Security Archives

Winsage

August 8, 2026

Windows 11 26H2 is a small update with big quality-of-life improvements, expected around October 2026

Windows 11 will undergo a significant transformation with the upcoming annual update, version 26H2, which introduces enhancements to the interface, search functionality, backup processes, and AI integration. The update will allow users to reposition the taskbar to any edge of the screen and adopt a smaller layout with reduced icon sizes. The Start menu will have new configuration options and a privacy feature for hiding account details during screen sharing. Search functionality will prioritize local content over web results, with an option to disable web results entirely. Cloud-assisted setup and recovery will become a default setting for eligible Microsoft Entra devices, automatically saving configuration settings and app lists. Copilot will be more integrated into daily operations, including a dockable side panel in File Explorer. Updates will also be made to traditional system tools, including a modernized Run dialog and enhanced security for administrator-level operations. The support timeline for Windows 11 installations will reset, with Home and Pro editions receiving 24 months of support and Enterprise and Education editions receiving 36 months. The hardware requirements remain unchanged, and the rollout of 26H2 is anticipated in the latter half of 2026, likely around October.

Winsage

August 8, 2026

Windows 11 can feel loud and distracting out of the box — here are the features I disable immediately to make the OS calmer and easier to use

- Lock Screen Notifications can be disabled to prevent distractions on the lock screen. - Start Menu Recommendations can be turned off to streamline access to pinned apps. - To disable Recommended section in the Start menu, go to Settings > Personalization > Start and toggle off options for recent apps, recommended files, and account-related notifications. - Web highlights in Windows Search can be disabled for a more focused search experience by navigating to Settings > Privacy & security > Search and toggling off "Show search highlights." - Taskbar app badges can be turned off to reduce interruptions by going to Settings > Personalization > Taskbar and unchecking "Show badges on taskbar apps." - Desktop icons can be hidden by right-clicking on the desktop, selecting "View," and unchecking "Show desktop icons" for a clearer workspace.

Tech Optimizer

August 8, 2026

Hackers use fake Adobe and Zoom updates to load malware onto victim devices — here’s what to look out for

Securonix Threat Research has identified a cyber campaign called SMOKE#SCREEN that uses deceptive tactics to trick users into installing weaponized versions of ScreenConnect, a legitimate remote monitoring software. The attackers disguise their malicious intent with fake update notifications for applications like Zoom and Adobe, as well as counterfeit business documents. This campaign allows attackers to gain persistent remote access to victims' systems, disable security protections, and exploit trusted services like Dropbox and Cloudflare for delivering malicious payloads. Victims have been reported on both Windows and macOS platforms. Businesses are advised to verify updates through official channels and train staff on the risks of unexpected software installations.

BetaBeacon

August 8, 2026

Mastering Sideloading: Safe APK Installation on Android

People reach outside the Play Store to download APKs for emulators, early builds of apps, region-locked releases, modded versions of apps, and apps like betting and casino apps that are restricted by Google's store policies. Google has found that there is over 50 times more malware coming from internet-sideloaded sources than from apps on Google Play. Starting in September 2026, Google will require every developer to verify their identity for apps installed on certified Android devices, including sideloaded apps. To sideload without getting burned, users should pull APKs from reputable sources, match permissions to the job, keep Play Protect switched on, and revoke the "install unknown apps" permission after installation.

AppWizard

August 7, 2026

Android Canary 2608 lets you customize Quick Settings layout on Pixel

Google has released the Android Canary build version 2608, which allows users to customize the Quick Settings layout. The build, ZP11.260717.006, includes the August 2026 security patch and is compatible with various Pixel devices, including Pixel 10a, 10, 10 Pro, 10 Pro XL, 10 Pro Fold, 9a, 9, 9 Pro, 9 Pro XL, 9 Pro Fold, 8a, 8, 8 Pro, 7a, 7 Pro, 7, 6a, 6 Pro, 6, Pixel Fold, and Pixel Tablet. This will be the final release for the Pixel 6 and 6 Pro, and transitioning to stable production releases will require flashing the most recent production build, which involves a data wipe. The update also features AI-generated lockscreen clocks and a returning app lock feature, accessible through Settings > Settings & privacy > Privacy > App lock. Users can customize the Quick Settings layout by tapping the pencil icon and accessing a new “Layout” tab, allowing for reordering of the Brightness bar, Tiles, and Media player with six possible combinations.

