program Archives

Winsage

September 9, 2026

Critical Windows BitLocker Flaw Sparks Urgent Patch

On September 8, 2026, Microsoft disclosed a security vulnerability identified as CVE-2026-69449, related to a heap-based buffer overflow in the Windows BitLocker component, allowing authorized attackers to execute code on compromised machines. The vulnerability is classified as CWE-122, and is assessed as “Exploitation Less Likely.” It affects Windows 10, Windows 11, and Windows Server versions from 2012 to 2025. The fixes are included in cumulative updates KB5124008, KB5124012, KB5122878, and KB5122871. No public disclosure or observed exploitation occurred before the patch's release. The flaw allows for remote code execution through in-network attacks, primarily posing a risk to insiders. Affected systems include various versions of Windows 10, Windows 11, and Windows Server, applicable to both x64 and ARM64 architectures. Administrators should verify installed build numbers to ensure updates have been applied. The advisory does not specify which BitLocker code path is affected or the nature of the input that reaches the vulnerable buffer.

Winsage

September 9, 2026

Announcing new builds for 8 September 2026

New Insider Preview builds for Windows 11 are being released for the Beta and Experimental channels, featuring enhancements aimed at improving user experience. 1. Cross-device resume improvements: Users can now continue browsing on their PC from where they left off on their phone, with options to open the webpage in the PC's default browser or install the phone's browser if not already present. 2. Narrator: The Narrator feature has been upgraded to include math reading and navigation support, enhancing accessibility for users who are blind or have low vision, especially in STEM fields. 3. Magnifier: The Magnifier tool now allows each display to maintain its own zoom level, enabling users to set different zoom percentages for multiple screens, improving comfort and clarity when working across different resolutions.

AppWizard

September 8, 2026

Ohio Mobile ID Arrives in Google Wallet, Opening the Program to Android

Ohio residents with Android devices can now integrate their driver's license or state ID into Google Wallet as part of the state's Mobile ID program. This digital credential is a companion to the physical card, and users are encouraged to carry their plastic IDs. To add the credential, users can navigate through the Google Wallet app. The digital ID is accepted for age and identity verification at various businesses, state buildings, TSA checkpoints, and casinos in Ohio. It utilizes specialized readers for presentation and allows users to review shared data. The credentials are encrypted and can be remotely erased if the phone is lost or stolen. Participation in the program is voluntary and free, adhering to privacy and security standards. Governor Mike DeWine highlighted the convenience of this innovation, and vendors are expanding support for mobile driver’s licenses in multiple states.

Winsage

September 8, 2026

4 ways to get Windows 11’s newest features sooner

Several pathways exist to expedite the official rollout of Windows updates. Users can navigate to Windows Update settings to enable the latest updates, install optional preview updates manually, join the Windows Insider Program for pre-release versions, or use ViveTool to unlock hidden features. 1. Enable the latest updates: A toggle in Windows Update settings allows users to receive new features and updates as soon as they are available. 2. Install optional updates: Preview updates are released towards the end of each month and can be installed manually through Windows Update. 3. Use Windows Insider: The Insider Program offers pre-release versions of Windows, with the Beta Channel for innovation and the Release Preview Channel for stability. 4. Enable hidden features with ViveTool: This tool unlocks features already present in Windows but not activated, requiring technical expertise. Activating the toggle in Windows Update prioritizes the device for new features while ensuring essential security updates continue.

Winsage

September 6, 2026

Create Custom Windows 11 Notifications to Remind Yourself of Anything

Windows 11 includes a built-in Task Scheduler that allows users to create custom notifications for various purposes, such as reminders or alerts. Users can access Task Scheduler by searching for it in the taskbar or Start menu, and they can create a basic task by navigating to the Action menu. Notifications can be scheduled with different frequencies, including daily, weekly, monthly, or based on specific events. Users can input notification text using the "msg" command in the Program/script field. Additionally, the Microsoft Clock app allows users to set custom alarms, while the Microsoft To Do app enables task creation with attached reminders. Third-party apps like TickTick also offer similar notification functionalities.

