risks Archives

Winsage

June 9, 2026

Live Webinar | Windows 10 End of Support in OT: Practical Strategies for Secure and Resilient Operations

Operational technology (OT) engineers and plant managers must decide between migrating to Windows 11, opting for Extended Security Updates, or implementing compensating controls as support for Windows 10 ends. Windows 10 Enterprise LTSC 2021 will stop receiving updates on January 12, 2027. A live webinar is available to help organizations develop a strategy for transitioning from Windows 10, addressing security and compliance challenges, key standards, and practical strategies for safeguarding systems. The webinar targets OT engineers, plant managers, OT security leaders, and operations teams in various sectors, aiming to assist them in maintaining operational integrity during the transition.

Tech Optimizer

June 9, 2026

Fake ChatGPT download site infects Windows and Mac users with malware

A counterfeit website, openew[.]app, is impersonating OpenAI's official ChatGPT download page and distributing malware. Windows users who download from this site receive a credential-stealing malware loader, while macOS users are infected with Odyssey Stealer, a variant associated with cryptocurrency theft. The fake site mimics the legitimate ChatGPT interface and uses HTTPS to appear trustworthy. The Windows malware, Chat_GPT.exe, creates a back channel to an attacker-controlled server, while the macOS malware captures sensitive data and attempts to replace legitimate cryptocurrency wallet applications with compromised versions. Users who download from official sources remain safe, but those who click on ads or unfamiliar links risk compromising their online accounts and sensitive information. Malwarebytes offers protection against this malware. Indicators of compromise include specific file hashes and network indicators associated with the malicious site.

Tech Optimizer

June 9, 2026

Tiger Data launches PostgreSQL extension designed for AI agents

Tiger Data has launched a managed PostgreSQL database service called Ghost, designed for AI agents, addressing the limitations of traditional database architectures for autonomous software. The service is now generally available and allows agents to create unlimited databases quickly through a feature called "fast forking." Ghost utilizes Tiger Data's Fluid Storage technology, which employs a copy-on-write storage layer, enabling multiple database instances to share data blocks while charging users only for changed data. The service supports popular PostgreSQL extensions and is positioned as an evolution of PostgreSQL, maintaining its compatibility with the existing ecosystem. Tiger Data has raised 0 million in funding and employs 200 individuals across 25 countries.

AppWizard

June 9, 2026

You should back up your Forza Horizon 6 save before its latest bug brings you to tears

Forza Horizon 6 players are experiencing significant issues with save data loss, with many reporting that their progress is erased, particularly when using the Quick Resume feature on Xbox or encountering cloud save problems on PC. Certain vehicles, including the 2003 Ford F-150 SVT Lightning and 1994 Ferrari F355 Berlinetta, are suspected to be linked to these issues. Players are advised to avoid these vehicles and disable Quick Resume to mitigate risks. Regular backups of save files are recommended for PC users. In case of data loss, players can contact Forza Support to restore their inventory, but they will still need to restart the campaign and collect items again.

Winsage

June 9, 2026

Microsoft’s June 2026 Patch Tuesday: High stakes and hidden features

Microsoft has updated the Windows 11 Insider builds regarding Secure Boot expiration, highlighting its importance in ensuring only trusted software loads during startup. The expiration can lead to vulnerabilities, prompting users to understand the associated risks. Microsoft has provided resources at Microsoft.com/Secure Boot Expiration to help users prepare for these changes. Additionally, the National Institute of Standards and Technology (NIST) has identified a new vulnerability, CVE-2026-42897, emphasizing the need for vigilance in cybersecurity. Users are advised to regularly check for updates, engage with the Microsoft Tech Community, and follow best practices for device security.

AppWizard

June 9, 2026

A Star Trek horror game is just wild enough to work, but not the one Bloober Team is making

Bloober Team is developing a horror game set in the Star Trek universe, featuring the Bajoran character Ro Laren. The project combines horror elements with the traditionally optimistic themes of Star Trek, creating a mix of excitement and skepticism among fans. Ro Laren's character, known for her conflict with Starfleet ideals, aligns with the darker themes of the game, but her story may challenge the franchise's core values of unity and hope. The success of unconventional Star Trek projects suggests the franchise can adapt to new formats, and anticipation builds around how Bloober Team will merge their style with Star Trek's spirit.

