NewApp Digest
search bot

application security

Microsoft tells crusty old kernel drivers to get with the Windows Hardware Compatibility Program
Winsage
March 27, 2026

Microsoft tells crusty old kernel drivers to get with the Windows Hardware Compatibility Program

Microsoft is enhancing the security of the Windows kernel by eliminating trust for kernel drivers not certified through the Windows Hardware Compatibility Program (WHCP) starting with the April 2026 Windows Update. This change specifically targets kernel drivers signed by the now-obsolete cross-signed root program, which has been associated with security vulnerabilities. The new policy will initially be introduced in an "evaluation mode" to monitor and audit driver loads for potential compatibility issues. Custom kernel drivers can still be used under the Application Control for Business policy, but must be signed by an authority within the device's Secure Boot Platform Key or Key Exchange Key variables. The changes will impact Windows 11 versions 24H2, 25H2, 26H1, and Windows Server 2025.
Russian hackers hack messengers, Signal and WhatsApp under attack
AppWizard
March 22, 2026

Russian hackers hack messengers, Signal and WhatsApp under attack

Hackers with ties to Russian intelligence have intensified efforts against users of messaging platforms like Signal, infiltrating thousands of accounts, as reported by the FBI and CISA. The main targets include current and former U.S. government officials, military personnel, political figures, and journalists. The hackers used advanced techniques to bypass security, tricking users into revealing security codes through sophisticated phishing campaigns. Signal confirmed that their encryption and infrastructure remain secure despite these attacks. This rise in cyber threats is part of a broader trend involving increased activities from pro-Iranian and Russian hackers targeting the U.S. and its allies.
New infosec products of the week: March 13, 2026
Tech Optimizer
March 13, 2026

New infosec products of the week: March 13, 2026

Singulr AI has launched Agent Pulse, providing runtime governance and visibility for AI agents. Terra Security introduced Terra Portal, a desktop application that accelerates vulnerability discovery in live production environments. Mend.io released System Prompt Hardening to address weaknesses in AI system prompts. OPSWAT rolled out MetaDefender Aether, an AI-driven decision engine for rapid zero-day detection at the perimeter level. Vicarius announced vIntelligence, integrating agentic intelligence and continuous validation into its security offerings. Binary Defense launched NightBeacon, an AI-enhanced security operations platform for SOCs. SOC Prime introduced DetectFlow Enterprise, shifting threat detection to the data ingestion layer for real-time identification.
Search