LED Archives

Winsage

September 9, 2026

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Recent investigations have identified the BlueMoon exploit kit, used by espionage-driven threat activity clusters, particularly linked to APT31, a China-aligned state-sponsored group, since August 28, 2026. BlueMoon exploits three vulnerabilities: CVE-2026-85046 (a type confusion vulnerability in Google Chrome's V8 engine), an unassigned V8 sandbox escape, and CVE-2026-85880 (a heap-based buffer overflow in Windows ALPC). Google and Microsoft have released patches for these vulnerabilities, which were exploited as "patch-gap" zero-days. The attack vectors typically begin with phishing emails that lead victims to malicious URLs, triggering the vulnerabilities for code execution and privilege escalation. Variants of BlueMoon have been detected, featuring modifications for specific campaigns. Notable attack chains include: - APT31 targeting NGOs and mining firms in the U.S. with a malicious browser add-on called GemStone. - UNK_LateNight targeting U.S. aerospace companies, deploying BlueMoon alongside the ShadowPad backdoor. - UNK_DoubleCheck targeting a Vietnamese manufacturer, using DLL sideloading to execute a Rust binary. - UNK_QuietRacket targeting government and financial organizations in Indonesia and Singapore, modifying BlueMoon to execute a .NET assembly. CISA added the Chrome flaw to its Known Exploited Vulnerabilities catalog on September 4, 2026, requiring federal agencies to apply patches by September 18, 2026. Indicators of compromise include specific process trees, files, folders, scheduled tasks, mutexes, and registry keys. Proofpoint has released detection rules to help organizations identify and mitigate these threats.

AppWizard

September 9, 2026

Attorney General Tong Announces Investigation Into “Predator’s Paradise” Kik Messenger App

Attorney General William Tong has launched an investigation into MediaLab.AI Inc., the parent company of the messaging app Kik, following allegations of inadequate age verification and content moderation practices. Kik has been criticized for its reputation as a platform for sexual abuse, exploitation, and bullying, particularly among minors, with over one-third of American teens reportedly using the app. A 2025 report ranked Kik as the second worst app for extreme sexual content and the third worst for severe bullying, and the app has been included on the National Center on Child Exploitation's "Dirty Dozen" list. Despite claims of restricting new users to those aged 18 and older as of September 2023, evidence suggests that Kik continued to market to younger audiences, and the app maintained a "Teen" rating until early 2025. The Attorney General's office issued a notice of violation to MediaLab in July 2025 for deficiencies in Kik’s privacy practices and has issued a civil investigative demand for further records related to data processing and content moderation. This investigation is part of a broader effort to protect children from online threats in Connecticut.

Winsage

September 9, 2026

AI vibe coding is so fast that Microsoft had to change how it reviews Edge extensions

Users of Windows and Windows Phone previously faced an app gap, but the rise of artificial intelligence has led to increased development activity, creating challenges for Microsoft regarding the Edge browser. The ad blocker uBlock Origin has stopped functioning on Edge, similar to its status on Chrome. Microsoft revamped the Edge Add-ons site last year to improve user experience with a more intuitive interface and better categorization. This update allows users to find and install extensions more easily, and the Edge team is focused on maintaining quality amidst the growing number of extension submissions.

BetaBeacon

September 8, 2026

Absolum coming to iOS, Android on November 5

Absolum is a game where players join a rebellion led by high enchantress Uchawi to free the lands of Talamh from the oppressive rule of Sun King Azra. Players can choose from four heroes with different fighting styles and must craft new strategies to defeat Azra's elite guard. The game features arcade beat 'em up action combined with modern roguelite mechanics, set in a fantasy world with beautiful art and music by composer Gareth Coker. The game is available on both iOS and Android with revamped touch controls and cross-progression between devices.

Winsage

September 8, 2026

Microsoft is now using your Windows 11 wallpaper as ad space

The Bing Wallpaper app is popular for its beautiful images that enhance desktop backgrounds, but users have reported unwanted changes where their backgrounds are replaced by fullscreen ads promoting Harry Potter and Fantastic Beasts films. This has led to frustration among users, who have expressed their concerns on platforms like Reddit. The controversy extends to the definition of advertisements within Windows 11, with some users viewing prompts for OneDrive as ads. The recent promotional content in the Bing Wallpaper app has upset many, as it alters the user experience by combining beloved imagery with marketing messages. While users are generally open to learning more about images, intrusive promotional content on personal desktops is seen as unacceptable. Despite being an optional app, the introduction of ads could jeopardize the positive reputation of Bing Wallpaper.

