NewApp Digest
search bot

catalog

CISA: Windows Task Host flaw now exploited by ransomware gangs
Winsage
August 18, 2026

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that ransomware gangs are exploiting a significant vulnerability in the Windows Task Host system, tracked as CVE-2025-60710. This high-severity flaw, affecting Windows 11 and Windows Server 2025, allows local attackers with basic user permissions to escalate their privileges to SYSTEM level. Microsoft patched this vulnerability in November 2025, but it poses a threat to unpatched devices. CISA added CVE-2025-60710 to its list of actively exploited vulnerabilities on April 13 and provided Federal Civilian Executive Branch agencies with a two-week window to secure their systems. CISA warns that such vulnerabilities are frequent attack vectors for malicious actors and urges organizations to apply mitigations or discontinue the use of affected products. Additionally, CISA noted that ransomware groups are also exploiting a Microsoft SharePoint remote code execution vulnerability (CVE-2026-45659), confirmed to be actively exploited in early July. Since November 2021, CISA has identified 383 actively exploited vulnerabilities across various Microsoft products, with 112 being used in ransomware attacks.
Amazon Prime gets another batch of 'free' PC games this August
AppWizard
August 17, 2026

Amazon Prime gets another batch of ‘free’ PC games this August

Amazon Prime subscribers can access a monthly selection of PC games, which they can claim and keep indefinitely, even after their subscription ends. The August lineup includes notable titles such as SteelRising and several others, with four games still available for claim. An Amazon Prime subscription costs R60 per month, and users must create accounts with Good Old Games (GOG), the Epic Games Store, and Legacy Games to claim certain titles. Current available games include Pyramids and Aliens: Escape Room, Airship: Kingdoms Adrift, and SteelRising, among others. Upcoming titles include Royal Romances: Forbidden Magic and Havendock.
Windows 11 KB5121003 now crashing games and causing Windows Hello issues
Winsage
August 17, 2026

Windows 11 KB5121003 now crashing games and causing Windows Hello issues

A surge of reports regarding game crashes and launch issues on Windows platforms has prompted Microsoft to provide resources through its Update Catalog to assist users. Players have faced unexpected crashes and difficulties launching games due to factors like software incompatibilities and outdated drivers. The Microsoft Update Catalog offers driver updates, patch releases, and guides to help users troubleshoot these gaming issues.
Best Steam Deck-friendly games under $5 in Humble’s Summer Sale
AppWizard
August 16, 2026

Best Steam Deck-friendly games under $5 in Humble’s Summer Sale

Humble is celebrating its 15th Anniversary Summer Sale, featuring discounts across its game catalog. Many titles are available for under a certain price, including games like Dying Light and Mad Max. The sale includes a curated list of the best Steam Deck games priced under a specific amount, with each game coming with a Steam key. As of July 10th, 2026, the prices listed reflect current discounts. Games labeled as Verified are optimized for the Steam Deck, while Playable titles may need adjustments. Humble is also offering a Short Games Showcase bundle with 14 Steam Deck-compatible games valued at a higher price for a lower price, along with additional savings through the Fanatical’s Favorites bundle.
LeakWatch CW 33/2026: Windows Zero-Day, AMD, Intel and Malware
Winsage
August 16, 2026

LeakWatch CW 33/2026: Windows Zero-Day, AMD, Intel and Malware

- The August Patch Tuesday release included 421 vulnerabilities, with 236 affecting Windows, highlighting CVE-2026-68820, a critical use-after-free vulnerability that allows privilege escalation to SYSTEM level without user interaction. - CISA added CVE-2026-68820 to its Known Exploited Vulnerabilities Catalog, confirming its active exploitation. - AMD's Ryzen Master software has vulnerabilities, including CVE-2025-54512 (DLL hijacking) and CVE-2026-0465 (use-after-free), which could allow code execution with elevated privileges. - AMD's advisory on CVE-2026-6726 and CVE-2026-6727 indicates vulnerabilities in the TPM 2.0 reference code affecting Ryzen platforms, leading to potential information disclosure. - Intel's advisories included updates for microcode, Wi-Fi software, and NPU drivers, with CVE-2026-20760 addressing privilege escalation risks. - Google’s Chrome update on August 11 fixed five high-severity vulnerabilities, including use-after-free flaws. - Gunra malware has evolved into a ransomware-as-a-service model using a double-extortion strategy. - WindRelay malware combines SpyNote RAT with an NFC relay component, allowing attackers to relay NFC communication between a victim's bank card and a remote device. - The findings emphasize the need to view vulnerabilities as part of potential attack chains, highlighting the complexity of modern cybersecurity threats.
Search