trust Archives

Winsage

July 10, 2026

Microsoft confirms Secure Boot update failing on some Windows 11 PCs, promises a resolution

Microsoft has acknowledged that some Windows 11 PCs are facing issues with Secure Boot certificate updates, which may fail to install or be blocked. The company is working with PC manufacturers to develop a patch, while users may need to take proactive measures if their certificates are obstructed. Microsoft has temporarily halted the rollout of Secure Boot for certain devices due to complications, and affected users will receive detailed error messages in the Windows Security app regarding their Secure Boot certificates. Secure Boot certificates issued in 2011 have expired, and Microsoft is replacing them with new certificates issued in 2023. Most modern hardware is already utilizing the new certificates, but some devices may have disabled Secure Boot or faulty firmware. Users can check their Secure Boot status in the Windows Security app. HP has confirmed that Secure Boot updates are being blocked on some of its PCs due to a BitLocker issue, which prevents the installation of new certificates. Microsoft has paused Secure Boot certificate updates for devices affected by known issues while collaborating with manufacturers to identify specific devices or firmware complications. A firmware update will be necessary for affected devices, but it is not yet available. The majority of PCs have received the Secure Boot certificates via Windows Update, but compatibility issues may prevent some devices from receiving the update. Older devices or those not among the OEM’s top-selling models may not receive updates if the UEFI firmware is unsupported. Secure Boot is a security feature required for Windows 11, preventing unauthorized software from executing at boot. While an expired Secure Boot certificate does not stop a PC from functioning, it may limit long-term security protection. Microsoft advises users not to disable Secure Boot, as it would compromise security further.

Winsage

July 9, 2026

Evolving Windows vulnerability management to meet the speed of AI-powered discovery

Microsoft is enhancing its security measures for Windows by integrating artificial intelligence (AI) to improve the discovery and analysis of vulnerabilities across its codebase. This includes the use of a multi-model agentic scanning harness (MDASH) that employs various AI models to identify and validate potential vulnerabilities efficiently. A dedicated cloud infrastructure supports this scanning process, which aims to minimize false positives and reduce the time from discovery to customer protection. The company collaborates across divisions to promote AI-powered tools and practices, refining its internal systems to integrate vulnerability discovery into development processes. This includes updating Secure Development Lifecycle (SDL) practices to address AI-enabled attack techniques. Customers can expect an increase in security updates as AI enhances vulnerability discovery capabilities. Windows updates undergo rigorous validation through programs like the Security Update Validation Program (SUVP) to ensure quality and compatibility. Microsoft also offers tools like Known Issue Rollback (KIR) for quick reversion of changes if issues arise during updates. Customers are encouraged to stay current with security updates and utilize resources like the Security Update Guide for prioritizing protections. To facilitate smoother update processes, Microsoft provides optional non-security preview releases for compatibility testing and employs modern management capabilities like Windows Autopatch to automate security updates. Azure Arc enables rebootless updates for Windows Servers, while Microsoft Defender and Intune help manage vulnerabilities and compliance across endpoints. Overall, Microsoft is committed to continuous improvement in its security practices to adapt to the evolving threat landscape and ensure customer protection through timely updates.

AppWizard

July 9, 2026

PC gamers remain skeptical of Steam’s AI disclaimers, poll shows many believe game devs are hiding it

A poll by GameDiscoverCo involving nearly 3,800 Steam users from June 25 to July 2, 2026, found that 43% of respondents are comfortable purchasing games with AI disclosures, while 31% view such disclosures negatively, and 8% refuse to buy games featuring them. Approximately 44% of participants read AI disclosures in detail, and 45% at least glance at them, indicating that 89% consider this information in their purchasing decisions. Trust in the accuracy of these disclosures is low, with only 17% believing developers fully disclose AI use, while 25% think many are transparent, and 35% feel only some provide accurate information. Additionally, 56% of respondents believe AI-assisted development tools should be disclosed, with only 8% disagreeing. Nearly 20% of games in Steam’s recent Next Fest event included a generative AI warning, a figure expected to rise as the industry evolves.

AppWizard

July 9, 2026

Buckshot Roulette: The Viral Horror Phenomenon Joins XBOX Game Pass Today

Buckshot Roulette has officially launched today on XBOX Series X|S, XBOX One, XBOX on PC, and cloud services. It is available at no additional cost for XBOX Game Pass subscribers. The game replaces the traditional revolver of Russian Roulette with a pump-action 12-gauge shotgun, where players alternate turns with The Dealer, drawing items and deciding whether to aim at their opponent or themselves. It offers a single-player experience and has integrated multiplayer support for up to four players as a post-launch update. The game has evolved from an experiment on Itch.io to a celebrated title with a vibrant community, featuring fan art and enthusiasm. Today marks its first availability on console.

