NewApp Digest
search bot

employee

Windows XP's most famous pirated key wasn't a hack, and a Microsoft engineer explains why
Winsage
August 26, 2026

Windows XP’s most famous pirated key wasn’t a hack, and a Microsoft engineer explains why

The FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8 key is a notorious Windows XP product key that became widely associated with the operating system, which was released on October 25, 2001. Unlike modern free upgrades, Windows XP required users to purchase a physical copy, making the product key essential for installation. The FCKGW key was a legitimate Volume License Key that was misappropriated and allowed users to bypass Microsoft's Windows Product Activation (WPA) system, which linked product keys to specific hardware to combat piracy. This key was whitelisted in the activation logic, enabling installations without activation prompts. Although it is still technically usable on older discs, Microsoft's servers no longer validate it, and the key has been blacklisted. Microsoft recently released a new version of the Windows Bliss wallpaper to commemorate the 25th anniversary of Windows XP.
Payday: Aces High first impressions: VR is so back, baby!
BetaBeacon
August 20, 2026

Payday: Aces High first impressions: VR is so back, baby!

The game Payday: Aces High is the fourth entry in the Payday series, where players choose one of the Aces to seek revenge on billionaire Warren Jupiter. The game features six missions with randomized objectives, immersive VR mechanics, and a high level of replayability. It will be available on Meta Quest 3 and Steam VR with full crossplay between platforms.
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Winsage
August 17, 2026

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A suspected advanced persistent threat (APT) group linked to China exploited a newly patched vulnerability in VMware vCenter (CVE-2026-59310), which has a critical CVSS score of 9.8, allowing for arbitrary code execution and the deployment of Babuk-derived ransomware. A recently patched vulnerability in Apple macOS (CVE-2026-65400) has been exploited to deploy a cryptocurrency miner, granting unauthorized root access. The Lazarus Group from North Korea exploited a zero-day vulnerability in Microsoft Windows, targeting defense and aerospace sectors. GeoServer patched a critical SQL injection vulnerability that was actively exploited. A new macOS malware, Amnesia Stealer, targets users through ClickFix attacks, stealing data and allowing real-time access to authenticated sessions. A novel attack technique named GhostSplice can manipulate AI coding assistants. Research revealed a method exploiting Chromium's DevTools Protocol for data theft. Noteworthy CVEs this week include CVE-2026-68820, CVE-2026-58231, and multiple others across various platforms. A high-severity command injection flaw in FileRun allows remote code execution. An advanced ClickFix attack has been reported, deploying sophisticated malware. A heap overflow vulnerability in Citrix NetScaler was patched after indications of exploitation. A new malware loader targeting Portuguese-speaking users has been identified. A significant reduction in exposed Automatic Tank Gauge systems has been observed. A phishing campaign targeting Brazil has been detected, and an F.B.I. agent faces charges for unauthorized crypto withdrawals. Authorities in Ukraine dismantled fraudulent call centers, and a North Carolina man was sentenced for cyber extortion. Unauthorized access to sensitive data by the ExfilSquad group has been confirmed. LightSpy activity linked to China has been detected in over 13 countries. A supply chain attack exposed over 2,500 companies, and an Azure exfiltration campaign has exposed millions of enterprise records.
Old School RuneScape began when a dev 'found the 2007 server in their desk drawer:' 13 years later, it's setting subscriber records for the long-lived MMO
AppWizard
August 15, 2026

Old School RuneScape began when a dev ‘found the 2007 server in their desk drawer:’ 13 years later, it’s setting subscriber records for the long-lived MMO

In June, Jagex hosted its largest live event, the Deadman All Stars, a PvP tournament for Old School RuneScape (OSRS), outside the UK. Kieren Charles, the creative director of OSRS, noted that the game has grown significantly since its launch, stating, “The game's bigger now than it was in 2007.” OSRS surpassed the original RuneScape's age in 2013 and achieved an all-time high of over one million active subscribers last August. The decision to base OSRS on the 2007 version was influenced by player preference for what they considered the "golden age," despite initial interest in the 2006 version. OSRS is recognized as a pioneering example of officially-supported 'classic' servers, balancing community engagement with official support. Regular updates, including the upcoming Varlamore expansion in 2024, aim to keep the game fresh while maintaining its nostalgic essence. New content is approved through community votes, requiring a minimum of 70% approval. Charles emphasized the importance of community feedback, preferring to reject proposals rather than invest significant development time into unpopular features. He views his role as a caretaker of the OSRS legacy, focusing on what the community wants.
Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows
Winsage
August 13, 2026

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows

Nightmare Eclipse has released a new zero-day exploit called ShieldBreak, which can bypass Microsoft's RoguePlanet patch (CVE-2026-50656) and allow attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit has been confirmed by security expert Kevin Beaumont, who provided detection methods for it. ShieldBreak is the tenth zero-day from Nightmare Eclipse since April and was released shortly after Microsoft's monthly Patch Tuesday. The exploit allows local privilege escalation and has a 100% success rate on the latest version of Windows 11 and Windows Server 2025, while Windows 10 remains vulnerable. Microsoft is aware of the vulnerability and is investigating it, emphasizing the importance of coordinated vulnerability disclosure. Previous exploits from Nightmare Eclipse include LegacyHive and GreatXML, with earlier vulnerabilities having been patched but recent ones still unaddressed. Microsoft had threatened legal action against Nightmare Eclipse in May but later reconsidered its approach to vulnerability disclosure.
ExfilSquad выложила данные Wesco и других жертв через торренты
TrendTechie
August 13, 2026

ExfilSquad выложила данные Wesco и других жертв через торренты

ExfilSquad has announced new victims in the Wesco data breach, setting a negotiation deadline of August 5, 2026, after which stolen data will be publicly released. The affected organizations include Wesco International, the UK Department for Education Help Portal, Turing Portal, Police National Legal Database, Allstate, TaylorMade, Sun Day Red Golf, Frontier Airlines, District of Columbia Public Schools, Newcastle University, Viavi Solutions, City of Houston, City of Atlanta, and Bonava. Wesco International's breach involves 2.6 million records, while the City of Houston has 6 million records at risk. ExfilSquad uses extortion through data publication on an onion site and has expanded to torrent links for distribution, complicating data removal efforts. On August 7, 2026, they released torrent files for each victim, with active hosts identified in China and Russia. The group also claimed to have breached a bank in Nigeria, although this information later disappeared from their site.
Search