components Archives

Winsage

April 19, 2026

Microsoft is giving Windows 11 File Explorer a speed boost, dark mode fix, and reducing explorer.exe crashes

Microsoft is updating Windows 11 by improving File Explorer, focusing on performance and user experience. The latest release, Windows 11 Build 26200.8313, shows File Explorer loading faster and eliminating white flashes in dark mode. This build is currently for Windows Insiders, with public availability expected in April 2026 and further updates in May 2026. The update enhances speed, manages themes better, and adds support for new archive formats like cpio, uu, xar, and nupkg. Reliability improvements have reduced crashes related to explorer.exe, and new features include a preview option for internet-downloaded files, a redesigned search bar, and immediate reflection of folder view preferences.

Winsage

April 18, 2026

Microsoft’s Patch Tuesday release for April is a whopper

A series of updates have been released, focusing on system integrity and performance. Users should perform verification tasks, including installing, uninstalling, and repairing MSI packages, connecting and disconnecting cloud sync providers, and enrolling devices in Intune or MDM solutions. The Common Log File System driver (clfs.sys) is receiving a follow-up patch, along with updates to Storage Spaces (spaceport.sys) and app isolation file system drivers (bfs.sys, wcifs.sys). Users should also run Windows Update installation and rollback cycles, install and uninstall applications, and verify data integrity through backup solutions. For Storage Spaces, creating a pool with mirrored and thin virtual disks and ensuring clean deletion is necessary. April's updates for Office target MSI editions, including Excel 2016 (KB5002860), PowerPoint 2016 (KB5002808), Office 2016 shared libraries (KB5002859), and SharePoint Server editions from 2016 to 2019. These updates do not apply to Click-to-Run deployments like Microsoft 365 Apps. Users should validate complex Excel workbooks, PowerPoint presentations, SharePoint document libraries, and the functionality of Office add-ins. Testing for two High Risk components is essential: changes to Kerberos may disrupt services using RC4 keytabs, and the Remote Desktop client update requires validation of clipboard functionality, printer redirection, and session reconnection. Validating Secure Boot and BitLocker is critical as CVE-2023-24932 key rolling progresses. Additionally, cloud sync testing is important due to five patches to the Projected File System driver, and regression testing is needed for dual afd.sys updates and VPN/IPsec patches across remote-access infrastructure. Office updates are limited to MSI editions.

AppWizard

April 18, 2026

This is not a drill: All-timer weirdo game Deadly Premonition now playable on Linux as of Valve’s most recent Proton beta, plus 17 others and your EA library (until EA breaks it again)

Proton 11 beta 1 has been released by Valve, enhancing the Steam Deck and Linux desktops, and incorporating features from Wine 11. This update includes an initial Arm64 version of Proton, with plans for implementation in the upcoming Steam Frame. Some Windows games may perform better on Linux with this update. Newly playable games include "Unknown Faces," "Gothic 1 Classic," "X-Plane 12," "Breath of Fire IV," and "Deadly Premonition." The update also fixes various issues, such as video playback in "She Sees Red," rendering problems with the Ukrainian language option in "Chambers," and voice chat issues in "Phasmophobia." Improvements have been made in VR support for "No Man's Sky," and many other gameplay and performance enhancements have been implemented across various titles. Proton 11 beta 1 is based on Wine 11.0 and includes updates to several components, including vkd3d, dxvk, and Wine Mono.

Winsage

April 18, 2026

RedSun: Windows 0day when Defender becomes the attacker

A vulnerability has been discovered in Windows Defender that allows standard users to exploit a logic error in the file remediation process, enabling code execution with elevated privileges without administrative access. This flaw, identified by security researcher Chaotic Eclipse, occurs because Windows Defender does not verify if the restoration location of flagged files has been altered through a junction point. The exploit, named RedSun, takes advantage of a missing validation in the MpSvc.dll file, allowing attackers to redirect file restoration to the C:WindowsSystem32 directory. RedSun operates by chaining together four legitimate Windows features: Opportunistic Locks (OPLOCKs), Cloud Files API, Volume Shadow Copy Service (VSS), and Junction Points. The execution of the exploit involves monitoring shadow copies, triggering Defender's detection, synchronizing OPLOCKs, and ultimately writing malicious binaries to the System32 directory. The root cause is the lack of reparse point validation in the restoration process, and currently, no patch or CVE has been assigned for this vulnerability. It affects Windows 10, Windows 11, and Windows Server 2019 and later, and organizations are advised to implement behavioral detection strategies until a fix is available.

