strategies Archives

Tech Optimizer

September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a new Windows implant called CLOSEDQUORUM, which operates without human operators by using four commercial large language models (LLMs) to autonomously decide on actions after deployment. The implant is a 16.4-megabyte executable that conducts reconnaissance on the target system and sends structured prompts to the LLMs, which respond with one of four actions: steal, inject, persist, or move. When the "steal" action is chosen, it simultaneously attacks three credential stores, extracting Windows credentials, browser passwords, and cryptocurrency wallet data. The "inject" action uses either Early Bird APC injection or process hollowing based on model recommendations. For persistence, it employs three overlapping mechanisms, including a Registry Run key, a scheduled task, and a WMI event subscription. To evade detection, CLOSEDQUORUM suppresses ETW telemetry and introduces delays before executing actions. It circumvents traditional command-and-control structures by calling legitimate API endpoints, making blocking these domains impractical. Talos introduced the CAIRN toolkit for detecting AI-integrated malware, which operates on metadata and employs rule-based detection. Unlike previous AI-assisted malware, CLOSEDQUORUM automates decision-making processes entirely, highlighting a significant evolution in malware capabilities. Security teams are advised to focus on behavioral detection strategies and utilize the YARA rule and CAIRN toolkit for identifying this threat.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a Windows implant called CLOSEDQUORUM, which automates cyberattack execution using four advanced commercial large language models: DeepSeek, Qwen, Mistral, and Google Gemini. The implant is a 16.4-megabyte executable that conducts reconnaissance on the system and formats the gathered data into prompts for the AI models. Each model votes on one of four actions: steal, inject, persist, or move, with the action receiving the most votes being executed. When stealing, CLOSEDQUORUM targets three credential stores, dumping LSASS memory and retrieving saved passwords from browsers and cryptocurrency wallets. The stolen data is encrypted and sent to the operator via Discord. For injection, it uses Early Bird APC injection or process hollowing based on model responses. The persist action creates three mechanisms for longevity, including a Registry Run key, a scheduled task, and a WMI event subscription. CLOSEDQUORUM evades detection by suppressing ETW telemetry and delaying activity to avoid sandbox analyses. It connects to legitimate API endpoints, making blocking ineffective without disrupting enterprise applications. Talos recommends behavioral combination detection strategies and the use of a YARA rule for detection. The CAIRN toolkit has been introduced to detect AI-integrated malware without executing binaries. Unlike previous AI-assisted malware, CLOSEDQUORUM removes human decision-making from the attack process.

Winsage

September 22, 2026

Microsoft is set to revamp the design of outdated dialogue boxes in Windows 11

Microsoft is modernizing the user experience in Windows 11 by redesigning all legacy dialog boxes in response to user feedback. March Rogers, Microsoft's design director, is leading this initiative to ensure consistency across the platform. Specific examples of outdated interfaces include the Speech settings dialog and the Windows recovery menu. Microsoft is using two strategies for updates: incremental updates, which introduce a dark theme across system dialogs, and comprehensive redesigns using the WinUI 3 framework. The Run menu has been completely revamped with a dark theme and improved features, while the previous version remains available for user preference. These updates are currently in test builds of Windows 11. Additionally, Microsoft is rolling out security patches and an emergency patch for issues from the September update.

Winsage

September 21, 2026

Internet Explorer is finally, truly dying, and Microsoft wants you ready by 2029

Microsoft has announced the impending cessation of support for IE Mode in the Edge browser, urging organizations to begin their migration strategies. Initially set to be supported until the end of 2029, Microsoft is emphasizing proactive planning for transitioning away from legacy systems. A communication from Microsoft highlighted the importance of providing a year’s notice before the end of support for IE Mode, which is crucial for IT administrators managing legacy applications. IE Mode uses the Chromium engine while allowing access to web pages through Internet Explorer 11's Trident engine. Organizations still dependent on IE Mode need to evaluate their IT infrastructure and identify critical applications that require updates or replacements. Microsoft is offering its App Assure service to help eligible customers improve compatibility with modern Windows platforms. Early planning is essential to reduce migration risks and maintain operational efficiency.

