remote access Archives

Winsage

October 7, 2026

Your Windows PC can now reach other PCs through Windows App

Microsoft has launched a significant enhancement to its Windows App, now allowing general availability for remote PC connections on Windows. Users can access both physical and virtual Windows PCs, integrating resources from Windows 365, Azure Virtual Desktop, and Microsoft Dev Box into a single interface. The Windows App replaces the previous Remote Desktop app from the Microsoft Store and the standalone Remote Desktop client, while the traditional Remote Desktop Connection tool (mstsc.exe) remains supported. Users can connect to remote PCs by entering the computer's name or IP address, with options for display preferences and local resource redirection. All redirections are turned off by default for security, and connections can be saved and pinned to a Favorites list. Marvin Quinzon, Senior Program Manager at Microsoft, highlighted the importance of this update for users and organizations needing flexibility in cloud and traditional remote access scenarios.

Winsage

October 7, 2026

I ignored the Windows app until Microsoft closed this major feature gap

The latest update to the Windows App allows users to connect to a Windows PC remotely, expanding its capabilities beyond previous support for Windows 365, Azure Virtual Desktop, and Microsoft Dev Box. To use this feature, users need to download the app, select "Add a Remote PC," input the remote PC's name or IP address, and then establish the connection. The classic Remote Desktop Connection tool (mstsc.exe) remains available despite the retirement of the Remote Desktop app from the Microsoft Store.

Winsage

September 25, 2026

Confused? Your Windows 10 PC still works, but the clock is running out

A customer visited a service center with a functional Dell laptop running Windows 10, which lost mainstream support from Microsoft in October 2022. While the laptop still operates, Microsoft no longer patches security vulnerabilities for Windows 10 unless specific actions are taken. Users have three options: 1. Upgrade to Windows 11 for free if the PC meets requirements, which can be checked with the "PC Health Check" app. 2. Purchase a new or refurbished PC, especially if the current device is six or seven years old. 3. Enroll in extended security updates through methods such as syncing with a Microsoft account, redeeming rewards points, or paying a fee, valid until October 2027. There has been an increase in scams related to Windows 10, with fraudulent popups and calls misleading users about their operating system's status. Microsoft will not contact users unexpectedly regarding expired systems. Users should check their PC's eligibility for Windows 11 using the "PC Health Check" app and seek professional help if needed.

Winsage

September 24, 2026

One $32.97 purchase gets you Windows 11 Pro and the full Office suite for life

The bundle includes a Microsoft Office Pro license for permanent installation of applications like Word, Excel, PowerPoint, Outlook, Teams, OneNote, Publisher, and Access on a single PC, with Publisher support ending after October 2026. It also features Windows 11 Pro, which includes tools like BitLocker for data security, Remote Desktop for remote access, Hyper-V for running virtual machines, Snap Layouts for multitasking, and the Copilot feature for managing quick actions from the taskbar.

Winsage

September 24, 2026

Microsoft: September Windows updates break Always On VPN connections

Microsoft has informed IT administrators about potential connection challenges with the Always On VPN after the September 2026 Windows 11 security updates. Users may face difficulties connecting to their organization's network, particularly if the VPN is set to automatically attempt an alternative connection method upon failure. Symptoms include connections remaining in a 'Connecting' state or displaying the error message: 'The specified port is already in use.' Affected versions include Windows 11, version 26H1 (KB5124012), version 25H2 (KB5124008), and version 24H2 (KB5124008). A temporary workaround involves adjusting the Always On VPN profile from automatic protocol selection to a single protocol (SSTP or IKEv2). Microsoft is also addressing various other issues related to Hyper-V, Remote Desktop Services, USB audio, and the File History backup feature.

Winsage

September 23, 2026

DOC IN A BOX: Confused? Your Windows 10 PC still works, but the clock is running out

A customer brought in a functional Dell laptop running Windows 10, which lost mainstream support from Microsoft in October 2025. Although the laptop still operates, Microsoft has stopped patching security vulnerabilities unless users take specific actions. Users have three options: upgrade to Windows 11 if their PC meets requirements, purchase a new or refurbished PC, or enroll in extended security updates available until October 2027. There is also a warning about potential scams related to Windows 10's support status. Users can check their PC's eligibility for Windows 11 using the "PC Health Check" app from Microsoft.

