obtaining Archives

AppWizard

August 5, 2026

Developers: Beware of Ad Libraries that Betray Your Users’ Location

Advertising companies provide software development kits (SDKs) for mobile app monetization, which often automatically transmit users' location data to ad systems and location data brokers, raising privacy concerns. Many developers and users may be unaware of this data sharing. When developers allow SDKs to collect location data, it poses risks beyond targeted ads, including potential misuse by agencies like ICE and global surveillance. Location data brokers harvest precise movements of individuals, often without their consent, through mobile applications. Some apps directly collaborate with data brokers, while others leak data through advertising SDKs during real-time bidding (RTB) auctions. An incident in 2025 revealed that many apps unknowingly contributed to a location data broker's database. Developers must understand their SDKs' location-sharing practices to mitigate risks. Advertising SDKs can collect location data automatically once users grant permission, without specific permissions for the SDKs themselves. Precise location data can be collected when apps have location permissions, leading to potential privacy violations. Several SDKs have been identified as collecting location data by default, increasing the risk of unintentional data leaks. The Electronic Frontier Foundation (EFF) found that four advertising SDKs collect users' location data by default when location permissions are granted. InMobi encourages location sharing for higher revenue, while BidMachine updated its documentation after EFF's inquiry, confirming precise location data collection. Verve's SDK also collects location data by default but presents a cautious narrative in its Play Store guidance. Huawei's SDK recommends obtaining location permissions to enhance revenue, with default location sharing occurring if permissions are granted. Location data can be shared without users' knowledge or meaningful consent, complicating informed consent issues. The focus on four SDKs does not imply that others adequately protect location data, as many have faced criticism for similar practices. Studies indicate that SDKs often encourage increased data collection through design and documentation, leading to minimal control for developers over data transmission. The EFF's analysis highlights that advertising SDKs incentivize location data sharing through default settings and unclear documentation. Developers should assess third-party SDKs and disable unnecessary data collection. Regulators must hold developers accountable for unlawful data sharing, while legislators should enact laws to protect location privacy and address online behavioral advertising, which drives data tracking.

Winsage

July 28, 2026

Proof-of-concept exploit released for Certighost Windows AD CS vulnerability

A proof-of-concept exploit for a vulnerability in Windows Active Directory Certificate Services (AD CS), identified as CVE-2026-54121, has emerged, allowing authenticated attackers to compromise an entire Windows domain. Microsoft addressed this vulnerability in its July 2026 security updates. The flaw enables attackers to manipulate machine account attributes, obtaining certificates to impersonate critical domain controllers and execute privileged Active Directory operations. Researchers H0j3n and Aniq Fakhrul discovered the vulnerability and publicly disclosed it with a functional exploit that exploits a fallback mechanism in AD CS. This exploit can automate the extraction of sensitive credentials through a DCSync attack. Microsoft has since implemented additional validation measures to enhance security against this vulnerability.

AppWizard

July 28, 2026

Hello Kitty and Friends Add On

The Hello Kitty and Friends Furniture add-on for Minecraft allows players to craft a Vending Machine and obtain heart-shaped Gems through mining. The add-on includes 15 unique achievements related to Hello Kitty and her friends, unlocking character-themed gifts from the Vending Machine. Players can claim a free Keroppi™ outfit at the Minecraft Marketplace, with a limit of one per account until August 28, 2026. The add-on requires the latest version of Minecraft: Bedrock Edition and access to the Minecraft Marketplace.

AppWizard

July 16, 2026

Grand Theft Auto 6 leaker who was given an indefinite sentence in 2023 because he wouldn’t stop hacking is now out of hospital and awaiting retrial

Arion Kurtaj, previously involved in high-profile cyberattacks as part of the hacking group Lapsus$, has been transferred from a secure hospital facility to a standard prison while awaiting retrial. At 18, he was found liable by a UK court for cyber intrusions targeting major corporations, notably leaking 90 videos of Grand Theft Auto 6 in 2022. Initially held under police protection with limited technology access, he was sentenced to a secure hospital pending a medical assessment. This assessment has concluded, allowing his transfer to prison. Kurtaj's retrial is scheduled for November, coinciding with the launch of Grand Theft Auto 6.

