Windows systems Archives

Winsage

August 3, 2026

Microsoft warns Windows PC users of Russian hackers on hotel WiFi

Microsoft has issued a warning to Windows PC users about Russian hackers targeting individuals using hotel WiFi networks. The campaign, named CaptiveCrunch and attributed to the Storm-2945 group, focuses on corporate travelers and employs tactics like credential theft and malware distribution through compromised guest networks. Microsoft has been monitoring this activity since May, noting its impact on hospitality networks utilizing captive portals. Hackers have been redirecting users to counterfeit sign-in pages to steal credentials without phishing emails. The threat may also extend to Android devices, with hackers using deceptive techniques to manipulate users into downloading malicious APK files. The hackers employ fake verification checks and sign-in prompts, sometimes misleading users into Microsoft's legitimate authentication process to gain access to accounts. Microsoft has identified a specific remote-access trojan named CornFlake, which can record keystrokes, steal credentials, and capture screenshots. Recommendations for travelers include using mobile hotspots, avoiding updates through captive portals, strengthening authentication methods, and blocking unnecessary device-code authentication.

Winsage

August 1, 2026

Microsoft Issues Hotel Wi-Fi Warning For Windows PC Users

Microsoft has issued a warning to organizations regarding the risks associated with public and hospitality network infrastructures, citing a new hacking threat from Russian cyber actors targeting travelers for malware distribution and credential theft. This warning follows the identification of a global campaign named CaptiveCrunch, linked to Storm-2945, which has been targeting corporate travelers since early May by exploiting compromised guest networks. Attackers are manipulating hospitality networks to facilitate credential theft and malware delivery, using tactics such as redirecting network traffic to counterfeit sign-in pages. The campaign affects both Windows and Android devices and employs techniques that include presenting fake verification checks and software updates. Some victims have been misled into participating in Microsoft’s legitimate device-code authentication process, allowing attackers to gain access to accounts without stealing passwords. Microsoft advises travelers to treat guest networks as untrusted and recommends using mobile hotspots, avoiding updates through captive portals, and enhancing security measures. Malicious tools identified include the Windows remote-access trojan (RAT) named CornFlake, which can steal credentials, record keystrokes, and hijack audio and video capabilities.

AppWizard

July 31, 2026

Report shows 34% of physical PS5 games and 50% of Xbox Series X games do not work fully without a download first

Sony plans to end production of game discs by 2028, indicating a shift towards digital gaming. An analysis shows that physical discs may not ensure offline gaming access, as recent outages of Xbox servers have hindered users' ability to play their games. This raises concerns about game preservation, as reliance on online servers and downloads complicates the safeguarding of digital experiences. Unlike PC gamers, who can still use external disc drives, future PS6 owners will not have this option, making it harder for physical media enthusiasts and preservationists.

Tech Optimizer

July 28, 2026

ClamAV Setup: Linux Antivirus in 12 Steps [2026]

Malware can threaten Linux systems, which are often mistakenly believed to be immune to viruses. It can be introduced through email attachments, infected files, or compromised plugins, especially when Linux servers interact with Windows clients or handle internet uploads. ClamAV is an open-source antivirus engine maintained by Cisco Talos, designed for scanning mail traffic and file uploads. As of mid-2026, the stable release is ClamAV 1.5.x, with version 1.5.2 being the latest patch. To deploy ClamAV, users need root or sudo access on a compatible Linux machine, at least 2 vCPUs and 2GB of RAM, 5GB of free disk space, and outbound HTTPS access to ClamAV’s signature mirrors. The installation process involves several steps, including configuring freshclam for automatic updates, validating detection with the EICAR test file, and setting up cron jobs for regular scans. ClamAV can also be integrated with mail servers and a SIEM for enhanced security. Common pitfalls in deployment include skipping the initial freshclam run and using clamscan instead of clamdscan for repeated scans. ClamAV is free for commercial use and can also scan Windows systems, although it does not replace comprehensive endpoint protection solutions.

