NewApp Digest
search bot

awareness

Experts warn cheap Android phones are shipping with malware
AppWizard
October 15, 2026

Experts warn cheap Android phones are shipping with malware

Cybersecurity experts from Bitdefender have found that budget Android smartphones, such as the Doogee S200 X, Doogee Fire 3 Max, and Cubot KINGKONG X, may come pre-loaded with malware embedded in their firmware, posing significant security risks. This malware is introduced during the manufacturing process, particularly affecting devices with MediaTek chipsets. Thousands of users in around 150 countries, including Mexico, France, Italy, the United States, Germany, Brazil, and Spain, have been impacted. Bitdefender identified a network of 32 malicious applications disguised as legitimate utilities that generate fraudulent ad impressions. Some infected phones can function as residential proxies for criminal activities, including spam campaigns and DDoS attacks. Uninstalling the malicious app may not eliminate the infection if it is integrated into the system software, potentially requiring firmware-level remediation. Buyers of budget phones should research manufacturers' supply chain control and commitment to security updates.
Google Messages adding ‘enhanced protection mode’ as Android works to combat phone scam
AppWizard
October 14, 2026

Google Messages adding ‘enhanced protection mode’ as Android works to combat phone scam

Google has introduced new features to enhance user security on its Android platform during Cybersecurity Awareness Month, focusing on combating messaging and phone scams. The key feature is an enhanced protection mode for the Google Messages app, which includes Scam Detection using Private AI Compute to analyze message context and identify scammer intent through cloud-based Gemini models. This mode complements existing on-device detection and aims to uncover sophisticated scams while ensuring user data remains encrypted and secure. Additionally, link protections have been upgraded with real-time web signals to assess unfamiliar links' trustworthiness, available on select devices such as Pixel 10+, Samsung Galaxy S26 series, Galaxy Z Flip 8, and Z Fold 8. Redesigned warnings will provide clearer context before users tap links from unknown numbers, previously limited to select countries or devices with Android Advanced Protection. Google is also expanding its on-device Scam Detection to more brands beyond Pixel, including HONOR, Infinix, iQOO, itel, JOVI, Motorola, OPPO, OnePlus, realme, TECNO, vivo, and Xiaomi. For phone scams, automatic screen-share privacy will conceal sensitive information in native apps and extend to Chrome and WebView on devices running Android 15 and above. Google plans to block apps from enabling call forwarding in the background to prevent one-time passcode theft, with this feature rolling out in early December on Pixel and select other devices. Android will also proactively warn users if a scammer attempts to trick them into entering an MMI forwarding code.
Microsoft’s Record October Patch Tuesday Fixes 1,400+ Flaws As Windows Zero-Day Comes Under Attack
Winsage
October 14, 2026

Microsoft’s Record October Patch Tuesday Fixes 1,400+ Flaws As Windows Zero-Day Comes Under Attack

Microsoft's October 2026 security updates address 1,411 vulnerabilities, marking the largest Patch Tuesday release to date. The update includes 70 vulnerabilities classified as Critical, with 57 related to remote code execution, 11 to elevation of privilege, and two to spoofing. Key vulnerabilities include CVE-2026-96951, a Windows Shell security bypass being actively exploited, CVE-2026-108398, which affects .NET Framework and allows bypassing Windows Defender Application Control, and CVE-2026-92707, a denial-of-service vulnerability in MessagePack-CSharp. The release coincides with critical Windows support deadlines, with the final regular update for Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 occurring on October 13. Organizations are advised to prioritize the exploited vulnerabilities, ensure relevant updates are applied, and validate application-control behavior.
dbForge 2026.2 Adds a PostgreSQL Debugger, Visual Object Editors and Broader Context for dbForge AI Assistant
Tech Optimizer
October 11, 2026

dbForge 2026.2 Adds a PostgreSQL Debugger, Visual Object Editors and Broader Context for dbForge AI Assistant

Devart has released dbForge 2026.2, a unified database management ecosystem for PostgreSQL developers, featuring an embedded PostgreSQL Debugger that allows for efficient error tracking in server-side code. The Debugger enables breakpoints, step-through code execution, and real-time monitoring of variables and query results. Visual editors for PostgreSQL event triggers, functions, and procedures have been introduced, allowing for easier management without manual SQL writing. The dbForge AI Assistant now offers expanded context awareness, enabling users to attach various documents and select from multiple AI models for generating relevant SQL code. A free Express edition of the AI Assistant is available, with limited features compared to paid plans. Additionally, new SQL refactoring commands and schema comparison improvements have been implemented, along with updates for compatibility with MySQL 26.7 and MariaDB 13.x.
silver Android smartphone
AppWizard
October 9, 2026

