challenges Archives

Winsage

September 9, 2026

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft addressed 974 vulnerabilities in its software suite during its recent Patch Tuesday, marking a record high. The breakdown includes 723 flaws in Windows, 111 in Office, 62 in SQL, and 22 in Developer Tools, with over 110 rated as critical. Two actively exploited vulnerabilities are CVE-2026-85880 and CVE-2026-81963, both allowing local privilege elevation. Other notable vulnerabilities include CVE-2026-55007 (8.1), CVE-2026-80097 (8.6), CVE-2026-69465 (8.8), and several with CVSS scores of 9.6 and above. Microsoft has patched a total of 2,760 security flaws this year, reflecting a trend of increasing vulnerability discoveries. Despite the extensive patching, no significant spike in active exploits has been observed.

Winsage

September 9, 2026

AI vibe coding is so fast that Microsoft had to change how it reviews Edge extensions

Users of Windows and Windows Phone previously faced an app gap, but the rise of artificial intelligence has led to increased development activity, creating challenges for Microsoft regarding the Edge browser. The ad blocker uBlock Origin has stopped functioning on Edge, similar to its status on Chrome. Microsoft revamped the Edge Add-ons site last year to improve user experience with a more intuitive interface and better categorization. This update allows users to find and install extensions more easily, and the Edge team is focused on maintaining quality amidst the growing number of extension submissions.

Winsage

September 9, 2026

Critical Windows BitLocker Flaw Sparks Urgent Patch

On September 8, 2026, Microsoft disclosed a security vulnerability identified as CVE-2026-69449, related to a heap-based buffer overflow in the Windows BitLocker component, allowing authorized attackers to execute code on compromised machines. The vulnerability is classified as CWE-122, and is assessed as “Exploitation Less Likely.” It affects Windows 10, Windows 11, and Windows Server versions from 2012 to 2025. The fixes are included in cumulative updates KB5124008, KB5124012, KB5122878, and KB5122871. No public disclosure or observed exploitation occurred before the patch's release. The flaw allows for remote code execution through in-network attacks, primarily posing a risk to insiders. Affected systems include various versions of Windows 10, Windows 11, and Windows Server, applicable to both x64 and ARM64 architectures. Administrators should verify installed build numbers to ensure updates have been applied. The advisory does not specify which BitLocker code path is affected or the nature of the input that reaches the vulnerable buffer.

Winsage

September 9, 2026

Microsoft’s Two-Track Patch Tuesday: Cloud Identity Flaws Fixed Before Disclosure, Windows Still Catching Up

The September 2026 security cycle revealed a bifurcated approach to vulnerability management by Microsoft, focusing on cloud-side identity services with silent mitigations and traditional Patch Tuesday updates for on-premises Windows infrastructure. On September 3, Microsoft addressed nine cloud-side vulnerabilities, including two with a CVSS score of 10.0: CVE-2026-83711 (Azure AD B2C elevation of privilege) and CVE-2026-70352 (Azure AI Language Authoring missing authentication). Additionally, CVE-2026-83941 (Entra ID elevation of privilege, rated 9.9) and CVE-2026-80098 (Copilot Studio cryptographic flaw) were noted. On September 8, the Patch Tuesday update addressed 70 CVEs, including critical issues in the on-premises stack, such as CVE-2026-83939 (Windows Secure Kernel Mode elevation of privilege). CVE-2026-69414 (ShieldBreak), an elevation of privilege vulnerability in the Defender Malware Protection Engine, was patched out-of-band on September 3 after being publicly exposed for three weeks. Microsoft is shifting its Self-Service Password Reset (SSPR) enforcement to default to passkeys as of September 7, with plans to phase out SMS and voice-based authentication by February 2027. This aims to enhance security by moving away from legacy credentials.

