firewall Archives

Winsage

July 16, 2026

Windows Netlogon Flaw CVE-2026-41089: CVSS 9.8 [2026]

CVE-2026-41089 is a critical vulnerability in the Windows Netlogon service, rated 9.8 on the CVSS scale, allowing unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on domain controllers. It affects all supported versions of Windows Server configured as domain controllers, from Windows Server 2012 R2 to the latest release. Microsoft addressed this vulnerability on May 12, 2026, during a broader update that included 138 fixes, but it went largely unnoticed until early June when active exploitation was confirmed. The vulnerability is characterized as a stack-based buffer overflow and is considered "wormable" due to its ability to self-propagate across systems without user intervention. Organizations are advised to patch all domain controllers and audit network access to mitigate exposure.

Tech Optimizer

July 16, 2026

Get antivirus, a VPN, and password manager for $30

Panda Dome Complete is a comprehensive Windows security suite that offers protection against various digital threats, including ransomware, phishing scams, and data breaches. A one-year subscription is currently available for .99, reduced from its regular price of .99. Key features include real-time antivirus protection, anti-phishing tools, a dark web scanner, a built-in firewall, Wi-Fi protection, 150MB of daily VPN access, a password manager, PC cleanup tools, file encryption, secure file deletion, gaming and multimedia modes, and parental controls. The product is recognized by industry leaders and has over 23,000 reviews on Trustpilot.

Winsage

July 14, 2026

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft's July 2026 security update addresses 622 vulnerabilities, with 57 classified as "critical." Two critical vulnerabilities, CVE-2026-56155 (Active Directory Federation Services) and CVE-2026-56164 (Microsoft SharePoint Server), have been exploited in the wild. The critical vulnerabilities include 48 remote code execution (RCE) vulnerabilities, seven elevation of privilege (EoP) vulnerabilities, one spoofing vulnerability, and one security feature bypass vulnerability. RCE vulnerabilities affect various Microsoft services, including Windows Media, Microsoft Office, and SQL Server, with eleven rated as "more likely" to be exploited. Additional important vulnerabilities include CVE-2026-49170, CVE-2026-49795, and CVE-2026-50325. Talos is releasing a new Snort ruleset to detect these vulnerabilities, and Cisco Security Firewall customers are advised to update their ruleset.

Tech Optimizer

July 13, 2026

Best antivirus software for 2026, tested and reviewed by an expert

The digital landscape is increasingly threatened by scams and cyberattacks, necessitating robust antivirus solutions for various devices. Modern antivirus software has evolved into comprehensive security suites that include features like VPNs, email protection, and dark web monitoring. Users must balance feature richness with system performance, as costs can vary significantly after initial promotional rates. The best antivirus software includes: - Bitdefender Premium: Rated 4.5/5, priced from £49.99 per year, known for strong performance and a comprehensive feature set but limited to a single device for the free version. - Surfshark One: Rated 4/5, priced from £1.99 per month, recognized for its user-friendly interface but lacking some central features. - Norton 360 Deluxe: Rated 4/5, priced from £29.99 per year, praised for excellent performance and light system impact, though its interface is less polished. - Avira Free Security: Rated 3/5, free option available, offers basic protection but prompts users to upgrade frequently. - Avast One: Rated 4/5, free option available, features a modular design but includes persistent upgrade prompts. Each antivirus package provides solid protection against cyber threats, with many offering free trials for evaluation.

Tech Optimizer

July 11, 2026

Norton 360 Deluxe by Gen Digital Inc. – multi-device security with VPN bundled

Norton 360 Deluxe is a subscription service from Gen Digital that combines antivirus, firewall, VPN, and password management tools, covering up to five devices across various platforms. It includes features such as Norton Secure VPN, cloud backup for Windows PCs (up to 50 GB), Norton Password Manager, a smart firewall, and real-time malware scanning. The service is priced at €34.99 for the first year in Germany and around .99 in the U.S., with higher renewal prices. It is designed for households and small offices, providing multi-device coverage and ease of use. Norton 360 Deluxe is available through Norton’s website and retailers like Amazon, and it is recommended by review platforms for its comprehensive security features.

