NewApp Digest
search bot

risks

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)
Winsage
April 30, 2026

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Attackers are exploiting CVE-2026-32202, a zero-click vulnerability in Windows Shell, allowing authentication of victims' systems without user interaction. This vulnerability stems from an incomplete patch for CVE-2026-21510 and has been used by the APT28 group with weaponized LNK files to bypass Windows security. Although Microsoft addressed these vulnerabilities in February 2026, the risk remains as opening a folder with a malicious LNK file can still connect victims' machines to the attacker's server, initiating an NTLM authentication handshake that exposes the victim’s Net-NTLMv2 hash. This affects various versions of Windows 10, 11, and Windows Server. Microsoft released a patch for CVE-2026-32202 on April 14, 2026, but did not label it as actively exploited until more than two weeks later, leaving security teams unaware of its urgency. Organizations are advised to apply the patch and consider blocking outbound SMB traffic to mitigate risks.
EA's CEO claims AI isn't costing people their jobs, instead it's helping them
AppWizard
April 29, 2026

EA’s CEO claims AI isn’t costing people their jobs, instead it’s helping them

EA CEO Andrew Wilson stated that AI is intended to enhance existing roles in the gaming industry rather than replace them. He emphasized that AI serves as a tool to improve productivity, particularly in routine tasks, and mentioned that EA is hiring more quality assurance (QA) staff than ever before, with 85% of QA work being supported by machine learning or AI-driven algorithms. Despite recent layoffs at EA, including teams involved in the development of Battlefield 6, Wilson maintains that AI's role is primarily augmentation. However, the company faced criticism after allegations that AI was used to generate artwork for a premium bundle, raising concerns about the impact of AI on employment in the gaming sector.
Denuvo has been cracked in all single-player games it previously protected — 2K Games and Denuvo reportedly retaliate with mandatory 14-day online checks
AppWizard
April 29, 2026

Denuvo has been cracked in all single-player games it previously protected — 2K Games and Denuvo reportedly retaliate with mandatory 14-day online checks

The skull-and-bones community has declared that there are no games utilizing Denuvo that remain uncracked or bypassed. The MKDev collective and DenuvOwO developed a hypervisor-based bypass (HVB) in late 2025, which intercepts Denuvo's verification checks. The cracker voices38 successfully removed Denuvo from several titles, including Resident Evil: Requiem. Denuvo has since implemented a 14-day mandatory online check for certain games, complicating the HVB method. The latest version of HVB requires users to disable Core Isolation and Driver Signature Enforcement to run games. The community includes notable figures like repacker FitGirl, who has acknowledged the collaborative efforts of DenuvOwO and voices38.
Neverway doesn't want to be Stardew Valley. Instead, the devs are going as "weird as possible," Larian-style
AppWizard
April 29, 2026

Neverway doesn’t want to be Stardew Valley. Instead, the devs are going as “weird as possible,” Larian-style

Neverway is a life simulation game developed by Coldblood Inc., where players assume the role of Fiona, a newcomer on a mysterious island. The game features resource gathering, romantic relationships, and confrontations with menacing creatures, alongside a darker narrative involving a potentially malevolent Lovecraftian entity. It combines elements of horror, RPG mechanics, and soulslike gameplay, distinguishing itself from similar titles like Stardew Valley. The game's narrative explores serious themes, including Fiona's struggles with depression, and incorporates a unique color palette that enhances its eerie atmosphere. Neverway is set to release in October 2026, with a Prologue demo currently available on Steam.
Denuvo dealt major blow as crackers claim all non-VR games with the anti-tamper have been bypassed
AppWizard
April 28, 2026

Denuvo dealt major blow as crackers claim all non-VR games with the anti-tamper have been bypassed

Every non-VR game utilizing Denuvo DRM has been successfully compromised due to the emergence of the Hypervisor bypass, a method that deceives Denuvo into believing it is functioning correctly. This technique requires users to disable Driver Signature Enforcement, raising security concerns. The CrackWatch subreddit reports that all non-VR Denuvo games have been cracked or bypassed to some degree, with Capcom's Pragmata being completely bypassed just two days before its official launch. Cracking Denuvo within the first week of a game's release can lead to revenue losses of up to 20% for developers and publishers. Irdeto is actively developing updated security versions to address the Hypervisor bypass, assuring that these measures will not compromise game performance.
Valve’s new Steam Controller has a major problem for PC games not on Steam
AppWizard
April 28, 2026

Valve’s new Steam Controller has a major problem for PC games not on Steam

The new Steam Controller lacks native Windows drivers, making it dependent on the Steam application for functionality. This means it cannot be used effectively with games from other platforms like the Epic Games Store or Xbox Game Pass, as it cannot interface with locked files on Windows 11. Gamers wanting to play titles like Forza Horizon 6 via Game Pass must purchase them directly from Steam to use the controller. While Valve could release standard Windows drivers to address this issue, there is skepticism about their willingness to do so. The gaming community previously developed a tool called GlosSI to enable the original Steam Controller to work with non-Steam applications, and a similar solution may emerge for the new model.
‘Unlimited Attack Vectors’—All Windows Versions At Risk From New Flaw
Winsage
April 28, 2026

‘Unlimited Attack Vectors’—All Windows Versions At Risk From New Flaw

Microsoft is facing a significant security vulnerability in its Windows operating system known as PhantomRPC, which allows for privilege escalation. Cybersecurity experts have expressed concern over the company's delayed response in issuing a patch for this flaw. The vulnerability resides within the Windows Remote Procedure Call (RPC) architecture and enables processes with impersonation privileges to elevate their permissions to SYSTEM level. Researcher Haidar Kabibo identified five distinct paths for exploitation, which require user interaction, coercion, or compromise of background services. Despite disclosing the vulnerability to Microsoft in September 2025, the company categorized it as moderately severe and did not issue a patch or a Common Vulnerabilities and Exposures (CVE) listing. Microsoft stated that the technique requires an already-compromised machine and emphasized the importance of following security best practices. Experts have criticized Microsoft's lack of action, arguing that it is operationally negligent and places the burden of risk management on users. In the absence of a patch, security professionals recommend focusing on access control and environmental hygiene to mitigate the risks associated with the vulnerability.
Microsoft: New Remote Desktop warnings may display incorrectly
Winsage
April 28, 2026

Microsoft: New Remote Desktop warnings may display incorrectly

Microsoft has identified an issue affecting the display of security warnings when users open Remote Desktop (.rdp) files across all supported versions of Windows, including Windows 11, Windows 10, and Windows Server. The security warning may not render correctly, making the text difficult to read and buttons misaligned, especially when multiple monitors with different display scaling settings are used. This issue often results in overlapping text or obscured buttons in the warning window. The problem is part of Microsoft's security enhancements introduced with the April 2026 cumulative updates, which aim to mitigate risks associated with malicious RDP connection files. Users receive a one-time educational prompt upon opening an RDP file for the first time, followed by a security dialog that provides information about the file's publisher and resource redirections. RDP files are commonly used in enterprise environments, but their exploitation in phishing campaigns has raised security concerns, particularly by groups like the Russian state-sponsored APT29.
Search