overlay Archives

Winsage

May 2, 2026

“Xbox mode is easily the headline feature”: In May’s Windows 11 update, I walk through the 11 upgrades that change how we use the OS, and why some of them surprised me

Microsoft will begin rolling out the May 2026 Security Update for Windows 11 on May 12, 2026. Key features of this update include: 1. Xbox Mode: Transforms PCs into a console-like experience, prioritizing system resources for gaming and freeing up to 2GB of memory. 2. Voice Typing Improvements: Redesign of Voice Typing elements on the touch keyboard. 3. New Arabic 101 Legacy Keyboard Layout: Available for addition from the Region page in Settings. 4. Drop Tray Changes: Renamed from Drag Tray and can be disabled in Settings > System > Multitasking. 5. Taskbar AI Agents Support: Allows monitoring of AI agents directly from the Taskbar, starting with the Microsoft 365 Copilot app. 6. Debloat Policy with Dynamic List Support: Enables administrators to specify additional apps for removal beyond the default list. 7. Windows Driver Policy Update: Changes how the kernel manages trust for third-party drivers, eliminating default trust for cross-signed drivers. 8. Batch File Security Changes: Enhances security for batch files and Command Prompt scripts, with an option for a hardened processing mode. 9. Format FAT32 up to 2TB: The format command-line tool now supports formatting volumes up to 2TB using FAT32.

AppWizard

May 2, 2026

Massive new Xbox Ally X update brings major changes to the Steam Deck’s handheld rival

The latest update for the Xbox Ally X introduces several enhancements, including improved docked usage, expanded game library support, and automatic upscaling through Auto Super Resolution. The handheld now automatically transitions gameplay to a connected display, disables its own screen to conserve resources, and activates Auto Low Latency Mode and Variable Refresh Rate settings on compatible displays. Users can adjust external display settings via the Game Bar overlay without exiting games. Controller pairing has been improved, with handheld controls disabled when a controller is connected. The left thumbstick can now function as a cursor for navigating applications that do not support controller input. Auto Super Resolution allows games to run at 720p but output at 1440p on external displays. The update also enhances support for the Xbox Wireless Headset and Bluetooth LE Audio, improves haptic feedback, and allows users to add custom game links in the Xbox app for easier access to games.

Winsage

May 1, 2026

Optional April Update for Windows 11 Brings AI Agents on Taskbar, More

Microsoft's optional April update for Windows 11, designated as KB5083631, introduces several new features, including: - Xbox Mode, which offers a console-like interface for PC games. - AI agents on the taskbar, allowing users to monitor agents like the Microsoft 365 Researcher. - File Explorer improvements that support additional archive formats. - New haptic feedback effects for compatible pens. - Redesigned touch keyboard voice typing feature. - Rebranding of the Drag Tray to Drop Tray with a new compact view. - Enhancements to the Microsoft Store to reduce specific error codes during app downloads. Additionally, Microsoft released the optional KB5083806 update for Windows 11 version 26H1, aimed at new ARM-powered devices expected to launch later this year.

AppWizard

April 29, 2026

Google Translate rolls out new AI-assisted pronunciation practice feature

Google has introduced an AI-powered pronunciation practice tool in the Google Translate app on Android to celebrate its 20th anniversary. This feature provides real-time feedback on users' pronunciation skills after translating a word or phrase. Users can access a "Practice" button to receive constructive feedback on clarity and accuracy, and they can listen to example pronunciations. The tool is currently available only on the Android app in the United States and India, and it supports English, Spanish, and Hindi.

AppWizard

April 29, 2026

“Lord of Hatred is the best Diablo 4 has ever been,” Blizzard says

Diablo 4 has faced challenges in maintaining momentum due to competition from titles like Last Epoch and Path of Exile 2, which offer more compelling endgame experiences. The third expansion, Lord of Hatred, aims to shift this narrative by concluding the Mephisto saga and introducing enhancements such as the Talisman and Horadric Cube for player customization. The expansion received an 8/10 rating, which is lower than its predecessor, Vessel of Hatred, due to fewer groundbreaking features. Associate Game Designer Zaven Haroutunian and Associate Director of Game Design Colin Finer stated that they believe Lord of Hatred represents the peak of Diablo 4, describing it as the ultimate expression of the game. The expansion includes streamlined endgame experiences and features like a map overlay and loot filter for better navigation and item highlighting.

