Security Archives

Winsage

June 8, 2026

Microsoft lets users disconnect Bing from Windows 11 search

Microsoft is set to enhance the user experience for Windows 11 by allowing users to disable web search results during local searches. This feature will be available in the settings menu under Privacy & Security > Search, with a new toggle under "Show suggested search results." Additionally, users will have the option to disable Microsoft Store suggestions in the Windows 11 search feature. Currently, turning off web results requires manual adjustments in the Windows registry, but the upcoming update aims to simplify this process. The exact rollout date for this update has not been announced.

Winsage

June 8, 2026

Microsoft making much needed change to Windows 11, 10 Patch Tuesday security updates

Microsoft has rolled out new Defender patches for Windows 11 ISOs, aligning with its commitment to security updates. Updates for Microsoft Defender for Endpoint's endpoint detection and response (EDR) will no longer be included with monthly Windows security updates or Patch Tuesdays; they will now be delivered via Microsoft Update. This change aims to allow faster deployment of EDR enhancements independently of the operating system's update cycle. The rollout for Windows 10 began in late May 2026, with plans to extend support to Windows 11 and other versions by fall 2026. EDR updates will be delivered using KB5005292, contingent on prerequisite updates. Systems must run Sense version 10.8798.25857.1000 or later and have specific Windows updates installed to qualify for the new delivery method. Organizations should align their update policies with this new approach before the broader rollout. In case of significant issues, the EDR update can be reverted using a specific command. Further details are available in the Microsoft 365 Admin Center under message ID MC1381119.

Winsage

June 8, 2026

Microsoft answers what you must do as Windows 11 Secure Boot deadline hits in days

The expiration date of the original Microsoft Secure Boot KEK certificate is June 24, 2026. Microsoft held a live "Ask Microsoft Anything" session on June 4 to address concerns regarding this deadline. The expiration affects the KEK key, while the DB key remains valid until October. After June 24, Microsoft will not be able to sign new DBX payloads, which are necessary for revoking compromised bootloaders. Devices without the new KEK may miss future revocations, leading to decreased security but will not stop booting immediately. The June Patch Tuesday update is expected to classify most systems as high confidence. IT administrators are advised to use the Intune monitoring report for device status and updates. Devices in a "temporarily paused" status require OEM firmware updates. Administrators should not delay manual rollouts for devices outside the high confidence classification. Secure Boot must be enabled to update certificates, and re-enabling it later can pose risks. Older models may receive high confidence classification faster than newer ones due to statistical requirements. In PXE boot environments, caution is needed when updating bootloaders. The Secure Boot update mechanism is consistent across Windows 10 and 11, and event logs are important diagnostic tools. Key event log entries include 1801, 1802, and 1803, which indicate various device statuses and issues. Microsoft provides resources at aka.ms/GetSecureBoot for further guidance.

Winsage

June 8, 2026

Meet the hidden Windows 11 tool that reveals what Task Manager misses

Microsoft has integrated Sysmon into Windows 11 through a system update, allowing it to operate in the background and log activities in the Windows Event Log. Indicators of suspicious processes include the absence of icons or descriptions, incorrect parent processes, spelling errors in names, unsigned executable files, packed executables, suspicious DLLs or services, open TCP/IP endpoints, and unusual URLs or character strings. To install Sysmon, users must access the Control Panel, enable Sysmon, and restart their PC. Activation requires running a command in the Command Prompt. Sysmon logs can be viewed in the Event Viewer under Microsoft > Windows > Sysmon > Operational. Users can filter events using an XML configuration file. After analysis, suspicious processes should be scanned with antivirus software, and files can be uploaded to VirusTotal for further examination. Sysmon continuously logs events, while Process Monitor captures snapshots of running processes, and both tools are available for free from Microsoft.

AppWizard

June 8, 2026

Android Sideloading in 2026: Which Apps Are Worth Installing Outside the Play Store

VidMate apk is a widely used application that operates outside the Play Store and continues to do so into 2026. Sideloading is the process of installing an Android app from a source other than the Google Play Store, using the APK file format. Android supports sideloading, allowing users to enable installations from unknown sources in their device settings. As of 2026, Google requires developers distributing apps outside the Play Store to register, verify their identity with a government-issued ID, and pay a one-time fee. This policy aims to enhance security without eliminating sideloading. Enforcement began in select countries in September 2026 and will continue globally through 2027. Concerns have been raised about the potential barriers this creates for independent developers. In 2026, apps from developers with official websites and established histories are considered safer, while those from anonymous sources carry increased risks. Notable categories of sideloaded apps include video downloaders like VidMate, open-source YouTube clients like NewPipe, ad-blocking browsers, and privacy-focused tools. To install sideloaded apps safely, users should enable the option to install from unknown sources in their device settings and download from official developer websites or trusted repositories like APKMirror, F-Droid, or GitHub. Users should avoid sites that do not identify the app's creator or host unverified uploads.

