Windows

BetaBeacon
May 5, 2026
ScarCruft compromised a video game platform in a supply chain attack, trojanizing its components with a backdoor called BirdCall to target ethnic Koreans residing in China. The attack enabled the threat actors to target both Windows and Android devices, turning it into a multi-platform threat. The campaign targeted sqgame[.]net, a gaming platform used by ethnic Koreans in China, known as a transit point for North Korean defectors. BirdCall has features like screenshot capture, keystroke logging, and data gathering, and relies on legitimate cloud services for command-and-control. The Android variant collects various data and has seen active development.
Winsage
May 5, 2026
Microsoft will eliminate the MSN news feed from the widgets panel in Windows 11, shifting to a "quiet by default" experience. This change includes disabling the automatic opening of the widgets panel when hovering over its taskbar icon and turning off distracting taskbar badges by default. Users will now see a more personalized set of information in the widgets panel instead of notifications related to stocks, weather, or news. These updates aim to create a less distracting interface and improve the overall user experience in Windows 11, with further enhancements expected throughout 2026.
BetaBeacon
May 5, 2026
APT37, also known as ScarCruft and Ricochet Chollima, has developed an Android version of the backdoor BirdCall, which serves as spyware in addition to a backdoor. The malware was delivered through a Chinese website that hosts games for Android, iOS, and Windows, targeting only Android and Windows systems. The Android variant of BirdCall has capabilities such as extracting IP geolocation information, collecting contact lists, call logs, SMS data, device information, taking screenshots, recording audio, and exfiltrating files. Users are advised to download software only from official marketplaces and trusted publisher sites to protect against malware infections.
Tech Optimizer
May 5, 2026
Bitdefender Mobile Security is currently regarded as the best mobile antivirus software, achieving a 100% detection rate for malware on Android devices according to AV-TEST's August 2025 report. The 2026 version introduces App Anomaly Detection and includes features like Scam Alert and anti-theft tools. Sophos Intercept X for Mobile offers a free version with a perfect score in AV-TEST's comparisons and features such as multi-factor authentication and a Privacy Advisor. Surfshark Antivirus, part of the Surfshark One package, scored six out of six in AV-TEST's evaluations and includes various security tools, but is only available for Android, macOS, and Windows. Avast Mobile Security is a popular free option with robust features and achieved perfect scores in protection and usability in AV-TEST's September-October 2025 report. AVG Antivirus, operating on the same engine as Avast, also detected 100% of malware in AV-TEST's March-April 2025 evaluations and includes anti-theft tools.
AppWizard
May 5, 2026
A North Korean hacking group has targeted a digital gaming platform popular among the Korean ethnic enclave in China, using a sophisticated strategy to infiltrate Android applications. Researchers from Eset discovered that an app on the platform contained a backdoor known as BirdCall, linked to North Korea. The official website for the gaming platform hosted the same suspicious APK file. A second Android file associated with another game on the same site was also found to contain the BirdCall backdoor. This supply-chain attack was attributed to the threat actor ScarCruft (APT37), active in Asia and extending into Europe and the Middle East since late 2024. The hackers likely compromised the web server to recompile original APKs with the backdoor, which can collect sensitive information such as contacts, SMS messages, call logs, documents, media files, and private keys, and can take screenshots and record audio. The malware disguises its command and control traffic among regular internet traffic, primarily using Zoho WorkDrive for operations.
AppWizard
May 5, 2026
Microsoft has begun the phased rollout of Xbox Mode for Windows 11 PCs, enhancing the gaming experience. Xbox Mode provides a full-screen user interface optimized for controller use, displaying only one application at a time to minimize distractions. Players can switch between Xbox Mode and the traditional Windows 11 desktop and Xbox Game Pass subscribers can navigate their game libraries easily. Xbox Mode was initially available for testing in late 2025 and officially started its public rollout on April 30, with deployment occurring in waves across various regions.
AppWizard
May 5, 2026
Subnautica 2 will debut in Game Preview on May 14 for Xbox Series X|S, Windows PC, ROG Xbox Ally, and through Xbox Game Pass Ultimate and PC Game Pass. Players will assume the role of a crew member aboard Alterra’s CICADA ship, tasked with creating a home for themselves and 40,000 passengers. The game will feature multiplayer capabilities, allowing exploration solo or with up to three friends. The developers have optimized the game for Xbox, focusing on performance and controller experience. The ROG Xbox Ally's performance was considered during development, with a default graphics preset and customization options. The game is a result of years of development, with ongoing updates planned for new biomes, creatures, and craftables. Players can add Subnautica 2 to their Xbox Store wishlist and join the Official Discord for updates.
Winsage
May 5, 2026
Microsoft's Defender anti-malware tool update version 1.449.425.0 removed two DigiCert root digital certificates, leading to false positives that flagged them as severe malware (Trojan:Win32/Cerdigent.A!dha). This incident was later identified as a false positive, and updating to version 1.449.430.0 or later reinstates the certificates. The issue may be linked to a DigiCert employee encountering disguised malware. Additionally, Windows updates from April 14 caused third-party backup applications to malfunction due to the addition of vulnerable psmounterex.sys kernel driver versions to a blocklist. Users experienced difficulties with mounting backup image files, and Microsoft referenced a vulnerability rated 9.3 out of 10 in the driver. Other affected software includes Acronis Cyber Protect Cloud and UrBackup server. Microsoft has not explained the delay in adding the vulnerable driver to the blocklist, and other recent update-related issues have also been reported.
AppWizard
May 5, 2026
Linux has been successfully implemented on the PlayStation 5, allowing users to run an open operating system on the console. This implementation, led by security researcher Andy Nguyen (TheFlow), utilizes an exploit for PS5 consoles with system software versions up to 4.5. Users can boot Linux from a USB or SSD, with Ubuntu 26.04 LTS providing around 15GB of usable memory. The PS5's hardware, including its Zen 2 processor and GPU, is fully accessible, with CPU speeds reaching up to 3.5GHz and GPU speeds up to 2.23GHz when boost mode is activated. However, running Linux on the PS5 presents challenges, such as sourcing a unit with the required firmware and limitations in resolution, as users cannot exceed 1080p. Performance tests showed that Linux can match the PS5's performance in some titles, but issues with memory management were noted, leading to stuttering and crashes in certain games. For example, reducing texture quality improved performance in games like Pragmata, while rendering issues were observed in Crimson Desert. The implementation allows for a unique gaming experience, but it also highlights the complexities and limitations of running Linux on a gaming console.
Search