GitHub Archives

AppWizard

April 12, 2026

This developer squeezed a full Minecraft server onto an ESP32, and it actually works

A developer named angelthebox has created a Minecraft server called Macerun that runs on the ESP32-S3 microcontroller, using Minecraft version 1.16.5 rewritten in C. Key features include the ability for players to join the server, explore the world, place and break blocks, procedural world chunk generation, basic crafting mechanics with 2x2 recipes, in-game chat, and tracking of basic physics, health, and hunger. Changes to blocks are saved to the chip's flash memory. However, the server lacks mobs, 3x3 crafting recipes, and the ability to retain player inventories and positions after exiting. The source code is available on the Macerun GitHub page.

AppWizard

April 12, 2026

Hytale Hires the Creators of Minecraft’s Create Mod

Hypixel Studios has integrated the creators of the Create mod into its core design team for Hytale. Studio lead Simon Collins-Laflamme confirmed this, indicating that their focus is on enhancing the game's core systems, which may lead to automation features in the future. The Create team stated they will continue to support the Create mod for Minecraft, but it will not be ported to Hytale. The inclusion of the Create team suggests a commitment to expanding Hytale's mechanical complexity, although animated mechanical systems are not expected in the immediate future. Community response to this development has been positive.

Winsage

April 10, 2026

Windows Zero-Day Published on Github as Microsoft Fails to Act

A security researcher named Chaotic Eclipse published a working exploit for a Windows zero-day vulnerability, called BlueHammer, on GitHub on April 2. The exploit allows attackers to gain SYSTEM-level privileges by exploiting a race condition in Windows Defender’s signature update mechanism. The exploit has gained significant attention, with over 100 forks and nearly 300 stars on GitHub. Will Dormann, a principal vulnerability analyst, confirmed that while BlueHammer is functional, it may not always operate reliably. Microsoft has not issued a patch for this vulnerability. The exploit targets the Windows Defender signature update process, allowing low-privilege attackers to manipulate a file path during operation, leading to access to the Security Account Manager (SAM) database. Currently, only 8 out of 72 cybersecurity vendors on VirusTotal flag the exploit file as malicious, which raises concerns about detection coverage. Microsoft reiterated its commitment to coordinated vulnerability disclosure but did not address the communication issues regarding the BlueHammer report.

Winsage

April 10, 2026

Microsoft Locked Out VeraCrypt, WireGuard, and Windscribe from Pushing Windows Updates

Microsoft implemented a mandatory account verification process for all partners in the Windows Hardware Program who had not completed verification since April 2024, effective October 16, 2025. This requirement necessitated that partners verify their identities using a government-issued ID matching the name of the primary contact in the Partner Center. Failure to meet this deadline or pass verification resulted in account suspension, preventing further submissions. This affected the ability of developers to sign Windows kernel drivers, leading to suspensions for notable open source projects like VeraCrypt, WireGuard, and Windscribe. Mounir Idrassi, the developer of VeraCrypt, reported his account was terminated without notice, and Jason Donenfeld of WireGuard faced similar issues. Windscribe experienced a prolonged resolution process despite having a verified account for over eight years. Following these suspensions, Scott Hanselman from Microsoft announced that the accounts would be reinstated and corrective measures were being taken.

Winsage

April 10, 2026

Windows and Xbox rediscover user feedback and fans are wondering what took so long

Microsoft has shifted its focus to better address user needs, revitalizing its Xbox Series X|S consoles and re-engaging with the gaming community through initiatives like the global Xbox FanFest. The company is also working to improve its relationship with Windows users by acknowledging past criticisms and planning to reinstate Windows Insider meetups and prioritize user-requested features. Despite these efforts, skepticism remains among observers of Microsoft's trajectory. Microsoft's relationship with OpenAI is complicated, with CEO Satya Nadella expressing concerns about backlash against AI integration. The company has invested over a billion dollars in OpenAI for exclusive access to AI models but may pursue legal action against OpenAI due to its collaborations with other tech giants. Microsoft's AI and cloud businesses are facing scrutiny from investors, with concerns about profitability and the sustainability of Azure operations. Nearly half of U.S. data centers planned for 2026 are at risk of cancellation, complicating Microsoft's AI ambitions. OpenAI's path to profitability is expected to be long, with projections suggesting it may not turn a profit until 2030. The competitive landscape, including rivals like Anthropic and alternatives from China, adds uncertainty. Legal challenges may arise from OpenAI's agreements with other companies, potentially affecting Microsoft's interests. Nadella's reference to "societal permission" indicates an awareness of Microsoft's public image, which has suffered. Xbox has faced community engagement issues, and Windows 11 has experienced public relations challenges and a decline in innovation. The costs associated with AI have been substantial, impacting Microsoft's reputation and consumer trust.