AppWizard

September 23, 2026

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

A newly identified strain of Android malware, RatHat, utilizes generative AI to manipulate infected devices in real time. It is linked to threat actors believed to be operating out of China. RatHat serializes the device’s live Accessibility tree into XML format and communicates with a generative AI assistant to return screen coordinates, identify text, and issue navigation commands. The malware employs WebView-based HTML overlays to capture login credentials from banking and cryptocurrency applications and can infiltrate payment apps like WeChat and Alipay to extract PINs. It also features an SMS receiver and notification listener to intercept OTPs and 2FA codes. RatHat is disseminated through smishing, malvertising campaigns, and misleading third-party forums. It employs anti-analysis techniques such as container tampering, manifest bombing, DEX bytecode poisoning, string encryption, and anti-debugging. Once installed, it gains Accessibility access, activates Developer Options, and enables Wireless Debugging, allowing it to connect to the device's local ADB service and launch control agents with shell-level privileges. The malware captures raw touch coordinates to reconstruct PINs and unlock patterns, bypassing screenshot protections. It also includes persistence mechanisms that prevent uninstallation by presenting a fake Google Play failure overlay and automatically reinstalling itself if removed.

AppWizard

September 17, 2026

New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data

Security researchers at Zimperium have identified a new strain of Android malware called RatHat, which is linked to threat actors from China and is designed to steal sensitive credentials and banking information. RatHat infiltrates devices through phishing sites, malvertising, and SMS phishing (smishing), tricking users into downloading malicious Android package kits (APKs). The malware uses a dropper to activate its payload, which is hidden in encrypted assets, and employs techniques to bypass Android's security measures. RatHat consists of three main components: a malicious Android application, a Go agent (liblocal-service.so), and an FRP client (libmedia_codec.so). The app collects sensitive information such as banking credentials, notifications, 2FA codes, OTP keys, and screen inputs. It features a generative AI user interface-automation engine that communicates in Mandarin and can perform various tasks like determining screen coordinates and issuing navigation commands. The Go agent acts as a command-and-control executor, executing commands to bypass app-level security and manage system-level tasks. The FRP client maintains a secure reverse tunnel to the attacker's server, allowing ongoing remote access to the device. The architecture of RatHat demonstrates the inadequacy of traditional mobile security measures against such advanced threats.

Tech Optimizer

September 16, 2026

AI helps scammers build convincing antivirus renewal pages

Antivirus renewal scams often begin with messages claiming automatic subscription renewals, leading victims to counterfeit pages designed to collect personal information. These scams impersonate well-known brands and do not indicate that the sender has accessed the recipient's device. Responding to such messages can provide scammers with valuable data, including names and phone numbers, which can be sold or used for further scams. A specific scam site impersonating Avast targeted users in Belgium, falsely claiming a subscription renewal for €129.99. The site appeared polished and requested basic contact information without asking for sensitive data. It contained notes suggesting AI involvement in its creation, indicating it was a half-finished project. To identify antivirus renewal scams, individuals should verify any claimed charges directly with their bank, check subscriptions through official channels, be cautious of cancellation forms requesting phone numbers, treat follow-up calls as potential threats, and avoid installing remote access software. If engagement with a scam occurs, disconnect from the internet, remove any installed software, and change passwords. Tools like Malwarebytes Browser Guard can help block malicious sites, and Scam Guard can analyze suspicious communications.

Winsage

September 14, 2026

Microsoft patches Windows and Excel – breaks audio, remote access, and paste

Microsoft's recent security updates have caused disruptions in several areas: 1. Remote Desktop Services (RDS): Users on Windows 11 26H1 and Windows Server 2012 are experiencing connectivity issues, including failed connections, freezing servers, and unresponsive tools like Microsoft Management Console (MMC). A temporary solution involves restarting the virtual machine, and Microsoft is working on a fix. 2. USB Audio Devices: Problems have been reported with USB Audio Class 1.0 devices on Windows 11 26H1, 25H2, and 24H2, leading to audio issues. A workaround includes switching to two-channel mode, and Microsoft is addressing the situation. 3. Excel Functionality: A fix for vulnerabilities in Excel has disrupted the paste operation across versions 2016, 2019, 2021, and 2024, leaving users unable to paste content correctly. Some users have resolved the issue by uninstalling and reinstalling Office or using commands to remove the security update, though this also removes the associated security fixes.