urgency Archives

Winsage

July 14, 2026

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft's July 2026 security update addresses 622 vulnerabilities, with 57 classified as "critical." Two critical vulnerabilities, CVE-2026-56155 (Active Directory Federation Services) and CVE-2026-56164 (Microsoft SharePoint Server), have been exploited in the wild. The critical vulnerabilities include 48 remote code execution (RCE) vulnerabilities, seven elevation of privilege (EoP) vulnerabilities, one spoofing vulnerability, and one security feature bypass vulnerability. RCE vulnerabilities affect various Microsoft services, including Windows Media, Microsoft Office, and SQL Server, with eleven rated as "more likely" to be exploited. Additional important vulnerabilities include CVE-2026-49170, CVE-2026-49795, and CVE-2026-50325. Talos is releasing a new Snort ruleset to detect these vulnerabilities, and Cisco Security Firewall customers are advised to update their ruleset.

Winsage

July 14, 2026

Microsoft rolls out massive Windows 11 security update with 416 fixes

Microsoft released its July 2026 Patch Tuesday cumulative updates for Windows 11, addressing numerous security vulnerabilities and enhancing Secure Boot functionalities. The updates include: - KB5101650 for Windows 11 25H2 and 24H2, updating systems to builds 26200.8875 and 26100.8875. - KB5101649 for Windows 11 26H1, updating devices to build 28000.2525. The release addresses a total of 622 Microsoft Common Vulnerabilities and Exposures (CVEs), including: - 416 vulnerabilities in Windows. - Fixes for Microsoft Office, Edge, Exchange Server, SharePoint Server, SQL Server, Defender, and Azure services. Key vulnerabilities fixed include: - CVE-2026-50661: A BitLocker Security Feature Bypass vulnerability. - CVE-2026-56155: An AD FS Elevation of Privilege vulnerability that has been exploited. - CVE-2026-56164: A SharePoint Server Elevation of Privilege vulnerability. The updates also introduce new Secure Boot certificates, rectify issues from previous patches affecting third-party applications, and incorporate curl 8.21.0 for security improvements. Users are advised to back up data before installation, which requires a system reboot.

Winsage

July 14, 2026

Microsoft says stop waiting to install Windows updates. Here’s why

Microsoft has revised its guidance on Windows updates, urging users to install them within three days due to the rise of AI-driven cyber threats. Jeremy Chapman from Microsoft 365 emphasized the need for timely updates, recommending a maximum deferral period of two days for quality updates. In June, Microsoft patched 206 vulnerabilities, highlighting the importance of these updates to avoid significant risks. AI can help attackers exploit vulnerabilities quickly, making the practice of delaying updates obsolete. Microsoft has also developed an AI tool, MDASH, to identify vulnerabilities in Windows code.

Winsage

July 10, 2026

Microsoft is rewriting Windows patch guidance because of AI

Microsoft advises organizations to expedite their Windows update deployment timelines due to advancements in artificial intelligence that allow cyber attackers to quickly exploit vulnerabilities after security updates are released. Jeremy Chapman, Director of Microsoft 365, warns that delaying critical quality updates with security fixes increases the risk of exploitation. Microsoft recommends a quality update deferral period of fewer than three days, update deadlines of zero or one day, and a grace period of no more than two days. The Windows Autopatch report within Microsoft Intune helps identify unpatched devices, allowing administrators to adjust update deferral policies. Organizations can configure update delivery settings through policy controls in Windows Autopatch and Microsoft Intune, as well as other management tools like Microsoft Configuration Manager and Windows Server Update Services. Microsoft also promotes the use of Hotpatch for quicker installation of security updates without rebooting and encourages Conditional Access policies to restrict access to corporate resources for devices that lack required updates.

