command

Winsage
August 16, 2026
WMIC, a utility for IT administrators introduced in Windows XP in 2001, will be removed from Windows 11 after August 2026. It has been deprecated since 2016 and was previously removed from Windows 10 in 2021. Although it remained available as a Feature on Demand, it was disabled by default in new installations. Recent Preview builds for Windows 11 confirmed that WMIC will not be included in version 26H2. PowerShell is suggested as a prominent replacement for WMIC tasks.
AppWizard
August 16, 2026
Windows 11 update KB5121003, released in August 2026, addresses over 400 vulnerabilities but has caused crashes in games like ARC Raiders and The Finals. The game studio Embark has confirmed that the crashes are linked to the inpoutx64.sys driver, which has compatibility issues due to the update. Users have reported errors such as “Hang detected on GameThread” and “EXCEPTIONACCESSVIOLATION” after installing the update. Embark has provided a workaround to stop and delete the inpoutx64.sys service to resolve the crashes. Uninstalling the update also appears to fix the issue. Additional reports indicate crashes in other games and graphics-related problems following the update.
Winsage
August 14, 2026
CoolClient is a sophisticated backdoor family linked to the HoneyMyte APT group, actively used in cyber-espionage campaigns targeting organizations in Asia and Russia since its initial disclosure in 2022. It has capabilities such as keylogging, clipboard theft, credential harvesting, and system reconnaissance. Investigations in 2023 revealed enhancements, including clipboard theft and HTTP traffic interception. By late 2025 and into 2026, a variant was noted that could deploy a signed kernel-mode driver as a Windows service, improving its stealth and operational capabilities. In a recent campaign targeting Myanmar, the HoneyMyte group used PlugX to deploy CoolClient components. They configured Microsoft Defender to exclude a fake Windows Defender installation directory and a renamed executable, defender.exe, to avoid detection. Persistence was achieved through a scheduled task that executed defender.exe with SYSTEM privileges at startup, which sideloaded the malicious libngs.dll to initiate the CoolClient execution chain. The latest CoolClient variant has a multi-stage execution chain, including: - defender.exe / Sang.exe: Exploited legitimate application for DLL sideloading. - libsrapc.dll: Benign dependency for the Sangfor application. - libngs.dll: First-stage loader that decrypts and loads the next stage. - loadcert.ini: Second-stage DLL implementing core functionalities. - cert.ini: Final-stage implant for command and control communication. - time.ini: Configuration file for CoolClient. The execution begins with the legitimate Sangfor application loading libngs.dll, which uses obfuscation to conceal its operations. The second stage, loadcert.ini, is injected into synchost.exe and performs tasks including persistence and process injection. The kernel-mode driver deployment routine involves decrypting time.ini, verifying privileges, and creating a service to execute the driver, enhancing stealth. The deployed kernel-mode driver, msagent.sys, is digitally signed and helps hide processes, files, and registry objects, making detection more difficult. The latest variant continues to target organizations consistent with previous HoneyMyte activities, with confirmed victims in Myanmar, Mongolia, Pakistan, and Russia, including government entities. The deployment of CoolClient as a secondary backdoor after a PlugX infection indicates a strategic approach to maintain access to compromised systems. The malware is confirmed as a new variant of CoolClient associated with the HoneyMyte threat group, with the kernel-mode driver marking a significant advancement in its capabilities.
AppWizard
August 13, 2026
The latest update for Helldivers 2, titled Devoid of Liberty, introduces a new level cap raised from 150 to 300 and adds 15 new titles for players to unlock. Players will receive a new title every 10 levels, with the titles being: - Level 160: 5-Star Super Private - Level 170: 10-Star Super Private - Level 180: Ranger - Level 190: Ranger, Eagle Class - Level 200: Ranger, Bald Eagle Class - Level 210: Divemaster - Level 220: First Divemaster - Level 230: Divemaster Major - Level 240: Command Divemaster Major - Level 250: Master Divemaster - Level 260: Master Divemaster Major Omega - Level 270: Max Rank - Level 280: Max Rank Infinity - Level 290: Max Rank Infinity +1 - Level 300: Rank 300 Experience points earned beyond Level 150 have been banked, allowing players to potentially unlock several titles immediately after the update.
Search