cybersecurity concerns Archives

Winsage

July 15, 2025

Cyber Agency—50% Of Microsoft Windows PCs ‘Vulnerable To Attack’

Microsoft has decided to extend the life of Windows 10, affecting approximately 700 million users, with around 250 million lacking the necessary hardware for Windows 11. About 50% of users are still on Windows 10, leading to concerns about cybersecurity vulnerabilities. The National Cyber Security Centre (NCSC) has warned that devices not meeting Windows 11 requirements are vulnerable to attacks and highlighted the risks of remaining on Windows 10, referencing the WannaCry ransomware attack as an example. Despite Microsoft's efforts to encourage upgrades, many users are hesitant to change, and the NCSC suggests that the inertia of users may pose the greatest threat to security.

AppWizard

July 8, 2025

Call of Duty takes PC game offline after multiple reports of RCE attacks on players

Call of Duty has temporarily taken its PC games offline due to reports of remote code execution (RCE) attacks that have compromised players' computers. The developers are investigating the issue. Players have shared videos of their systems being hacked during gameplay, with incidents including game freezes and unauthorized command executions. The vulnerability is linked to the shift from dedicated servers to peer-to-peer networking, which has made older games more susceptible to attacks. MalwareBytes has noted that this issue has become well-known in the community, leading many to avoid these titles. Previous vulnerabilities allowing RCE through the Steam platform were identified six years ago. The official Call of Duty X account has not provided updates on the investigation or the status of the games.

AppWizard

June 24, 2025

WhatsApp ban: US congressional staffers must delete the messenger

The US House of Representatives has banned the use of WhatsApp on all work devices due to cybersecurity concerns, categorizing it as a "high risk" application. The ban is based on criticisms regarding a lack of transparency in user data protection, insufficient encryption of stored data, and potential security vulnerabilities. Employees are instructed to remove the app from their devices, and alternatives such as Microsoft Teams, Wickr, Signal, iMessage, and FaceTime are recommended. This decision aligns WhatsApp with other previously banned applications, and there is speculation that similar guidelines may be adopted by other government agencies.

AppWizard

May 8, 2025

Signal clone used by Trump team hacked, GlobalX flight data leaked

The messaging app TeleMessage, used by President Donald Trump’s national security advisor, has been suspended due to a reported security breach, raising concerns about the security of sensitive government communications. The app, a modified version of Signal, was halted after a hacker accessed message contents from its customized versions, although the communications of national security advisor Mike Waltz were reportedly not affected. TeleMessage's suspension follows a statement from its parent company, Smarsh, confirming an investigation into the security incident. Despite President Trump's criticism of Signal, the White House continues to defend it, highlighting its pre-installation on government devices. Concerns about privacy protections arise from TeleMessage's archiving features, which may compromise Signal's end-to-end encryption. Additionally, GlobalX, the airline involved in Trump’s deportation flights, experienced a hacking incident, resulting in the exposure of flight records and passenger lists.

AppWizard

March 28, 2025

Hackers target Taiwan with malware delivered via fake messaging apps

Recent research from cybersecurity firm Sophos has identified the use of PJobRAT malware targeting users in Taiwan through instant messaging applications SangaalLite and CChat, which mimic legitimate platforms. These malicious apps were available for download on various WordPress sites, now taken offline. PJobRAT, an Android remote access trojan first identified in 2019, has been used to steal SMS messages, contacts, device information, documents, and media files. The recent cyber-espionage initiative lasted nearly two years, affecting a limited number of users, indicating a targeted approach by the attackers. The latest version of PJobRAT lacks the ability to steal WhatsApp messages but allows attackers greater control over infected devices. The distribution method for these apps remains unclear, but previous campaigns involved third-party app stores and phishing pages. Upon installation, the apps request extensive permissions and provide basic chat functionalities. Sophos researchers note that threat actors often refine their strategies after campaigns, suggesting ongoing risks.

Winsage

December 10, 2024

Windows 11 can now run on unsupported systems, but there’s a catch

Microsoft has allowed users to install Windows 11 on older, unsupported hardware, moving away from its previous strict hardware requirements. Users can manually install the operating system, but devices that do not meet minimum requirements will not receive updates via Windows Update, requiring manual management of updates. A watermark will appear on the desktop, and a notification in Settings will indicate that the upgrade is not recommended. Microsoft will not lower the minimum hardware requirements for Windows 11, citing cybersecurity concerns. Unsupported devices will also be excluded from the Windows Insider Program. Users can revert to Windows 10 within ten days of the upgrade through the Settings menu.

Winsage

November 23, 2024

Microsoft is finally testing its Recall photographic memory search feature. It’s not perfect

Microsoft is rolling out its Recall feature for testing on Copilot+ PCs with Qualcomm Snapdragon chips. This feature allows users to take snapshots of their screens and search for specific words or objects within those images. Currently, Recall is available to users in the Windows Insider Program's dev channel, but only on devices with Qualcomm Snapdragon chips. Initial testing has revealed challenges, including inconsistent screenshot frequency, incomplete search results, and slow loading times for viewing captured images. Microsoft has addressed cybersecurity concerns by encrypting the database and disabling the feature by default.

AppWizard

October 15, 2024

The official Nintendo Museum appears to be emulating SNES games on a Windows PC, which is slightly embarrassing

Nintendo has a history of opposing emulation and has taken legal action against emulator creators and ROM distribution websites, stating that downloading or copying older titles violates copyright laws. A Twitter user discovered that a SNES controller at the Nintendo Museum in Japan was disconnected via USB, producing a sound associated with Windows, suggesting that a SNES title was being emulated on a Windows PC. This revelation raises questions about the museum's choice to use an emulator instead of a functioning SNES console. Additionally, the setup poses cybersecurity risks, as the easily disconnected controller could allow unauthorized devices to connect, creating vulnerabilities.

Winsage

September 3, 2024

Microsoft’s ‘Recall’ feature can’t be uninstalled after all

Windows 11 users are experiencing issues with Microsoft's "Recall" feature, which captures screenshots of user activity. An update to Windows 11 version 24H2 suggested that users could uninstall Recall, but Microsoft clarified this was a glitch. Brandon LeBlanc from Microsoft stated that Recall was incorrectly listed as an option in the Control Panel and would be fixed in a future update. Recall uses an on-device generative AI model to track user actions, raising concerns about the capture of sensitive data. Kevin Beaumont, a former Microsoft security expert, criticized Recall as a significant cybersecurity risk. In response to backlash, Microsoft announced that Recall would be opt-in and disabled by default, and the UK's Information Commissioner's Office is investigating potential privacy violations. The rollout of Recall, originally planned for June, has been postponed to October for testing by Windows Insiders.