NewApp Digest
search bot

Run dialog

Microsoft warns fake CAPTCHA tests are hijacking Windows PCs
Winsage
October 5, 2026

Microsoft warns fake CAPTCHA tests are hijacking Windows PCs

Microsoft has warned Windows users about a cyber threat that disguises itself as a CAPTCHA test, where cybercriminals use fraudulent verification pages to trick users into executing commands that can install malware. This tactic involves users being directed to a compromised website that presents a fake verification window, prompting them to copy text and execute it in the Windows Run dialog. This method allows attackers to bypass antivirus software by pre-loading malicious scripts disguised as harmless images in the browser's cache. Once activated, the malware collects system information, steals data, and maintains long-term control over the system. Microsoft recommends using robust security software and being aware that no legitimate service will ask users to copy and paste commands into system dialogs.
Thousands of hacked sites trick you into installing malware
Tech Optimizer
September 21, 2026

Thousands of hacked sites trick you into installing malware

More than 5,400 websites across over 2,200 organizations have been compromised to propagate malware, primarily affecting small businesses like clinics and online retailers. The attack mechanism involves malicious code that triggers a deceptive CAPTCHA, instructing users to execute commands that can download malware. Attackers are using the BNB Smart Chain test network to store instructions, making it harder for investigators to shut down operations. A newer variant of the attack uses WebRTC technology to establish encrypted connections for delivering additional malicious code. To protect against these threats, users should avoid pasting commands from websites, be suspicious of unusual CAPTCHA instructions, use strong antivirus protection, keep systems updated, take action if commands are executed, and small business owners should regularly verify their website's integrity.
Microsoft's research boss reveals why Windows 11 features don't show up, and his fix half works
Winsage
September 19, 2026

Microsoft’s research boss reveals why Windows 11 features don’t show up, and his fix half works

Windows 11 has introduced new features such as a resizable Start menu, a movable taskbar, and the option to remove Bing from Windows Search. Users report not seeing significant changes after updates, leading to frustration. Marcus Ash, the design and research lead for Windows & Devices, acknowledged this issue, explaining that features may not appear immediately due to gradual rollouts. Users can enable the “Get the latest updates as soon as they’re available” option, but this does not guarantee instant access to new features. The September 2026 update includes a movable taskbar, a smaller taskbar option, and the ability to disable Bing results in Windows Search, though immediate visibility of these changes is not assured. Microsoft is also testing new features with Windows Insiders, including a customization tool for the context menu, enhanced File Explorer performance, a reduction in memory footprint for devices with 8GB RAM and above, a new WinUI-based Run dialog, a revamped Properties dialog, a redesigned pop-up for connected drives, the ability to remap the Copilot key, and improvements to Bluetooth connections and headset calls.
Microsoft warns fake CAPTCHA is tricking Windows users into running malware
Winsage
September 4, 2026

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Microsoft has identified a new malware campaign called TerminalFix that uses fake CAPTCHA prompts to trick Windows users into executing malicious commands. This campaign is a variation of ClickFix attacks and employs deceptive pages that impersonate reputable services like Cloudflare. Instead of traditional CAPTCHA challenges, users are instructed to open PowerShell or Command Prompt and paste in commands, allowing attackers to execute complex scripts more easily. TerminalFix initiates a multi-stage intrusion, granting attackers persistent proxy access to the infected machine, which can lead to further exploitation of the company's network. The campaign relies on social engineering tactics, requiring user compliance with counterfeit verification instructions. Microsoft has released mitigation guidance, recommending restrictions on PowerShell access, monitoring for DLL sideloading, blocking outdated Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The campaign poses significant risks to enterprise networks, but individual users should also be cautious about executing commands requested by websites.
TerminalFix Attacks Use Fake CAPTCHAs To Secretly Hack Windows PCs
Winsage
September 1, 2026

TerminalFix Attacks Use Fake CAPTCHAs To Secretly Hack Windows PCs

Microsoft Threat Intelligence has identified a new variant of the ClickFix malware campaign called "TerminalFix." This variant uses deceptive CAPTCHAs that mimic trusted services like Cloudflare and directs users to PowerShell or a command prompt, allowing for the execution of complex scripts. TerminalFix aims to orchestrate a multi-stage attack that provides attackers with persistent, network-level proxy access through the compromised host, potentially leading to significant data theft and malware propagation within unsecured enterprise networks. Recommendations for defense against TerminalFix include restricting access to PowerShell and Windows Run dialogs, monitoring for DLL sideloading indicators, blocking Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The attacks primarily target enterprise environments rather than individual consumers.
Microsoft Releases Two New 26H1 Builds to the Windows Insider Program
Winsage
September 1, 2026

Microsoft Releases Two New 26H1 Builds to the Windows Insider Program

Participants in the Windows Insider Program can now install new builds in the Beta (26H1) and Experimental (26H1) channels, specifically Beta build 28020.2818 and Experimental build 28120.2824. Key updates include: - Personalization enhancements with DIB image support for desktop backgrounds and improvements to the Background settings page, including slideshow support across multiple displays. - Windows Recovery Environment (WRE) enhancements allowing automatic reuse of saved Wi-Fi profiles. - Temporary removal of the modernized Print Management experience for refinement, while traditional tools remain accessible. - File Explorer improvements that retain the state of sections on the Home page. - Magnifier user interface updates with improved icons and spacing. - Inclusion of Emoji 17.0. - Taskbar reliability improvements. - The Experimental build introduces first launch reliability for the new WinUI-based Run dialog.
Microsoft proves Windows 11's modern UI can beat legacy Win32, if it works hard enough
Winsage
August 31, 2026

Microsoft proves Windows 11’s modern UI can beat legacy Win32, if it works hard enough

Microsoft is modernizing Windows by transitioning legacy features to its WinUI framework, including a redesign of the Run dialog. The new Run dialog, implemented with C#/WinUI 3, shows improved performance with a median time-to-show of 94 milliseconds, compared to 103 milliseconds for the legacy version, reflecting an 8.7% speed increase. Despite this improvement, Microsoft acknowledges that WinUI requires further performance enhancements in various areas. The development of the Run dialog utilized .NET AOT compilation to achieve native code speed while maintaining C# flexibility. Concerns about performance on lower-end machines persist, as seen with the Task Manager and File Explorer. Microsoft aims to modernize Windows features without sacrificing performance, with the Run dialog serving as a potential model for future updates.
Search