research Archives

AppWizard

May 28, 2026

New Windows 11 update will actually make your PC faster

The Windows 11 update "KB5089573" is designed to enhance PC efficiency and speed, focusing on performance improvements during app launches and core shell experiences like the Start menu and Search. It introduces "Low Latency Profiles" to maximize CPU frequency temporarily when an application is launched, making app launches up to 40% faster and core shell experiences up to 70% quicker. Reliability enhancements include improvements to the sign-in screen, File Explorer, touch gestures, Task Manager, and the ability to share Bluetooth connections with two devices. This update is part of Microsoft's K2 initiative to optimize Windows 11 based on user feedback, with plans for further enhancements in the future. The update is available for installation through the Windows Update tool.

Winsage

May 28, 2026

Microsoft’s GitHub bans security researcher who posted zero-day Windows exploits because company ‘ruined their life’ — expert claims action is vindictive and promises further retaliation

Researcher Nightmare-Eclipse, also known as Chaotic Eclipse, has had their GitHub account banned by Microsoft, leading them to move their operations to GitLab. Microsoft also deleted Eclipse's Microsoft account used for reporting vulnerabilities. Eclipse claims that they have not received any financial rewards from Microsoft's bug bounty program, despite having reported multiple zero-day vulnerabilities. They possess a portfolio of six zero-day exploits and have hinted at revealing more on July 14. Eclipse has criticized Microsoft for their handling of vulnerability reports and suggested that the company's recent requirement for video evidence of exploits has contributed to tensions. Microsoft has not commented on the specifics of the situation. Eclipse's zero-day exploits include BlueHammer, RedSun, UnDefend, GreenPlasma, MiniPlasma, and YellowKey, with BlueHammer, RedSun, and UnDefend confirmed as actively exploited in the wild.

Winsage

May 27, 2026

Windows Users Targeted in New Phishing Campaign

Research from FortiGuard Labs has identified a phishing campaign that disguises itself as purchase orders, prompting recipients to open harmful attachments. The campaign begins with a phishing email containing a malicious JavaScript file. When executed, this JavaScript decrypts and runs a PowerShell script that uses process hollowing to inject a .NET downloader module into the trusted Windows process MsBuild.exe. This downloader connects to a remote command and control (C2) server to download and execute additional modules, allowing the attacker to alter the malware's behavior after the initial compromise. The campaign poses significant detection challenges for Windows users due to its use of multiple encryption layers, fileless execution techniques, and process hollowing strategies. Security experts emphasize the need for organizations to enhance their detection capabilities beyond traditional methods, focusing on identifying suspicious activity across various devices and applications. The phishing attack exploits social engineering tactics and blends malicious actions with legitimate administrative tools, complicating detection efforts. Additionally, the human element plays a crucial role in breaches, highlighting the importance of effective communication and collaboration between security teams and other departments to improve security awareness and behavior.

AppWizard

May 27, 2026

No Man’s Sky now has its own Death Star with a laser so big it can ‘destroy space station sized objects’

The Swarm update for No Man's Sky introduces the Hive of Glass, a massive space station that controls aggressive drones. Players will engage in intense space battles and ground-level activities, including salvaging downed drones with a new gravity gun. Challenges include defeating planetary swarms, sabotaging the swarm's network, and uncovering the Hive's secrets. The update also features a new armor set, an upgraded jetpack, a new rifle, and various bug fixes and stability improvements.

AppWizard

May 27, 2026

Best Free Antivirus for Android in 2026: Top Apps to Keep Your Phone Safe

The search for reliable free antivirus apps for Android devices has become significant due to the increasing amount of personal information stored on smartphones. Not all free antivirus apps are effective; many offer basic scanning capabilities or generate excessive alerts. A good Android antivirus should operate discreetly, monitoring threats without constant interruptions. Bitdefender Mobile Security (Free Version) focuses on scanning installed apps and monitoring new downloads with minimal impact on device performance. Avast Mobile Security provides a comprehensive security dashboard, analyzing links and flagging phishing websites, but may generate more alerts. Norton Mobile Security includes malware scanning, link checks, and vulnerability assessments, though its complexity may deter some users. AVG AntiVirus Free emphasizes routine monitoring and provides a user-friendly interface. Free antivirus apps can be reliable if developed by reputable companies with established malware detection capabilities. They generally utilize the same detection engines as paid versions and have improved their impact on phone performance. Choosing the right antivirus app depends on individual priorities, such as the desire for basic malware scanning or comprehensive security features. While Google’s built-in protections like Play Protect offer some security, they do not catch every threat, making third-party antivirus tools beneficial, especially for users who sideload apps. Key features to look for in a free Android antivirus app include clear data processing practices, efficient battery usage, and the ability to operate quietly in the background. In 2026, top contenders for Android antivirus include Bitdefender, Surfshark, Norton, and Avast, each with unique strengths. Bitdefender excels in malware detection, Surfshark emphasizes privacy, Norton offers a comprehensive security suite, and Avast specializes in phishing protection.

