issue Archives

Winsage

June 5, 2026

Microsoft Promises Customizable Windows Right-Click Menus

Microsoft is working on a more efficient, streamlined, and customizable right-click context menu for Windows File Explorer and Desktop interactions, responding to user feedback about the cluttered nature of existing menus. The initiative aims to improve user experience by allowing customization, which marks a shift from Microsoft's previous rigid approach. Developers will need to adapt to new APIs and guidelines for context menu interactions, and there may be restrictions on the number of items that can be added. Performance improvements are also planned to address slow-loading context menus. The timeline for implementation is uncertain, but updates may first appear through Windows Insider testing channels. The changes are part of Microsoft's broader strategy to modernize Windows 11 and improve basic functionalities like file management and interface responsiveness. Customizable context menus could provide enterprise IT departments with new management options, and the initiative reflects Microsoft's awareness of competition from other operating systems.

AppWizard

June 5, 2026

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

A vulnerability in several Microsoft 365 Android applications, identified as FlagLeft, was caused by a development flag left enabled in production builds, which disabled checks meant to restrict account-token sharing to trusted applications. This flaw affected applications such as Word, PowerPoint, Excel, Microsoft 365 Copilot, Microsoft Loop, and OneNote, allowing unauthorized apps to request and obtain user tokens without permission. Microsoft Teams was unaffected. The vulnerability was demonstrated by Enclave, allowing access to user emails through an unverified app. On May 12, Microsoft issued four CVEs for the affected applications, categorized under improper access control. The patched version of Word for Android is 16.0.19822.20190, and users are advised to update their applications. The patch does not invalidate already compromised tokens, so users should revoke these tokens and sign in again.

Winsage

June 4, 2026

Use Windows Sandbox and containers to test untrusted apps safely

Windows 11 features Smart App Control to block untrusted applications and includes Windows Sandbox, a lightweight virtual machine that provides an isolated desktop environment for safely executing applications. Windows Sandbox uses container technology and hypervisor-based virtualization to mitigate risks associated with untrusted software. It ensures that each session starts fresh, with no data persisting after closing, and applications installed on the host system are not accessible within the Sandbox. Starting with Windows 11 version 22H2, data can persist through restarts initiated within the Sandbox. Windows Sandbox is included in supported Windows editions such as Pro, Enterprise, and Education, and offers quick launch times, a lower memory footprint, and a secure environment for testing untrusted software. Setting up Windows Sandbox involves searching for it in the Start menu, running it as an administrator, and transferring executable files for installation within the Sandbox.

AppWizard

June 4, 2026

Minecraft’s servers are down, locking players out of the game for hours

On June 3, Minecraft players experienced server issues that primarily affected the Bedrock edition, causing login difficulties due to authentication server malfunctions. The disruptions began around midnight PDT and escalated throughout the day, impacting both Bedrock and Java editions' Realms multiplayer system. Bedrock players faced error messages indicating problems connecting to Minecraft services and verifying game ownership due to issues with Microsoft's authentication servers. Both Bedrock and Java players encountered timeouts when trying to join Realms, receiving an Error 502 message. This incident followed previous server issues on June 1 related to a Microsoft Azure outage. Mojang has not provided updates on the situation.

AppWizard

June 4, 2026

Minecraft Servers Are Down and Players Have Been Locked Out for Hours

On June 3, 2026, Minecraft players were locked out of both Bedrock and Java editions due to significant disruptions in authentication and multiplayer services, marking the second major outage in less than a week. The issues began around 12 am PDT, affecting the Realms multiplayer system and resulting in error messages for players. A previous outage on June 1 was attributed to a failure in Microsoft Azure, impacting both Minecraft and Xbox Live. On June 3, over 800 problem reports were logged, indicating a systemic failure. The error message faced by Bedrock players suggested problems with Microsoft’s central authentication system. The cause of the June 3 outage remains unconfirmed, and Mojang has not provided any updates. Players are advised to monitor official channels for updates, with single-player mode available for Java players while Bedrock players face authentication failures.

