source code

AppWizard
May 18, 2026
A developer named EVVIE has integrated a Linux Wayland Compositor with Minecraft, enabling users to display Linux desktop windows within the game. This integration allows for an immersive experience similar to using a virtual reality headset. In a demonstration, EVVIE played the rhythm game Osu! while navigating the Minecraft interface. The project is available on GitHub under the GPL license and requires Minecraft version 26.1.2, the Fabric mod loader, xkbcommon library version 1.11.0, and xkbcommon tools. Additionally, recent updates for Minecraft have introduced a friends list feature for the Java version.
Winsage
May 14, 2026
Microsoft has introduced MDASH (Multi-Model Agentic Scanning Harness), a security solution that uses over 100 specialized AI agents to identify software vulnerabilities. On May 12, 2026, MDASH identified 16 new vulnerabilities (CVEs) in the Windows networking and authentication stack, four of which were critical, including remote code execution vulnerabilities in tcpip.sys, ikeext.dll, netlogon.dll, and dnsapi.dll. Ten of these vulnerabilities can be accessed over the network without authentication. MDASH operates through a four-stage pipeline: analyzing source code, scrutinizing for suspicious elements, debating the exploitability of issues, and attempting to exploit vulnerabilities. The system is model-agnostic and allows integration of new models and domain-specific knowledge. MDASH scored 88.45 percent on the CyberGym benchmark, ranking first among competitors, although the comparison may not be entirely fair as it contrasts a comprehensive framework with individual models. The models used to achieve this score are not specified. MDASH is supported by Microsoft's Autonomous Code Security Team and is currently in a limited private preview for select customers.
Winsage
May 13, 2026
Microsoft has introduced a multi-model AI system called MDASH, designed to enhance vulnerability discovery and remediation processes. Currently in limited private preview testing with select customers, MDASH employs over 100 specialized AI agents for various classes of vulnerabilities, enabling autonomous discovery, validation, and demonstration of exploitable defects in complex codebases. The system operates through a structured pipeline that analyzes source code, constructs threat models, and validates findings using auditor and debater agents. MDASH has successfully identified 16 vulnerabilities in its initial tests, including two critical flaws affecting Windows networking and authentication: 1. CVE-2026-33824 (CVSS score: 9.8) - A double-free vulnerability in "ikeext.dll" allowing remote code execution via specially crafted packets. 2. CVE-2026-33827 (CVSS score: 8.1) - A race condition vulnerability in Windows TCP/IP ("tcpip.sys") enabling remote code execution through specially crafted IPv6 packets.
Winsage
May 13, 2026
Several notable Windows applications, including Space Cadet Pinball and Microsoft 3D Movie Maker, have been successfully ported to Linux. Space Cadet Pinball, originally part of the Microsoft Plus Pack for Windows 95, has been decompiled and rebuilt, now available across 14 platforms, including Linux, thanks to Muzychenko Andrey. The source code for Microsoft 3D Movie Maker was released by Microsoft, and a new fork has been developed by Mark Cave-Ayland and Ben Stone, enabling it to run on Linux. Their project also includes bug fixes, 64-bit compatibility, and builds for ARM64 Windows, with plans for a Raspberry Pi version.
AppWizard
May 9, 2026
Obtainium is a tool designed to streamline the update process for Android applications distributed through platforms like GitHub. It supports over 10 app distribution sites, offers compatibility with various release methods, and allows customizable filtering and settings. Users can extract APK files from HTML and share app settings through data import and export functionalities. To install Obtainium, users can download it from GitHub, IzzyOnDroid, or F-Droid, with a focus on installing via F-Droid. The installation process involves opening the official GitHub repository, tapping the F-Droid banner, and following prompts to install and launch the app. Upon first launch, users must allow notification permissions and adjust battery settings. To add apps, users enter the app source URL and select the appropriate source. Obtainium may request permissions to install unknown apps during installation. The app includes an Import/Export tab for managing app settings and a Settings tab for customizing update intervals, source-specific settings, themes, and app sorting preferences.
AppWizard
May 9, 2026
Cybersecurity researchers from ESET have discovered 28 fraudulent applications on the Google Play Store that falsely claimed to provide access to call histories for any phone number. These apps have been downloaded over 7.3 million times, with one app alone accounting for over 3 million downloads. The operation, named CallPhantom, primarily targeted Android users in India and the Asia-Pacific region. Users were lured into subscription services, paying for access to fictitious data, including call histories and SMS records, but received only randomly generated information. Some apps were published under the developer name "Indian gov.in" to create a false sense of trust. Payments were processed through the Google Play Store or third-party applications like Google Pay and Paytm. Users who subscribed via Google Play may be eligible for refunds, while those who used third-party payment methods may not be able to recover their funds. The fraudulent activity may have been ongoing since at least November 2025.
TrendTechie
May 5, 2026
qBittorrent 5.2.0 was released on May 3, 2026, as an open-source torrent client developed with the Qt toolkit. It is available for Linux, Windows, and macOS, and its source code is on GitHub under the GPLv2+ license. The project started with version 4.0 in November 2017, followed by versions 5.0 in September 2024 and 5.1 in April 2025. Key features include an integrated search engine, RSS feed subscription, remote management, and advanced torrent settings. Version 5.2.0 includes enhancements such as an advanced tracker status filter, removal of subcategory restrictions, asynchronous block calculations, reduced resume times for paused downloads, configurable RSS feed refresh times, SOCKS4/SOCKS4a proxy support for the search engine, and various improvements to the web interface and user customization options. Support for builds with Qt 6.5 has been discontinued.
AppWizard
May 5, 2026
A North Korean hacking group has targeted a digital gaming platform popular among the Korean ethnic enclave in China, using a sophisticated strategy to infiltrate Android applications. Researchers from Eset discovered that an app on the platform contained a backdoor known as BirdCall, linked to North Korea. The official website for the gaming platform hosted the same suspicious APK file. A second Android file associated with another game on the same site was also found to contain the BirdCall backdoor. This supply-chain attack was attributed to the threat actor ScarCruft (APT37), active in Asia and extending into Europe and the Middle East since late 2024. The hackers likely compromised the web server to recompile original APKs with the backdoor, which can collect sensitive information such as contacts, SMS messages, call logs, documents, media files, and private keys, and can take screenshots and record audio. The malware disguises its command and control traffic among regular internet traffic, primarily using Zoho WorkDrive for operations.
Search