Winsage

May 26, 2026

Microsoft argues Windows 11 is the AI OS where work actually happens, not where AI is added on top in a new ebook

Microsoft has released a 14-page e-book on the integration of artificial intelligence in Windows 11, promoting it as an "AI OS" essential for enterprise AI frameworks. The company asserts that Windows 11 will continue to evolve with AI features, despite concerns about scaling back Copilot. Microsoft emphasizes a strategic approach to AI, advocating for fewer but more effective tools integrated into existing workflows to enhance productivity. Key AI features in Windows 11 include voice and natural language processing, built-in AI experiences, and task progression agents. The "Ask Copilot" feature on the taskbar is highlighted as a tool to streamline tasks without switching applications. Microsoft cites a 2025 report indicating that 80% of the workforce faces challenges in completing tasks due to time constraints, while 82% of executives plan to implement AI agents to improve productivity.

AppWizard

May 25, 2026

Over 200 Fake Android Apps Are Quietly Stealing Money From Phone Bills

Zimperium identified a sophisticated malware campaign that exploited nearly 250 Android applications, posing as popular games and social media platforms. The malware ensnared users into premium subscription services without consent, using techniques like JavaScript injection and interception of one-time passwords. The campaign primarily targeted users in Malaysia, Romania, Thailand, and Croatia, with the malware capable of reading SIM cards and activating for specific mobile carriers. Zimperium first detected the scam in March 2025 and monitored it until at least January 2026. Google stated that none of the compromised applications were available on its app store and emphasized that Android users are protected by Google Play Protect. The hackers deployed three malware variants, with the first using an automated subscription engine, the second targeting users in Thailand with premium SMS messages, and the third combining SMS fraud with real-time notifications to attackers via Telegram. The campaign primarily affected Malaysian SIM card users, with significant activity also in Thailand and Romania. Despite the campaign's last known activity in January, parts of its infrastructure remain operational. The attacks highlight vulnerabilities in application security and the challenges of policing app downloads from third-party marketplaces.

Winsage

May 25, 2026

How I Changed the SID on My Windows Server Without Reinstalling (And Why You Should Care)

Cloning a Windows Server machine can lead to issues with duplicate Security Identifiers (SIDs). A Security Identifier (SID) is a unique string assigned to every machine, user, and group in Windows, functioning like a fingerprint. Duplicate SIDs can cause problems such as domain join failures, incorrect WSUS reporting, inconsistent Group Policy application, and licensing issues. The author initially attempted to use sysprep to change the SID after cloning, which resulted in stripping the domain join and causing SQL Server to fail. The author then discovered Wittytool Disk Clone, which includes a SID changer that successfully generated a new SID and updated all necessary references without disrupting the server's configuration or applications. The process took only six minutes and worked similarly on Windows Server 2019. It is more efficient to generate a new SID during the cloning process rather than afterward. Important precautions include taking a snapshot or backup before making changes and being aware that changing the SID on domain controllers is more complex. Reactivation of Windows may also be required after the SID change.

AppWizard

May 24, 2026

SOKO 1977: Anti-Terror Task Force Announced For PC

The collaboration between the Federal Agency for Civic Education and Paintbucket Games has resulted in the development of a historical-political deduction game titled SOKO 1977: Anti-Terror Task Force. The game is set in 1970s West Germany and allows players to assume the role of a special police task force agent, tasked with identifying and neutralizing terrorist threats. Players navigate through fictionalized scenarios inspired by real historical events, making decisions that impact the investigation while addressing moral and legal questions related to state authority and public safety. The game features a roguelike structure with procedurally generated storylines, ensuring a unique experience with each playthrough. Players will engage in police operations, conduct interrogations, and manage public perception, all within an authentic historical backdrop. SOKO 1977 is scheduled for release in 2027.

Tech Optimizer

May 21, 2026

Nvidia tells users to update GPU drivers now or face possible attack — here’s what we know

NVIDIA has released an update to its GPU display drivers that addresses 14 vulnerabilities across its product lines, including GeForce, RTX, Quadro, Tesla, NVS, vGPU, and Cloud Gaming software. The most critical vulnerability is CVE‑2026‑24187, a high-severity use-after-free bug rated 8.8 out of 10, which could allow code execution, privilege escalation, data theft, or system crashes. Linux systems are vulnerable due to improper access to GPU resources at the kernel level, while Windows systems are at risk from a timing flaw. Two vulnerabilities in NVIDIA’s Unified Virtual Memory subsystem on Linux could lead to denial-of-service attacks without elevated permissions. The vGPU software also received patches for vulnerabilities in its virtual GPU manager component. Users can download the updated drivers from the NVIDIA Driver Downloads page or the NVIDIA Licensing Portal, with Windows users needing version 569.49 or newer and Linux users needing version 590.48.01. Users are advised to maintain their antivirus programs for enhanced security. NVIDIA thanked external security researchers for their responsible disclosure of these vulnerabilities.