Security Archives

Winsage

August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.

Winsage

August 12, 2026

Windows 11 Gets Dynamic File Sizes in File Explorer, Low Latency Profile for Apps, and More

Microsoft's August update, KB5121003, includes several enhancements: - The File Explorer now displays file sizes in kilobytes (KB), megabytes (MB), or gigabytes (GB) dynamically, simplifying file management. - The Low Latency Profile is expanded to more applications, improving launch speeds for Microsoft apps like Edge and Outlook by up to 40%, and other system components by up to 70%. - Windows Search has been improved to better handle typos and incomplete queries, prioritizing relevant results and indexing files across the operating system. - The Start Menu now more effectively respects user preferences, ensuring consistent settings.

Winsage

August 12, 2026

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

A security researcher named Nightmare Eclipse has discovered a vulnerability in Windows, called ShieldBreak, which allows hackers to gain system-wide access to users' devices and sensitive data by exploiting a flaw in Windows Defender. The vulnerability affects Windows 10, Windows 11 (including version 25H2), and Windows Server 2025. A proof-of-concept exploit has been provided, requiring users to run a Windows application to trigger the vulnerability. Security researcher Will Dormann confirmed that Windows Defender must be enabled for the exploit to work. Microsoft has not yet released a patch for ShieldBreak, which is classified as a zero-day vulnerability. This discovery follows previous vulnerabilities disclosed by Nightmare Eclipse, including RoguePlanet, for which Microsoft issued an inadequate patch. The situation has heightened tensions between the researcher and Microsoft regarding the handling of bug reports, especially after Microsoft threatened legal action against researchers disclosing zero-days outside established protocols. The disclosure of ShieldBreak occurred shortly after Microsoft's monthly security patch releases, which have been increasing in number.

Winsage

August 12, 2026

Windows 11 ships nine AI components, you can delete one

Microsoft announced the release of new AI components for Windows 11 Home and Pro editions, documented in KB5101684 on July 28, 2026, introducing the Windows Copilot+. Additionally, updates KB5121003 and KB5121000 were released on August 11, 2026, focusing on performance enhancements, bug fixes, and optimizing user experience.

Winsage

August 12, 2026

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Chaotic Eclipse, a security researcher, has revealed a proof-of-concept (PoC) for a new vulnerability called ShieldBreak, which is a zero-day flaw in Microsoft Defender that bypasses the patch for the previously identified CVE-2026-50656 (RoguePlanet). This vulnerability could allow attackers to execute code at the SYSTEM level on affected Windows systems. Chaotic Eclipse tested the PoC on the latest versions of Windows 11 and Windows Server 2025, achieving a 100% success rate. Windows 10 and its server editions are not supported by the PoC but remain vulnerable. Microsoft had issued security updates for RoguePlanet, which has a CVSS score of 7.8, affecting the Malware Protection Engine and representing a local privilege escalation issue. Chaotic Eclipse has previously disclosed two other zero-day vulnerabilities, YellowKey and GreenPlasma, which affect BitLocker and the Windows Collaborative Translation Framework, respectively. Microsoft criticized the public disclosure of these vulnerabilities as irresponsible and emphasized the importance of Coordinated Vulnerability Disclosure.

Winsage

August 12, 2026

Smart PC users are upgrading to Windows 11 Pro while it’s only $10

Windows 11 Pro is available for .97, reduced from its regular price of 9, until August 20. The operating system features a modern user interface, enhanced multitasking, improved security with BitLocker, virtualization capabilities with Hyper-V, integration with Azure AD, and an AI-powered Copilot.

Winsage

August 12, 2026

Microsoft Windows 0-Day Attack Deploys Lazarus Rootkit—Patch Now

Microsoft released a patch for a zero-day vulnerability, CVE-2026-68820, which is being exploited by cybercriminals, specifically the North Korean hacking group Lazarus. This vulnerability allows unauthorized attackers to elevate their privileges locally, posing a significant risk to affected systems. The August 2026 Patch Tuesday update addressed 421 vulnerabilities, including three zero-days, with CVE-2026-68820 being the only one confirmed to be actively exploited. The vulnerability's impacts on confidentiality, integrity, and availability are rated as High. Users of Microsoft Windows 10, Windows 11, and various versions of Windows Server should prioritize deploying the patch for this vulnerability.

Tech Optimizer

August 12, 2026

NordVPN outpaces competitors in independent tests, with top marks for speed and malware protection

NordVPN received the highest AAA certification from West Coast Labs for its built-in antivirus tool, achieving a 99.1% malware detection rate. Artifact Security recognized NordVPN as the fastest and most reliable VPN provider in a global performance test, where it scored 91 and earned the Platinum award. In testing on the Windows platform, NordVPN recorded an average download speed of 271.9 Mbps and a peak median of 568.4 Mbps, with a tunnel establishment time of 1.8 seconds and a 98% success rate. All tested providers, including NordVPN, passed various leak tests without data escaping the encrypted tunnel.

AppWizard

August 12, 2026

Russia charges Telegram CEO Pavel Durov with aiding terrorism

Russian authorities have charged Pavel Durov, the founder and CEO of Telegram, with aiding terrorism and placed him on an international wanted list. The Federal Security Service (FSB) alleges that Telegram facilitates criminal activities and operations related to Ukrainian intelligence, classifying it as a facilitator of "acts of sabotage and terrorism, mass murder, and cyber fraud." Instead of targeting the platform with fines or restrictions, Russian authorities are pursuing Durov personally. If convicted in Russia, he faces the possibility of life imprisonment. This case reflects a broader trend of governments holding technology executives accountable for content and activities on their platforms, with similar legal pressures observed on other platforms like Meta, TikTok, Snap, and YouTube.

Tech Optimizer

August 12, 2026

Google adds Gemini code conversion for PostgreSQL migrations

Google has enhanced its Database Migration Service with AI-assisted code conversion for PostgreSQL migrations from commercial databases. This feature addresses the challenge of converting stored procedures, triggers, and custom functions written in proprietary languages. The new workflow allows users to view original source code alongside suggested PostgreSQL PL/pgSQL output, enabling inline explanations, code editing, and validation before deployment. The service analyzes schema context across the migration project, considering table relationships and data types. It combines rule-based conversion with AI-generated suggestions and includes PostgreSQL syntax validation. The conversion process remains within the customer's Google Cloud project, adhering to security protocols. This feature aims to reduce the time for code conversion from months to days, allowing database specialists to focus on verification and application modifications. Once validated, the converted code can be applied to staging systems for testing before live migration.