device Archives

Winsage

September 18, 2026

Windows 11 Update Can Break Active Directory Trust Relationships

A recent security update from Microsoft, KB5124008, has caused disruptions for organizations using on-premises Active Directory, particularly affecting domain-joined Windows 11 devices with Credential Guard. After installing this update, some devices lost their secure trust relationship with the domain, preventing users from logging in with valid credentials. The issue is linked to Machine Identity Isolation, a security feature that enhances machine account credential protection but requires domain controllers to operate at the Windows Server 2025 Domain Functional Level. Organizations that enabled this feature without meeting the prerequisite may experience trust relationship failures. Microsoft has suggested a workaround to disable Machine Identity Isolation and plans to suspend its enforcement in an upcoming update while improvements are made.

AppWizard

September 18, 2026

Android users are getting important Google system updates

Google has released system updates designated as Google System Updates 26.36 for September 2026, applicable to various devices including smartphones, tablets, Android TV, Google TV, Android Auto-compatible vehicles, and Wear OS gadgets. - Bug fixes have improved stability in account management services for smartphones. - Location sharing capabilities have been enhanced in account management for smartphones and Wear devices. - New features for developers have been introduced to facilitate better integration with Google Maps on smartphones. - Devices can now be set up regardless of their operating system for a streamlined onboarding process. - Developers have new features to enhance device connection processes within their applications for smartphones and Wear devices. - New functionalities for location- and context-based processes have been added for developers on smartphones. - Bug fixes related to system management and diagnostic services have been addressed across cars, PCs, smartphones, TVs, and Wear devices. - Updates to system management services have improved device updateability for cars, smartphones, TVs, and Wear devices. - The update allows real-time price adjustments in the shopping basket for PC and smartphone users during checkout. - Smartphone users switching to a new device will receive a notification to re-add their Google Wallet cards for mobile payments. These updates are distributed through the Play Store and are set to automatically install on Android devices. Users can manually initiate the download through Settings > System > Software Updates > Google Play system update.

AppWizard

September 18, 2026

Samsung Gallery finally gets Google Photos sync — here’s what you need to do

Samsung is ending its OneDrive integration on September 30 and will instead offer direct Google Photos backup within the Samsung Gallery app. The update, version 15.9.01.7, introduces a "Sync photos and videos" option that allows users to connect a personal Google account for photo and video backup. Users can selectively sync specific local folders or disable main camera roll uploads. This feature is available only on devices running Android 13 or later and requires a compatible Samsung device. Users can disable the Google Photos sync if they prefer not to use it, while still accessing previously backed-up photos via Google Photos.

AppWizard

September 18, 2026

This clever Plex app could give your aging LG TV a new lease on life

A new open-source Plex client named PlxNative has been developed for older LG TVs running on webOS to improve the browsing experience of Plex libraries. It operates independently of a web browser using a native Rust/OpenGL interface, allowing it to launch in about one second and ensuring fluid scrolling and menu navigation. PlxNative supports various Plex functionalities, including library browsing, profile switching, audio and subtitle selection, and direct play or server transcoding. It does not replace the TV's built-in video decoder and connects directly to the Plex Media Server over the local network after initial sign-in. Installation options include the Homebrew Channel or sideloading via LG’s Developer Mode, which requires periodic session renewals. The developer has submitted PlxNative for official review by LG.

AppWizard

September 18, 2026

That security patch date on your Android phone is no longer the full story

Google has launched the AndroidX Security State and Security State Provider libraries, enhancing Android's security framework. These tools allow applications to assess the security status of individual components on a device, rather than relying solely on the overall security patch level. Applications can now verify specific security fixes, identify available updates, and check for pending installations. This is particularly useful for security-sensitive applications, such as banking software, which can confirm the presence of necessary security fixes before allowing transactions. The libraries also enable apps to check for the resolution of specific vulnerabilities (CVEs), ensuring critical fixes are in place before enabling features like tap-to-pay. Phone manufacturers can communicate specific security fixes without changing the overall security patch date, meaning a device may show an outdated patch date while still having resolved certain vulnerabilities.

AppWizard

September 18, 2026

Android apps can now check security patches down to individual device components

The new AndroidX Security State libraries, with stable releases of Security State v1.1.0 and Security State Provider v1.0.0, allow developers to evaluate the security status of individual device components. They provide three levels of security patch information: Device Security Patch Level (DSPL), Published Security Patch Level (PSPL), and Available Security Patch Level (ASPL). These libraries enable checks on critical components of the Android operating system, including system modules and the Linux kernel, which are represented by version numbers rather than monthly patch dates. Applications that prioritize security can utilize this detailed patch information to assess vulnerabilities, particularly those tracked as Common Vulnerabilities and Exposures (CVEs). The libraries also integrate with the Open Source Vulnerabilities (OSV) database for access to Android Security Bulletin data and device-specific vulnerability reports. Additionally, Android 17 allows manufacturers to declare individual security fixes beyond the stated security patch level, and Google is working with manufacturers to transition their OTA update clients to this new standardized system.

Winsage

September 18, 2026

Microsoft explains why restarting Windows can shut it down more completely than actually shutting it down

The Fast Startup feature in Windows, enabled by default, allows the kernel session to remain hibernated during shutdown, which results in quicker boot times by restoring a saved state. In contrast, selecting Restart clears the kernel session entirely, performing a complete boot of Windows. The process of shutting down with Fast Startup involves closing applications, logging off, keeping the kernel loaded in memory, saving the kernel and drivers to hiberfil.sys, and powering off, while Restart closes applications, logs off, ends the kernel session, and reboots immediately without saving a kernel snapshot. Fast Startup can lead to persistent issues from previous sessions, making Restart a better option for troubleshooting. To perform a full shutdown bypassing Fast Startup, users can execute the command "shutdown /s /t 0." Microsoft advises against permanently disabling Fast Startup, as it enhances shutdown-to-boot transitions.

AppWizard

September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.

AppWizard

September 18, 2026

Sharing Google Photos albums via QR codes may soon become way easier

Google Photos is set to release version 7.93.0, which will enhance album-sharing by allowing users to copy and download QR codes directly, eliminating the need for screenshots. The update will include buttons labeled "Copy" and "Download" below the QR code for easier sharing. Additionally, an updated Collections tab will allow users to pin items and reorder folders, with a new bottom sheet to improve organization and accessibility. The timeline for the QR code update is uncertain, but the revamped Collections tab is expected to launch soon.

AppWizard

September 18, 2026

Google continues to fix Android 17 issues with a QPR2 Beta 5 release for Pixels

Google has begun rolling out Android 17 QPR2 Beta 5 for Pixel testers, addressing issues such as unexpected reboots and a Bluetooth bug related to switching device types. The previous Beta 4 marked the start of the Platform Stability phase, locking in the operating system's APIs. Testers with Pixel 6a, Pixel 7, 7 Pro, 7a, Pixel Fold, or Pixel Tablet will receive build number vCP41.260828.005.A6, while other eligible devices will download vCP41.260828.004.A8. The update also fixes a feature that remains enabled despite being disabled in user settings and addresses various bugs, including Bluetooth audio routing issues, a malfunctioning gesture feature, and UI freezing problems.