AppWizard

April 9, 2026

This new app may free Galaxy Watch owners from Samsung’s phone-locked features

A new application called the GeminiMan Wellness Companion has been developed for Galaxy Watch users by Dante63, who previously created a patched version of the Samsung Health Monitor. The app allows users to record electrocardiogram (ECG) data from the Galaxy Watch, providing detailed reports and AI-driven analysis through a mobile app. It can track heart rhythm and rate, flagging abnormal rhythms, which the Samsung Health Monitor does not. Users can personalize their measurements with notes and create multiple profiles for different users. The app ensures data security through encryption and offers export options for ECG reports in CSV or PDF formats. Future updates will include blood pressure recording and additional health metrics like blood oxygen levels and sleep patterns. The development roadmap is available on the GeminiMan Wellness Companion GitHub page.

Winsage

April 9, 2026

BlueHammer: Windows zero-day exploit leaked

A proof-of-concept (PoC) exploit called BlueHammer has been released on GitHub, targeting an unpatched local privilege escalation vulnerability in Windows. The exploit, attributed to users Chaotic Eclipse and Nightmare Eclipse, has been modified by security researchers to work on updated versions of Windows 10, 11, and Windows Server. The exploit manipulates Microsoft Defender to create a Volume Shadow Copy, allowing access to sensitive registry files and enabling the extraction of NTLM password hashes. This facilitates the alteration of a local Administrator's password and subsequent login. The exploit can duplicate the Administrator's security token and create a malicious Windows Service that runs with SYSTEM privileges. While there are no reports of BlueHammer being exploited by malicious actors, researchers warn that such PoC code can be weaponized quickly. Microsoft has committed to investigating reported security issues related to this vulnerability.

Winsage

April 8, 2026

80 Copilots later, Microsoft is finally confronting the mess

Researcher Tey Bannerman identified 80 distinct instances of the Copilot brand across Microsoft’s products and services, highlighting potential user confusion due to fragmentation. Examples include Copilot in Dynamics 365 Field Service, Viva Glint, GitHub Copilot Workspace, and Microsoft Fabric. Each Copilot serves different functionalities, but this approach complicates the user experience, as seen with differences between Copilot in Microsoft Word and the general Copilot application in Windows. Microsoft has expressed intentions to streamline Windows 11 and reduce AI features, suggesting opportunities for simplification in its Copilot offerings.

Winsage

April 7, 2026

“This was not opportunistic. It was precision.” — How North Korean hackers used Microsoft Teams and Slack to compromise Windows PCs with an elaborate ploy

On March 30, 2026, axios, a JavaScript HTTP client library, was temporarily compromised by suspected North Korean hackers who hijacked maintainer Jason Saayman's account. This allowed them to publish two malicious versions of axios on npm. The malicious versions were identified and removed within three hours by StepSecurity. A post-mortem blog on GitHub provided security measures for users of Windows, macOS, and Linux, highlighting risks from a Remote Access Trojan (RAT) introduced during the breach. The attack was attributed to a group known as UNC1069, which has been active since at least 2018. Two weeks prior to the breach, Saayman was targeted in a social engineering campaign where attackers posed as a legitimate company founder, leading him to install the RAT via a fake update during a Microsoft Teams meeting. Microsoft Teams was not compromised; it was used as a delivery method for the Trojan. Saayman noted the operation's sophistication.

Winsage

April 7, 2026

Disgruntled researcher drops “BlueHammer” Windows zero-day LPE exploit

A security researcher, known as "Nightmare-Eclipse," released proof-of-concept exploit code for a Windows zero-day vulnerability called "BlueHammer," which allows local privilege escalation (LPE). The exploit has been validated by another researcher, Will Dormann, who confirmed it can escalate privileges on Windows systems, allowing non-administrative users to gain SYSTEM-level access. The exploit's reliability varies across different Windows versions, with inconsistent success rates reported. Microsoft has not acknowledged the vulnerability or provided a patch, raising concerns about potential exploitation by threat actors. Users are advised to restrict local user access, monitor for suspicious activity, and enable advanced endpoint protection.