hacker

Winsage
March 28, 2026
Microsoft has confirmed a major kernel security update for Windows 11, revoking trust in older drivers signed through an outdated cross-certification program. The update will ensure that Windows 11 accepts only software that has passed the Windows Hardware Compatibility Program's testing standards. This change aims to counter piracy attempts, particularly against a hacker known as DenuvOwOA, who bypassed Denuvo's anti-piracy protection by manipulating the embedded hypervisor and loading unsigned or vulnerable drivers. The new security policy will block the execution of such code, making existing hacking methods obsolete. The rollout will begin in compatibility assessment mode for Windows 11 and Windows Server & Hosting, with a hard block activated only if no stability issues are detected. Corporate clients can manually add certificates through the Application Control for business tool, while gamers will find it increasingly difficult to run hacked games relying on a modified hypervisor.
AppWizard
March 19, 2026
Cybersecurity researchers have identified a new family of Android malware called Perseus, designed for device takeovers and financial fraud. It utilizes Accessibility-based remote sessions for real-time monitoring and interaction with infected devices, particularly targeting Turkey and Italy. Perseus monitors user notes to extract personal or financial information and is distributed through dropper applications via phishing websites. It expands on the codebase of previous malware like Phoenix and employs disguises as IPTV services to reduce user suspicion. Once operational, it performs overlay attacks and captures keystrokes to steal credentials from financial applications. The malware allows operators to issue commands through a command-and-control panel, enabling various malicious actions, including capturing note content and initiating remote visual streams. Perseus also conducts environment checks to evade detection and ensure it operates on legitimate devices.
AppWizard
March 17, 2026
The FBI is investigating a hacker responsible for releasing several video games with embedded malware on the Steam platform. The suspected games include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. These games were developed over the past two years and posed risks to gamers who downloaded them. This incident follows a similar event from the previous year when malware-laden games were also uploaded to Steam. Neither Valve nor the FBI has commented on the investigation.
AppWizard
March 13, 2026
The FBI has launched an investigation into malware threats associated with PC games on Steam, particularly targeting users from May 2024 to January 2026. The games identified include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova, all linked to malware incidents. For example, PirateFi was designed to steal browser cookies, Chemia updated itself with malicious software, and BlockBlasters was identified as a Trojan that siphoned cryptocurrency. The FBI's alert also mentions Lampy, which may harbor malware. Valve, the parent company of Steam, has not responded to inquiries but has warned users about the affected games. The investigation suggests a potential link to a single group or individual, with reports indicating that victims were lured through Telegram messages offering free game keys or job opportunities.
TrendTechie
March 12, 2026
YggTorrent, a prominent French private torrent tracker launched in 2017, was reportedly destroyed by a hacker known as Gr0lum in early March, leaving 6.6 million users affected. Gr0lum accused the YggTorrent administration of engaging in DDoS attacks against competitors, purging dissenting uploaders, and sabotaging their own API. In 2025, YggTorrent introduced a Turbo subscription model that hampered downloads, leading to user criticism. Following its downfall, YggTorrent has made a tentative return as a countdown website, with the administration denying all allegations and asserting that databases and backups were not destroyed. The French piracy community remains skeptical of these claims.
AppWizard
February 19, 2026
Cybersecurity researchers have identified a new Android trojan named Massiv, designed for device takeover attacks targeting financial theft. It disguises itself as IPTV applications and poses risks to mobile banking users by allowing operators to remotely control infected devices for fraudulent transactions. The malware was first detected in campaigns targeting users in Portugal and Greece, with features including screen streaming, keylogging, SMS interception, and fake overlays for credential theft. One campaign specifically targeted the gov.pt application to deceive users into providing sensitive information. Massiv can execute various malicious actions, such as altering device settings, sending device information, and downloading malicious files. It is distributed through dropper applications that mimic IPTV services, often via SMS phishing. The malware operates in the background while the dropper appears as a legitimate app. Recent campaigns have focused on regions like Spain, Portugal, France, and Turkey, indicating a growing threat landscape. The operators of Massiv are developing it further, suggesting intentions to offer it as a Malware-as-a-Service.
AppWizard
February 16, 2026
Old Sega consoles, particularly the Dreamcast and Sega Saturn, are experiencing a revival among gamers, driven by the Retro Gaming community. Notably, developer Frogbull has successfully ported Minecraft to the Sega Saturn, showcasing its capabilities despite the console's age. He has also ported other iconic titles, including Crash Bandicoot, Final Fantasy VII, and Metal Gear Solid. A video of the Sega Saturn version of Minecraft is available on YouTube, and fans can support Frogbull's projects through Patreon.
Winsage
February 12, 2026
Microsoft has addressed critical security vulnerabilities in its Windows operating system and Office suite that are actively exploited by malicious actors. These vulnerabilities include one-click attacks that can be triggered by users clicking on malicious links or opening compromised Office files. Known as zero-days, these flaws were exploited before Microsoft could implement fixes. One significant vulnerability, tracked as CVE-2026-21510, affects the Windows shell and allows hackers to bypass Microsoft's SmartScreen feature, potentially enabling remote malware installation. Another vulnerability, CVE-2026-21513, is found in the MSHTML browser engine, allowing hackers to install malware by bypassing security measures. Microsoft has also patched three other zero-day bugs that were under active exploitation.
AppWizard
January 22, 2026
Xbox is introducing updates to enhance gaming experiences, including the Xbox PC app for Arm-based Windows 11 PCs, allowing downloads from the Xbox PC app catalog and access to Xbox Game Pass. A new Game Save Sync Indicator feature provides real-time visibility into cloud save status for seamless gameplay across devices. Xbox has partnered with Hisense and V homeOS to enable cloud gaming on select Smart TVs. The Handheld Compatibility Program highlights games optimized for portable play, with recent additions such as Clair Obscur: Expedition 33 and Final Fantasy VII Remake Intergrade. The Xbox Play Anywhere initiative now supports over 1,000 games for cross-platform play, including titles like Abyss DX and Cyberpunk Hacker. The Stream Your Own Game feature allows Xbox Game Pass subscribers to stream from a library of over 1,000 owned games, including Final Fantasy VII Remake Intergrade. Xbox is reviving retro classics through a collaboration with Antstream Arcade, featuring over 100 titles and community challenges. Support for mouse and keyboard navigation has been expanded to over 230 games, and touch controls are available on cloud. Community feedback is encouraged to shape future developments, and players can join the Xbox Insider Program for early access to new features.
Tech Optimizer
January 14, 2026
PostgREST is a web server developed in Haskell that converts PostgreSQL databases into RESTful APIs, offering a more efficient and standards-compliant alternative to manual CRUD programming. It achieves subsecond response times for up to 2000 requests per second, utilizing the Warp HTTP server and offloading tasks like JSON serialization and data validation to the database. Authentication is managed through JSON Web Tokens (JWT), with authorization based on database-defined roles. PostgREST avoids using Object Relational Mappers (ORMs) and encourages declarative constraints in databases to maintain data integrity. User feedback has been mostly positive, although some have expressed concerns about complexities in production environments.
Search