NewApp Digest
search bot

analysts

Microsoft mitigates Windows LNK flaw exploited as zero-day
Winsage
December 3, 2025

Microsoft mitigates Windows LNK flaw exploited as zero-day

Microsoft has addressed a security vulnerability in Windows tracked as CVE-2025-9491, which allows malicious actors to embed harmful commands in Windows LNK files, requiring user interaction to exploit. Threat actors often distribute these files in ZIP formats to bypass email security. In March 2025, 11 hacking groups, including Evil Corp and Kimsuky, were actively exploiting this vulnerability using various malware payloads. Although Microsoft initially did not consider the issue urgent, it later modified the handling of LNK files in November updates to allow users to view the entire character string in the Target field. However, this change does not eliminate the malicious arguments embedded in the files. ACROS Security has released an unofficial patch that restricts shortcut target strings to 260 characters and alerts users about risks associated with long target strings, covering multiple Windows versions.
{Торрент} – {Бетіс} ⇒ Прогноз та анонс на матч ≻ {Кубок Іспанії} ≺{03.12.2025}≻ {Футбол} на СПОРТ.UA
TrendTechie
December 3, 2025

{Торрент} – {Бетіс} ⇒ Прогноз та анонс на матч ≻ {Кубок Іспанії} ≺{03.12.2025}≻ {Футбол} на СПОРТ.UA

On December 3rd, Torrent will face Betis in the Copa del Rey at Campo de Fútbol San Gregorio, with the match starting at 22:00 Kyiv time. Torrent, established in 1922, currently competes in the Seguna Federación, the fourth division of Spanish football, and recently won 3:1 against Juventud Torremolinos in the Copa del Rey. Betis, managed by Manuel Pellegrini, recently won the Copa del Rey and is currently performing well in La Liga, sitting fifth with 24 points. This match will be the first encounter between the two teams, and bookmakers favor Betis to win by at least two goals.
MongoDB talks up its AI chops by talking down PostgreSQL
Tech Optimizer
December 2, 2025

