disclosure Archives

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

AppWizard

July 27, 2026

Steam Week in Review: A torrent of janky retail sims continues to flood Steam, and there’s no end in sight

The retail simulator genre on Steam has gained significant popularity since late 2024, with 14 new titles launched last week. "Mall Together" attracted over 1,000 concurrent players and is notable for allowing players to construct entire shopping malls. PlayWay, a major publisher, released two of last week's titles and has launched four games since July 20, with 474 products listed on Steam. Critics have labeled some titles as shovelware, but PlayWay has also produced successful games like "House Flipper 2." Smaller studios are contributing to the genre, indicating demand for well-crafted retail sims. The top sellers on Steam from July 14-21 included "Counter-Strike 2," "Palworld," and "Assassin's Creed Black Flag Resynced." "The Mound: Omen of Cthulhu," released on July 15, received nearly 1,500 "mostly positive" reviews.

AppWizard

July 21, 2026

Hasbro takes $56 million hit over multiple game cancellations, but it’s still talking about how Baldur’s Gate 3 is key to its future success

Hasbro reported a million non-cash impairment in its second-quarter financial disclosure due to the cancellation of several anticipated video games originally planned for release in 2028 and beyond. The impairment reflects a decline in asset value rather than a direct financial loss. Two years ago, Hasbro's gaming division, led by Dan Ayoub, had ambitious plans for over a billion in game development. However, challenges have arisen, including issues with a GI Joe game and the cancellation of a Dungeons & Dragons title. CEO Chris Cocks mentioned that the company is reviewing its portfolio, leading to project cancellations and a financial write-down. Hasbro plans to focus on trading card games and role-playing games, leveraging successes like Magic: The Gathering and Baldur's Gate 3, which has been highly acclaimed. The company aims for 2026 to be a peak year for digital investment while planning to reduce overall digital spending by at least 25% annually by 2028 through cost-effective development strategies.

AppWizard

July 20, 2026

Steam Week in Review: Take cover, because it looks like more than half of Steam games will have an AI-disclosure by 2027-2028

In June 2017, Valve introduced Steam Direct, changing the platform's game release process from manual curation to a more open system. Before this, game releases were limited, with only one month—December 2016—exceeding 500 releases. By February 2025, monthly game launches on Steam surpassed 1,500. A study by Sulka Haro analyzed around 53,600 Steam titles released between mid-2023 and mid-2026, noting that in 2024, 10.9% of new games included an AI disclosure, rising to 19.9% in 2025, and reaching 30.8% by July 2026. Non-AI flagged launches increased from about 1,030 to around 1,320 per month, while AI-flagged launches grew from approximately 13 to about 530 monthly. Projections suggest that by 2027 or 2028, nearly half of all games on Steam will have an AI flag. Despite the increase in AI-flagged titles, many struggle financially and receive mediocre reviews. The gaming industry is seeing a rise in generative AI technologies, particularly in management simulation genres. Recent notable releases on Steam include Granblue Fantasy: Relink and Palworld, with anticipation for Star Wars Zero Company on August 27.

AppWizard

July 17, 2026

Telegram Trolls France On World Cup 2026 Exit; The Reason Is Not Football At All

Spain defeated France 2-0 in the semifinals of the FIFA World Cup 2026, advancing to the finals. Telegram Messenger expressed schadenfreude over France's exit, tweeting "BYE BYE" with a match result screenshot. Pavel Durov, Telegram's co-founder, faced legal issues in France, including a preliminary investigation into criminal activities involving Telegram, his detention in August 2024, indictment on 12 charges, and a subsequent policy change regarding user data sharing with authorities. Durov characterized his arrest as politically motivated, while Elon Musk criticized the situation, questioning the scrutiny faced by tech leaders.