Winsage

July 10, 2026

Microsoft’s patch Tuesdays are about to get bigger

Microsoft is enhancing its security update process by integrating artificial intelligence to identify potential security issues earlier, resulting in more fixes in each release. This initiative responds to the increasing use of AI by hackers and security researchers, which has led to a rise in high-severity vulnerabilities. Microsoft is updating its Secure Development Lifecycle to address AI-enabled attack techniques and is investing in new technologies to improve the generation and validation of security fixes while ensuring human oversight. Developers will continue to verify AI findings and make informed decisions about updates.

AppWizard

July 8, 2026

I played 4 hours of The Blood of Dawnwalker and it borrows a heck of a lot from The Witcher 3, for good and bad

Polish studio Rebel Wolves is developing an open-world vampire RPG titled The Blood of Dawnwalker, which draws inspiration from The Witcher 3. The game features a three-hour prologue where players control Coen, a villager under the rule of Brencis, who imposes a bloodletting ritual on the citizens. The gameplay includes a time system that divides each day into eight segments, influencing quest completion and player choices. Coen interacts with various characters, including a local bully and a herbalist, while navigating moral dilemmas in a society dominated by vampiric rule. The combat mechanics allow for varied styles based on Coen's human and vampire abilities, though they may not appeal to all players. The game is noted for its visually stunning environment and rich narrative potential.

AppWizard

July 7, 2026

My first 40 days in Moonlight Peaks started off with juicy feuds, but its anemic character writing is starting to show through

A new farm simulation game, Moonlight Peaks, has been released, featuring gameplay elements such as cultivating crops, foraging, tending to animals, forging friendships, crafting, mining, and fishing. The game introduces four feuding families of supernatural beings, adding drama to the narrative. Initial impressions suggest that while the characters provide entertainment, the game struggles with tone consistency, particularly with the portrayal of Orlock, a comedic vampire patriarch, and the serious dynamics involving his daughter, Mina. Moonlight Peaks faces competition from the upcoming game Fields of Mistria, and the reviewer is currently unconvinced of its value in the market.

Tech Optimizer

July 7, 2026

7 Habits That Are More Important Than Using Antivirus on Your Phone

Antivirus software was once standard on personal computers, but modern smartphones have evolved with enhanced security measures from Apple and Google, making them less vulnerable to traditional malware. Smartphones isolate applications, allowing them only to access user-permitted information, and if a malicious app infiltrates, it faces significant challenges due to built-in defenses. Apple requires thorough vetting of apps through the App Store, which enhances security but limits antivirus capabilities. Android allows sideloading apps from outside the Google Play Store, which introduces risks but also includes built-in security features like Google Play Protect and regular updates. Despite these advancements, smartphones can still be compromised, and cybercriminals increasingly target user accounts through phishing tactics rather than malware. Security experts recommend focusing on phishing awareness, strong passwords, and two-factor authentication. For enhanced security, users should keep devices updated, download apps from official sources, review app permissions, use strong passwords, utilize a password manager, enable two-factor authentication, and be cautious with unexpected communications. While most users may not need antivirus apps, those who frequently sideload or download from unfamiliar sites may benefit from additional security tools.

Winsage

July 5, 2026

Windows 10 lives on while Sony cuts discs and Surface Go hardware ends

Sony has announced the cessation of physical media production and revoked access to previously purchased movies. Microsoft is extending support for Windows 10 and has not finalized a disc-to-digital program for Xbox, which could allow the conversion of physical discs into digital licenses. The Surface Go and Surface Laptop Go have been retired. The Dell XPS 13 and HP OmniBook Ultra 14 are currently available at significant discounts.

AppWizard

July 2, 2026

Pixel users aren’t receiving calls, but the issue might be Google’s phone app

Pixel users are experiencing a "missing incoming call" bug that prevents notifications for incoming calls across various Pixel devices. This issue is linked to the Google Phone app and has persisted for several months, affecting users even after updates, including those on the Android 17 QPR1 Beta 5. Reports indicate that some users have resolved the issue by disabling the Call Screen feature. Android Central has noted the problem and reached out to Google for clarification.