command

AppWizard
June 15, 2026
A trojan named Android.MagicAd.1 has been identified as a significant threat to Android users, capable of delivering persistent background advertisements by circumventing built-in defenses. Detected in 2025, it has spread through over 50 infected games and utility applications, infiltrating both dubious download sites and official app stores like the Samsung Galaxy Store and Xiaomi’s GetApps. The malware employs a strategy of rotating applications to evade detection, remaining active on user devices after download. It uses hidden, encrypted components within native code libraries and conducts environment checks to avoid monitoring before launching its payload. Android.MagicAd.1 bypasses Android's restrictions by targeting trusted system applications, utilizing methods that vary by device manufacturer. For example, it uses a delayed system command on Xiaomi and Amazon devices, exploits Android Binder on Vivo devices, and employs a universal fallback method for other brands to gain priority for displaying ads. All identified malicious applications have been removed from official stores, but the campaign highlights the vulnerability of security software.
Winsage
June 13, 2026
Windows 11 has introduced a new command-line tool called "Intelligent Terminal," which is a fork of the open-source Windows Terminal project and integrates an AI agent, specifically GitHub Copilot by default. Users must manually download and install the Intelligent Terminal, which retains the familiar Windows Terminal interface but adds a side panel for AI interaction. Upon first launch, users select an Agent Client Protocol (ACP) compatible agent, with options to enable features like automatic error detection and session management. The Intelligent Terminal offers two main experiences: agent chat and agent management. The agent chat pane allows users to inquire about errors and receive assistance, while the agent management pane tracks active and past agent sessions. Users can also utilize other agents like Claude Code, Google Gemini, and OpenAI Codex, provided they are installed locally. The Command Palette is enhanced with AI actions, allowing users to initiate tasks without interrupting their workflow. Users can customize terminal and agent settings, including pane position and error detection features. Adjustments require saving to apply changes.
AppWizard
June 13, 2026
Meta's communications chief, Andy Stone, has acknowledged ongoing issues with Facebook but assured users that the company is working to address these challenges. Anecdotal evidence suggests that service is gradually being restored, with some users able to access the platform while others continue to experience difficulties. Facebook outages, though infrequent, can significantly impact its 3.6 billion daily users, as seen in a notable seven-hour outage in 2021 caused by an erroneous command. The recent outage has been described as one of the most significant in recent history, affecting millions globally. Instagram and WhatsApp were also impacted, though they are functioning better than Facebook, with users encountering loading issues on their web versions. During the outage, Facebook displayed a retro-style error page, indicating the service's temporary unavailability.
AppWizard
June 13, 2026
Elon Musk has been announced as the world's first trillionaire. In gaming, no title has allowed players to reach trillions in virtual currency, with Balatro being one of the few games where a player can accumulate billions. In Skyrim, using the console command player.additem with the item code for gold (0000000f) to add one trillion gold pieces results in the character going into over 2 billion gold in debt due to the game's coding limitations. Skyrim's gold is represented as a 32-bit signed integer, which has a maximum value of 2,147,483,647. Exceeding this value causes the amount to flip from positive to negative.
Winsage
June 12, 2026
OnyxC2 is a sophisticated credential stealer available for a subscription fee of 0 per month, distributed through disguised lures such as fake Windows updates and legitimate software installers. It functions as a commercial product with features like an automated payload builder, tiered licensing, and a centralized web dashboard. The malware boasts a 99% detection-evasion rate, successfully evading major antivirus solutions during tests. It is developed in C++, utilizing direct system calls and mutating with each build to avoid detection. OnyxC2 collects data from around 210 applications, targeting 45 web browsers, password managers, cryptocurrency wallets, and FTP clients. The malware is delivered using DLL sideloading, where a password-protected archive contains a legitimate application and a malicious DLL. The attacker's DLL is disguised by inflating its size and is loaded by a trusted binary. The malicious code remains encrypted on disk and decrypts in memory to evade analysis. OnyxC2 communicates with a Cloudflare-fronted command-and-control server to manage infected hosts and execute commands like hardware registration and cookie uploads. The threat extends to business environments, targeting FTP and email clients, with stolen session cookies allowing ongoing access to corporate infrastructure. Implementing anti-data exfiltration controls is recommended as a mitigation strategy.
Winsage
June 12, 2026
Microsoft resolved an issue affecting the installation of Windows updates released since May 2025, which primarily impacted users using the Windows Update Standalone Installer (WUSA) from a network share, especially in enterprise environments. The problem was significant for devices running Windows 11 24H2/25H2 and Windows Server 2025, but did not occur when handling a single .msu file or when files were stored locally. In August 2025, Microsoft acknowledged that updates installed using WUSA might fail with error ERRORBADPATHNAME when multiple .msu files were involved. A Known Issue Rollback Group Policy was implemented in September 2025 to mitigate the impact on home and non-managed business devices. The issue was ultimately resolved with cumulative updates released in June 2026 for Windows 11 (KB5079391) and Windows Server 2025 (KB5094125). Microsoft provided a workaround for users experiencing difficulties with prior updates by suggesting they save .msu files locally for installation. Users were also advised to wait at least 15 minutes after installing an .msu file via WUSA before checking the Update History page. Additionally, Microsoft had previously addressed another issue in April 2025 that affected enterprise customers installing security updates via WSUS, which recurred in the August 2025 updates. Microsoft warned customers about potential issues with installing the latest monthly updates on devices upgraded to Windows 11 24H2 or 25H2.
Search