reporting Archives

Winsage

August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.

Winsage

August 12, 2026

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

A security researcher named Nightmare Eclipse has discovered a vulnerability in Windows, called ShieldBreak, which allows hackers to gain system-wide access to users' devices and sensitive data by exploiting a flaw in Windows Defender. The vulnerability affects Windows 10, Windows 11 (including version 25H2), and Windows Server 2025. A proof-of-concept exploit has been provided, requiring users to run a Windows application to trigger the vulnerability. Security researcher Will Dormann confirmed that Windows Defender must be enabled for the exploit to work. Microsoft has not yet released a patch for ShieldBreak, which is classified as a zero-day vulnerability. This discovery follows previous vulnerabilities disclosed by Nightmare Eclipse, including RoguePlanet, for which Microsoft issued an inadequate patch. The situation has heightened tensions between the researcher and Microsoft regarding the handling of bug reports, especially after Microsoft threatened legal action against researchers disclosing zero-days outside established protocols. The disclosure of ShieldBreak occurred shortly after Microsoft's monthly security patch releases, which have been increasing in number.

BetaBeacon

August 12, 2026

Dave the Diver gets an Android and iOS release date (and a new Heartopia crossover)

Dave the Diver, a popular game character, is set to be released on Android and iOS devices on September 17. Two DLC packs will be available at launch, with additional content to enhance the gaming experience. Gyro controls for tea making and fast travel in the Sea People's Village will be included in the mobile version. Dave will also make a special appearance in a crossover event with the game Heartopia.

AppWizard

August 12, 2026

Marvel Tōkon PC Patch Traces Stuttering to Audio Device Checks Inside Game Loop

Arc System Works identified two critical audio-system bugs that caused frame rates to drop below 60 FPS on high-end PCs for Marvel Tōkon: Fighting Souls, which launched on August 6. A patch of approximately 10 GB was released on August 10, improving the game's Steam approval rating from around 39% to approximately 46% by August 11. The PC version faced severe stuttering and input lag, leading to negative reviews, while the PS5 version received acclaim. The patch addressed three main issues: a CPU-heavy startup routine, an unnecessary audio-processing task during matches, and a polling loop for audio input devices. Players were advised to accept a shader warm-up prompt on first launch to ensure optimal performance. Despite the improvements, issues like the PSN account requirement and Linux compatibility remain unresolved.

Winsage

August 11, 2026

Microsoft PowerToys will soon take full advantage of the same AI that powers Copilot+ PCs

Microsoft PowerToys has introduced on-device support for Phi Silica, a small language model, in its latest preview version, enhancing the Advanced Paste feature for clipboard management. Advanced Paste can format clipboard content in various formats, extract text from images using OCR, and transcode audio and video files. It now supports multiple AI models, including local options like Foundry Local and Ollama. The latest version, PowerToys v0.101.2211.0, includes improvements such as enhanced AI customization for Advanced Paste, better dialog handling in the Command Palette, and improved window management features. Mouse Jump has transitioned to the newer WinUI app architecture, and new settings have been added for update channel selection and bug reporting.

AppWizard

August 11, 2026

Even the AI assistant inside Russia’s state-backed Max messenger tells users not to trust the app

Alisa, the AI assistant in the Max messenger, has recommended users consider alternative messaging platforms such as Telegram, Signal, or WhatsApp. She highlighted several security vulnerabilities in Max, including the absence of end-to-end encryption and the direction of user data to VK-owned servers. The data collected by Max includes IP addresses, activity timestamps, contact lists, device and browser types, internet service provider information, and various metadata. Alisa suggests that users keep Max on a separate device, referred to as a “maxphone,” to protect sensitive information. If used on personal devices, she recommends using the browser version and restricting the app's access to location services, contacts, microphone, and camera to enhance privacy and security.

AppWizard

August 11, 2026

EXCLUSIVE: Messaging apps alleged coup conspirators used for communication

The choice of communication methods, such as WhatsApp and Zangi, influenced the outcome of a clandestine operation related to an alleged coup against President Bola Tinubu's government. Retired navy captain Erasmus Victor, facing treason charges, mentioned being recruited to find financial backers for the coup by Colonel Mohammed Ma’aji, who introduced him to Zangi for its security features. Zangi claims it does not store communication histories and uses end-to-end encryption, but investigators may still access data on users' devices. The investigation includes evidence from devices rather than relying solely on messaging companies. Mr. Victor and his co-defendants have denied wrongdoing and are challenging the admissibility of their statements in court.

AppWizard

August 10, 2026

You can now buy Android apps and games using a new payment option

Google has integrated Venmo as a payment option on Google Play, allowing users to purchase apps, games, and digital content more flexibly. Users can link their Venmo accounts to Google Play by following specific steps in the app. Venmo has expanded its services, enabling transactions with PayPal users in over 90 countries. Google Play supports various payment methods, and users must have an active Venmo account to use this feature. Venmo can be used for purchases, including movies, but there have been issues, such as a user losing access to a purchased movie trilogy without a refund option.

Tech Optimizer

August 9, 2026

Kaspersky Research: Gen Z is the Most Active Internet User, but Minimal Cyber Protection

Generation Z is the most engaged demographic online, with 57 percent spending more time in the virtual realm than in the physical world. Smartphones are the primary tool for this generation, with 67 percent using them to access the internet. While 59 percent feel confident navigating the digital landscape, only 27 percent use antivirus software on their mobile devices. More than half (52 percent) have experienced cyber attacks, with 17 percent reporting hacking incidents on social media and 12 percent losing access to gaming accounts. Kaspersky recommends that Gen Z implement comprehensive security solutions, consider using a password manager, and utilize a trusted VPN for added online security.

AppWizard

August 7, 2026

Marvel Tōkon Fighting Souls launches with PC performance issues and mixed Steam ratings

Players of Marvel: Tōkon Fighting Souls are experiencing performance issues on PC, leading to a Mixed rating on Steam with only 43% positive feedback. The game suffers from persistent micro-stutters during gameplay, launch failures, and significant challenges for Linux users, who are unable to access the game. A Reddit user highlighted that the game has regular micro-stutters regardless of hardware or settings, with frame-time graphs showing frequent spikes correlating to visible stutters. These issues disrupt online matches due to dropped frames. Even high-end hardware does not alleviate the stuttering, and external frame-rate limiters do not resolve the visible stutters. Steam reviews reflect concerns about performance, with some users reporting issues before launching the game. Linux users are particularly frustrated as the game blocks any attempts to launch on Linux systems, unlike another title from the same developer. The game is also not compatible with the Steam Deck due to similar Linux-related issues. Arc System Works has released a day-one patch aimed at improving performance, including reducing CPU load and addressing performance drops associated with overlays, but players are still awaiting feedback on its effectiveness.