classification Archives

AppWizard

July 16, 2025

Samsung fixes the Secure Folder flaw that let anyone see what apps you’re hiding

Samsung has addressed a vulnerability in its Secure Folder feature that previously allowed individuals with physical access to a device to view hidden apps and photos. This flaw arose from the Secure Folder being classified as a "work profile," which certain system components did not recognize as secure. With the release of One UI 8, Samsung has reclassified Secure Folder as a "private" profile, ensuring it is treated as a secure space by Google’s components. This change prevents unauthorized access to its contents, but the Secure Folder must be fully hidden for enhanced protection. However, it currently does not integrate with third-party launchers, as Samsung has not yet implemented the necessary APIs for compatibility.

Winsage

July 9, 2025

Microsoft Patch Tuesday, July 2025 Edition

Microsoft has released updates addressing 137 vulnerabilities across its Windows operating systems and supported software, with 14 classified as "critical." CVE-2025-49719 is a publicly disclosed information disclosure flaw affecting all SQL Server versions since 2016, posing a supply-chain risk due to its potential exploitation without authentication. SQL Server 2012 has reached its end of life, meaning no future security patches will be available. CVE-2025-47981 is a critical remote code execution vulnerability with a CVSS score of 9.8, affecting Windows clients and Windows Server. Microsoft also addressed four critical remote code execution vulnerabilities in its Office suite, including CVE-2025-49695 and CVE-2025-49696, which can be triggered through the Preview Pane. Other high-severity vulnerabilities include CVE-2025-49740, which could bypass Microsoft Defender SmartScreen, and CVE-2025-47178, allowing attackers to execute arbitrary SQL queries with minimal privileges. Adobe has also released security updates for various software, and users are advised to back up data before installing patches.

AppWizard

June 22, 2025

Steam Makes Sci-fi Game Free for Everyone

Space Pilgrim Episode II: Epsilon Indi, a sci-fi game released in 2016, is now available for free on PC until June 26. It is a sequel to Episode I and is normally priced at .99. The game has received 426 user reviews on Steam, with an 89 percent rating, earning a classification of “Very Positive.” The story follows Captain Pilgrim on a journey with various passengers, involving a shadowy government organization. Gameplay lasts a couple of hours and features straightforward fetch quest puzzles. Compatibility with the Steam Deck is currently listed as “Unknown.”

AppWizard

June 4, 2025

DMA decision ignored “objective reality” of Facebook Messenger, Meta claims

The European Commission has classified Facebook Messenger as a core platform service under the EU's Digital Markets Act. Meta argues that this classification fails to recognize the app's integration within the broader Facebook ecosystem, asserting that understanding its functionality requires considering its relationship with the Facebook platform. Meta's response indicates the complexities in defining digital services as regulatory frameworks evolve.

Winsage

May 22, 2025

Windows Server Flaw a Shortcut to Privilege Escalation

An unpatched vulnerability in Windows Server 2025, identified by Akamai researchers, is associated with a method called "BadSuccessor." This flaw, considered "trivial" to exploit and present in the default configuration, allows for privilege escalation and potential full domain compromise. The vulnerability arises from delegated managed service accounts (dMSA), which were intended to enhance security during the migration of legacy service accounts. However, dMSAs can inherit permissions from legacy accounts, enabling attackers to simulate a migration and gain access to the permissions and encryption keys of those accounts without verification. The attack requires prior permissions within an Active Directory organizational unit, indicating a previous breach. Akamai reported the vulnerability to Microsoft on April 1, but Microsoft classified its severity as "moderate." Akamai recommends organizations restrict the creation of dMSAs to mitigate risks associated with this vulnerability.

AppWizard

April 25, 2025

Data privacy firm files complaint against Ubisoft

The European Center for Digital Rights (NOYB) has accused Ubisoft of excessive data collection practices related to the game Far Cry Primal, which may violate GDPR regulations. Players reportedly connected to external servers 150 times within ten minutes of launching the game, including connections to Google, Amazon, and Datadog. Despite being a single-player game, it requires an internet connection for ownership verification. NOYB has expressed concerns about the lack of transparency regarding data transmission to external servers.

AppWizard

April 6, 2025

Pentagon inspector general investigating Hegseth’s use of Signal messaging app

DoD's acting Inspector General, Steven Stebbins, is reviewing Defense Secretary Pete Hegseth's use of the Signal app for operational airstrike discussions in Yemen to evaluate compliance with policies on commercial messaging for official communications and classification mandates. Concurrently, House Oversight Committee Democrats are investigating the Department of Government Efficiency's data usage, while OPM is directing agencies to revise performance review processes to prioritize adherence to presidential policies. The Defense Department has mandated public reporting of canceled contracts linked to Trump's efficiency initiatives. The SSA is tightening identity-proofing requirements for benefit applications, discontinuing phone verification options. During a nomination hearing, Trump’s nominees for OPM and OMB faced questions regarding federal workforce reductions. The Army has abandoned plans for a billion-dollar software development contract after feedback on draft RFPs. Employees at the IMLS have been placed on administrative leave amid concerns over the agency's future and grant disbursement obligations following Trump's executive order aimed at eliminating smaller entities.