OpenAI Archives

Winsage

August 17, 2026

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A suspected advanced persistent threat (APT) group linked to China exploited a newly patched vulnerability in VMware vCenter (CVE-2026-59310), which has a critical CVSS score of 9.8, allowing for arbitrary code execution and the deployment of Babuk-derived ransomware. A recently patched vulnerability in Apple macOS (CVE-2026-65400) has been exploited to deploy a cryptocurrency miner, granting unauthorized root access. The Lazarus Group from North Korea exploited a zero-day vulnerability in Microsoft Windows, targeting defense and aerospace sectors. GeoServer patched a critical SQL injection vulnerability that was actively exploited. A new macOS malware, Amnesia Stealer, targets users through ClickFix attacks, stealing data and allowing real-time access to authenticated sessions. A novel attack technique named GhostSplice can manipulate AI coding assistants. Research revealed a method exploiting Chromium's DevTools Protocol for data theft. Noteworthy CVEs this week include CVE-2026-68820, CVE-2026-58231, and multiple others across various platforms. A high-severity command injection flaw in FileRun allows remote code execution. An advanced ClickFix attack has been reported, deploying sophisticated malware. A heap overflow vulnerability in Citrix NetScaler was patched after indications of exploitation. A new malware loader targeting Portuguese-speaking users has been identified. A significant reduction in exposed Automatic Tank Gauge systems has been observed. A phishing campaign targeting Brazil has been detected, and an F.B.I. agent faces charges for unauthorized crypto withdrawals. Authorities in Ukraine dismantled fraudulent call centers, and a North Carolina man was sentenced for cyber extortion. Unauthorized access to sensitive data by the ExfilSquad group has been confirmed. LightSpy activity linked to China has been detected in over 13 countries. A supply chain attack exposed over 2,500 companies, and an Azure exfiltration campaign has exposed millions of enterprise records.

AppWizard

August 12, 2026

Google’s Android chief lays out his vision for how AI will change our smartphones

Google introduced new features in its Pixel 11 Pro smartphone, including a light that indicates when its Gemini AI is processing commands and a forthcoming Android feature named Halo that provides real-time updates on AI task progress. The company aims to reduce the need for users to micromanage their devices by allowing AI to handle routine tasks, such as scheduling appointments. Google anticipates consumer needs three years ahead in its Android development, focusing on how AI can enhance user experience. Other companies, like Samsung and Apple, are also investing in AI integration, with Apple planning to revamp Siri for better functionality. Despite advancements, there is growing consumer skepticism about AI, with 79% of Americans expressing distrust in businesses to use AI responsibly.

Winsage

August 11, 2026

Microsoft PowerToys will soon take full advantage of the same AI that powers Copilot+ PCs

Microsoft PowerToys has introduced on-device support for Phi Silica, a small language model, in its latest preview version, enhancing the Advanced Paste feature for clipboard management. Advanced Paste can format clipboard content in various formats, extract text from images using OCR, and transcode audio and video files. It now supports multiple AI models, including local options like Foundry Local and Ollama. The latest version, PowerToys v0.101.2211.0, includes improvements such as enhanced AI customization for Advanced Paste, better dialog handling in the Command Palette, and improved window management features. Mouse Jump has transitioned to the newer WinUI app architecture, and new settings have been added for update channel selection and bug reporting.

AppWizard

August 8, 2026

Hidden code in ChatGPT’s Android app suggests OpenAI is building a direct WhatsApp sticker export

OpenAI is developing a feature in ChatGPT's Android app that would allow users to create stickers and export them directly to WhatsApp via an "Add to WhatsApp" button. This feature is not yet officially announced but aims to simplify the current multi-step process of creating custom WhatsApp stickers from ChatGPT. The anticipated functionality would enable users to convert text prompts into WhatsApp stickers easily. OpenAI has removed usage limits for free ChatGPT users, and image generation has become a popular feature. The integration with WhatsApp could enhance user engagement and streamline the sharing of AI-generated images as stickers.

AppWizard

August 4, 2026

Google is introducing mandatory identity verification for Android app developers

Google will require mandatory identity verification for all developers creating applications for the Android platform, affecting those from countries under U.S. sanctions, such as Russia, Iran, Cuba, and North Korea, who will be excluded from the verification system and may not distribute their apps internationally. The new regulations apply to developers of apps for Android 7 and later versions.

