Windows operating systems Archives

Winsage

April 1, 2025

Redesigned “Blue Screen Of Death” Being Tested In Windows 11

Microsoft experimented with a black version of the Blue Screen of Death (BSOD) in 2021 but ultimately reverted to the classic blue screen. In the latest versions of Windows 11 (24H2 and beyond) for Windows Insider program participants, the BSOD has changed to a green hue in the Beta, Dev, and Canary Channels.

Winsage

March 26, 2025

New Windows 0-Day Vulnerability Let Remote Attackers Steal NTLM Credentials

A critical vulnerability affecting various Windows operating systems, including Windows 7, Server 2008 R2, Windows 11 v24H2, and Server 2025, allows attackers to capture NTLM authentication credentials through interactions with malicious files in Windows Explorer. Exploitation can occur when users open shared folders, insert USB drives with malicious files, or view downloaded files. The vulnerability is similar to a previously patched flaw (CVE-2025-21377) but has not been fully documented. Security researchers have developed micropatches available for free until Microsoft releases a permanent fix. These micropatches support a wide range of Windows versions, including legacy and currently supported systems. The micropatches have been automatically distributed to affected systems with the 0patch Agent installed.

Winsage

March 26, 2025

New Windows 0-Day Vulnerability Let Remote Attackers Steal NTLM Credentials

A critical vulnerability affects all Windows operating systems from Windows 7 to Windows 11 v24H2 and Server 2025, allowing attackers to capture NTLM authentication credentials through malicious files viewed in Windows Explorer. Exploitation can occur when users open shared folders, insert USB drives with malicious files, or view previously downloaded files. The vulnerability is similar to a previously patched flaw (CVE-2025-21377) but has not been publicly documented. Security researchers have developed micropatches through 0patch to temporarily mitigate the issue, which will be available at no cost until Microsoft releases a permanent solution. The micropatches support various Windows versions, including legacy and currently supported systems, and can be automatically deployed without requiring system reboots.

Winsage

March 26, 2025

0patch releases yet another free fix for yet another 0day vulnerability in Windows that Microsoft has not addressed

0patch has released micropatches for a critical SCF File NTLM hash disclosure vulnerability affecting all Windows versions from Windows 7 to Windows 11 and Windows Server editions from 2008 to 2025. This vulnerability allows attackers to obtain users' NTLM credentials by having them view a malicious file in Windows Explorer. 0patch operates on a subscription model and provides security fixes for unsupported Windows versions, as well as complimentary patches for unaddressed vulnerabilities. Specific details about the vulnerability are currently withheld, pending an official fix from Microsoft.

Winsage

March 26, 2025

Download BleachBit (free) for Windows, macOS and Linux

BleachBit is an open-source system cleaning tool that helps users enhance disk capacity by removing unnecessary files and improving privacy. It permanently deletes files to prevent recovery, making it suitable for users handling sensitive information. The tool offers features such as shredding unused disk space, clearing browser histories, and removing software logs. BleachBit is free to use, lightweight, and compatible with various operating systems, including Windows, Linux, and macOS (with limited functionality). It supports cleaning for multiple applications and provides command-line functionality for advanced users. Additionally, BleachBit can be run from a USB drive without installation. Alternatives to BleachBit include CCleaner, Advanced SystemCare, and DaisyDisk, each offering different functionalities and features.

AppWizard

March 23, 2025

System Shock 2: 25th Anniversary Remaster Preview – How Nightdive Studios approaches remastering an influential classic PC game

Nightdive Studios has released a series of modern ports and remasters, including a ground-up remake of the 1994 classic, System Shock. They acquired the license for System Shock nearly a decade ago and are now working on the System Shock 2: 25th Anniversary Remaster, which has taken considerable time to develop. The remaster will feature optimized controller support for modern consoles and will maintain the original emotional resonance of the game. It will include a Vault with media related to the game's original creation. The remaster is set to be released on June 26 for PlayStation 5, PlayStation 4, Xbox Series X|S, Xbox One, Nintendo Switch, and PC (Steam, Epic, GOG).

Winsage

March 19, 2025

Huawei’s HarmonyOS PCs set to launch in 2025, rumors of Windows exit intensify

Huawei has faced challenges in obtaining technologies since being placed on the US Entity List in 2019, impacting both its smartphone and PC divisions. The license for Windows operating systems for PCs is set to expire, raising concerns about Huawei's ability to compete in the global PC market. In response, Huawei is investing in its own operating system, HarmonyOS, and strengthening partnerships with local suppliers while exploring new markets.

Winsage

March 18, 2025

Hidden clues suggest Microsoft is moving another part of Windows 11’s Control Panel to the Settings app – and this time it’s mouse options

Microsoft is transitioning mouse options from the Control Panel to the Settings app as part of a strategy to phase out the Control Panel in Windows operating systems. Currently, these changes are not visible in Windows 11 and are only present in the Windows Server environment. The relocated mouse properties include features like pointer trails and customization options, which are now found under Accessibility and Bluetooth & Devices in the Settings app. The visual presentation of these options in the Settings app is more polished compared to the Control Panel. This migration has been ongoing since 2020, with the Control Panel gradually redirecting users to the Settings app. Despite this transition, the Control Panel is unlikely to be completely retired in the near future due to the complexity of determining which features to retain.

Winsage

March 8, 2025

Free Alternatives to Paid Windows Software

Windows operating systems often require third-party software for specialized tasks, with free alternatives available to replace paid options. 1. BleachBit is used for system cleaning as a free substitute for CCleaner Pro, effectively enhancing PC performance by removing unnecessary data without tampering with the Windows Registry. 2. Bulk Crap Uninstaller (BCUninstaller) is a free tool for uninstalling programs and bloatware, scanning for leftover files and simplifying the cleanup process with filtering options and color-coded listings. 3. Google Docs is preferred over Microsoft 365 for its user-friendly nature and free 15 GB storage per Gmail account, while LibreOffice is recommended as an alternative for standalone applications. 4. GIMP serves as a free substitute for Adobe Photoshop, offering essential graphic design tools without being resource-intensive. 5. Kdenlive is a free video editor that meets basic video editing needs and is compatible with lower-end PCs, providing a comprehensive suite of features and regular updates. 6. Audacity is used for audio editing, capable of handling both basic and professional tasks, with tools for noise elimination and vocal enhancement. 7. 7-Zip is a lightweight file compression and archiving tool that offers superior compression capabilities and password protection, operating unobtrusively in the background.

Winsage

March 4, 2025

Feds add Windows, router vulnerabilities to actively exploited list

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its list of actively exploited vulnerabilities, highlighting several critical exploits. Key vulnerabilities include: - CVE-2023-20118: Affects specific Cisco Small Business Router models (RV016, RV042, RV042G, RV082, RV320, RV325), allowing hackers to remotely execute arbitrary commands via specially crafted HTTP requests, potentially granting root-level privileges. - CVE-2023-20025: Could enable hackers to bypass admin credential requirements for CVE-2023-20118. - CVE-2018-8639: Affects various Windows operating systems (Windows 7, Windows Server 2012 R2, Windows 10) due to the Win32k component's failure to manage memory objects, allowing local attackers to execute arbitrary code in kernel mode. Neither Microsoft nor Cisco has issued specific security advisories regarding these vulnerabilities.