AppWizard

June 3, 2026

Is Halifax down? Users report issues with bank app and login

Bank account holders have faced significant disruptions with the Halifax banking app, starting around 11 AM. Users reported issues accessing their accounts from various locations across the UK, including London, Birmingham, Leeds, and Liverpool. Downdetector indicated that 67% of users experienced problems with the app, 13% had login issues, and 10% faced difficulties with fund transfers. The Halifax app acknowledged the technical problems, advising customers that they may be logged out and suggesting they try logging in again later. User reports of issues began surfacing at 6:32 AM EDT.

AppWizard

June 3, 2026

Is Lloyds Bank app down? Issues reported by customers

Numerous customers of Lloyds Bank reported technical difficulties accessing the app and online banking shortly after 11:30 AM, receiving an error message indicating technical problems. By 11:42 AM, users expressed their frustration on social media platforms, highlighting issues with both the Lloyds website and app. In response, Lloyds Bank acknowledged the problem and advised users on troubleshooting steps, including checking for app updates and restarting the application or phone. A spokesperson from Lloyds Bank confirmed they were aware of the issues and were working to resolve them.

Winsage

June 3, 2026

Microsoft Brings AI Agents Directly Into the Windows Terminal

Microsoft has released Intelligent Terminal 0.1, an open-source variant of Windows Terminal that includes native agent functionality. It can be installed via the Microsoft Store or WinGet and operates alongside the existing Windows Terminal. Intelligent Terminal allows users to troubleshoot issues directly within the terminal by interacting with an AI agent that understands the terminal context. The tool features a persistent agent pane for seamless interaction, with GitHub Copilot CLI as the default agent, though it supports any ACP-compatible agent. Automatic error detection is included, providing users with relevant error context and potential fixes. An agent management panel helps users oversee multiple agents and their statuses. The Command Palette has been updated to facilitate agent interactions without disrupting the workflow. Microsoft plans to evolve Intelligent Terminal based on community feedback, with its GitHub repository open for contributions. The release also marks the phasing out of Terminal Chat in Windows Terminal Canary, while the mainline Windows Terminal remains unchanged.

Winsage

June 3, 2026

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers have identified an unpatched vulnerability that could expose NTLMv2 hashes to attackers, linked to the "search:" URI handler. This issue is similar to CVE-2026-33829, which involved a spoofing vulnerability in the Windows Snipping Tool's ms-screensketch: URI handler. The flaw allows attackers to trick users into connecting to their SMB servers, disclosing NTLMv2 hashes for authentication exploitation. The new vulnerability operates using "search:" and "crumb=location:" parameters, resulting in a similar Net-NTLMv2 leak. Microsoft has chosen not to address this issue, stating only vulnerabilities classified as Important or Critical would be fixed. Recommendations to mitigate risks include blocking outbound SMB traffic, enforcing SMB signing, and disabling NTLM authentication where possible.

AppWizard

June 2, 2026

10 Tasker Hacks Every Android User Should Know

Tasker is an Android application available for .99 on the Google Play Store that enables extensive hacks, automations, and customizations for a personalized Android experience. - Users can change alarm sounds based on current weather conditions. - Tasker enhances reminders with features like customizable fonts, colors, sounds, vibrations, and specific recurrence options. - It can automate connecting to specific coffee shop wifi networks when in range. - Users can enable auto-rotate selectively for certain apps. - The ShakeWake project helps keep users awake during long sessions by sending alerts at intervals. - Tasker can restore ticker-style notifications for app alerts in the status bar. - It can disable touch inputs when the phone is in a pocket using the proximity sensor. - GPS can be activated only when specific apps, like Google Maps, are opened to conserve battery life. - Users can set a designated app to launch upon the first unlock of the day. - Tasker allows different apps to launch based on the fingerprint used to unlock the phone.