domains Archives

Winsage

August 2, 2026

5 Reasons Why People Are Ditching Windows 11

Many users have embraced Windows 11, but a significant portion remains loyal to Windows 10 or is exploring alternative operating systems. Performance issues on older laptops with 4-8 GB of RAM are a primary concern, as Windows 11's background processes consume more memory than Windows 10, leading to slowdowns. Users have reported that even supported devices experience performance dips. Methods to enhance Windows 11 performance exist, but many users prefer lightweight alternatives like Linux and ChromeOS Flex, which often provide improved performance. Windows 11 is criticized for its bloatware, with pre-installed software occupying storage space and consuming resources. Users find the interface cluttered and the search functionality inefficient, prompting some to stick with Windows 10 or consider alternatives like Linux or macOS. The update process in Windows 11 has become frustrating due to buggy updates, leading users to delay updates and consider operating systems with more stable update experiences. AI integration in Windows 11 has not been universally appreciated, with some users feeling it is forced and expressing a desire for Microsoft to focus on performance and reliability instead. Data collection practices in Windows 11 have raised privacy concerns, causing some users to hesitate in upgrading from Windows 10. The requirement for a Microsoft account during setup complicates the experience for those who prefer privacy, prompting them to explore other operating systems that prioritize user privacy.

Winsage

July 31, 2026

Windows quality: an update on the commitment we made in March

In March, a commitment was made to enhance the quality of Windows, with a focus on several immediate changes including enhanced taskbar customization, meaningful AI integration, minimizing disruptions from Windows Updates, faster and more reliable File Explorer, greater control over widgets and feed experiences, a more straightforward Windows Insider Program, and improving the Feedback Hub experience. The core areas of focus are performance, reliability, and well-crafted experiences, with improvements already being rolled out to Windows Insiders and set to expand across Windows 11 PCs this fall. Recent updates include enhancements to the Windows Search Box, improvements for developers at Build 2026, advancements in WinUI 3, updates to the Taskbar and Start menu, simplified AI integration, foundational architecture enhancements for File Explorer, updates to widgets and feed experiences, the launch of the Driver Quality Initiative (DQI), memory efficiency improvements, enhanced reliability for Windows Hello, changes to reduce disruptions from Windows Updates, and a simplified Windows Insider Program. Looking ahead, the team plans to bring enhancements to general availability while focusing on onboarding and setup, memory optimization for PCs with 8GB and above, family features, and improved voice interactions. Engaging with Windows Insiders has been a highlight, and the team remains committed to ongoing improvements based on user feedback.

AppWizard

July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

AppWizard

July 27, 2026

My parents’ Android phones were ruined by invasive ads. Here’s how I fixed them for good

Mobile advertising on Android devices has seen a rise in deceptive pop-ups that mimic legitimate notifications or system updates, leaving many users, particularly less tech-savvy individuals, vulnerable. A personal experience highlighted this issue when a family member fell for a misleading PDF ad, leading to the installation of multiple fraudulent applications. Recently, similar deceptive ads were encountered on YouTube, raising concerns about the safety of family members who rely on their devices for important tasks. Discussions on platforms like Reddit have pointed out the prevalence of misleading ads on family-friendly platforms. The author expressed a desire to block all ads if companies cannot ensure their safety. To address the issue, the author sought an ad-blocking solution that allows for remote management and network-wide filtering, ultimately choosing NextDNS. This content filtering solution offers a free account with sufficient monthly DNS queries and supports individual profiles for tailored settings. The setup process for NextDNS involves creating profiles for each family member, allowing for distinct settings and blocklists, and configuring devices with the provided DNS-over-TLS endpoint details. While NextDNS is effective, it does not eliminate all ads, particularly those from platforms like YouTube, indicating that additional measures may be necessary for comprehensive security. Regularly reviewing app permissions and uninstalling unnecessary applications are also recommended for enhancing security.

