research Archives

Winsage

August 13, 2026

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows

Nightmare Eclipse has released a new zero-day exploit called ShieldBreak, which can bypass Microsoft's RoguePlanet patch (CVE-2026-50656) and allow attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit has been confirmed by security expert Kevin Beaumont, who provided detection methods for it. ShieldBreak is the tenth zero-day from Nightmare Eclipse since April and was released shortly after Microsoft's monthly Patch Tuesday. The exploit allows local privilege escalation and has a 100% success rate on the latest version of Windows 11 and Windows Server 2025, while Windows 10 remains vulnerable. Microsoft is aware of the vulnerability and is investigating it, emphasizing the importance of coordinated vulnerability disclosure. Previous exploits from Nightmare Eclipse include LegacyHive and GreatXML, with earlier vulnerabilities having been patched but recent ones still unaddressed. Microsoft had threatened legal action against Nightmare Eclipse in May but later reconsidered its approach to vulnerability disclosure.

Winsage

August 13, 2026

Microsoft begins unified Copilot app rollout: Reveals major plan to merge Copilot and Microsoft 365 Copilot across all platforms, along with updated branding

Microsoft is unifying its Copilot applications by merging the consumer and productivity versions into a single app branded as "Copilot." This change aims to simplify user experience and will feature a cohesive design and improved navigation. Certain features will be retired, including: - Group Chat: All threads, messages, and images will not carry forward after August 18, 2026. Users should manually copy or download any content they wish to retain. - Podcasts: The Podcasts feature will be fully retired on August 18, 2026, after which users will be unable to create or access podcasts within Copilot. Individual podcast files can be downloaded before the retirement date. - Deep Research: This feature will be retired for consumer users starting August 18, 2026, although existing content will remain accessible. The unified app will be available for both personal and work/school accounts, with security measures in place to protect organizational data. All existing Copilot data, except for the phased-out features, will transition automatically to the new app. The rollout will begin today in phases, starting with mobile users, followed by updates for Windows and macOS by mid-September. The complete rollout schedule includes: - Mid-August 2026: Global rollout begins for mobile and web apps; early-access opt-in opens for Windows and Mac apps. - Late August 2026: Standard rollout of the URL redirect begins. - Mid-September 2026: Global rollout for Windows and Mac apps commences. - Late September 2026: Deferred rollout of the URL redirect begins for the web app.

Tech Optimizer

August 13, 2026

The best antivirus software to protect your computer in 2026

Bitdefender Total Security is currently the top recommendation for antivirus software, offering comprehensive protection for personal data and effective threat neutralization for an annual fee. Norton Antivirus Plus is a cost-effective option for a single device, while ESET Protect is suggested for business customers. Bitdefender is highlighted for its lightweight design and additional features like a built-in VPN. Norton Antivirus Plus includes essential features such as threat monitoring and cloud backup. Avira Free Security is noted as a strong free option with a robust malware scanner, while ESET Protect offers customizable security features for small- and medium-sized enterprises. The effectiveness of antivirus software remains significant despite improvements in operating system defenses. The choice between free and paid antivirus solutions depends on individual needs and desired protection levels.

Winsage

August 12, 2026

Windows 11 keeps breaking user expectations around browser choice, according to new global research

A survey by the Browser Choice Alliance involving 2,000 U.S. adults reveals significant dissatisfaction with Microsoft's Edge browser. Key findings include: - 86% of respondents believe they should control their default browser, and 80% want a "one-click browser default" option. - 26% currently have Edge as their default browser, but only 19% would choose it if given a free choice. - 72% of those who tried to change their default browser in the past two years faced obstacles, such as Edge being recommended or links opening in Edge. - 29% reported that Windows system updates changed their browser preferences. - Among adults aged 65 and older, 44% found changing their default browser complex, and 61% lacked confidence in the process. - 14% of respondents believe users should not have the ability to choose their default browser. - Microsoft has made changes to enhance user choice only within the EU, ignoring global opportunities. - Tools like MSEdgeRedirect and EdgeDeflector aimed at redirecting links to preferred browsers are now ineffective or limited. - Microsoft announced the discontinuation of support for MV2 extensions, affecting tools like uBlock Origin.

Winsage

August 12, 2026

Microsoft Windows 0-Day Attack Deploys Lazarus Rootkit—Patch Now

Microsoft released a patch for a zero-day vulnerability, CVE-2026-68820, which is being exploited by cybercriminals, specifically the North Korean hacking group Lazarus. This vulnerability allows unauthorized attackers to elevate their privileges locally, posing a significant risk to affected systems. The August 2026 Patch Tuesday update addressed 421 vulnerabilities, including three zero-days, with CVE-2026-68820 being the only one confirmed to be actively exploited. The vulnerability's impacts on confidentiality, integrity, and availability are rated as High. Users of Microsoft Windows 10, Windows 11, and various versions of Windows Server should prioritize deploying the patch for this vulnerability.

