NewApp Digest
search bot

services

Windows DNS Client Security Flaw Exposes Systems to Remote Code Execution
Winsage
May 15, 2026

Windows DNS Client Security Flaw Exposes Systems to Remote Code Execution

Windows systems are threatened by a vulnerability in the Windows DNS Client, identified as CVE-2026-41096, which allows remote code execution without user intervention. It has a CVSS base score of 9.8, indicating high severity. The flaw is a heap-based buffer overflow in the dnsapi.dll component, enabling unauthenticated remote attackers to execute arbitrary code. Exploitation requires sending a specially crafted DNS response to a vulnerable system, potentially leading to complete control over the host. Affected systems include supported versions of Windows 11 and Windows Server 2022/2025. Microsoft released security updates on May 12, 2026, and administrators are advised to apply these patches and reboot systems. Despite the severity, Microsoft currently classifies exploitation as “Exploitation Unlikely,” with no known public exploits or in-the-wild attacks.
From commit to cloud: Powering what’s next for PostgreSQL
Tech Optimizer
May 15, 2026

From commit to cloud: Powering what’s next for PostgreSQL

PostgreSQL is widely used across various industries, supported by Microsoft through significant investments, including 345 commits to the latest release and a dedicated team of contributors. It is recognized for its ability to handle complex production challenges, such as transactional integrity and concurrency management. Microsoft operates PostgreSQL globally, informing upstream contributions based on real-world deployment experiences. The database is increasingly integrated into AI applications, with Azure Database for PostgreSQL and Azure HorizonDB focusing on AI functionalities. Microsoft offers multiple deployment models to accommodate different workload needs, including Azure Database for PostgreSQL for open-source workloads and Azure HorizonDB for cloud-native systems. Recent contributions from Microsoft include enhancements in asynchronous I/O, vacuum behavior, and query planning. Azure HorizonDB is designed for high-throughput, low-latency systems requiring horizontal scaling. Microsoft also invests in developer tools, such as a Visual Studio Code extension for PostgreSQL, and sponsors PostgreSQL conferences and user groups globally.
Avast Antivirus: Essential Protection for Devices Worldwide
Tech Optimizer
May 14, 2026

Avast Antivirus: Essential Protection for Devices Worldwide

Avast Antivirus offers a suite of cybersecurity features, including real-time malware defense, phishing protection, and performance optimization for Windows, Mac, Android, and iOS. It has over 150 million users globally and provides both free and premium plans. The software employs a multi-layered defense strategy, including behavior-based detection and cloud-assisted scanning, and can perform quick and deep scans for malware. Key features include a Wi-Fi Inspector, Software Updater, and mobile protection against harmful applications. Avast blocks over 1.5 billion attacks monthly and offers parental controls in premium plans. It serves users in over 170 countries, particularly in North America and Europe, and operates under Gen Digital, which is publicly traded on Nasdaq.
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
Winsage
May 14, 2026

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

An anonymous cybersecurity researcher disclosed two new zero-day vulnerabilities affecting Microsoft systems: YellowKey and GreenPlasma. YellowKey is a BitLocker bypass that operates as a backdoor within the Windows Recovery Environment, impacting Windows 11 and Windows Server 2022/2025. Exploiting YellowKey involves copying specially crafted files to a USB drive, connecting it to a Windows computer, and rebooting into WinRE. The researcher expressed skepticism about Microsoft's response time to this vulnerability, noting that using TPM+PIN does not mitigate the risk. GreenPlasma is a privilege escalation vulnerability that allows an unprivileged user to obtain a shell with SYSTEM permissions through arbitrary section creation in Windows CTFMON. The proof-of-concept for this exploit is incomplete but indicates potential manipulation of trusted privileged services or drivers. Additionally, a related attack against BitLocker was detailed by French cybersecurity firm Intrinsec, which exploits a boot manager downgrade using CVE-2025-48804 to bypass encryption protections on fully patched Windows 11 systems. This method allows attackers to boot from a controlled WIM while the boot manager checks the legitimate one, executing with the decrypted BitLocker volume. Despite Microsoft releasing fixes for this defect in July 2025, a flaw in Secure Boot verification allows a vulnerable boot manager to bypass BitLocker safeguards. To mitigate these risks, enabling a BitLocker PIN at startup and migrating to a new boot manager certificate is recommended.
Forza Horizon 6 launch times and release date in your region
AppWizard
May 14, 2026

Forza Horizon 6 launch times and release date in your region

Forza Horizon 6 will be set in Japan and features a new Horizon Festival with street racing, drifting, and kei trucks. The early access launch for the Premium edition will be at 12:01 AM local time for Xbox and Xbox App users, and at 9:01 PM PDT for US Pacific timezone players on May 14. Steam users will have access at 4:01 AM UTC. Global release times include: 12:01 AM EDT (US Eastern), 5:01 AM GMT (UK), 6:01 AM CEST (Europe), 2:01 PM AEST (Australia), 4:01 PM NZST (New Zealand), and 1:01 PM JST (Japan). Preloads are available, requiring 160 GB on PC and at least 135 GB on Xbox, and PC gamers must update their Gaming Services for optimal performance.
KING VPN Announces Android VPN App with 40+ Server Locations for UK and Russian Users
AppWizard
May 14, 2026

KING VPN Announces Android VPN App with 40+ Server Locations for UK and Russian Users

Tech Digital Labs has launched KING VPN, an Android application designed for users in the UK and Russia seeking a mobile VPN experience. The app features over 40 server locations and a one-tap connection for easy use on smartphones and tablets. It is available for download on Google Play and offers a clean interface for straightforward connections. KING VPN supports browsing on public Wi-Fi and accessing apps in compliance with local network policies, with server options including the US, Turkey, UAE, Saudi Arabia, and China. The app is aimed at users who prefer a lightweight VPN experience without complex setup procedures.
The 'numbers just aren't there,' Dead Space producer says, and that's why we'll probably never see Dead Space 4
AppWizard
May 14, 2026

The ‘numbers just aren’t there,’ Dead Space producer says, and that’s why we’ll probably never see Dead Space 4

Chuck Beaver, a producer associated with the Dead Space franchise, stated that the chances of reviving Dead Space for a fourth installment are low due to shifting priorities within Electronic Arts (EA). He noted that EA requires evidence of substantial commercial success to greenlight new titles, but current market trends favor projects with blockbuster potential. The gaming industry is increasingly focused on games that provide ongoing revenue through live services, rendering single-player experiences like Dead Space less viable. The recent remake of Dead Space in 2023 did not achieve significant sales, and similar titles, such as The Callisto Protocol, also struggled commercially. EA's leadership has emphasized the importance of games connecting with players through shared-world features, complicating the future for traditional single-player narratives.
Search