campaigns Archives

AppWizard

July 12, 2026

Tempest Rising’s elusive third faction will get its own singleplayer campaign as a paid expansion, and you can play the demo right now

Tempest Rising, a successor to the Command & Conquer series, features three factions: the Global Defense Force (GDF), the Tempest Dynasty, and the Veti. The Veti faction, previously AI-controlled, will receive its own campaign in a paid expansion titled The Veti's Wrath, which includes 11 new campaign missions. The Veti are inspired by Ancient Egyptian aesthetics and have unique gameplay mechanics focused on conversion and sacrifice, allowing players to resurrect fallen enemy soldiers as "enlightened" units. A demo is currently available, featuring the first two missions of the Veti campaign. The Veti will be a free multiplayer faction, while single-player gameplay will require a purchase. Tempest Rising is currently available at a 30% discount, retailing for £21, with the promotion ending tomorrow.

Winsage

July 11, 2026

AI Threat Forces Microsoft To Update Windows Patch Guidance

Microsoft is advocating for a reevaluation of Windows patch management practices due to the rapid evolution of artificial intelligence (AI) impacting cybersecurity. The company emphasizes that traditional timelines for patch deployment, typically spanning several weeks after the monthly Patch Tuesday, are inadequate against modern cyber threats. Microsoft recommends organizations shorten deployment windows to under three days for quality updates, with immediate installation deadlines and minimal user grace periods. To support these changes, Microsoft is enhancing Windows Autopatch with a new reporting dashboard for patch compliance and security insights. The company is promoting cloud-managed deployment through Microsoft Intune and Windows Autopatch while continuing to support legacy tools. Additionally, Microsoft is introducing Windows Hotpatch technology, allowing security updates to be installed without immediate reboots, and advocating for the use of identity-based access controls to isolate unpatched devices. The guidance reflects a shift from scheduled patching to continuous risk management, encouraging organizations to prioritize high-risk assets and automate update deployments. Microsoft is also investing in AI-assisted vulnerability discovery and automated code analysis to improve defensive capabilities. The overarching message is that enterprises must adapt their update strategies to address the accelerated pace of AI-driven exploitation.

Tech Optimizer

July 11, 2026

Microsoft closes RoguePlanet vulnerability in Defender: SYSTEM privileges via the antivirus engine

A vulnerability known as RoguePlanet was identified in Microsoft Defender, tracked as CVE-2026-50656. This flaw allows local privilege escalation to the NT AUTHORITYSYSTEM account, requiring an attacker to have local code execution capabilities. It can be exploited through methods such as opening malicious email attachments. The vulnerability is categorized under CWE-59: “Improper Link Resolution Before File Access” and involves a race condition that affects the Defender engine's operations. RoguePlanet was disclosed by security researcher Nightmare-Eclipse on June 10, 2026, and confirmed by various security firms. Microsoft released a fix in version 1.1.26060.3008 of the Microsoft Malware Protection Engine, which should be installed automatically in standard Windows configurations. Users can verify their engine version using PowerShell. The vulnerability affects both Windows 10 and Windows 11 systems with the June 2026 security updates, and disabling real-time protection does not reliably mitigate it.

Tech Optimizer

July 6, 2026

Why Antivirus Alone No Longer Protects Small Businesses

Many small businesses have historically relied on antivirus software for computer security, which was effective against identifiable malware. However, the current cyber threat landscape includes sophisticated attacks such as phishing, credential theft, and ransomware that traditional antivirus solutions may not adequately address. Factors driving increased cyber threats in Kenya include phishing, weak authentication practices, delayed software updates, and the use of artificial intelligence by malicious actors. While antivirus software can detect known malware and block common threats, it falls short against tactics like stolen credentials and social engineering. The Communications Authority recommends complementing antivirus with multi-factor authentication, regular software updates, secure configurations, and user training. Endpoint Detection and Response (EDR) solutions enhance visibility into attacks by monitoring endpoint activity for suspicious behaviors, allowing for prompt investigation and response. A layered security strategy that integrates multiple protective measures is essential for effective cybersecurity, and many modern security platforms offer unified solutions to simplify management for smaller organizations. The Kaspersky SMB Cybersecurity Guide provides insights into modern attack methods and the role of endpoint protection in improving a business's cybersecurity posture.

AppWizard

July 4, 2026

Crossfire is actually the second singleplayer shooter named after Korea’s Counter-Strike—and the last one was made by Remedy

Crossfire is a new military simulation game developed by the creators of the 2019 reboot of Call of Duty: Modern Warfare, published by Smilegate. It features an innovative cover mechanic and a deeper emotional connection between its two lead characters. The game is related to the earlier multiplayer FPS Crossfire, which received a single-player mode called CrossfireX, developed by Remedy Entertainment. CrossfireX includes three-hour FPS campaigns that follow a Call of Duty formula and features a bullet-time mechanic. The game faced challenges upon release and was met with poor reception, leading to its shutdown just over a year after launch.

