Microsoft announced that, starting today, individual Windows developers will no longer have to pay for publishing their applications on the Microsoft Store.

The company said that developers can now submit Win32 (including. NET WPF and WinForms), UWP, PWA,.NET MAUI, or Electron apps to the Microsoft Store without paying any registration fees.

Redmond will also handle each app’s hosting and signing, eliminating the need for developers to pay for these services.

My fourth installment of interesting research papers that I have read over the past few weeks and would like to share with my community.

A minuscule diamond containing billions of impurities can be induced to produce enough force to bend a cantilever.

Adobe Commerce CVE-2025–54236 allows account takeover; hotfix and WAF deployed to block attacks.

SAP patches critical NetWeaver and S/4HANA flaws (CVSS 8.1–10.0), preventing code execution, file upload, and data loss.

The color-correcting tool called “SeaSplat” shows underwater features in colors that appear more true to life. The ocean is filled with life, yet much of it remains hidden unless observed at very close range. Water acts like a natural veil, bending and scattering light while also dimming it as it

45 domains linked to Salt Typhoon date back to May 2020, revealing ongoing China-backed cyber espionage.

A new supply chain attack on GitHub, dubbed ‘GhostAction,’ has compromised 3,325 secrets, including PyPI, npm, DockerHub, GitHub tokens, Cloudflare, and AWS keys.

The attack was discovered by GitGuardian researchers, who report that the first signs of compromise on one of the impacted projects, FastUUID, became evident on September 2, 2025.

The attack involved leveraging compromised maintainer accounts to perform commits that added a malicious GitHub Actions workflow file that triggers automatically on ‘push’ or manual dispatch.