command Archives

Winsage

September 28, 2026

Microsoft was better at software in the ’90s, and these still-useful Windows utilities prove it

Microsoft PowerToys originated during the development of Windows 95 as small programs created by engineers to test concepts and ease workloads. The first collection of PowerToys included tools like FindX, Send To X, and Tweak UI. System Configuration (MSConfig) helps isolate configuration and startup issues by allowing selective loading of services and startup components, remaining useful despite modern management shifting to Task Manager. Disk Cleanup was launched with Windows 98 to help users reclaim disk space, featuring commands that allow saving cleanup profiles, a functionality that persists in Windows 11. Task Scheduler, introduced in 1995 as System Agent in the Microsoft Plus! pack for Windows 95, automates tasks based on specific triggers. System File Checker (SFC), dating back to Windows 98, scans and repairs protected Windows resources, evolving from a graphical utility to a command-line tool. Device Manager provides an expandable tree of hardware components and reflects advancements in Microsoft's Plug and Play system from Windows 95, continuing to assist users in hardware inspection and troubleshooting. The DirectX Diagnostic Tool (DxDiag) was created for gamers in the late '90s to examine hardware and software configurations related to DirectX and remains available in Windows 11.

AppWizard

September 26, 2026

After Warcraft 3’s first new campaign in 23 years, let’s normalize releasing new DLC for ancient RTS games

The gaming landscape is experiencing renewed interest in older titles, as seen with expansions for classics like Songs of the Past for The Witcher 3. Cyberpunk 2077 and Baldur's Gate 3 are expected to remain relevant for years, making them candidates for future downloadable content. Quake has added a new episode, and Nightdive is remastering Thief. At BlizzCon 2026, the Warcraft 3 Reforged: Forsaken Kingdom expansion was announced, highlighting nostalgia for RTS games. Microsoft has revitalized the Age of Empires series with updates, while newer titles like Age of Empires 4 have struggled. Relic's Dawn of War: Definitive Edition has sold 750,000 copies, indicating demand for remastered RTS games. The remaster of Command & Conquer and Red Alert in 2020 shows the potential for nostalgia-driven content. Expanding existing titles like Rise of Nations and Supreme Commander could be beneficial, and while reactions to new content may be mixed, the concept has promise. The RTS genre has an opportunity to leverage its history while innovating for the future.

AppWizard

September 26, 2026

How to open the auxiliary lines in Part 6 of Silent Hill: Townfall

Players must acquire the key in the command center, using access code 0825, to enter the auxiliary room. Inside, they need to retrieve a floppy disk from a locker and input it into a terminal to reveal clues for operating levers. The levers must be positioned according to specific patterns for three auxiliary lines: - Auxiliary Line 1: - Pattern: vertical, horizontal, vertical, vertical, horizontal, vertical, horizontal, vertical, vertical. - Auxiliary Line 2: - Pattern: vertical, horizontal, horizontal, horizontal, vertical, horizontal, horizontal, vertical, vertical. - Auxiliary Line 3: - Pattern: horizontal, vertical, vertical, vertical, horizontal, vertical, horizontal, vertical. Correctly executing these patterns will illuminate the corresponding lights green, allowing players to progress. After completing the tasks, players should exit the auxiliary room and return to the elevator.

Tech Optimizer

September 25, 2026

This Mac malware is somehow using iCloud calendar invites to try and steal your data

Cybercriminals have developed an infostealer called MacSync, targeting Mac devices by using iCloud calendar events and cloud storage. This malware disguises itself as fake cryptocurrency wallets and pirated software. It begins with a loader that retrieves instructions from calendar entries and deploys malware to exfiltrate sensitive information, including credentials and cryptocurrency wallets. Recent versions have introduced an Objective-C backdoor that mimics Finder. Victims are often tricked into downloading these malicious applications, and effective antivirus solutions can prevent damage. Cybercriminals use tactics like SEO poisoning and phishing to direct victims to fraudulent websites or social media promoting pirated software. In one case, the loader was marketed as a cryptocurrency wallet, and victims encountered a misleading ClickFix error message that prompted them to execute a command in the Terminal.

BetaBeacon

September 24, 2026

Aniimo: Pokemon’s Rival Game Debuts On Android And iOS Bringin An Open World RPG

Aniimo is a game that allows players to explore the open world of Idilia, tame unique creatures, and transform into Aniimo using the Twine mechanic. The game features cross-progression support and has specific hardware requirements for Android and iOS devices.

Winsage

September 24, 2026

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor, codenamed UTA0565, has exploited newly disclosed vulnerabilities in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Windows (CVE-2026-85880) through deceptive websites, achieving remote code execution. The attacks were detected on September 3 and 4, 2026, and involved impersonating organizations to mislead victims, particularly targeting Asian government entities with phishing emails related to Hong Kong activist Chow Hang-tung. The phishing messages directed users to fraudulent sites that loaded an HTML element using the BlueMoon exploit kit, which delivered a payload named "chrome_cleanup.exe," associated with the CLEANGULP malware family. This malware allows for command execution, process listing, file uploads and downloads, and uses a hard-coded domain for command-and-control communications. The exploit's widespread use suggests a coordinated effort within the Chinese cyber espionage community, with indications that multiple groups are sharing and weaponizing the exploit.