Winsage

September 6, 2026

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has identified four previously undocumented programs associated with REVSTEALER, a Windows information stealer that persists on infected machines after self-deletion. The programs are ProManager, WinUpdate, SoftManager, and LockAppHost, each with distinct functionalities. ProManager steals wallet files and logs passwords, WinUpdate monitors the clipboard for cryptocurrency addresses, SoftManager acts as a reverse proxy, and LockAppHost executes a cryptocurrency miner after disabling Windows Update and Microsoft Defender. REVSTEALER has been marketed as a commercial infostealer since February 2026, exfiltrating sensitive data such as browser passwords, cookies, and cryptocurrency wallet information. It deletes itself after reporting its activities but leaves the four programs installed for persistence. These programs share build tradecraft with REVSTEALER, including the use of identical packers and runtime function resolutions. REVSTEALER primarily spreads through game-cheat lures and disguises itself as pirated software. It employs evasion techniques to resist analysis, including checking for sandbox environments and using indirect system calls. Users are advised to avoid unofficial software and to follow specific steps if infected, such as re-enabling Windows Update services and changing passwords. Indicators of compromise include SHA-256 hashes for REVSTEALER and its associated programs, as well as domains linked to their command and control servers.

AppWizard

September 6, 2026

I’ve Been Gaming On Linux For Five Years – Is It Ready To Replace Windows?

Steam Deck debuted in early 2022 with SteamOS, a Linux-based operating system that uses the Wine-based Proton compatibility layer to run Windows games. This development has significantly advanced Linux gaming, with approximately 95% of games functioning well on Linux. Steam's Verified program lists nearly 9,000 Verified games, and around 30,000 playable titles, with only about 1% of popular games failing to run entirely. Anti-cheat systems remain a major limitation, preventing popular titles like "Fortnite" and "League of Legends" from being playable on Linux. Game streaming services like NVIDIA GeForce NOW offer alternatives for playing anti-cheat games on Linux. Linux distributions provide better controller support compared to Windows, particularly for handhelds and living room PCs. Accessing non-Steam games can be cumbersome, though tools like Heroic Launcher help. Compatibility issues with proprietary standards, such as HDMI 2.1 support, persist in Linux gaming.

Winsage

September 4, 2026

Enjoy the Windows 10 Update Experience at London’s O2

Windows 10 currently holds approximately 30 percent of the market share, while Windows 11 has captured just under 70 percent. Despite reaching the end of its support lifecycle last year, Windows 10 continues to receive security updates through Microsoft's Extended Security Updates (ESU) program, which is available for consumers until 2027 and offers commercial users up to three additional years for a fee.

AppWizard

September 4, 2026

WhatsApp rolls out emergency fix for locked Android photo access bug

WhatsApp is rolling out a fix for a privacy vulnerability affecting Android users that could allow individuals with physical access to a locked device to view the owner's photos during a video call. The issue was identified by security researcher Jose Rodriguez, who demonstrated that an incoming WhatsApp video call could provide access from the lock-screen to the device's photo gallery without unlocking the phone. WhatsApp confirmed the implementation of a fix and noted that the issue is limited to situations where someone has physical access to the device. Rodriguez reported the vulnerability to both Meta and Google, receiving limited responses. Users are advised to update WhatsApp and adjust app permissions to enhance privacy.

Winsage

September 2, 2026

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

An ongoing malware campaign is targeting Windows devices through counterfeit download pages for well-known software brands like Microsoft Edge, Kaspersky, and Razer. The campaign affects various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. It utilizes high-fidelity fraudulent websites that closely mimic legitimate vendors, with observed lure domains such as app-microsoft-edge[.]com[.]cn and kaspersky-lab[.]hl[.]cn. Attackers employ evasion tactics like server-side payload regeneration and create multiple copies of the same archive in quick succession. Victims are lured into downloading ZIP files that contain a bundled wrapper installer, which activates a stage-one executable in randomized directories. The malware often masquerades as legitimate software, with some payloads impersonating known applications. Persistence is achieved through scheduled tasks with unusual names, and the malware employs various evasion techniques, including deleting shadow copies and altering file permissions. Microsoft Defender has identified activity across multiple stages of the attack, including delivery, execution, and command-and-control communications. To mitigate risks, organizations are advised to block downloads from unofficial sources, enforce Tamper Protection, and implement Attack Surface Reduction rules. Indicators of compromise (IOCs) include specific lure domains and URLs associated with the campaign.