Winsage

June 9, 2026

Microsoft Makes Windows 11 an Agentic Platform

Microsoft announced a suite of agent-centric features for Windows 11 at the Build 2026 conference, introducing the Microsoft Agent Platform for local AI agents. This includes enhanced integration with Microsoft Foundry, GitHub, and the M365 suite. The developer documentation covers local agent runtimes and isolation patterns, highlighting the Microsoft Execution Containers SDK and Entra Agent ID. Enterprise controls like Intune and Agent 365 are also featured. The upcoming Copilot Actions will allow agents to interact with local files and applications, aimed at improving workflows. Microsoft is addressing security concerns with resources outlining strategies to mitigate risks such as cross-prompt injection. Industry commentary indicates a growing discussion about privacy and security in relation to these changes.

Winsage

June 8, 2026

Microsoft answers what you must do as Windows 11 Secure Boot deadline hits in days

The expiration date of the original Microsoft Secure Boot KEK certificate is June 24, 2026. Microsoft held a live "Ask Microsoft Anything" session on June 4 to address concerns regarding this deadline. The expiration affects the KEK key, while the DB key remains valid until October. After June 24, Microsoft will not be able to sign new DBX payloads, which are necessary for revoking compromised bootloaders. Devices without the new KEK may miss future revocations, leading to decreased security but will not stop booting immediately. The June Patch Tuesday update is expected to classify most systems as high confidence. IT administrators are advised to use the Intune monitoring report for device status and updates. Devices in a "temporarily paused" status require OEM firmware updates. Administrators should not delay manual rollouts for devices outside the high confidence classification. Secure Boot must be enabled to update certificates, and re-enabling it later can pose risks. Older models may receive high confidence classification faster than newer ones due to statistical requirements. In PXE boot environments, caution is needed when updating bootloaders. The Secure Boot update mechanism is consistent across Windows 10 and 11, and event logs are important diagnostic tools. Key event log entries include 1801, 1802, and 1803, which indicate various device statuses and issues. Microsoft provides resources at aka.ms/GetSecureBoot for further guidance.

AppWizard

June 8, 2026

Android Sideloading in 2026: Which Apps Are Worth Installing Outside the Play Store

VidMate apk is a widely used application that operates outside the Play Store and continues to do so into 2026. Sideloading is the process of installing an Android app from a source other than the Google Play Store, using the APK file format. Android supports sideloading, allowing users to enable installations from unknown sources in their device settings. As of 2026, Google requires developers distributing apps outside the Play Store to register, verify their identity with a government-issued ID, and pay a one-time fee. This policy aims to enhance security without eliminating sideloading. Enforcement began in select countries in September 2026 and will continue globally through 2027. Concerns have been raised about the potential barriers this creates for independent developers. In 2026, apps from developers with official websites and established histories are considered safer, while those from anonymous sources carry increased risks. Notable categories of sideloaded apps include video downloaders like VidMate, open-source YouTube clients like NewPipe, ad-blocking browsers, and privacy-focused tools. To install sideloaded apps safely, users should enable the option to install from unknown sources in their device settings and download from official developer websites or trusted repositories like APKMirror, F-Droid, or GitHub. Users should avoid sites that do not identify the app's creator or host unverified uploads.

AppWizard

June 8, 2026

Pirated PC games are delivering password-stealing malware

A surge in Windows malware campaigns has been identified, with malicious software hidden in pirated PC games and modified installers for popular franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Over 400,000 devices globally have been affected, with around 30,000 cases in the United States. The malware, known as the "RenEngine loader," is disguised as a legitimate game launcher and infects systems when users download cracked games. It aims to deploy an infostealer called ARC, which can capture sensitive information such as passwords and cryptocurrency wallets, and may also install other harmful payloads like the Rhadamanthys stealer and Async Remote Access Trojan (RAT). Users often remain unaware of their infection until significant damage occurs. Recommendations for safety include avoiding unofficial downloads, using up-to-date anti-malware protection, and regularly updating software.