NewApp Digest
search bot

application

Valve open-sources Lepton, its Android compatibility layer for the Steam Frame
AppWizard
September 19, 2026

Valve open-sources Lepton, its Android compatibility layer for the Steam Frame

Valve has open-sourced Lepton, an Android compatibility layer for the Steam Frame headset, allowing VR developers to adapt existing Android games for the device. The code is available on Valve's GitLab repository and facilitates the transition without needing to reconstruct games for a different platform. Lepton is designed to create a game-optimized Android environment rather than transforming the Steam Frame into a general Android device. It disables unnecessary Android services to maintain efficiency and integrates with the SteamOS host system, supporting various graphics stacks and Vulkan tools for enhanced VR gaming. Lepton operates without requiring root access, with each process running as a non-root user, and provides developers with tools for debugging and performance profiling. The open-sourced code offers insight into Valve's approach to supporting Android games on SteamOS.
Google’s Android Bench 2.0 tests AI agents on week-long app builds
AppWizard
September 19, 2026

Google’s Android Bench 2.0 tests AI agents on week-long app builds

Google has launched Android Bench 2.0, an upgraded benchmark for evaluating AI coding agents, which now includes 30 long-horizon tasks that can take human engineers days or weeks to complete. The best pass rate for these tasks is around 28%, down from approximately 91% in the previous version. The benchmark measures both pass rates and completion rates, acknowledging partial progress rather than just failures. It assesses various challenges, including app creation and feature integration, using a comprehensive scoring methodology that evaluates functionality, regression checks, and visual fidelity. AI models perform better with new code than with modifications to existing systems, facing challenges in runtime validation and cross-platform conversions. The current leaderboard shows OpenAI’s GPT-6 Astra leading with a 28% pass rate, while Gemini 3.8 Flash has an 8% pass rate. Developers using AI agents should be aware that while AI can generate significant portions of applications, further refinements will require human input. The benchmark is available on Google’s Android Bench leaderboard.
New RatHat Android Malware Uses AI to Steal Banking Logins, PINs and OTP Codes
AppWizard
September 19, 2026

New RatHat Android Malware Uses AI to Steal Banking Logins, PINs and OTP Codes

Security researchers have identified an Android banking Trojan named RatHat, which utilizes artificial intelligence, accessibility features, and Android Debug Bridge (ADB) to steal financial credentials, PINs, and one-time passcodes. Unlike traditional malware, RatHat employs a live AI assistant that interacts with the Android accessibility tree, allowing it to make real-time decisions based on the victim's screen content. The infection typically starts with social-engineering tactics, leading victims to counterfeit download pages where they are tricked into sideloading a malicious APK. Once installed, RatHat prompts users to enable Android Accessibility Service permissions, which it exploits to navigate Developer Options and enable Wireless Debugging. This grants it shell-level ADB access, allowing it to bypass application sandbox restrictions. RatHat deploys two native binaries for executing commands and maintaining a connection to the attacker's infrastructure. It targets banking applications through credential-stealing overlays and can intercept SMS messages for transaction verification codes. Additionally, it can record touch coordinates to reconstruct PINs and unlock patterns. RatHat includes persistence mechanisms to restore itself after removal, and users are advised to perform a factory reset if they suspect compromise. To reduce infection risk, users should avoid sideloading apps from unknown links, deny unnecessary Accessibility Service requests, and refrain from enabling Developer Options or Wireless Debugging for unfamiliar applications.
Russia's "National Messenger" Turned Out to Be... "Putin Is Watching"
AppWizard
September 19, 2026

Russia’s “National Messenger” Turned Out to Be… “Putin Is Watching”

The Russian government is pressuring citizens to download a mobile app called "Max," which has raised privacy and surveillance concerns. Max is a popular messaging platform in Russia and integrates messaging, government services, and payment functionalities. Research by a University of Michigan team found that Max can capture users' screens without consent, access sensitive information, impersonate users, and potentially enable cyberattacks via code injection. Despite these concerns, many Russians still use alternative messaging platforms like Telegram and Signal. Some government officials are using separate devices for Max, indicating unease about its surveillance capabilities. The app is linked to a social media company connected to the Russian government, and President Putin may have an indirect financial stake in it.
Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens
AppWizard
September 18, 2026

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens

A new messaging and payment app called Max has emerged in Russia, developed by VKontakte, and has become the country's most utilized messaging platform. Max integrates various services, including banking and government services, and has been adopted by tens of millions of Russians. It features extensive surveillance capabilities, allowing it to take screenshots, access information without consent, impersonate users, and potentially conduct cyberattacks. The app's adoption has been largely mandatory, particularly among state employees and students. Despite its rise, Max has not replaced Telegram as a primary news source, and users have raised concerns about privacy and surveillance. Experts warn that Russia's swift implementation of digital control strategies reflects a growing trend of digital authoritarianism.
This clever Plex app could give your aging LG TV a new lease on life
AppWizard
September 18, 2026

This clever Plex app could give your aging LG TV a new lease on life

A new open-source Plex client named PlxNative has been developed for older LG TVs running on webOS to improve the browsing experience of Plex libraries. It operates independently of a web browser using a native Rust/OpenGL interface, allowing it to launch in about one second and ensuring fluid scrolling and menu navigation. PlxNative supports various Plex functionalities, including library browsing, profile switching, audio and subtitle selection, and direct play or server transcoding. It does not replace the TV's built-in video decoder and connects directly to the Plex Media Server over the local network after initial sign-in. Installation options include the Homebrew Channel or sideloading via LG’s Developer Mode, which requires periodic session renewals. The developer has submitted PlxNative for official review by LG.
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
AppWizard
September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.
The real reason your Windows 11 taskbar couldn’t move for 5 years
Winsage
September 17, 2026

The real reason your Windows 11 taskbar couldn’t move for 5 years

Tali Roth, overseeing Windows core user experience, revealed that Windows 11 did not inherit significant portions of the legacy Win32 code, particularly affecting the taskbar's customization and repositioning features. Microsoft had to rebuild the taskbar from scratch, which complicated the ability to allow users to move it, as each application would need to adapt to such changes. Initially, the demand for a movable taskbar was low, but user feedback prompted Microsoft to reconsider. Similarly, the Start menu in Windows 11 offered fewer customization options compared to Windows 10 due to a design shift towards a minimalist aesthetic, making it difficult to reintegrate previous features. Microsoft is balancing user feedback with its design vision as it evolves the Windows experience.
M-I to launch app for mobile devices
AppWizard
September 17, 2026

M-I to launch app for mobile devices

The Messenger-Inquirer is launching a mobile application to enhance reader experience by providing access to its content. The app will feature comprehensive content access, a user-friendly interface, real-time notifications for breaking news, and a personalized news feed option.
Search