MongoDB talks up its AI chops by talking down PostgreSQL

MongoDB has criticized PostgreSQL for its scalability issues with AI workloads, as stated by CEO Chirantan Desai. He noted a customer's switch from PostgreSQL to MongoDB due to these challenges. Following MongoDB's positive earnings report, its share price rose by 23%. The company reported .3 million in revenue for Q3 FY 2026, a 19% increase from the previous year, while operational losses decreased from [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: MongoDB's Competitive Stance in the Evolving Database Landscape In a bold move amidst the ever-changing database ecosystem, MongoDB has taken a critical stance against its rival, PostgreSQL, asserting that the latter struggles with scalability in the context of AI workloads. CEO Chirantan Desai leveraged the recent positive earnings results for the quarter ending October 31 to voice these concerns, particularly as PostgreSQL has surged in popularity among developers in recent years. During a discussion with investment analysts, Desai emphasized MongoDB's capabilities as a foundational platform for AI applications, although he acknowledged it was premature to declare it the definitive choice. He highlighted a recent case where a customer transitioned from PostgreSQL to MongoDB, citing scalability issues as the driving factor behind their decision. Following the announcement, MongoDB's share price experienced a notable 23% increase on Tuesday morning, buoyed by revenue figures that surpassed investor expectations. The company reported 8.3 million in revenue for Q3 FY 2026, marking a 19% increase compared to the same quarter last year, while operational losses narrowed from .9 million to .4 million. Desai's remarks may stem from PostgreSQL's growing influence, a relational database system that has been around since the 1980s and has recently gained traction in the developer community. By 2023, PostgreSQL emerged as the most favored database among professional developers, as indicated by the Stack Overflow survey. This shift followed PostgreSQL's ascent in the DB-Engines ranking since 2016, which evaluates databases based on various metrics, including online discussions and job postings. In response to Desai's claims, Barclays Bank analyst Raimo Lenschow posed a question regarding developer engagement in light of the "PostgreSQL narrative" prevalent in Silicon Valley. Desai countered by referencing a "super-high growth AI company" that faced scalability challenges with PostgreSQL, ultimately opting for MongoDB. PostgreSQL's rise can be attributed to the robust database services offered by major cloud providers, which have faced scrutiny over reliability. Nevertheless, several PostgreSQL-compatible services with distributed architectures, such as CockroachDB, pgEdge, and YugabyteDB, have emerged to address these reliability concerns. Moreover, PlanetScale, known for its distributed MySQL service built on the YouTube-developed Vitess, has recently introduced a PostgreSQL service. Microsoft has also entered the fray with its new distributed PostgreSQL database service, HorizonDB, designed to compete with other hyperscaler systems and third-party RDBMS solutions like CockroachDB and YugabyteDB. Microsoft claims that HorizonDB, which offers full compatibility with open-source PostgreSQL, features a new storage layer that enhances performance, scalability, and availability compared to its existing PostgreSQL offerings. This service stands alongside distributed PostgreSQL solutions from Google (AlloyDB) and AWS (Aurora DSQL). In a further twist, Microsoft has developed a document database platform intended to rival MongoDB, built on a relational PostgreSQL backend and utilizing FerretDB as a front-end interface with a document database protocol. Faced with such formidable competition, MongoDB is compelled to defend its platform not solely on the basis of scalability but also regarding its reliability for enterprise workloads—an area where it has long asserted its readiness. While Desai's critiques of PostgreSQL may resonate, he must tread carefully in highlighting the strengths of his own platform amidst a rapidly evolving landscape." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].9 million to [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: MongoDB's Competitive Stance in the Evolving Database Landscape In a bold move amidst the ever-changing database ecosystem, MongoDB has taken a critical stance against its rival, PostgreSQL, asserting that the latter struggles with scalability in the context of AI workloads. CEO Chirantan Desai leveraged the recent positive earnings results for the quarter ending October 31 to voice these concerns, particularly as PostgreSQL has surged in popularity among developers in recent years. During a discussion with investment analysts, Desai emphasized MongoDB's capabilities as a foundational platform for AI applications, although he acknowledged it was premature to declare it the definitive choice. He highlighted a recent case where a customer transitioned from PostgreSQL to MongoDB, citing scalability issues as the driving factor behind their decision. Following the announcement, MongoDB's share price experienced a notable 23% increase on Tuesday morning, buoyed by revenue figures that surpassed investor expectations. The company reported 8.3 million in revenue for Q3 FY 2026, marking a 19% increase compared to the same quarter last year, while operational losses narrowed from .9 million to .4 million. Desai's remarks may stem from PostgreSQL's growing influence, a relational database system that has been around since the 1980s and has recently gained traction in the developer community. By 2023, PostgreSQL emerged as the most favored database among professional developers, as indicated by the Stack Overflow survey. This shift followed PostgreSQL's ascent in the DB-Engines ranking since 2016, which evaluates databases based on various metrics, including online discussions and job postings. In response to Desai's claims, Barclays Bank analyst Raimo Lenschow posed a question regarding developer engagement in light of the "PostgreSQL narrative" prevalent in Silicon Valley. Desai countered by referencing a "super-high growth AI company" that faced scalability challenges with PostgreSQL, ultimately opting for MongoDB. PostgreSQL's rise can be attributed to the robust database services offered by major cloud providers, which have faced scrutiny over reliability. Nevertheless, several PostgreSQL-compatible services with distributed architectures, such as CockroachDB, pgEdge, and YugabyteDB, have emerged to address these reliability concerns. Moreover, PlanetScale, known for its distributed MySQL service built on the YouTube-developed Vitess, has recently introduced a PostgreSQL service. Microsoft has also entered the fray with its new distributed PostgreSQL database service, HorizonDB, designed to compete with other hyperscaler systems and third-party RDBMS solutions like CockroachDB and YugabyteDB. Microsoft claims that HorizonDB, which offers full compatibility with open-source PostgreSQL, features a new storage layer that enhances performance, scalability, and availability compared to its existing PostgreSQL offerings. This service stands alongside distributed PostgreSQL solutions from Google (AlloyDB) and AWS (Aurora DSQL). In a further twist, Microsoft has developed a document database platform intended to rival MongoDB, built on a relational PostgreSQL backend and utilizing FerretDB as a front-end interface with a document database protocol. Faced with such formidable competition, MongoDB is compelled to defend its platform not solely on the basis of scalability but also regarding its reliability for enterprise workloads—an area where it has long asserted its readiness. While Desai's critiques of PostgreSQL may resonate, he must tread carefully in highlighting the strengths of his own platform amidst a rapidly evolving landscape." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].4 million. PostgreSQL has gained popularity among developers, becoming the most favored database in 2023 according to a Stack Overflow survey, and has seen a rise in the DB-Engines ranking since 2016. Major cloud providers have introduced PostgreSQL-compatible services to address reliability concerns, including Microsoft's new distributed PostgreSQL service, HorizonDB, which claims improved performance and scalability. Microsoft is also developing a document database platform to compete with MongoDB.
WhatsApp Launches EU Interoperability for Encrypted Cross-App Messaging
AppWizard
December 2, 2025

