vulnerability Archives

Winsage

July 11, 2026

AI Threat Forces Microsoft To Update Windows Patch Guidance

Microsoft is advocating for a reevaluation of Windows patch management practices due to the rapid evolution of artificial intelligence (AI) impacting cybersecurity. The company emphasizes that traditional timelines for patch deployment, typically spanning several weeks after the monthly Patch Tuesday, are inadequate against modern cyber threats. Microsoft recommends organizations shorten deployment windows to under three days for quality updates, with immediate installation deadlines and minimal user grace periods. To support these changes, Microsoft is enhancing Windows Autopatch with a new reporting dashboard for patch compliance and security insights. The company is promoting cloud-managed deployment through Microsoft Intune and Windows Autopatch while continuing to support legacy tools. Additionally, Microsoft is introducing Windows Hotpatch technology, allowing security updates to be installed without immediate reboots, and advocating for the use of identity-based access controls to isolate unpatched devices. The guidance reflects a shift from scheduled patching to continuous risk management, encouraging organizations to prioritize high-risk assets and automate update deployments. Microsoft is also investing in AI-assisted vulnerability discovery and automated code analysis to improve defensive capabilities. The overarching message is that enterprises must adapt their update strategies to address the accelerated pace of AI-driven exploitation.

AppWizard

July 11, 2026

Z-TEXT, a zk-SNARKs Blockchain Messenger, Launches Channels, Completing a 4-in-1 Privacy App on BitcoinZ

