obtaining Archives

AppWizard

August 17, 2026

How to Promote Your PC Game in China — An Interview with Asia Game Buzz

Ksenia Zubareva is the CEO of Asia Game Buzz, a company focused on promoting PC games in China. She discussed how Steam operates in the Chinese market, highlighting the challenges and opportunities present. Ksenia emphasized the importance of understanding local consumer behavior and using social media for game promotion without needing a license. She also shared her views on the potential leniency of Chinese authorities towards Russian projects regarding the issuance of ISBNs for game distribution.

Winsage

August 17, 2026

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A suspected advanced persistent threat (APT) group linked to China exploited a newly patched vulnerability in VMware vCenter (CVE-2026-59310), which has a critical CVSS score of 9.8, allowing for arbitrary code execution and the deployment of Babuk-derived ransomware. A recently patched vulnerability in Apple macOS (CVE-2026-65400) has been exploited to deploy a cryptocurrency miner, granting unauthorized root access. The Lazarus Group from North Korea exploited a zero-day vulnerability in Microsoft Windows, targeting defense and aerospace sectors. GeoServer patched a critical SQL injection vulnerability that was actively exploited. A new macOS malware, Amnesia Stealer, targets users through ClickFix attacks, stealing data and allowing real-time access to authenticated sessions. A novel attack technique named GhostSplice can manipulate AI coding assistants. Research revealed a method exploiting Chromium's DevTools Protocol for data theft. Noteworthy CVEs this week include CVE-2026-68820, CVE-2026-58231, and multiple others across various platforms. A high-severity command injection flaw in FileRun allows remote code execution. An advanced ClickFix attack has been reported, deploying sophisticated malware. A heap overflow vulnerability in Citrix NetScaler was patched after indications of exploitation. A new malware loader targeting Portuguese-speaking users has been identified. A significant reduction in exposed Automatic Tank Gauge systems has been observed. A phishing campaign targeting Brazil has been detected, and an F.B.I. agent faces charges for unauthorized crypto withdrawals. Authorities in Ukraine dismantled fraudulent call centers, and a North Carolina man was sentenced for cyber extortion. Unauthorized access to sensitive data by the ExfilSquad group has been confirmed. LightSpy activity linked to China has been detected in over 13 countries. A supply chain attack exposed over 2,500 companies, and an Azure exfiltration campaign has exposed millions of enterprise records.

TrendTechie

August 13, 2026

Весь топ из Steam за 399 рублей: как я перестал пиратить и тратиться на игры

Purchasing major game releases on Steam typically costs between 3,000 to 6,000 rubles, leading some players to feel that the investment is impractical, especially if they only play a game once. This has resulted in increased piracy, which poses risks such as malware. SteamPass is a subscription service that offers access to over 2,200 games for 399 rubles per month, allowing users to explore various titles without the high costs of individual purchases. The service operates by providing separate accounts for each game, but it has limitations, including a limited number of accounts for popular games and the need to switch to offline mode to avoid being logged out. Progress and achievements are tied to the rented account, and account sharing is against Steam's terms of service. Despite these drawbacks, SteamPass is seen as a safer alternative to piracy and impulsive purchases.

AppWizard

August 11, 2026

XBOX PC and Game Pass coming to Linux with the ‘Xodus’ project

The Xodus project is an open-source initiative aimed at enabling Xbox PC games, including Game Pass, to run on Linux and Mac systems. It is a reverse-engineering effort that is not officially endorsed by Microsoft, which could affect its compatibility. The development team includes experienced developers from the Heroic Games Launcher, and the project has made progress in logging in, downloading packages, and obtaining licenses for games. The team hopes to support most games in the GDK and MSIXVC format and has indicated the capability to download and run Xbox backward compatible titles, although further patches may be needed for optimal performance.

