systems Archives

Winsage

September 4, 2026

Microsoft says KB5120998 Windows update resets desktop settings

Microsoft has acknowledged an issue affecting some Windows devices after the installation of the KB5120998 preview update released on August 27, 2026. This issue primarily impacts Windows 11 versions 24H2 and 25H2, causing desktop settings, including wallpaper and themes, to reset or be lost, often resulting in a solid black background. Users are unable to manually restore their customized settings due to the issue preventing the correct loading of settings. The KB5120998 update was intended to enhance the Start menu, taskbar, and Windows search but inadvertently introduced complications, including changes to mouse settings that cannot be restored. The update is optional but installs automatically for users with the "Get the latest updates as soon as they're available" feature enabled. A similar bug occurred in February 2020 with the KB4539602 update, which disrupted desktop wallpaper functionality.

Winsage

September 4, 2026

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Microsoft has identified a new malware campaign called TerminalFix that uses fake CAPTCHA prompts to trick Windows users into executing malicious commands. This campaign is a variation of ClickFix attacks and employs deceptive pages that impersonate reputable services like Cloudflare. Instead of traditional CAPTCHA challenges, users are instructed to open PowerShell or Command Prompt and paste in commands, allowing attackers to execute complex scripts more easily. TerminalFix initiates a multi-stage intrusion, granting attackers persistent proxy access to the infected machine, which can lead to further exploitation of the company's network. The campaign relies on social engineering tactics, requiring user compliance with counterfeit verification instructions. Microsoft has released mitigation guidance, recommending restrictions on PowerShell access, monitoring for DLL sideloading, blocking outdated Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The campaign poses significant risks to enterprise networks, but individual users should also be cautious about executing commands requested by websites.

Winsage

September 4, 2026

Windows 11 will start telling apps your age, but Microsoft says it won’t share your birthday

Microsoft is integrating age verification directly into Windows 11, allowing applications to access users' age ranges (e.g., 13-15 or 18+) without disclosing their actual birthdays. This is facilitated through new system-level APIs, specifically the GetUserAgeRangeAsync function, which returns one of five defined age ranges: Under 10 (0-9), 10-12 (10-12), 13-15 (13-15), 16-17 (16-17), and 18+ (18 and above). Another API, GetAgeVerificationStatusAsync, indicates whether the age was independently verified with statuses like Verified, Unverified, OptedOut, TemporarilyUnavailable, or NotApplicable. Microsoft validates the identity of the calling app to ensure security, limiting access to these age signals. This initiative aligns with regulatory demands for enhanced child safety measures in regions like the UK, EU, and U.S., where states are moving toward operating-system-level mandates for age verification.

Tech Optimizer

September 3, 2026

Avast Antivirus Zero-Day PoC Lets Attackers Dump SAM Database and Gain SYSTEM Shell

A public proof-of-concept (PoC) repository has revealed a local privilege escalation zero-day vulnerability in GenDigital's Avast Antivirus, allowing attackers with local execution access to extract the Windows Security Account Manager (SAM) database and execute a shell with NT AUTHORITYSYSTEM privileges. The flaw is located in the Avast Sandbox component and could enable a complete local takeover of the system. The PoC is compatible with any version of Avast Antivirus and has been tested on fully patched versions of Avast and Windows 11 25H2. The repository does not provide a formal release, CVE identifier, or patch details. The vulnerability may also affect other GenDigital products like AVG and Norton. Security teams are advised to monitor for suspicious activities related to Avast services and restrict local administrator access. Organizations should inventory their deployed versions and apply vendor-provided updates as they become available.

Tech Optimizer

September 3, 2026

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Nightmare Eclipse, a security researcher known for identifying vulnerabilities in Microsoft products, has shifted focus to other vendors, revealing a zero-day vulnerability called FalconFlank that targets CrowdStrike’s Falcon endpoint security platform. FalconFlank is a privilege escalation vulnerability that exploits the Microsoft Office malicious macros remediation feature within CrowdStrike Falcon. CrowdStrike is investigating the claims and advises customers to disable the Microsoft Office File Suspicious Macro Removal Windows policy setting while assuring them of continued protection through Cloud Anti-malware settings. The exploit works on fully updated Windows 11 25H2 and Windows Server 2025 systems running CrowdStrike Falcon with Optimal Protection enabled. Nightmare Eclipse has also discovered other vulnerabilities, including HardBreacher affecting Kaspersky’s endpoint antivirus and PrettyPrague in Gen Digital’s Avast antivirus, which allows attackers to dump the SAM database. Gen Digital is developing a patch for the Avast vulnerability, while Kaspersky has not commented. Additionally, Nightmare disclosed a memory corruption zero-day vulnerability in Nvidia, named GreenSection, which causes system crashes.

