tool Archives

Winsage

August 22, 2026

Tested: Windows 11 has fully removed the legacy tool abused by cybercriminals for malware and ransomware, called WMIC

Windows 11 will remove the Windows Management Instrumentation Command-line (WMIC) tool in the upcoming September 2026 Update, marking its complete elimination after being deprecated in earlier versions. Testing of early builds shows that WMIC is no longer accessible, with attempts to use it resulting in a "command not recognized" error. Previously, WMIC was available as an optional feature, but it will no longer be included or reactivatable in the new update. Microsoft stated that this removal aims to improve the security and reliability of Windows, as WMIC has been exploited by cybercriminals for attacks. The September 2026 Update will also introduce other enhancements, including the ability to disable Bing in Windows Search and improvements in app speed.

Tech Optimizer

August 22, 2026

Best Ransomware Protection 2026: Tested and Ranked

Ransomware protection is best approached as a layered strategy rather than relying on a single solution. The effectiveness of software is significantly enhanced by maintaining a well-managed backup that is disconnected during an attack. Five tools were evaluated based on their default settings, focusing on behavioral detection, protected folders, file rollback, and real-time protection. 1. Norton 360: Rated as the best overall ransomware protection, it offers comprehensive features including behavioral monitoring, protected folders with dual alert modes, and 50 GB of cloud backup within a single subscription. It has a perfect score in advanced threat assessments. 2. Bitdefender: Recognized for its file rollback and remediation capabilities, it provides an effective "undo" feature that restores files, although this feature is turned off by default. 3. Avast One Free: The best free ransomware protection option, it includes a dedicated shield on the free Windows tier and has achieved a perfect score in advanced threat assessments. 4. NordVPN Threat Protection Pro: Best for blocking the delivery route of ransomware, it prevents downloads before encryption starts but cannot stop the process once it has begun. 5. McAfee: Best for protecting multiple devices simultaneously, it offers unlimited device coverage on most plans with integrated ransomware defense in its scanning engine. Modern ransomware protection software has shifted from signature matching to focusing on monitoring the behavior of processes interacting with files. The four essential layers of protection include behavioral monitoring, protected folders, automatic file rollback, and backup. Most users do not need a separate anti-ransomware product, as these features are typically included in main antivirus suites, with the key consideration being whether these features are activated. The rankings of the tools were based on whether the ransomware protection layer is enabled by default, the extent of file recovery when intervention occurs, and the frequency of false positives during normal use. - Norton 360: Best overall, with protection enabled by default and a perfect score in advanced threat testing. - Bitdefender: Best for file rollback, but the rollback feature is disabled by default. - Avast One Free: Best free option, with a perfect score in advanced threat assessments but lacks rollback capabilities. - NordVPN Threat Protection Pro: Effective at blocking malware downloads but does not provide rollback or backup features. - McAfee: Suitable for families with multiple devices, offering automatic backup of flagged files but lacks user-configurable protected folder options. The effectiveness of ransomware protection tools is primarily assessed through behavioral responses rather than library matching. Backup remains a critical layer of defense, functioning even when other layers fail.

Winsage

August 22, 2026

Researchers find way to weaponize Windows Defender’s own driver

Check Point Research revealed a technique that uses the boot-time remediation driver BTR.sys, part of Windows Defender, to execute kernel-level operations on Windows systems from Windows 7 to Windows 11 25H2. This method does not exploit software vulnerabilities but leverages BTR.sys, which is designed to remove locked malware components. Researchers reverse-engineered its undocumented protocol, leading to the creation of a proof-of-concept tool, BTR_CLI, that can install the driver as a service without standard management protocols. Once operational, BTR.sys can delete or move files, modify registry entries, and remove security binaries, including parts of Defender, during a specific period when the file system is writable. To exploit this technique, an attacker needs administrator privileges, specifically SeLoadDriverPrivilege. Although Microsoft does not consider this a critical issue due to the requirement of pre-existing administrative access, it highlights a significant potential vulnerability. There have been no documented real-world attacks using this technique.

AppWizard

August 21, 2026

Google made the My Pixel app actually match your Pixel 11’s color

Google has updated its My Pixel app with the launch of the Pixel 11 series, introducing a color-matching feature for the app's icon that reflects the specific color of the user's Pixel 11 device. The app now adapts its icon color to match devices like the Pixel 11 Pro Fold in Olive or Pro XL in Canyon. Additionally, a new search function has been added to help users quickly locate information and features within the app. These updates are currently exclusive to the Pixel 11 series and do not extend to older Pixel models.