Tech Optimizer

July 10, 2026

Gen Digital stock holds steady as cybersecurity demand supports long term growth

Gen Digital is a publicly traded company focused on cybersecurity and digital privacy solutions, primarily targeting consumers and small businesses. The company generates revenue through recurring subscriptions for its security and identity protection services, which include antivirus software, VPN services, and identity monitoring. Gen Digital's business model relies on bundling multiple security features into comprehensive offerings, providing predictable revenue and stability in cash flows. The company emphasizes continuous updates to its services to protect against evolving cybersecurity threats. Its growth prospects are linked to trends in cybersecurity spending and the increasing adoption of subscription-based solutions. Gen Digital differentiates itself from competitors by focusing on individual devices and home networks rather than large enterprises. The company also benefits from distribution partnerships that help expand its customer base. Long-term demand for its products is driven by digitalization, cyber risks, and growing consumer awareness of privacy issues. Gen Digital's stock performance is influenced by both company-specific factors and broader market trends in technology and cybersecurity.

Winsage

July 10, 2026

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft has unveiled a destructive Windows backdoor named GigaWiper, which allows operators remote control over compromised systems to execute irreversible damage. GigaWiper originated from cyberattacks in October 2025 and is a composite of code from at least three malware families. It maintains its presence through a scheduled task disguised as “OneDrive Update,” executing at startup and every minute. GigaWiper can obliterate partition information, overwrite physical drives, and restart systems. It also mimics ransomware by encrypting files with the .candy extension, using randomly generated keys that are not stored, making recovery impossible. The malware has connections to the Crucio ransomware and resembles FlockWiper, with rewritten code in Go. GigaWiper features 20 command codes for various functions, including executing PowerShell instructions, managing processes, capturing screenshots, and remote access similar to VNC. It can remain on a system for surveillance until its destructive functions are activated. Microsoft Defender includes detection capabilities for GigaWiper, and users are advised to enable tamper protection and monitor for suspicious activities.

Winsage

July 8, 2026

Trojanized LetsVPN installer gives attackers remote access to Windows PCs

A malware campaign has been discovered that exploits the VPN service LetsVPN. Researchers from ThreatLocker found a malicious Windows installer that pretends to be the legitimate LetsVPN application while deploying a remote access trojan (RAT) called GoodPersonRAT. The malware allows attackers to control infected systems using stealth techniques. The malicious installer first deploys the RAT and then installs the authentic LetsVPN application, creating an illusion of legitimacy. The package identified as Kuailian_win-setup.86.msi contains the legitimate LetsVPN installer, a loader, and an encrypted payload. GoodPersonRAT features include remote desktop control, file upload/download, command execution, proxying, keylogging, and clipboard monitoring. It specifically targets Telegram Desktop users by archiving critical account information and altering proxy settings. The malware ensures persistence through Windows services and scheduled tasks and can undermine security software. The LetsVPN installer is legitimate and signed, but the MSI package is unsigned and contains malicious components. Users are advised to download software only from official sources and verify digital signatures.

Tech Optimizer

July 7, 2026

Avast Premium Security from Gen Digital – multi-device protection tuned for US households

Avast Premium Security is a multi-device security suite developed by Gen Digital, designed for U.S. households and small offices. It includes antivirus, ransomware protection, firewall, and web shield features. The product offers plans for one device, up to ten devices, or unlimited devices, with pricing around .99 per year for a single device and .99 for up to ten devices. It is compatible with Windows PCs, Macs, Android phones and tablets, and iOS devices. Key features include real-time malware scanning, advanced ransomware shields, phishing site detection, and a configurable firewall. The software operates quietly in the system tray and provides notifications when threats are detected. Avast Premium Security is positioned in a competitive market alongside brands like Norton, McAfee, Trend Micro, and Kaspersky, and is part of Gen Digital's strategy for recurring subscription revenue. The product is available for purchase online and targets U.S. households and small offices seeking comprehensive protection.

Tech Optimizer

July 2, 2026

Gen Digital highlights its cybersecurity franchise as investors look to long-term growth

Gen Digital (ISIN US3687361044) is a global cybersecurity company focused on protecting consumers and small businesses through a subscription-based model. It offers a range of services, including antivirus solutions, identity protection, endpoint protection for small businesses, and centralized security software. The subscription model allows for predictable revenue through monthly or annual billing, fostering long-term customer relationships. The company employs a tiered pricing strategy to enhance customer experience and increase average revenue per user. Gen Digital's revenue is primarily recurring, which stabilizes income against fluctuations in customer acquisition costs. The software sector typically provides high gross margins, and the company can cross-sell additional security tools to existing customers. Its consumer cybersecurity suite combines antivirus, firewall, and safe-browsing protection into a single package, compatible across multiple devices. Gen Digital is publicly traded in the U.S., providing access to equity capital and allowing retail investors to participate in the consumer cybersecurity market. The company's future growth depends on customer retention, new customer acquisition, and service expansion.