AppWizard

September 3, 2026

Guild Wars 3 is a lot smaller scale than Guild Wars 2 because of the new approach to combat and movement: ‘You would probably see about 20 players in a large combat scenario’

Guild Wars 3 will enter beta next year and features a maximum player count of around 20 in large combat scenarios, aimed at providing a more focused and visceral gameplay experience. The game emphasizes meaningful collaboration among players and promises a seamless interaction experience with fewer loading screens. Cities and towns will have no player cap, creating bustling social hubs, while traditional server barriers will be removed for easier play with friends. Party sizes will be limited to four players, which may affect regular gaming groups.

Winsage

September 3, 2026

Microsoft is auto-enabling Memory Integrity on Windows 11 PCs from October. Why you shouldn’t turn it off

Starting in October 2026, Microsoft will automatically activate memory integrity for eligible Windows 11 devices through the Patch Tuesday update on October 13. Memory integrity, or Hypervisor-protected Code Integrity (HVCI), protects the core of Windows by ensuring that kernel-mode drivers are verified before execution, preventing malware from exploiting vulnerable drivers. Eligible devices must have an Intel 8th-generation processor or newer, AMD Zen 2 or newer, Qualcomm Snapdragon 8180 or newer, at least 8GB of RAM, a 64GB SSD, virtualization enabled in firmware, and compatible drivers. Secured-core PCs already have this feature enabled. Windows will assess device readiness before activation and will respect user settings if memory integrity has been intentionally disabled. Users can check memory integrity status in Windows Security under Device security. Incompatible drivers may cause issues, and conflicts will be logged in the Event Viewer. Microsoft is pushing this update due to increased security threats and aims to protect users who have upgraded their systems without performing clean installs. If issues arise with memory integrity enabled, users can identify problematic drivers in the CodeIntegrity event log.

Winsage

September 3, 2026

Windows 11: Memory Integrity enabled automatically from October

Microsoft plans to automatically activate Memory Integrity on a broader range of eligible systems starting October 2026, rolling it out through standard Windows quality updates. Prior to activation, Windows will assess hardware, drivers, and performance to ensure compatibility. Memory Integrity, part of Virtualization-based Security (VBS), uses the Windows hypervisor to create a secure environment for integrity checks on kernel code. Compatibility with drivers is crucial, as many older applications may not meet the stricter standards required for HVCI. Potential compatibility issues may arise with anti-cheat solutions, third-party input methods, and banking protection programs, which could lead to software malfunctions or boot failures. A readiness check will evaluate hardware compatibility, with eligible systems including Intel processors from the 8th generation, AMD processors from Zen 2, and Qualcomm Snapdragon 8180 or newer, along with specific RAM and storage requirements. The rollout will be gradual, and users who previously disabled HVCI will not face unexpected reactivation. Microsoft recommends updating affected applications or drivers in case of compatibility issues.

Winsage

September 2, 2026

Microsoft will expand Windows 11 Memory Integrity feature to more PCs starting in October — security feature reduces gaming performance on some systems

Microsoft will automatically enable its Memory Integrity feature on more eligible Windows PCs starting in October 2026, enhancing kernel-level protection. PCs with Memory Integrity currently disabled will retain their settings. Windows will also activate Virtualization-based Security (VBS) where necessary, which supports Memory Integrity. An automatic assessment will determine device eligibility based on hardware capabilities and compatibility. The rollout applies to Windows 11 installations meeting specific hardware specifications, including an 8th Generation or newer Intel processor or AMD Zen 2 or newer processor, at least 8GB of RAM, an SSD with a minimum of 64GB, compatible drivers, and enabled hardware virtualization. Memory Integrity, also known as Hypervisor-Protected Code Integrity (HVCI), has been part of Windows since the Windows 10 era and is now more integral to Windows 11 security for new installations. However, it may impact gaming performance, leading some gamers to disable it, which Microsoft has acknowledged in its recommendations.

AppWizard

September 2, 2026

Star Wars Zero Company is a great game that’s busted and may never be fixed

Star Wars Zero Company has an aggregate critic score of 85 on Metacritic and is regarded as one of the most acclaimed Star Wars games recently. The game features tactical gameplay similar to X-COM but suffers from technical issues, particularly on PC, including traversal stutters, input lag, and game-breaking bugs. Players have reported frequent crashes, with some needing to restart missions multiple times. The game has a "mostly positive" rating on Steam from nearly 9,000 reviews, yet many highlight similar performance problems. Console players on Xbox Series and PlayStation 5 have also experienced these issues. Bit Reactor, the independent studio behind Zero Company, has furloughed a significant portion of its workforce, with reports indicating that up to 80 percent of employees are currently unpaid. The studio faces an ongoing legal dispute among its co-founders, and confidence in receiving adequate post-launch support is low. Acknowledgment of issues was made on Steam's Community forums on the game's release day, but no further updates have been provided since.