disable Archives

Winsage

May 22, 2026

Microsoft brings back personalization to Windows 11

Microsoft is addressing user feedback on Windows 11 by enhancing taskbar and Start menu customization. Users will soon be able to reposition the taskbar to the top or sides of the screen and choose icon alignment. This feature aims to provide more flexibility and improve user experience, particularly for those needing additional vertical screen space. The updates are currently available to Windows Insider Preview participants and can be adjusted in the settings. Additionally, the Start menu will see changes, allowing users to disable sections like Recommended and Pinned, rename the Recommended section to Recent, and choose between small and large sizes for the menu. These enhancements are expected to roll out to all Windows 11 users soon.

AppWizard

May 21, 2026

An Overwatch player has come up with an ingenious plan to remind others how to actually play the game: ‘A little ego check never hurt anyone’

In Overwatch, many players lack essential gameplay knowledge, such as the healing properties of the payload and the importance of counter-switching. An innovative player, pogstream, suggests using spawn doors as a communication tool to display vital gameplay tips. Proposed tips include reminders to group up, track deaths, bind interaction keys, monitor ultimate usage, and encourage hero switching when countered. This approach aims to enhance player awareness without overwhelming them, with an option to disable the reminders if desired.

Winsage

May 21, 2026

Microsoft Defender Zero-Day Vulnerabilities RedSun and UnDefend Actively Exploited on Windows 10, 11, and Server (April 2026 CVE Analysis)

In April 2026, two zero-day vulnerabilities, RedSun and UnDefend, were discovered in Microsoft Defender, affecting Windows 10, Windows 11, and Windows Server platforms. These vulnerabilities allow attackers to escalate privileges to SYSTEM and bypass Defender’s protections. RedSun exploits a flaw in Defender's remediation process, enabling low-privileged users to overwrite critical system files. UnDefend allows attackers to disrupt Defender’s updates, keeping it outdated and ineffective. Both vulnerabilities are actively being exploited, with attackers leveraging them to gain persistent access and deploy ransomware. The primary targets are organizations using Windows systems with Defender enabled, particularly in sectors like finance, healthcare, and government. Mitigation strategies include applying updates for related vulnerabilities, monitoring for suspicious activities, and implementing additional security measures.

Winsage

May 21, 2026

The 13 biggest Windows 11 changes from early May — and why they matter for 2026

Microsoft has released several preview builds of Windows 11 as part of the Windows Insider Program in early May 2026, focusing on refining existing functionalities. Key updates include: 1. Taskbar position settings: Users can now reposition the Taskbar to the top, left, or right edges of the screen with build 26300.8493. 2. Modern Run dialog: A redesigned Run dialog was introduced in build 26300.8346, featuring a modern aesthetic and support for light and dark modes. 3. Share interface with suggestions: App suggestions for Azure Active Directory users have been added to the Windows Share interface. 4. File Explorer improvements: Enhancements have been made to address loading issues and improve the "Favorites" section and thumbnail displays. 5. Widgets changes: Default settings for Widgets have been adjusted to minimize distractions, including disabling hover opening and Taskbar badges. 6. Windows Search box with improved results: The search interface will prioritize local apps and files over web results starting with build 26300.8493. 7. New spinner design for core experiences: A unified donut-style spinner animation has been introduced for various core experiences. 8. Touchpad gesture controls: New precision touchpad gestures have been added to adjust scroll and zoom speeds. 9. Home to Pro Education free upgrade: Eligible K-12 organizations can upgrade from Windows 11 Home to Pro Education at no cost. 10. Task Manager with new NPU visibility: The Task Manager now includes columns for "NPU" and "NPU Engine" in relevant tabs. 11. Voice Typing on the touch keyboard: The touch keyboard's Voice Typing feature has been updated with a new button and animations. 12. Windows Update overhaul: Users can skip updates during setup and pause updates indefinitely in 35-day blocks starting with build 28020.2134. 13. Shared Audio feature: The new "Shared Audio" feature allows two users to listen to the same audio stream from one computer using Bluetooth LE Audio technology.

Tech Optimizer

May 20, 2026

PoC Exploit Released for 20-Year Old PostgreSQL RCE Vulnerability

A proof-of-concept exploit has been developed for CVE-2026-2005, a remote code execution vulnerability in the pgcrypto extension of PostgreSQL. This vulnerability, stemming from legacy code, allows attackers to trigger a heap-based buffer overflow through specially crafted PGP messages, enabling arbitrary memory read and write operations. Successful exploitation can escalate privileges to PostgreSQL superuser status and execute commands on the operating system. The exploit targets PostgreSQL instances compiled from a specific vulnerable commit and circumvents protections like Address Space Layout Randomization (ASLR). It involves corrupting heap memory structures, leading to a controlled pointer leak that reveals the heap layout. Security researcher Varik Matevosyan has published the PoC on GitHub, demonstrating the exploitation process. The exploit requires a compatible PostgreSQL binary and utilizes Python-based tools for interaction. Organizations are advised to review their PostgreSQL deployments, disable unnecessary extensions, and apply security updates to mitigate risks.

