NewApp Digest
search bot

key

CVE-2026-45585: YellowKey BitLocker Bypass
Winsage
May 23, 2026

CVE-2026-45585: YellowKey BitLocker Bypass

BitLocker, a security feature for data protection, has a vulnerability identified as CVE-2026-45585, also known as YellowKey, which allows unauthorized access to encrypted data on Windows 11 versions 24H2, 25H2, 26H1, and Windows Server 2025. This flaw does not compromise BitLocker’s encryption but affects the recovery environment supporting it. The vulnerability can be exploited locally through the Windows Recovery Environment (WinRE) by an attacker with physical access, who can trigger an unrestricted shell and access the BitLocker-protected volume. Microsoft has provided two mitigation strategies: modifying the WinRE image to remove the autofstx.exe entry and transitioning from TPM-only protection to a TPM+PIN requirement at startup. The exploit poses challenges for detection, as it occurs pre-boot and currently lacks vendor-published indicators of compromise. Organizations using BitLocker for unattended devices are particularly at risk, as the vulnerability can lead to loss of confidentiality if an attacker gains access before the legitimate user.
Microsoft Dismantles Fox Tempest: Ransomware Groups Paid Up to $9,500 to Fake Windows Software Signatures
Winsage
May 22, 2026

Microsoft Dismantles Fox Tempest: Ransomware Groups Paid Up to $9,500 to Fake Windows Software Signatures

Microsoft's Digital Crimes Unit has filed a lawsuit against Fox Tempest, a criminal enterprise selling fraudulently signed malware to ransomware groups, affecting hospitals, schools, and critical infrastructure in ten countries. The lawsuit was filed on May 19 in the U.S. District Court for the Southern District of New York. Fox Tempest created a portal at signspace[.]cloud, offering a user-friendly interface for uploading malicious files and generating over 580 fraudulent Microsoft accounts to bypass identity verification. The group provided pre-configured virtual machines for customers to upload malicious payloads in exchange for signed binaries. Fox Tempest's operations were linked to a ransomware attack chain involving a counterfeit Microsoft Teams installer that deployed the Rhysida ransomware. This ransomware strain has caused significant breaches, including an October 2023 attack on the British Library, which resulted in a data exfiltration of about 600GB and recovery costs of £6 to £7 million, and a September 2024 attack on Seattle-Tacoma International Airport with a ransom demand of .8 million. Microsoft's civil litigation approach allowed for a quicker legal process, leading to the seizure of the signspace[.]cloud domain and the suspension of around 1,000 Fox Tempest accounts. Despite these actions, Fox Tempest has begun shifting to alternative code-signing services, highlighting the evolving nature of cybercrime and the need for users to verify software through independent channels. The confirmed targets of Fox Tempest included organizations in the United States, France, India, China, Brazil, Germany, Japan, the United Kingdom, Italy, and Spain.
Rosemont's New Minecraft Experience Is Built For Kids
AppWizard
May 22, 2026

Rosemont’s New Minecraft Experience Is Built For Kids

A new attraction called "Minecraft Experience: Villager Rescue" has opened in Rosemont’s Pearl District, allowing visitors to engage in an immersive adventure based on the popular video game. Guests receive an “Orb of Interaction” to unlock challenges, collect resources, and rescue villagers from zombies while exploring seven themed environments inspired by Minecraft. The experience includes interactive elements such as hurling snowballs at Creepers and crafting potions. Developed by Supply + Demand in partnership with Mojang Studios, the attraction is accessible to both seasoned players and newcomers. It is available for a limited time at EXP Rosemont, with tickets starting at a specified price. Minecraft has sold over 300 million copies worldwide, making it the best-selling video game of all time.
How to find a Stunt Party event in Forza Horizon 6
AppWizard
May 22, 2026

How to find a Stunt Party event in Forza Horizon 6

In Forza Horizon 6, players face the "Welcome to the Party, Pal!" challenge in Series 1 of the Festival Playlist, which requires them to complete round three of a Horizon Stunt Party event within a week. To find a Stunt Party event, players enter a multiplayer lobby and participate in mini-games, including racing, smashing objects, and performing aerial stunts. Completing the challenge takes about 10 to 15 minutes and rewards players with approximately 11,000 credits, an additional 5,000 credits for finishing the challenge, and one point towards Festival Playlist season progress.
Microsoft's Yusuf Mehdi pledges to reimagine Windows 11 for the AI era in his final year before leaving
Winsage
May 22, 2026

Microsoft’s Yusuf Mehdi pledges to reimagine Windows 11 for the AI era in his final year before leaving

