bug reporting Archives

Winsage

August 16, 2026

Microsoft threatened legal action, and this researcher just dropped a new Windows bug anyway

Microsoft has faced legal warnings regarding the disclosure of vulnerabilities, but security researcher Nightmare Eclipse has revealed a new exploit called ShieldBreak that targets Windows Defender. This vulnerability allows attackers to escalate privileges from a low-level user account to full system access on Windows 10, Windows 11, and Windows Server 2025. The proof of concept for ShieldBreak is available as a downloadable application, requiring execution to activate the exploit. Security expert Will Dormann confirmed that Windows Defender must be activated for the attack to succeed. ShieldBreak builds upon a previous exploit named RoguePlanet, which Microsoft patched inadequately, allowing ShieldBreak to bypass the fix. Microsoft is currently investigating the reported vulnerability, but no patch has been released yet.

Winsage

August 12, 2026

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

A security researcher named Nightmare Eclipse has discovered a vulnerability in Windows, called ShieldBreak, which allows hackers to gain system-wide access to users' devices and sensitive data by exploiting a flaw in Windows Defender. The vulnerability affects Windows 10, Windows 11 (including version 25H2), and Windows Server 2025. A proof-of-concept exploit has been provided, requiring users to run a Windows application to trigger the vulnerability. Security researcher Will Dormann confirmed that Windows Defender must be enabled for the exploit to work. Microsoft has not yet released a patch for ShieldBreak, which is classified as a zero-day vulnerability. This discovery follows previous vulnerabilities disclosed by Nightmare Eclipse, including RoguePlanet, for which Microsoft issued an inadequate patch. The situation has heightened tensions between the researcher and Microsoft regarding the handling of bug reports, especially after Microsoft threatened legal action against researchers disclosing zero-days outside established protocols. The disclosure of ShieldBreak occurred shortly after Microsoft's monthly security patch releases, which have been increasing in number.

Winsage

August 11, 2026

Microsoft PowerToys will soon take full advantage of the same AI that powers Copilot+ PCs

Microsoft PowerToys has introduced on-device support for Phi Silica, a small language model, in its latest preview version, enhancing the Advanced Paste feature for clipboard management. Advanced Paste can format clipboard content in various formats, extract text from images using OCR, and transcode audio and video files. It now supports multiple AI models, including local options like Foundry Local and Ollama. The latest version, PowerToys v0.101.2211.0, includes improvements such as enhanced AI customization for Advanced Paste, better dialog handling in the Command Palette, and improved window management features. Mouse Jump has transitioned to the newer WinUI app architecture, and new settings have been added for update channel selection and bug reporting.

AppWizard

July 22, 2026

Minecraft 26.3 Snapshot 5

The fifth snapshot of version 26.3 has been released, featuring updates to the Data Pack version (112.0) and Resource Pack version (93.0). Key technical changes include enhancements to the codec for element lists and tags, allowing a mix of inline values and references. Modifications to world generation include the removal of the fields extrararegrowths and catalystchance from minecraft:sculkpatch. Resource Pack updates involve shader changes, including renaming a define and changes in shader compilation processes. Several bugs have been fixed, including issues with server address updates, incorrect command contexts, and various rendering problems. Snapshots are available for Minecraft: Java Edition, with a recommendation to back up data before testing.

AppWizard

July 7, 2026

Gravity Game Unite Launches 2nd Open Beta Test for PC MMORPG Ragnarok Zero: Global

Gravity Game Unite (GGU) has launched the 2nd Open Beta Test (OBT2) for its PC MMORPG, Ragnarok Zero: Global, from July 7, 2026, at 9:00 AM to July 15, 2026, at 7:59 AM (Malaysian Time). The OBT2 is available to players from Southeast Asia, Europe, and Oceania, featuring enhancements based on feedback from the initial OBT. New features include the mini-game Get Poring, the User-Generated Content system RO Factory, and MVP Raid events. Community engagement activities include pre-registration rewards, level milestone rewards, daily attendance checks, and a bug reporting event. Players can register and download the PC client from the official website.

AppWizard

June 8, 2026

Minecraft 26.2 Pre-Release 5

26.2 Pre-Release 5 introduces adjustments to Hardcore mode settings and various bug fixes, with an official launch scheduled for June 16. Changes include: - Automatic adjustment of the Graphics API setting if a crash occurs during startup. - Correction of the sound effect for hitting the sulfur cube in the bouncy archetype. - World hosts can change the game mode using F3 + F4 or commands, updating the default game mode for the world. - Removal of the "Game Mode" and "Allow Commands" buttons in Hardcore mode worlds. Startup and Fallback Behavior for Graphics API: - If a crash occurs at startup with "Prefer Vulkan" selected, it reverts to "Default." - The game collects system information regarding Vulkan even when set to "Default." - If a crash occurs with "Default," it switches to "Prefer OpenGL." - "Prefer OpenGL" prevents interaction with Vulkan to avoid crashes. Fixed bugs: - Sounds for the bouncy sulfur cube play at appropriate volume levels. - Flower patches now generate instead of single flowers. - Spear with Lunge no longer launches players downwards on a geyser. - Players cannot change their game mode from the World Options menu in hardcore worlds. - Friends Screen key binding allows typing instead of closing the screen. - Custom dialog buttons no longer disrupt the game menu. - Adjusting command settings updates the "Game Rules" button state correctly. - Changing game modes with commands reflects accurately in the World Options screen. - The "Statistics" button has been realigned in the game menu. - Correction of a string error in the friends error message. - Game mode is no longer incorrectly set to Survival mode upon re-entering the save. - Hardcore death cannot be circumvented by rejoining the world. Pre-Releases are available for Minecraft: Java Edition, and users are advised to back up their data before testing.

