protocols Archives

AppWizard

February 11, 2026

Product showcase: PCAPdroid analyzes Android app network activity

PCAPdroid is a free, open-source application for monitoring network traffic on Android devices. Users can capture traffic by accepting a VPN request and can view active and historical connections, detailing the application, protocol, destination address, and connection status. Traffic can be categorized by application, providing information such as installation date, version, and permissions. PCAPdroid offers various dump modes, allowing users to view traffic in real-time or save it as a PCAP file, and enables sharing captures via a local web page or forwarding live traffic to another machine using UDP or TCP. The app can extract information from captured traffic, including DNS requests, TLS server names, and HTTP requests. It also has the capability to decrypt HTTPS/TLS traffic, which requires a setup process involving a helper add-on and a certificate. Successful decryption allows users to view and export previously encrypted traffic, although not all apps support this feature.

Winsage

February 11, 2026

Microsoft dials up the nagging in Windows, calls it security

Microsoft is introducing new security features for its Windows operating system, including "Windows Baseline Security Mode" and "User Transparency and Consent." The Baseline Security Mode will enforce runtime integrity safeguards by default, allowing only properly signed applications, services, and drivers to operate, with options for users to override these safeguards for legacy applications. The User Transparency and Consent feature will require explicit user consent for applications accessing sensitive resources, moving away from the current User Account Control prompts. Microsoft aims to enhance user security and privacy while providing clear and actionable notifications. CrowdStrike's Chief Technology Innovation Officer expressed support for this initiative, emphasizing the importance of user consent settings for security software effectiveness. Microsoft has a history of security initiatives, including the Secure Future Initiative, and plans to hold applications and AI tools to higher transparency standards. The rollout of these updates will occur in phases, although no specific timeline has been provided.

Tech Optimizer

February 11, 2026

Hackers Used Hugging Face to Distribute Android Banking Trojans

Cybersecurity researchers have identified a malware campaign that exploited Hugging Face's AI infrastructure to distribute Android banking trojans. The attackers used a deceptive app called TrustBastion, which tricked users into installing what appeared to be legitimate security software. Upon installation, the app redirected users to an encrypted endpoint that linked to Hugging Face repositories, allowing the malware to evade traditional security measures. The campaign generated new malware variants every 15 minutes, resulting in over 6,000 commits in about 29 days. It infected thousands of victims globally, particularly in regions with high smartphone banking usage but lower mobile security awareness. The operation is believed to be linked to an established cybercriminal group. Security experts warn that this incident highlights vulnerabilities in trusted platforms and calls for improved security measures, including behavioral analysis systems and verification of application authenticity. The incident has also sparked discussions about the need for enhanced security protocols for AI platforms.

Tech Optimizer

February 10, 2026

Why Should Small Businesses Invest In Antivirus Protection?

53% of UK businesses experience cybercrime attempts at least once a month, and 70% of business owners anticipate a cyber attack in the near future, yet only 35% feel adequately prepared. 43% of cyberattacks are directed at small businesses, with over half potentially closing due to the damage. Antivirus software is a cost-effective solution that can prevent data breaches, reduce the likelihood of ransomware, and protect devices of remote workers.

Winsage

February 10, 2026

Microsoft is keeping Secure Boot alive with Windows updates

Microsoft is enhancing the security of Windows devices by replacing boot-level security certificates that are nearing expiration, with this initiative integrated into regular Windows platform updates. The original Secure Boot certificates from 2011 will expire between June and October 2026, prompting Microsoft to issue new certificates in 2023, which are included in many new Windows devices sold since 2024. Older hardware will require updates to remain compliant. Devices with expired certificates will continue to operate but will enter a "degraded security state," potentially hindering future updates and causing compatibility issues. The new Secure Boot certificates rollout began with the Windows 11 KB5074109 update. Most Windows 11 users will have the new certificates installed automatically, while specialized systems may have different update protocols. Windows 10 users must enroll in Microsoft’s Extended Security Updates to receive the new certificates.

