Tendvane Blog https://tendvane.com/blog Plain-language guides on keeping your Windows PC healthy, secure and fast. en Windows quietly stopped previewing your downloads. A button is coming backhttps://tendvane.com/file-explorer-preview-anyway-button-2026https://tendvane.com/file-explorer-preview-anyway-button-2026Mon, 24 Aug 2026 09:00:00 GMTSince October 2025 the File Explorer preview pane has refused to show anything that came from the internet. A new "Preview anyway" button lets you override it one file at a time. This banking trojan switches on a VPN so Google can't check its workhttps://tendvane.com/toxicpanda-2-android-banking-trojan-vpn-2026https://tendvane.com/toxicpanda-2-android-banking-trojan-vpn-2026Mon, 24 Aug 2026 09:00:00 GMTToxicPanda 2.0 now goes after 349 banking, wallet and crypto apps across 16 countries. Its first move after landing on a phone is to ask for VPN permission and cut off Google Play. Printing stopped working in one program, and the font is to blamehttps://tendvane.com/august-net-update-printing-calibri-broken-2026https://tendvane.com/august-net-update-printing-calibri-broken-2026Mon, 24 Aug 2026 09:00:00 GMTThe August .NET updates reject Calibri, Cambria, Constantia and Corbel when a program tries to print or export a PDF. Microsoft has confirmed it. Changing the document font gets you printing again. The crashing games trace back to your RGB lightinghttps://tendvane.com/windows-11-game-crashes-rgb-drivers-registry-fix-2026https://tendvane.com/windows-11-game-crashes-rgb-drivers-registry-fix-2026Mon, 24 Aug 2026 09:00:00 GMTMicrosoft has named a cause for the August update's game crashes: drivers installed by hardware that glows. There is now an official workaround, and it may switch your lights off. Amazon stopped telling you what you bought, and scammers noticedhttps://tendvane.com/amazon-vague-order-emails-phishing-risk-2026https://tendvane.com/amazon-vague-order-emails-phishing-risk-2026Sun, 23 Aug 2026 09:00:00 GMTOrder confirmations now say "Household item" instead of naming the product. The item name was how most people spotted a fake, and Amazon is one of the most impersonated brands in the US. Someone put malware in a car stereo, and it's renting out the connectionhttps://tendvane.com/android-car-head-unit-malware-dofun-zhima-2026https://tendvane.com/android-car-head-unit-malware-dofun-zhima-2026Sun, 23 Aug 2026 09:00:00 GMTKaspersky documented the first case of malware found on an Android car head unit. It arrived through the unit's own update system and turns the car into a proxy for other people's traffic. Windows 11 is probably already taking full snapshots of your PChttps://tendvane.com/point-in-time-restore-on-by-default-2026https://tendvane.com/point-in-time-restore-on-by-default-2026Sun, 23 Aug 2026 09:00:00 GMTPoint-in-Time Restore is on by default on Home and unmanaged Pro PCs with a 200 GB system drive. It keeps three days of whole-system snapshots, and restoring one asks for your BitLocker key. A fake Perplexity extension had 4.7 stars and 10,000 usershttps://tendvane.com/fake-ai-extensions-installfix-sophos-2026https://tendvane.com/fake-ai-extensions-installfix-sophos-2026Sat, 22 Aug 2026 09:00:00 GMTSophos went through a year of its own incident cases involving AI tools. Claude's name turned up in 26 of 38. One case was an extension sitting in the Chrome Web Store looking thoroughly well reviewed. The bank doesn't exist. The website cost twenty-five dollars.https://tendvane.com/phantom-bank-websites-cuex-template-2026https://tendvane.com/phantom-bank-websites-cuex-template-2026Sat, 22 Aug 2026 09:00:00 GMTAllure Security traced roughly 2,200 domains posing as banks that were never real, nearly all built from the same cheap web template. They exist so a scammer can show you a balance. Microsoft built an app whose only job is to put Bing in your browserhttps://tendvane.com/microsoft-recommended-search-settings-bing-extension-2026https://tendvane.com/microsoft-recommended-search-settings-bing-extension-2026Sat, 22 Aug 2026 09:00:00 GMTA 22 MB download called Microsoft Recommended Search Settings