references Archives

AppWizard

July 2, 2026

Lullabies Made of Static is a quieter, slower, but still quite welcome addition to PC gaming’s brutalist walking sim canon

Lullabies Made of Static, released today, features a disconcerting atmosphere reminiscent of the walking simulator Fugue in Void. Players navigate a desolate city with towering walls and peculiar architecture, amplifying feelings of dread and isolation. The objective is to locate a hidden cassette tape, with the game prioritizing atmosphere over traditional quests. The soundscape is minimal, dominated by wind and footsteps, enhancing the labyrinthine exploration. The city has buildings scattered across a monotonous brown plain, and the sparse dialogue varies in quality. The demo is available on Steam.

Winsage

June 30, 2026

Microsoft reveals why Windows 11 keeps saying a file is in use after you close the app, plus the fix

The 'file in use' error in Windows indicates that a file is currently being accessed by a program, preventing deletion or renaming to avoid data corruption. This error can persist even after closing an application due to reasons such as antivirus software scanning the file, network references from other devices, or files loaded as Dynamic Link Libraries (DLLs) that remain in memory. To identify the process causing the error, Mark Russinovich developed the command-line tool Handle, which shows all open file handles, and Process Explorer, which provides a graphical interface to find and manage these handles. Microsoft is integrating Sysinternals tools into PowerToys for easier access, including the File Locksmith tool that allows users to unlock files directly. A recommended workaround for the error is to rename the file instead of deleting it, as Windows permits renaming even when a file is open.

AppWizard

June 24, 2026

Sorry, Xbox fans: GTA 6 “will play best on PS5,” Sony declares, but with no PC version in sight, I can’t say I’m surprised

Sony claims that Grand Theft Auto 6 will provide its best experience on the PlayStation 5, with pre-orders starting at midnight in various time zones. Rockstar Games has released information about the game, including pricing and details about the GTA 6 Ultimate Edition, noting that physical copies will only contain a code and that GTA Online will not be available at launch. Mary Yee, Senior Vice President of Marketing at SIE, stated that "Grand Theft Auto 6 plays best on PS5" and highlighted the PS5's advanced hardware capabilities, including the DualSense controller and 3D audio technology. European retailers have suggested that the game may feature performance and quality modes, although skepticism exists regarding these claims.

Winsage

June 24, 2026

Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection

A malware campaign targets Windows systems through a malicious npm package named postcss-minify-selector-parser, which mimics the legitimate postcss-selector-parser. This counterfeit package installs a Remote Access Trojan (RAT) on developer machines, beginning with a multi-stage attack triggered by the installation of the package. The RAT can steal credentials, execute shell commands, and communicate with a remote attacker. Security researchers at JFrog identified this threat and reported it on June 22, 2026, noting that two additional related packages, postcss-minify-selector and aes-decode-runner-pro, are linked to the same publisher and remain live on the npm registry. The RAT employs encrypted HTTP communication with a command-and-control (C2) server and ensures persistence by creating a registry key under the Windows Run key. It has capabilities for remote shell execution, file uploads and downloads, and can steal saved login data from Google Chrome using Windows decryption APIs. The malware is designed for organized batch exfiltration of stolen data. Indicators of compromise include specific IP addresses, domains, file paths, and SHA-256 hashes associated with the malware components. JFrog advises users to remove the malicious packages, inspect their dependency trees, and treat any stored credentials as compromised.

Tech Optimizer

June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.

Winsage

June 21, 2026

Microsoft confirms Windows 11 26H2 for fall 2026 release, reveals supported PCs and other details

Microsoft has confirmed the upcoming Windows 11 26H2 feature update, set to roll out in fall 2026, likely in October. This update will not be a major overhaul and will utilize an enablement package (eKB) for installation, similar to the previous Windows 11 25H2 version. The last major update was the 24H2 version, released on October 1, 2024, while 25H2 launched in 2025 and reset the OS life cycle, extending support by an additional year. Support for Windows 11 24H2 ends on October 13, 2026, and for 25H2 until October 12, 2027. Windows 11 26H2 will be supported until October 2028 for Home, Pro, Pro EDU, and Pro for Workstations editions, and until October 2029 for Enterprise, Education, or IoT Enterprise editions. Devices running Windows 11 24H2 or 25H2 will transition to 26H2 without new hardware requirements, maintaining specifications of 4GB RAM, 64GB storage, and a 1GHz or faster 64-bit dual-core processor. Windows 11 26H1, another update, requires new silicon but does not introduce exclusive features. Major changes will be delivered through monthly cumulative updates rather than annual feature updates.