Winsage

September 24, 2026

Microsoft force-installed three apps on Windows 11, and now you have to delete them yourself

In early 2025, Microsoft introduced three applications—“People,” “Files,” and “Calendar”—as part of its “Microsoft 365 companions” initiative to enhance productivity. These apps were integrated into the Windows 11 taskbar for managing Microsoft 365 features. Microsoft planned to automatically install these apps on eligible PCs starting in late October 2025, but later decided to discontinue them. The companion apps will be retired by December 16, 2026, and users must manually uninstall them as they will not be removed automatically. To uninstall, users can go to Windows Settings > Apps > Installed apps or use PowerShell commands.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a new Windows implant called CLOSEDQUORUM, which operates without human operators by using four commercial large language models (LLMs) to autonomously decide on actions after deployment. The implant is a 16.4-megabyte executable that conducts reconnaissance on the target system and sends structured prompts to the LLMs, which respond with one of four actions: steal, inject, persist, or move. When the "steal" action is chosen, it simultaneously attacks three credential stores, extracting Windows credentials, browser passwords, and cryptocurrency wallet data. The "inject" action uses either Early Bird APC injection or process hollowing based on model recommendations. For persistence, it employs three overlapping mechanisms, including a Registry Run key, a scheduled task, and a WMI event subscription. To evade detection, CLOSEDQUORUM suppresses ETW telemetry and introduces delays before executing actions. It circumvents traditional command-and-control structures by calling legitimate API endpoints, making blocking these domains impractical. Talos introduced the CAIRN toolkit for detecting AI-integrated malware, which operates on metadata and employs rule-based detection. Unlike previous AI-assisted malware, CLOSEDQUORUM automates decision-making processes entirely, highlighting a significant evolution in malware capabilities. Security teams are advised to focus on behavioral detection strategies and utilize the YARA rule and CAIRN toolkit for identifying this threat.

AppWizard

September 23, 2026

5 Unique Android Apps Worth Your Time

More than 70% of the world’s smartphones operate on the Android platform. Users often struggle to find apps that address specific issues, leading to a time-consuming search through numerous options. A curated list presents five applications that provide practical solutions to common mobile frustrations. 1. AppsFree: Monitors Google Play for premium apps, games, and wallpapers that temporarily drop to free, allowing users to snag deals that would otherwise be missed. Developed by ts-apps GmbH, it enables users to blacklist developers and filter low-quality offers. 2. Monocles Browser: Prioritizes user privacy by disabling JavaScript and cookies by default, reducing tracking. It has an APK size of approximately 13–14 MB and integrates ad blocking and supports Tor/Orbot proxy networks. Created by Arne-Brün Vogelsang, it offers a clean browsing experience. 3. Amarok: Allows users to instantly hide files and applications without resource-intensive encryption by obfuscating filenames and signatures. It supports multiple hiding modes and includes a “panic button” feature for quick data concealment. 4. Buckwheat: Budget manager: Requires manual input of total budget and days to cover, promoting financial reflection. It calculates daily spending allowances and provides detailed analytics. Developed by Danil Zakhvatkin, it has a user rating of around 4.6–4.7/5. 5. Chill Live Wallpaper: Offers minimalist landscapes that sync with local time and weather, providing a visually soothing experience. Compatible with Android 7.1+, it is ad-free and has a compact APK size of 5–6 MB.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a Windows implant called CLOSEDQUORUM, which automates cyberattack execution using four advanced commercial large language models: DeepSeek, Qwen, Mistral, and Google Gemini. The implant is a 16.4-megabyte executable that conducts reconnaissance on the system and formats the gathered data into prompts for the AI models. Each model votes on one of four actions: steal, inject, persist, or move, with the action receiving the most votes being executed. When stealing, CLOSEDQUORUM targets three credential stores, dumping LSASS memory and retrieving saved passwords from browsers and cryptocurrency wallets. The stolen data is encrypted and sent to the operator via Discord. For injection, it uses Early Bird APC injection or process hollowing based on model responses. The persist action creates three mechanisms for longevity, including a Registry Run key, a scheduled task, and a WMI event subscription. CLOSEDQUORUM evades detection by suppressing ETW telemetry and delaying activity to avoid sandbox analyses. It connects to legitimate API endpoints, making blocking ineffective without disrupting enterprise applications. Talos recommends behavioral combination detection strategies and the use of a YARA rule for detection. The CAIRN toolkit has been introduced to detect AI-integrated malware without executing binaries. Unlike previous AI-assisted malware, CLOSEDQUORUM removes human decision-making from the attack process.