configuration Archives

Winsage

September 22, 2026

Microsoft admits Windows 11’s emergency update still breaks audio, and a fix may not arrive until October

Windows 11 is facing ongoing challenges with audio functionality following recent updates, particularly with the emergency update KB5129195 released on September 14. This update aimed to fix issues from the September Patch Tuesday update (KB5124008) but has led to new problems, including compromised audio output on some devices and disruptions in secure trust relationships for enterprise systems. Users have reported error messages like “This device cannot start (Code 10)” in Device Manager, and issues with USB audio devices. Microsoft is investigating these audio problems but has not provided a timeline for resolution. Additionally, there are reports of GPU issues on AMD systems, including driver timeouts and black screens, affecting various Radeon models such as RX 6600, RX 7700 XT, RX 7800 XT, RX 7900 GRE, RX 7900 XTX, and RX 9070 XT. Some users found that uninstalling the September update alleviated these problems, but the emergency update KB5129195 does not address the GPU errors.

Tech Optimizer

September 21, 2026

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

On September 17, researchers from LastPass and Delphos Labs discovered a counterfeit LastPass Authenticator installer on GitHub that installs a malicious Windows kernel driver designed to disable antivirus and steal passwords. The driver, named Alinubx.sys, was signed through Microsoft's hardware compatibility program and initially scored zero detections on VirusTotal. The fake installer is hosted on a fraudulent GitHub page that mimics a legitimate LastPass product page. When executed, the installer uses DLL side-loading to gain SYSTEM-level access and terminates security processes, allowing it to harvest saved passwords from various browsers and applications. The driver is a renamed variant of a known malicious driver, evading detection due to its new file hash. Delphos reported the driver to Microsoft, but it was not considered a security vulnerability. Users who executed the fake installer should treat their passwords and sensitive data as compromised and change them from a secure device. The malicious server has been linked to impersonation pages for multiple brands, and the loader was likely created using a specific crypter tool.

AppWizard

September 21, 2026

When Memory Becomes a Release Metric: Preparing Android Apps for Google Play’s New Limits

In August 2026, Google Play announced new performance requirements for memory management that will be enforced starting February 2027. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization. Applications that exceed these thresholds may face reduced visibility and publishing capabilities on the platform. Dynamic memory usage is defined as the sum of anonymous RSS and swap, excluding file-backed data. Google is focused on whether applications retain non-visible bitmaps and requires at least 25% coverage in DEX optimization. Memory issues can be difficult to reproduce, and developers are encouraged to use Android Studio’s Memory Profiler to investigate memory growth. A thorough investigation involves monitoring memory changes, taking heap dumps, and understanding reference paths. Bitmap memory should be carefully managed, as the runtime cost of images can exceed their file size. Google will provide real-world memory metrics through the Play Console, and teams are advised to establish memory budgets and perform pre-release checks to identify potential issues before they lead to out-of-memory (OOM) crashes.

BetaBeacon

September 20, 2026

MuMu Player vs GameLoop vs KOPLAYER: Android 15 Gap

Android emulators for PC have become a crowded market with close to a dozen actively maintained clients. Tencent and NetEase have first-party products like GameLoop and MuMu Player to control the PC on-ramp to their mobile catalogs. Independent players like BlueStacks and LDPlayer focus on platform-agnostic performance and feature breadth. KOPLAYER appears to be abandoned in 2026 with no updates, functioning website, or active development. MuMu Player supports Android 15, offering newer features for mobile games. GameLoop is focused on Tencent's mobile titles with updated documentation. MuMu Player and GameLoop are free, while KOPLAYER is also historically free. MuMu Player and GameLoop have ongoing updates and security, while KOPLAYER's lack of updates poses a security risk.

Winsage

September 19, 2026

Microsoft Surface Pro 13″ (12th Edition) Review: Is ARM Windows Finally Good?

The 13-inch Microsoft Surface Pro 12th Edition is the first model to feature Qualcomm’s Snapdragon X2. The review unit has an X2 Plus processor, 16 GB of RAM, and a 512 GB SSD. It runs Windows 11 Home in its ARM variant, allowing for the installation of applications like Adobe Photoshop and Premiere Pro, which now run natively. However, some limitations exist, such as missing features in Premiere Pro and longer export times. The device is available in two configurations, with the higher-end variant featuring the X2 Elite processor. Benchmark results show improved performance over its predecessor, particularly in Geekbench 6. The easily swappable SSD is a notable feature, and the device can become warm during intensive tasks. The gaming performance is mixed, with some titles running well while others struggle. The display is a 13-inch PixelSense LCD with a resolution of 2,880 x 1,920 pixels and a brightness level of 600 nits. The audio features stereo speakers with Dolby Atmos. The build quality is premium, with a weight of 895 grams and a thickness of 9.3 millimeters. Connectivity includes two USB-C ports with USB4 and DisplayPort capabilities, but lacks USB-A and a headphone jack. The device has an IR scanner for face recognition and a front camera that captures 1440p video. It offers three keyboard options and includes the Slim Pen 2 in some bundles. Battery life is approximately 7.15 hours while looping an HD YouTube video at maximum brightness, with efficient charging options available.