Winsage

May 20, 2026

This tool lets you purge Windows 11 of all AI bloat features

Microsoft's Copilot chatbot is integrated into various Windows 11 applications, including the Edge browser, Photos app, and Paint software. Users can manage and disable unwanted AI components using the open-source program FlyOOBE, available for free on GitHub. To use FlyOOBE, users download a ZIP file, extract it, and run FlyOOBE.exe as an administrator. The program allows users to check the activation status of AI components and disable those they do not want by selecting them and confirming the changes. If FlyOOBE freezes, users can close the "Windows PowerShell" window to re-check components. FlyOOBE also offers features for removing bloatware. While it is free, donations to the developer, Builtbybel, are appreciated.

Winsage

May 20, 2026

MSHTA abuse helps malware hide in Windows processes

Bitdefender's research highlights the use of Microsoft's MSHTA utility in malware attacks, noting its default activation in Windows systems. Cybercriminals exploit MSHTA to execute malicious scripts under the guise of legitimate processes, linking it to various malware families like LummaStealer and PurpleFox. The study reports a rise in MSHTA-related detections, indicating a shift towards "living-off-the-land" tactics that utilize legitimate tools to evade security alerts. Social engineering is identified as a common entry point for attacks, employing deceptive methods such as fake software downloads and phishing links. MSHTA can retrieve and execute additional payloads through multi-stage chains, complicating detection efforts. The attacks target sensitive information, including credentials and financial data, and the continued presence of MSHTA poses risks as it allows threat actors to conceal malicious actions. To mitigate these threats, organizations are advised to restrict or disable legacy scripting tools and exercise caution with untrusted downloads. The report emphasizes the challenge of detecting unusual behaviors associated with legitimate utilities in the context of cyber threats.

Winsage

May 20, 2026

Microsoft says Windows 11’s Search will stop forcing web over your apps and local files in most cases

Windows 11's Search functionality has been updated to prioritize local files and applications over web results, improving the search experience. Recent testing shows that searches for specific files yield more relevant local results rather than web links. Microsoft has confirmed that these changes are part of an initiative to enhance the search experience, as noted in the release notes for Build 26300.8493. Users currently have the option to disable web search through the Registry, but this feature is not available in the Settings menu. Microsoft is working on further improvements, including a clearer distinction between local and web results, and enhancements to search functionality across the taskbar and File Explorer. Additionally, users can expect taskbar customization options and other features aimed at improving the overall user experience.

Tech Optimizer

May 19, 2026

20-Year-Old PostgreSQL Flaw Gets Public PoC Exploit for Remote Code Execution

A proof-of-concept exploit for CVE-2026-2005 has been released, highlighting a significant vulnerability in the PostgreSQL pgcrypto extension that allows for remote code execution (RCE). This flaw, rooted in legacy code for nearly 20 years, enables attackers to escalate privileges and execute arbitrary commands on compromised servers. The vulnerability is found in the PGP session key parsing logic of the pgcrypto module and involves a heap-based buffer overflow, granting attackers arbitrary read and write access to memory. The exploit, shared by researcher “var77” on GitHub, demonstrates a multi-stage process that bypasses modern security measures like Address Space Layout Randomization (ASLR) using specially crafted PGP messages. The attack involves several steps, including heap pointer leakage, arbitrary memory read, identification of executable memory regions, and privilege escalation to the PostgreSQL superuser level, ultimately allowing the execution of OS-level commands. The vulnerability affects PostgreSQL deployments with the pgcrypto extension enabled, particularly those using vulnerable code versions. Successful exploitation can lead to full database compromise, unauthorized data access or modification, and potential lateral movement within networks. Organizations are advised to update PostgreSQL, restrict pgcrypto usage, limit user privileges, and monitor for unusual activity to mitigate risks.

AppWizard

May 19, 2026

Russia’s State-Mandated Max Messenger Reportedly Hides Powerful Tracking Tools

The state-mandated messenger Max, developed by VK and supported by the Kremlin, is preinstalled on all new smartphones in Russia as of September 1, 2025, and is designed to function during internet blackouts. Following WhatsApp's ban in February 2026, officials have promoted Max as a "sovereign" alternative to Western messaging platforms. A reverse-engineering study revealed numerous surveillance features in Max, including VPN detection that restricts access until VPNs are disabled, real-time monitoring of contact lists, NFC control for manipulating the phone's NFC chip, silent message deletion, IP address tracking, a persistent hardware identifier, the creation of fake chats and reviews, and code injection capabilities. The study also found an on-device machine-learning system that detects keywords from audio input and the ability to record microphone audio during calls without user notification. Additionally, Max monitors access to foreign services and compiles sensitive user information into reports sent to analytics channels. The integration of Max is part of Moscow's broader initiative to consolidate internet traffic through state-controlled platforms, even reaching the International Space Station for communication purposes. Critics view the promotion of Max as part of a strategy to establish a "sovereign" communications system, raising concerns about digital privacy and freedom in Russia.