NewApp Digest
search bot

file transfers

Is Control Panel dying in Windows 11? Microsoft's biggest UI revamp says not yet
Winsage
August 27, 2026

Is Control Panel dying in Windows 11? Microsoft’s biggest UI revamp says not yet

Windows 11 is undergoing a significant design transformation, with updates to key components like Print Management, the Properties Sheet in File Explorer, and the AutoPlay dialog from Windows 8, all receiving a WinUI makeover. The Control Panel's future is uncertain, but it will remain until Microsoft can transition its features into Windows Settings. Microsoft plans to minimize the need for legacy features and is cautious about removing the Control Panel due to its importance for enterprise compatibility. Upcoming features include a modern Windows Run dialog set to launch in 2026, which will be faster and allow users to navigate to their user directory more efficiently. A modern Properties dialog is also being developed to replace the legacy version, and the AutoPlay dialog will be revamped to remember user preferences. A new Print Management app is in testing, aimed at improving printer management. The overall modernization of Windows 11 suggests that the Control Panel may eventually be phased out, but the timeline for this change is still unclear.
Russian Mobile Carriers Waive Data Fees for State-Backed Max Messenger
AppWizard
July 31, 2026

Russian Mobile Carriers Waive Data Fees for State-Backed Max Messenger

Major mobile carriers in Russia, including MTS, MegaFon, Beeline, and T2, have agreed to zero-rate data usage for the domestic Max messenger, effective August 1. This initiative aims to promote the state-approved platform and discourage the use of foreign messaging apps. Subscribers will have free access to voice calls, messaging, file transfers, and other services within the Max app. Since its launch in spring 2025, Max has been integrated into state digital services and mandated to be pre-installed on all smartphones sold in Russia, resulting in nearly 70 million daily active users. This announcement follows EU sanctions against VK, the app's developer, due to allegations of its connections with the Russian FSB and surveillance capabilities, leading to the removal of VK and Max from Apple and Google app stores.
You weren't imagining it: Windows 11's slow shutdowns are finally fixed
Winsage
June 26, 2026

You weren’t imagining it: Windows 11’s slow shutdowns are finally fixed

Windows 11 users are experiencing delays during the shutdown process, attributed to the Background Intelligent Transfer Service (BITS). Microsoft has released an optional update, KB5095093, to address this issue by improving the shutdown time of the BITS service. The update is expected to reduce unexpected freezes linked to BITS and also includes enhancements in Bluetooth functionality. Users must manually install the update via Windows Update or the Microsoft Update Catalog, with improvements set to be included in July’s main update.
Introduction to COM usage by Windows threats
Winsage
June 25, 2026

Introduction to COM usage by Windows threats

Component Object Model (COM) is a technology in Windows that enables object activation, inter-process communication, and automation across different programming languages. Malware exploits COM interfaces for activities such as lateral movement, execution, downloading, exfiltration, persistence, evasion, system discovery, and automation of Windows and Office functionalities. Reverse engineering COM-heavy binaries involves navigating GUIDs and indirect vtable calls to understand malware mechanics. Research at the AVAR 2025 conference and CARO 2026 workshop discusses methodologies for analyzing COM binaries and case studies of malware families that utilize COM. COM is an application binary interface (ABI) model that allows software components to be reused and enables interaction between different programming languages through interfaces defined at the binary level. Distributed COM (DCOM) allows clients to activate COM objects on remote systems. COM classes are identified by unique class identifiers (CLSIDs), and interfaces by interface identifiers (IIDs). The Windows registry stores COM registration data, with classes and interfaces located under specific keys. Malware often acts as a COM client, utilizing the COM runtime to instantiate classes and request interfaces. ProgIDs provide human-readable registry entries for COM classes. The CoCreateInstance function helps create class objects by resolving CLSID registrations. All COM interfaces derive from IUnknown, which manages object lifetimes and interface querying. COM has its own security model, and identifying classes and interfaces used by malware is crucial for threat researchers. Tools like ComView and OleView.NET assist in inspecting COM registrations. The analysis workflow includes identifying activation API calls, extracting CLSID and IID values, consulting registry definitions, and mapping vtable calls. Qakbot, a banking trojan, exemplifies the use of COM in malware, with its architecture enabling malicious activities like credential theft. Dynamic analysis tools can log COM-related calls in real-time to trace execution flow. Notable malware families that utilize COM include Gh0stRAT, which uses Task Scheduler COM interfaces, and the Attor platform, which employs BITS for file transfers. WarmCookie demonstrates the use of COM for persistence through Task Scheduler. Understanding COM's role in malware is essential for cybersecurity professionals.
Search