tools Archives

Winsage

July 10, 2026

Microsoft is rewriting Windows patch guidance because of AI

Microsoft advises organizations to expedite their Windows update deployment timelines due to advancements in artificial intelligence that allow cyber attackers to quickly exploit vulnerabilities after security updates are released. Jeremy Chapman, Director of Microsoft 365, warns that delaying critical quality updates with security fixes increases the risk of exploitation. Microsoft recommends a quality update deferral period of fewer than three days, update deadlines of zero or one day, and a grace period of no more than two days. The Windows Autopatch report within Microsoft Intune helps identify unpatched devices, allowing administrators to adjust update deferral policies. Organizations can configure update delivery settings through policy controls in Windows Autopatch and Microsoft Intune, as well as other management tools like Microsoft Configuration Manager and Windows Server Update Services. Microsoft also promotes the use of Hotpatch for quicker installation of security updates without rebooting and encourages Conditional Access policies to restrict access to corporate resources for devices that lack required updates.

Tech Optimizer

July 10, 2026

I tested Norton Antivirus on my PC – and it found a hidden Trojan in 15 minutes

Norton Antivirus is a well-regarded malware protection tool, consistently ranking among the top in the industry with a robust suite of security features. It has a user-friendly interface similar to Malwarebytes, but intrusive upselling tactics detract from usability. Norton offers comprehensive scanning tools, including Quick Scan, Full Scan, Smart Scan, Targeted Scan, and Startup Scan, which successfully detected a Trojan missed by other antivirus software. Its Scam Protection tools provide alerts for online scams and phishing attempts, and it includes unique features like Deepfake Protection and an AI assistant named Genie. According to MRG Effitas, Norton blocked 98% of malware samples with a 0.33% miss rate, achieving a Level 2 certification. Pricing includes several plans, with Norton 360 Deluxe offering the best value at an introductory price of .99 for the first year, rising to .99 annually. Despite its strengths, the intrusive upselling makes it less recommendable compared to Malwarebytes, although it has unique capabilities in threat detection and a comprehensive suite of security tools.

Winsage

July 10, 2026

Microsoft explains the different types of Windows updates you get

Microsoft provides various types of Windows updates, including Patch Tuesday updates, which occur on the second Tuesday of each month. An example is the KB5094126 update for Windows 11, released on June 9, which includes both security and non-security content. IT administrators can use tools like Autopatch, Intune, and WSUS to deploy these updates. Hotpatching allows security updates to be applied without restarting devices. Optional non-security preview updates are released in the fourth week of each month for testing purposes and can be accessed by users on non-IT-managed devices. Out-of-band (OOB) updates can be issued at any time to address significant issues or vulnerabilities. Microsoft also enhances Windows 11 through annual updates, monthly updates, and Microsoft Store offerings, utilizing Controlled Feature Rollout (CFR) for feature deployment. Users are encouraged to keep their systems updated and can join the Windows Insider Program for early access to new features.

Winsage

July 10, 2026

MS Office Pro Plus 2019 and Windows 11 Pro are now just $26

The All-in-One Microsoft Office Pro 2019 for Windows: Lifetime License + Windows 11 Pro Bundle is priced at .99, reduced from its regular price of 9.99. It includes Microsoft Office Professional Plus 2019, which offers offline access to applications like Word, Excel, PowerPoint, Outlook, OneNote, Publisher, and Access, along with updates for improved functionality. The bundle also features Windows 11 Pro, which includes tools for multitasking and organization, as well as advanced options for business network management and device security.

Tech Optimizer

July 10, 2026

Gen Digital stock holds steady as cybersecurity demand supports long term growth

Gen Digital is a publicly traded company focused on cybersecurity and digital privacy solutions, primarily targeting consumers and small businesses. The company generates revenue through recurring subscriptions for its security and identity protection services, which include antivirus software, VPN services, and identity monitoring. Gen Digital's business model relies on bundling multiple security features into comprehensive offerings, providing predictable revenue and stability in cash flows. The company emphasizes continuous updates to its services to protect against evolving cybersecurity threats. Its growth prospects are linked to trends in cybersecurity spending and the increasing adoption of subscription-based solutions. Gen Digital differentiates itself from competitors by focusing on individual devices and home networks rather than large enterprises. The company also benefits from distribution partnerships that help expand its customer base. Long-term demand for its products is driven by digitalization, cyber risks, and growing consumer awareness of privacy issues. Gen Digital's stock performance is influenced by both company-specific factors and broader market trends in technology and cybersecurity.

