report Archives

Winsage

September 7, 2026

Windows 11 wants your trust. Microsoft keeps testing it

Microsoft is facing significant security and reliability issues, particularly related to system startup, BitLocker recovery, and updating Secure Boot certificates. Users have expressed confusion over these complexities, especially regarding Microsoft Defender Antivirus errors. These problems stem from a tumultuous period before the launch of Windows 11, including changes to the TPM requirement and the extension of Windows 10's life. Despite increased security patches, underlying issues remain, leading to user skepticism about the reliability of Windows systems.

AppWizard

September 7, 2026

Xbox Cloud Gaming Caps Hours: 15 for Ultimate [2026]

On September 3, 2026, Microsoft announced that Xbox Game Pass subscribers will see a shift in cloud gaming access. Starting November 2026, unlimited cloud streaming will be replaced by a tiered hour bank system: 15 hours for Ultimate, 10 for Premium, and 5 for Essential subscribers. Once a subscriber exhausts their allotted hours, they must wait for the next billing cycle or purchase additional time. This change is the most significant since the beta launch of Xbox Cloud Gaming in 2019. The announcement was made on Xbox Wire, and the new structure is reflected on Xbox’s product pages. The new tiered system introduces a scarcity model, with every paid tier now having its own cloud gaming quota. Essential subscribers, who previously had no cloud access, will now receive 5 hours per month. The pricing for the Game Pass tiers is as follows: Ultimate at .99 for 15 hours, Premium at .99 for 10 hours, and Essential at .99 for 5 hours. The free ad-supported tier remains unchanged at 5 hours per month. Microsoft's rationale for the change is based on usage data indicating that most subscribers do not heavily utilize cloud streaming, coupled with the rising costs of operating cloud gaming services. The company has stated that additional hours can be purchased once a subscriber's monthly allotment is used up, although pricing details for these add-ons have not yet been disclosed. The new hour caps will take effect in November 2026, following a shorter notice period compared to NVIDIA's GeForce NOW service, which implemented a 100-hour monthly cap earlier in 2026. The response from gaming communities has been largely negative, with concerns about the limits falling short of typical usage patterns and conflicting with the marketing of Game Pass as offering unlimited access. The introduction of hour caps could impact Game Pass's subscriber base, particularly among those who rely on cloud gaming as their primary access point. Microsoft's internal usage data will determine the extent of this impact, as the company aims to control costs without raising subscription prices.

AppWizard

September 6, 2026

Google’s Scam Detection Doesn’t Support Your Android Phone? Try These 5 Apps

Google has introduced AI-powered scam call detection for Pixel phone users, analyzing incoming calls to alert users of potential scams. Not all Android devices support this feature. Various spam call prevention tools are available for Android users, including: - Truecaller: A leading app with a user-generated database for identifying spam calls, offering Caller ID in its free version. It may produce false positives. - Malwarebytes Scam Guard: Analyzes content like messages and links for scams, requiring manual submission for analysis and part of a premium package. - YouMail: Blocks known scam numbers for free, includes Caller ID, and uses AI for text message fraud detection. Some features require a paid plan. - Hiya Spam Blocker: Identifies suspicious calls with Caller ID and allows users to report dubious numbers. Paid plans offer automatic blocking and Call Screener features. - Should I Answer?: A free app that checks unknown numbers against a community-maintained database, providing reputation assessments based on user reviews. The methodology for compiling these apps focused on compatibility with various Android devices and essential features like Caller ID and automatic blocking, while also considering additional functionalities and accessibility.

Winsage

September 6, 2026

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has identified four previously undocumented programs associated with REVSTEALER, a Windows information stealer that persists on infected machines after self-deletion. The programs are ProManager, WinUpdate, SoftManager, and LockAppHost, each with distinct functionalities. ProManager steals wallet files and logs passwords, WinUpdate monitors the clipboard for cryptocurrency addresses, SoftManager acts as a reverse proxy, and LockAppHost executes a cryptocurrency miner after disabling Windows Update and Microsoft Defender. REVSTEALER has been marketed as a commercial infostealer since February 2026, exfiltrating sensitive data such as browser passwords, cookies, and cryptocurrency wallet information. It deletes itself after reporting its activities but leaves the four programs installed for persistence. These programs share build tradecraft with REVSTEALER, including the use of identical packers and runtime function resolutions. REVSTEALER primarily spreads through game-cheat lures and disguises itself as pirated software. It employs evasion techniques to resist analysis, including checking for sandbox environments and using indirect system calls. Users are advised to avoid unofficial software and to follow specific steps if infected, such as re-enabling Windows Update services and changing passwords. Indicators of compromise include SHA-256 hashes for REVSTEALER and its associated programs, as well as domains linked to their command and control servers.

