySOCKS Malware: Advanced Kernel-Level Rootkit Targets Government Organizations via Supply Chain Vulnerabilities
Winsage
June 17, 2026

Windows SprySOCKS Malware: Advanced Kernel-Level Rootkit Targets Government Organizations via Supply Chain Vulnerabilities

The Windows variant of SprySOCKS malware, developed by the Chinese threat group Earth Lusca, targets government entities globally and features advanced capabilities such as rootkit-level stealth and extensive command-and-control (C2) functionalities. It operates on Windows systems, utilizing two main variants: WINDRV, which includes kernel drivers for stealth operations, and WINPLUS, a streamlined backdoor. The malware can communicate over TCP, UDP, and WebSocket, offering over 30 C2 commands for various operations, including system information gathering and keystroke logging. WINDRV loads a driver named ‘RawWNPF’ into memory using another signed kernel driver, allowing it to conceal processes and achieve persistence. The malware's design incorporates open-source elements and exploits vulnerabilities in the software supply chain, notably using a leaked certificate for driver signing. To combat SprySOCKS, organizations are advised to implement advanced endpoint detection and response (EDR) solutions, maintain regular patching, and manage supply chain risks vigilantly. The malware's adaptability and reliance on legitimate certificates complicate detection efforts, necessitating continuous refinement of security practices.
Dying Light 2 is a platform now, as the Breach update opens up Techland's zombie survival game 'even more to UGC content'
AppWizard
June 13, 2026

Dying Light 2 is a platform now, as the Breach update opens up Techland’s zombie survival game ‘even more to UGC content’

Techland has been enhancing Dying Light 2 since its launch in 2022, reworking the parkour system, introducing Volatiles, and improving combat mechanics. The game now features New Game+ and replayable bounties. The latest update, "The Breach," aims to enhance modding and user-generated content (UGC) capabilities, allowing players to create and share their own content. After completing the Prologue, players meet characters Tolga and Fatin, who provide tools for UGC experiences. Official mods include a third-person mode and a low-gravity mode, with community-created content like "The Atomborne" and "Dead Circuit." Dying Light 2 has a daily concurrent player count in the low thousands, which is respectable for a four-year-old single-player game but lower than other successful titles. The potential for a vibrant UGC community exists, especially as it may appeal to younger players compared to other platforms facing scrutiny.
Hackers Use Fake Purchase Orders to Deploy JS.MonoGlyphRAT Targeting US Enterprises
Tech Optimizer
June 6, 2026

Hackers Use Fake Purchase Orders to Deploy JS.MonoGlyphRAT Targeting US Enterprises

Researchers have identified a new malware called JS.MonoGlyphRAT, which disguises itself as business documents to infiltrate corporate networks. It is primarily spread through phishing emails targeting various sectors in the U.S. and has been reported in countries like Germany, Sweden, and Australia. The malware is classified as "Unknown malware" on threat intelligence platforms, making traditional antivirus solutions ineffective. It establishes a persistent presence in the network by executing a JavaScript file and communicating with command-and-control (C2) servers over HTTP. Key indicators of compromise include unusual HTTP traffic, registry changes, and the execution of specific JavaScript files. The malware can download additional payloads and execute commands without leaving traces on disk. Indicators of compromise include specific IP addresses, URLs, file hashes, and registry keys associated with the malware's operation.
Search