AppWizard

July 2, 2026

“You are the endgame”: Total War: Warhammer’s new nightmarish Chaos invasion finally gives Archaon the apocalyptic event he’s been waiting 10 years for

Total War enthusiasts enjoy endgame events, such as the Mongol and Timurid invasions in Medieval 2 and Archaon's arrival in Total War: Warhammer. The upcoming rework for the Vampire Counts will enhance Archaon's invasion, allowing players to engage in an endgame crisis after meeting short victory conditions. This new mechanic will prevent territory occupation while increasing overall power as players devastate regions. Archaon can confederate all Chaos factions by defeating their leaders, expanding the conflict. Visual updates for Archaon and new units will be introduced, addressing previous shortcomings. The Lords of the End Times expansion is anticipated to launch later this year.

Winsage

July 1, 2026

Steve Ballmer once trashed Linux as “a cancer” — now it’s saving Windows 10 holdouts

In 2001, Steve Ballmer, then CEO of Microsoft, referred to Linux as a "cancer" threatening Microsoft's intellectual property and likened its users to "communist thieves." By 2016, after Microsoft ported SQL Server to Linux, Ballmer expressed enthusiasm for the change and acknowledged that the conflict with open-source had benefited Microsoft's financial success. In 2020, Microsoft President Brad Smith admitted the company had been on the wrong side of history regarding open source and noted the need for change. Microsoft has since embraced open-source technologies, introducing products like Azure Linux 4.0, built on Fedora. As Windows 11's transition becomes difficult for users, advocacy groups have criticized Microsoft for ending support for Windows 10, which could lead to millions of discarded computers. Microsoft extended Windows 10's life through an Extended Security Updates program until October 14, 2026, with a recent announcement pushing it to 2027. Rising hardware costs and design flaws in Windows 11 have led some users to consider alternatives like Linux. A survey revealed that 30% of PCs are still running Windows 10, and a poll showed that 68% of respondents plan to stick with Windows 10 through 2027.

Winsage

June 30, 2026

Windows Defender ‘BlueHammer’ vulnerability now exploited as part of malware campaigns — CISA issues warning despite patch release on April 14

A race condition vulnerability in Windows Defender, known as BlueHammer, has been exploited by the hacker Nightmare Eclipse, allowing attackers to gain SYSTEM user access. Microsoft released a patch for this vulnerability on April 14, but the Cybersecurity and Infrastructure Security Agency (CISA) has flagged it as actively exploited in ransomware campaigns. The average time to apply critical OS patches across Windows 10 and 11 is now 127 days, with enterprise environments averaging 76 days. Estimates suggest that 15% to 26% of Windows 10 machines remain unpatched, with a conservative estimate of 20% translating to one in five machines being vulnerable. Microsoft has extended security updates for Windows 10 until October 14, 2027, but public awareness of the updates remains low.

AppWizard

June 29, 2026

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve

The US government is offering rewards of up to million for information on individuals associated with two Russian-linked cyber threat groups, UNC5792 and UNC4221, which target US officials, military leaders, journalists, and personnel in Ukraine. The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have reported that these groups conduct sophisticated phishing campaigns via commercial messaging applications (CMAs), using social engineering and masquerading as support accounts to gain unauthorized access. The attackers now request victims' Backup Recovery Keys, which can lead to future account takeovers even if new accounts are created. Both groups are linked to Russian intelligence services, with UNC5792 associated with the FSB Border Guards and UNC4221 with Russian military services. The US government seeks information on the identities, locations, affiliations, and funding sources of the actors behind these groups.

Winsage

June 27, 2026

New Millenium RAT version infects 62,000 Windows systems worldwide

A significant evolution of the Millenium remote access trojan (RAT) has impacted over 62,000 Windows devices across more than 160 countries. The latest version, 4.*, marks a departure from previous .NET-based versions and is attributed to a threat cluster known as Y2K Operators, with the creator identified as “ShinyEnigma.” There are 62,289 infected endpoints, with 39,730 infections occurring in the first quarter of 2026. The RAT is marketed as malware-as-a-service (MaaS) and promoted through underground forums and platforms like GitHub, with accessible pricing. Millenium RAT 4 is developed in native C++ and uses the Telegram Bot API for command-and-control communications. Its capabilities include stealing browser data, collecting system information, logging keystrokes, capturing screenshots and audio, accessing Telegram and Discord data, downloading additional payloads, and executing Windows or PowerShell commands. The malware ensures persistence by replicating itself in the %APPDATA% directory and creating an autorun registry entry. The malware is distributed through social engineering tactics such as cracked software, cryptocurrency utilities, hacking toolkits, OSINT tools, exploit builders, and Roblox-related cheats. Some campaigns have trojanized malware builders, infecting cybercriminals. One campaign used PDF-themed lures with a malicious Windows shortcut to download the RAT while displaying a legitimate document. Payloads often use filenames associated with Windows components or security software to blend into infected systems. Group-IB recommends avoiding untrusted executables, applying security updates, enabling multi-factor authentication, and monitoring for unusual autorun registry entries.