Winsage

May 29, 2026

Microsoft 0-day feud escalates as researcher threatens another Windows exploit dump

The conflict between Microsoft and security researcher Nightmare Eclipse has intensified, with Nightmare threatening to release vulnerabilities on July 14. Nightmare has disclosed six zero-day vulnerabilities affecting Windows, including BlueHammer, RedSun, UnDefend, YellowKey, GreenPlasma, and MiniPlasma. Microsoft responded by stating that these vulnerabilities were not reported through official channels before their disclosure. Following the release of exploit code for three vulnerabilities, attackers began exploiting them, raising concerns about YellowKey (CVE-2026-45585), which remains unfixed. Nightmare accused Microsoft of silencing them by deleting their MSRC account, leading to frustration over their treatment. The cybersecurity community has noted the significant damage caused by Nightmare, with comparisons to advanced persistent threat groups. Experts criticized Microsoft's handling of the situation, emphasizing the need for better communication and collaboration with researchers. They pointed out that the responsibility for vulnerabilities lies with Microsoft as the code's creator and highlighted the challenges in vulnerability disclosure practices within the industry.

AppWizard

April 9, 2026

Minecraft 26.2 Snapshot 1

- The upcoming release is titled "Chaos Cubed." - Players can explore the Overworld and sulfur caves, seeking sulfur springs and new resources. - A new mob called the Sulfur Cube has been introduced, which absorbs blocks and can be interacted with using Shears. - The Sulfur Cube can detect nearby block items and will follow players holding absorbable blocks. - Upon defeat, the Sulfur Cube splits into two smaller versions, which can be fed to grow larger. - New Cinnabar and Sulfur block sets have been added, including various variants like Polished and Bricks. - The sulfur caves biome has been added, featuring sulfur pools and the Sulfur Cube mob. - Potent Sulfur is a new block that produces nausea-inducing gas when placed under water. - Sulfur Springs generate naturally above the sulfur cave biome in various sizes. - Vulkan support has been added for improved visual experience, with a new "Graphics API" option in Video Settings. - Players can toggle between OpenGL and Vulkan, with Vulkan being the default if supported. - New attributes related to bounciness and friction have been introduced for entities. - New sounds and textures for Sulfur, Potent Sulfur, Cinnabar, and the Sulfur Cube have been added. - Various bugs have been fixed to improve gameplay stability.

AppWizard

February 25, 2026

Minecraft 26.1 Snapshot 10

Players can expect several enhancements in the latest update, including new particle effects for the Golden Dandelion that indicate whether it is preserving youth or reintroducing aging to mobs. The heads of baby zombie mobs have been resized for better proportions, and various bug fixes have been implemented. Changes include: - Rectification of a pixel gap in the Snifflet texture. - Baby Striders now have animated bristles. - Striders inherit warmth from the Strider they are standing on. - Reduced head sizes for baby Zombie, Husk, and Drowned mobs. - Golden Dandelion displays green particles to indicate aging status. - Small Armor Stands now display adult armor correctly scaled down. Technical updates: - Data Pack version updated to 99.3. - Resource Pack version updated to 82. New particle effects introduced: - Pausemobgrowth particles for paused aging. - Resetmobgrowth particles for reset aging. Bug fixes include: - Resolved cross-platform CJK IME support issues. - Fixed tridents enchanted with riptide usage while riding. - Addressed visual issues with cacti in higher resolution texture packs. - Corrected behavior of worried pandas during thunderstorms. - Fixed clipping issues with baby mobs' legs and armor. - Ensured baby piglin and zombified piglin legs sync with adults. - Resolved rendering issues in Spectator mode. - Corrected armor display on small armor stands. - Adjusted farmer cookie sales from 18 to 4. Snapshots are available for Minecraft: Java Edition, and players are advised to back up their worlds before testing.

AppWizard

February 18, 2026

Minecraft 26.1 Snapshot 8

Players can expect the introduction of the final baby mobs, including visual updates for pandas, hoglins, zoglins, striders, and snifflets. The Stonecutter now allows crafting of Deepslate and stone into various cobbled variants. Adult horses have updated black dot markings, and sound assets for adult variants have been enhanced. A bug related to cat variant sounds has been fixed. Hitboxes for several mobs have been adjusted to fit into smaller spaces. Operators can use Ctrl + Pick input on players and mannequins in Creative Mode. Input Method Editors will now appear above the text field in supported platforms. A new debug screen entry for memory usage has been added, and the initial heap size has been decreased to 2GB to reduce crashes. The Data Pack version is updated to 99.2, and the Resource Pack version is at 81.1. New UI sprites and entity textures for various baby mobs have been introduced. Several bugs have been fixed in the snapshot.