Z-TEXT has launched its Channels feature, transforming its platform into a comprehensive 4-in-1 privacy ecosystem built on the BitcoinZ blockchain. This system features a four-layer security architecture, including local device encryption, zk-SNARKs shielding, BitcoinZ blockchain settlement, and post-quantum protection. The Channels feature allows creators to maintain control over their broadcasts, with subscribers connecting directly through their wallets, ensuring no central authority can seize or delete subscriber information. Users can restore their channel and its history on any new device using a 24-word seed phrase. Z-TEXT emphasizes the importance of permanence in privacy, contrasting with the trend of automatic message deletion. The application requires no phone number, email, or SIM card for identity verification, relying solely on the 24-word seed phrase. Z-TEXT has been in closed beta without critical vulnerabilities and is preparing for public release on major app stores. The average message fee is approximately [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: Z-TEXT, a pioneering zk-SNARKs blockchain messenger, has recently unveiled its innovative Channels feature, marking a significant evolution in its privacy-focused ecosystem. Built on the BitcoinZ blockchain, Z-TEXT is designed with a robust four-layer security architecture that includes local device encryption, zk-SNARKs shielding, BitcoinZ blockchain settlement, and post-quantum protection. The Shift to a 4-in-1 Privacy Ecosystem This launch signifies Z-TEXT's transformation from a conventional messaging platform to a comprehensive 4-in-1 privacy ecosystem. In this new paradigm, users' interactions are securely housed within their wallets rather than in centralized company databases. As Eric Pierrot, the founder of Z-TEXT LLC, aptly notes, "Needing to disappear is proof you can't survive the erosion of time—or what's coming with quantum computing." The Channels feature empowers creators by allowing them to maintain control over their broadcasts. Each subscriber connects directly to the channel through their own wallet, eliminating the risk of a central authority seizing, selling, or deleting subscriber information. This decentralized approach ensures that the integrity of the channel remains intact, regardless of external pressures. Subscribers can receive messages from the broadcaster at a fixed cost, whether the audience comprises ten or ten thousand individuals. In the event of a lost device, users can effortlessly restore their channel and its complete history on any new device using the same 24-word seed phrase that secures their entire account. A Commitment to Privacy and Permanence The launch of Channels builds upon Z-TEXT's commitment to privacy, a principle the company has championed since releasing its privacy manifesto on IPFS and timestamping it on the BitcoinZ blockchain earlier this year. While many messaging applications promote automatic deletion as a feature, Z-TEXT argues that true privacy is rooted in permanence. Pierrot emphasizes, "If your encryption actually holds, the message doesn't need to vanish to stay safe. Eternal memory is our signature—we built for permanence, not for disappearing." Having successfully navigated a closed beta phase without any critical vulnerabilities reported through its on-chain bug bounty program, Z-TEXT is now gearing up for a public release on major app stores, including Google Play and the Apple App Store. The application requires no phone number, email address, or SIM card, with identity verification based solely on a 24-word seed phrase. In addition to its messaging capabilities, Z-TEXT integrates a password manager and a crypto wallet, all while maintaining an impressively low average message fee of approximately [cyberseo_openai model="gpt-4o-mini" prompt="Rewrite a news story for a business publication, in a calm style with creativity and flair based on text below, making sure it reads like human-written text in a natural way. The article shall NOT include a title, introduction and conclusion. The article shall NOT start from a title. Response language English. Generate HTML-formatted content using tag for a sub-heading. You can use only , , , , and HTML tags if necessary. Text: Z-TEXT, a zk-SNARKs blockchain messenger built on BitcoinZ The four-layer security architecture behind Z-TEXT: local device encryption, zk-SNARKs shielding, BitcoinZ blockchain settlement, and post-quantum protection. The launch completes Z-TEXT's shift from messenger to a 4-in-1 privacy ecosystem, where audiences live in subscribers' wallets, not company databases. Needing to disappear is proof you can't survive the erosion of time—or what's coming with quantum computing.”— Eric Pierrot, founder of Z-TEXT LLCSHERIDAN, WY, UNITED STATES, July 11, 2026 /EINPresswire.com/ -- Z-TEXT, a zk-SNARKs blockchain messenger, built on BitcoinZ, has launched Channels, a broadcast feature where the creator—not a platform—controls the channel. Each subscriber holds their own connection to the channel in their own wallet, so there is no central list a company can seize, sell, or delete. Channels joins Z-TEXT's existing privacy ecosystem of shielded messenger, password manager, and crypto wallet, all accessible through a single 24-word seed phrase.A single Channels transaction reaches any number of subscribers, from ten to ten thousand, at the same fixed cost. No company sits between the broadcaster and the audience with the ability to suspend the channel or hand over the subscriber list. If a device is lost, the channel and its full history can be restored on any new device using the same 24-word seed phrase that recovers the rest of the account.The launch extends a position Z-TEXT has held publicly since June, when the company published a privacy manifesto on IPFS and timestamped it on the BitcoinZ blockchain, arguing that permanence, not disappearing messages, is the stronger privacy guarantee. Most messaging apps market automatic deletion as a safety feature. "Needing to disappear is proof you can't survive the erosion of time — or what's coming with quantum computing," said Eric Pierrot, founder of Z-TEXT LLC. "If your encryption actually holds, the message doesn't need to vanish to stay safe. "Eternal memory is our signature—we built for permanence, not for disappearing."Z-TEXT has been operating in closed beta, during which no critical vulnerability was reported through the company's on-chain bug bounty program. The company said it is preparing for public release on major app stores, including Google Play and the Apple App Store.Z-TEXT is a zk-SNARKs blockchain messenger built on BitcoinZ, a blockchain operating since September 10, 2017, that combines Bitcoin's mathematical structure with Zcash's zk-SNARKs privacy technology. The application requires no phone number, email address, or SIM card; identity is derived from a 24-word seed phrase. Z-TEXT combines a shielded messenger, password manager, crypto wallet, and channels in one application, with message fees averaging approximately $0.00003 per message. The company has published its full threat model publicly, including known limitations, and operates a live bug bounty program funded on-chain.eric pierrotZ-Text llccontact@z-text.comVisit us on social media:LinkedInBlueskyYouTubeOther Z-TEXT: The Architecture of Permanent Data Security Legal Disclaimer: EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above. You just read: News Provided By July 11, 2026, 18:53 GMT Share This Article EIN Presswire's priority is author transparency. We do our best to weed out false and misleading content. The content above is the sole responsibility of the author who makes it available. If you have any complaints, kindly contact the author above." temperature="0.3"].00003. The company has made its full threat model publicly available, demonstrating transparency regarding known limitations, and continues to operate a live bug bounty program funded on-chain. " max_tokens="3500" temperature="0.7" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].00003.

