cybersecurity Archives

Winsage

July 18, 2026

Recent patches for Windows 11 could have been created by Microsoft’s new Mythos rival

Microsoft is developing a security tool called Project Perception, aimed at helping organizations identify and fix software vulnerabilities using artificial intelligence. Set to launch this month, it will utilize AI models from Microsoft, OpenAI, and Anthropic to offer extensive coverage while being cost-effective. The tool features a model router to select the best AI model for specific tasks, optimizing performance and reducing operational costs. Led by Hayete Gallot, Microsoft is shifting towards AI-focused products, recognizing the potential for substantial returns from enterprise investments in AI. Project Perception aims to compete in the AI-driven vulnerability detection market, although its availability may be limited due to concerns about misuse. Microsoft recently addressed around 570 vulnerabilities using an AI tool called MDASH, suggesting a growing role for AI in cybersecurity.

AppWizard

July 17, 2026

E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants

The European Commission has mandated that Google must provide equal access to rival AI assistants within its Android ecosystem, allowing them to use the same functionalities as Google's Gemini assistant. This includes access to the camera, microphone, and on-screen content, as well as background operation capabilities. Google is required to implement these changes in the upcoming Android 18 release by August 1, 2027. The directive includes two binding specifications under the Digital Markets Act, one of which requires Google to share anonymized search query, click, and ranking data with competing search engines and AI chatbots for a fee. The Android decision involves 11 operating system features, with five classified as restricted, requiring certification for third-party applications. These restricted features include access to on-device data shared by apps, context-aware intelligence, structured on-device integration, screen automation, and system integration. The remaining six features do not require certification, allowing broader access to ambient data, always-on hotword detection, long-press invocation, system-level on-device models, third-party model implementation, and background execution capabilities. Google must establish a Qualified AI Assistant Programme to facilitate access to gated features, allowing third-party Trusted Certification Authorities to certify assistants at no cost. The certification process must be fair and non-discriminatory, and users can consent to bypass the certification requirement for specific services and devices. By August 2027, both certified and user-approved uncertified assistants will be able to interact with applications on a virtual display. Google is also required to anonymize search data before sharing, ensuring user privacy and limiting data access to recipients who meet specific criteria. Kent Walker, Google's president of global affairs, expressed concerns about the security implications of granting external apps access to sensitive device permissions and criticized the anonymization methods for search data. The final measures reflect significant changes from earlier drafts, introducing more stringent requirements regarding data sharing and certification processes.

AppWizard

July 17, 2026

Govt looking to tighten cybersecurity policy, frame common rules for messenger apps: MeitY Secretary

MeitY Secretary S. Krishnan emphasized the government's commitment to enhancing India's cybersecurity framework, highlighting the risks associated with rapid digitization. He noted the emergence of vulnerabilities exposed by platforms like Mythos and the importance of addressing these gaps. Ongoing discussions with U.S. counterparts focus on regular cybersecurity exercises and monitoring. Regarding the Tata Electronics cyber breach, the government is investigating, with preliminary findings suggesting no significant loss. Additionally, Krishnan mentioned that MeitY is reviewing feedback on username features for messaging platforms, specifically that WhatsApp has delayed its rollout until further discussions. MeitY is also examining Meta's response to the Child Sexual Abuse Material issue and is considering standardized regulations for all messaging applications.

Tech Optimizer

July 17, 2026

Psychology says people who use only free version of antivirus aren’t careless: What this choice may reveal

Individuals who choose free antivirus software often do so based on a careful evaluation of their needs, budget constraints, and personal experiences with security. Factors influencing this decision include monthly budget, type of internet usage, trust in software brands, previous experiences with malware, confidence in personal online habits, and awareness of cybersecurity risks. Psychological theories, such as Prospect Theory and Satisficing Theory, suggest that users assess the perceived benefits of free software against the costs of paid options, leading many to conclude that free solutions are sufficient for their needs. Research indicates that technology choices are based on perceived usefulness and value, with positive past experiences reinforcing the decision to continue using free antivirus software. Overall, individuals often make decisions by balancing their requirements with available resources, highlighting the importance of evaluating personal needs before making purchases.