Winsage

July 15, 2026

Windows 0-day drops the same day Microsoft releases record number of patches

Will Dormann, a senior principal vulnerability analyst at Tharros Labs, discussed a vulnerability that allows attackers to gain administrator privileges by configuring a system to execute their code upon an admin user's login. This vulnerability enables non-admin users to modify the classes registry hive of an admin user, posing a significant risk. It could be exploited without user interaction and may be combined with another vulnerability that provides direct access to an administrative account. Microsoft is aware of the issue and is investigating it, encouraging coordinated disclosure from vulnerability reporters. Independent researcher Kevin Beaumont has created a detection script to help protect against this vulnerability, along with recommendations to restrict local non-user accounts, monitor the ProfSvc for unexpected hive loads, and track activity related to NTUSER.DAT and UsrClass.dat files.

Winsage

July 14, 2026

Microsoft Just Patched a Record 570 Flaws in Windows

Microsoft's July Patch Tuesday update addresses 570 vulnerabilities, including three critical zero-days. The vulnerabilities include 254 elevation-of-privilege flaws, 17 security feature bypasses, 145 remote-code-execution issues, 102 information disclosures, 16 spoofing vulnerabilities, and 35 denial-of-service vulnerabilities. Among these, 59 bugs are classified as "critical." The three zero-days patched are CVE-2026-56155 (elevation of privilege in Active Directory Federation Services), CVE-2026-56164 (elevation of privilege in Microsoft SharePoint Server), and CVE-2026-50661 (security bypass in Windows BitLocker). The update is recommended to be installed as soon as possible, and users can check for updates through the Windows Update settings.

AppWizard

July 13, 2026

More than 17,000 games on Steam now come with an AI disclosure, 30% use AI for two or more reasons

Over 17,250 games on Steam feature AI-generated content, with 69% of this AI usage dedicated to enhancing in-game content such as artwork, writing, audio, and localization. During a recent Steam event, nearly 20% of showcased games carried an AI warning. Some well-known titles like PUBG and Call of Duty also disclose their use of AI. While some developers express hesitance towards AI integration, data suggests that many gamers are open to the benefits of AI in their gaming experience. The primary use of AI is for in-game assets, followed by marketing materials at 17%, while only 5% of developers use AI solely for development purposes.

AppWizard

July 13, 2026

You can now spot AI-generated Google ads, if you know where to look

Google is introducing AI labels for ads across its platforms, including Search, YouTube, and Discover, to indicate when advertisements have been generated or edited using artificial intelligence. The label “Created or edited with AI” will be displayed in My Ad Center under “How this ad was made.” This feature will roll out globally, with automatic labeling for ads created using Google's AI tools, while advertisers using third-party AI tools must self-disclose their AI usage. This initiative aims to enhance transparency in digital advertising and improve the identification of AI-generated content. However, the responsibility for disclosure in cases not involving Google's tools lies with the advertisers, which may allow some to evade transparency measures.

Winsage

July 12, 2026

Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing

Microsoft has confirmed the existence of the Global Device Identifier (GDID), a unique identifier assigned to Windows installations, in a federal complaint against an alleged member of the Scattered Spider hacking group. The GDID is generated when a Windows system is set up with a Microsoft Account and remains active through various Windows updates. Disabling the GDID could disrupt Windows activation and access to Microsoft Store applications. The GDID is described as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device." It is created during the provisioning of Windows with a Microsoft Account and is stored in the Windows registry under HKCUSOFTWAREMicrosoftIdentityCRLExtendedProperties. The GDID remains persistent through Windows updates but is not retained after a clean reinstall. A single user can possess multiple GDIDs linked through their account, OneDrive, and activation history. The FBI used the GDID to track Peter Stokes, an alleged member of the Scattered Spider group, across various VPN connections and proxy servers. The GDID was recorded visiting specific websites and was linked to Stokes's accounts on platforms like Snapchat and Facebook. Concerns have been raised regarding user privacy, as the GDID is assigned without user consent and cannot be disabled without compromising essential Windows features. Microsoft has not committed to providing user-facing controls or comprehensive documentation for everyday users regarding the GDID. Legal requests can compel Microsoft to disclose GDID activity data to law enforcement. The GDID is linked to the Microsoft Account rather than the device itself, meaning reinstalling the operating system does not sever this connection.