TrendTechie

July 24, 2026

BitTorrent исполнилось 25 лет. Как программа одного человека изменила интернет и поставила Голливуд в тупик

On July 2, 2001, Bram Cohen announced the operational status of his program, BitTorrent, on a mailing list for peer-to-peer network developers. BitTorrent revolutionized file sharing by segmenting files into smaller pieces, allowing users to download from multiple sources simultaneously and share already downloaded data, which improved download speeds as file popularity increased. Unlike earlier peer-to-peer networks, BitTorrent did not have a built-in catalog, relying on external websites for users to locate torrents. The first major torrent catalog, Suprnova, emerged in 2002, followed by The Pirate Bay in 2003, making the protocol widely accessible. By 2004, BitTorrent accounted for nearly a third of all internet traffic. In 2004, Cohen founded BitTorrent Inc., which acquired the client µTorrent in 2006. The company launched the BitTorrent Entertainment Network in 2007, but it closed in 2008 due to competition from free pirated content. BitTorrent Inc. later explored various technologies but struggled to establish a sustainable business model. The protocol evolved with decentralization features like the distributed hash table (DHT) and magnet links. In 2018, BitTorrent was acquired by the blockchain project TRON for an estimated 0 million. BitTorrent Inc. claims around 54 million active users per month, with additional users on independent clients. Despite a decline in torrent traffic from its peak, the network has been experiencing growth, attributed to rising streaming costs and fragmented content availability.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

Tech Optimizer

July 21, 2026

Advanced Threat Protection: How AI Transforms Enterprise Security

An attacker is testing stolen passwords against a company with inadequate firewall protection, highlighting the flaws in traditional security measures. Modern attacks, including ransomware and phishing, have evolved, necessitating advanced threat protection (ATP) that incorporates artificial intelligence (AI) for improved threat detection and response. AI-driven ATP identifies attacks that conventional tools miss, such as fileless malware and targeted phishing, by learning normal operating patterns and flagging deviations. Traditional security relies on known malware signatures, which are ineffective against zero-day attacks and polymorphic malware that changes its identity. Cloud misconfigurations and hybrid security gaps further complicate security. AI enhances detection by focusing on malicious behaviors rather than just file signatures, allowing for rapid identification of threats. Automated incident response can isolate affected endpoints and terminate malicious processes quickly. Behavioral analytics and threat intelligence integration improve ATP effectiveness by understanding user behavior and recognizing attack patterns. AI-powered ATP significantly reduces breach containment time and false positives, shifting the focus from reactive cleanup to proactive prevention. Best practices for maximizing ATP include integrating it into existing security operations, keeping machine learning models updated, and regularly testing defenses against real-world threats.

Tech Optimizer

July 21, 2026

Advanced Threat Protection: How AI Transforms Enterprise Security

An attacker is testing stolen passwords against a company that incorrectly believes its firewall is sufficient protection. Traditional defenses have become inadequate due to the speed and sophistication of modern attacks, including ransomware groups renting tools and phishing kits being easily accessible. Advanced threat protection (ATP) was designed to address these challenges, especially with the integration of artificial intelligence (AI). AI-powered ATP identifies attacks that conventional tools overlook, such as fileless malware and targeted phishing attempts, by learning the normal behavior of an organization’s environment and flagging anomalies. Traditional security relies on identifying known malware through established fingerprints, which fails against novel threats like zero-day attacks and polymorphic malware. The rise of remote work and cloud services has introduced new risks due to misconfigurations and inconsistent security rules. AI enhances threat detection by focusing on malicious behavior rather than matching files against known threats, allowing for rapid detection and automated incident response. Behavioral analytics establishes a baseline for users and devices, flagging deviations that may indicate insider threats or credential theft. Integrating threat intelligence provides insights into emerging threats and helps prioritize alerts. AI-driven ATP can contain breaches faster, significantly reducing the financial impact and dwell time of attackers. Best practices for maximizing ATP include integrating with security operations, ensuring comprehensive coverage, updating models regularly, conducting real-world testing, securing AI systems, and maintaining human oversight.