malware Archives

Winsage

August 4, 2026

Microsoft Expands Windows Hello ESS to External Fingerprint Readers

Microsoft is integrating Windows Hello Enhanced Sign-in Security (ESS) with compatible external fingerprint readers, allowing passwordless sign-ins on a wider range of Windows 11 devices. This update enhances biometric authentication security by utilizing hardware-backed protections such as the Trusted Platform Module (TPM) and Virtualization-Based Security (VBS), which isolate sensitive biometric data from malware and unauthorized access. Previously, only devices with integrated fingerprint sensors could fully utilize ESS, but the recent update (KB5101684) enables external fingerprint readers to function within the ESS framework. The update is being rolled out for Windows 11 versions 25H2 and 24H2, and users can set up fingerprint authentication by connecting a compatible reader. This advancement aids IT administrators in implementing passwordless authentication while maintaining security protocols.

Winsage

August 3, 2026

“Control Panel gets tricky” Microsoft CVP explains why killing Windows legacy code takes so long, and how it’s evolving its tools to make modernizing apps like File Explorer and Registry Editor faster

Marcus Ash, Microsoft’s Corporate Vice President of Design and Research for Windows and Devices, discussed the company's efforts to refine the user interface of Windows 11, focusing on modernizing the Control Panel. This initiative began with Windows 8 over 13 years ago and is still ongoing.

Winsage

August 3, 2026

Microsoft warns Windows PC users of Russian hackers on hotel WiFi

Microsoft has issued a warning to Windows PC users about Russian hackers targeting individuals using hotel WiFi networks. The campaign, named CaptiveCrunch and attributed to the Storm-2945 group, focuses on corporate travelers and employs tactics like credential theft and malware distribution through compromised guest networks. Microsoft has been monitoring this activity since May, noting its impact on hospitality networks utilizing captive portals. Hackers have been redirecting users to counterfeit sign-in pages to steal credentials without phishing emails. The threat may also extend to Android devices, with hackers using deceptive techniques to manipulate users into downloading malicious APK files. The hackers employ fake verification checks and sign-in prompts, sometimes misleading users into Microsoft's legitimate authentication process to gain access to accounts. Microsoft has identified a specific remote-access trojan named CornFlake, which can record keystrokes, steal credentials, and capture screenshots. Recommendations for travelers include using mobile hotspots, avoiding updates through captive portals, strengthening authentication methods, and blocking unnecessary device-code authentication.

Tech Optimizer

August 3, 2026

Best Free Antivirus Software

Microsoft Defender is the primary recommendation for most Windows users, as it is integrated into Windows and receives regular updates. Other antivirus options include: - Bitdefender Antivirus Free: A streamlined, Windows-only option with automatic protection after installation. - Avast One Free: A cross-platform suite with a custom scan creation feature. - AVG AntiVirus Free: A traditional free antivirus for personal and family use with an initial scan built into the installation. - Avira Free Security: Offers virus scanning and protection for private non-commercial use. - Malwarebytes Free: A manual cleaner for on-demand scanning and cleaning. - ZoneAlarm Free Antivirus: Combines antivirus with configurable firewall controls for Windows. - ClamAV: An open-source scanning toolkit with command-line tools. The selection process focused on the availability of free products, vendor support, and the specific roles of each software, distinguishing between full-time antivirus tools and on-demand scanners. Recommendations include using Microsoft Defender for Windows 10/11, Bitdefender for simplicity, Avast or AVG for fuller apps, Avira for private home use, Malwarebytes for manual cleaning, ZoneAlarm for firewall controls, and ClamAV for technical scanning.

Winsage

August 3, 2026

Microsoft warns Windows 11 Insiders of crucial mandatory upcoming deadline

Microsoft is updating Secure Boot certificates for Windows 11 PCs, as the previous certificates are 15 years old and nearing expiration. Users can check their certificate status easily. An advisory was issued in early September regarding changes for Windows Insider channels, particularly affecting the Experimental and Beta channels, with a deadline for certificate updates set for August 11, 2026. The Release Preview builds will not be affected by this update requirement. Users in the impacted channels must update to specific builds to obtain the new certificates, or they may stop receiving updates after the deadline. The minimum build requirements for each channel are outlined, and users can check their current Windows 11 Insider build by using the winver command. Microsoft has confirmed that these updates will not impact activation or licensing status.

