NewApp Digest
search bot

duplicates

Microsoft pits more than 100 AI agents against each other to find Windows vulnerabilities
Winsage
May 14, 2026

Microsoft pits more than 100 AI agents against each other to find Windows vulnerabilities

Microsoft has introduced MDASH (Multi-Model Agentic Scanning Harness), a security solution that uses over 100 specialized AI agents to identify software vulnerabilities. On May 12, 2026, MDASH identified 16 new vulnerabilities (CVEs) in the Windows networking and authentication stack, four of which were critical, including remote code execution vulnerabilities in tcpip.sys, ikeext.dll, netlogon.dll, and dnsapi.dll. Ten of these vulnerabilities can be accessed over the network without authentication. MDASH operates through a four-stage pipeline: analyzing source code, scrutinizing for suspicious elements, debating the exploitability of issues, and attempting to exploit vulnerabilities. The system is model-agnostic and allows integration of new models and domain-specific knowledge. MDASH scored 88.45 percent on the CyberGym benchmark, ranking first among competitors, although the comparison may not be entirely fair as it contrasts a comprehensive framework with individual models. The models used to achieve this score are not specified. MDASH is supported by Microsoft's Autonomous Code Security Team and is currently in a limited private preview for select customers.
20 must-know shortcuts for Windows laptops
Winsage
May 4, 2026

20 must-know shortcuts for Windows laptops

Windows is the leading operating system for personal computers. Many users are unaware of keyboard shortcuts that can improve productivity. Essential keyboard shortcuts for Windows laptops include: - Ctrl + Shift + Esc: Opens Task Manager. - Win + . (Period): Accesses the emoji picker. - Win + V: Displays Clipboard History. - Win + Shift + S / Win + PrtScn: Snipping Tool for screen captures / captures the entire screen. - Win + D: Minimizes all open windows. - Alt + Enter: Displays properties of a selected file or folder. - Win + Arrow Keys: Snaps the active window to sides or corners of the screen. - Fn + F11: Enables fullscreen mode. - Win + G: Launches the Xbox Game Bar. - Alt + 0150/0151 (Number Pad): Types an en dash or em dash. - Win + P: Projects, duplicates, or extends display to additional monitors. - Win + R: Activates the Run tool. - Ctrl + Win + Shift + B: Restarts the GPU driver. - Win + K: Displays connected devices. - Win + Home: Minimizes all windows except the active one. - Shift + Fn + F10: Opens a context menu. - Win + L: Locks the computer. - Ctrl + Shift + T (Browser): Reopens recently closed browser tabs. - Ctrl + Shift + N: Creates a new folder. - Win + PauseBreak: Opens the system properties window.
PoC Exploit Released for Microsoft Windows Error Reporting ALPC Privilege Escalation
Winsage
March 4, 2026

PoC Exploit Released for Microsoft Windows Error Reporting ALPC Privilege Escalation

A proof-of-concept exploit for CVE-2026-20817, a local privilege escalation vulnerability in the Windows Error Reporting (WER) service, has been released by security researcher oxfemale on GitHub. This vulnerability allows low-privileged users to gain SYSTEM-level access through crafted Advanced Local Procedure Call (ALPC) messages. The flaw is located in the WER service's SvcElevatedLaunch method, which fails to validate caller privileges before executing WerFault.exe with user-supplied command line parameters. The CVSS v3.1 base score for this vulnerability is 7.8, indicating a high severity level. It affects unpatched versions of Windows 10, Windows 11, Windows Server 2019, and Windows Server 2022 prior to the January 2026 update. Demonstrations have shown successful exploitation on Windows 11 23H2. Security teams are advised to monitor for unusual processes related to WerFault.exe, investigate missing SeTcbPrivilege in SYSTEM tokens, and review WER-related activities from low-privilege users. Immediate application of the January 2026 security patches is recommended, and a temporary workaround involves disabling the WER service.
PoC Exploit Released for Windows Error Reporting ALPC Privilege Escalation
Winsage
March 3, 2026

PoC Exploit Released for Windows Error Reporting ALPC Privilege Escalation

A critical local privilege escalation vulnerability, tracked as CVE-2026-20817, affects Microsoft Windows through the Windows Error Reporting (WER) service. This flaw allows authenticated users with low-level privileges to execute arbitrary code with full SYSTEM privileges. The vulnerability resides in the SvcElevatedLaunch method (0x0D) and fails to validate user permissions, enabling attackers to launch WerFault.exe with malicious command-line parameters from a shared memory block. The exploit affects all versions of Windows 10 and Windows 11 prior to January 2026, as well as Windows Server 2019 and 2022. Microsoft addressed this vulnerability in the January 2026 Security Update. Organizations are advised to apply security patches and monitor for unusual WerFault.exe processes.
Creating a Data Pipeline to Monitor Local Crime Trends
Tech Optimizer
February 14, 2026

Creating a Data Pipeline to Monitor Local Crime Trends

The dataset utilized consists of police log entries from the Cambridge Police Department (CPD), which includes the date and time of incidents, type of incident, location, and a detailed description. The project follows a structured ETL process that involves extracting data via the Socrata Open Data API, validating the data for integrity, transforming it for optimal storage, and loading it into a PostgreSQL database. The extraction is performed using a Python client for the API, and validation checks ensure the presence of expected columns and the integrity of the data. The transformation process includes removing duplicates and splitting the datetime column into separate components. The data is then loaded into PostgreSQL, where a table is created to store the incidents. The entire ETL process is automated using Prefect, allowing for daily execution. Finally, the data is visualized using Metabase, which connects to the PostgreSQL database to create dashboards that display crime trends over time.
Search