Tech Optimizer

July 11, 2026

Microsoft closes RoguePlanet vulnerability in Defender: SYSTEM privileges via the antivirus engine

A vulnerability known as RoguePlanet was identified in Microsoft Defender, tracked as CVE-2026-50656. This flaw allows local privilege escalation to the NT AUTHORITYSYSTEM account, requiring an attacker to have local code execution capabilities. It can be exploited through methods such as opening malicious email attachments. The vulnerability is categorized under CWE-59: “Improper Link Resolution Before File Access” and involves a race condition that affects the Defender engine's operations. RoguePlanet was disclosed by security researcher Nightmare-Eclipse on June 10, 2026, and confirmed by various security firms. Microsoft released a fix in version 1.1.26060.3008 of the Microsoft Malware Protection Engine, which should be installed automatically in standard Windows configurations. Users can verify their engine version using PowerShell. The vulnerability affects both Windows 10 and Windows 11 systems with the June 2026 security updates, and disabling real-time protection does not reliably mitigate it.

TrendTechie

July 11, 2026

Assassin’s Creed Black Flag Resynced залили на торренты до официального релиза

Assassin’s Creed Black Flag Resynced was leaked hours after the PC pre-load opened, with a pirated version appearing on torrent sites. The leak originated from an unencrypted build uploaded during the pre-load phase. Pirates bypassed security measures using a hypervisor, requiring the disabling of several Windows security features. The official launch for PC is scheduled for July 9, with console players also gaining access at midnight on that date in their respective time zones.

AppWizard

July 10, 2026

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Researchers analyzed 281 popular free VPN applications on the Google Play Store and found significant privacy and security shortcomings. The study, conducted by teams from the University of Michigan, the University of New Mexico, and IIT Delhi using a framework called MVPNalyzer, revealed that flagged apps had over 2.4 billion downloads. Key findings included: - Five apps transmitted configuration files unencrypted, allowing attackers to intercept and modify them. - 29 apps allowed user traffic to leak outside the encrypted tunnel, with 24 leaking DNS traffic and six leaking full browsing traffic. - 169 apps made no effort to disguise their traffic, making it identifiable to network operators or government censors. - 76 apps transmitted the device's Advertising ID to advertisers, and over 80% contacted known advertising and tracking servers. - Only one of 108 OpenVPN configurations adhered to recommended security practices; 89% used a single authentication method, and nearly 20% employed outdated encryption techniques. - Many apps passed through Play Store checks without adequate scrutiny, with safety labels often serving as marketing tools rather than security indicators. These findings align with previous research highlighting similar issues in popular Android VPN apps. Users are advised to be cautious when selecting VPNs, prioritizing those with recent independent security audits.

Winsage

July 10, 2026

Microsoft goes all in on new AI-powered Windows security strategy – what it means for you

Microsoft is integrating artificial intelligence into its vulnerability management processes to enhance cybersecurity, particularly for its Windows operating system used by over 1.5 billion devices. The company is implementing an automated, AI-driven approach to identify vulnerabilities earlier in the development cycle, allowing for quicker fixes. Microsoft has developed a cloud-based scanning system called MDASH, which has identified 16 vulnerabilities since its introduction, four of which were critical and promptly patched. AI tools are being embedded earlier in the software development lifecycle, and Microsoft is updating its Secure Development Lifecycle best practices to address potential AI-enabled attack techniques. The shift towards an AI-enhanced system will lead to an increase in the volume of security updates, requiring enterprise administrators to adopt more agile approaches to testing and deploying updates. Microsoft has introduced a feature called Known Issue Rollback (KIR) to help admins revert problematic changes. The company emphasizes the importance of human oversight in evaluating AI findings and making informed decisions.

