credentials Archives

Winsage

August 7, 2026

This ‘classic’ decades-old SQL injection flaw could let hackers take over entire Windows servers, thanks to a nifty database trick

Security researchers from Huntress discovered a sophisticated SQL Injection (SQLi) attack that led to the deployment of a rare toolkit called Khunt. The attackers exploited a public-facing application backed by an Oracle database by failing to validate user input, allowing malicious SQL commands to be executed. The Khunt toolkit enabled activities such as executing operating system commands, stealing credentials, and exfiltrating registry hive data. Experts recommend robust defense mechanisms, including input sanitation, regular security audits, and the implementation of web application firewalls to protect against such attacks.

AppWizard

August 7, 2026

Ubisoft just made a classic Tom Clancy game free to keep — here’s how to add it to your library before time runs out

Ubisoft is offering Ghost Recon Future Soldier for free on PC from August 6 to August 13 as part of the 25th anniversary celebration of the Tom Clancy's Ghost Recon series. Players can add the game to their Ubisoft Connect library by logging in and navigating to the 'Free games' tab to find the giveaway banner. After clicking the banner, they can select 'Get it now' to add the game to their account for download and play.

Tech Optimizer

August 7, 2026

Bitdefender partners Digimune to sell consumer security

Bitdefender has partnered with Digimune Australia to allow Digimune to distribute Bitdefender's consumer cybersecurity products in Australia. This partnership aims to improve access to cybersecurity solutions amid rising threats like scams and ransomware. The products available through Digimune include Bitdefender Antivirus Plus, Bitdefender Total Security, Bitdefender Premium, Bitdefender Mobile Security, and Bitdefender Premium VPN, which support various platforms such as Windows, macOS, iOS, and Android. The collaboration focuses on household consumers, providing local support and simplifying the purchasing process for multi-device subscriptions. The partnership also addresses the growing competition in the Australian consumer security sector and aims to meet the demands for protection against various digital threats.

Tech Optimizer

August 4, 2026

Automated PII redaction for Amazon RDS for PostgreSQL audit logs

The article discusses a serverless pipeline for creating an irreversibly redacted and queryable archive of Amazon RDS for PostgreSQL audit logs. It sanitizes sensitive information, such as Social Security numbers, credit card details, and email addresses, before storing the clean logs in Amazon S3, which can be queried using Amazon Athena. The deployment process is facilitated by a single AWS CloudFormation template. The challenge is that pgAudit logs sensitive data in cleartext to Amazon CloudWatch Logs, which poses compliance risks under regulations like GDPR and HIPAA. While CloudWatch Logs Data Protection offers reversible masking of PII, this is insufficient for compliance needs requiring permanent separation of PII from audit evidence. The proposed pipeline creates an irreversibly redacted copy stored in Amazon S3, ensuring original values cannot be restored. The deployment requires an active AWS account with specific permissions, AWS CLI v2, a compatible AWS region, and confirmation of service quotas. The CloudFormation template has four main parameters for deployment, including ProjectName, DBInstanceClass, DBAllocatedStorage, and EnvironmentType, with sensible defaults provided. Three deployment options are available: via the AWS console, AWS CLI, or a deploy script. After deployment, users can generate test data, trigger the redaction pipeline, and verify results in Athena. The process includes steps to create a PostgreSQL table, insert records with PII, run queries, and monitor the execution of the redaction pipeline. The article emphasizes that unredacted PII remains in the source CloudWatch Logs, recommending enabling CloudWatch Logs Data Protection for added security. To clean up resources and avoid charges, users must empty the S3 buckets and delete the stack. Cost considerations for the pipeline include infrastructure costs and the expense of achieving irreversibility.

Winsage

August 4, 2026

Microsoft Expands Windows Hello ESS to External Fingerprint Readers

Microsoft is integrating Windows Hello Enhanced Sign-in Security (ESS) with compatible external fingerprint readers, allowing passwordless sign-ins on a wider range of Windows 11 devices. This update enhances biometric authentication security by utilizing hardware-backed protections such as the Trusted Platform Module (TPM) and Virtualization-Based Security (VBS), which isolate sensitive biometric data from malware and unauthorized access. Previously, only devices with integrated fingerprint sensors could fully utilize ESS, but the recent update (KB5101684) enables external fingerprint readers to function within the ESS framework. The update is being rolled out for Windows 11 versions 25H2 and 24H2, and users can set up fingerprint authentication by connecting a compatible reader. This advancement aids IT administrators in implementing passwordless authentication while maintaining security protocols.