AppWizard

August 5, 2026

Developers: Beware of Ad Libraries that Betray Your Users’ Location

Advertising companies provide software development kits (SDKs) for mobile app monetization, which often automatically transmit users' location data to ad systems and location data brokers, raising privacy concerns. Many developers and users may be unaware of this data sharing. When developers allow SDKs to collect location data, it poses risks beyond targeted ads, including potential misuse by agencies like ICE and global surveillance. Location data brokers harvest precise movements of individuals, often without their consent, through mobile applications. Some apps directly collaborate with data brokers, while others leak data through advertising SDKs during real-time bidding (RTB) auctions. An incident in 2025 revealed that many apps unknowingly contributed to a location data broker's database. Developers must understand their SDKs' location-sharing practices to mitigate risks. Advertising SDKs can collect location data automatically once users grant permission, without specific permissions for the SDKs themselves. Precise location data can be collected when apps have location permissions, leading to potential privacy violations. Several SDKs have been identified as collecting location data by default, increasing the risk of unintentional data leaks. The Electronic Frontier Foundation (EFF) found that four advertising SDKs collect users' location data by default when location permissions are granted. InMobi encourages location sharing for higher revenue, while BidMachine updated its documentation after EFF's inquiry, confirming precise location data collection. Verve's SDK also collects location data by default but presents a cautious narrative in its Play Store guidance. Huawei's SDK recommends obtaining location permissions to enhance revenue, with default location sharing occurring if permissions are granted. Location data can be shared without users' knowledge or meaningful consent, complicating informed consent issues. The focus on four SDKs does not imply that others adequately protect location data, as many have faced criticism for similar practices. Studies indicate that SDKs often encourage increased data collection through design and documentation, leading to minimal control for developers over data transmission. The EFF's analysis highlights that advertising SDKs incentivize location data sharing through default settings and unclear documentation. Developers should assess third-party SDKs and disable unnecessary data collection. Regulators must hold developers accountable for unlawful data sharing, while legislators should enact laws to protect location privacy and address online behavioral advertising, which drives data tracking.

Winsage

July 28, 2026

Proof-of-concept exploit released for Certighost Windows AD CS vulnerability

A proof-of-concept exploit for a vulnerability in Windows Active Directory Certificate Services (AD CS), identified as CVE-2026-54121, has emerged, allowing authenticated attackers to compromise an entire Windows domain. Microsoft addressed this vulnerability in its July 2026 security updates. The flaw enables attackers to manipulate machine account attributes, obtaining certificates to impersonate critical domain controllers and execute privileged Active Directory operations. Researchers H0j3n and Aniq Fakhrul discovered the vulnerability and publicly disclosed it with a functional exploit that exploits a fallback mechanism in AD CS. This exploit can automate the extraction of sensitive credentials through a DCSync attack. Microsoft has since implemented additional validation measures to enhance security against this vulnerability.

AppWizard

July 28, 2026

Hello Kitty and Friends Add On

The Hello Kitty and Friends Furniture add-on for Minecraft allows players to craft a Vending Machine and obtain heart-shaped Gems through mining. The add-on includes 15 unique achievements related to Hello Kitty and her friends, unlocking character-themed gifts from the Vending Machine. Players can claim a free Keroppi™ outfit at the Minecraft Marketplace, with a limit of one per account until August 28, 2026. The add-on requires the latest version of Minecraft: Bedrock Edition and access to the Minecraft Marketplace.

AppWizard

July 16, 2026

Grand Theft Auto 6 leaker who was given an indefinite sentence in 2023 because he wouldn’t stop hacking is now out of hospital and awaiting retrial

Arion Kurtaj, previously involved in high-profile cyberattacks as part of the hacking group Lapsus$, has been transferred from a secure hospital facility to a standard prison while awaiting retrial. At 18, he was found liable by a UK court for cyber intrusions targeting major corporations, notably leaking 90 videos of Grand Theft Auto 6 in 2022. Initially held under police protection with limited technology access, he was sentenced to a secure hospital pending a medical assessment. This assessment has concluded, allowing his transfer to prison. Kurtaj's retrial is scheduled for November, coinciding with the launch of Grand Theft Auto 6.

Winsage

July 9, 2026

Windows hides a secret identifier that Microsoft hands over to the FBI

19-year-old Peter Stokes, a member of the Scattered Spider group, was arrested by the FBI due to a unique number embedded in his Windows operating system known as the Global Device Identifier (GDID). This identifier, assigned during Windows installation, remains unchanged and can leak user information despite the use of VPNs. The FBI identified Stokes by obtaining a history of IP addresses linked to his GDID from Microsoft, which allowed them to trace his online activities across various platforms. Microsoft tracks over a billion devices with this permanent identifier, which cannot be disabled.

AppWizard

June 29, 2026

XBOX PC and Games

The PC is a popular platform for gamers, and Windows 11 enhances this experience with features tailored for gaming. It includes an integrated Xbox app that connects with third-party game stores and Microsoft's gaming ecosystem. The Game Bar allows users to capture screenshots, record video clips, and interact with friends on Xbox Live. Xbox Mode optimizes resource usage for gaming but is not enabled by default. Windows 11 comes with pre-installed gaming features, including the Xbox app and Game Bar, which can be customized through the Settings app. Users can configure display settings, connect an Xbox Wireless Controller, and customize the Game Bar and its widgets. The Xbox app allows users to manage their game libraries, access Game Pass subscriptions, and stream games via Cloud Gaming. Microsoft offers various Xbox Game Pass subscription tiers for access to a library of games. Xbox Mode provides a full-screen, controller-optimized interface that enhances gaming performance.