NewApp Digest
search bot

security challenges

How to check if your PC is Secure Boot ready
Winsage
June 18, 2026

How to check if your PC is Secure Boot ready

Microsoft has announced enhancements to its Secure Boot technology to improve system security by ensuring only trusted software is loaded during the boot process. ASUS will integrate advanced Secure Boot capabilities into its hardware, aligning with Microsoft's security protocols. This collaboration aims to enhance device integrity and protect user data against cyber threats. The updated Secure Boot technology will help prevent the execution of malicious software during startup, and both companies seek to boost consumer confidence in their products.
Critical Windows Netlogon RCE flaw now exploited in attacks
Winsage
June 1, 2026

Critical Windows Netlogon RCE flaw now exploited in attacks

The Centre for Cybersecurity Belgium (CCB) has warned about the exploitation of a critical vulnerability in Windows Netlogon, identified as CVE-2026-41089, which allows remote code execution on domain controllers without prior access or authentication. This vulnerability, characterized as a stack-based buffer overflow, was patched by Microsoft during the May 2026 Patch Tuesday. The CCB emphasized the urgency of patching vulnerable servers, noting that the vulnerability is actively being exploited. The CVSS score for this vulnerability is 9.8. Further details on the ongoing attacks have not been disclosed, and Microsoft has not updated its advisory on the vulnerability.
Microsoft says public sharing of Windows 11 vulnerability violates 'best practices'
Winsage
May 22, 2026

Microsoft says public sharing of Windows 11 vulnerability violates ‘best practices’

A security researcher known as Nightmare-Eclipse revealed a vulnerability in Windows 11, named YellowKey, which allows attackers to access BitLocker-encrypted drives through the Windows Recovery Environment. Microsoft acknowledged the vulnerability, assigned it the identifier CVE-2026-45585, and criticized the public sharing of its proof of concept. Currently, there is no patch available for the BitLocker bypass, but physical access to the device provides some protection. The vulnerability does not exist in Windows 10 due to differences in the Windows Recovery Environment. The attack requires a stolen Windows 11 laptop and a USB stick, and the vulnerable filesystems include NTFS, FAT32, and exFAT. Nightmare-Eclipse speculated that the bypass may function as a backdoor, while Microsoft referred to it as a "security feature bypass vulnerability."
This Free Steam Game Tricks Players Into Downloading Malware, Users Beware
AppWizard
May 21, 2026

This Free Steam Game Tricks Players Into Downloading Malware, Users Beware

Steam users are warned about the risks of downloading free games, particularly a compromised title called Beyond The Dark, which was a clone of the horror game Phasmophobia. This game contained malware named UnityPlayer.dll that activated upon launch, targeting saved passwords and cryptocurrency extensions in browsers. Users experienced instability and crashes while the malware operated in the background. It is recommended that those who downloaded the game delete associated files and perform a system scan, changing any potentially compromised passwords. Valve has removed Beyond The Dark from its storefront to prevent further downloads. Users are advised to scrutinize game descriptions, review feedback, and maintain reliable antivirus software to protect their personal information.
How to use and deploy Android Work Profile in your business
AppWizard
April 2, 2026

How to use and deploy Android Work Profile in your business

The mobile device has become a dual-purpose tool for personal and professional needs, enhancing productivity but also introducing security challenges for organizations with bring-your-own-device (BYOD) policies. Samsung addresses these challenges with its Android Work Profile feature, which separates business applications and data from personal content on devices like the Galaxy S26 Series, Galaxy Z Fold7, and Galaxy Z Flip7. Android Work Profile creates two isolated profiles on a single device, allowing IT teams to manage corporate applications while keeping personal information private. IT administrators can monitor work profile applications and data but cannot access personal profiles, ensuring employee privacy. Employees can easily switch between work and personal applications and activate a “pause work apps” feature during off-hours. To set up Android Work Profile, organizations need an Enterprise Mobility Management (EMM) solution and the Android Device Policy app. The Samsung Knox Suite provides tools for managing and securing devices, including Knox Mobile Enrollment and Knox Attestation. Android Work Profile benefits businesses by enhancing data security and reputation while promoting work-life balance for employees.
Microsoft Just Patched a Major Security Vulnerability for This Popular Windows App
Winsage
February 17, 2026

Microsoft Just Patched a Major Security Vulnerability for This Popular Windows App

Recent developments in Notepad have revealed a vulnerability that allows attackers to execute arbitrary code on users' computers through malicious links in Markdown files. This issue arises from the integration of Markdown support, which enables easy formatting of plaintext documents. An attacker could trick a user into clicking a link that launches unverified protocols, leading to the execution of remote files. Microsoft has addressed this vulnerability in the February 2026 security update for Windows. Users can check for this update in the Settings app under "Windows Update." In 2025, Microsoft patched 1,129 bugs in Windows 11, reflecting an increase in vulnerabilities associated with the integration of AI features.
Search