commands Archives

Tech Optimizer

July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.

AppWizard

July 18, 2026

5 Motorola software features I wish were on every Android phone

Motorola's software, particularly the Hello UI, has been criticized for inadequate update practices but is recognized for its rich feature set that enhances user experience. Key features include: - Quick Gestures: Intuitive gesture controls allow users to launch the camera with a wrist twist and activate the flashlight with a double karate chop. - Desk Display: A feature for foldable devices that displays a clock or calendar alongside notifications without waking the phone. - Manual Material You: Customization options that allow users to personalize their device's appearance based on wallpaper colors, including a color wheel and pipette tool. - Media Controls: Users can control media playback without unlocking the phone by holding down the volume buttons. - Smart Connect: An app that enhances connectivity, allowing the phone to be used as a wireless webcam or secondary monitor, with voice command integration for screen sharing and app launching.

AppWizard

July 17, 2026

Minecraft 26.3 Snapshot 4

The window management, input, and platform integration library has been transitioned from GLFW to SDL3. New features include custom furnace fuels and enhancements to signs, world generation, and loot tables. Players in spectator mode can interact with portals for teleportation. Exclusive fullscreen mode on Windows may cause crashes with multiple monitors, and it crashes on Wayland. Minor tweaks have been made to blocks, items, and entities, including armadillos no longer rolling up in liquids. The Raw Input mouse setting has been removed, and mouse input will now use relative mode. Key bindings will use physical keys, and borderless fullscreen is now the default mode. Exclusive fullscreen mode is no longer supported on macOS, and the minimum window size has been set to 320 by 240 pixels. Linux systems will prefer Wayland if available. The debug overlay now supports a separate GUI scale and displays the player's speed and refresh rate. The Data Pack version is 111.0, and the Resource Pack version is 92.0. New components for cooking and brewing fuels have been added, and various bugs have been fixed to improve gameplay stability.

AppWizard

July 17, 2026

E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants

The European Commission has mandated that Google must provide equal access to rival AI assistants within its Android ecosystem, allowing them to use the same functionalities as Google's Gemini assistant. This includes access to the camera, microphone, and on-screen content, as well as background operation capabilities. Google is required to implement these changes in the upcoming Android 18 release by August 1, 2027. The directive includes two binding specifications under the Digital Markets Act, one of which requires Google to share anonymized search query, click, and ranking data with competing search engines and AI chatbots for a fee. The Android decision involves 11 operating system features, with five classified as restricted, requiring certification for third-party applications. These restricted features include access to on-device data shared by apps, context-aware intelligence, structured on-device integration, screen automation, and system integration. The remaining six features do not require certification, allowing broader access to ambient data, always-on hotword detection, long-press invocation, system-level on-device models, third-party model implementation, and background execution capabilities. Google must establish a Qualified AI Assistant Programme to facilitate access to gated features, allowing third-party Trusted Certification Authorities to certify assistants at no cost. The certification process must be fair and non-discriminatory, and users can consent to bypass the certification requirement for specific services and devices. By August 2027, both certified and user-approved uncertified assistants will be able to interact with applications on a virtual display. Google is also required to anonymize search data before sharing, ensuring user privacy and limiting data access to recipients who meet specific criteria. Kent Walker, Google's president of global affairs, expressed concerns about the security implications of granting external apps access to sensitive device permissions and criticized the anonymization methods for search data. The final measures reflect significant changes from earlier drafts, introducing more stringent requirements regarding data sharing and certification processes.

Winsage

July 16, 2026

Windows Netlogon Flaw CVE-2026-41089: CVSS 9.8 [2026]

CVE-2026-41089 is a critical vulnerability in the Windows Netlogon service, rated 9.8 on the CVSS scale, allowing unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on domain controllers. It affects all supported versions of Windows Server configured as domain controllers, from Windows Server 2012 R2 to the latest release. Microsoft addressed this vulnerability on May 12, 2026, during a broader update that included 138 fixes, but it went largely unnoticed until early June when active exploitation was confirmed. The vulnerability is characterized as a stack-based buffer overflow and is considered "wormable" due to its ability to self-propagate across systems without user intervention. Organizations are advised to patch all domain controllers and audit network access to mitigate exposure.