AppWizard

September 9, 2026

Android Auto Users Lose the Google Maps Feature They’ve Been Drooling Over for Years

Android Auto users are experiencing issues with Google Maps, particularly the disappearance of the speedometer feature after its recent integration. Some users report that the speedometer vanishes when navigation is disabled, while others find it completely absent. Additionally, critical navigation data, such as traffic light indicators, may also be missing. A persistent bug affecting traffic colors in Google Maps further complicates navigation. Users have shared varying experiences, with some finding that exiting beta versions of the apps resolves the issue. Google has not yet addressed these concerns, and an upcoming update for Google Maps is expected to enhance navigation features, including detailed maps and improved turn-by-turn instructions. The update is currently rolling out in the U.S. and Canada, with no timeline for other regions.

AppWizard

September 8, 2026

Sick of Sony killing physical games? Relive the glory days with a PlayStation 3 emulator that can play discs through your PC

The RPCS3 team has expanded their PlayStation 3 emulator to allow users to play PS3 discs on macOS, Linux, and FreeBSD, in addition to Windows. This update enables users to enjoy titles dating back to 2006 on modern hardware. Minimum specifications for a suitable PC include an Nvidia GTX 400 series or newer GPU. To set up the emulator, users need to install the RPCS3 software, download the PS3 system software, and acquire a decryption key from a community-maintained database. A Quickstart guide is available for installation, and additional resources can be found in forums and Reddit threads for troubleshooting.

AppWizard

September 8, 2026

Snail Games Announces Global Launch of Honeycomb: The World Beyond Across PC and Console Platforms

Snail, Inc. has launched a new science-fiction survival sandbox game called Honeycomb: The World Beyond, developed by Frozen Way Studio. The game is available on Steam, the Epic Games Store, PlayStation 5, and Xbox Series X|S. Key features include exploration of diverse alien biomes, a bioengineering system for creating new life forms, base building, laboratory research, resource discovery, and survival gameplay. The game incorporates advanced technologies from NVIDIA, such as RTXDI and DLSS 4.5, to enhance visual quality and performance. Frozen Way Games, based in Cracow, Poland, consists of over 80 team members dedicated to game development. Players can access the game through its official website and various social media platforms.

AppWizard

September 8, 2026

Waze on Android Auto is inexplicably hiding users’ navigation information

A navigation bug in Waze affects Android Auto users when switching to full-screen mode, causing essential journey information such as estimated time of arrival, arrival time, next navigation instruction, and remaining distance to disappear. The information temporarily reappears with alerts but vanishes again after the alert is dismissed. The cause of the glitch is uncertain, possibly related to a recent update to Android Auto or Waze.

Winsage

September 8, 2026

Microsoft is giving users control over Windows 11 again, but it’s not enough

Microsoft is prioritizing community feedback in the development of Windows 11 and is moderating its integration of artificial intelligence features due to user pushback. The company aims to enhance the overall efficiency of Windows 11, with a focus on improvements that can be realized both with and without AI. Despite these efforts, Windows 11 continues to be perceived as inferior to Windows 10, with many users remaining loyal to the older version due to its robust personalization options. Microsoft plans to restore some features from Windows 10, but upcoming personalization options for the Windows 11 Start menu will be limited to three fixed presets, unlike the more flexible options available in Windows 10.

AppWizard

September 8, 2026

Google is making sideloading harder, but Android fans aren’t giving it up

Sideloading, or installing apps from sources outside the Google Play Store, has become common among tech enthusiasts, who often use alternative app stores like GitHub and F-Droid for unique features. Breezy Weather is an example of an alternative app with enhanced capabilities compared to Pixel Weather. However, downloading and maintaining these apps can be more complex than using the Play Store. In response, Google has implemented new security measures for sideloading, including checks, a 24-hour installation delay, and mandatory device restarts. A recent poll with nearly 2,200 responses showed that 47.5% of participants believe the hassle of sideloading is always worth it, while 36.6% are willing to sideload select apps. Over 80% of respondents are open to navigating sideloading complexities, indicating a challenge for Google. Despite this, 16% of users rely exclusively on the Play Store, showing its continued relevance.