cybersecurity Archives

Winsage

July 20, 2026

LG Monitors Spotted Installing Adware-Like App on Windows PCs

LG monitors connected to Windows PCs can trigger the automatic installation of the LG Monitor App Installer, which promotes paid subscriptions to McAfee antivirus software without user consent. This app appears shortly after Windows Update installs relevant LG packages, displaying McAfee promotions frequently. The app is designed to launch at startup and operates outside the Windows App Sandbox, raising cybersecurity concerns. Reports indicate that this issue affects both newer and older LG monitor models. Microsoft allows manufacturers to link Store applications with device metadata, enabling such installations without clear user choice. Users can remove the app through Windows Settings, but doing so may block other useful applications. LG and Microsoft have not publicly addressed these concerns.

Winsage

July 18, 2026

Windows 11’s massive July 2026 update fixes 570 vulnerabilities and shows how AI is quietly reshaping Patch Tuesday itself

Microsoft's July 2026 Patch Tuesday update for Windows 11, identified as KB5101650, addresses 570 vulnerabilities and upgrades Windows 11 to version 25H2 (build 26200.8875) and version 24H2 (build 26100.8875). The update includes critical fixes for BitLocker and File Explorer, targeting vulnerabilities that could enable remote code execution. Microsoft's MDASH tool, which uses AI for vulnerability analysis, has helped uncover 16 vulnerabilities in networking and authentication components. The update also introduces non-security enhancements like Point-in-time restore and improved Bluetooth reliability. Microsoft emphasizes the need for users to install updates quickly due to the rapid evolution of AI technology that benefits malicious actors.

Winsage

July 18, 2026

Recent patches for Windows 11 could have been created by Microsoft’s new Mythos rival

Microsoft is developing a security tool called Project Perception, aimed at helping organizations identify and fix software vulnerabilities using artificial intelligence. Set to launch this month, it will utilize AI models from Microsoft, OpenAI, and Anthropic to offer extensive coverage while being cost-effective. The tool features a model router to select the best AI model for specific tasks, optimizing performance and reducing operational costs. Led by Hayete Gallot, Microsoft is shifting towards AI-focused products, recognizing the potential for substantial returns from enterprise investments in AI. Project Perception aims to compete in the AI-driven vulnerability detection market, although its availability may be limited due to concerns about misuse. Microsoft recently addressed around 570 vulnerabilities using an AI tool called MDASH, suggesting a growing role for AI in cybersecurity.

AppWizard

July 17, 2026

E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants

The European Commission has mandated that Google must provide equal access to rival AI assistants within its Android ecosystem, allowing them to use the same functionalities as Google's Gemini assistant. This includes access to the camera, microphone, and on-screen content, as well as background operation capabilities. Google is required to implement these changes in the upcoming Android 18 release by August 1, 2027. The directive includes two binding specifications under the Digital Markets Act, one of which requires Google to share anonymized search query, click, and ranking data with competing search engines and AI chatbots for a fee. The Android decision involves 11 operating system features, with five classified as restricted, requiring certification for third-party applications. These restricted features include access to on-device data shared by apps, context-aware intelligence, structured on-device integration, screen automation, and system integration. The remaining six features do not require certification, allowing broader access to ambient data, always-on hotword detection, long-press invocation, system-level on-device models, third-party model implementation, and background execution capabilities. Google must establish a Qualified AI Assistant Programme to facilitate access to gated features, allowing third-party Trusted Certification Authorities to certify assistants at no cost. The certification process must be fair and non-discriminatory, and users can consent to bypass the certification requirement for specific services and devices. By August 2027, both certified and user-approved uncertified assistants will be able to interact with applications on a virtual display. Google is also required to anonymize search data before sharing, ensuring user privacy and limiting data access to recipients who meet specific criteria. Kent Walker, Google's president of global affairs, expressed concerns about the security implications of granting external apps access to sensitive device permissions and criticized the anonymization methods for search data. The final measures reflect significant changes from earlier drafts, introducing more stringent requirements regarding data sharing and certification processes.

