shared folder Archives

Tech Optimizer

July 28, 2026

ClamAV Setup: Linux Antivirus in 12 Steps [2026]

Malware can threaten Linux systems, which are often mistakenly believed to be immune to viruses. It can be introduced through email attachments, infected files, or compromised plugins, especially when Linux servers interact with Windows clients or handle internet uploads. ClamAV is an open-source antivirus engine maintained by Cisco Talos, designed for scanning mail traffic and file uploads. As of mid-2026, the stable release is ClamAV 1.5.x, with version 1.5.2 being the latest patch. To deploy ClamAV, users need root or sudo access on a compatible Linux machine, at least 2 vCPUs and 2GB of RAM, 5GB of free disk space, and outbound HTTPS access to ClamAV’s signature mirrors. The installation process involves several steps, including configuring freshclam for automatic updates, validating detection with the EICAR test file, and setting up cron jobs for regular scans. ClamAV can also be integrated with mail servers and a SIEM for enhanced security. Common pitfalls in deployment include skipping the initial freshclam run and using clamscan instead of clamdscan for repeated scans. ClamAV is free for commercial use and can also scan Windows systems, although it does not replace comprehensive endpoint protection solutions.

Winsage

June 10, 2026

Proton releases Proton Drive CLI for Windows, Mac, and Linux

Proton has released a new command-line interface (CLI) for Proton Drive, allowing users to manage encrypted files from a terminal on Windows, macOS, and Linux. The CLI includes features such as authentication via browser, uploading files while skipping existing ones, checking sharing status, and inviting collaborators to shared folders. Future updates will add capabilities for managing photos, sharing files through public links, creating custom albums, and switching between accounts. Installation on macOS and Linux involves downloading a pre-built binary or building from source. The release follows a significant performance upgrade of Proton Drive, which is now three times faster due to a unified Drive SDK that enhances cryptographic task execution and reduces battery drain on mobile devices.

Winsage

August 26, 2025

Windows 11 24H2 and Windows 10 Hit by Severe Lag After Microsoft’s August 2025 Update

Windows 11 Version 24H2, also known as the 2024 Update, is being rolled out to users via Windows Update. Eligible devices can check for the update in Settings > Windows Update. Devices running Windows 10 and Windows 11 versions 23H2, 22H2, and 21H2 will receive the update automatically, with options to schedule or postpone restarts. Copilot+ PCs will receive new AI features through the Windows Insider program, with availability varying by hardware and region. Users can seek help with update issues via the Get Help app or Microsoft support website. Known issues include: 1. NDI streaming performance degradation with OBS and NDI Tools (Confirmed). 2. WSUS installation failure for the August 2025 security update (Resolved). 3. WUSA installs failing from shared folders (Mitigated). 4. CertificateServicesClient error events (Confirmed). 5. Missing parental consent prompt for non-Edge browsers (Mitigated). 6. Easy Anti-Cheat causing blue screens (Resolved). 7. Incompatibility with sprotect.sys driver (Confirmed). 8. Dirac Audio devices losing audio output (Confirmed). 9. Camera use hanging apps on select devices (Confirmed). 10. Intel Smart Sound Technology driver causing blue screens (Confirmed). Workarounds and fixes are suggested for several issues, including switching NDI Receive Mode and copying .msu files locally for installation. Devices with certain drivers are blocked from receiving the update until compatibility issues are resolved.

Winsage

March 26, 2025

New Windows 0-Day Vulnerability Let Remote Attackers Steal NTLM Credentials

A critical vulnerability affecting various Windows operating systems, including Windows 7, Server 2008 R2, Windows 11 v24H2, and Server 2025, allows attackers to capture NTLM authentication credentials through interactions with malicious files in Windows Explorer. Exploitation can occur when users open shared folders, insert USB drives with malicious files, or view downloaded files. The vulnerability is similar to a previously patched flaw (CVE-2025-21377) but has not been fully documented. Security researchers have developed micropatches available for free until Microsoft releases a permanent fix. These micropatches support a wide range of Windows versions, including legacy and currently supported systems. The micropatches have been automatically distributed to affected systems with the 0patch Agent installed.

