trust Archives

Winsage

May 14, 2026

Microsoft Announces Driver Quality Initiative for Windows

Microsoft has launched the Driver Quality Initiative (DQI) to improve the quality and reliability of drivers for its Windows platform. This initiative focuses on enhancing driver development and management, influenced by insights from the Windows Resiliency Initiative. The DQI is based on four pillars: Architecture, Trust, Lifecycle, and Quality measures. Microsoft plans to invest in kernel mode drivers, transitioning third-party kernel mode drivers to user mode drivers or Microsoft-authored class drivers. The initiative aims to improve driver lifecycle management and expand metrics for assessing driver quality, including stability, functionality, performance, and power impact. Feedback from partners has been positive regarding the initiative's approach to driver quality metrics and lifecycle states. Microsoft aims to enhance reliability, security, performance, compatibility, and overall quality in the Windows ecosystem.

Winsage

May 14, 2026

Microsoft pits more than 100 AI agents against each other to find Windows vulnerabilities

Microsoft has introduced MDASH (Multi-Model Agentic Scanning Harness), a security solution that uses over 100 specialized AI agents to identify software vulnerabilities. On May 12, 2026, MDASH identified 16 new vulnerabilities (CVEs) in the Windows networking and authentication stack, four of which were critical, including remote code execution vulnerabilities in tcpip.sys, ikeext.dll, netlogon.dll, and dnsapi.dll. Ten of these vulnerabilities can be accessed over the network without authentication. MDASH operates through a four-stage pipeline: analyzing source code, scrutinizing for suspicious elements, debating the exploitability of issues, and attempting to exploit vulnerabilities. The system is model-agnostic and allows integration of new models and domain-specific knowledge. MDASH scored 88.45 percent on the CyberGym benchmark, ranking first among competitors, although the comparison may not be entirely fair as it contrasts a comprehensive framework with individual models. The models used to achieve this score are not specified. MDASH is supported by Microsoft's Autonomous Code Security Team and is currently in a limited private preview for select customers.

Winsage

May 14, 2026

Raising the bar together. Introducing the Driver Quality Initiative at WinHEC 2026

The Windows Hardware Engineering Conference (WinHEC) 2026 took place in Taipei, marking Microsoft's return to the event after a hiatus since 2018. The conference focused on the Driver Quality Initiative (DQI), aimed at improving driver quality, reliability, and security on the Windows platform. The DQI is built on four pillars: Architecture, Trust, Lifecycle, and Quality Measures. Key themes discussed included the importance of collaboration among stakeholders, enhancing Windows 11 quality, and fostering innovation through strong foundational practices. Attendees participated in workshops and hands-on labs to deepen their understanding of driver development and compatibility testing. Partners expressed a shared commitment to improving driver and platform quality, emphasizing the need for transparency and ongoing engagement. Microsoft plans to continue investing in reliability, security, performance, compatibility, and quality in collaboration with its partners.

Tech Optimizer

May 14, 2026

Kaspersky Achieves 40% Reach Rate and Store Visits with AnyMind’s Data-Led Influencer Marketing

Kaspersky partnered with AnyMind Group in March 2026 to launch an influencer marketing campaign in Singapore aimed at changing consumer perceptions that Kaspersky only offers antivirus protection. The campaign focused on building trust through relatable narratives, increasing urgency around scam prevention, and driving traffic to the Kaspersky Shopee Store. It utilized Instagram for engagement, featuring relatable stories and humor to simplify complex cybersecurity topics. The campaign achieved significant reach and engagement, with total reach exceeding 160,000, total views at 223,000, and total engagements of 7,500. The engagement rate was 4.73%, and the reach rate was 40.56%. Influencer Faris Samri had the highest engagement rate at 17.20%. The campaign led to a 2,900% increase in store page views and over 6,000 combined saves and shares, indicating high user value in the content. Interactive Instagram Stories were identified as the key driver for direct link clicks.

Winsage

May 13, 2026

Disgruntled researcher releases two more Microsoft zero-days

An anonymous researcher known as Nightmare-Eclipse has revealed two new vulnerabilities affecting Windows systems, named YellowKey and GreenPlasma, shortly after Microsoft's latest Patch Tuesday update. YellowKey is a "BitLocker bypass" that allows attackers with physical access to gain unrestricted shell access to protected machines. Experts have expressed concerns about YellowKey's potential to transform laptop theft into a serious breach notification scenario, and suggested mitigations such as implementing a BitLocker PIN and a BIOS password lock. Nightmare-Eclipse has also hinted that YellowKey could function as a backdoor allegedly introduced by Microsoft, although this claim remains unsubstantiated. GreenPlasma is a privilege escalation flaw for which partial exploit code has been released, but it currently triggers a User Account Control (UAC) consent prompt, requiring attackers to invest time in weaponizing it. There is no known mitigation for GreenPlasma, making it crucial for organizations to patch their systems promptly once Microsoft addresses the issue. Nightmare-Eclipse has previously disclosed five zero-day vulnerabilities this year, including BlueHammer, and has characterized their actions as a response to a perceived violation of trust. The researcher has indicated the existence of a "dead man's switch," suggesting that more disclosures could follow if their demands are not met.