Winsage

July 10, 2026

Patch for Windows Defender 0-day could allow attackers to fill hard disk

A recent Microsoft patch addressing the RoguePlanet vulnerability (CVE-2026-50656) in its Defender security engine has raised concerns about disk space issues for Windows users. The vulnerability allows remote attackers to gain administrative control over Windows 10 and 11 systems. The patch, which updates the Microsoft Malware Protection Engine, is automatically installed without user action. However, it may enable attackers to fill a hard drive by writing excessive data due to changes in the mpengine.dll driver. These changes can cause a data leak of 8 bytes when opening a file and involve new functionalities in SpyNet, which could lead to mass file-writing behavior. Typically, Defender limits file sizes during scanning, but the spynet functions may maintain a local copy of the Zone.Identifier Alternate Data Stream file, potentially exhausting disk space.

Winsage

July 9, 2026

Evolving Windows vulnerability management to meet the speed of AI-powered discovery

Microsoft is enhancing its security measures for Windows by integrating artificial intelligence (AI) to improve the discovery and analysis of vulnerabilities across its codebase. This includes the use of a multi-model agentic scanning harness (MDASH) that employs various AI models to identify and validate potential vulnerabilities efficiently. A dedicated cloud infrastructure supports this scanning process, which aims to minimize false positives and reduce the time from discovery to customer protection. The company collaborates across divisions to promote AI-powered tools and practices, refining its internal systems to integrate vulnerability discovery into development processes. This includes updating Secure Development Lifecycle (SDL) practices to address AI-enabled attack techniques. Customers can expect an increase in security updates as AI enhances vulnerability discovery capabilities. Windows updates undergo rigorous validation through programs like the Security Update Validation Program (SUVP) to ensure quality and compatibility. Microsoft also offers tools like Known Issue Rollback (KIR) for quick reversion of changes if issues arise during updates. Customers are encouraged to stay current with security updates and utilize resources like the Security Update Guide for prioritizing protections. To facilitate smoother update processes, Microsoft provides optional non-security preview releases for compatibility testing and employs modern management capabilities like Windows Autopatch to automate security updates. Azure Arc enables rebootless updates for Windows Servers, while Microsoft Defender and Intune help manage vulnerabilities and compliance across endpoints. Overall, Microsoft is committed to continuous improvement in its security practices to adapt to the evolving threat landscape and ensure customer protection through timely updates.

Winsage

July 9, 2026

Microsoft Details How It’s Using AI to Improve Windows Security

Microsoft has reaffirmed its commitment to security, focusing on enhancing protection for Windows users. The company is utilizing a multi-model agentic scanning harness (MDASH) that incorporates various AI models to identify Windows vulnerabilities earlier in the development process. This proactive approach allows security experts to detect potential issues before public releases. Microsoft is also investing in technologies that use AI to streamline the development of fixes while maintaining human oversight during code reviews. The company acknowledges the dual nature of AI in security, as it accelerates both the identification of vulnerabilities and the potential for exploitation. Microsoft aims to strengthen its systems to find vulnerabilities earlier and deliver timely security patches to customers.

Tech Optimizer

July 8, 2026

Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks

A recent examination of PHP's database driver layer revealed two significant vulnerabilities in PHP Data Objects (PDO) affecting the pdo_firebird and pdo_pgsql drivers. The first vulnerability, CVE-2026-25289, allows SQL injection attacks through NUL byte manipulation in quoted strings, compromising the safety of SQL statements. The second vulnerability, CVE-2026-25290, can cause application crashes due to null pointer dereferencing when invalid multibyte character sequences are processed. Both vulnerabilities stem from assumptions about C string handling and have been addressed in a security release. Researchers recommend treating binary input as untrustworthy and encapsulating financial workflows within atomic transactions.