NewApp Digest
search bot

catalog

Windows info-disclosure 0-day bug gets a fix as CISA sounds alarm
Winsage
January 15, 2026

Windows info-disclosure 0-day bug gets a fix as CISA sounds alarm

Microsoft and the U.S. government have issued a warning about a vulnerability in Windows, designated CVE-2026-20805, which is currently being exploited. This flaw allows an authorized attacker to leak a memory address from a remote ALPC port, potentially leading to arbitrary code execution. It has a medium severity rating of 5.5 on the CVSS scale. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog and requires federal agencies to implement a patch by February 3. Additionally, two other vulnerabilities were acknowledged: CVE-2026-21265, a secure boot certificate expiration bypass with a CVSS rating of 6.4, and CVE-2023-31096, an elevation of privilege flaw affecting third-party Agere Modem drivers, rated at 7.8. Two more vulnerabilities, CVE-2026-20952 (CVSS 7.7) and CVE-2026-20953 (CVSS 7.4), are use-after-free flaws in Office that could allow unauthorized code execution.
U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog
Winsage
January 14, 2026

U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows vulnerability, CVE-2026-20805, to its Known Exploited Vulnerabilities (KEV) catalog, with a CVSS score of 8.7. This vulnerability, part of the January 2026 Patch Tuesday updates, affects the Windows Desktop Window Manager and allows attackers to leak memory information, potentially aiding in further exploits. Federal Civilian Executive Branch agencies must address this vulnerability by February 3, 2026, as mandated by Binding Operational Directive 22-01.
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
Winsage
January 14, 2026

Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited

On Tuesday, Microsoft released its first security update for 2026, addressing 114 vulnerabilities, including eight classified as Critical and 106 as Important. The vulnerabilities include 58 related to privilege escalation, 22 concerning information disclosure, 21 linked to remote code execution, and five categorized as spoofing flaws. A notable vulnerability, CVE-2026-20805, involves information disclosure within the Desktop Window Manager (DWM) and has a CVSS score of 5.5. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this flaw to its Known Exploited Vulnerabilities catalog, requiring federal agencies to implement fixes by February 3, 2026. Additionally, Microsoft announced the expiration of three Windows Secure Boot certificates issued in 2011, effective June 2026, urging customers to transition to newer certificates to avoid disruptions. The update also removed vulnerable Agere Soft Modem drivers due to a local privilege escalation flaw (CVE-2023-31096) and addressed another critical privilege escalation flaw in Windows Virtualization-Based Security (CVE-2026-20876) with a CVSS score of 6.7. Other vendors, including Adobe, Amazon Web Services, and Cisco, have also released security patches for various vulnerabilities.
'Steam is winning with its ease of use,' GOG's new owner says, but he's not interested in picking a fight: 'I think much can be done in GOG without losing its core values and the way it operates'
AppWizard
January 13, 2026

‘Steam is winning with its ease of use,’ GOG’s new owner says, but he’s not interested in picking a fight: ‘I think much can be done in GOG without losing its core values and the way it operates’

CD Projekt sold its DRM-free digital storefront, GOG, to co-founder Michal Kiciński at the end of 2025. GOG has transitioned from focusing solely on classic titles to including newer releases, but it remains a niche player in the gaming market and has not generated substantial revenue for CD Projekt. Kiciński and GOG's managing director, Maciej Gołębiewski, expressed optimism about GOG's potential, emphasizing its unique position and mission to ensure games endure over time. GOG is expanding its catalog of new releases, particularly from independent studios, without aiming to compete directly with Steam in terms of volume. GOG is known for being a curated platform, contrasting with Steam's high volume of releases, and Kiciński acknowledged the need for GOG to improve its user-friendly features while maintaining its core values. GOG will continue to uphold its commitment to being a DRM-free platform, which Kiciński stated is a core value that will not change in the foreseeable future.
Game Pass Adds All These Games In January 2026
AppWizard
January 8, 2026

