NewApp Digest
search bot

command

New Windows Zero‑Day Flaws Target Defender and BitLocker
Winsage
June 15, 2026

New Windows Zero‑Day Flaws Target Defender and BitLocker

A cybersecurity researcher known as “Nightmare Eclipse” has revealed two zero-day exploits threatening Windows systems: RoguePlanet and GreatXML. RoguePlanet targets Microsoft Defender, allowing attackers to execute privileged actions and gain SYSTEM-level access on Windows machines. It is a local privilege escalation vulnerability that remains effective on fully updated systems. GreatXML claims to bypass BitLocker disk encryption by manipulating the Windows Recovery Environment, potentially granting access to protected files. However, its effectiveness may be overstated, as it might require administrator-level access. Microsoft advises organizations to implement security updates, treat lost or accessible devices as high-risk, enforce stricter policies, and monitor threat intelligence to mitigate exposure to these vulnerabilities.
Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores
AppWizard
June 15, 2026

Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores

A trojan named Android.MagicAd.1 has been identified as a significant threat to Android users, capable of delivering persistent background advertisements by circumventing built-in defenses. Detected in 2025, it has spread through over 50 infected games and utility applications, infiltrating both dubious download sites and official app stores like the Samsung Galaxy Store and Xiaomi’s GetApps. The malware employs a strategy of rotating applications to evade detection, remaining active on user devices after download. It uses hidden, encrypted components within native code libraries and conducts environment checks to avoid monitoring before launching its payload. Android.MagicAd.1 bypasses Android's restrictions by targeting trusted system applications, utilizing methods that vary by device manufacturer. For example, it uses a delayed system command on Xiaomi and Amazon devices, exploits Android Binder on Vivo devices, and employs a universal fallback method for other brands to gain priority for displaying ads. All identified malicious applications have been removed from official stores, but the campaign highlights the vulnerability of security software.
I tried Microsoft’s new AI-powered Terminal, and it is a surprisingly different experience
Winsage
June 13, 2026

I tried Microsoft’s new AI-powered Terminal, and it is a surprisingly different experience

Windows 11 has introduced a new command-line tool called "Intelligent Terminal," which is a fork of the open-source Windows Terminal project and integrates an AI agent, specifically GitHub Copilot by default. Users must manually download and install the Intelligent Terminal, which retains the familiar Windows Terminal interface but adds a side panel for AI interaction. Upon first launch, users select an Agent Client Protocol (ACP) compatible agent, with options to enable features like automatic error detection and session management. The Intelligent Terminal offers two main experiences: agent chat and agent management. The agent chat pane allows users to inquire about errors and receive assistance, while the agent management pane tracks active and past agent sessions. Users can also utilize other agents like Claude Code, Google Gemini, and OpenAI Codex, provided they are installed locally. The Command Palette is enhanced with AI actions, allowing users to initiate tasks without interrupting their workflow. Users can customize terminal and agent settings, including pane position and error detection features. Adjustments require saving to apply changes.
Is Facebook down? Live updates as Messenger and Meta apps offline in major outage
AppWizard
June 13, 2026

Is Facebook down? Live updates as Messenger and Meta apps offline in major outage

Meta's communications chief, Andy Stone, has acknowledged ongoing issues with Facebook but assured users that the company is working to address these challenges. Anecdotal evidence suggests that service is gradually being restored, with some users able to access the platform while others continue to experience difficulties. Facebook outages, though infrequent, can significantly impact its 3.6 billion daily users, as seen in a notable seven-hour outage in 2021 caused by an erroneous command. The recent outage has been described as one of the most significant in recent history, affecting millions globally. Instagram and WhatsApp were also impacted, though they are functioning better than Facebook, with users encountering loading issues on their web versions. During the outage, Facebook displayed a retro-style error page, indicating the service's temporary unavailability.
Even a fantasy game like Skyrim won't let me be a trillionaire
AppWizard
June 13, 2026

Even a fantasy game like Skyrim won’t let me be a trillionaire

Elon Musk has been announced as the world's first trillionaire. In gaming, no title has allowed players to reach trillions in virtual currency, with Balatro being one of the few games where a player can accumulate billions. In Skyrim, using the console command player.additem with the item code for gold (0000000f) to add one trillion gold pieces results in the character going into over 2 billion gold in debt due to the game's coding limitations. Skyrim's gold is represented as a 32-bit signed integer, which has a maximum value of 2,147,483,647. Exceeding this value causes the amount to flip from positive to negative.
Hackers Use Fake Windows Update Installers to Deliver OnyxC2 Credential Stealer
Winsage
June 12, 2026

Hackers Use Fake Windows Update Installers to Deliver OnyxC2 Credential Stealer

OnyxC2 is a sophisticated credential stealer available for a subscription fee of 0 per month, distributed through disguised lures such as fake Windows updates and legitimate software installers. It functions as a commercial product with features like an automated payload builder, tiered licensing, and a centralized web dashboard. The malware boasts a 99% detection-evasion rate, successfully evading major antivirus solutions during tests. It is developed in C++, utilizing direct system calls and mutating with each build to avoid detection. OnyxC2 collects data from around 210 applications, targeting 45 web browsers, password managers, cryptocurrency wallets, and FTP clients. The malware is delivered using DLL sideloading, where a password-protected archive contains a legitimate application and a malicious DLL. The attacker's DLL is disguised by inflating its size and is loaded by a trusted binary. The malicious code remains encrypted on disk and decrypts in memory to evade analysis. OnyxC2 communicates with a Cloudflare-fronted command-and-control server to manage infected hosts and execute commands like hardware registration and cookie uploads. The threat extends to business environments, targeting FTP and email clients, with stolen session cookies allowing ongoing access to corporate infrastructure. Implementing anti-data exfiltration controls is recommended as a mitigation strategy.
Search