Winsage

September 5, 2026

Microsoft engineer says “typing code is absolutely over,” and Windows 11 is already being built that way

David Fowler, an engineer with 18 years at Microsoft, claims that traditional software development methods are becoming obsolete, stating, “Typing code is absolutely over.” He has co-created technologies like SignalR and NuGet and currently leads Aspire, a toolchain for building distributed applications that emphasizes AI-driven development. CEO Satya Nadella noted that AI contributes to 20-30% of the code produced at Microsoft. While developers will still interact with code, manual typing is becoming less central, with a shift towards strategic software engineering tasks. Microsoft Research found that AI-generated suggestions in Visual Studio IntelliCode are often overlooked by developers. GitHub Copilot has evolved to autonomously perform tasks, including building Windows development environments as of February 2026. Linus Torvalds supports AI in Linux development, viewing it as a useful tool. A report from Veracode indicated that about 44% of AI-generated code contains known vulnerabilities, highlighting the need for oversight. Microsoft’s MDASH system uses AI for enhanced vulnerability assessments. Microsoft emphasizes native Windows development through the open-source WinUI 3 framework and provides resources for beginners using Copilot. Project Zenith aims to optimize Windows 11 for developers, supporting local AI-powered development. Fowler's statement signifies a transformation in developers' roles, focusing on strategic aspects rather than typing code, while the need for skilled software engineers remains essential.

AppWizard

September 5, 2026

NYC Council to grill Mamdani admin over use of influencers, encrypted messaging app

The City Council will examine Mayor Mamdani's administration's use of a secretive encrypted messaging channel for media relations, which connects nearly 200 social media influencers. This discussion is scheduled for a hearing on September 22. Queens Councilman Phil Wong plans to introduce legislation requiring influencers to label posts for city agency campaigns with a disclaimer stating “Paid for by NYC.” A report revealed that city officials communicated with influencers through a Signal app group titled “NYC Creators Announcements,” sharing updates and multimedia content. Some influencers received payment for their involvement, while others supported the mayor's agenda for personal growth. Concerns have been raised about the Signal chat potentially violating record-keeping regulations due to auto-deletion of messages. The identities of the influencers and details of their contracts remain undisclosed. Wong's proposed bill aims to reveal any undisclosed payments to influencers and raise questions about the integrity of the administration's use of external promoters. Critics argue that the administration's secrecy calls for greater transparency in public relations expenditures.

AppWizard

September 5, 2026

MapQuest expands to Android Auto amid rise in popularity

MapQuest is testing experimental support for Android Auto, announced on September 4, 2026, alongside a recent update that introduced a crowdsourced incident reporting tool and adjusted the default unit of measurement to metric. Users can report incidents like collisions and road closures. However, the Android Auto support is in beta, with early adopters reporting issues such as a zoomed-out map perspective and latency problems. MapQuest aims to solidify its position in the navigation app market and is addressing user concerns, with hopes for future updates to include public transit features.

Winsage

September 4, 2026

Microsoft says some users can’t open the Teams desktop client

Microsoft is addressing an issue (TM1466820) causing delays or preventing some users from accessing the Microsoft Teams desktop client on Windows systems, acknowledged on Thursday at 16:45 EDT. Affected users may experience loading failures or delays of up to two minutes and are advised to use the web or mobile versions of Teams as a temporary workaround. Microsoft is analyzing service logs and telemetry data to identify the root cause and has contacted some affected users for more information. Additionally, there is a separate issue (TM1466659) affecting Mac users, preventing them from joining Teams calls and meetings, confirmed on Sunday at 08:32 EDT. Microsoft is reassessing the cause of this disruption. Earlier this year, Microsoft resolved an issue blocking some Teams Free users from chats and calls. The company also confirmed a bug causing crashes and launch failures for Teams and New Outlook users after recent Windows security updates. Furthermore, there is an ongoing Exchange Online issue affecting multiple mailboxes, resulting in "Server busy" errors and delays in email communications with external domains.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

AppWizard

September 4, 2026

WhatsApp rolls out emergency fix for locked Android photo access bug

WhatsApp is rolling out a fix for a privacy vulnerability affecting Android users that could allow individuals with physical access to a locked device to view the owner's photos during a video call. The issue was identified by security researcher Jose Rodriguez, who demonstrated that an incoming WhatsApp video call could provide access from the lock-screen to the device's photo gallery without unlocking the phone. WhatsApp confirmed the implementation of a fix and noted that the issue is limited to situations where someone has physical access to the device. Rodriguez reported the vulnerability to both Meta and Google, receiving limited responses. Users are advised to update WhatsApp and adjust app permissions to enhance privacy.