Winsage

September 21, 2026

7 Windows features I disabled after realizing nobody needs to use them

Windows 11 allows users to optimize their experience by disabling or uninstalling various features. 1. OneDrive: Users can unlink or uninstall OneDrive through File Explorer or the Settings app. 2. Copilot: Copilot can be uninstalled via the Settings app, and its keyboard shortcut can be customized. 3. Widgets: The Widgets board can be disabled or removed through the Settings app under Personalization. 4. Start Menu: Users can streamline the Start Menu by turning off pinned apps, recent items, and account notifications in the Settings app. 5. Phone Link: This feature can be minimized or uninstalled using the Settings app or Windows PowerShell. 6. Xbox Features: Xbox and Xbox Live can be uninstalled through the Settings app, and Game Mode can be toggled off. The Xbox Game Bar can be removed via PowerShell. 7. Search Results: To improve search efficiency, users can disable Bing and web results using Windows PowerShell.

Winsage

September 20, 2026

Windows 11 is getting a new look as Microsoft’s design boss confirms more ancient dialogs are next

Microsoft is modernizing outdated dialogs in Windows 11, including the Voice packages dialog, which currently lacks the rounded corners characteristic of the operating system's design. March Rogers, Partner Director of Design at Microsoft, confirmed that this dialog is scheduled for redesign, along with other legacy interfaces from older Windows versions. Microsoft is using a dual strategy for modernization: some dialogs are receiving dark mode support, while others are being rebuilt using WinUI 3. The File Properties dialog has already been successfully updated with this framework. The new Run dialog, developed with C# and WinUI 3, features dark mode and improved performance, while the legacy version will still be available. Additionally, the AutoPlay feature and Print Management app are also being redesigned in WinUI 3. Outdated interfaces, such as the local-account switching flow and the Windows 8-style input switcher on the login screen, are also set for redesign. Microsoft is updating various pages in the Settings menu, but the Control Panel will remain part of the Windows ecosystem.

AppWizard

September 20, 2026

Don’t buy a $500 dumbphone. These apps will make your Android phone calm

The growing interest in minimalist phones, or "dumbphones," is prompting users to seek ways to transform existing smartphones into more focused devices. Key strategies include managing notifications by turning off alerts for most apps and allowing only essential updates, utilizing app blockers like Switchly to limit distractions from social media, and employing BlockAds to eliminate intrusive ads. Users can also opt for minimalist, ad-free versions of apps, such as the Fossify suite for essential functions and Breezy Weather for weather updates. Customizing the home screen to reduce clutter, such as simplifying it to a single page and disabling unnecessary widgets, can further enhance focus. Additionally, customizing popular apps like Chrome, Gmail, and Google Maps by disabling features and notifications helps create a calmer experience. Overall, intentional choices and the right tools can lead to a more serene smartphone environment.

AppWizard

September 19, 2026

Russia’s national messenger app Max found to contain backdoor capable of secret screen captures

Researchers have found that Max, a messaging app mandated by the Russian government, can secretly capture screenshots, access sensitive information, impersonate users, and inject code into other applications. Developed by VK, the app integrates messaging, banking, and government services. Since September 1 of last year, it has been preinstalled on new smartphones, following the blocking of WhatsApp and Telegram. Despite its reach, it is not widely used in political circles, with insiders indicating that compliance with its use is performative.

AppWizard

September 19, 2026

Why ESG reporting standards matter in the Android and mobile tech ecosystem

ESG reporting standards are becoming increasingly important in mobile technology, affecting various aspects such as data management, material sourcing, energy consumption, privacy, supply chain dynamics, and product accountability. The lifecycle of mobile devices involves raw material sourcing, component manufacturing, device assembly, shipping, marketing, sales, updates, repairs, trade-ins, and disposal. Companies must understand ESG standards to create coherent sustainability narratives and may need to disclose supplier practices, carbon emissions, and governance documentation when partnering with larger firms. Consumers are now asking more questions about the longevity of software updates, repairability, data collection, packaging design, and the accountability of product creators. The rise of connected devices complicates ESG reporting due to extended product lifecycles and the need for ongoing software support. Companies should track product lifespan estimates, warranty data, repair trends, and update schedules to improve product quality and ESG reporting credibility. Emerging tech companies can start their ESG journey by cataloging product claims, consolidating evidence, designating ownership of records, and reviewing product lifecycle information. Global sustainability frameworks exist but may not align with consumer needs for straightforward product information. Successful mobile tech companies will need to bridge formal reporting requirements with accessible product-level communication. Trust and transparency in practices will increasingly influence consumer choices in mobile technology.