Vigilance Archives

Tech Optimizer

June 22, 2026

I Turned Off All Antivirus Protection for a Week. Here’s What I Learned

The author conducted an experiment by disabling both Bitdefender and Windows Security for a week to rely solely on personal cybersecurity instincts. They took precautions by using a secondary device and backing up important data. Throughout the week, the author experienced heightened awareness while navigating online tasks, encountered a phishing email, and adapted to a more deliberate browsing rhythm. Key takeaways included exercising caution, verifying sources, being aware of URLs, and keeping software updated. The experiment highlighted the importance of both good habits and antivirus software in maintaining cybersecurity. The author concluded that while personal vigilance is crucial, antivirus software is essential for those lacking strong instincts.

Tech Optimizer

June 18, 2026

Retro gaming fans are the new target for fake GitHub malware

Retro gaming enthusiasts should be cautious when exploring GitHub projects for tools or plugins, as cybercriminals may disguise malware as homebrew software. A specific incident involved a project called EQVita, which pretended to be a free audio tool for PlayStation Vita but actually contained Windows malware. The downloaded file included three files: Launch.bat, luajit.exe, and x64.txt, with the latter concealing a hidden script that connected to the attacker's server upon execution. This scam is part of a broader trend where counterfeit GitHub repositories distribute SmartLoader malware, which retrieves additional malicious software aimed at stealing passwords and cryptocurrency wallets. The PS Vita community, despite the console's production ceasing, remains active in modding, making it a target for attackers. Legitimate plugins typically come in Vita-compatible formats, while fake ones may feature polished marketing materials and AI-generated descriptions. Users are advised to verify sources, be cautious of suspicious downloads, and utilize security tools like Malwarebytes. If someone has executed the malicious EQVitav1.3.zip file, they should conduct a malware scan, change important passwords, and monitor accounts for unauthorized access. Indicators of compromise include the domains https://github.com/Voistace/EQVita and https://voistace.github.io, and the IP address 85.137.52.21.

Winsage

June 17, 2026

Windows SprySOCKS Malware: Advanced Kernel-Level Rootkit Targets Government Organizations via Supply Chain Vulnerabilities

The Windows variant of SprySOCKS malware, developed by the Chinese threat group Earth Lusca, targets government entities globally and features advanced capabilities such as rootkit-level stealth and extensive command-and-control (C2) functionalities. It operates on Windows systems, utilizing two main variants: WINDRV, which includes kernel drivers for stealth operations, and WINPLUS, a streamlined backdoor. The malware can communicate over TCP, UDP, and WebSocket, offering over 30 C2 commands for various operations, including system information gathering and keystroke logging. WINDRV loads a driver named ‘RawWNPF’ into memory using another signed kernel driver, allowing it to conceal processes and achieve persistence. The malware's design incorporates open-source elements and exploits vulnerabilities in the software supply chain, notably using a leaked certificate for driver signing. To combat SprySOCKS, organizations are advised to implement advanced endpoint detection and response (EDR) solutions, maintain regular patching, and manage supply chain risks vigilantly. The malware's adaptability and reliance on legitimate certificates complicate detection efforts, necessitating continuous refinement of security practices.

Winsage

June 12, 2026

Microsoft fixes Windows update failures linked to WUSA installer

Microsoft resolved an issue affecting the installation of Windows updates released since May 2025, which primarily impacted users using the Windows Update Standalone Installer (WUSA) from a network share, especially in enterprise environments. The problem was significant for devices running Windows 11 24H2/25H2 and Windows Server 2025, but did not occur when handling a single .msu file or when files were stored locally. In August 2025, Microsoft acknowledged that updates installed using WUSA might fail with error ERRORBADPATHNAME when multiple .msu files were involved. A Known Issue Rollback Group Policy was implemented in September 2025 to mitigate the impact on home and non-managed business devices. The issue was ultimately resolved with cumulative updates released in June 2026 for Windows 11 (KB5079391) and Windows Server 2025 (KB5094125). Microsoft provided a workaround for users experiencing difficulties with prior updates by suggesting they save .msu files locally for installation. Users were also advised to wait at least 15 minutes after installing an .msu file via WUSA before checking the Update History page. Additionally, Microsoft had previously addressed another issue in April 2025 that affected enterprise customers installing security updates via WSUS, which recurred in the August 2025 updates. Microsoft warned customers about potential issues with installing the latest monthly updates on devices upgraded to Windows 11 24H2 or 25H2.