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

Winsage

July 15, 2026

Here’s how to update every app on your Windows PC with a single command

Updating Windows applications is important for accessing the latest features and protecting against vulnerabilities. Many users neglect this due to forgetfulness or the time-consuming nature of the process. The Microsoft Store and Windows Update usually provide updates for native Windows applications, but a unified method for updating all programs is lacking. Windows includes a command called winget (Windows Package Manager) that allows users to update all applications simultaneously via the command line. The command to update all apps is:


winget upgrade --all

This command updates both traditional installers and Microsoft Store apps. Users can also update individual apps by specifying the app ID, for example:


winget upgrade "Chrome"

To view all applications managed by winget, the command is:


winget list

To skip confirmation prompts during updates, users can use:


winget upgrade --all --accept-source-agreements --accept-package-agreements

For complete automation, users can create a task in Task Scheduler to run at startup with the following setup: 1. Open Task Scheduler and create a basic task named "Winget Auto Update." 2. Set the trigger to run when the computer starts. 3. Choose to start a program, entering PLACEHOLDER216a2cf34dab649d in Program/script and PLACEHOLDERbe861b18048fd836 in Add arguments. 4. Set the task to run with the highest privileges and add a 1-minute delay to ensure network connectivity. While winget does not cover every Windows application, it effectively manages most mainstream applications.

AppWizard

July 15, 2026

Magic Pointer app teardown uncovers how this Googlebook tool actually works

Google is set to launch Googlebooks, featuring an AI-powered Magic Pointer cursor that enhances user interaction by allowing users to point at their screens to communicate with Gemini, Google's AI system. The Magic Pointer app will not yet be operational on existing Android devices but will allow users to set the Google app as the default assist app and use a keyboard shortcut (Meta + g) for activation. The app will include gesture control for activation through a cursor wiggle, with sensitivity settings to prevent accidental activations. Magic Pointer will analyze user interactions to categorize intent into four core capabilities: Understand, Transform, Ideate, and Execute. It will generate up to three relevant suggestion chips based on user input, ensuring suggestions are contextually specific and framed from the user's perspective. For example, if a user inputs an image of a long email thread, the suggestions might include "Summarize key decisions," "Draft a reply," and "Suggest next steps." The output will consist solely of these suggestion chips without additional text or formatting.

BetaBeacon

July 13, 2026

The best Nintendo 3DS emulator on Android finally supports multiplayer games

The Azahar release brings changes to the Android app, including the Vulkan graphics renderer being forcefully enabled on devices using ANGLE for OpenGL rendering. This change is important for upcoming Android 17 devices that will switch to Vulkan-based rendering for most apps. Additionally, the update includes a combo button shortcut, improvements for dual-screen devices, tweaks for frame generation software, and GPU-related changes to improve accuracy.

AppWizard

July 12, 2026

I wish someone told me about these 5 Android Auto settings before I bought my new car

A 2003 PT Cruiser was replaced by a 2022 Hyundai Tucson after a transmission failure. The Hyundai Tucson features modern technology, including Android Auto. Key settings in Android Auto can enhance the user experience: 1. Taskbar Widgets: Enable taskbar widgets in the Android Auto settings to display miniature widgets for multitasking. 2. Launcher Customization: Rearrange the app drawer and hide infrequently used apps for a more organized interface. 3. Change Home Screen Layout: Adjust the layout to place the media app closer to the driver for easier access. 4. Play Media by Default: Disable the automatic playback of the last played media upon startup for more control over audio selection. 5. Gemini Actions: Create multi-step commands for tasks like navigation and media playback with a single command to streamline the driving routine.