user prompts Archives

Winsage

September 3, 2026

17 Useful WinGet Commands Every Windows 11 User Should Know

WinGet is a package manager included with Windows 11, accessible via a command line interface. It provides a more efficient method for installing applications compared to traditional download methods. Users can verify WinGet installation by running the command winget --version. Key commands include: 1. winget search : Finds packages by name, publisher, or moniker. 2. winget show --id : Displays detailed information about a specific package. 3. winget install -e --id : Installs a package using its exact ID. 4. winget install -e --id --version : Installs a specific version of a package. 5. winget install -e --id --silent --accept-package-agreements --accept-source-agreements: Installs a package silently without user prompts. 6. winget list: Lists all installed applications. 7. winget upgrade: Lists installed packages with available updates. 8. winget upgrade --all --include-unknown --silent --accept-package-agreements --accept-source-agreements: Updates all packages without user input. 9. winget uninstall : Removes a specified package. 10. winget export: Generates a JSON file of installed packages. 11. winget import: Reinstalls applications from an exported file. 12. winget pin : Prevents a package from being updated. 13. winget download : Retrieves an installer without executing it. 14. winget repair : Initiates a repair routine for an application. 15. winget source: Manages package sources. 16. winget settings: Opens the WinGet settings file for customization. 17. winget configure: Applies a configuration file for installations. Three commands are primarily for package publishers and can be ignored by most users: PLACEHOLDER3dfbcb91baab02cd, PLACEHOLDER5b3baaac6e2d9202, and winget dscv3. If WinGet is not recognized, it may be due to a missing App Installer package, a missing PATH entry, or running in an unsupported context. WinGet is safe to use, compatible with Windows 10 version 1809 and later, and does not require administrator rights for all commands.

AppWizard

August 18, 2026

Gemini’s auto-browse in Chrome is finally here for Android to make the mundane a breeze

Google is rolling out a Chrome update on Android, introducing Gemini webpage summarization, Q&A, and connected apps to all U.S. users. AI Pro and Ultra subscribers will receive an auto-browse feature that allows Gemini to purchase items or secure events based on user prompts. The update also includes the Nano Banana feature. Users can summarize lengthy articles and ask specific questions about online content by tapping the Gemini icon in Chrome. The auto-browse feature enables users to instruct Gemini to perform tasks like ordering products or booking events, providing transparency in its actions. Additionally, the Personal Intelligence feature personalizes responses based on individual hobbies and preferences.

Winsage

July 25, 2026

Microsoft finally found a Windows ad it doesn’t like

Users of LG monitors have reported frustration over unsolicited McAfee pop-up ads that automatically appear during the Windows Update process. This issue arises from the installation of the "LG Monitor App Installer," which includes promotional software alongside the standard monitor driver. Reports indicate that this software installs without user consent, even when only a video cable is connected. Following an investigation by Gamers Nexus, Microsoft announced that LG has agreed to disable the McAfee pop-up, although the LG Monitor App Installer will still be automatically downloaded via Windows Update.

Winsage

July 15, 2026

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Cursor, a development tool, has a security vulnerability that allows arbitrary code execution by simply opening a project repository on Windows. This flaw, reported by AI security firm Mindgard, is due to the presence of a file named git.exe in the project root, which Cursor executes automatically without user prompts. Mindgard demonstrated this vulnerability by renaming Windows Calculator to git.exe and placing it in the project root, leading to multiple instances of Calculator launching upon opening the repository. Cursor has not yet released a patch or advisory for this issue, which was first reported on December 15, 2025, and remains in the latest version, 3.11, released on July 10, 2026. Users are advised to implement workarounds, such as using AppLocker or Windows App Control to block executables by name and path. Other vendors, including GitHub and Google, have encountered similar vulnerabilities, but none have released fixes. The issue highlights the risks associated with untrusted search paths in software development.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Winsage

June 2, 2026

PHANTOMPULSE RAT Uses UAC Bypass to Hijack Windows Systems

PHANTOMPULSE is a remote access trojan (RAT) used as a final payload in multi-stage attacks targeting Windows environments. It employs advanced post-exploitation techniques, including process injection, User Account Control (UAC) bypass, and a decentralized blockchain-based command-and-control (C2) mechanism. The malware utilizes three process injection techniques: module stomping, manual DLL mapping, and debug-driven execution. It avoids detection by using direct system calls instead of standard Windows APIs and incorporates a hardware breakpoint mechanism to disable security protections like AMSI and ETW. PHANTOMPULSE retrieves its C2 server address from Ethereum-based transaction data but has a vulnerability that allows defenders to hijack communication. It achieves persistence through scheduled tasks and supports self-healing capabilities. Privilege escalation is done using the "schuac" UAC bypass technique. The malware conducts system reconnaissance focusing on cryptocurrency wallets and messaging apps but does not directly steal credentials. It shows signs of AI-assisted development and shares tactics with DPRK-aligned threat groups, particularly in targeting cryptocurrency platforms.

AppWizard

May 2, 2026

Google releases experimental ‘COSMO’ AI assistant app on Play Store

Google released an experimental AI assistant application called COSMO for Android devices, which has since been removed from the Play Store due to an accidental launch. The app, which is 1.13 GB in size, was designed to enhance daily productivity by organizing schedules and answering complex queries. COSMO features include a list tracker, document writer, calendar event suggester, browser agent, timer suggestions, deep research capabilities, quick photo lookup, web search functionality, jargon definitions, insights provision, context understanding for people and events, recall assistance, and conversation summarization. It offers three settings: Hybrid, PI Only, and Nano Only, with the latter two indicating different processing methods. The app also includes voice match and screen access features but is not intended for the general consumer market.

Winsage

April 7, 2026

Notepad (25H2)

Microsoft has transformed its Notepad text editor in Windows 11, introducing features such as a tabbed user interface, basic session state management, a "Recent files" option, and AI-driven writing tools. Notepad now supports Markdown markup language for light formatting and includes customizable settings for themes, fonts, document opening preferences, and the ability to disable certain features. Users can access AI writing tools through a Copilot button, which requires a Microsoft account and an active Microsoft 365 subscription. The classic Notepad version is still available, allowing users to revert to the previous interface, although it cannot be set as the default app for text files.

AppWizard

March 27, 2026

OpenAI discontinues Sora app just 13 months after UK release

Sora, an AI program for generating short video clips from user prompts, launched in December 2024 and became available in the UK in February 2025. OpenAI announced the discontinuation of the Sora app on March 24, 2026, citing a strategic pivot towards projects focused on real-world tasks. The decision includes the termination of a content partnership with Disney, which allowed users to create videos featuring Disney characters.

Winsage

March 17, 2026

Microsoft is adding image and AI text support to Notepad in Windows 11

Microsoft is modernizing its Notepad application for Windows 11 by introducing new features, including support for image integration and AI-driven text tools. The image integration will allow users to add images to their documents via a new toolbar button. Notepad will also include AI features such as Write, Rewrite, and Summarise, available through a cloud-based system or on-device using the PC's Neural Processing Unit. The image insertion feature will be enabled by default but can be disabled in settings. Concerns have been raised about the potential security vulnerabilities associated with these enhancements, including a recently disclosed high-severity vulnerability in Notepad.