indicators Archives

AppWizard

July 2, 2026

Minecraft on Bedrock finally gets Closed Captions, a decade after Java Edition

Mojang has officially introduced closed caption support to Minecraft Bedrock Edition after testing it through preview builds. This feature aims to create a more inclusive gaming environment for players who are deaf or hard-of-hearing. Players can activate closed captions by navigating to Settings > Accessibility > Gameplay, where they can customize the visibility duration, on-screen positioning, and select which sounds to display. The game will provide descriptions of nearby sounds and directional cues for sound sources. Mojang acknowledges potential issues with incorrect sound displays and encourages player feedback for improvements.

Winsage

June 29, 2026

OEMs reveal Windows 11 Secure Boot fix after deadline passes, here’s how to update your PC

Major PC manufacturers, including HP, Dell, ASUS, Lenovo, MSI, Acer, Samsung, LG, and Microsoft’s Surface division, have provided guidance on transitioning to new Secure Boot certificates as the expiration of Microsoft’s 2011 certificates approaches. The expiration will occur in three phases: Microsoft Corporation KEK CA 2011 expired on June 24, 2026; Microsoft UEFI CA 2011 expired on June 27, 2026; and Microsoft Windows Production PCA 2011 is set to expire on October 19, 2026. Microsoft has begun rolling out replacement certificates through Windows Update, contingent on OEMs providing compatible BIOS updates. ASUS offers detailed documentation for both consumer and commercial devices, confirming that most users will receive updates automatically. Lenovo provides direct download links for BIOS updates organized by product family and specifies which products will not receive updates. Dell's support article covers its entire product lineup, noting that devices with an End of Service Life before January 1, 2026, will not receive updates. HP outlines a dual-track approach for updates, with specific timelines for commercial PCs. Microsoft's Surface devices receive updates directly from Microsoft, while MSI categorizes guidance based on processor generation for its laptops. Acer emphasizes backing up the BitLocker recovery key and provides a model table for confirmed BIOS release dates. Samsung confirms that all PCs running Windows 10 or 11 will function normally post-expiration, but security updates will cease. LG has released a guide for checking BIOS updates for its PCs. To verify if a PC has the 2023 certificates, users can check the Secure Boot section in Windows Security. A green checkmark indicates successful application, while yellow or red icons indicate pending updates or incompatibility. Microsoft has pushed the certificates to all eligible devices as of June 2026.

AppWizard

June 27, 2026

Riot delays ‘last hit indicators’ in League of Legends ranked mode after fan response: ‘We want to get more data and feedback’

Riot Games is introducing last hit indicators in League of Legends to assist new players in mastering the last hitting technique, which is crucial for earning gold. These indicators will visually show when a creep is about to die, making it easier for players to secure kills. Currently, this feature is limited to casual modes, but it is set to be introduced to normal draft and ranked play. Community responses are mixed, with some players expressing skepticism about its impact on skill levels, while others see it as a way to lower barriers for entry without affecting overall gameplay. Riot Games plans to gather more data and feedback before deciding on the feature's integration into ranked play.

AppWizard

June 25, 2026

Is Halifax down? Issues with banking app and login reported

Bank account holders have reported difficulties accessing the Halifax app and online banking services since around 8:30 AM, with users voicing concerns on Downdetector. In the UK, including cities like Birmingham, London, and Bristol, 69% of users experienced problems with the app, 12% faced login issues, and 13% reported mobile banking problems. A notice on the app indicated a technical error preventing users from logging in. Downdetector tracks disruptions in online services by allowing users to report issues, providing real-time analysis of reported problems.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 24, 2026

Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection

A malware campaign targets Windows systems through a malicious npm package named postcss-minify-selector-parser, which mimics the legitimate postcss-selector-parser. This counterfeit package installs a Remote Access Trojan (RAT) on developer machines, beginning with a multi-stage attack triggered by the installation of the package. The RAT can steal credentials, execute shell commands, and communicate with a remote attacker. Security researchers at JFrog identified this threat and reported it on June 22, 2026, noting that two additional related packages, postcss-minify-selector and aes-decode-runner-pro, are linked to the same publisher and remain live on the npm registry. The RAT employs encrypted HTTP communication with a command-and-control (C2) server and ensures persistence by creating a registry key under the Windows Run key. It has capabilities for remote shell execution, file uploads and downloads, and can steal saved login data from Google Chrome using Windows decryption APIs. The malware is designed for organized batch exfiltration of stolen data. Indicators of compromise include specific IP addresses, domains, file paths, and SHA-256 hashes associated with the malware components. JFrog advises users to remove the malicious packages, inspect their dependency trees, and treat any stored credentials as compromised.

Tech Optimizer

June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.

AppWizard

June 21, 2026

The Useful Privacy Feature That Isn’t Enabled By Default On Your Android Phone

Private Space is a privacy feature available on Pixel and select Android devices, while Secure Folder is exclusive to Samsung devices. Both create a secure area within the smartphone for sensitive applications and data storage, operating independently from the primary user profile. Users can install apps and store files in these secure spaces without compromising their main profile's integrity. To activate Private Space, users navigate to Settings > Security and Privacy > Private Space, requiring a Google Account sign-in and a unique lock. For Samsung devices, the path is Settings > Security and Privacy > More Security Settings > Secure Folder, requiring a Samsung account. Private Space cannot be used on managed devices or with supervised accounts, and only the primary user can manage these secure areas. The Private Space or Secure Folder icon can be hidden for added security. The private area is distinctly separated from the core user profile, preventing open communication between the two spaces to safeguard against data harvesting. Android allows granular control over app permissions, and users are advised to isolate questionable apps within Private Space or Secure Folder to protect sensitive information.

AppWizard

June 20, 2026

I tried Samsung Health’s huge redesign for 2026. Here are the 5 biggest hits and misses

Samsung has redesigned its health tracking application, Samsung Health, coinciding with the launch of the Galaxy Watch 9 and One UI 9. The new interface features a vibrant color palette that some users find overwhelming, as colors no longer correspond to specific health metrics. The app includes a new top shortcuts bar for easier navigation to core health aspects like Activity, Sleep, Vitals, Mindfulness, and Nutrition, and allows customization of the dashboard. Graphs have been improved with pinch-to-zoom functionality, but this feature is inconsistently applied across different metrics. The app lacks a comprehensive graph page for comparing multiple metrics and may present unsupported features for users of older devices like the Galaxy Watch 4.