installs a Bing extension into Chrome, Firefox, Brave and Edge, then sends you to the Rewards page. Nobody is being forced to run it yet. Microsoft hid the photo app it put on your PC uninvited. It's still installed.https://tendvane.com/onedrive-photos-app-hidden-still-installed-2026https://tendvane.com/onedrive-photos-app-hidden-still-installed-2026Fri, 21 Aug 2026 09:00:00 GMTOneDrive Photos has vanished from the Start menu and Windows Search as of Friday. The app itself hasn't gone anywhere, and you still can't remove it on its own. Free toothpaste turns up in the post. It isn't a lucky mistake.https://tendvane.com/brushing-scam-unexpected-package-ftc-2026https://tendvane.com/brushing-scam-unexpected-package-ftc-2026Fri, 21 Aug 2026 09:00:00 GMTThe FTC put out an alert on Thursday about brushing scams: a cheap item you never ordered, delivered so a seller can post a fake review under your name. That expired Visa card in your drawer can still buy grocerieshttps://tendvane.com/zombie-card-expired-visa-contactless-2026https://tendvane.com/zombie-card-expired-visa-contactless-2026Fri, 21 Aug 2026 09:00:00 GMTResearchers rewrote the expiry date a Visa card sends to a card reader and pushed real purchases through in actual shops. Mastercard, Amex and Discover rejected the same trick. A service built to identify strangers from a photo left 9 million faces wide openhttps://tendvane.com/claritycheck-9-million-face-photos-exposed-2026https://tendvane.com/claritycheck-9-million-face-photos-exposed-2026Fri, 21 Aug 2026 09:00:00 GMTClarityCheck sells reverse face lookups. Its image store sat online without a password: 450 GB and more than 9 million photos of people who mostly never knew they were in it. The viral 'hidden GPU mode' that makes games smoother - what it really is, and the safe way to get ithttps://tendvane.com/hidden-gpu-mode-msi-truth-2026https://tendvane.com/hidden-gpu-mode-msi-truth-2026Fri, 21 Aug 2026 09:00:00 GMTA registry tweak called MSI mode is doing the rounds again, promising smoother frame rates. The setting is real, the risk is real too - here is what it actually does and how to try it without gambling your screen. Windows may finally let you tell one app no about the microphonehttps://tendvane.com/windows-11-per-app-camera-mic-permissions-2026https://tendvane.com/windows-11-per-app-camera-mic-permissions-2026Thu, 20 Aug 2026 09:00:00 GMTAn experimental Insider build adds per-app camera, microphone and location switches for ordinary desktop programs, replacing the single all-or-nothing toggle. 3.7 million patients, and not one of them chose CareCloudhttps://tendvane.com/carecloud-breach-3-7-million-patients-2026https://tendvane.com/carecloud-breach-3-7-million-patients-2026Thu, 20 Aug 2026 09:00:00 GMTSix days inside an Amazon cloud account in March cost 3,756,469 people their Social Security numbers, medical records and banking details. Letters went out in July. 14,500 security cameras taken over using flaws patched five years agohttps://tendvane.com/dahua-cameras-cameraswarm-backdoor-2026https://tendvane.com/dahua-cameras-cameraswarm-backdoor-2026Thu, 20 Aug 2026 09:00:00 GMTHunt.io reconstructed a 35-day campaign against Dahua IP cameras from an exposed server. One backdoor account it planted survives a factory reset. The download link says Steam. Your click goes somewhere else.https://tendvane.com/deceptive-download-sites-hover-link-trick-2026https://tendvane.com/deceptive-download-sites-hover-link-trick-2026Thu, 20 Aug 2026 09:00:00 GMTA network of 41 fake download sites shows a genuine link when you hover and hijacks the click with JavaScript. What arrives is a signed installer for something you didn't ask for. The August update is crashing games, and Microsoft is now on the recordhttps://tendvane.com/windows-11-august-update-game-crashes-microsoft-investigating-2026https://tendvane.com/windows-11-august-update-game-crashes-microsoft-investigating-2026Thu, 20 Aug 2026 09:00:00 GMTMicrosoft opened an official known-issue entry for KB5121003 on Wednesday evening. Games freezing is one symptom; PCs restarting without warning