vulnerabilities Archives

Winsage

July 24, 2026

LG kills McAfee pop-up after Windows boss steps in

LG has decided to stop the McAfee pop-up notifications in its Monitor App Installer following intervention from Pavan Davuluri, head of Windows at Microsoft. Tim Sweeney, CEO of Epic Games, had previously highlighted the annoyance caused by these advertisements. The pop-ups appeared when certain LG devices, like the LG UltraGear, were connected to a Windows device for the first time. Windows allows hardware manufacturers to silently add software during external device installations, which can lead to advertising and mixed user experiences. LG is not exploiting vulnerabilities for software installation, and the automatic process is well-documented. This incident raises questions about review procedures and the implications of advertising within the Windows ecosystem.

Tech Optimizer

July 24, 2026

The most online generation is also the least protected: over half of Gen Z have already faced a cyberattack – Adaderana Biz English

New research from Kaspersky surveyed 7,200 respondents globally and found that Generation Z spends 57% of their time online, primarily using smartphones (67% identify them as their main device). While 59% of Gen Z feel confident in navigating the digital landscape, only 28% consider their digital skills advanced. Alarmingly, only 27% use antivirus software on their mobile devices, and over half (52%) have encountered attacks on their devices or accounts. Significant data, such as personal photographs (38%) and passwords (30%), is stored on smartphones, yet only 28% regularly back up important data. Kaspersky recommends integrating cybersecurity into daily routines and has introduced an interactive game, “Case 404,” to educate Gen Z on recognizing digital threats.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

Winsage

July 23, 2026

Windows 10 has almost three times as many active vulnerabilities as Windows 11, according to researchers

Windows 11 is installed on 78.8% of Windows computers, while 16.9% of users remain on Windows 10. Microsoft ended support for Windows 10 in October 2025, with an extension until 2027. Windows 10 has 1,903 active Common Vulnerabilities and Exposures (CVEs), 2.9 times more than Windows 11, which has 652 CVEs. Of the active CVEs on Windows 10, 66.6% are classified as high or critical risk, with 2.4% actively exploited. Small businesses show the most significant lag in upgrading, with 21.4% still using Windows 10, while two-thirds of large enterprises have moved to Windows 11. The cost of upgrading is a primary barrier for smaller companies.

Winsage

July 22, 2026

Still on Windows 10? You’re carrying 3x the security risk of Windows 11

A study by Lansweeper found that Windows 10 PCs have an average of 1,903 active security vulnerabilities, while Windows 11 systems have only 652 vulnerabilities. As of June 2026, nearly 20% of Windows PCs in the U.S. are still using Windows 10, despite Microsoft ceasing regular updates for it. Users can enroll in the Extended Security Updates (ESU) program for continued security updates until October 12, 2027. Security experts have urged users to upgrade to Windows 11 due to increasing vulnerabilities in Windows 10, while some data privacy experts recommend staying with Windows 10 for as long as possible.

Winsage

July 22, 2026

One in six Windows PCs still runs Windows 10, and the vulnerabilities are piling up

Approximately 17% of all Windows client devices are still running Windows 10, equating to about one in six machines. Windows 11 accounts for 78% of Windows devices, with third-party trackers indicating it surpassed 70% of desktop share as of February 2026. Official support for Windows 10 ended in October 2025, but Microsoft’s Extended Security Updates (ESU) program will provide patches until October 2027 for eligible devices. A typical Windows 10 device has an average of 1,903 active security vulnerabilities, nearly three times the 652 CVE-tracked flaws found on a Windows 11 machine. 66% of Windows 10 vulnerabilities are classified as "high" or "critical." Small and medium enterprises have 21.4% of their Windows devices still on Windows 10, while larger enterprises have 16.6%. The healthcare and pharmaceuticals sectors have 23% of devices on Windows 10, followed by consumer and retail at 22%, and manufacturing at 18%. Lansweeper is urging organizations to enroll in the ESU program and address reasons for remaining on Windows 10 as 2026 approaches.

Tech Optimizer

July 21, 2026

Advanced Threat Protection: How AI Transforms Enterprise Security

An attacker is testing stolen passwords against a company with inadequate firewall protection, highlighting the flaws in traditional security measures. Modern attacks, including ransomware and phishing, have evolved, necessitating advanced threat protection (ATP) that incorporates artificial intelligence (AI) for improved threat detection and response. AI-driven ATP identifies attacks that conventional tools miss, such as fileless malware and targeted phishing, by learning normal operating patterns and flagging deviations. Traditional security relies on known malware signatures, which are ineffective against zero-day attacks and polymorphic malware that changes its identity. Cloud misconfigurations and hybrid security gaps further complicate security. AI enhances detection by focusing on malicious behaviors rather than just file signatures, allowing for rapid identification of threats. Automated incident response can isolate affected endpoints and terminate malicious processes quickly. Behavioral analytics and threat intelligence integration improve ATP effectiveness by understanding user behavior and recognizing attack patterns. AI-powered ATP significantly reduces breach containment time and false positives, shifting the focus from reactive cleanup to proactive prevention. Best practices for maximizing ATP include integrating it into existing security operations, keeping machine learning models updated, and regularly testing defenses against real-world threats.

Winsage

July 21, 2026

One in six PCs still run Windows 10, and they’re far less secure than Windows 11

Windows 10 officially reached its end of support in October 2025. Windows 11 has a 78.8% share of Windows devices, while Windows 10 maintains 16.9%. A typical Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11, with 66.6% of Windows 10 vulnerabilities rated as high or critical. Microsoft's Extended Security Updates (ESU) program has been extended until October 12, 2027, providing critical security patches for eligible Windows 10 devices. The rise in memory and storage prices has made older Windows 10-compatible hardware more economically viable for some users.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

On July 21, Microsoft announced an emergency security update, KB5121767, for Windows 11 versions 25H2 and 24H2, due to complications from the July Patch Tuesday update, KB5101650, which caused performance issues for certain Dell users, including unexpected system shutdowns. The problem was linked to a conflict between the Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework Processor Participant driver. Affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. Microsoft recommends that only users of these impacted devices install the update, while assuring unaffected users that no action is necessary. Additionally, Microsoft acknowledged issues affecting Windows Server Update Services that hinder Windows Update scans, stemming from a buildup of publishing metadata, and has implemented a service-side mitigation to address this.