PNG Archives

Winsage

August 5, 2026

I played DOOM inside MS Paint on Windows 11 by hijacking the clipboard, and it’s shockingly good

Mark Russinovich, the Chief Technology Officer of Microsoft Azure, has created a project called DoomPaint, which allows the classic game DOOM to be displayed within Microsoft Paint. The game operates through the ViZDoom engine, rendering frames headlessly and transferring them to Paint via the Windows clipboard. DoomPaint features full keyboard controls, sound effects, and a MIDI soundtrack, maintaining a frame rate of around 35 FPS. To run DoomPaint, users need to download the project from GitHub, ensure Python is installed, extract the folder, and run a batch file, which sets up a virtual environment and opens Microsoft Paint for gameplay. The default controls include movement with W/S or arrow keys, turning with A/D or arrow keys, strafing with Q/E, firing with Ctrl/F, and other functions assigned to different keys. The project uses the shareware DOOM1.WAD for the initial episode and additional maps from Freedoom due to licensing restrictions. DoomPaint differs from previous attempts to integrate DOOM into Paint by using Paint’s canvas as the sole display for the game. The clipboard race condition was addressed by allowing the application to own the clipboard as a reference-counted OLE data object. Sound effects come from ViZDoom through OpenAL, and music is played using a separate module that loops through the Windows MIDI sequencer. Russinovich utilized Claude Fable 5 for this project, demonstrating how AI tools can enhance software development.

AppWizard

August 5, 2026

Minecraft 26.3 Snapshot 7

The 26.3 Snapshot 7 update introduces new features including Concrete Stairs and Slabs in 16 colors, and Explorer Maps that lead to various Abandoned Camps in multiple biomes such as Bamboo Jungle, Cherry Grove, Birch Forest, and others. Significant structures like Ancient City and Desert Pyramid also have new maps. Changes include updated loot tables for Abandoned Camp Barrels and adjustments to player icons on maps. Explorer Maps are now distinct items with unique icons, and existing maps will convert to the new item type upon loading. Technical changes involve updates to Data Pack and Resource Pack versions, along with various command and data component modifications. Bugs have been fixed, improving overall gameplay experience.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

AppWizard

July 20, 2026

The Samsung Browser app on Wear OS now lets you download images and GIFs

Samsung has updated its Browser app on Wear OS, allowing users to download images and GIFs directly to their smartwatches. Users can long-press on images to prompt a "Download image" option, supporting formats like PNG, JPG, JPEG, and GIF, with a maximum file size of 10MB. Downloaded images are stored in a "Downloads" folder in the watch's internal memory and can be viewed as thumbnails on the app's home page. To access full images, a third-party file manager or gallery app is needed. Users can delete individual images or select multiple images for bulk deletion through a long-press action.

Tech Optimizer

July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.

AppWizard

July 7, 2026

Minecraft 26.3 Snapshot 3

In version 26.3, two new features have been introduced: the Cushion and the Straw Bed. The Cushion allows players to sit around a campfire and is available in 16 colors, crafted from three wool slabs of the same color. It can be placed on any flat surface, aligns horizontally to the grid, and overlaps with most objects. The Straw Bed enables players to sleep without setting a spawn point, can be used only once, and is destroyed after a single night's sleep. It is crafted from three hay bales, yielding four beds, and a new statistic tracks how many times players have slept in a Straw Bed. Additionally, the Data Pack version is now 110.0, and the Resource Pack version is 91.0. New commands for post effects have been added, and various gameplay mechanics have been updated, including changes to bed rules and loot tables. New block textures and sound events for the Straw Bed and Cushion have also been introduced, along with numerous bug fixes.

Winsage

June 19, 2026

Microsoft confirms Recycle Bin bug across all versions of Windows

Reports have emerged about complications from the latest Patch Tuesday update, affecting users with issues such as access problems with OneDrive and Dropbox, BitLocker recovery lockouts, and Blue Screen of Death (BSOD) errors. Microsoft has acknowledged a glitch related to the Recycle Bin after the installation of June's Patch Tuesday update (KB5094126), where the confirmation dialog displays the internal file name instead of the actual name when deleting an item. This issue affects various supported Windows client and server versions, including Windows 11 (versions 26H1, 25H2, 24H2, 23H2), Windows 10 (versions 22H2, Enterprise LTSC 2021, Enterprise LTSC 2019, Enterprise LTSB 2016), and Windows Server (2025, 2022, 2019, 2016, 2012 R2, 2012). Microsoft is working on a solution expected in a future update, but it is unclear if it will be part of the next Patch Tuesday or an out-of-band update. Commercial customers can implement a workaround by contacting Microsoft Support for Business.

AppWizard

June 17, 2026

New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps

Zimperium’s zLabs researchers have analyzed a newly identified Android banking trojan named Rokarolla, which targets 217 distinct banking and cryptocurrency applications. It is distributed through malicious websites that impersonate popular platforms like TikTok and Google Chrome, with one identified distribution point being hxxps://infocontablidades[.]it[.]com/. The malware uses a dropper disguised as Google Play Protect to install a second-stage payload and gain Accessibility Services access, allowing it to simulate user interactions and manipulate on-screen elements. Rokarolla downloads counterfeit HTML login pages for targeted applications and overlays them to capture user credentials, including sensitive card information. It can also deploy a fraudulent PIN entry screen, read and send SMS messages, intercept one-time codes from banks, and block incoming calls. The malware rewrites the clipboard, operates a keylogger and screen content logger, and scrapes WhatsApp contact data. It captures screenshots without alerting users and has a resilient command-and-control infrastructure with multiple fallback domains. No product flaws are exploited, and defenses against it include installing apps only from Google Play and being cautious with Accessibility Services. Zimperium’s Mobile Threat Defense and zDefend products can detect Rokarolla, and a list of indicators of compromise is available on their GitHub repository.

AppWizard

June 16, 2026

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds

Security researchers at Zimperium's zLabs have identified a new Android banking trojan named Rokarolla, which can target 217 banking and cryptocurrency applications and execute 137 remote commands. The malware spreads through deceptive websites that impersonate popular apps, installing a dropper that mimics Google Play Protect to gain Accessibility access. It uses overlay techniques to capture sensitive information by displaying counterfeit login pages and can intercept SMS messages, including one-time codes from banks. Rokarolla also features a keylogger, screen logger, and can rewrite clipboard contents to divert cryptocurrency payments. It employs advanced methods for discreet data capture and has multiple fallback command-and-control domains, making it resilient against takedowns. There is no patch available for this malware, and users are advised to install apps only from Google Play and remain cautious of unexpected Accessibility requests. Zimperium's products can detect this malware, and indicators of compromise are available on their GitHub repository.

AppWizard

May 27, 2026

Minecraft 26.2 Pre-Release 1

Today marks the unveiling of the first pre-release for version 26.2. Bug fixes are included to refine the overall experience. The Peer-to-Peer connection feature has been removed due to quality concerns. Known issues include potential crashes on systems lacking Vulkan support, which can be worked around by editing the options.txt file. Changes include updated models and textures for Small Sulfur Cubes, new sounds for Sulfur Cubes, and updates to the Sulfur Caves biome. The continuous Geyser setup now requires a source Lava Block. The friend list button will remain visible even if disabled. Technical changes include updates to the Data Pack version (106.1) and Resource Pack version (88.0). New server properties for chat and command spam thresholds have been added. A new world preset, minecraft:flatalldimensions, has been introduced. Entity textures for Sulfur Cubes have been added, and various bugs have been fixed in this pre-release. Pre-releases are available for Minecraft: Java Edition, and players are advised to back up their data.