shell

Winsage
June 11, 2026
Security researcher Chaotic Eclipse has released a Windows BitLocker bypass tool named GreatXML, following a previously disclosed exploit targeting Microsoft Defender. The discovery was made accidentally and took four hours. A critical vulnerability exists for users who have used the Windows Defender Offline Scan feature, making them susceptible to the BitLocker bypass. The exploit involves copying an XML file and a recovery folder to the recovery partition and rebooting into the Windows Recovery Environment (WinRE). If the Defender offline scan was not initiated, users must log in to start it or find a way to boot into WinRE in offline scan state. GreatXML is the second BitLocker bypass tool released by Chaotic Eclipse, following the earlier exploit known as YellowKey (CVE-2026-45585), which has been patched by Microsoft.
Winsage
June 10, 2026
Microsoft has rolled out the "Low Latency Profile" feature for Windows 11 as part of the June update KB5094126, available for all Windows 11 24H2 and 25H2 PCs. This feature enhances responsiveness during tasks like launching applications and accessing the Start menu by temporarily increasing CPU clock speed to its maximum for 1 to 3 seconds during actions that cause lag. Users must install update KB5094126 and check for a build number of 26200.8655 for 25H2 or 26100.8655 for 24H2 to access the feature. The activation of the Low Latency Profile may not be immediately visible, and the HWiNFO app can be used to monitor CPU activity for confirmation of its activation.
Winsage
June 10, 2026
Microsoft's June 2026 Patch Tuesday update, KB5094126, introduced the Low Latency Profile feature in Windows 11, aimed at improving responsiveness of core shell experiences like the Start menu and Action Center. This feature optimizes CPU performance by allowing it to quickly reach maximum frequency for one to three seconds during user interactions, enhancing the speed of actions such as opening the Start menu. Users must install the update and may need to enable the feature manually using ViVeTool if it is not activated automatically. The Low Latency Profile is designed to work without significantly impacting battery life or thermal performance. Other enhancements in the update include Shared Audio for Bluetooth headphones, Multi-App Camera functionality, and improved Task Manager capabilities.
Winsage
June 9, 2026
Microsoft's June 2026 Patch Tuesday updates for Windows 11 include enhancements for versions 25H2, 24H2, and the new 26H1, which is designed for new PCs with Qualcomm ARM chips. Key features of the update include: - Shared audio allowing two users to listen to the same audio stream via Bluetooth LE audio accessories. - NPU usage displayed in Task Manager for devices with NPUs, including optional columns for NPU and NPU Engine. - Multi-App Camera support enabling multiple applications to access the camera stream simultaneously. - Improvements to the Magnifier feature for clearer announcements and support for magnifying protected content. - Customizable user folder names during setup. - Optimized Windows Search functionality for locating local files with just two characters. - Performance enhancements through a “Low Latency Profile” for faster app launches and core shell experiences. The update also addresses a BitLocker security bypass vulnerability (CVE‑2026‑45585) that could allow attackers to circumvent BitLocker Device Encryption. The KB5095051 patch for version 26H1 includes support for shared audio over Bluetooth LE and features from the previous month's update, such as Xbox mode and expanded archiving support in File Explorer.
Winsage
June 8, 2026
Microsoft has introduced an open-source version of Windows Terminal called Intelligent Terminal, which integrates artificial intelligence into the terminal environment. It functions as a built-in assistant, helping users with error explanations, command drafting, and troubleshooting within the terminal interface. Key features include an AI agent that assists when commands fail and retains memory of active and past sessions for context continuity. Upon first use, users can select their preferred AI agent, including options like GitHub Copilot, Claude, Codex, and Gemini. Intelligent Terminal allows customization with toggles for Automatic Error Detection and Automatic Error Suggestion. The interface includes an AI pane, session management capabilities, and the ability to resume previous sessions. Intelligent Terminal is available for download from the Microsoft Store or GitHub, and it is offered as a separate application rather than being included with standard Windows installations.
Winsage
June 4, 2026
Microsoft is enhancing Windows 11 by reducing reliance on web-based components, which have caused performance issues. The user interface framework WinUI will now be referred to simply as "WinUI," indicating no plans for a WinUI 4, to reassure developers. Microsoft is integrating WinUI into the Windows 11 shell more rapidly, moving away from web components. A specialized team is focused on creating "100% native" Windows applications, starting with an overhaul of the Start menu from React Native to WinUI components. Performance, memory optimization, and quality control are top priorities for the WinUI team. A new system compositor is being introduced to improve UI performance, and enterprise-focused DataGrid and Charting controls are being added to WinUI. Microsoft is expanding open-source development for WinUI, allowing public testing and contributions. Migration support between WinForms and WinUI is being enhanced for legacy applications. An experimental project called Microsoft UI Reactor is introduced to simplify native application development using C#. This shift towards native development aims to improve performance and efficiency for all Windows users.
AppWizard
June 4, 2026
A recent cybersecurity analysis from McAfee Labs has revealed a malware campaign involving WeedHack, which has garnered over 116,000 hits and is accumulating 2,000 to 3,000 malicious hits daily. WeedHack is marketed as malware-as-a-service (MaaS) and is accessible on the internet, allowing individuals with minimal technical skills to use it for harmful activities. A dedicated Telegram channel for WeedHack has over 850 members, many of whom are teenagers and young adults using the malware for cyberbullying. The malware spreads primarily through YouTube videos promoting Minecraft mods, which often conceal the WeedHack malware. Additionally, bad actors use SEO poisoning tactics to elevate fake websites posing as legitimate Minecraft clients. McAfee lists several legitimate clients targeted by WeedHack, including Meteor Client, Radium Client, and Wurst Client. For an additional fee, attackers can access premium features like webcam access, keylogging, and file management. McAfee advises players to be cautious when downloading mods and to seek help from trusted adults if approached by individuals claiming to have compromised their systems.
Search