NewApp Digest
search bot

process

Xbox Mode Begins Rolling Out to Players on Windows 11 PCs Today
Winsage
May 1, 2026

Xbox Mode Begins Rolling Out to Players on Windows 11 PCs Today

The rollout of Xbox mode for Windows 11 PCs begins today in select markets, providing a console-inspired gaming experience for laptops, desktops, and tablets. This mode features a controller-optimized, full-screen interface that allows easy access to games and minimizes distractions. Players in select regions can download Xbox mode today, with plans for broader availability in the coming weeks. Xbox mode enables users to browse and launch games, switch between Xbox mode and the Windows desktop, and access a comprehensive game library, including Xbox Game Pass titles. Feedback from players has influenced the development of Xbox mode, which aims to create a consistent Xbox experience across devices. To access Xbox mode, users must ensure their Windows 11 PC is set to receive the latest updates.
Windows AI Recall is pushing data destruction upstream
Winsage
April 30, 2026

Windows AI Recall is pushing data destruction upstream

The introduction of Copilot+ PCs has created new complexities in IT asset disposition (ITAD), as these devices may contain a comprehensive, time-stamped archive of user activity, which was not present on corporate laptops two years ago. Microsoft's Recall feature captures user activity screenshots and stores them securely, but recent research by Alexander Hagenah suggests that the safeguards may be ineffective, as his tool can extract sensitive data without breaking encryption. Microsoft defends the security of Recall, stating that observed access patterns align with intended protections. This situation presents challenges for ITAD operators, as pre-collection now constitutes a data-destruction event, requiring devices to be powered down or purged before leaving the client’s environment. Certificates of sanitization must evolve to address the specific destruction of Recall snapshot stores, and conversations with clients should differentiate between managed and unmanaged fleets regarding Recall settings. The presence of Recall shifts some data-destruction responsibilities upstream to clients, complicating traditional ITAD value propositions.
Resident Evil 9's director reveals there was a 'phantom Chapter 2' that was cut 'in the process of finalising the game's structure'
AppWizard
April 30, 2026

Resident Evil 9’s director reveals there was a ‘phantom Chapter 2’ that was cut ‘in the process of finalising the game’s structure’

Resident Evil Requiem is a modern installment in the Resident Evil franchise that lasts about 10 hours and features engaging zombie encounters and puzzles. Director Akifumi Nakanishi revealed in an interview that a previously unannounced 'Chapter 2' was cut from both Resident Evil 7 and Resident Evil Requiem. He discussed the creative decisions made during the game's development, expressing nostalgia for the potential inclusion of an additional chapter with Leon in Raccoon City. Nakanishi acknowledged the challenges of game development and the responsibility that comes with it, stating that while producers may feel disappointment over cuts, a good final product leads to overall satisfaction.
Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection
AppWizard
April 30, 2026

Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection

A new infostealer malware called LofyStealer is targeting the gaming community, particularly Minecraft players, by disguising itself as a cheat tool named “Slinky.” It employs a two-stage attack to extract sensitive information from eight major web browsers, including Chrome and Firefox, while evading detection by security software. The malware siphons off cookies, saved passwords, payment card information, and session tokens. Researchers at Zenox.ai identified LofyStealer, linking it to the Brazilian cybercrime group LofyGang, which has been active since October 2022. The malware uses social engineering tactics to appear legitimate and operates as a Malware-as-a-Service platform, offering both Free and Premium tiers to buyers. Its technical sophistication is evident in its method of in-memory browser injection, which allows it to bypass security defenses. The stolen data is compressed and sent to a command-and-control server. Users are advised to avoid downloading unofficial game mods and enable multi-factor authentication to reduce the risk of credential theft. Security teams should monitor for specific behavioral indicators related to the malware's operations.
Microsoft's Internal Initiative to Fix Windows 11: Don't Rush Features Out the Door
Winsage
April 30, 2026

Microsoft’s Internal Initiative to Fix Windows 11: Don’t Rush Features Out the Door

Windows K2 is a transformative initiative by Microsoft aimed at rethinking the development of its operating system. It focuses on three guiding principles: performance, craft, and reliability, with an emphasis on user feedback through Insider programs, telemetry analytics, and customer focus groups. The initiative intends to reduce the frequency of updates to enhance system reliability and aims to elevate Windows' performance to be comparable to SteamOS within one to two years. Improvements are planned for File Explorer, navigation, search functionality, and the Windows Update process, which will target a more reliable system requiring restarts only once a month. The WinUI 3 System Compositor is expected to enable the Start menu to launch up to 60% faster. Microsoft has committed to a long-term vision for Windows K2 to guide the evolution of Windows.
CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)
Winsage
April 30, 2026

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Attackers are exploiting CVE-2026-32202, a zero-click vulnerability in Windows Shell, allowing authentication of victims' systems without user interaction. This vulnerability stems from an incomplete patch for CVE-2026-21510 and has been used by the APT28 group with weaponized LNK files to bypass Windows security. Although Microsoft addressed these vulnerabilities in February 2026, the risk remains as opening a folder with a malicious LNK file can still connect victims' machines to the attacker's server, initiating an NTLM authentication handshake that exposes the victim’s Net-NTLMv2 hash. This affects various versions of Windows 10, 11, and Windows Server. Microsoft released a patch for CVE-2026-32202 on April 14, 2026, but did not label it as actively exploited until more than two weeks later, leaving security teams unaware of its urgency. Organizations are advised to apply the patch and consider blocking outbound SMB traffic to mitigate risks.
Search