Winsage

August 3, 2026

Microsoft warns Windows PC users of Russian hackers on hotel WiFi

Microsoft has issued a warning to Windows PC users about Russian hackers targeting individuals using hotel WiFi networks. The campaign, named CaptiveCrunch and attributed to the Storm-2945 group, focuses on corporate travelers and employs tactics like credential theft and malware distribution through compromised guest networks. Microsoft has been monitoring this activity since May, noting its impact on hospitality networks utilizing captive portals. Hackers have been redirecting users to counterfeit sign-in pages to steal credentials without phishing emails. The threat may also extend to Android devices, with hackers using deceptive techniques to manipulate users into downloading malicious APK files. The hackers employ fake verification checks and sign-in prompts, sometimes misleading users into Microsoft's legitimate authentication process to gain access to accounts. Microsoft has identified a specific remote-access trojan named CornFlake, which can record keystrokes, steal credentials, and capture screenshots. Recommendations for travelers include using mobile hotspots, avoiding updates through captive portals, strengthening authentication methods, and blocking unnecessary device-code authentication.

Winsage

August 3, 2026

Microsoft is testing deeper Phone Link integration in Windows 11, but do you actually use it?

Windows Insiders can access new features in Windows 11 Insider Build 26300.9032, available through the Experimental Preview Channel. Key updates include: - Windows Search: Introduces customizable options for integrating personal or work/school Microsoft accounts and OneDrive in search results. It can automatically expand indexing based on user activity, which can be managed in Settings > Privacy & security > Search. - Phone Link: Users can now preview recent messages or notifications by hovering over them in the Start menu, enhancing visibility into mobile activity. This feature is gradually rolling out and requires a minimum Phone Link build of 1.26021.3.0. - Settings App: Improved search functionality for quicker navigation to relevant settings. - Adaptive Hibernate Policy: Enhancements for instant-on resumes from Modern Standby and better battery preservation based on battery levels. - Start Menu: A fix for an issue causing crashes when dragging apps. - Taskbar: Resolved an issue where hovering over app window previews in an overflow state dismissed them. - File Explorer: Home now retains the state of sections, and improvements have been made for reliability when dragging files to disconnected network drives. Issues with files on DFS mapped drives being misidentified have also been addressed. - Windows Spotlight: Changes to enhance reliability on the lock screen. - Storage: Fixes for File History automatic backups to network shares that displayed false "invalid credentials" errors.

AppWizard

August 2, 2026

Minecraft Gameplay Night Fun Fights Free Roam and Night Survival Fun Part 7

YouTube has introduced a new sign-in feature that allows users to access their accounts more easily through a passive sign-in option, minimizing interruptions and enhancing the overall user experience. This update reflects a trend towards user-centric design in the digital landscape, aiming to retain and attract users by simplifying the login process.

Winsage

August 1, 2026

Not sure whether to use Windows Hello or Enhanced Sign‑in Security? This breakdown makes the choice easy

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, allowing support for compatible external fingerprint readers. ESS aims to enhance the security of the authentication process rather than improve the accuracy of biometric recognition. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS utilizes Virtualization-Based Security (VBS) and Trusted Platform Module (TPM) 2.0 to isolate sensitive operations in a protected environment. ESS-compatible fingerprint readers have dedicated secure processors, store templates internally, and communicate with the operating system via encrypted channels. Users can enable ESS by navigating to Settings > Accounts > Sign-in options on their devices. If a device does not support ESS, standard Windows Hello remains a robust authentication option.

Winsage

August 1, 2026

Windows Hello vs. Enhanced Sign‑in Security: Which sign‑in method actually keeps your Windows 11 PC safer, and what’s the difference?

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, which will support compatible external fingerprint readers. ESS aims to strengthen the authentication process against potential attacks by shifting processing to isolated, hardware-protected environments using Virtualization-Based Security (VBS) and TPM 2.0 technology. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS-compatible devices perform more processing within the hardware itself, ensuring that only authentication results are sent to the OS. To enable ESS, users must navigate to Settings > Accounts > Sign-in options and follow prompts to set up their fingerprint recognition. Existing non-ESS biometric enrollments will be removed during the upgrade to ensure security.