is the other. Comcast's router can now tell when someone walks past ithttps://tendvane.com/comcast-xfinity-wifi-motion-detection-2026https://tendvane.com/comcast-xfinity-wifi-motion-detection-2026Wed, 19 Aug 2026 09:00:00 GMTXfinity Shield launched this week with WiFi Motion - movement detection using the radio signal between your gateway and your devices. It's free and opt-in; the terms are the bit to read. Defender scans dying halfway through? It wasn't malware, and it's already fixedhttps://tendvane.com/defender-scan-crash-signature-update-fixed-2026https://tendvane.com/defender-scan-crash-signature-update-fixed-2026Wed, 19 Aug 2026 09:00:00 GMTA bad Microsoft Defender definition update made scans crash out with 'Threat service has stopped' on Tuesday. New definitions fix it, and they arrive on their own. Chrome patched two flaws that let a web page climb out of the browserhttps://tendvane.com/chrome-151-critical-sandbox-escape-fixes-2026https://tendvane.com/chrome-151-critical-sandbox-escape-fixes-2026Wed, 19 Aug 2026 09:00:00 GMTTuesday's Chrome update closes 15 holes, two of them critical bugs in the graphics code that allow code execution outside the sandbox. Restarting the browser is the part people skip. Two months left for Windows 11 24H2 - and most people won't have to lift a fingerhttps://tendvane.com/windows-11-24h2-end-of-updates-october-2026https://tendvane.com/windows-11-24h2-end-of-updates-october-2026Wed, 19 Aug 2026 09:00:00 GMTHome and Pro editions of Windows 11 version 24H2 stop getting security updates on 13 October. The move to 25H2 is one reboot, and it's mostly automatic. CISA gave agencies three days to patch this Windows flaw - here's whether it touches your PChttps://tendvane.com/windows-ike-extension-rce-exploited-cve-2026-33824-2026https://tendvane.com/windows-ike-extension-rce-exploited-cve-2026-33824-2026Wed, 19 Aug 2026 09:00:00 GMTCVE-2026-33824 lets an attacker run code on Windows over the network with no password and no click. Microsoft fixed it in April; attackers found it anyway. Windows 11's right-click menu is being rebuilt, and you finally get to choose what's in ithttps://tendvane.com/windows-11-file-explorer-context-menu-rebuild-2026https://tendvane.com/windows-11-file-explorer-context-menu-rebuild-2026Tue, 18 Aug 2026 09:00:00 GMTMicrosoft is testing a faster File Explorer and a context menu with a real settings page behind it - including an option to bring back the Windows 10 look. A password sat in a Google Doc until Google's autocomplete started offering it aroundhttps://tendvane.com/google-docs-anyone-with-link-passwords-2026https://tendvane.com/google-docs-anyone-with-link-passwords-2026Tue, 18 Aug 2026 09:00:00 GMTA developer typed his own company's domain into the search box and watched Google suggest a live credential. 'Anyone with the link' means more than most people assume. The shop wasn't hacked. The company that shipped your parcel was.https://tendvane.com/ceva-logistics-breach-pokemon-center-steam-2026https://tendvane.com/ceva-logistics-breach-pokemon-center-steam-2026Tue, 18 Aug 2026 09:00:00 GMTA break-in at logistics giant CEVA is still producing customer notices weeks later - Steam hardware buyers, now Pokemon Center. What leaked is exactly what a convincing delivery scam needs. The top result when you search for your water company might not be your water companyhttps://tendvane.com/doxo-fake-bill-pay-search-ads-ftc-2026https://tendvane.com/doxo-fake-bill-pay-search-ads-ftc-2026Tue, 18 Aug 2026 09:00:00 GMTThe FTC has settled with bill-payment firm Doxo for $2.1 million over search ads that impersonated people's actual billers, and published a warning about the wider tactic. A Windows flaw patched last November is now ransomware's favourite way uphttps://tendvane.com/windows-task-host-flaw-ransomware-cve-2025-60710-2026https://tendvane.com/windows-task-host-flaw-ransomware-cve-2025-60710-2026Tue, 18 Aug 2026 09:00:00 GMTCISA says ransomware gangs are exploiting CVE-2025-60710, a privilege bug in Windows Task Host. Microsoft fixed it nine months ago, which is really the whole story.