abuse Archives

Winsage

September 13, 2026

KTVB

Cookies and data, including IP addresses, are used to deliver and maintain Google services, monitor outages, protect against spam and fraud, and measure audience engagement. When users accept all cookies, additional uses include developing new services, placing and measuring advertisements, and displaying personalized content. If users decline all cookies, only non-personalized content and ads will be shown, influenced by current content and general location. Personalized content may include tailored video recommendations and customized homepages based on user activity. Further information on managing privacy settings is available at g.co/privacytools.

AppWizard

September 10, 2026

Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’

Attorney General William Tong has launched an investigation into MediaLab.AI Inc., the parent company of Kik, due to concerns about the app's child safety practices. Kik is described as having inadequate age verification and content screening, with about one-third of American teenagers using it, and 70% of users aged 13 to 24. The National Center on Sexual Exploitation identified Kik as a leading app for exposing children to sexual content and included it in their “Dirty Dozen” list. Between 2014 and 2020, over 2,000 federal cases involved Kik. MediaLab has attempted to improve safety by reclassifying the app to an 18+ rating and activating explicit content filters, but these efforts have been deemed insufficient. The investigation will also assess Kik's compliance with the Connecticut Data Privacy Act, focusing on the handling of sensitive data without consent.

AppWizard

September 9, 2026

Attorney General Tong Announces Investigation Into “Predator’s Paradise” Kik Messenger App

Attorney General William Tong has launched an investigation into MediaLab.AI Inc., the parent company of the messaging app Kik, following allegations of inadequate age verification and content moderation practices. Kik has been criticized for its reputation as a platform for sexual abuse, exploitation, and bullying, particularly among minors, with over one-third of American teens reportedly using the app. A 2025 report ranked Kik as the second worst app for extreme sexual content and the third worst for severe bullying, and the app has been included on the National Center on Child Exploitation's "Dirty Dozen" list. Despite claims of restricting new users to those aged 18 and older as of September 2023, evidence suggests that Kik continued to market to younger audiences, and the app maintained a "Teen" rating until early 2025. The Attorney General's office issued a notice of violation to MediaLab in July 2025 for deficiencies in Kik’s privacy practices and has issued a civil investigative demand for further records related to data processing and content moderation. This investigation is part of a broader effort to protect children from online threats in Connecticut.

AppWizard

September 8, 2026

Connecticut attorney general calls Kik messenger app a ‘predator’s paradise’

Connecticut's Attorney General, William Tong, is investigating MediaLab.AI Inc.'s messaging app, Kik, due to concerns about inadequate age assurance practices and content moderation. Child safety advocates have criticized Kik as a “predator’s paradise.” Tong described Kik as a platform with significant issues related to sexual abuse, exploitation, and bullying, lacking meaningful age verification and protections for users. The app has over one-third of American teens using it, down from 40 percent in 2016. MediaLab has only partially responded to inquiries about privacy and safety. Tong's office has issued a civil investigative demand for information on MediaLab’s data processing, content moderation, and age assurance practices to assess compliance with the Connecticut Data Privacy Act and the Connecticut Unfair Trade Practices Act.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

AppWizard

August 31, 2026

Home Ministry alerts about rise in financial frauds through malicious Android apps

The Indian Cyber Crime Coordination Centre (I4C) has reported a rise in financial frauds associated with malicious Android applications disguised as pornography apps. These apps, including names like "Night Play," "Reloop," and "Kyss," are promoted through ads on Facebook and Instagram, leading users to phishing websites where they are encouraged to download APK files from unverified sources. The malicious apps exploit permissions granted by users to take control of devices, potentially facilitating unauthorized financial transactions. Recommendations for safety include only installing apps from reputable sources, avoiding suspicious downloads, and regularly monitoring financial transactions. Instructions for uninstalling these apps involve starting the phone in Safe Mode, uninstalling the suspicious app, and then restarting the device.

Winsage

August 24, 2026

Windows Defender’s own driver can leave systems defenseless

The configuration reveals a sequence of actions including file and directory deletions, relocations, and registry operations, such as deleting and modifying registry keys and values. The file-move primitive can transform into an arbitrary file-write capability when directed to the System32 directory. The automation of these actions is achieved through a tool called BTRCLI, which extracts a legitimate driver from Windows Defender, constructs an encrypted transaction, and loads the driver, using the target machine's version of BTR.sys to avoid external drivers.

Winsage

August 22, 2026

Hackers abuse FTP server banners to deliver new Windows malware

Threat actors are exploiting FTP banners to conceal commands for deploying two undocumented remote access trojans (RATs), E4del and PINHOLE. This method was first observed by MalwareHunterTeam in July 2026, using shortcut files (.LNK) and FTP server banners as dead-drop resolvers to retrieve malicious commands. SOCRadar confirmed that this technique has been weaponized since early July 2026 and remains active, with new infrastructure identified as recently as August 2026. The attacks typically start with a ZIP archive leading to an LNK-based infection chain, likely initiated through phishing tactics. E4del is a Node.js-based RAT disguised within a digitally signed Electron application mimicking Discord, capable of executing commands, capturing screenshots, streaming desktops, and downloading additional payloads. It also includes a module for privilege escalation. PINHOLE retrieves its command and control configuration from Pinterest and SurveyMonkey, designed to leave a minimal footprint and employing shellcode fluctuation. It supports 14 commands, including file management and credential theft, but had only recorded 11 execution events at the time of analysis. SOCRadar notes that while using FTP banners is a novel approach, it is less stealthy than traditional web-based dead-drop resolvers. They provide indicators of compromise to help identify malicious infrastructure and infected machines.

AppWizard

August 12, 2026

Apple restores Telegram after child abuse material ban; Gram token recovers

Apple has reinstated Telegram to its App Store after a temporary removal due to the discovery of child sexual abuse material. Telegram responded by removing the offending content and banning the user responsible, which helped recover the value of the Gram token that had initially dipped by approximately 6.4%. The incident underscores the scrutiny messaging platforms face regarding illegal content, with Telegram currently under scrutiny in Russia, France, and Australia for alleged facilitation of illegal activities and extremist content.

AppWizard

August 12, 2026

Privacy or Evasion? The Policy Dilemma Around Messaging App Usernames

On June 29, 2026, WhatsApp introduced a feature allowing users to create usernames to enhance privacy by enabling connections without revealing phone numbers. The Government of India expressed concerns about potential increases in cybercrime linked to this feature and issued a notice to WhatsApp requesting a pause on its rollout. The notice demanded justification under various laws, including the Information Technology Act, 2000. Similar inquiries were sent to other messaging platforms like Telegram and Signal. This scrutiny represents a shift from reactive measures to proactive assessments of platform design, emphasizing how features like usernames can impact user safety and accountability. The Delhi High Court upheld a temporary ban on Telegram during an examination period, recognizing the relevance of platform architecture in assessing risks. The increase in cybersecurity incidents in India raised concerns about usernames enabling fraud and evasion. The government is advocating for a balanced approach that allows pseudonymous interaction while ensuring accountability.