AppWizard

August 21, 2026

How a Decade-Old Samsung Laser Printer Became a Minecraft Host Server

A Samsung C410W printer has been repurposed by a maker named vimpo to host a Minecraft server, leveraging its debug serial port and LAN Test Protocol. The printer, despite being from the mid-2010s, features Wi-Fi connectivity and has 23 megabytes of RAM. Vimpo crafted a payload to redirect execution to activate the printer's status lights, allowing the lightweight UCraft server to run. This server, with a binary size of about 46 kilobytes, enables basic gameplay for a single player but has limitations in processing power, leading to lag when multiple players connect. The exploit and server code are publicly available for others to replicate this project.

AppWizard

August 21, 2026

Minecraft Dungeons II gameplay takes us on a weird adventure

Minecraft Dungeons II has revealed a new gameplay trailer showcasing its features, including a new dimension called the Sift. This realm offers unique landscapes, enemies, and cooperative gameplay for up to four players, both online and locally. The game will expand on the original with new areas, enemies, missions, equipment, and character customization, while maintaining a loot-driven progression system. Minecraft Dungeons II is set to launch on September 29, 2026, for PC, Xbox Series X/S, PlayStation 5, and Nintendo platforms.

Winsage

August 21, 2026

Microsoft quietly hides the new OneDrive app it force-installed on Windows 11, but it’s still on your PC

Microsoft has removed the OneDrive Photos app from the Start menu and Windows Search results as part of efforts to improve user experience and address feedback about its intrusive nature. The app was initially force-installed on Windows 10 and 11 devices but faced backlash due to difficulties in launching and uninstalling it. Microsoft acknowledged that the app's widespread release was unintended and plans to allow users to uninstall it independently from the OneDrive sync client later this year. Although OneDrive Photos is hidden from the Start menu and search results, it remains installed on users' PCs and can still be accessed through the OneDrive installation folder.

Tech Optimizer

August 20, 2026

Hackers Are Using a Fake Roblox Cheat To Access Your Webcam and Steal Data

Roblox is facing privacy concerns due to spyware disguised as an "undetected" version of the Xeno Roblox cheat tool. This malware can access screens, record keystrokes, and activate webcams, allowing attackers to execute remote commands. The infection begins when users download a file resembling a legitimate Xeno installation, often shared on platforms like Discord. The malware, previously known as Powercat, has evolved and operates in three stages: 1. The user executes a file named Xeno.exe, which checks for Java and extracts it if necessary. 2. The malware runs a JAR file disguised as decompiler.exe, performing checks to avoid detection. 3. It masquerades as a legitimate Windows DLL file, logging activities and attempting to escalate privileges. If successful, the malware can control the victim's system, access webcams, log keystrokes, and steal sensitive information, including cryptocurrency wallet credentials. To protect against this spyware, users are advised to avoid unofficial cheats, use antivirus software, refrain from clicking unsolicited links, enable two-factor authentication, inspect User Account Control prompts, and consider identity theft protection services.

Tech Optimizer

August 20, 2026

Surfshark Antivirus Review 2026: Test Results and Costs

Surfshark offers a cybersecurity package called Surfshark One, which includes antivirus capabilities and a VPN service. The overall rating for Surfshark is 4.1/5, with specific ratings of 3.7/5 for protection, 4.5/5 for performance, 3.3/5 for features, 5.0/5 for support, and 4.5/5 for value. The antivirus component has a 93.44% malware detection rate and a 95% phishing detection rate with no false alarms. Surfshark One costs .79 per month and includes features like real-time protection, scheduled scans, breach alerts, a private search engine, and webcam protection. The One+ tier adds Incogni data removal and identity theft insurance. Surfshark Antivirus is not available as a standalone product and lacks features such as a firewall, password manager, and parental controls. It is compatible with Windows, macOS, and Android. Surfshark provides a 30-day money-back guarantee on all plans.

Winsage

August 20, 2026

Microsoft brings improved Windows 11 hardware monitoring with upgraded Task Manager

Microsoft released a guide to optimize internet bandwidth usage for Windows 11 update downloads, focusing on policy settings for network efficiency. Enhancements to Task Manager include new columns for monitoring NPU (Neural Processing Unit) and NPU Engine usage, allowing users to see which applications leverage the neural processor. Additional columns for NPU Dedicated Memory and NPU Shared Memory provide insights into memory consumption for AI workloads. Neural engines in GPUs will also be visible on the Performance page. An optional Isolation column has been added to help users evaluate AI workload management. Applications optimized for NPUs will show specific designations in Task Manager, while high CPU usage with idle NPU indicates underutilization of dedicated AI hardware. Users can activate new metrics by right-clicking on column headers in Task Manager.