delivery Archives

AppWizard

April 9, 2026

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

Version 5.2.1 of the EngageSDK was released to address security vulnerabilities related to third-party SDKs, particularly affecting digital asset management applications. Although no exploitation of this vulnerability has been reported, developers are urged to upgrade to the latest version. The Android operating system's security model provides some protections against these vulnerabilities, and the Android team has updated user protections during the transition to the secure version. The vulnerability, classified as severe, allows unauthorized access to protected components and sensitive data through intent redirection. Affected applications, particularly in the cryptocurrency and digital wallet sectors, account for over 30 million installations. The vulnerability was first identified in version 4.5.4 of the EngageLab SDK, reported in April 2025, and was addressed in version 5.2.1 released on November 3, 2025, which set the vulnerable activity to non-exported. Developers are advised to regularly review their Android manifests and upgrade to the latest SDK version to maintain application security.

Winsage

April 9, 2026

Windows is sabotaging your expensive hardware, and these are the biggest ways how

Modern PCs, even with mid-range hardware, can experience performance issues not solely due to hardware limitations but because of how Windows operates. The operating system runs numerous background services that consume resources, including Connected User Experiences and Telemetry, Diagnostic Policy Service, and Windows Error Reporting. These services log activity and send data to Microsoft, leading to unexpected CPU spikes and disk usage. Startup applications, such as Microsoft Teams and OneDrive, also contribute to longer boot times and increased resource usage. Users should monitor and limit these applications to improve startup performance. Legacy features like SysMain, Windows Search indexing, and automatic folder type discovery can hinder performance on modern systems, as they were designed for older hardware and can cause unnecessary disk activity. Microsoft services like Copilot and OneDrive continuously run in the background, consuming memory and CPU resources, which affects overall system performance. Windows' power management settings prioritize energy efficiency over performance, leading to inconsistent responsiveness and delays during tasks. This conservative approach impacts various components, making the system feel sluggish.

Winsage

April 7, 2026

How to prevent updates on Windows 10 desktops

Organizations may pause or block Windows updates to maintain system stability and compatibility, particularly to avoid disruptions with legacy applications or customized environments, manage bandwidth consumption, and protect fortified Windows configurations. IT departments can disable updates using several methods: 1. Centralized patch management tools like WSUS or Microsoft Intune allow control over update deployment. 2. Configuring Group Policy settings can notify users of available updates without automatic installation. 3. Disabling the Windows Update service halts all future updates until re-enabled. 4. Setting a connection as metered can reduce automatic updates, though some critical updates may still download. In Windows 11, similar strategies apply, but organizations must consider the risks of blocking updates due to the end of regular security updates for Windows 10 and align their strategies with Microsoft's evolving update delivery methods.

Winsage

April 7, 2026

“This was not opportunistic. It was precision.” — How North Korean hackers used Microsoft Teams and Slack to compromise Windows PCs with an elaborate ploy

On March 30, 2026, axios, a JavaScript HTTP client library, was temporarily compromised by suspected North Korean hackers who hijacked maintainer Jason Saayman's account. This allowed them to publish two malicious versions of axios on npm. The malicious versions were identified and removed within three hours by StepSecurity. A post-mortem blog on GitHub provided security measures for users of Windows, macOS, and Linux, highlighting risks from a Remote Access Trojan (RAT) introduced during the breach. The attack was attributed to a group known as UNC1069, which has been active since at least 2018. Two weeks prior to the breach, Saayman was targeted in a social engineering campaign where attackers posed as a legitimate company founder, leading him to install the RAT via a fake update during a Microsoft Teams meeting. Microsoft Teams was not compromised; it was used as a delivery method for the Trojan. Saayman noted the operation's sophistication.

Winsage

April 7, 2026

Windows is using your internet to update other people’s PCs — disable this hidden setting to speed up your connection

Your Windows PC participates in a global file-sharing network through a feature called Delivery Optimization, which is set as a default. This feature allows your PC to download update segments from other computers that have completed updates and upload the same files to assist others. It enhances the efficiency of Windows updates by reducing reliance on Microsoft's servers and streamlining the update process.