Winsage

March 26, 2025

New Windows 0-Day Vulnerability Let Remote Attackers Steal NTLM Credentials

A critical vulnerability affects all Windows operating systems from Windows 7 to Windows 11 v24H2 and Server 2025, allowing attackers to capture NTLM authentication credentials through malicious files viewed in Windows Explorer. Exploitation can occur when users open shared folders, insert USB drives with malicious files, or view previously downloaded files. The vulnerability is similar to a previously patched flaw (CVE-2025-21377) but has not been publicly documented. Security researchers have developed micropatches through 0patch to temporarily mitigate the issue, which will be available at no cost until Microsoft releases a permanent solution. The micropatches support various Windows versions, including legacy and currently supported systems, and can be automatically deployed without requiring system reboots.

Winsage

March 26, 2025

0patch releases yet another free fix for yet another 0day vulnerability in Windows that Microsoft has not addressed

0patch has released micropatches for a critical SCF File NTLM hash disclosure vulnerability affecting all Windows versions from Windows 7 to Windows 11 and Windows Server editions from 2008 to 2025. This vulnerability allows attackers to obtain users' NTLM credentials by having them view a malicious file in Windows Explorer. 0patch operates on a subscription model and provides security fixes for unsupported Windows versions, as well as complimentary patches for unaddressed vulnerabilities. Specific details about the vulnerability are currently withheld, pending an official fix from Microsoft.

Winsage

March 26, 2025

Windows 11 update breaks Veeam recovery, causes connection errors

Microsoft and Veeam are addressing connection errors affecting users of Windows 11 24H2 systems, particularly those restoring data with Veeam Recovery Media on builds 26100.3194 and higher. The errors occur when attempting to restore files from a Veeam Backup & Replication server or SMB network share, with messages indicating network connection failures and issues with the Local Security Authority. Veeam suggests using Recovery Media from older Windows 11 builds (26100.3037 or lower) as a temporary solution. Veeam clarified that they cannot provide pre-generated Recovery Media images due to proprietary components. Over 550,000 customers use Veeam products, including 82% of Fortune 500 companies. In February, Microsoft also addressed issues related to the KB5051987 update that affected Outlook functionalities on Windows 24H2 systems.

Winsage

March 25, 2025

New Windows zero-day leaks NTLM hashes, gets unofficial patch

A newly discovered zero-day vulnerability in Windows allows remote attackers to steal NTLM credentials by tricking users into opening malicious files in Windows Explorer. This flaw affects various Windows versions, including Windows 7 through Windows 11 and Server 2008 R2 to Server 2025. The vulnerability, identified by ACROS Security researchers, has not been assigned a CVE-ID and enables attackers to obtain NTLM credentials through methods like accessing shared folders or USB drives. While the exploit's criticality is moderate and depends on specific conditions, it has been linked to actual attacks. ACROS Security has released free micropatches for all affected Windows versions via its 0Patch service until Microsoft provides an official fix. Users can install the micropatch easily by creating an account and activating the 0patch agent, which applies the patch automatically.

Winsage

March 19, 2025

Microsoft Windows File Explorer Vulnerability Let Attackers Perform Network Spoofing

A vulnerability identified as CVE-2025-24071 has been discovered in Windows File Explorer, allowing attackers to extract NTLM hashed passwords with minimal user interaction. This high-severity flaw, termed “NTLM Hash Leak via RAR/ZIP Extraction,” exploits Windows Explorer’s automatic file processing when a specially crafted .library-ms file is extracted from a compressed archive. The file contains a malicious SMB path that triggers an NTLM authentication handshake, leaking the victim’s NTLMv2 hash. Microsoft addressed this issue in its March 2025 updates. A proof-of-concept exploit was published by researcher 0x6rss, and evidence suggests the vulnerability may have been exploited in the wild prior to its disclosure. Users are advised to apply security updates and implement protections against NTLM relay attacks.

Winsage

December 10, 2024

Microsoft NTLM Zero-Day to Remain Unpatched Until April

Microsoft has issued new guidance to help organizations defend against NTLM relay attacks following the discovery of a zero-day vulnerability affecting all versions of Windows Workstation and Server, from Windows 7 to Windows 11. This vulnerability allows attackers to capture NTLM credentials by tricking users into opening a malicious file. Microsoft has classified the vulnerability as having moderate severity and expects a fix to be rolled out in April. This is the second NTLM credential leak zero-day reported to Microsoft by ACROS Security since October. Microsoft has updated its guidance on enabling Extended Protection for Authentication (EPA) by default on LDAP, AD CS, and Exchange Server to mitigate NTLM-related vulnerabilities.