AppWizard

July 10, 2026

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers analyzed 281 popular free VPN applications on the Google Play Store and found significant privacy and security shortcomings. The study, conducted by teams from the University of Michigan, the University of New Mexico, and IIT Delhi using a framework called MVPNalyzer, revealed that flagged apps had over 2.4 billion downloads. Key findings included: - Five apps transmitted configuration files unencrypted, allowing attackers to intercept and modify them. - 29 apps allowed user traffic to leak outside the encrypted tunnel, with 24 leaking DNS traffic and six leaking full browsing traffic. - 169 apps made no effort to disguise their traffic, making it identifiable to network operators or government censors. - 76 apps transmitted the device's Advertising ID to advertisers, and over 80% contacted known advertising and tracking servers. - Only one of 108 OpenVPN configurations adhered to recommended security practices; 89% used a single authentication method, and nearly 20% employed outdated encryption techniques. - Many apps passed through Play Store checks without adequate scrutiny, with safety labels often serving as marketing tools rather than security indicators. These findings align with previous research highlighting similar issues in popular Android VPN apps. Users are advised to be cautious when selecting VPNs, prioritizing those with recent independent security audits.

Tech Optimizer

July 10, 2026

Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT

Cybercriminals are exploiting the VLC media player to install ValleyRAT, a remote access trojan, by embedding malware in a seemingly harmless file linked in phishing emails. The attack starts with an email that prompts the victim to download a ZIP archive containing a fake VLC executable and a malicious DLL named libvlc.dll. This method uses DLL sideloading to execute the malware under the guise of a legitimate application. Once executed, the malware establishes persistence by creating a registry entry and connects to a remote server to retrieve the final payload. ValleyRAT employs evasion tactics to avoid detection, including assessing system characteristics before executing harmful actions and using a fileless approach to deliver the payload directly into memory. Researchers have identified indicators of compromise, including specific SHA1 hashes and URLs associated with the malicious campaign.

Winsage

July 10, 2026

Windows 10 is still getting Windows 11 features, but it’s only for developers

Microsoft has confirmed that WSL Containers, which allows users to create and manage Linux containers directly from Windows, is now available on Windows 10. Users must have Windows 10 version 2004 (Build 19041) or later to utilize WSL Containers. The installation process involves checking the Windows build, installing WSL, updating to the container build, confirming the version, and running a test command. WSL Containers support GPU passthrough, enabling CUDA capabilities directly from Windows 10. A text-based UI dashboard for managing WSL Containers, named lazywslc, has also been introduced.

Winsage

July 10, 2026

Microsoft Confirms Windows 11 Bug That Eats 500GB Of Your Storage

Microsoft has acknowledged a significant issue affecting Windows 11 users on versions 24H2 and 25H2, where a bug can consume up to 500GB of storage, leading to critical space shortages and potential system failure. This bug has been reported since May 2025, with a solution disclosed on June 29, but it will not be automatically rolled out until July 14. Users can check if they are affected by navigating to Settings > System > Storage and examining the “System files” category; if it exceeds 100GB, they are likely impacted. The issue is linked to a hidden file named CapabilityAccessManager.db-wal in the “%ProgramData%MicrosoftWindowsCapabilityAccessManager” directory. Microsoft has released an optional update (KB5095093) to address the bug, which also includes feature previews that may affect performance. Users are advised against deleting the problematic file to avoid disrupting WiFi connectivity and screen capture functionalities. An automatic fix will be deployed during the July 14 update.

Winsage

July 10, 2026

Microsoft’s patch Tuesdays are about to get bigger

Microsoft is enhancing its security update process by integrating artificial intelligence to identify potential security issues earlier, resulting in more fixes in each release. This initiative responds to the increasing use of AI by hackers and security researchers, which has led to a rise in high-severity vulnerabilities. Microsoft is updating its Secure Development Lifecycle to address AI-enabled attack techniques and is investing in new technologies to improve the generation and validation of security fixes while ensuring human oversight. Developers will continue to verify AI findings and make informed decisions about updates.