installation Archives

Winsage

July 10, 2026

Microsoft confirms Secure Boot update failing on some Windows 11 PCs, promises a resolution

Microsoft has acknowledged that some Windows 11 PCs are facing issues with Secure Boot certificate updates, which may fail to install or be blocked. The company is working with PC manufacturers to develop a patch, while users may need to take proactive measures if their certificates are obstructed. Microsoft has temporarily halted the rollout of Secure Boot for certain devices due to complications, and affected users will receive detailed error messages in the Windows Security app regarding their Secure Boot certificates. Secure Boot certificates issued in 2011 have expired, and Microsoft is replacing them with new certificates issued in 2023. Most modern hardware is already utilizing the new certificates, but some devices may have disabled Secure Boot or faulty firmware. Users can check their Secure Boot status in the Windows Security app. HP has confirmed that Secure Boot updates are being blocked on some of its PCs due to a BitLocker issue, which prevents the installation of new certificates. Microsoft has paused Secure Boot certificate updates for devices affected by known issues while collaborating with manufacturers to identify specific devices or firmware complications. A firmware update will be necessary for affected devices, but it is not yet available. The majority of PCs have received the Secure Boot certificates via Windows Update, but compatibility issues may prevent some devices from receiving the update. Older devices or those not among the OEM’s top-selling models may not receive updates if the UEFI firmware is unsupported. Secure Boot is a security feature required for Windows 11, preventing unauthorized software from executing at boot. While an expired Secure Boot certificate does not stop a PC from functioning, it may limit long-term security protection. Microsoft advises users not to disable Secure Boot, as it would compromise security further.

Tech Optimizer

July 10, 2026

Gen Digital stock holds steady as cybersecurity demand supports long term growth

Gen Digital is a publicly traded company focused on cybersecurity and digital privacy solutions, primarily targeting consumers and small businesses. The company generates revenue through recurring subscriptions for its security and identity protection services, which include antivirus software, VPN services, and identity monitoring. Gen Digital's business model relies on bundling multiple security features into comprehensive offerings, providing predictable revenue and stability in cash flows. The company emphasizes continuous updates to its services to protect against evolving cybersecurity threats. Its growth prospects are linked to trends in cybersecurity spending and the increasing adoption of subscription-based solutions. Gen Digital differentiates itself from competitors by focusing on individual devices and home networks rather than large enterprises. The company also benefits from distribution partnerships that help expand its customer base. Long-term demand for its products is driven by digitalization, cyber risks, and growing consumer awareness of privacy issues. Gen Digital's stock performance is influenced by both company-specific factors and broader market trends in technology and cybersecurity.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Winsage

July 10, 2026

Windows 11 on the Steam Machine: Valve opens the door and then leaves you out in the rain

Valve has introduced an official Windows driver package for the Steam Machine, allowing users to replace SteamOS with Windows 10 or 11 (64-bit). The package includes drivers for the graphics unit, Wi-Fi, Bluetooth modules, and SD card reader. The graphics driver is custom-designed for the Steam Machine’s AMD chip and is not compatible with standard Adrenalin drivers. Installing Windows will erase SteamOS and all stored data, and there is currently no dual-boot option available. Users must connect to an Ethernet network during setup, as Wi-Fi drivers can only be installed afterward. The drivers are provided "as-is," without official support from Valve. Performance benchmarks show that SteamOS outperforms Windows by 10 to 15 percent, but some users may prefer Windows for compatibility with certain online games and services.

Winsage

July 10, 2026

Windows 10 is still getting Windows 11 features, but it’s only for developers

Microsoft has confirmed that WSL Containers, which allows users to create and manage Linux containers directly from Windows, is now available on Windows 10. Users must have Windows 10 version 2004 (Build 19041) or later to utilize WSL Containers. The installation process involves checking the Windows build, installing WSL, updating to the container build, confirming the version, and running a test command. WSL Containers support GPU passthrough, enabling CUDA capabilities directly from Windows 10. A text-based UI dashboard for managing WSL Containers, named lazywslc, has also been introduced.

