NewApp Digest
search bot

hypervisor

'This one just needs a script': Researchers find ultimate Windows kill switch which can disable antivirus w...
Winsage
August 14, 2026

‘This one just needs a script’: Researchers find ultimate Windows kill switch which can disable antivirus w…

Researchers from the University of Birmingham and Durham University discovered a vulnerability in consumer DDR4 and DDR5 memory chips, termed "Download more RAM," which allows attackers to misreport memory configuration, potentially doubling the perceived RAM. This manipulation enables unauthorized access to memory allocations, bypassing Windows' Virtualization-based Security (VBS) and Hypervisor-Enforced Code Integrity (HVCI), and disabling antivirus software. The vulnerability affects major manufacturers like Corsair, G.Skill, and ADATA, which collectively hold over 55% of the high-performance memory market. Microsoft has patched the vulnerability, cataloged as CVE-2026-23670, with a medium severity score of 5.7/10, in the April 2026 Patch Tuesday update. Corsair has introduced a feature to enable write protection on their memory modules, and other tools are available for additional protection.
'This one just needs a script': Researchers find ultimate Windows kill switch which can disable antivirus with almost no user interaction
Tech Optimizer
August 14, 2026

‘This one just needs a script’: Researchers find ultimate Windows kill switch which can disable antivirus with almost no user interaction

Researchers have identified a significant vulnerability in consumer DDR4 and DDR5 memory modules, known as the “Download more RAM” flaw, which allows attackers to bypass advanced Windows security features, including Virtualization-Based Security (VBS) and Hypervisor Code Integrity (HVCI). This vulnerability enables the manipulation of configuration reports from RAM, misleading the system about its actual memory capacity, which can disable antivirus protections and allow the reintroduction of outdated drivers. The exploit can be executed via a single-click script, leading to security failures. Microsoft has released a patch for CVE‑2026‑23670 to enhance memory write protection against such exploits.
Assassin’s Creed Black Flag Resynced залили на торренты до официального релиза
TrendTechie
July 11, 2026

Assassin’s Creed Black Flag Resynced залили на торренты до официального релиза

Assassin’s Creed Black Flag Resynced was leaked hours after the PC pre-load opened, with a pirated version appearing on torrent sites. The leak originated from an unencrypted build uploaded during the pre-load phase. Pirates bypassed security measures using a hypervisor, requiring the disabling of several Windows security features. The official launch for PC is scheduled for July 9, with console players also gaining access at midnight on that date in their respective time zones.
Assassin's Creed Black Flag Resynced слили на торренты до выхода
TrendTechie
July 11, 2026

Assassin’s Creed Black Flag Resynced слили на торренты до выхода

Assassin's Creed IV: Black Flag Resynced was leaked on torrent sites on July 8, shortly after the PC pre-load became available. The developers mistakenly released an unencrypted build, which was accessed by the piracy community using a hypervisor to bypass Denuvo's protections. The official PC launch is scheduled for the evening of July 9, while console players can access the game at midnight on July 9, local time. Running the pirated version may require disabling Windows security features, which could risk system integrity.
На торрентах появилась взломанная версия игры 007 First Light
TrendTechie
July 2, 2026

На торрентах появилась взломанная версия игры 007 First Light

The hacker known as voices38 has breached the Denuvo protection system in the game 007 First Light, which was released on May 27, 2026, approximately two weeks before the hack was reported. Voices38's method is a conventional executable "crack" that does not require users to disable security mechanisms, making it more user-friendly than previous attempts by the group DenuvOwO. Voices38 has also successfully bypassed protections in other high-profile games, including Pragmata, Stellar Blade, Resident Evil: Requiem, and Mafia: The Old Country. The effectiveness of DRM solutions like Denuvo is being questioned as hackers develop more sophisticated methods to breach these systems.
Riot Vanguard finally drops its controversial always-on requirement for anti-cheat — new on-demand mode requires a strict Windows 11 security stack
AppWizard
June 25, 2026

Riot Vanguard finally drops its controversial always-on requirement for anti-cheat — new on-demand mode requires a strict Windows 11 security stack

Riot Games has introduced a new feature for its Vanguard anti-cheat system called Vanguard On-Demand, which allows the kernel driver to load only when a Riot game is launched and unload upon exit. This change ends the previous practice of loading the driver at Windows start-up, which has been in place since 2020. The new mode is supported by Windows 11 25H2 and requires specific hardware configurations, including UEFI Secure Boot, TPM 2.0, Virtualization-Based Security (VBS), Hypervisor-Protected Code Integrity (HVCI), and IOMMU. Approximately 35% of players currently meet these hardware requirements, while around 3% are using incompatible systems. Riot has created a checklist called Vanguard Pre-Check to help players determine if their systems qualify. The percentage of fully secured machines is estimated to be around 34.33% and is increasing monthly. Players whose systems do not meet the criteria will need to make manual adjustments in their BIOS. Vanguard On-Demand mode will be available for players on Windows 11 starting later today. The feature is based on Microsoft’s Runtime Driver Attestation Report, which tracks driver activity since boot and helps ensure no vulnerable drivers have been loaded while Vanguard is inactive. Riot Games has required TPM 2.0 and Secure Boot on Windows 11 since 2020 and has faced criticism for these requirements. Enabling VBS and HVCI may affect frame rates and could disable older peripheral drivers due to Microsoft's vulnerable driver blocklist.
Windows 11 Settings You Should Change in 2026：A 9-Point Speed, Privacy, and Security Checklist
Winsage
June 10, 2026

Windows 11 Settings You Should Change in 2026：A 9-Point Speed, Privacy, and Security Checklist

On June 9, 2026, Microsoft released a major security update addressing around 200 vulnerabilities, including three critical zero-day exploits. This update coincides with the expiration of Secure Boot certificates that have been in place since 2011. Users are advised to review their Windows 11 settings to ensure security and optimization during this transition. Key actions include installing the June update, enabling faster delivery of updates, turning on Core Isolation memory integrity, activating Controlled folder access against ransomware, confirming drive encryption, disabling the advertising ID, minimizing diagnostic data, auditing camera and microphone permissions, disabling unnecessary startup applications, enabling Storage Sense, adjusting power mode settings, and tuning visual effects for better performance.
Use Windows Sandbox and containers to test untrusted apps safely
Winsage
June 4, 2026

Use Windows Sandbox and containers to test untrusted apps safely

Windows 11 features Smart App Control to block untrusted applications and includes Windows Sandbox, a lightweight virtual machine that provides an isolated desktop environment for safely executing applications. Windows Sandbox uses container technology and hypervisor-based virtualization to mitigate risks associated with untrusted software. It ensures that each session starts fresh, with no data persisting after closing, and applications installed on the host system are not accessible within the Sandbox. Starting with Windows 11 version 22H2, data can persist through restarts initiated within the Sandbox. Windows Sandbox is included in supported Windows editions such as Pro, Enterprise, and Education, and offers quick launch times, a lower memory footprint, and a secure environment for testing untrusted software. Setting up Windows Sandbox involves searching for it in the Start menu, running it as an administrator, and transferring executable files for installation within the Sandbox.
Search