Tech Optimizer

July 8, 2026

Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks

A recent examination of PHP's database driver layer revealed two significant vulnerabilities in PHP Data Objects (PDO) affecting the pdo_firebird and pdo_pgsql drivers. The first vulnerability, CVE-2026-25289, allows SQL injection attacks through NUL byte manipulation in quoted strings, compromising the safety of SQL statements. The second vulnerability, CVE-2026-25290, can cause application crashes due to null pointer dereferencing when invalid multibyte character sequences are processed. Both vulnerabilities stem from assumptions about C string handling and have been addressed in a security release. Researchers recommend treating binary input as untrustworthy and encapsulating financial workflows within atomic transactions.

AppWizard

July 7, 2026

Discord Banned 8,000 Users for Posting Chessboards and Minecraft Screenshots

In May 2026, Discord's content moderation system mistakenly banned over 8,200 users due to a hash-matching system that identified harmless grid patterns as harmful content. This incident was worsened by two bugs: one that bypassed the intended upload-pause for human review and another that prevented the lifting of bans even after staff cleared the accounts. The images that triggered these bans included chessboard screenshots, Minecraft inventory grids, game texture patterns, Google Drive and spreadsheet tables, and standard UI grid layouts. Following the incident, all affected accounts were reinstated, and the problematic hash was neutralized. The situation occurred alongside Discord's efforts for age verification, which faced scrutiny due to a breach exposing ID documents of approximately 70,000 users.

Tech Optimizer

July 7, 2026

PDO PostgreSQL Bug Triggers NULL Pointer Dereference and Crashes PHP Worker Processes

Researchers at Positive Technologies have identified two significant vulnerabilities in the PHP Data Objects (PDO) extension layer, both posing high severity risks. The first vulnerability (CVE-2025-14180) leads to a NULL pointer dereference, causing PHP worker processes to crash. It affects PHP versions 8.1.x prior to 8.1.34, 8.2.x before 8.2.30, 8.3.x before 8.3.29, 8.4.x before 8.4.16, and 8.5.x before 8.5.1. This issue occurs when the pdo_pgsql driver operates with PDO::ATTR_EMULATE_PREPARES enabled, allowing a remote attacker to exploit it without authentication by submitting malformed character sequences. The second vulnerability (CVE-2025-14179) allows for SQL injection and affects PHP versions 8.2.x before 8.2.31, 8.3.x before 8.3.31, 8.4.x before 8.4.21, and 8.5.x before 8.5.6. It arises from a mishandling of NUL bytes in the Firebird driver during the PDO::prepare() process, despite the quoting routine functioning correctly. Additionally, the audit revealed an integer overflow in PostgreSQL’s libpq client library and an information disclosure flaw in Firebird 3’s fbclient.

Winsage

July 7, 2026

Take your business to the next level: Enhance productivity, performance and security with Windows 11 on new Dell AI PCs

Organizations must choose appropriate IT partners and computing solutions to remain competitive in a complex technological landscape. Dell Technologies recommends Windows 11 Pro for business, which offers enhanced security features and productivity tools. Key factors to consider include technological innovation, cybersecurity, and workforce satisfaction, as these can drive efficiency, protect sensitive data, and improve employee experience.

Winsage

July 6, 2026

Microsoft just broke custom folder icons in Windows, and the reason is a bug from 2003

Microsoft has updated Windows to stop trusting untrusted desktop.ini files, a change aimed at addressing a long-standing security vulnerability that has existed since 2003. This decision affects the display of custom folder icons, as Windows will now ignore customization metadata from potentially unsafe sources. Users can still use custom folder icons if the desktop.ini file and icon resources come from trusted locations. A workaround allows users to manually create a desktop.ini file with the desired icon while following new security protocols.

Tech Optimizer

July 6, 2026

MacPaw Moonlock antivirus review

MacPaw launched Moonlock as a standalone antivirus application in October 2025, building on its existing malware removal module from CleanMyMac. Moonlock focuses on educating users about malware rather than overwhelming them with technical details, following a 'care, not scare' philosophy. Research indicated that 66% of Mac users faced cyber threats last year, with a 67% increase in macOS backdoor variants in 2025. Moonlock Lab has identified new malware variants and maintains a strict zero-logs policy for its VPN. The application requires macOS 13 or later and 515MB of disk space, operates efficiently without significant performance impact, and necessitates a MacPaw account for installation. Support includes a knowledge base and email inquiries, but lacks live chat or phone options. Moonlock competes with ClamXAV, which is cheaper but lacks some features, and Intego Mac Internet Security X9, which offers a network monitor. Moonlock is priced at .95 per year for a single device, nearly double ClamXAV’s price for three devices, but includes additional features like a VPN and network inspection. It also provides a 30-day money-back guarantee.