AppWizard

July 24, 2026

Four classic Xbox games are now playable with Backward Compatibility on PC

Microsoft is reviving the Xbox Backward Compatibility program by allowing classic Xbox games to be played on Windows PCs. The initiative, originally launched in 2015 for Xbox 360 games on Xbox One, had been effectively concluded in 2019. The new PC offering includes four original Xbox titles: BLiNX: The Time Sweeper, Conker: Live and Reloaded, Crimson Skies: High Road to Revenge, and Fuzion Frenzy, which can be played at no extra cost by owners of digital copies and are available to Xbox Game Pass subscribers. The PC versions feature enhancements such as customizable graphics settings, higher rendering resolutions, V-Sync support, fullscreen and windowed display modes, anisotropic filtering, improved anti-aliasing, and additional visual upgrades. Minimum system requirements include a GPU like Nvidia GTX 950 or AMD Radeon RX 550, a CPU with at least 4 cores, 8GB RAM, and Windows 11. Recommended specifications include a GPU like Radeon RX 68005 or Nvidia GTX 1070 Ti, a 6-core CPU, DirectX12 API, 8GB VRAM, and Windows 11. Microsoft plans to add more backward-compatible titles and features, including Xbox achievement support, in the future.

Winsage

July 21, 2026

LG admits its monitor app installs bloatware via Windows Update, and Microsoft is letting it happen

A growing number of LG monitor users have reported that connecting their devices to Windows systems results in the automatic installation of the LG Monitor App Installer, which prompts users with a McAfee trial advertisement. YouTuber Gamers Nexus found that connecting an LG UltraGear monitor led to the installation of LG's driver package and the LG Monitor App Installer, with the McAfee pop-up appearing 31 times over 32 boots. This automatic installation is facilitated by device metadata, which Windows uses to download associated applications without user notification. Users must be signed into the Microsoft Store and connected to the internet for this to occur, leading to frustrations about transparency. Reports of unsolicited McAfee pop-ups have been shared on platforms like Reddit, with users confirming the app's installation was logged as part of a Windows Update. LG has acknowledged the inclusion of McAfee in their app updates, promoting a free trial, which has raised privacy concerns. The app's rating on the Microsoft Store has dropped to around 1 out of 5 due to user dissatisfaction. Users can prevent automatic installations by adjusting Group Policy settings, while macOS requires manual approval for third-party applications. Neither Microsoft nor LG has formally addressed the concerns regarding silent installations and McAfee pop-ups.

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

Winsage

July 14, 2026

Microsoft says stop waiting to install Windows updates. Here’s why

Microsoft has revised its guidance on Windows updates, urging users to install them within three days due to the rise of AI-driven cyber threats. Jeremy Chapman from Microsoft 365 emphasized the need for timely updates, recommending a maximum deferral period of two days for quality updates. In June, Microsoft patched 206 vulnerabilities, highlighting the importance of these updates to avoid significant risks. AI can help attackers exploit vulnerabilities quickly, making the practice of delaying updates obsolete. Microsoft has also developed an AI tool, MDASH, to identify vulnerabilities in Windows code.

Winsage

July 14, 2026

Microsoft’s July 2026 Patch Tuesday is here

Microsoft has introduced a point-in-time restore feature on its Microsoft Learn platform, allowing users to revert Windows systems to a previous state to protect against data loss and system errors. The company is also addressing critical security vulnerabilities, including CVE-2026-20833 and CVE-2026-50656, by working on patches and updates to enhance security.

AppWizard

July 12, 2026

You Can Use A GameCube Controller On Your PC – Here’s How

Many leading gaming brands are now offering USB-cable versions of controllers for better compatibility. Nintendo's Switch 2 features a controller that connects to Windows systems via cable or Bluetooth with a dedicated PC application. The original GameCube controller requires an external adapter for PC use, as it lacks a USB connection. To use a GameCube controller on a PC, an adapter is necessary, with popular options including the official Wii U adapter and various Mayflash models. The adapter must be set to the correct mode for the games being played, particularly for emulated GameCube titles. As of late 2025, Steam supports GameCube controllers natively, including rumble support, and recognizes both original controllers with adapters and third-party alternatives. The GameCube controller designed for the Switch 2 is also compatible with Steam. Users should ensure their Steam client is updated and can customize controls using Steam Input. While the GameCube controller is effective for games designed for it, it may not perform optimally for modern games.