AppWizard

August 12, 2026

Privacy or Evasion? The Policy Dilemma Around Messaging App Usernames

On June 29, 2026, WhatsApp introduced a feature allowing users to create usernames to enhance privacy by enabling connections without revealing phone numbers. The Government of India expressed concerns about potential increases in cybercrime linked to this feature and issued a notice to WhatsApp requesting a pause on its rollout. The notice demanded justification under various laws, including the Information Technology Act, 2000. Similar inquiries were sent to other messaging platforms like Telegram and Signal. This scrutiny represents a shift from reactive measures to proactive assessments of platform design, emphasizing how features like usernames can impact user safety and accountability. The Delhi High Court upheld a temporary ban on Telegram during an examination period, recognizing the relevance of platform architecture in assessing risks. The increase in cybersecurity incidents in India raised concerns about usernames enabling fraud and evasion. The government is advocating for a balanced approach that allows pseudonymous interaction while ensuring accountability.

Winsage

August 11, 2026

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft's recent security updates addressed a significant vulnerability, CVE-2026-68820, in a core Windows kernel driver that is being actively exploited, allowing attackers to escalate privileges to SYSTEM level. This vulnerability has a CVSS score of 7.0 and is the only one flagged as under active exploitation. Check Point Research links it to the Lazarus group. Additionally, four other vulnerabilities included in the update do not require victim action: - CVE-2026-62878: A stack-based buffer overflow in Windows DNS Server, considered wormable. - CVE-2026-62893: A remote flaw in Windows Deployment Services through TFTP handling. - CVE-2026-62815: A vulnerability in Microsoft QUIC allowing remote code execution. - CVE-2026-59124: An important flaw in HPC Pack with a CVSS score of 9.8. The updates also finalized a fix for a SharePoint vulnerability chain, with CVE-2026-55040 addressing an authentication bypass and CVE-2026-63520 fixing the code execution component. Organizations are advised to prioritize patching CVE-2026-68820 and then address the other vulnerabilities, ensuring SharePoint installations have both fixes applied.

AppWizard

August 11, 2026

Brand new PC bundle gives you 14 games with a short playtime for just $12

PC gamers can purchase the Short Games Showcase Bundle curated by Humble Bundle until August 28, 2026. The bundle includes a standard 14-item collection priced at .00 and a 7-item selection available for .00. Notable games in the bundle include: - Fill Up The Hole: Released on July 17, 2025, with a Steam rating of 90% positive. - Old Man's Journey: Released on May 18, 2017, with a Steam rating of 87% positive. - Teacup: Released on September 23, 2021, with a Steam rating of 96% positive. - A Juggler's Tale: Released on September 29, 2021, with a Steam rating of 93% positive. - Scanner Sombre: Released on April 26, 2017, with a Steam rating of 91% positive. - Astro Prospector: Released on July 14, 2025, with a Steam rating of 92% positive. - A Tiny Sticker Tale: Released on October 4, 2023, with a Steam rating of 97% positive. - Botany Manor: Released on April 9, 2024, with a Steam rating of 94% positive. - Biped: Released on March 26, 2020, with a Steam rating of 85% positive. - Monster Prom 2: Monster Camp: Released on October 23, 2020, with a Steam rating of 97% positive. - Anomaly Agent: Released on January 24, 2024, with a Steam rating of 94% positive. - NanoApostle: Released on September 12, 2024, with a Steam rating of 95% positive. - Knightica: Released on August 21, 2025, with a Steam rating of 74% positive. - The Dark Queen of Mortholme: Released on August 15, 2025, with a Steam rating of 83% positive.

Winsage

August 11, 2026

Microsoft Word 1.1a Runs Natively on Windows 11 on x64

A developer has adapted Microsoft Word 1.1a, originally for 16-bit x86 systems, to run natively on modern 64-bit Windows PCs through a project called “Opus.” This adaptation compiles the original source code into a genuine x64 application, avoiding the use of emulators or virtual machines. The developer translated incompatible segments of the original code, including 16-bit assembly language, into C or C++, while mapping Win16 functions to modern Win32 APIs. The project retains original resources and copyright notices, and is hosted on GitHub without a broad open-source license. Automated testing has been implemented to ensure functionality mirrors the original application. Microsoft has previously published similar historic projects, but this port is an independent effort, providing insights into early Windows software architecture.

Winsage

August 10, 2026

Fixing Windows 11 now does not excuse letting it become a mess for decades

Windows 11 is undergoing enhancements, with many features currently exclusive to Windows Insiders and still in the mockup phase. Microsoft is overhauling the Windows 11 interface, integrating WinUI into components like the Start menu and File Explorer. Windows Insider participants must update their systems to a new build by August 11, 2026, to avoid expiration of builds and ensure automatic updates. Lenovo's latest BIOS update for the Legion Go gaming handheld has made some devices inoperable, prompting users to avoid the update. The modernization of Windows has been criticized for not being prioritized earlier, despite significant user feedback. The Seagate Storage Expansion Card for Xbox Series X|S is currently in short supply, and the Dell XPS 14 has a price reduction of 0.