Winsage

May 13, 2026

Windows BitLocker zero-day gives access to protected drives, PoC released

A cybersecurity researcher known as Chaotic Eclipse has released proof-of-concept exploits for two unpatched vulnerabilities in Microsoft Windows: YellowKey, a BitLocker bypass, and GreenPlasma, a privilege-escalation flaw. The YellowKey vulnerability affects Windows 11 and Windows Server 2022/2025, allowing unauthorized access to BitLocker-protected volumes by exploiting the Windows Recovery Environment. The exploit can be executed using specially crafted 'FsTx' files on a USB drive or directly on the EFI partition. Independent researcher Kevin Beaumont has validated the exploit, which can bypass BitLocker protections even in a Trusted Platform Module (TPM) environment. The GreenPlasma vulnerability allows unprivileged users to create arbitrary memory-section objects, potentially leading to privilege escalation. Chaotic Eclipse has expressed dissatisfaction with Microsoft's handling of bug reports, prompting the public disclosure of these vulnerabilities. Microsoft has stated its commitment to investigating security issues and updating affected devices.

Winsage

May 13, 2026

Windows 11 Gets Its First Major Feature Updates of 2026

Users of Windows 11 received feature and security updates on Patch Tuesday, with significant enhancements introduced after four months of less notable updates. The cumulative update KB5089549 is available for Windows 11 versions 25H2 and 24H2, raising their build numbers to 26200.8457 and 26100.8457, respectively. Windows 11 version 26H1, available on Snapdragon X2-based laptops, received update KB5089548, bringing its build to 28000.2113. Key features in KB5089549 include: - Xbox Mode: Replaces Game mode and Full Screen Experience for a streamlined gaming interface. - Agents on the Taskbar: Allows interaction with AI agents directly from the Taskbar, supporting first- and third-party agents. - File Explorer Enhancements: Improved support for various archiving formats, retention of View and Sort preferences, resolution of the white “flash bang” bug, and enhanced reliability of explorer.exe processes. - Windows Driver Improvements: The Windows kernel will no longer trust cross-signed third-party drivers by default; only WHCP drivers and those on a trusted legacy list will be accepted after auditing for 100 hours and three reboots. - Drag Tray Enhancements: Rebranded as the Drop tray with a new management interface and smaller peek view to reduce accidental activation. For version 26H1, KB5089548 includes improvements to Narrator and Smart App Control, increased Microsoft 365 advertising visibility in Settings, refined Pen settings, a new Settings About page, and minor updates to File Explorer.

AppWizard

May 12, 2026

Gemini Intelligence Brings App Automation To Android

Google has developed Gemini Intelligence, an advanced AI agent aimed at improving user interaction with mobile applications by managing multi-step tasks. It can interpret information from emails, such as analyzing a class syllabus to compile a shopping cart for textbooks. Gemini can also utilize contextual information from a user's phone screen or images to assist in real-world scenarios, like finding tours based on travel brochures. To address user privacy concerns, Gemini will only initiate tasks when explicitly instructed, require user confirmation for purchases, and allow users to manage data access through a permissions menu. A progress bar feature enables users to stop the agent's activities at any time. Gemini Intelligence is set to launch on the latest Pixel and Samsung Galaxy phones, with its success depending on reliability and user experience compared to other AI agents.

AppWizard

May 12, 2026

DIRECTIVE 8020 Launches Today on PlayStation 5, Xbox Series X|S and PC (Steam)

Supermassive Games has released Directive 8020, a narrative sci-fi survival horror game available on PS5, Xbox Series X|S, and PC (Steam). The game is set on Tau Ceti f, where the colony ship Cassiopeia crash-lands, and the crew encounters a mimicking alien organism. Players face moral dilemmas and must navigate trust issues while making decisions that affect character survival. The game features a new Turning Points story tree, real-time alien threats, and a couch co-op Movie Night mode for up to five players, with online multiplayer planned for a future update. Lashana Lynch voices pilot Brianna Young in the game.

AppWizard

May 12, 2026

Google wants Gemini to take over how you browse in Chrome

Google will integrate its Gemini 3.1 AI into the Chrome toolbar for Android starting in June, allowing users to summarize articles, ask questions about content, and extract details without switching apps. Users can enable the "Personal Intelligence" feature for tailored responses based on personal preferences. The Nano Banana feature will let users create or modify visuals from web pages. The auto browse function will allow Chrome to perform tasks like reserving parking or updating orders automatically. These features will include security protections, but sensitive actions will still require user confirmation. Gemini in Chrome will require devices with at least 4GB of RAM, running Android 12 or newer, and set to English-U.S. The rollout will begin for select Android devices in the U.S. at the end of June, with the auto browse feature available initially only to AI Pro and Ultra subscribers.