Game Pass Adds All These Games In January 2026

This month, Xbox Game Pass subscribers can look forward to new games including Brews & Bastards, Mio: Memories in Orbit, and a My Little Pony game. Players can also revisit Resident Evil Village in anticipation of Resident Evil Requiem's release next month, and enjoy Star Wars Outlaws. However, titles such as Neon White, Road 96, and The Ascent will be removed from the Game Pass library on January 15.
Turkiye’s PC games to watch in 2026
AppWizard
January 7, 2026

Turkiye’s PC games to watch in 2026

A curated watchlist highlights promising Turkish video games set for release in 2026, featuring titles that indicate a 2026 release window on Steam. The main list includes: - Anomaly President by Phew Phew Games: A presidential roguelike action game set for Q1 2026 on PC. - Dead Engine by Chocolate Dungeon Games: A pixel-art, post-apocalyptic survival action-roguelite launching in Early Access on January 22, 2026. - Emberbane by Hamlet Games: A pixel-art action-adventure game scheduled for January 2026. - Eternity’s Echo: Patient Zero by Demonsoft Games: A first-person psychological survival-horror title set for Q1 2026. - Gamer Stop Simulator by Red Axe Games: A simulation game set in Japan, aiming for a higher visual standard, with no specific release date mentioned. - Island Market Simulator by Zentium Studio: Set for Q1 2026, focusing on managing an island-town business. - Mayhem Brawler II: Best of Both Worlds by Hero Concept: A beat 'em up game set for 2026 release on Steam and consoles. - Papa Needs a Headshot by Phew Phew Games and Vercial Games: An FPS set for Q2 2026 release. - Sagas of Lumin by Elos Games and Arts: An action RPG launching in Q1 2026. - The Enigma Cases by Red Axe Games: A co-op detective mystery game set for 2026. - Who Do Voodoo by Kuixo: A multiplayer social-deduction game targeting Q1 2026 for Early Access. Additionally, several titles are under consideration for a potential 2026 release, including: - Black State by Motion Blur: A single-player action-adventure shooter marked as “To be announced.” - Deckfort Alchemist by Team Machiavelli: A strategic roguelike tower defense game currently marked as “Coming soon.” - A new project from Fubu Games is anticipated following their successful titles in 2025.
Marketplace Content: January 2026
AppWizard
January 7, 2026

Marketplace Content: January 2026

This month, the author has embraced a new character identity known as the dark ice persona, featuring items such as a Dark Ice Shirt, Dark Ice Pants, Ice Plume Boots, Dark Ice Hood, Ice Dragon Wings, and Ice Shard Gloves, all from various creators. The author encourages others to embrace change and highlights the importance of focusing on a single New Year's resolution. Additionally, the text discusses the benefits of subscribing to Realms Plus or Marketplace Pass for access to new content in Minecraft, including collaborative play options and solo adventures. It also mentions that some items will rotate out of the catalog and provides a reminder about the need to reactivate memberships or purchase add-ons if they are removed.
Windows 11 AI components are getting their own changelogs (release history), as Microsoft plans model updates
Winsage
January 6, 2026

Windows 11 AI components are getting their own changelogs (release history), as Microsoft plans model updates

Microsoft has released a support document titled “Release information for AI components” that details the AI components integrated into Windows 11, which can be installed through Windows Update or accessed via the Microsoft Update Catalog. These components are essential for enabling various AI models to operate locally on devices, and installations typically occur automatically on compatible PCs with 40+ TOPs of NPU. The size of Windows 11 Patch Tuesday updates has increased significantly, now ranging from 4-5GB, compared to previous updates that were under 800MB. Users can manage AI components through Settings > System > AI Components, although this page is empty for older PCs. The changelog includes individual components like the Settings Model, Image Search, Semantic Analysis, and Content Extraction, as well as lower-level elements such as Execution Provider. Updates for these AI models occur every few weeks, often without visible changes.
Search