Microsoft explains what Windows 11’s “spying” service actually does

A viral claim that Windows 11 secretly added a desktop-tracking service has been rejected by Microsoft. The Windows Health and Optimized Experiences service, or whesvc, has existed in public Canary builds since May 2025 and stores diagnostic data locally unless a user submits it through Feedback Hub.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-explains-what-windows-11s-spying-service-actually-does/

Why Windows 11 modernization is slow: Microsoft puts compatibility first

Microsoft says Windows 11’s slow modernization is largely the cost of its compatibility promise. Legacy tools such as Control Panel and Registry Editor cannot simply be replaced without risking older drivers, software, administrative workflows, and hardware support.
Source

👉@sysadminoff

https://4sysops.com/archives/why-windows-11-modernization-is-slow-microsoft-puts-compatibility-first/

Windows July 2026 updates bring passkeys, hotpatching, and safer networking

Microsoft’s July 2026 Windows updates add passkeys as the default phishing-resistant authentication method in Microsoft Entra ID, free Arc-enabled hotpatching for Windows Server 2025, and more resilient remote desktop networking. The optional Windows 11 preview also improves virtualization networking, Secure Boot certificate deployment, Voice Access, Widgets, and peripheral fingerprint sign-in.
Source

👉@sysadminoff

https://4sysops.com/archives/windows-july-2026-updates-bring-passkeys-hotpatching-and-safer-networking/

FFmpeg 9.0

После почти четырёх месяцев разработки состоялся выпуск 9.0 проекта FFmpeg, с кодовым именем «Lei».
Это набор свободных библиотек и утилит с открытым исходным кодом на языке Си, позволяющих записывать, конвертировать и передавать цифровые аудио- и видеозаписи в различных форматах. Название происходит от названия экспертной группы MPEG и FF, означающего «fast forward».
( читать дальше... )



 c, codecs, ffmpeg, media, video

👉@sysadminoff

https://www.linux.org.ru/news/multimedia/18352369

📰 FFmpeg 9.0 Released with Animated WebP Decoding and New Hardware Acceleration

FFmpeg 9.0 arrives with animated WebP support, Vulkan acceleration for APV, ProRes RAW VideoToolbox decoding, and new GPU-powered filters.

🔗 Source:

#ffmpeg

👉@sysadminoff

https://linuxiac.com/ffmpeg-9-0-released-with-animated-webp-decoding-and-new-hardware-acceleration/

DOUBLECUP turns ClickFix into cached PNG delivery for CountLoader and DeviceManager

DOUBLECUP is using fake CRM pages and ClickFix instructions to hide malware inside PNG files cached by browsers. The loader delivers CountLoader or the newly documented DeviceManager RAT, which decrypts payloads in memory and can use blockchain-resolved command-and-control infrastructure.
Source

👉@sysadminoff

https://4sysops.com/archives/doublecup-turns-clickfix-into-cached-png-delivery-for-countloader-and-devicemanager/

Uptime Kuma 2.5.0 adds a 14-day npm security cooldown

Uptime Kuma 2.5.0 delays npm dependency updates for 14 days, reducing the chance that a hijacked package reaches deployments before it is detected and removed. The release also adds direct NTP monitoring, rootless Docker support, and longer monitoring intervals.
Source

👉@sysadminoff

https://4sysops.com/archives/uptime-kuma-2-5-0-adds-a-14-day-npm-security-cooldown/

ServiceNow gives Autonomous Security AI Specialists to close exposures faster

ServiceNow is expanding Autonomous Security with AI Specialists that can investigate and remediate security issues with limited human intervention. The new framework unifies six security areas, including vulnerability management, identity governance, incident response, and compliance, within the ServiceNow AI Control Tower.
Source

👉@sysadminoff

https://4sysops.com/archives/servicenow-gives-autonomous-security-ai-specialists-to-close-exposures-faster/

Paprius icon set gets first update in a over year with 80+ new icons

Fan of the the Papirus icon theme will be pleased to hear there a new update – the first since May 2025. For Papirus’s first update in 2026 (the tardiness of which its maintainer, Serhii Yeremenko, apologises) brings over 80 new icons or updated icons spanning apps, games and user-interface icons, plus new file mimetypes and revised symlinks. Frequent updates are why Papirus icons are popular with Linux users, and have been for such a long time. Often, Linux icon packs debut with a big bang, the momentum fuels a few revisions but then things go quiet as people and maintainers move […]
You're reading Paprius icon set gets first update in a over year with 80+ new icons, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/08/paprius-icon-pack-sees-first-update-in-a-year-with-80-new-icons

📰 I stopped recommending Bazzite after realizing any Linux distro can game just as well

Gaming on Linux doesn't require a "gaming distro".

🔗 Source:

#distro #linux

👉@sysadminoff

https://www.xda-developers.com/any-linux-distro-can-be-a-gaming-distro-it-just-needs-the-right-tweaks/

📰 Improved GPU Reset Recovery For AMD Kaveri, Hawaii & Other GFX7 GPUs With Linux 7.3

In addition to the AMDGPU feature pull request to DRM-Next last week that landed DRM format modifiers for old AMD GPUs and a variety of other improvements, a secondary set of AMDGPU feature work followed that last week in preparation for the upcoming Linux 7.3 merge window...