Winsage

July 9, 2026

Windows hides a secret identifier that Microsoft hands over to the FBI

19-year-old Peter Stokes, a member of the Scattered Spider group, was arrested by the FBI due to a unique number embedded in his Windows operating system known as the Global Device Identifier (GDID). This identifier, assigned during Windows installation, remains unchanged and can leak user information despite the use of VPNs. The FBI identified Stokes by obtaining a history of IP addresses linked to his GDID from Microsoft, which allowed them to trace his online activities across various platforms. Microsoft tracks over a billion devices with this permanent identifier, which cannot be disabled.

AppWizard

June 29, 2026

XBOX PC and Games

The PC is a popular platform for gamers, and Windows 11 enhances this experience with features tailored for gaming. It includes an integrated Xbox app that connects with third-party game stores and Microsoft's gaming ecosystem. The Game Bar allows users to capture screenshots, record video clips, and interact with friends on Xbox Live. Xbox Mode optimizes resource usage for gaming but is not enabled by default. Windows 11 comes with pre-installed gaming features, including the Xbox app and Game Bar, which can be customized through the Settings app. Users can configure display settings, connect an Xbox Wireless Controller, and customize the Game Bar and its widgets. The Xbox app allows users to manage their game libraries, access Game Pass subscriptions, and stream games via Cloud Gaming. Microsoft offers various Xbox Game Pass subscription tiers for access to a library of games. Xbox Mode provides a full-screen, controller-optimized interface that enhances gaming performance.

Winsage

June 28, 2026

Microsoft Shares Bounce From 52-Week Low as Italian Probe and Windows 10 Extension Create Crosscurre

The Italian antitrust authority, AGCM, has launched an investigation into Microsoft 365 for allegedly guiding users toward pricier subscription tiers by integrating AI tools like Copilot and Designer without explicit user consent. Microsoft has stated it will cooperate with the investigation. Last year, Australia’s consumer watchdog made a similar complaint regarding hidden costs related to Copilot during contract renewals. Despite this scrutiny, Microsoft shares rose to €327.90, a 5.71% increase, following a shift in investor sentiment towards AI-software firms. Microsoft also extended its Extended Security Updates (ESU) program for Windows 10 until October 2027, allowing users to delay transitioning to Windows 11, which could hinder hardware sales. The stock remains down nearly 19% year-to-date and is trading below key moving averages. The ongoing regulatory investigation and sluggish Windows upgrade cycle present challenges for Microsoft’s growth.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Tech Optimizer

June 19, 2026

How Cybersecurity Services Have Evolved Beyond Antivirus and Firewalls

Businesses traditionally relied on antivirus software and firewalls for cybersecurity, which were effective when threats were simpler and data was mostly stored on-site. However, the cybersecurity landscape has evolved, with cybercriminals employing advanced tactics that traditional methods cannot adequately address. Antivirus software is limited to detecting known threats, while modern malware can evade detection by altering its code or executing in memory. Firewalls also struggle when authorized users' credentials are compromised, allowing threats to infiltrate networks. Contemporary security strategies advocate for a multi-layered approach, incorporating tools like Endpoint Detection and Response (EDR), Multi-Factor Authentication (MFA), Zero Trust Architecture, Dark Web Monitoring, and Security Awareness Training. Compliance with regulatory standards is increasingly important, and cyber insurance providers now require businesses to demonstrate comprehensive security measures. Managed security providers are becoming essential for small and mid-sized businesses, offering expertise and resources to manage complex security tools and processes effectively. Organizations should assess their current security status and adopt a layered approach to address vulnerabilities, recognizing that traditional solutions alone are insufficient in today's threat landscape.