WhatsApp Launches EU Interoperability for Encrypted Cross-App Messaging

Meta Platforms Inc.’s WhatsApp is rolling out interoperability features across Europe, allowing users to send messages to individuals on third-party applications starting in November 2024. This initiative is in response to the European Union’s Digital Markets Act (DMA), which requires dominant tech companies to enhance competition by opening their platforms. Users will be able to communicate while maintaining end-to-end encryption, a process that has taken over three years to develop. Users must opt-in to receive messages from third-party applications, and the initial rollout is limited to specific partners. The interoperability allows for sharing text, images, voice messages, videos, and files. Meta's engineering team adapted WhatsApp's infrastructure to accommodate external services while upholding encryption standards. Concerns have been raised about potential security vulnerabilities and the implications of proposed regulations like "Chat Control" that could conflict with encryption efforts. This development could influence competitive dynamics in the messaging sector, providing smaller applications like BirdyChat and Haiket visibility by integrating with WhatsApp’s large user base. Compliance with the DMA helps Meta avoid fines while risking dilution of WhatsApp's market dominance. Privacy implications are a significant concern, with discussions around how interoperability could facilitate surveillance or compromise user security. Meta's journey involved regulatory oversight to ensure compliance with DMA objectives, and the success of this initiative could set a precedent for global standards in digital communication.
Microsoft Update Warning—1 Billion Windows Users Must Now Act
Winsage
November 27, 2025

Microsoft Update Warning—1 Billion Windows Users Must Now Act

Microsoft has ended support for Windows 10 as of last month, leaving hundreds of millions of users vulnerable to security risks. Approximately 1.5 billion PCs are currently in use, with around 500 million capable of running Windows 11 but not upgraded, and another 500 million that are four years old and unable to support the new operating system. Dell's COO has indicated that previous estimates of Windows 10 installations were significantly underestimated. Microsoft is encouraging users to upgrade to Windows 11, which offers enhanced security features and claims a 62% reduction in security incidents. The next critical date for Windows 10 users is October 2026, when extended security updates are unlikely to be available.
Do Not Download These Windows Security Updates, Experts Warn
Winsage
November 25, 2025

Do Not Download These Windows Security Updates, Experts Warn

Security experts at Huntress have confirmed that hackers are using ClickFix malware to distribute fake Windows security updates, deceiving users into executing harmful commands. Over the past year, these attacks have increased, with both state-sponsored actors and cybercriminal organizations employing this tactic. Microsoft has indicated that ClickFix is the most frequently used method for gaining initial access, representing 47 percent of attacks noted in Microsoft Defender notifications. A report released on November 24 revealed a new wave of ClickFix attacks utilizing realistic Windows Security Update screens to deploy credential-stealing malware. The campaign employs steganography to conceal malware within PNG images, embedding harmful code directly within the pixel data. Windows users are advised to remain vigilant and recognize that legitimate updates will never request users to cut and paste commands into the Windows run prompt from a web page.
ClickFix attack uses fake Windows Update screen to push malware
Winsage
November 25, 2025

ClickFix attack uses fake Windows Update screen to push malware

Recent observations have identified ClickFix attack variants where cybercriminals use deceptive Windows Update animations on full-screen browser pages to hide malicious code within images. Victims are misled into executing harmful commands through specific key sequences that copy and execute commands via JavaScript. Security researchers have documented these attacks since October, noting the use of LummaC2 and Rhadamanthys information stealers. Attackers utilize steganography to embed malware payloads within PNG images, reconstructing and decrypting them in memory using PowerShell and a .NET assembly called the Stego Loader. A dynamic evasion tactic known as ctrampoline complicates detection by initiating calls to numerous empty functions. The shellcode extracted from the encrypted image can execute various file types directly in memory. Following a law enforcement operation on November 13, the Rhadamanthys variant's payload delivery through fake Windows Update domains ceased, although the domains remain active. Researchers recommend disabling the Windows Run box and monitoring suspicious process chains to mitigate risks.
ClickFix Attack Uses Steganography to Hide Malicious Code in Fake Windows Security Update Screen
Winsage
November 25, 2025

ClickFix Attack Uses Steganography to Hide Malicious Code in Fake Windows Security Update Screen

A new wave of ClickFix attacks has emerged, using fake Windows Update screens and PNG image steganography to deploy infostealing malware like LummaC2 and Rhadamanthys. The attacks trick users into executing a command by pressing Win+R and pasting a command copied to their clipboard. Attackers have shifted from using “Human Verification” lures to more convincing full-screen fake Windows Update screens. The fake update prompts users to run a command that initiates mshta.exe with a URL containing a hex-encoded IP address, leading to the download of obfuscated PowerShell and .NET loaders. A notable feature of the campaign is the use of a .NET steganographic loader that hides shellcode within the pixel data of a PNG image, which is decrypted and reconstructed in memory. The shellcode is Donut-packed and injected into processes like explorer.exe using standard Windows APIs. Huntress has been monitoring these ClickFix clusters since early October, noting the use of the IP address 141.98.80[.]175 and various paths for the initial mshta.exe stage, with subsequent PowerShell stages hosted on domains linked to the same infrastructure. Despite the disruption of Rhadamanthys’ infrastructure in mid-November, active domains continue to serve the ClickFix lure, although the Rhadamanthys payload appears to be unavailable. To mitigate the attack, disabling the Windows Run box through Group Policy or registry settings is recommended, along with monitoring for suspicious activity involving explorer.exe. User education is critical, emphasizing that legitimate processes will not require pasting commands into the Run prompt. Analysts can check the RunMRU registry key to investigate potential ClickFix abuse.
Search