AppWizard

June 11, 2026

Valve Is Killing Physical Steam Gift Cards, Blaming Scammers

Valve has announced the discontinuation of its physical Steam gift card program in retail stores globally due to ongoing issues with scammers exploiting these cards for fraudulent activities. All retail stock is expected to be depleted by the end of 2026. Scammers have been using these cards to siphon funds from victims, often impersonating officials or agencies. Valve has implemented measures to combat these scams but has decided to terminate the retail gift card program. Retailers will sell their remaining inventory but will not restock physical gift cards. Customers can still use existing gift cards on Steam, and digital gift cards will continue to be offered. Consumer protection agencies warn that fraudsters will continue to exploit gift cards from various brands.

Winsage

June 9, 2026

Microsoft’s June 2026 Patch Tuesday: High stakes and hidden features

Microsoft has updated the Windows 11 Insider builds regarding Secure Boot expiration, highlighting its importance in ensuring only trusted software loads during startup. The expiration can lead to vulnerabilities, prompting users to understand the associated risks. Microsoft has provided resources at Microsoft.com/Secure Boot Expiration to help users prepare for these changes. Additionally, the National Institute of Standards and Technology (NIST) has identified a new vulnerability, CVE-2026-42897, emphasizing the need for vigilance in cybersecurity. Users are advised to regularly check for updates, engage with the Microsoft Tech Community, and follow best practices for device security.

Winsage

June 6, 2026

Vibe coding is coming to Windows — how Microsoft Copilot turns anyone into a creator

The AI Age has introduced digital assistants capable of performing tasks such as translation, transcription, and software development efficiently. "Vibe coding" has emerged, allowing individuals to create applications easily. Microsoft is positioned to create a comprehensive "vibe coding ecosystem" with tools like Copilot for code generation, Windows for testing, Azure for deployment, and GitHub for distribution. This ecosystem aims to empower aspiring developers to create and share applications. However, challenges persist, including the need for bug fixes and security adherence. AI tools can significantly benefit educators, new parents, artists, and small businesses by enabling quick development of tailored applications and automating tasks.

AppWizard

June 5, 2026

tinyBuild announces multiplayer open-world zombie survival game Last Harbor for PC

tinyBuild has announced Last Harbor, a multiplayer open-world zombie survival game set to launch on PC via Steam. The game features a post-apocalyptic landscape where players must upgrade their boats and embark on expeditions to gather resources while facing threats from the undead and other players. Inspired by the lockdown experiences of 2020, the game includes familiar weapons, crafting, and base-building mechanics. Players can find safe harbors to socialize and protect their vessels, but must be cautious of attracting the undead during confrontations. An announcement trailer and screenshots are available for viewing.

AppWizard

June 5, 2026

“2,000 to 3,000 new hits every single day”: Dangerous malware “WeedHack” hides in Minecraft mods, gives attackers webcam access, Steam and Discord passwords, and more

Minecraft's modding community is facing a threat from a malware called WeedHack, identified by McAfee researchers. This malware is part of a Malware-as-a-Service campaign that has been active since January and is notably affordable compared to other hacking tools. WeedHack targets systems that mod Minecraft and can compromise Discord accounts, browsers, and cryptocurrency wallets. To reduce risks, users are advised to download mods only from reputable sources like CurseForge and Modrinth, and to invest in strong security software, such as McAfee, which offers features to protect against such threats.

AppWizard

June 3, 2026

Australia warns of crypto investment scams on messaging apps

Australia's financial regulatory authority, the Australian Securities and Investments Commission (ASIC), has issued a cautionary note about a rise in investment scams that exploit messaging apps and social media, particularly targeting younger individuals. These scams often start with enticing ads on social media promoting stock trading tips, leading victims to messaging apps where they are misled into thinking they are receiving legitimate investment advice from impersonated figures. Victims are then directed to counterfeit digital asset trading platforms, resulting in lost funds and additional withdrawal fees. Research from Moneysmart reveals that 23% of Australians aged 18 to 28 own digital assets, with 66% taking a speculative approach to investing, and 29% influenced by social media personalities. Additionally, 72% of Gen Z respondents encountered social media ads for digital assets, and 41% were approached to invest in cryptocurrencies. ASIC has proposed measures to mitigate risks, including avoiding sharing personal information from social media, verifying investment platforms through AUSTRAC, and acting quickly if something seems suspicious. The Australian Parliament passed a digital asset framework bill in April requiring digital asset platforms to obtain an Australian Financial Services License (AFSL) within a year to comply with new regulations.