Tech Optimizer

April 7, 2026

Norton 360: Comprehensive Cybersecurity for Devices

Norton 360 is a comprehensive cybersecurity solution that protects consumers and businesses from digital threats, integrating features like a VPN and password manager. It safeguards various devices, including PCs and smartphones, and offers multiple editions for individuals, families, and small businesses. Key features include real-time threat detection, a smart firewall, a no-logs VPN, a password manager, parental controls, behavior-based detection for zero-day threats, cloud backup functionality, and performance optimization tools. The suite is effective against phishing, malware, and ransomware, with a 100% detection rate confirmed by independent tests. Norton 360 also caters to small businesses with endpoint protection, compliance tools, and secure file sharing. It employs heuristics and machine learning for threat adaptation and supports unlimited devices in premium plans. The software is compatible with Windows, macOS, Android, and iOS, and offers a VPN service with servers in over 30 countries. Norton 360 competes in the global cybersecurity market, maintaining a strong presence in North America and Europe, with subscription models ranging from basic to deluxe editions. Demand for the product has increased due to high-profile data breaches, and it is available in over 150 countries. Common use cases include protecting home networks, securing client data for freelancers, and safeguarding school-issued laptops. Norton 360 is part of Gen Digital Inc., which focuses on consumer cybersecurity.

Winsage

April 6, 2026

ResokerRAT Hijacks Telegram API to Command Infected Windows PCs

A newly discovered Windows malware called ResokerRAT uses Telegram’s Bot API for its command-and-control operations, allowing it to monitor and manipulate infected systems without a conventional server. It obscures its communications by integrating with legitimate Telegram traffic, complicating detection. Upon execution, it creates a mutex to ensure only one instance runs and checks for debuggers to avoid analysis. It attempts to relaunch with elevated privileges and logs failures to its operator. ResokerRAT terminates known monitoring tools and installs a global keyboard hook to obstruct defensive key combinations. It operates through text-based commands sent via Telegram, allowing it to check processes, take screenshots, and modify system settings to evade detection. Persistence is achieved by adding itself to startup and altering UAC settings. The malware retrieves additional payloads from specified URLs and uses URL-encoded data for communication. Researchers have confirmed its Telegram traffic, and its behavior aligns with various MITRE ATT&CK techniques. Security teams are advised to monitor for unusual Telegram traffic and scrutinize registry keys related to startup and UAC.

Winsage

April 5, 2026

Microsoft Ships Emergency Windows 11 Fix for Broken Patch

On March 31, Microsoft released emergency update KB5086672 in response to issues caused by the previous preview patch KB5079391, which left many Windows 11 devices in a loop with error code 0x80073712, blocking access to March security fixes. Microsoft withdrew KB5079391, which was launched on March 26, and replaced it with KB5086672, a cumulative update that includes all fixes from March 2026. KB5086672 supersedes previous updates, including KB5079473, KB5085516, and KB5079391. Users with the "Get the latest updates as soon as they’re available" setting will receive KB5086672 automatically, while others can manually check for updates or download it from the Microsoft Update Catalog. Microsoft has been issuing multiple emergency updates recently, raising concerns about the quality of its update pipeline, with a history of emergency patches for various issues affecting Windows 10, Windows 11, and Windows Server. The issues from KB5079391 may resurface in the upcoming April cumulative update.

AppWizard

April 5, 2026

In 2007, two game music GOATs collaborated on the criminally underrated soundtrack to a similarly underrated D&D RPG

Critical Hit, formerly Soundtrack Sunday, explores video game music and audio design, highlighting titles like Neverwinter Nights, which has a dedicated fanbase. The first expansion of Neverwinter Nights 2, Mask of the Betrayer, is noted for its mature narrative and impactful music, which plays a significant role in the game's atmosphere. Brandon, the audio director at Obsidian during the late 2000s, discussed the development of Mask of the Betrayer and its soundtrack, which he collaborated on with Womb Music's Rik Schaffer and Margaret Tang. The main theme of Mask of the Betrayer is described as mysterious and epic, with a darker reinterpretation for the DLC. The theme for Mulsantir captures the city's duality, blending inviting and sinister elements. Brandon aimed to encapsulate the medieval sound of Dungeons & Dragons, resulting in a soundtrack that enhances gameplay and leaves a lasting impression on players.

AppWizard

April 3, 2026

Russia tightens grip on popular messaging app Telegram, leaving businesses and users in limbo

Telegram is under criminal investigation due to its resistance to regulatory demands, drawing attention from authorities. The platform has become essential for many businesses, particularly in Russia, where it facilitates marketing and customer engagement. Analysts note that replacing Telegram is challenging due to its deep integration into users' daily lives. It serves multiple functions, including private messaging and news dissemination. Telegram is recognized as both a communication platform and vital business infrastructure, with chatbots used for lead generation. Despite the launch of a competing platform, Max, in 2025, it has struggled to gain users. Authorities have imposed restrictions on mobile internet services for security reasons and established "white lists" for approved online resources, impacting the livelihoods of users and small business owners.