AppWizard

June 8, 2026

Pirated PC games are delivering password-stealing malware

A surge in Windows malware campaigns has been identified, with malicious software hidden in pirated PC games and modified installers for popular franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Over 400,000 devices globally have been affected, with around 30,000 cases in the United States. The malware, known as the "RenEngine loader," is disguised as a legitimate game launcher and infects systems when users download cracked games. It aims to deploy an infostealer called ARC, which can capture sensitive information such as passwords and cryptocurrency wallets, and may also install other harmful payloads like the Rhadamanthys stealer and Async Remote Access Trojan (RAT). Users often remain unaware of their infection until significant damage occurs. Recommendations for safety include avoiding unofficial downloads, using up-to-date anti-malware protection, and regularly updating software.

Tech Optimizer

June 8, 2026

I trusted Malwarebytes to secure my PC for a month

Malwarebytes is a cybersecurity solution that provides robust antivirus protection and features like a system scanner, VPN, and Trusted Advisor for security assessment. The installation process is simple, and users can navigate its intuitive interface easily. Trusted Advisor helped improve a user's security score from 49 to 83 by suggesting enhancements. The software includes sections for Privacy, Identity, Tools, and Scam Guard, which analyzes suspicious emails and screenshots. During testing, Scam Guard successfully identified a fraudulent email. Malwarebytes operates in the background with minimal CPU usage, effectively blocking threats and providing a detailed history of blocked malware. An independent evaluation by MRG Effitas awarded Malwarebytes a Level 1 certification for its performance. Pricing for Malwarebytes starts at an annual rate for the Standard plan, with additional options available for families and small businesses. It is recommended for its comprehensive protection compared to typical antivirus solutions.

AppWizard

June 8, 2026

Google Enables Android Apps With AppFunctions For Gemini

Google has introduced AppFunctions, a framework for Android that allows applications to expose callable functions to AI assistants, currently in experimental preview. This framework enables apps to register capabilities with an OS-level registry, requiring specific permissions for callers, including agents and assistants, to maintain user privacy and security. As of May 2026, integration with Gemini is in a private preview for select testers. AppFunctions targets devices running Android 16 or higher and provides developers with tools like an agent skill and Jetpack tooling for creating Kotlin bindings. The framework aims to enhance Gemini's capabilities, allowing it to use multiple extensions and execute background agent skills, facilitating automation of tasks for users.

Tech Optimizer

June 8, 2026

What Is OneLaunch.exe? Pros, Cons, and How to Remove It

OneLaunch is a software application that creates a personalized dock and desktop environment on Windows computers, often pre-installed or bundled with other software. It has received mixed reviews, with concerns about system slowdowns and its legitimacy. OneLaunch.exe is a background process supporting the OneLaunch application, which provides quick access to applications and updates but can consume system resources. The OneLaunch browser, installed alongside the main application, can alter browser settings and redirect searches, potentially leading to unwanted advertisements. While OneLaunch is not classified as traditional malware, it is often categorized as a Potentially Unwanted Program (PUP) due to its bundled installation and ability to modify system settings. It can monitor browsing habits and share data with third-party advertisers. Users report intrusive behavior, such as altering default browser settings, and it can negatively impact system performance. To remove OneLaunch, users should end the running process, uninstall the application, delete leftover folders, remove startup entries, and reset browser settings. OneLaunch may reappear due to accidental reinstallations, active browser extensions, lingering scheduled tasks, or hidden companion programs. Preventative measures include downloading from official sources, reading installation screens carefully, keeping systems updated, and performing regular system checks.

Tech Optimizer

June 8, 2026

Pentasystem partners with EDB to target sovereign AI with EDB PostgreSQL database

Pentasystem Technology has partnered with EDB to enhance enterprise-grade data management using the EDB PostgreSQL database. This partnership, announced on June 8, aims to provide cost-effective and stable database solutions amidst rising costs from existing database management systems. Pentasystem plans to explore projects related to cloud computing, artificial intelligence, and data warehousing, focusing on creating a comprehensive integrated data platform. Jong-jun Jang, CEO of Pentasystem, noted the synergy between EDB's technology and Pentasystem's implementation expertise, aiming to deliver improved performance and cost savings to clients in various sectors.