management Archives

Winsage

May 10, 2025

Hackers Using Windows Remote Management to Stealthily Navigate Active Directory Network

Threat actors are exploiting Windows Remote Management (WinRM) to navigate through Active Directory environments stealthily, allowing them to bypass detection systems, escalate privileges, and deploy malicious payloads. WinRM operates on HTTP port 5985 and HTTPS port 5986, enabling remote command execution and management tasks. Attackers can gain access through compromised credentials and use WinRM-enabled PowerShell commands for reconnaissance, deploying payloads while evading detection. The attack chain includes initial access, reconnaissance, payload deployment, persistence, and lateral movement, often utilizing techniques that obfuscate malicious activities. Detecting such attacks is challenging due to the use of built-in Windows functionalities and encrypted channels. Recommended mitigation strategies include monitoring for unusual activity, restricting WinRM access, enforcing credential hygiene, and implementing advanced monitoring solutions.

AppWizard

May 9, 2025

Sumo Group’s founders are leaving the company

Sumo Group is undergoing a leadership transition as CEO Carl Cavers, COO Paul Porter, and Director of Excellence and Integration Darren Mills step down after 22 years. CFO Andy Stewart and newly-promoted COO Gary Dunn will share the chief executive responsibilities. Tim Repa-Davies has been promoted to the board. Cavers expressed pride in their achievements and confidence in Sumo's future, while Stewart highlighted the natural evolution of the company.

Tech Optimizer

May 9, 2025

Does Antivirus Software Collect Your Data

Antivirus software collects various types of data to protect systems, including system details (operating system version, RAM, CPU type, computer name), network data (local and external IP addresses, DNS server, network name), user data (Windows username, time zone, language, general location), browsing history (if web protection features are enabled), and file-related information (file names, locations, hashes, and sometimes entire files). The AV-Comparatives report indicates that while some antivirus companies manage data responsibly (e.g., F-Secure, G Data, K7), others (e.g., Norton, Panda, McAfee) have been criticized for poor practices. Data sharing can enhance malware detection but poses privacy risks, as seen in AVG's past actions of selling user browsing history. Users can limit data collection by adjusting settings, reviewing installation agreements, avoiding free antivirus software, choosing privacy-conscious vendors (like F-Secure, ESET, G Data), and reading privacy policies. Despite concerns about data collection, antivirus software is essential for protection against cyber threats, and selecting a transparent provider can help safeguard privacy.

Winsage

May 9, 2025

How to upgrade your ‘incompatible’ Windows 10 PC to Windows 11

On October 14, 2025, Microsoft will stop providing security updates for Windows 10 unless users enroll in the Extended Security Updates program. Upgrading to Windows 11 may be difficult for PCs older than five or six years due to strict compatibility requirements, including a CPU on the approved list and a Trusted Platform Module (TPM) version 2.0. Users may encounter error messages if their hardware does not meet these criteria. There are workarounds for some users, particularly those with PCs designed for Windows 10, but older devices, especially with AMD processors, may face significant challenges. To upgrade, users must ensure their PC is configured to start with UEFI, supports Secure Boot, and has an enabled TPM. A registry edit can allow bypassing CPU checks and accepting older TPM versions. Alternatively, a clean installation of Windows 11 can be performed using installation media, which bypasses CPU compatibility checks but still requires TPM and Secure Boot support. Microsoft has introduced new restrictions with the Windows 11 version 24H2 update, requiring CPUs to support specific instructions (SSE4.2 and PopCnt). For those opting to use the Rufus utility to create installation media, it is essential to use version 4.6 or later to bypass compatibility checks. Users must download the Windows 11 ISO, prepare a USB drive, and follow specific steps to initiate the upgrade process.

AppWizard

May 9, 2025

Swiggy on Android: How to use offline features effectively

Swiggy has introduced a feature that allows users to check their offline wallet balance, enabling them to manage funds without an internet connection. This functionality helps users stay informed about their available funds, aiding in meal planning and budget management. It enhances the user experience by providing a sense of financial security and facilitating efficient order planning.

AppWizard

May 9, 2025

So many people had no clue this Google app for managing photos and videos existed!

Google's Gallery app, previously known as Gallery Go, has over a billion downloads and has been available for six years, yet remains largely unknown to many users, including Pixel device owners. It serves as a simpler, offline alternative to Google Photos, appealing to users with limited storage or unreliable connectivity. A trending Reddit thread revealed users' surprise at the app's existence, with many expressing frustration with Google Photos' complexity. Launched in 2019, the Gallery app was initially aimed at low-end devices and has seen minimal marketing and updates since then. Its primary function is to allow users to view locally stored photos and videos, and it includes basic AI-powered photo organization.

Winsage

May 9, 2025

You Need a Windows Package Manager — Virtualization Review

Microsoft's WinGet is a command-line tool for managing software on Windows, allowing users to install, update, list, and uninstall applications. UniGetUI is an open-source graphical user interface that enhances WinGet's functionality, making it easier for users to manage software without using the command line. UniGetUI supports various package managers and features batch operations, automatic updates, and custom installation options. To install UniGetUI, users can execute the command winget install --exact --id MartiCliment.UniGetUI --source winget or download it from the Microsoft Store. Users can easily navigate its interface to discover, install, and uninstall packages.

Winsage

May 8, 2025

Windows 11 is about to make app downloads easier, but there’s a risk

Microsoft is testing a new feature that allows users to download apps from the Microsoft Store directly through Windows Search. When users search for an app not installed on their system, Windows will check the Microsoft Store for availability and present a preview of the app's listing page along with a "Get" button to initiate the download and installation process. For this feature to be effective, Microsoft needs to refine Windows Search to ensure it provides relevant results and does not return unrelated app suggestions.

AppWizard

May 8, 2025

Google requiring Android apps support 16 KB memory page size to improve performance

Android is transitioning to a 16 KB page size, which will become mandatory for applications in the Google Play Store by November 1, 2025. This change replaces the previous 4 KB page size and aims to enhance performance by improving memory management and reducing overhead. The introduction of Android 15 has been refactored to support this larger page size, with testing currently available on Pixel 8 and Pixel 9 devices. Expected performance improvements include faster app launches (3% to 30% faster), improved battery usage (average gain of 4.5%), quicker camera starts (4.5% to 6.6% faster), and speedier system boot-ups (approximately 8% faster). Apps without native code should remain compatible, while those using libraries or SDKs with native code may need updates. Apps containing native code might require recompilation and review for compatibility. Developers can check memory page size support through the Play Console.

Winsage

May 8, 2025

Security update causes new problem for Windows Hello for Business authentication

Microsoft has indicated that a range of products, including their own and third-party solutions like smart card authentication products, single sign-on (SSO) systems, and identity management platforms, may be experiencing issues linked to a specific feature. This has led to an increase in support calls within certain organizations, particularly affecting machine-to-machine authentication. To mitigate disruptions from logon failures, Microsoft recommends that organizations temporarily change the registry key AllowNtAuthPolicyBypass from ‘2’ back to ‘1’, as detailed in KB5057784.