AppWizard

July 17, 2026

Govt looking to tighten cybersecurity policy, frame common rules for messenger apps: MeitY Secretary

MeitY Secretary S. Krishnan emphasized the government's commitment to enhancing India's cybersecurity framework, highlighting the risks associated with rapid digitization. He noted the emergence of vulnerabilities exposed by platforms like Mythos and the importance of addressing these gaps. Ongoing discussions with U.S. counterparts focus on regular cybersecurity exercises and monitoring. Regarding the Tata Electronics cyber breach, the government is investigating, with preliminary findings suggesting no significant loss. Additionally, Krishnan mentioned that MeitY is reviewing feedback on username features for messaging platforms, specifically that WhatsApp has delayed its rollout until further discussions. MeitY is also examining Meta's response to the Child Sexual Abuse Material issue and is considering standardized regulations for all messaging applications.

Tech Optimizer

July 17, 2026

Psychology says people who use only free version of antivirus aren’t careless: What this choice may reveal

Individuals who choose free antivirus software often do so based on a careful evaluation of their needs, budget constraints, and personal experiences with security. Factors influencing this decision include monthly budget, type of internet usage, trust in software brands, previous experiences with malware, confidence in personal online habits, and awareness of cybersecurity risks. Psychological theories, such as Prospect Theory and Satisficing Theory, suggest that users assess the perceived benefits of free software against the costs of paid options, leading many to conclude that free solutions are sufficient for their needs. Research indicates that technology choices are based on perceived usefulness and value, with positive past experiences reinforcing the decision to continue using free antivirus software. Overall, individuals often make decisions by balancing their requirements with available resources, highlighting the importance of evaluating personal needs before making purchases.

AppWizard

July 16, 2026

Grand Theft Auto 6 leaker who was given an indefinite sentence in 2023 because he wouldn’t stop hacking is now out of hospital and awaiting retrial

Arion Kurtaj, previously involved in high-profile cyberattacks as part of the hacking group Lapsus$, has been transferred from a secure hospital facility to a standard prison while awaiting retrial. At 18, he was found liable by a UK court for cyber intrusions targeting major corporations, notably leaking 90 videos of Grand Theft Auto 6 in 2022. Initially held under police protection with limited technology access, he was sentenced to a secure hospital pending a medical assessment. This assessment has concluded, allowing his transfer to prison. Kurtaj's retrial is scheduled for November, coinciding with the launch of Grand Theft Auto 6.

Winsage

July 16, 2026

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.

Winsage

July 16, 2026

Windows 10 refuses to die, and the security bill is coming due

Approximately 16.9 percent of monitored Windows devices are still running Windows 10, a decline from about half a year ago. Windows 10 will receive updates until October 12, 2027, for consumer devices and until October 10, 2028, for commercial customers. Small and medium-sized businesses (SMBs) have 21.4 percent of their machines on Windows 10, with 23 percent in healthcare and pharmaceutical sectors and 22.7 percent in consumer and retail. A Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11. Only 14 percent of Windows 10 assets have Extended Security Updates (ESU) patches applied. Many devices are tied to vendor certifications that complicate upgrades, and the rising cost of new PC hardware is a concern. The stagnation of Windows 11 adoption continues, with minimal change in market share distribution.

AppWizard

July 16, 2026

Russia’s Max Messenger Removed From Google Play

Max, a messaging application launched by VK in 2025 and endorsed by Russian President Vladimir Putin, was removed from Google’s Play marketplace on July 16, 2023. The app does not provide end-to-end encryption, raising concerns about government access to user communications. This removal is part of a trend affecting other VK-owned applications, coinciding with recent EU sanctions targeting VK Company and its subsidiary Communication Platform LLC, which oversees the Max app. The EU characterized Max as having extensive surveillance features used against critics of Russia's military actions in Ukraine. Apple also removed Max from its App Store in June without explanation. Max aims to be an all-encompassing platform for messaging, social media, digital identification, payments, banking, and government services, which critics say could enhance government monitoring of citizens. The Russian government has implemented strict measures against foreign social media platforms and previously enacted a ban on Telegram in 2026, which faced public backlash.