AppWizard

July 16, 2026

Grand Theft Auto 6 leaker who was given an indefinite sentence in 2023 because he wouldn’t stop hacking is now out of hospital and awaiting retrial

Arion Kurtaj, previously involved in high-profile cyberattacks as part of the hacking group Lapsus$, has been transferred from a secure hospital facility to a standard prison while awaiting retrial. At 18, he was found liable by a UK court for cyber intrusions targeting major corporations, notably leaking 90 videos of Grand Theft Auto 6 in 2022. Initially held under police protection with limited technology access, he was sentenced to a secure hospital pending a medical assessment. This assessment has concluded, allowing his transfer to prison. Kurtaj's retrial is scheduled for November, coinciding with the launch of Grand Theft Auto 6.

Winsage

July 16, 2026

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.

Winsage

July 16, 2026

Windows 10 refuses to die, and the security bill is coming due

Approximately 16.9 percent of monitored Windows devices are still running Windows 10, a decline from about half a year ago. Windows 10 will receive updates until October 12, 2027, for consumer devices and until October 10, 2028, for commercial customers. Small and medium-sized businesses (SMBs) have 21.4 percent of their machines on Windows 10, with 23 percent in healthcare and pharmaceutical sectors and 22.7 percent in consumer and retail. A Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11. Only 14 percent of Windows 10 assets have Extended Security Updates (ESU) patches applied. Many devices are tied to vendor certifications that complicate upgrades, and the rising cost of new PC hardware is a concern. The stagnation of Windows 11 adoption continues, with minimal change in market share distribution.

AppWizard

July 16, 2026

Russia’s Max Messenger Removed From Google Play

Max, a messaging application launched by VK in 2025 and endorsed by Russian President Vladimir Putin, was removed from Google’s Play marketplace on July 16, 2023. The app does not provide end-to-end encryption, raising concerns about government access to user communications. This removal is part of a trend affecting other VK-owned applications, coinciding with recent EU sanctions targeting VK Company and its subsidiary Communication Platform LLC, which oversees the Max app. The EU characterized Max as having extensive surveillance features used against critics of Russia's military actions in Ukraine. Apple also removed Max from its App Store in June without explanation. Max aims to be an all-encompassing platform for messaging, social media, digital identification, payments, banking, and government services, which critics say could enhance government monitoring of citizens. The Russian government has implemented strict measures against foreign social media platforms and previously enacted a ban on Telegram in 2026, which faced public backlash.

Winsage

July 16, 2026

Microsoft’s July patches fix over 600 flaws, shattering last month’s record

Microsoft has released its July 2026 Patch Tuesday updates, addressing 570 new security vulnerabilities, bringing the total for the month to over 620. The cumulative count of vulnerabilities patched this year has reached 1,380, exceeding the total of 1,250 for the entire year of 2020. Over 400 vulnerabilities are related to various versions of Windows, and the Windows 10 Extended Security Update program has been extended until October 12, 2027. Notable vulnerabilities include CVE-2026-56155 in Active Directory Federation Services, which allows attackers to gain administrator rights, and several critical Remote Code Execution vulnerabilities, including CVE-2026-57092 in Hyper-V and CVE-2026-56190 in Remote Desktop Protocol. Microsoft has also patched 97 vulnerabilities in Office products, with 17 classified as critical RCE vulnerabilities, and four vulnerabilities in Exchange Server, including CVE-2026-55008. The latest Microsoft Edge update addresses 27 vulnerabilities related to Chromium, and a vulnerability in Minecraft Bedrock servers has been patched.

Winsage

July 15, 2026

Microsoft patches record 570 Windows security bugs with two exploited zero days

Microsoft released its July Patch Tuesday updates, addressing 570 security vulnerabilities in Windows, a record number for the company. This update includes three zero-day vulnerabilities, two of which have been exploited in real-world attacks, affecting Microsoft’s Active Directory and SharePoint, while the third concerns BitLocker encryption. The update also enhances Windows features, including changes to the Widgets app, improvements in File Explorer speed, refined Bluetooth connectivity, and a new feature allowing users to pause updates until a specific date. However, the update has been temporarily halted for certain Dell computers due to compatibility issues, with Microsoft working on a fix.