NewApp Digest
search bot

patches

Microsoft warns users to install Windows 11's latest update within 3 days, 400+ security bugs fixed
Winsage
August 14, 2026

Microsoft warns users to install Windows 11’s latest update within 3 days, 400+ security bugs fixed

Windows 11's August 2026 Patch Tuesday update has been released, addressing 421 security vulnerabilities, including 400 specific to the Patch Tuesday release. The update rectifies at least 37 remote code execution bugs and five elevation-of-privilege vulnerabilities. Microsoft advises users to implement the update within three days for security. The update includes fixes for other Microsoft products like Entra, Office, and Teams. Users should verify their Windows 11 build number, with recommended versions being 26200.9168 for 25H2 and 26100.9168 for 24H2. The update is identified as KB5121003 and may require up to two reboots to apply fully. Key areas of focus in the update include the kernel, Remote Desktop, DNS, DHCP, SMB, and Windows Defender Firewall. Microsoft emphasizes the importance of timely updates and recommends limiting the deferral period for quality updates to less than three days.
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’
Winsage
August 13, 2026

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

Security researcher Nightmare Eclipse has released a zero-day exploit named ShieldBreak that allows privilege escalation on Windows by targeting a vulnerability in Microsoft Defender. This exploit, designated as CVE-2026-50656, is categorized as a race condition vulnerability and affects the latest versions of Windows 11 and Windows Server 2025, with potential impacts on Windows 10. The exploit was disclosed on June 9, 2026, and Microsoft acknowledged the issue on June 16, rolling out fixes by July 9. The mechanics of ShieldBreak involve manipulating Defender’s scan path and executing a scheduled task to gain System-level privileges. Experts have noted differences between ShieldBreak and the previously known RoguePlanet exploit, emphasizing that ShieldBreak requires Defender to be active to function.
silver Android smartphone
AppWizard
August 13, 2026

Game Pass titles will receive unofficial support on Linux

Enthusiasts are working on the Xodus project, an unofficial open-source initiative aimed at enabling Xbox PC games, including those from Game Pass, to run on Linux and Mac systems. The project is a reverse-engineering effort that allows users to log in, download packages, and obtain game licenses for Xbox titles. The team has experience from previous projects like the Heroic Games Launcher and aims to support a wide range of Xbox games formatted in GDK and MSIXVC. While Xodus can download and run these games, additional patches may be required for optimal performance.
Hell Let Loose: Vietnam (PC) Review
AppWizard
August 13, 2026

Hell Let Loose: Vietnam (PC) Review

Hell Let Loose: Vietnam has officially launched after a series of open betas and a brief delay. Expression Games has adapted the 50 vs 50 first-person combat experience from World War II to the Vietnam War, featuring dynamic firefights, strategic planning, expansive maps, and historically accurate weaponry. The game combines elements of an arcade shooter and a military simulator, with gameplay that is faster and more fluid than its predecessor. Players can swim, climb ladders, and utilize helicopters, gunboats, logistics trucks, and tanks, although vehicle controls can be clunky. The game has visual and technical challenges, including texture popping and difficulty in differentiating maps due to similar appearances. Recent improvements have been made in hit detection and overall stability. The game has received positive feedback despite its challenges, offering a unique take on the franchise.
4 Android Brands With The Worst Software Support
AppWizard
August 13, 2026

4 Android Brands With The Worst Software Support

Android smartphones often have a trade-off between price and software support. Motorola typically offers two major Android updates and three years of security patches for flagship models, while mid-range devices receive only one Android update and two years of security patches. Motorola devices, like the Moto G line, are priced under 0 and provide solid battery life and camera performance. Xiaomi's software support varies, with models like the Xiaomi 14 and 15 receiving up to five years of patches starting in 2026, while entry-level models offer only two to three years of support. Imported Xiaomi devices, such as the Redmi Note or Poco X, feature AMOLED screens and rapid charging for under 0. TCL generally provides at least two years of security updates, but not all devices receive two Android version upgrades. TCL's Nxtpaper technology offers a unique display experience, and models like the TCL 60 XE Nxtpaper come with 8GB of RAM and a 120Hz screen. RedMagic promises two major Android updates and three years of security patches starting with the RedMagic 11 Pro. The RedMagic 11 Pro features high-end specifications, including the Snapdragon 8 Elite Gen 5 and a 7,500mAh battery, priced around 9. Brands with subpar software support are identified by the number of promised major Android updates and the duration of security patches, with comparisons made against industry standards set by manufacturers like Google and Samsung.
Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday
Winsage
August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.
After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug
Winsage
August 12, 2026

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

A security researcher named Nightmare Eclipse has discovered a vulnerability in Windows, called ShieldBreak, which allows hackers to gain system-wide access to users' devices and sensitive data by exploiting a flaw in Windows Defender. The vulnerability affects Windows 10, Windows 11 (including version 25H2), and Windows Server 2025. A proof-of-concept exploit has been provided, requiring users to run a Windows application to trigger the vulnerability. Security researcher Will Dormann confirmed that Windows Defender must be enabled for the exploit to work. Microsoft has not yet released a patch for ShieldBreak, which is classified as a zero-day vulnerability. This discovery follows previous vulnerabilities disclosed by Nightmare Eclipse, including RoguePlanet, for which Microsoft issued an inadequate patch. The situation has heightened tensions between the researcher and Microsoft regarding the handling of bug reports, especially after Microsoft threatened legal action against researchers disclosing zero-days outside established protocols. The disclosure of ShieldBreak occurred shortly after Microsoft's monthly security patch releases, which have been increasing in number.
Microsoft Windows 0-Day Attack Deploys Lazarus Rootkit—Patch Now
Winsage
August 12, 2026

Microsoft Windows 0-Day Attack Deploys Lazarus Rootkit—Patch Now

Microsoft released a patch for a zero-day vulnerability, CVE-2026-68820, which is being exploited by cybercriminals, specifically the North Korean hacking group Lazarus. This vulnerability allows unauthorized attackers to elevate their privileges locally, posing a significant risk to affected systems. The August 2026 Patch Tuesday update addressed 421 vulnerabilities, including three zero-days, with CVE-2026-68820 being the only one confirmed to be actively exploited. The vulnerability's impacts on confidentiality, integrity, and availability are rated as High. Users of Microsoft Windows 10, Windows 11, and various versions of Windows Server should prioritize deploying the patch for this vulnerability.
Search