NewApp Digest
search bot

Malicious files

Microsoft patches a record 206 flaws—and one is already being exploited
Winsage
June 11, 2026

Microsoft patches a record 206 flaws—and one is already being exploited

Microsoft patched 206 vulnerabilities during June's Patch Tuesday, surpassing the previous record of 175 vulnerabilities patched in October 2025. Among the patched vulnerabilities, 118 are related to different versions of Windows, including Windows 10, Windows 11, and Windows Server. One critical vulnerability, CVE-2026-41091, in Microsoft Defender is actively being exploited, prompting an update to the Malware Protection Engine. Microsoft also addressed ten vulnerabilities in the Security Feature Bypass category due to the expiration of old Secure Boot certificates. Of the 118 Windows vulnerabilities, 19 are classified as critical Remote Code Execution (RCE) vulnerabilities, including CVE-2026-47288 and CVE-2026-47291. In Microsoft Office, 54 vulnerabilities were patched, including 25 RCE vulnerabilities, with nine classified as critical. Microsoft patched eight vulnerabilities in Exchange Server, including CVE-2026-45583, which can be exploited in a man-in-the-middle scenario. Additionally, the update for Edge addressed 74 Chromium vulnerabilities, including a zero-day vulnerability (CVE-2026-11645).
Microsoft no longer claims that Windows 11 has all the protection that you need
Tech Optimizer
June 2, 2026

Microsoft no longer claims that Windows 11 has all the protection that you need

In April, Microsoft published a blog post discussing the security features of Windows 11, emphasizing that its built-in protections, such as Microsoft Defender Antivirus and SmartScreen, may eliminate the need for third-party antivirus solutions for many users. The blog highlighted that adequate security could be maintained with default settings, regular updates, and intentional software downloads. However, it also noted that users with specific needs, like managing multiple devices or requiring additional features, might still consider third-party software. The blog post was removed from the Microsoft Learning Center without formal announcement, raising questions about the company's communication strategy.
Avast Free Antivirus for Windows: Features, Limits, and US Use
Tech Optimizer
June 1, 2026

Avast Free Antivirus for Windows: Features, Limits, and US Use

Avast Free Antivirus for Windows is a free malware protection software designed for American home users, operating under Gen Digital, which also includes Norton. It provides essential security features such as real-time scanning, on-demand scans, and regular updates, but has limitations compared to paid versions, including the absence of features like VPN and advanced ransomware protection. The software is intended for home PC use and is available for download on Windows PCs. While it serves as a basic defense against common malware threats, it is not suitable for small businesses needing comprehensive security solutions. Users are advised to maintain safe browsing habits even with the antivirus installed.
Microsoft quietly nuked its controversial blog claiming Defender is all you need
Tech Optimizer
May 30, 2026

Microsoft quietly nuked its controversial blog claiming Defender is all you need

Microsoft Defender has evolved from a criticized product to a robust security solution for everyday users. Initially, many recommended third-party antivirus software over Defender due to its inadequacies. Microsoft has improved Defender's built-in protection, making it suitable for a diverse user base. However, users with complex security needs may still benefit from third-party antivirus applications. Recently, Microsoft deleted an article that claimed Defender was sufficient for all users, acknowledging that while it meets basic protection needs, third-party solutions can address more intricate security demands. Microsoft now recognizes the importance of both built-in protection and third-party applications, reflecting a balanced view of user requirements.
Microsoft Dismantles Fox Tempest: Ransomware Groups Paid Up to $9,500 to Fake Windows Software Signatures
Winsage
May 22, 2026

Microsoft Dismantles Fox Tempest: Ransomware Groups Paid Up to $9,500 to Fake Windows Software Signatures

Microsoft's Digital Crimes Unit has filed a lawsuit against Fox Tempest, a criminal enterprise selling fraudulently signed malware to ransomware groups, affecting hospitals, schools, and critical infrastructure in ten countries. The lawsuit was filed on May 19 in the U.S. District Court for the Southern District of New York. Fox Tempest created a portal at signspace[.]cloud, offering a user-friendly interface for uploading malicious files and generating over 580 fraudulent Microsoft accounts to bypass identity verification. The group provided pre-configured virtual machines for customers to upload malicious payloads in exchange for signed binaries. Fox Tempest's operations were linked to a ransomware attack chain involving a counterfeit Microsoft Teams installer that deployed the Rhysida ransomware. This ransomware strain has caused significant breaches, including an October 2023 attack on the British Library, which resulted in a data exfiltration of about 600GB and recovery costs of £6 to £7 million, and a September 2024 attack on Seattle-Tacoma International Airport with a ransom demand of .8 million. Microsoft's civil litigation approach allowed for a quicker legal process, leading to the seizure of the signspace[.]cloud domain and the suspension of around 1,000 Fox Tempest accounts. Despite these actions, Fox Tempest has begun shifting to alternative code-signing services, highlighting the evolving nature of cybercrime and the need for users to verify software through independent channels. The confirmed targets of Fox Tempest included organizations in the United States, France, India, China, Brazil, Germany, Japan, the United Kingdom, Italy, and Spain.
Official JDownloader site served malware to Windows and Linux users between May 6 and May 7
Winsage
May 10, 2026

Official JDownloader site served malware to Windows and Linux users between May 6 and May 7

Between May 6 and May 7, 2026, the official JDownloader website was compromised in a supply chain attack, leading to the distribution of malicious installers for Windows and Linux users. Attackers altered download links, redirecting users to harmful files, specifically targeting the Windows “Alternative Installer” and the Linux shell installer. A Reddit user reported the issue after Microsoft Defender flagged the installers as malicious, noting unusual developer names instead of the expected publisher, AppWork GmbH. JDownloader developers confirmed the breach and temporarily took down the website for investigation, revealing that an unpatched vulnerability in the content management system allowed the attackers to modify download pages. The genuine installer packages were not altered, and the malicious links were removed. The website was restored on May 8–9, 2026, with verified clean installer links. Indicators of compromise included specific hashes and compromised URLs related to the attack.
Search