Windows and Linux

Winsage
May 11, 2026
Open-source endpoint detection tools have typically been divided between Windows and Linux, with Windows solutions focused on Sysmon and Linux solutions on eBPF or auditd. Rustinel is a Rust-based endpoint agent that consolidates these efforts by gathering telemetry from both operating systems using ETW on Windows and eBPF on Linux, normalizing the data into a unified model. It evaluates the information against Sigma rules, YARA signatures, and atomic indicators of compromise, storing alerts in ECS-compatible NDJSON format for integration with SIEM or log-analysis platforms. Rustinel supports a range of events on Windows, including process creation, network activity, and PowerShell executions, while Linux support currently includes process, network, file, and DNS telemetry. It operates in user mode on both platforms, requiring specific conditions for installation. Unlike commercial EDR solutions that use kernel drivers, Rustinel's user-mode design prioritizes simplicity and stability, although it acknowledges limitations in tamper resistance and visibility. The agent utilizes three detection engines: Sigma for behavioral matching, YARA for scanning executables, and an IOC engine for deterministic checks. While it leverages existing content familiar to defenders, it has coverage gaps for certain advanced threats. Rustinel is available on GitHub under the Apache 2.0 license.
Winsage
May 10, 2026
Between May 6 and May 7, 2026, the official JDownloader website was compromised in a supply chain attack, leading to the distribution of malicious installers for Windows and Linux users. Attackers altered download links, redirecting users to harmful files, specifically targeting the Windows “Alternative Installer” and the Linux shell installer. A Reddit user reported the issue after Microsoft Defender flagged the installers as malicious, noting unusual developer names instead of the expected publisher, AppWork GmbH. JDownloader developers confirmed the breach and temporarily took down the website for investigation, revealing that an unpatched vulnerability in the content management system allowed the attackers to modify download pages. The genuine installer packages were not altered, and the malicious links were removed. The website was restored on May 8–9, 2026, with verified clean installer links. Indicators of compromise included specific hashes and compromised URLs related to the attack.
Winsage
April 27, 2026
Linus Torvalds has announced the closure of the merge window for Linux version 7.1, allowing public testing to begin with the first release candidate now available. This version includes a significant rewrite of the NTFS code aimed at improving dual-boot experiences between Windows and Linux. Additionally, Linux 7.1 will gradually phase out support for the i486 Intel processor and some older networking technologies and SoC configurations. Users can find the release candidate in Linus' Linux Git repository and are encouraged to report any bugs.
Winsage
April 25, 2026
Open-source developer "Hailey" has introduced the Windows 9x Subsystem for Linux (WSL9X), which allows users to run both Windows and Linux applications simultaneously on classic versions of Windows, including Windows 95, 98, and Me. WSL9X operates by running a modern Linux kernel (6.19) alongside the Windows 9x kernel, enabling features such as paging, memory protection, and pre-emptive scheduling. It is neither emulation nor virtualization and does not require hardware virtualization. WSL9X is available for download, but users must build it from the source provided by Hailey. It allows access to a genuine Linux terminal alongside classic Windows applications, enabling various tasks without compromising system stability.
Winsage
April 23, 2026
A computer enthusiast has developed a tool called WSL9x, which allows users to run contemporary Linux kernels on early versions of Windows (from Windows 95 onward) and on machines with 486 CPUs. WSL9x enables the simultaneous operation of Windows and Linux applications without relying on hardware virtualization. The architecture includes a client program, wsl.com, which manages a DOS window for the console driver. Meanwhile, the Linux community is phasing out support for the Intel 486 CPU, with developers removing related support options in the Linux kernel, marking the end of support for this processor.
AppWizard
April 15, 2026
Nothing Warp allows Android users to share files, text, and links with Mac, Windows, and Linux devices. It uses a Chrome extension and Google Drive to maintain file privacy and user control. The app integrates into Android's share sheet for easy transfers. Originally an internal tool for Nothing employees, Warp is now available for all Android users via the Play Store, with the Chrome extension accessible from the Chrome Web Store. It is compatible with all Android devices, making it a universal option for efficient file sharing.
Winsage
April 8, 2026
Gaming on Linux has advanced significantly due to Valve's Proton compatibility layer and the Steam Deck, allowing most single-player PC games to run on the platform. Data from ProtonDB indicates that nearly every Windows game is now playable on Linux. However, hypervisor-based DRM bypass techniques have emerged, weakening Denuvo's anti-tamper protections and reviving day-zero piracy. Hypervisors operate beneath the operating system, allowing pirates to manipulate Denuvo's validation checks, drastically reducing the time to crack games. This resurgence of piracy poses security risks, as users must disable kernel-level security features, exposing their systems to vulnerabilities. Irdeto, the company behind Denuvo, recognizes the need for updated security measures, but these could complicate the gaming experience for Linux users. Linux's open-source nature complicates enforcing kernel integrity, making effective anti-cheat and DRM systems challenging. Despite these issues, Linux gaming has seen considerable growth, but the threat of hypervisor-based piracy could jeopardize this progress and lead to tighter DRM measures that may reduce Linux compatibility.
Winsage
April 6, 2026
The Linux gaming market share among Steam users has reached 5.3%, a historic high, coinciding with Windows usage dropping below 93%. Windows 10 usage has decreased by nearly 15%, while Windows 11 has gained only 10.6%. SteamOS Holo 64-bit is the leading Linux distribution, making up 25% of all Linux users, largely due to the popularity of the Steam Deck. macOS has gained 1.2% market share, indicating a shift in gaming preferences. Valve announced plans to expand SteamOS to desktop PCs, which may further boost Linux gaming adoption.
Winsage
March 24, 2026
Microsoft has introduced several updates for Windows 11, including a simplified installation process for the Windows Subsystem for Linux (WSL), allowing users to install it with a single command or via the Microsoft Store. Additionally, there are enhancements in interoperability between Windows and Linux file systems, as well as improvements in networking capabilities. WSL provides a genuine Linux kernel and supports GUI applications, facilitating seamless communication with the Windows environment.
Winsage
March 23, 2026
Microsoft is rolling out enhancements for Windows 11 in test builds for Windows Insider members during March and April of 2026. Key updates include: - Users can now reposition the taskbar to the top or sides of their screens and access more personalization settings. - The integration of the Copilot feature will be reassessed across applications like Snipping Tool, Photos, Widgets, and Notepad, focusing on specific use cases. - Windows Update will allow users to skip updates during initial setup, shut down or restart without mandatory updates, pause updates for extended periods, and reduce the frequency of automatic restarts and notifications. - File Explorer will see performance upgrades, including faster startup times, fewer visual artifacts, and enhanced stability. - The Feedback Hub will have an updated interface for easier feedback submission and improved visibility of user messages. - Future developments for Windows 11 will focus on enhancing system performance, stability, and predictability, reducing resource consumption, boosting application speed, improving driver stability, minimizing crashes, enhancing peripheral connectivity, and ensuring reliable updates. - There will be ongoing improvements to the Windows Subsystem for Linux to enhance file operations between Windows and Linux environments.
Search