AppWizard

February 1, 2026

‘Anyone mad is a cheater:’ Players are divided as Rust beefs up anti-cheat with more effective—and invasive—upgrades

The presence of a "cheat community" in Rust has led to harassment of developers, prompting Facepunch to implement security measures similar to those in other games, including Secure Boot and Trusted Platform Module (TPM) requirements. Starting in March, server owners will have the option to allow connections only from players with Secure Boot and TPM 2.0 enabled, with plans to potentially make this mandatory. This decision is influenced by the effectiveness of invasive anti-cheat strategies, although it has faced mixed reactions from the community regarding accessibility and system upgrades. Facepunch has also decided against bringing Rust to Linux or Proton due to these evolving anti-cheat protocols.

Winsage

January 30, 2026

Microsoft to disable NTLM by default in future Windows releases

Microsoft will disable the NTLM authentication protocol by default in the next major Windows Server release and associated Windows client versions. NTLM, introduced in 1993, has been vulnerable to various cyberattacks, including NTLM relay and pass-the-hash attacks. The transition plan includes three phases: enhanced auditing tools in Windows 11 24H2 and Windows Server 2025, new features like IAKerb and a Local Key Distribution Center in late 2026, and eventually disabling network NTLM by default in future releases. NTLM will remain in the operating system but will not be used automatically. Microsoft deprecated NTLM authentication in July 2024 and has encouraged developers to transition to Kerberos or Negotiation authentication.

Winsage

January 30, 2026

Microsoft Adds Centralized RDP Shortpath Control via GPO and Intune

Microsoft has enhanced the management of Remote Desktop Protocol (RDP) Shortpath, now available through Group Policy Objects (GPO) and Microsoft Intune, allowing IT teams to implement centralized control over RDP Shortpath behavior across Azure Virtual Desktop (AVD) session hosts and Windows 365 Cloud PCs. RDP Shortpath improves performance and reliability by establishing a direct, UDP-based network connection, reducing latency and enhancing responsiveness for audio and video applications. Prior to this update, managing RDP Shortpath was fragmented, requiring manual adjustments on individual session hosts, which complicated consistent networking behavior. The new centralized configuration allows administrators to enforce Shortpath settings uniformly, reducing administrative overhead and ensuring consistent performance and security controls. Administrators can manage RDP Shortpath settings centrally, control all Shortpath modes, and ensure compatibility with AVD host pool settings. Effective operation of RDP Shortpath requires appropriate network conditions, and policy changes necessitate a restart of session hosts or Cloud PCs.

AppWizard

January 21, 2026

OpenAI enhances safety, rolls out age prediction measures in ChatGPT

OpenAI has introduced "Age Predictions" in ChatGPT for EU users, which assesses account-level factors to estimate a user's age and restrict access to sensitive content for those identified as under 18. The feature uses various indicators, including stated age and usage patterns, to enhance user safety. If a user is mistakenly restricted, they can undergo an age verification process via a service called Persona. OpenAI is also implementing additional parental controls for managing teen accounts, such as setting "quiet hours" and monitoring AI retention of information. Furthermore, OpenAI plans to launch a ChatGPT Go subscription tier in the U.S. with higher usage limits and will introduce advertisements within ChatGPT conversations, ensuring that user conversations are not used for ad targeting.

AppWizard

January 17, 2026

How to complete Modern Prometheus and find four zombie body parts in Quarantine Zone

Players in the Quarantine Zone can undertake the quest "Modern Prometheus," which involves a survivor named Stuart who arrives with a zombified head and requests additional zombie body parts for an experiment. To complete the quest, players must reach day 20, allow Stuart entry into the survivor block, ensure his safety, confiscate body parts from survivor baggage, and engage in conversation with him after collecting four parts. After admitting Stuart, players must protect him from threats while sourcing the necessary zombie body parts, which cannot be obtained from liquidation or the laboratory. Once all four parts are collected, players discuss the experiment with Stuart, who ultimately meets his demise, leading to a small outbreak of zombies in the survivor base. Players must then eliminate the zombies and can collect a reward of 0 and a severed head collectible from Stuart's belongings.