NewApp Digest
search bot

Microsoft Windows

How To Mitigate The Microsoft Windows BitLocker ‘Angry Hacker’ 0-Day
Winsage
May 20, 2026

How To Mitigate The Microsoft Windows BitLocker ‘Angry Hacker’ 0-Day

Microsoft is addressing a zero-day exploit known as YellowKey, identified as CVE-2026-45585, which allows attackers to bypass BitLocker security using a specially crafted USB device. Following the release of exploit code by a hacker named Chaotic Eclipse, Microsoft has issued urgent mitigation advice. Cybersecurity expert Neena Sharma recommends treating this as an active threat and suggests implementing compensating controls, such as restricting USB boot access, until a patch is available. Microsoft has provided guidance for users to protect their systems, including the recommendation to add a PIN to BitLocker protection to reduce the risk of exploitation. Detailed instructions for adding a PIN are included in the advisory. YellowKey has not yet been exploited in the wild but requires physical access to the device.
Running Windows CE On The Nintendo 64
Winsage
May 17, 2026

Running Windows CE On The Nintendo 64

The Nintendo 64 is being used as a platform to run Windows CE, a versatile operating system that can function on devices with minimal resources. The N64, equipped with a MIPS CPU and 1 MB of RAM, meets the basic requirements for this project initiated by developer Throaty Mumbo, who was inspired by an IBM Workpad Z50 laptop that also runs Windows CE. Throaty is creating a board-specific configuration for Windows CE 2.11 using the Microsoft Windows CE 2.11 Platform Builder SDK. The project is available on GitHub, allowing users to load applications onto an SD card and run them within the Windows GUI on the N64, demonstrating a smooth experience despite the console's limitations.
Windows BitLocker zero-day gives access to protected drives, PoC released
Winsage
May 13, 2026

Windows BitLocker zero-day gives access to protected drives, PoC released

A cybersecurity researcher known as Chaotic Eclipse has released proof-of-concept exploits for two unpatched vulnerabilities in Microsoft Windows: YellowKey, a BitLocker bypass, and GreenPlasma, a privilege-escalation flaw. The YellowKey vulnerability affects Windows 11 and Windows Server 2022/2025, allowing unauthorized access to BitLocker-protected volumes by exploiting the Windows Recovery Environment. The exploit can be executed using specially crafted 'FsTx' files on a USB drive or directly on the EFI partition. Independent researcher Kevin Beaumont has validated the exploit, which can bypass BitLocker protections even in a Trusted Platform Module (TPM) environment. The GreenPlasma vulnerability allows unprivileged users to create arbitrary memory-section objects, potentially leading to privilege escalation. Chaotic Eclipse has expressed dissatisfaction with Microsoft's handling of bug reports, prompting the public disclosure of these vulnerabilities. Microsoft has stated its commitment to investigating security issues and updating affected devices.
Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities
Winsage
May 13, 2026

Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities

Microsoft's May 2026 security update addresses 137 vulnerabilities, with 31 classified as critical. None of these critical vulnerabilities are currently being exploited in active attacks. Sixteen of the critical vulnerabilities involve remote code execution (RCE) issues in Microsoft products, including Microsoft Office, Microsoft Word, and Azure. Specific vulnerabilities include: - CVE-2026-32161: A use-after-free vulnerability in the Windows Native WiFi Miniport Driver. - CVE-2026-40358: A use-after-free vulnerability in Microsoft Office. - CVE-2026-41089: A stack-based buffer overflow in Windows Netlogon. Additional important vulnerabilities flagged include: - CVE-2026-33835: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability. - CVE-2026-33837: Windows TCP/IP Local Elevation of Privilege Vulnerability. - CVE-2026-35416: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Talos is releasing a new Snort ruleset to detect attempts to exploit these vulnerabilities, and users are advised to update their Cisco Security Firewalls and acquire the latest rule pack via Snort.org.
Windows 11 is now just $10
Winsage
May 10, 2026

Windows 11 is now just $10

Windows 11 features a modern interface, enhanced security with TPM 2.0, and includes DirectX 12 Ultimate for improved gaming performance. It offers productivity tools like snap layouts and virtual desktops, and supports remote work with Azure AD and Hyper-V. Microsoft ended support for Windows 10 and earlier versions in October, making Windows 11 essential for updates and performance enhancements. A limited-time offer allows users to purchase a lifetime license for Windows 11 Pro for .97, down from 9, until May 18 at 11:59 p.m. PT.
This $10 upgrade transforms your PC — but it’s only on sale until midnight
Winsage
May 3, 2026

This $10 upgrade transforms your PC — but it’s only on sale until midnight

Microsoft Windows 11 Pro is available for .97, significantly reduced from its regular price of 9. This offer is valid only until midnight tonight. Windows 11 Pro includes features such as Snap layouts, seamless redocking, enhanced search functionality, and improved voice typing. It also offers tools like Azure AD, Hyper-V, Windows Sandbox, and BitLocker device encryption for security and productivity. For gaming, it features DirectX 12 Ultimate graphics and integrates Microsoft's AI-powered assistant, Copilot. Security enhancements include biometric logins, encrypted authentication, and robust antivirus protection.
Improve your OS: Windows 11 Pro is only $10 now
Winsage
May 1, 2026

Improve your OS: Windows 11 Pro is only $10 now

Microsoft Windows 11 Pro is currently available for .97, reduced from its regular price of 9.00, through a Microsoft-Verified Partner. The operating system has a rating of 4.9 out of 5 from over 100,000 satisfied customers. It includes enhanced security features like BitLocker device encryption, TPM 2.0 support, and Smart App Control, as well as productivity tools such as Snap Layouts and integrated Copilot AI assistant. The license is for a single device, non-transferable, and requires a 1GHz processor, 4GB of RAM, and 64GB of storage for installation.
Search