NewApp Digest
search bot

Security

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows
Winsage
August 13, 2026

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows

Nightmare Eclipse has released a new zero-day exploit called ShieldBreak, which can bypass Microsoft's RoguePlanet patch (CVE-2026-50656) and allow attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit has been confirmed by security expert Kevin Beaumont, who provided detection methods for it. ShieldBreak is the tenth zero-day from Nightmare Eclipse since April and was released shortly after Microsoft's monthly Patch Tuesday. The exploit allows local privilege escalation and has a 100% success rate on the latest version of Windows 11 and Windows Server 2025, while Windows 10 remains vulnerable. Microsoft is aware of the vulnerability and is investigating it, emphasizing the importance of coordinated vulnerability disclosure. Previous exploits from Nightmare Eclipse include LegacyHive and GreatXML, with earlier vulnerabilities having been patched but recent ones still unaddressed. Microsoft had threatened legal action against Nightmare Eclipse in May but later reconsidered its approach to vulnerability disclosure.
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’
Winsage
August 13, 2026

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

Security researcher Nightmare Eclipse has released a zero-day exploit named ShieldBreak that allows privilege escalation on Windows by targeting a vulnerability in Microsoft Defender. This exploit, designated as CVE-2026-50656, is categorized as a race condition vulnerability and affects the latest versions of Windows 11 and Windows Server 2025, with potential impacts on Windows 10. The exploit was disclosed on June 9, 2026, and Microsoft acknowledged the issue on June 16, rolling out fixes by July 9. The mechanics of ShieldBreak involve manipulating Defender’s scan path and executing a scheduled task to gain System-level privileges. Experts have noted differences between ShieldBreak and the previously known RoguePlanet exploit, emphasizing that ShieldBreak requires Defender to be active to function.
Windows 10's latest patch keeps your Secure Boot certificates on track
Winsage
August 13, 2026

Windows 10’s latest patch keeps your Secure Boot certificates on track

A recent update has been released, addressing security vulnerabilities and improving system functionality. Key improvements include a fix for the Backup feature, resolving an "invalid credentials" error that caused automatic backups to fail when using Server Message Block (SMB). The update also enhances the Secure Boot feature by introducing high-confidence device targeting data, allowing more devices to receive new Secure Boot certificates. This update addresses outdated Secure Boot certificates for Windows 11 and Windows 10 users. The update, identified as KB5120249, is under 1 GB and is available only to PCs enrolled in the Extended Security Updates (ESU) program, which ensures Windows 10 PCs receive security updates until at least October 2027. Non-enrolled PCs lost security update support in October 2025.
Microsoft is cutting off new Office features on Windows 10 soon
Winsage
August 13, 2026

Microsoft is cutting off new Office features on Windows 10 soon

Devices using Microsoft 365 Apps on Windows 10 will experience a significant transition with the rollout of version 2608, which will end feature enhancements for applications like Word, Excel, and PowerPoint. Security updates will continue until October 10, 2028. The OneDrive desktop app on Windows 10 version 22H2 will also receive updates until October 10, 2028, while older versions will not. Microsoft recommends transitioning to Windows 11 to avoid performance and reliability issues with Microsoft 365 Apps.
Mine Treasures, Capture Aliens, Profit in DIG Raiders: Anomaly Extraction on PC Sept. 11
AppWizard
August 13, 2026

Mine Treasures, Capture Aliens, Profit in DIG Raiders: Anomaly Extraction on PC Sept. 11

DIG Raiders: Anomaly Extraction is set to launch on PC via Steam on September 11, 2026, priced at .99, with a 30% discount during the initial launch period. The game features co-op mining gameplay involving exploration and encounters with aliens, set against the backdrop of a crashed alien spacecraft beneath a city. Players will engage in comedic tasks across nine levels, including locations like a bank vault and a space station, while wearing one of seven animal costumes that provide various advantages. The game includes a PvE mode where players repair an alien monolith and a chaotic 4v4 multiplayer mode. Wealth gained can be reinvested in a marketplace, and players must manage their finances to survive. The game supports multiple languages, including English, French, German, and others.
PSA: Don't trust that Chrome update popup
Tech Optimizer
August 13, 2026

PSA: Don’t trust that Chrome update popup

Users of Chromium-based browsers, including Google Chrome, Brave, and Opera, are experiencing deceptive pop-ups that falsely claim a "Critical Update Required" or "Update available." These notifications are part of a scam designed to trick users into downloading malware disguised as software updates. Clicking on these prompts can lead to the download of harmful scripts, such as .vbs or .exe files, which traditional antivirus software often fails to detect. The issue is linked to compromised browser extensions that fetch malicious scripts from external servers. A specific extension, QuickLens – Search Screen with Google Lens, has been identified as a source of these pop-ups and has been removed from the Web Store. Other extensions, like “Enable Right Click & Copy Smart Unlock + OCR,” have also been implicated despite their popularity. Users are advised not to click on any links or run downloaded files and to check their browser settings for legitimate updates, as well as to audit and disable suspicious extensions.
Search