Winsage

August 7, 2026

Moving the Microsoft Edge extensions ecosystem forward with Manifest Version 3

In 2020, Microsoft committed to Manifest Version 3 (MV3) for the Chromium extensions platform. As of now, 95% of the top MV2 extensions have transitioned to MV3 in the Edge Add-ons store. Starting in August 2026, Microsoft Edge will begin transitioning consumers away from MV2 extensions, aiming to complete this by the end of 2026, with enterprise deprecation expected in early 2027. Currently, only 58 MV2-based extensions show meaningful usage, and three of these lack an MV3 version. Notifications will be sent to users and developers regarding the transition, and MV2 extensions will gradually be disabled by default. Developers are encouraged to finalize their transition to MV3 and submit updates via Microsoft Partner Center.

Winsage

August 7, 2026

Microsoft Flags BNB Chain Malware Campaign Targeting Windows Users

Microsoft has identified a sophisticated malware campaign that uses the infrastructure of BNB Chain to spread harmful code through compromised websites. The attackers deceive visitors into executing malicious commands disguised as standard security checks, exploiting vulnerabilities in conventional website security measures. This campaign affects both businesses and individual users, utilizing ClickFix lures and EtherHiding techniques. An injected Base64-encoded JavaScript communicates with a BNB Smart Chain RPC gateway to facilitate these malicious operations.

Winsage

August 7, 2026

Windows 10 Is No Longer As Safe As It Used To Be – So Why Aren’t More People Updating?

Windows 11 has faced criticism from users, despite improvements like the option to uninstall AI features. Some users are attempting to run it on unsupported hardware, leading to frustrations, especially after updates. The percentage of Windows 10 users decreased from about 42% in October 2025 to 26% by May 2026, following the end of support for Windows 10. Safety for Windows 10 users depends on participation in the extended support program and staying updated, but risks include the expiration of security certificates crucial for Secure Boot, set to expire in mid-2026. Microsoft is issuing updates for eligible machines, but support is not indefinite, and older systems may face difficulties. Third-party applications may also withdraw compatibility with Windows 10. Alternatives to upgrading include Apple's Mac OS and Linux, which has seen a rise in market share, surpassing 4.7% globally by 2025. Linux distributions like Zorin OS and Linux Mint mimic the Windows experience, and ChromeOS can be installed on various computers.

Winsage

August 7, 2026

This ‘classic’ decades-old SQL injection flaw could let hackers take over entire Windows servers, thanks to a nifty database trick

Security researchers from Huntress discovered a sophisticated SQL Injection (SQLi) attack that led to the deployment of a rare toolkit called Khunt. The attackers exploited a public-facing application backed by an Oracle database by failing to validate user input, allowing malicious SQL commands to be executed. The Khunt toolkit enabled activities such as executing operating system commands, stealing credentials, and exfiltrating registry hive data. Experts recommend robust defense mechanisms, including input sanitation, regular security audits, and the implementation of web application firewalls to protect against such attacks.

Winsage

August 7, 2026

Exclusive: Turbo VPN releases emergency Windows update after TechRadar uncovers persistent IP leaks

Turbo VPN's Windows client has faced significant privacy issues, including active IP leaks and misconfigured protocols. Owned by Innovative Connecting Pte. Limited in Singapore, it has over 500 million downloads on Android. Initial testing revealed that version 3.6.0.0 did not resolve IPv6 address leaks, despite IPv4 addresses being masked. A subsequent update, version 3.7.0.0, successfully blocked unencrypted IPv6 traffic while maintaining IPv4 masking. Testing showed that the proprietary protocol Lepus functions differently from standard VPNs, routing non-browser data through a local proxy without encryption. Turbo VPN's response indicated that the observed issues were limited to specific network configurations, and they have since implemented improvements in the latest version. However, detailed information about their proprietary protocols remains unavailable.