AppWizard

April 29, 2026

New Android spyware Morpheus linked to Italian surveillance firm

Morpheus is a new spyware identified by the nonprofit organization Osservatorio Nessuno, which spreads through counterfeit Android applications that appear as legitimate updates. Attackers use SMS messages to direct victims to a fraudulent website mimicking an Internet Service Provider (ISP). The spyware installs a dropper app that deploys a concealed payload, which disguises itself as legitimate system components and manipulates users into granting dangerous permissions, including Accessibility access. Once granted, Morpheus initiates a Permission Workflow that creates a fake update overlay, disabling the touchscreen to prevent user interaction. It ensures persistence by restarting after device reboots and can request device administrator privileges. The spyware exploits overlay windows and Accessibility features to gain control of the device and bypass security measures, including disabling antivirus solutions without requiring root access. Analysis suggests Morpheus has Italian origins, with connections to an Italian firm, IPS Intelligence, known for lawful interception technologies. The spyware is capable of invasive actions such as recording audio and video, linking to WhatsApp, and compromising device security. The report highlights a network of dubious companies and shared contacts linked to the spyware's distribution.

AppWizard

April 29, 2026

Minecraft 26.2 Snapshot 5

The 26.2 Snapshot 5 introduces several new features, including an explosive archetype for the Sulfur Cube and the addition of erupting Geysers formed by Potent Sulfur. The new Sulfur Cube archetype, called Explosive, shares properties with the Regular archetype but has higher air drag and can absorb TNT blocks. When primed, absorbed TNT has a fuse time of 6 seconds when ignited by fire or Redstone, and a randomized fuse time between 0.75 and 3 seconds when primed by an explosion. Sulfur Cubes with absorbed TNT cannot be picked up or damaged, and no Small Sulfur Cubes will spawn upon explosion. Potent Sulfur creates Geysers when placed above a Magma block and under water, sending water particles skyward at random intervals. Various adjustments have been made to mob hitboxes, and Hoglins are now classified as hostile and will not spawn on Peaceful difficulty. New sounds for Geyser eruptions have been added, and Touchscreen Mode has been removed. The Data Pack version is now 104.0, and the Resource Pack version is 86.2. New particles related to Geysers have been introduced, and several bugs have been fixed in this update.

AppWizard

April 28, 2026

10,000 Users Exposed As Fake Document Reader App Delivers Anatsa Banking Trojan

Security researchers from ThreatLabz discovered a malicious document reader app on the Google Play Store that delivered the Anatsa Android banking trojan. The app, which had over 10,000 downloads before its removal, disguised itself as a legitimate file management tool using the package name com.groundstation.informationcontrol.filestationbrowsefilesreaddocs. It employed a "dropper" technique to hide its malicious code, connecting to an external server to retrieve the malware payload after installation. Anatsa is designed to steal financial information by overlaying a fake login screen over legitimate banking apps, capturing user credentials and enabling unauthorized transactions. Users are advised to delete the app and monitor their financial accounts. Technical indicators for identifying infections include the Anatsa Installer SHA256 (5c9b09819b196970a867b1d459f9053da38a6a2721f21264324e0a8ffef01e20), Payload URL (http://23.251.108[.]10:8080/privacy.txt), Payload SHA256 Hash (88fd72ac0cdab37c74ce14901c5daf214bd54f64e0e68093526a0076df4e042f), and Command and Control servers (http://172.86.91[.]94/api/ and http://193.24.123[.]18:85/api/).

AppWizard

April 25, 2026

Android Hackers Target 800 Banking, Crypto and Social Media Apps With ‘Near-Zero Detection Rates’: Zimperium

Android hackers are targeting over 800 applications in banking, cryptocurrency, and social media sectors, utilizing four active malware families: RecruitRat, SaferRat, Astrinox, and Massiv. These malware employ advanced techniques to evade detection and execute credential theft, unauthorized financial transactions, and data exfiltration. Attackers lure victims through phishing websites, fraudulent job offers, fake software updates, text-message scams, and promotional lures. Once installed, the malware can request Accessibility permissions, obscure app icons, obstruct uninstallation, and steal sensitive information through counterfeit lock screens. They can also capture one-time passcodes, stream device screens, and overlay fake login pages on legitimate applications. The malware uses HTTPS and WebSocket communications to blend malicious traffic with normal activity and may incorporate encryption layers to avoid detection.

Winsage

April 25, 2026

Microsoft Starts Rolling Out New “Experimental” Windows Insider Channel

Microsoft is rolling out a new Experimental Windows Insider channel, transitioning users from the Dev Channel to the Experimental Channel with updates from the 26300 series builds. Over the coming weeks, Canary testers using the 28000 series will be moved to the Experimental (26H1) Channel, while those on the 29500 series will go to the Experimental (Future Platforms) Channel. The latest build for the Dev Channel is 26300.8289, which includes enhancements such as improved Windows Update functionalities and options to skip updates during the out-of-the-box experience. Dev Channel testers can enable the Experimental Channel option through Settings. The Experimental Channel will allow switching between 26H1 builds and future platform builds. Canary Channel testers have access to build 28200.1873, which rebrands the Xbox full-screen experience and improves the Touch Keyboard. Additionally, build 29576.1000 is available for testers on the 29500 series, featuring a redesigned volume slider and new metrics in Task Manager. Beta Channel Insiders can download build 26200.8283, which includes minor adjustments to the Start Menu and print drivers, but the new Beta experience will not be immediately available.