Thousands of cheap Android phones shipped with ad-fraud malware

Researchers from Bitdefender have discovered that thousands of inexpensive Android devices are preloaded with malware called "Midnight Mimosa," which generates fraudulent advertising revenue. This malware is embedded in the device firmware before the first power-up, making it impossible for users to uninstall. It operates with system-level privileges, allowing it to install or remove applications without user consent and to download additional code. The malware primarily aims for financial gain through advertising and click fraud, while also gathering information about devices. Bitdefender has detected this malware on thousands of devices across over 150 countries, with the highest concentrations in Mexico, France, and Italy, followed by the United States, Germany, Brazil, and Spain. Many affected devices are low-cost, white-label, or counterfeit models, often sold online. The malware stealthily installs legitimate-looking applications that display ads in invisible windows, generating ad impressions without user awareness. Bitdefender identified at least 32 disguised applications and found 13 apps in the Google Play Store with similar ad-fraud code. The source of the malware remains unidentified, but some affected firmware was signed with certificates from Shenzhen Zediel, a Chinese company. The researchers suggest that the malware could have been introduced at various stages of the supply chain, potentially by manufacturers or intermediaries.
Devart rolls out dbForge 2026.2
Tech Optimizer
October 6, 2026

Devart rolls out dbForge 2026.2

Devart has released dbForge 2026.2, a database management suite update featuring a PostgreSQL Debugger for error tracking, visual editors for managing PostgreSQL objects, and an enhanced dbForge AI Assistant with broader context awareness. The AI Assistant now supports models from Anthropic and OpenAI and includes a free Express edition with limited features. The update also improves SQL development and schema comparison functionalities, with new refactoring commands and support for MySQL 26.7 and MariaDB 13.x. dbForge 2026.2 is available for download, with current users able to update through the Help menu.
Media struggles to send in RCS for Google Messages—a fix is coming after users report
AppWizard
October 6, 2026

Media struggles to send in RCS for Google Messages—a fix is coming after users report

Users in the Google Messages and Pixel communities are experiencing issues sending media via RCS, with some unable to send files at all and others facing delays where all files are sent simultaneously. These problems reportedly began after an August update. Google has acknowledged the bug affecting some users and is rolling out a fix, which may take a couple of weeks to reach everyone. This situation is similar to past issues with Google Messages, where a server-side patch resolved media sending failures. Additionally, Samsung Galaxy users faced RCS chat failures earlier this year after using Smart Switch, prompting Google to collaborate with carriers to address the problems.
Microsoft warns fake CAPTCHA tests are hijacking Windows PCs
Winsage
October 5, 2026

Microsoft warns fake CAPTCHA tests are hijacking Windows PCs

Microsoft has warned Windows users about a cyber threat that disguises itself as a CAPTCHA test, where cybercriminals use fraudulent verification pages to trick users into executing commands that can install malware. This tactic involves users being directed to a compromised website that presents a fake verification window, prompting them to copy text and execute it in the Windows Run dialog. This method allows attackers to bypass antivirus software by pre-loading malicious scripts disguised as harmless images in the browser's cache. Once activated, the malware collects system information, steals data, and maintains long-term control over the system. Microsoft recommends using robust security software and being aware that no legitimate service will ask users to copy and paste commands into system dialogs.
One of the most popular Total War: Warhammer 3 mods was 'deliberately corrupted' by its creator to sabotage AI-made copies
AppWizard
October 4, 2026

One of the most popular Total War: Warhammer 3 mods was ‘deliberately corrupted’ by its creator to sabotage AI-made copies

The Lords of the End Times expansion for Total War: Warhammer 3 has made the SFO Grimhammer 3 mod incompatible with the latest game version, prompting the creators to work on a fix. Some individuals have been reworking the original mod using AI coding and reuploading it, leading to frustration within the modding community. The creator of SFO Grimhammer 3 has corrupted the mod to prevent unauthorized uploads and has threatened to make it private if the situation escalates. They have stated their opposition to the appropriation of their work for AI purposes and emphasized that their mods will remain free. A functional version of SFO: Grimhammer III for game version 8.1.1 has been restored on Steam in response to community feedback. The creator hopes to raise awareness about the issues caused by AI-generated modifications and advocates for AI to be a supportive tool rather than a replacement for individual creativity in modding.
Search