Tech Optimizer

July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.

Winsage

July 10, 2026

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft has unveiled a destructive Windows backdoor named GigaWiper, which allows operators remote control over compromised systems to execute irreversible damage. GigaWiper originated from cyberattacks in October 2025 and is a composite of code from at least three malware families. It maintains its presence through a scheduled task disguised as “OneDrive Update,” executing at startup and every minute. GigaWiper can obliterate partition information, overwrite physical drives, and restart systems. It also mimics ransomware by encrypting files with the .candy extension, using randomly generated keys that are not stored, making recovery impossible. The malware has connections to the Crucio ransomware and resembles FlockWiper, with rewritten code in Go. GigaWiper features 20 command codes for various functions, including executing PowerShell instructions, managing processes, capturing screenshots, and remote access similar to VNC. It can remain on a system for surveillance until its destructive functions are activated. Microsoft Defender includes detection capabilities for GigaWiper, and users are advised to enable tamper protection and monitor for suspicious activities.

AppWizard

July 9, 2026

Play Store Catalog Interoperability Goes Live July 22: Android Developers Must Decide

On July 22, 2026, Google Play will launch its Play Catalog Access program, allowing third-party Android stores in the U.S. to access app listings from the Google Play Store, including names, icons, descriptions, screenshots, and metadata. Developers will be automatically enrolled unless they opt out by the deadline. The program enables these stores to showcase app listings while downloads will still occur through Google Play Console, ensuring Google’s service fee applies. All downloaded apps will undergo Play Protect scanning, and enrolled stores must prevent malware distribution, maintaining a malware installation-attempt rate below one percent. A December 2023 jury verdict found that Google violated federal and California antitrust laws, leading to a Ninth Circuit decision that requires Google to grant third-party app stores access to its catalog, dismantling barriers to competition. The legal battle began in August 2020 when Epic Games sought changes to counter Google's monopolistic practices. A March 2026 settlement introduced a tiered service fee structure, reducing costs for developers from a flat 30 percent commission to 20 percent for new installs and 10 percent for subscriptions. Developers can choose to publish all listings to all enrolled stores, manage stores individually, or opt out entirely. If no action is taken before July 22, Google will automatically share the app's listing with all enrolled third-party stores. The Play Catalog Access program aims to address the cold-start problem faced by alternative stores but does not guarantee a competitive ecosystem, as third-party stores must still create compelling user experiences to attract customers.

AppWizard

July 9, 2026

This open-source app fixed my notification chaos when Android couldn’t

Megan Ellis shared her experience using the app DoNotNotify, which helped her manage and reduce the number of notifications on her smartphone. She found that many apps, including Pokémon Go and Temu, sent numerous vague notifications that were difficult to filter effectively. Despite Android's notification channels, she often had to disable notifications entirely for certain apps. DoNotNotify allowed her to customize her notification preferences without requiring personal data or account creation. The app features tabs for History, Rules, and Blocked notifications, enabling users to track and manage alerts. Ellis successfully used DoNotNotify to block unwanted notifications, particularly from games and shopping apps, and appreciated its privacy-focused design and adaptability to changes in notification content. She recommends the app for users overwhelmed by notifications.

Tech Optimizer

July 9, 2026

LG Monitors Allegedly Install Software Without User Consent

Certain LG monitors are reportedly installing software on Windows PCs without user consent, including unsolicited advertisements for McAfee antivirus. This was discovered by a Reddit user who found the "LG Monitor App Installer" in their Windows event log. The application may install itself automatically via the Microsoft Store or Windows Update and is difficult to remove. Users can disable the app's automatic startup or uninstall it, but it may reinstall in the future. Windows Pro users can use the Group Policy Editor to prevent automatic installations of manufacturer-specific applications. The incident raises concerns about user control and transparency regarding unsolicited software installations.