Winsage

August 3, 2026

Microsoft warns Windows PC users of Russian hackers on hotel WiFi

Microsoft has issued a warning to Windows PC users about Russian hackers targeting individuals using hotel WiFi networks. The campaign, named CaptiveCrunch and attributed to the Storm-2945 group, focuses on corporate travelers and employs tactics like credential theft and malware distribution through compromised guest networks. Microsoft has been monitoring this activity since May, noting its impact on hospitality networks utilizing captive portals. Hackers have been redirecting users to counterfeit sign-in pages to steal credentials without phishing emails. The threat may also extend to Android devices, with hackers using deceptive techniques to manipulate users into downloading malicious APK files. The hackers employ fake verification checks and sign-in prompts, sometimes misleading users into Microsoft's legitimate authentication process to gain access to accounts. Microsoft has identified a specific remote-access trojan named CornFlake, which can record keystrokes, steal credentials, and capture screenshots. Recommendations for travelers include using mobile hotspots, avoiding updates through captive portals, strengthening authentication methods, and blocking unnecessary device-code authentication.

AppWizard

August 3, 2026

Steam Week in Review: Once positioned as mainstream-friendly PC gaming solutions, can Valve’s hardware survive the memory crisis?

Last week, a discussion arose regarding the decline in Steam Deck sales, as noted by PC Gamer's Andy Edser. An analysis by Boiling Steam questioned the mathematical accuracy of the sales figures, leading to concerns about Valve's hardware future. Gabe Newell's million donation to OpenAI in 2018 has been suggested to negatively impact Valve's hardware ambitions. The price of the anticipated Steam Deck OLED increased significantly in May, with the 1TB model rising from 9 to 9 and the 512GB version from 9 to 9, causing potential buyers to reconsider. The Steam Machine's projected retail price has also surged from around 0 to ,049. In gaming, Mistfall Hunter has quickly reached the third spot on the live concurrent players list. The latest Steam deep cuts ranked Counter-Strike 2, Dota 2, and Palworld as the top three games. Despite new releases, Counter-Strike 2 remains at the top of the rankings. DragonSword: Awakening and Shift at Midnight have gained attention for their unique gameplay. A notable Steam review of Alien Kink VR expressed a darkly humorous sentiment.

Winsage

August 1, 2026

Microsoft Issues Hotel Wi-Fi Warning For Windows PC Users

Microsoft has issued a warning to organizations regarding the risks associated with public and hospitality network infrastructures, citing a new hacking threat from Russian cyber actors targeting travelers for malware distribution and credential theft. This warning follows the identification of a global campaign named CaptiveCrunch, linked to Storm-2945, which has been targeting corporate travelers since early May by exploiting compromised guest networks. Attackers are manipulating hospitality networks to facilitate credential theft and malware delivery, using tactics such as redirecting network traffic to counterfeit sign-in pages. The campaign affects both Windows and Android devices and employs techniques that include presenting fake verification checks and software updates. Some victims have been misled into participating in Microsoft’s legitimate device-code authentication process, allowing attackers to gain access to accounts without stealing passwords. Microsoft advises travelers to treat guest networks as untrusted and recommends using mobile hotspots, avoiding updates through captive portals, and enhancing security measures. Malicious tools identified include the Windows remote-access trojan (RAT) named CornFlake, which can steal credentials, record keystrokes, and hijack audio and video capabilities.

Winsage

July 27, 2026

Hate the Copilot Key? Here’s How to Disable It Completely

In 2024, the introduction of the Copilot key on Windows PCs replaced the Right Control (Ctrl) key on many laptops, leading to user complaints about disrupted workflows and the loss of keyboard shortcuts. In response to the backlash, Microsoft is preparing to implement a "kill switch" for the Copilot key, allowing users to revert it back to its original function or disable it entirely. Users will soon be able to remap the key through Settings, and the option to disable it was not previously available. Microsoft acknowledged the challenges faced by users who relied on the Right Ctrl key and noted significant disruptions to workflows. While disabling the Copilot key may become straightforward, completely turning off Copilot is more complex, requiring users to avoid launching the Microsoft Copilot app for 28 days. Microsoft has also indicated a need to remove Copilot from applications where it does not perform well, following the removal of Copilot from several ineffective Windows 11 applications.

Winsage

July 18, 2026

Recent patches for Windows 11 could have been created by Microsoft’s new Mythos rival

Microsoft is developing a security tool called Project Perception, aimed at helping organizations identify and fix software vulnerabilities using artificial intelligence. Set to launch this month, it will utilize AI models from Microsoft, OpenAI, and Anthropic to offer extensive coverage while being cost-effective. The tool features a model router to select the best AI model for specific tasks, optimizing performance and reducing operational costs. Led by Hayete Gallot, Microsoft is shifting towards AI-focused products, recognizing the potential for substantial returns from enterprise investments in AI. Project Perception aims to compete in the AI-driven vulnerability detection market, although its availability may be limited due to concerns about misuse. Microsoft recently addressed around 570 vulnerabilities using an AI tool called MDASH, suggesting a growing role for AI in cybersecurity.