communication Archives

Winsage

March 3, 2026

PoC Exploit Released for Windows Error Reporting ALPC Privilege Escalation

A critical local privilege escalation vulnerability, tracked as CVE-2026-20817, affects Microsoft Windows through the Windows Error Reporting (WER) service. This flaw allows authenticated users with low-level privileges to execute arbitrary code with full SYSTEM privileges. The vulnerability resides in the SvcElevatedLaunch method (0x0D) and fails to validate user permissions, enabling attackers to launch WerFault.exe with malicious command-line parameters from a shared memory block. The exploit affects all versions of Windows 10 and Windows 11 prior to January 2026, as well as Windows Server 2019 and 2022. Microsoft addressed this vulnerability in the January 2026 Security Update. Organizations are advised to apply security patches and monitor for unusual WerFault.exe processes.

Winsage

March 2, 2026

NTLM is going away: what Microsoft’s phaseout means for MSPs and IT teams

The migration from NTLM to Kerberos authentication is essential for improving security in Windows systems, but it faces challenges such as legacy systems and hardcoded authentication. Organizations must identify NTLM usage, conduct testing with NTLM disabled, and make necessary adjustments or upgrades to migrate successfully. Ongoing monitoring is crucial post-migration to prevent NTLM from re-entering the network. NTLM is associated with significant security vulnerabilities and has been exploited by various threat groups, making its elimination a priority for organizations despite potential hesitations to invest in the migration process. Transitioning to Kerberos is seen as a strategic security investment.

AppWizard

March 1, 2026

For Project Zomboid players, the year-long wait for a stable build is nearly over

Project Zomboid's build 42 was released in an 'unstable' form in December 2024 and has not yet transitioned to a 'stable' state, despite the addition of multiplayer support in late 2025. Concerns have arisen within the community regarding the team's communication during this prolonged development. Christian 'Serellan' Allen became the new design director in late 2025 and aims to address these issues. He acknowledges the complexity of the game and the need for dedicated design leadership. The team is currently focused on bug fixes, balancing, and polishing build 42, with no specific release date for the stable version. Enhancements made under Allen's direction include a revamped right-click menu and planned balance adjustments for game modes. He emphasizes the importance of community feedback and intends to improve communication about the game's direction.

AppWizard

March 1, 2026

Signal Review 2026: Secure Messenger (Pros and Cons)

Signal is a secure messaging application known for its robust encryption protocols and user-centric features. It offers end-to-end encryption for messages, calls, and video chats, an open-source code for security verification, and an ad-free experience funded by donations. However, it has limitations such as fewer features compared to competitors, a requirement for users to register with their phone numbers, and occasional performance issues.

AppWizard

March 1, 2026

Meta is about to remove a feature millions of Messenger users still rely on

Meta has announced the closure of Messenger.com, which will cease operations in April 2026. After this date, users trying to access Messenger.com will be redirected to Facebook's primary messaging platform. The company has already discontinued its standalone Messenger desktop applications.

AppWizard

February 28, 2026

Centre’s SIM binding directive on app-based messaging platforms ‘unconstitutional’: Tech industry body BIF

The Broadband India Forum (BIF) has expressed legal concerns about the government's SIM binding mandate, stating it is "ultra vires the parent legislation" and "unconstitutional," based on a senior counsel's opinion. This opinion critiques the Telecommunications (Telecom Cyber Security) Amendment Rules, 2025, claiming they exceed the authority of the Telecommunications Act of 2023. The government's directive requires app-based communication services to maintain a link to a user's active SIM card, which BIF argues violates principles of due process and proportionality. BIF also highlights that the introduction of Telecommunication Identifier User Entities (TIUEs) alters the scope of telecom regulation improperly, potentially leading to legal conflicts with existing laws like the Information Technology Act. BIF concludes that the amendment rules represent an impermissible expansion of delegated authority under the Telecom Act, advocating for adherence to the statutory framework. The government's directive, aimed at addressing cyber security concerns, would change how users access messaging services in India.

AppWizard

February 28, 2026

Is Marathon’s time-to-kill too fast, or am I too Arc Raiders-pilled?

The author completed the original Mass Effect and shifted focus to extraction shooters, particularly Marathon, influenced by experiences in Arc Raiders. During the first 24 hours with Marathon, the author compared it to Arc Raiders, noting the challenging gameplay dynamics, including a fast time-to-kill (TTK) and the importance of teamwork. Initial frustrations with Marathon's pace shifted to appreciation as the author adapted strategies with friends. The game emphasizes sound and teamwork, with a TTK that feels punishing but manageable with squad support. The author reflected on the need for better resource management, expressing concerns about inventory issues and the early loss of loadouts. They suggested that Bungie should streamline gameplay to enhance the PvP experience.

AppWizard

February 27, 2026

Facebook designed an app for teens called Bell but never launched it, court records reveal

In 2018, Facebook proposed an app named Bell aimed at high school students to create a safe space for communication about school events and social interactions. Internal documents indicated that Facebook intended for Bell to engage teens and transition them to the main platform after graduation. The app was designed to include features like group chats, event organization, and an anonymous confessions section. Facebook aimed for Bell to reach 80% of U.S. high schools by the end of 2020, with plans to expand globally. However, the app was never developed, and a spokesperson described it as an early exploratory idea dependent on strong content moderation. Meta has faced legal challenges regarding the impact of its platforms on minors' mental health and has implemented features in its Teen Accounts to empower parental control.

AppWizard

February 26, 2026

How Your Android Apps Keep Talking — Even When You’re Not Using Them

When connecting to public Wi-Fi, using a VPN is essential as it encrypts traffic and creates a secure tunnel between the device and a remote server, keeping activities concealed from the local network. Android devices continuously communicate in the background, performing tasks such as updating emails and syncing notes, which increases data visibility on public networks. Public Wi-Fi has become common due to remote work and shared spaces, leading to increased privacy risks as smartphones now store sensitive information like banking apps and personal photos. Users are encouraged to adopt simple security habits, including using a VPN when connecting to public networks. Android devices are always connected, making network-level protection important to safeguard background communications.

AppWizard

February 26, 2026

Russia’s “Secure” Max App Flagged as Security Risk, Troops in Ukraine Told to Stop Using It

Russian military personnel in Ukraine have been advised against using the state-sponsored messaging application, Max, due to security concerns raised by pro-war military bloggers. Directives have been issued to prohibit the use and installation of Max, described sarcastically as the “most secure national messenger in the world.” An alternative communication program is expected to be introduced for frontline use, although details remain undisclosed. The Russian Digital Development Ministry has noted that while Telegram will not be blocked for troops, foreign intelligence agencies may access its correspondence, posing risks for the Russian military. The Federal Security Service has warned that Ukraine’s military could obtain information shared via Telegram, which could be used for tactical advantages.