Winsage

April 17, 2026

Windows 11’s New Xbox Mode is Now Available for More Insiders

Microsoft is expanding the Xbox Mode, previously known as the Xbox Full Screen Experience, to more Insiders, including those on the Canary and Release Preview Channels. The new Xbox Mode can be activated through the Xbox app, Game Bar settings, or by pressing Win + F11, providing a full-screen interface for PC games. The Canary build 29570.1000 also introduces a new Touchpad setting for adjusting the right-click zone size and expands lock screen widget personalization options. For Canary testers on the 28000 series builds, the build 28020.1863 addresses a sign-in issue without introducing new features. The Dev and Beta Channels are receiving updates focused on reliability, including improvements to File Explorer and Windows Hello. The Release Preview Channel is previewing an upcoming optional April update that includes the new Xbox Mode, File Explorer enhancements, haptic feedback for certain pens, a rebranded Drop Tray, taskbar monitoring for AI agents, and revamped voice typing features. Additional reliability enhancements are included for various Windows components.

AppWizard

April 17, 2026

My full guide to Pragmata after spending 18 hours shepherding my space daughter

Pragmata features a blend of nostalgia and innovation in gaming, with early levels that have a linear design and complex currencies. A notable gameplay mechanic is hacking, which increases damage to enemies and turns them into 'OPEN' targets, especially useful against bosses. The weapon system allows players to equip four types of firearms, with some functioning as consumables. Healing is managed through limited Repair Canisters, which can be replenished at the Cradle hub area. The Shelter serves as a central hub for upgrades and interactions, with players able to enhance it and unlock new facilities. Various activities and collectibles are available, including challenge arenas and hidden items. A New Game+ mode becomes available after completing the main storyline, allowing players to restart with all gear and upgrades, alongside a more challenging difficulty setting. The game has an approximate playtime of ten hours for the main story and up to 20 hours for full completion.

Winsage

April 17, 2026

What to do when device settings don’t migrate to Windows 11

On October 10, 2025, Microsoft ceased support for Windows 10, ending technical assistance, feature updates, and security updates. Organizations are required to transition to Windows 11. During the migration, IT administrators may face errors indicating that certain device settings were not successfully migrated, which can disrupt user experience. Causes of these errors include outdated or incompatible device drivers, failing physical components, incompatible software, restrictive group policies, missing registry keys, and interference from third-party tools. Affected devices may malfunction, impacting productivity. IT teams can troubleshoot these issues by restarting computers, identifying problematic devices using Device Manager, verifying and updating device drivers, checking physical devices, ensuring the operating environment is up to date, utilizing Microsoft command-line utilities, and performing clean boots or system restores if necessary.

AppWizard

April 16, 2026

Spotify rolls out redesigned app for tablets, works on most foldables too [Gallery]

Spotify has redesigned its tablet app, now available to all users, enhancing the experience for tablets and select Android foldable devices. The new design features a dedicated "Now Playing" panel on the right side of the screen and a transformed bottom navigation bar divided into two sections for improved accessibility. The redesign is compatible with certain foldable devices, including the Galaxy Z Fold 7, Honor Magic V6, and Pixel 9 Pro Fold, while some devices like the Oppo Find N6 are not supported due to optimization challenges. Additionally, Spotify launched a revamped Wear OS app earlier this year.

Winsage

April 16, 2026

A zero-day BlueHammer Windows exploit was leaked by a researcher fed up with Microsoft’s Security Response Center — and the rushed fix isn’t perfect

On April 2, 2026, a security researcher named Chaotic Eclipse announced a zero-day Windows exploit called BlueHammer, which allows attackers to gain SYSTEM privileges. Will Dormann, a principal vulnerability analyst, confirmed the exploit's functionality. Chaotic Eclipse criticized the Microsoft Security Response Center (MSRC) for its perceived incompetence, suggesting that prior attempts to resolve the issue privately were ignored. Dormann indicated that budget cuts at Microsoft may have led to a decline in the quality of the MSRC. BlueHammer was neutralized in the Windows 11 CVE-2026-33825 update released on April 14, 2026, but some components may still exist.

AppWizard

April 16, 2026

Your Android phone could soon get a better way to sniff out spoofed calls

Google is enhancing the security of incoming calls on Android devices by integrating a "Verified Caller" feature into Google Play Services. This feature aims to combat scam calls that use Do-Not-Originate (DNO) numbers by cross-referencing incoming calls against a database of DNO numbers to flag potential scams. The system will work with existing applications, such as banking apps, to monitor specific DNO numbers. The feature is still in development and its effectiveness will depend on business participation and strict verification processes by Google.