Winsage

September 19, 2026

Web apps are freezing in Microsoft Edge, and the fix is a real hassle

Users are experiencing freezing issues with web applications on PCs due to a bug in Microsoft Edge version 153, which causes windows to become unresponsive to mouse and keyboard inputs. Microsoft has acknowledged the problem and suggested reverting to version 152 as a temporary solution. To downgrade Microsoft Edge, users must disable updates through the Group Policy Editor, download the MSI file for version 152, and execute a rollback command in the Windows command prompt. After completing these steps, users can verify the version of Microsoft Edge to confirm the rollback.

Winsage

September 19, 2026

These 4 built-in Windows tools helped me build a self-healing PC

Windows operating systems include built-in tools for maintaining PCs, allowing users to monitor system health, repair corrupted files, and recover from boot failures with minimal intervention. Task Scheduler automates maintenance tasks by triggering them based on schedules or events, accessible via the Start menu or taskschd.msc. It can activate tasks at fixed intervals, on startup, during idle periods, or in response to Event Viewer entries. Tasks should run with the highest privileges and can be configured to execute regardless of user sign-in status. The Settings tab allows missed tasks to run as soon as possible. DISM (Deployment Image Servicing and Management) is a command-line utility that repairs the component store, essential for installing updates and restoring system files. It offers three inspection levels: CheckHealth, ScanHealth, and RestoreHealth, with the latter requiring an internet connection for downloading replacement files. DISM logs operations in C:WindowsLogsDISMdism.log. SFC (System File Checker) verifies and repairs core operating system files using Windows Resource Protection. The command sfc /scannow checks all protected files, while /verifyonly provides a report without changes. SFC's effectiveness depends on the integrity of the component store, making it essential to run DISM first. Results are logged in C:WindowsLogsCBSCBS.log. Quick Machine Recovery (QMR), introduced in Windows 11, addresses boot failures by connecting to the internet to find solutions when repeated boot failures are detected. QMR is enabled by default on unmanaged devices and can continuously check for fixes. It is designed to respond to widespread issues rather than unique problems and may not work effectively on older hardware or without a network connection. Together, these tools provide a comprehensive approach to system maintenance in Windows 11, ensuring the operating system remains healthy and efficient without additional software.

AppWizard

September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.

Winsage

September 17, 2026

The real reason your Windows 11 taskbar couldn’t move for 5 years

Windows 11 did not inherit significant portions of the legacy Win32 code, leading Microsoft to rebuild the taskbar from scratch, focusing on essential functionalities. The task of allowing users to reposition the taskbar proved challenging due to the need for all applications to adapt to this change. Initially, the demand for a movable taskbar was low, but over time, some users expressed a desire for this feature, prompting Microsoft to conduct tests with Windows Insiders. Similarly, the Start menu faced challenges in reintroducing customization options due to Windows 11's design philosophy, which emphasized a cleaner, minimalist aesthetic.

Winsage

September 17, 2026

Microsoft Calls In NVIDIA CEO Jensen Huang For Its Biggest Windows Event In Years

Microsoft will hold a Windows event on October 7 in San Francisco, marking its first major dedicated Windows gathering in over two years. The event will feature CEO Satya Nadella, Windows and Surface chief Pavan Davuluri, and NVIDIA CEO Jensen Huang, focusing on the impact of local AI on personal computing. A highlight will be the Surface Laptop Ultra, designed to compete with the MacBook Pro, featuring a custom NVIDIA RTX Spark SoC, an NVIDIA Blackwell GPU, up to 128GB of RAM, and the ability to run complex AI models on-device. Microsoft has also introduced a Workload Profile Scheduling system for efficient task distribution across CPU cores and optimized its Prism emulation layer for legacy x86 applications on ARM systems. The event is not expected to announce Windows 12, as Microsoft will focus on enhancing Windows 11. Major hardware partners like Dell, Lenovo, and ASUS are also involved in the RTX Spark ecosystem.