🔗 Source:

#amd #linux

👉@sysadminoff

https://www.phoronix.com/news/AMD-GFX7-Soft-Reset-Linux-7.3

Overloaded helpdesk? Save IT time with Specops uReset

Empower users to securely reset Active Directory passwords and update cached credentials anytime, anywhere - on or off VPN - while cutting IT service desk calls and ensuring robust security with MFA, trusted networks, and geo-blocking.
Source

👉@sysadminoff

https://4sysops.com/archives/overloaded-helpdesk-save-it-time-with-specops-ureset/

Entra Connect gets a 2026 cutoff as Microsoft urges Tier 0 treatment

Microsoft Entra Connect administrators have a firm upgrade deadline: synchronization will stop on September 30, 2026, unless the service runs version 2.5.79.0 or later. The deadline adds urgency to a broader security reset: Entra Connect should be protected as Tier 0 infrastructure, not deployed like ordinary middleware.
Source

👉@sysadminoff

https://4sysops.com/archives/entra-connect-gets-a-2026-cutoff-as-microsoft-urges-tier-0-treatment/

‍Представлен открытый проект Decimen Optical Transfer для передачи файлов через QR-коды

Разработчик BashAlarmist (Evan Crawley) представил открытый проект под названием Decimen Optical Transfer.
Это решение предназначено для передачи файлов между двумя устройствами с использованием только экрана и камеры через QR-коды с помощью кодов преобразования Люби — первой практической реализации фонтанного кодирования. Исходный код проекта написан на TypeScript и HTML и опубликован на GitHub под лицензией MIT.
Отправляемый файл разбивается на сотни мелких фрагментов (пакетов). Затем для каждого пакета генерируется свой QR-код, который кодирует данные и воссоздаёт их. Принимающее устройство сканирует поток QR-кодов через камеру и собирает файл обратно.
Благодаря фонтанному кодированию камере не нужно ловить каждый кадр по порядку: если камера пропустила пару QR-кодов, файл всë равно соберëтся воедино без битых байтов.



 file transfer, html, qrcode, typescript

👉@sysadminoff

https://www.linux.org.ru/news/opensource/18352151

📰 Linux's Staging Area To Now Reject LLM-Generated Patches, Except For Real Security Fixes

While Linux's second-in-command Greg Kroah-Hartman does use AI / LLMs himself to success in the Linux kernel, given the "onslaught" of kernel patches produced by large language models and the intent on the Linux kernel's staging area being an area for newcomers to get involved, moving forward he's now rejecting AI/LLM-generated staging patches. But there is one exception and that is for genuinely valid security fixes...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Linux-Staging-Reject-LLMs

📰 KDE Plasma 6.7.4 Is Out to Improve Spectacle, Discover, and Emoji Selector

KDE Plasma 6.7.4 is now available as the fourth maintenance update to the KDE Plasma 6.7 desktop environment series with more improvements and bug fixes.

🔗 Source: https://9to5linux.com/kde-plasma-6-7-4-is-out-to-improve-spectacle-discover-and-emoji-selector

#kde #plasma

👉@sysadminoff

Новый червь ChainDrop поразил более 400 NPM-пакетов

Зафиксирована массовая атака на пакеты в репозитории NPM, проводимая с использованием нового самораспространяющегося червя ChainDrop, подставляющего вредоносное ПО в зависимости. В результате атаки опубликовано 2212 вредоносных выпусков для 444 пакетов. Наиболее популярные из скомпрометированных пакетов keyv, flat-cache и file-entry-cache насчитывают 154, 149.9 и 147.6 миллионов загрузок в неделю.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66030

AWS Kiro Crew brings 24/7 autonomous coding to local environments

AWS Kiro Crew is an open-source orchestrator that keeps coding agents working across sessions, schedules, and repositories—even when developers are offline. Unlike a cloud-only service, Crew can run on laptops, containers, or virtual machines without an AWS account, giving teams more control over where agent activity and project data reside.
Source

👉@sysadminoff

https://4sysops.com/archives/aws-kiro-crew-brings-24-7-autonomous-coding-to-local-environments/

Edit on-prem Exchange attributes in Exchange Online with writeback for cloud-managed remote mailboxes

Microsoft has made Exchange attribute writeback for cloud-managed remote mailboxes generally available. It lets you manage selected Exchange mailbox attributes in Exchange Online while copying a limited set of those values back to on-premises Active Directory through Microsoft Entra Cloud Sync. This article explains the prerequisites, configuration, verification, and operational limits for a hybrid Exchange organization.
Source

👉@sysadminoff

https://4sysops.com/archives/edit-on-prem-exchange-attributes-in-exchange-online-with-writeback-for-cloud-managed-remote-mailboxes/

White House finishes AI oversight framework, but keeps the details secret

The White House has completed its voluntary artificial intelligence oversight framework, but has not released the document or said when companies will begin using it. OpenAI, Google, Anthropic, and Meta are being invited to review the process as officials work out how frontier AI models should be tested for cybersecurity and national-security risks.
Source

👉@sysadminoff

https://4sysops.com/archives/white-house-finishes-ai-oversight-framework-but-keeps-the-details-secret/