Yusuf Mehdi is leaving Microsoft after a 35-year tenure, during which he played a significant role in launching products like Windows 95, Internet Explorer, Bing, Xbox One, and the Surface Pro lineup. He was the Executive Vice President and Consumer Chief Marketing Officer, leading Microsoft's consumer strategy and its push into AI, particularly with the Copilot brand. Mehdi announced plans to continue working on Microsoft's AI strategy, focusing on making Windows 11 an "agentic OS," which allows AI agents to operate autonomously. Despite backlash from users regarding performance issues, Mehdi remains committed to this vision. Recently, Microsoft has shifted its focus to improving Windows 11's functionality, addressing criticism about its performance while continuing to explore AI integration.
Microsoft's PowerToys is getting a low memory mode that kills idle utilities hogging Windows 11 RAM
Winsage
May 22, 2026

Microsoft’s PowerToys is getting a low memory mode that kills idle utilities hogging Windows 11 RAM

Microsoft PowerToys is introducing a new optional low memory mode to address significant memory usage from inactive background processes. This feature, developed by an independent contributor, will close the helper process of specific utilities when not in use, allowing users to relaunch them with a hotkey, albeit with a slightly slower initial launch. The initial rollout will support four tools: Text Extractor, Color Picker, Advanced Paste, and Peek. A shared settings map and helper APIs have been introduced to facilitate this feature, which was renamed to “Close apps when inactive” during the code review process. Users can enable this memory-saving behavior globally or for specific applications, with each supported module featuring a toggle on its settings page. The feature is not yet available in PowerToys, and the default behavior will keep background processes running until users opt into the new feature. The code has passed initial validation checks and is awaiting final confirmation before public release.
Microsoft brings back personalization to Windows 11
Winsage
May 22, 2026

Microsoft brings back personalization to Windows 11

Microsoft is addressing user feedback on Windows 11 by enhancing taskbar and Start menu customization. Users will soon be able to reposition the taskbar to the top or sides of the screen and choose icon alignment. This feature aims to provide more flexibility and improve user experience, particularly for those needing additional vertical screen space. The updates are currently available to Windows Insider Preview participants and can be adjusted in the settings. Additionally, the Start menu will see changes, allowing users to disable sections like Recommended and Pinned, rename the Recommended section to Recent, and choose between small and large sizes for the menu. These enhancements are expected to roll out to all Windows 11 users soon.
AI Data Platform Modernization in Financial Services | Microsoft Azure PostgreSQL | The Microsoft Cloud Blog
Tech Optimizer
May 22, 2026

AI Data Platform Modernization in Financial Services | Microsoft Azure PostgreSQL | The Microsoft Cloud Blog

Financial service institutions are increasingly exploring AI applications to alleviate operational burdens and gain a competitive edge, but face challenges with legacy data infrastructures that may not meet modern demands. The need for continuous availability and compliance is critical, as even brief downtime can have catastrophic consequences. Aging databases struggle with high-volume transactions and real-time analytics, prompting a focus on predictive maintenance and infrastructure automation. Microsoft Azure's PostgreSQL managed services, including Azure Database for PostgreSQL, address these challenges by providing flexible performance scaling and ensuring high availability. The service can trigger automatic failover within 60 to 120 seconds during outages, guaranteeing up to a 99.99% availability SLA. It supports read replicas for offloading analytics without impacting primary database performance and offers layered security controls, including encryption at rest and network isolation. Azure Database for PostgreSQL simplifies compliance with standards such as PCI DSS and SOC by enabling centralized identity and access management through Microsoft Entra ID authentication. It integrates seamlessly with the Microsoft ecosystem, allowing organizations to connect data to analytics and AI services without complex ETL processes. BNY Mellon successfully modernized its data platform by migrating to Azure Database for PostgreSQL in nine months, achieving improved resilience and allowing engineering teams to focus on innovation. The platform supports high availability, backup capabilities, and extensibility, empowering financial institutions to remain innovative in the era of AI.
New SteamOS update finally fixes one of the Steam Deck's most irritating bugs
AppWizard
May 22, 2026

New SteamOS update finally fixes one of the Steam Deck’s most irritating bugs

Valve has released the SteamOS 3.8.5 Beta, which includes bug fixes and enhancements for the Steam Deck and other devices like the Asus ROG Ally and Lenovo Legion Go. Key improvements include a fix for audio issues on the Steam Deck OLED, enhancements to video memory management for discrete GPUs, and a resolution for a bug in Desktop Mode. The update also includes stability and security updates, a fix for the Asus ROG Ally's control behavior after suspend, and improvements from the previous 3.8.4 Beta, such as solutions for WiFi performance issues and trackpad sensitivity adjustments. Users can join the beta by navigating to Settings > System > System Update Channel.
Search