AppWizard

August 2, 2026

How to sideload Android APKs on your Chromebook

A Chromebook can be used for productivity, gaming, and entertainment, and users can sideload Android apps when they are not available on the Google Play Store. Sideloading involves installing Android Package Kits (APKs) directly onto the device, but caution is advised as these apps have not been verified by Google. Users should research APKs to ensure they are legitimate and free from malware. To sideload an app, users can enable Linux on their Chromebook and use Android Debug Bridge (ADB). This requires enabling ADB debugging in the Linux development environment and using the Terminal to install the APK. Alternatively, users can run APKs using an emulator in Android Studio, which involves setting up Android Studio and creating an Android Virtual Device to install the APK.

Winsage

August 2, 2026

You should deep clean your Windows PC every year to keep it running smoothly — here’s how I do it

Maintaining the performance of a Windows 11 computer requires regular care, particularly in software management. An annual deep clean is recommended, with the following steps to improve performance: 1. Uninstall Apps: Use BCUninstaller to remove unnecessary applications, including those from the Microsoft Store, with a bulk uninstall feature and a post-uninstallation cleanup for leftover files. 2. Run a Debloat Script: Utilize tools like Chris Titus Tech's Windows Utility to disable unnecessary bloatware and manage telemetry settings. 3. Disable Startup Apps: Access the Task Manager to disable non-essential applications that launch at startup, improving boot times. 4. Check for Driver Updates: Ensure drivers are up to date through Windows Update and check graphics driver websites for the latest versions. 5. Run a Malware Scan: Use Malwarebytes for deep scans to identify and remove potential malware threats. 6. Delete Temporary Files: Clear temporary files through the Settings app and clean up web browser cached files to free up space.

Winsage

August 1, 2026

Not sure whether to use Windows Hello or Enhanced Sign‑in Security? This breakdown makes the choice easy

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, allowing support for compatible external fingerprint readers. ESS aims to enhance the security of the authentication process rather than improve the accuracy of biometric recognition. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS utilizes Virtualization-Based Security (VBS) and Trusted Platform Module (TPM) 2.0 to isolate sensitive operations in a protected environment. ESS-compatible fingerprint readers have dedicated secure processors, store templates internally, and communicate with the operating system via encrypted channels. Users can enable ESS by navigating to Settings > Accounts > Sign-in options on their devices. If a device does not support ESS, standard Windows Hello remains a robust authentication option.

AppWizard

August 1, 2026

Third-party app stores are about to take over Google Play. Here’s how to prepare

Alternative third-party app stores are becoming more prominent on Android, with major companies developing their own storefronts to bypass Google. These stores will be accessible for download directly from the Google Play Store in the U.S. for the first time. This shift is driven by developers' dissatisfaction with the "app tax" imposed by Google and Apple, along with international regulatory efforts like Europe’s Digital Markets Act, which require tech giants to open their platforms to competition. While this change offers more choices for users, it also raises security concerns as the Google Play Store's protective measures may be weakened, leading to potential risks from counterfeit app stores. Additionally, the rise of third-party stores may complicate subscription management and billing, as each store will likely implement its own payment system. This fragmentation could increase the risk of data breaches and complicate user experience. The future may see a competitive landscape similar to streaming services, potentially driving Google to improve its offerings.

Winsage

August 1, 2026

Microsoft Issues Hotel Wi-Fi Warning For Windows PC Users

Microsoft has issued a warning to organizations regarding the risks associated with public and hospitality network infrastructures, citing a new hacking threat from Russian cyber actors targeting travelers for malware distribution and credential theft. This warning follows the identification of a global campaign named CaptiveCrunch, linked to Storm-2945, which has been targeting corporate travelers since early May by exploiting compromised guest networks. Attackers are manipulating hospitality networks to facilitate credential theft and malware delivery, using tactics such as redirecting network traffic to counterfeit sign-in pages. The campaign affects both Windows and Android devices and employs techniques that include presenting fake verification checks and software updates. Some victims have been misled into participating in Microsoft’s legitimate device-code authentication process, allowing attackers to gain access to accounts without stealing passwords. Microsoft advises travelers to treat guest networks as untrusted and recommends using mobile hotspots, avoiding updates through captive portals, and enhancing security measures. Malicious tools identified include the Windows remote-access trojan (RAT) named CornFlake, which can steal credentials, record keystrokes, and hijack audio and video capabilities.