Winsage

June 19, 2026

Windows Platform Security and the Race to Secure AI Agents

Microsoft has introduced the Microsoft Execution Containers (MXC) SDK to establish Windows as a reliable operating system for autonomous agents, focusing on containment, identity, and manageability. The MXC framework serves as a policy-driven execution layer for agents on Windows and Windows Subsystem for Linux (WSL), allowing developers to set access permissions using JSON or TypeScript. It employs process and session isolation for agent containment and identity. Future enhancements will include micro-VM support for high-risk tasks and integration with Windows 365 for cloud PC workloads. IT teams can manage MXC policies through Entra ID and Intune, while Defender and Purview provide protection and observability. The MXC framework is built on Microsoft's security initiatives, including Secure Boot and passwordless sign-in, allowing agents to inherit a secure foundation. However, early commentary expresses caution regarding MXC's perception as a comprehensive security solution, noting issues with overly permissive policies and the lack of outbound network filtering. Other platforms, such as Linux, are also enhancing security for agents with kernel-level isolation and secure environments like NVIDIA's OpenShell runtime. Various projects are focusing on agent sandboxes within Kubernetes, employing technologies like gVisor and Kata Containers for isolation. Overall, no singular dominant platform security model for AI agents has emerged, with Windows' MXC still considered nascent compared to existing solutions in Linux and Kubernetes ecosystems.

AppWizard

June 16, 2026

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla targets 217 banking and cryptocurrency applications and features 137 commands for malicious activities. It is distributed via deceptive websites posing as legitimate application sources and impersonates Google Play Protect to lure users into installing infected apps. Once installed, it seeks Accessibility service permissions and access to notifications, SMS, and calls. Rokarolla communicates with a command-and-control server, sending device profiles to generate unique identifiers for victims. Its primary goal is to steal financial information by using deceptive login overlays to capture sensitive data and maintain control over the device. The malware employs evasion tactics such as disabling Google Play Protect, hiding its icon, silencing notifications, and keeping the screen awake. It can steal SMS messages, extract contacts, capture keystrokes, record screen content, manipulate clipboard contents, block calls, and take screenshots. Zimperium confirms that Rokarolla is not found on Google Play, and users are advised to avoid downloading APK files from untrusted sources and to be cautious with Accessibility permissions.

AppWizard

June 15, 2026

Steam Week in Review: More than 300 games released on Steam last week, and 120 of them had AI disclosures

Android Who Dreams of Stars is a visual novel developed by JinCycle, featuring an autonomous android named Eve Nova in a futuristic Tokyo where AI has eliminated war and hunger. The game relies heavily on AI-generated content for artwork, sound, narrative, and localization. My Summer Love Memories also uses generative AI for its videos, images, music, and dialogue. Kryonull has gained attention for its AI-generated voices, while some users on Steam question the legitimacy of its zero price tag. Typical NPC, developed by SmogGames, launched at a zero price with all AI-generated images, followed by After the Hero, which used AI-generated images but human-crafted text. KalendulaGames has released titles priced at zero, with extensive AI disclosures. Underwater claims to use AI-generated images only as art references. Steam emphasizes transparency in AI disclosures, with developers clarifying their use of AI in various ways. Many of the 120 games using generative AI focus on music and assets rather than translation. The Steam Deck has recently seen a resurgence in stock, with a price point higher than the average game. A humorous Steam review noted the unique experience of rummaging through trash for rewards in the game Where the F**k is my Bitcoin.

AppWizard

June 14, 2026

FromSoftware boss Hidetaka Miyazaki references ‘yet to be announced’ games while commenting on controversy at parent company Kadokawa

Hidetaka Miyazaki, head of FromSoftware, indicated that several unannounced projects are in development. He expressed general satisfaction with the development environment provided by Kadokawa, FromSoftware's parent company, highlighting the studio's creative freedom. Meanwhile, Kadokawa is experiencing changes, as the hedge fund Oasis Management has acquired a majority stake and is advocating for significant changes, including the removal of the current CEO. Despite corporate turbulence, anticipation for FromSoftware's future projects remains high.