NewApp Digest
search bot

process

Windows AI Recall is pushing data destruction upstream
Winsage
April 30, 2026

Windows AI Recall is pushing data destruction upstream

The introduction of Copilot+ PCs has created new complexities in IT asset disposition (ITAD), as these devices may contain a comprehensive, time-stamped archive of user activity, which was not present on corporate laptops two years ago. Microsoft's Recall feature captures user activity screenshots and stores them securely, but recent research by Alexander Hagenah suggests that the safeguards may be ineffective, as his tool can extract sensitive data without breaking encryption. Microsoft defends the security of Recall, stating that observed access patterns align with intended protections. This situation presents challenges for ITAD operators, as pre-collection now constitutes a data-destruction event, requiring devices to be powered down or purged before leaving the client’s environment. Certificates of sanitization must evolve to address the specific destruction of Recall snapshot stores, and conversations with clients should differentiate between managed and unmanaged fleets regarding Recall settings. The presence of Recall shifts some data-destruction responsibilities upstream to clients, complicating traditional ITAD value propositions.
Resident Evil 9's director reveals there was a 'phantom Chapter 2' that was cut 'in the process of finalising the game's structure'
AppWizard
April 30, 2026

Resident Evil 9’s director reveals there was a ‘phantom Chapter 2’ that was cut ‘in the process of finalising the game’s structure’

Resident Evil Requiem is a modern installment in the Resident Evil franchise that lasts about 10 hours and features engaging zombie encounters and puzzles. Director Akifumi Nakanishi revealed in an interview that a previously unannounced 'Chapter 2' was cut from both Resident Evil 7 and Resident Evil Requiem. He discussed the creative decisions made during the game's development, expressing nostalgia for the potential inclusion of an additional chapter with Leon in Raccoon City. Nakanishi acknowledged the challenges of game development and the responsibility that comes with it, stating that while producers may feel disappointment over cuts, a good final product leads to overall satisfaction.
Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection
AppWizard
April 30, 2026

Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection

A new infostealer malware called LofyStealer is targeting the gaming community, particularly Minecraft players, by disguising itself as a cheat tool named “Slinky.” It employs a two-stage attack to extract sensitive information from eight major web browsers, including Chrome and Firefox, while evading detection by security software. The malware siphons off cookies, saved passwords, payment card information, and session tokens. Researchers at Zenox.ai identified LofyStealer, linking it to the Brazilian cybercrime group LofyGang, which has been active since October 2022. The malware uses social engineering tactics to appear legitimate and operates as a Malware-as-a-Service platform, offering both Free and Premium tiers to buyers. Its technical sophistication is evident in its method of in-memory browser injection, which allows it to bypass security defenses. The stolen data is compressed and sent to a command-and-control server. Users are advised to avoid downloading unofficial game mods and enable multi-factor authentication to reduce the risk of credential theft. Security teams should monitor for specific behavioral indicators related to the malware's operations.
Microsoft's Internal Initiative to Fix Windows 11: Don't Rush Features Out the Door
Winsage
April 30, 2026

Microsoft’s Internal Initiative to Fix Windows 11: Don’t Rush Features Out the Door

Windows K2 is a transformative initiative by Microsoft aimed at rethinking the development of its operating system. It focuses on three guiding principles: performance, craft, and reliability, with an emphasis on user feedback through Insider programs, telemetry analytics, and customer focus groups. The initiative intends to reduce the frequency of updates to enhance system reliability and aims to elevate Windows' performance to be comparable to SteamOS within one to two years. Improvements are planned for File Explorer, navigation, search functionality, and the Windows Update process, which will target a more reliable system requiring restarts only once a month. The WinUI 3 System Compositor is expected to enable the Start menu to launch up to 60% faster. Microsoft has committed to a long-term vision for Windows K2 to guide the evolution of Windows.
CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)
Winsage
April 30, 2026

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Attackers are exploiting CVE-2026-32202, a zero-click vulnerability in Windows Shell, allowing authentication of victims' systems without user interaction. This vulnerability stems from an incomplete patch for CVE-2026-21510 and has been used by the APT28 group with weaponized LNK files to bypass Windows security. Although Microsoft addressed these vulnerabilities in February 2026, the risk remains as opening a folder with a malicious LNK file can still connect victims' machines to the attacker's server, initiating an NTLM authentication handshake that exposes the victim’s Net-NTLMv2 hash. This affects various versions of Windows 10, 11, and Windows Server. Microsoft released a patch for CVE-2026-32202 on April 14, 2026, but did not label it as actively exploited until more than two weeks later, leaving security teams unaware of its urgency. Organizations are advised to apply the patch and consider blocking outbound SMB traffic to mitigate risks.
Windows 11 April Patches Trigger Remote Desktop Bug
Winsage
April 29, 2026

Windows 11 April Patches Trigger Remote Desktop Bug

Microsoft has acknowledged a significant issue with the April updates to Windows 11, particularly affecting the Remote Desktop feature in mixed-scaling multi-monitor environments. Security warning dialogs may become unreadable, complicating the trust prompt process before initiating a connection. Temporary workarounds have been provided while a permanent solution is being developed. The issue arises from a new warning window introduced in April, which is difficult to read or interact with when different display scaling settings are used. Affected Windows 11 packages include KB5083769 and KB5082052. Users are advised to align scaling values across monitors or use keyboard navigation if the mouse fails to interact with the buttons. Microsoft added this bug to its known issues documentation on April 23 and updated it on April 27, indicating ongoing investigation and a cumulative update is anticipated to restore prompt clarity. The April release cycle also faced a separate regression related to BitLocker recovery, adding operational strain on administrators.
Gemini can now generate PDFs, Word, and Excel files so you don't have to
AppWizard
April 29, 2026

Gemini can now generate PDFs, Word, and Excel files so you don’t have to

Google's Gemini now allows users to create and download files directly within chat conversations, including PDFs, Microsoft Word and Excel files, and Google Docs, Sheets, and Slides. Users can generate files in various formats instantly without needing to copy and paste content. Supported formats include Docs, Sheets, Slides, PDF, DOCX, XLSX, CSV, TXT, RTF, and Markdown. While users can export work to Google Slides and download it as a PPT file, direct export to Microsoft PowerPoint is currently unavailable. This feature is rolling out to all Gemini users, though some may experience a gradual implementation.
Search