AppWizard

September 8, 2026

Android’s texting privacy nightmare still isn’t over

Google's Android division acknowledged a messaging glitch on September 2, 2026, affecting both RCS and SMS messaging, which is linked to the data transfer process during the setup of new Android devices. This issue has raised privacy concerns as sensitive information may be shared with unintended recipients. Google released updates to its Messages app on September 3 and 4 in response to the problem, but a comprehensive solution for all users has not yet been implemented.

Winsage

September 7, 2026

I spoke to the Microsoft PM rebuilding Windows 11 for Nvidia RTX Spark: The radical reinvention building the first true MacBook Pro threat

A team of engineers from Microsoft and Nvidia collaborated for eight months to integrate Windows 11 with a new Arm-based CPU and Nvidia RTX GPU. The first RTX Spark machine was successfully powered on, marking a significant milestone in their project.

AppWizard

September 7, 2026

Xbox Cloud Gaming Caps Hours: 15 for Ultimate [2026]

On September 3, 2026, Microsoft announced that Xbox Game Pass subscribers will see a shift in cloud gaming access. Starting November 2026, unlimited cloud streaming will be replaced by a tiered hour bank system: 15 hours for Ultimate, 10 for Premium, and 5 for Essential subscribers. Once a subscriber exhausts their allotted hours, they must wait for the next billing cycle or purchase additional time. This change is the most significant since the beta launch of Xbox Cloud Gaming in 2019. The announcement was made on Xbox Wire, and the new structure is reflected on Xbox’s product pages. The new tiered system introduces a scarcity model, with every paid tier now having its own cloud gaming quota. Essential subscribers, who previously had no cloud access, will now receive 5 hours per month. The pricing for the Game Pass tiers is as follows: Ultimate at .99 for 15 hours, Premium at .99 for 10 hours, and Essential at .99 for 5 hours. The free ad-supported tier remains unchanged at 5 hours per month. Microsoft's rationale for the change is based on usage data indicating that most subscribers do not heavily utilize cloud streaming, coupled with the rising costs of operating cloud gaming services. The company has stated that additional hours can be purchased once a subscriber's monthly allotment is used up, although pricing details for these add-ons have not yet been disclosed. The new hour caps will take effect in November 2026, following a shorter notice period compared to NVIDIA's GeForce NOW service, which implemented a 100-hour monthly cap earlier in 2026. The response from gaming communities has been largely negative, with concerns about the limits falling short of typical usage patterns and conflicting with the marketing of Game Pass as offering unlimited access. The introduction of hour caps could impact Game Pass's subscriber base, particularly among those who rely on cloud gaming as their primary access point. Microsoft's internal usage data will determine the extent of this impact, as the company aims to control costs without raising subscription prices.

AppWizard

September 6, 2026

I spent months testing the top Android keyboards; one easily replaced Gboard for good

The author initially favored Google Gboard but began exploring alternatives due to declining typing accuracy and clipboard management issues. They found Microsoft SwiftKey's stable version effective for swiping, predictive text, and multi-language support, but were disappointed with its voice input feature. Transitioning to SwiftKey Beta improved voice typing significantly, though it still lacks support for some niche languages and font scaling options. FUTO Keyboard is noted for its privacy and offline functionality but has limited language support and clipboard management. Samsung Keyboard, now the author's primary choice on their Galaxy Tab, offers deep integration with One UI and improved text prediction, though voice input still needs work. Gboard remains competent, especially in voice typing, but the author feels it is becoming less appealing due to data harvesting concerns and limited customization. Currently, the author plans to continue using Microsoft SwiftKey Beta, which meets most of their typing needs.

AppWizard

September 6, 2026

Our next drop has a name

Adventurers gather around a campfire to share stories of their experiences, including unexpected detours and surprise encounters. While some moments are planned, spontaneous events often create lasting memories. Preparations for future journeys include stocking inventory, mapping campsites, and being ready for unforeseen adventures. New features for Wilderness Bound will require either Minecraft: Bedrock Edition or Java Edition, which must be purchased separately, and community feedback will help refine these features as development continues.