NewApp Digest
search bot

breach

Хакеры взломали ремейк Assassin's Creed 4: Black Flag
TrendTechie
August 16, 2026

Хакеры взломали ремейк Assassin’s Creed 4: Black Flag

The remake of Assassin's Creed: Black Flag Resynced has been compromised by hackers, making it available for download on various torrent sites. This breach occurred a little over a month after the game's official release on July 9. The hacker, known as voice38, successfully bypassed Denuvo's anti-piracy measures and has previously hacked other titles. The game is available on PC via Steam, Epic Games Store, and Ubisoft Connect, as well as on PS5 and Xbox Series, featuring Russian subtitles and significant enhancements such as redesigned mission structures, revamped combat systems, improved parkour mechanics, enhanced graphics, and new narrative content. Additionally, Mafia: The Old Country has released an expansion titled “Man of Honor”.
'This one just needs a script': Researchers find ultimate Windows kill switch which can disable antivirus w...
Winsage
August 14, 2026

‘This one just needs a script’: Researchers find ultimate Windows kill switch which can disable antivirus w…

Researchers from the University of Birmingham and Durham University discovered a vulnerability in consumer DDR4 and DDR5 memory chips, termed "Download more RAM," which allows attackers to misreport memory configuration, potentially doubling the perceived RAM. This manipulation enables unauthorized access to memory allocations, bypassing Windows' Virtualization-based Security (VBS) and Hypervisor-Enforced Code Integrity (HVCI), and disabling antivirus software. The vulnerability affects major manufacturers like Corsair, G.Skill, and ADATA, which collectively hold over 55% of the high-performance memory market. Microsoft has patched the vulnerability, cataloged as CVE-2026-23670, with a medium severity score of 5.7/10, in the April 2026 Patch Tuesday update. Corsair has introduced a feature to enable write protection on their memory modules, and other tools are available for additional protection.
ExfilSquad выложила данные Wesco и других жертв через торренты
TrendTechie
August 13, 2026

ExfilSquad выложила данные Wesco и других жертв через торренты

ExfilSquad has announced new victims in the Wesco data breach, setting a negotiation deadline of August 5, 2026, after which stolen data will be publicly released. The affected organizations include Wesco International, the UK Department for Education Help Portal, Turing Portal, Police National Legal Database, Allstate, TaylorMade, Sun Day Red Golf, Frontier Airlines, District of Columbia Public Schools, Newcastle University, Viavi Solutions, City of Houston, City of Atlanta, and Bonava. Wesco International's breach involves 2.6 million records, while the City of Houston has 6 million records at risk. ExfilSquad uses extortion through data publication on an onion site and has expanded to torrent links for distribution, complicating data removal efforts. On August 7, 2026, they released torrent files for each victim, with active hosts identified in China and Russia. The group also claimed to have breached a bank in Nigeria, although this information later disappeared from their site.
Apple restores Telegram after child abuse material ban; Gram token recovers
AppWizard
August 12, 2026

Apple restores Telegram after child abuse material ban; Gram token recovers

Apple has reinstated Telegram to its App Store after a temporary removal due to the discovery of child sexual abuse material. Telegram responded by removing the offending content and banning the user responsible, which helped recover the value of the Gram token that had initially dipped by approximately 6.4%. The incident underscores the scrutiny messaging platforms face regarding illegal content, with Telegram currently under scrutiny in Russia, France, and Australia for alleged facilitation of illegal activities and extremist content.
silver Android smartphone
BetaBeacon
August 11, 2026

Aptoide Games Joins Google Play: First Rival Android Store in Over Decade

The Play Catalog Access Program was implemented on July 22, 2026, as a result of a court order after Google lost a lawsuit filed by Epic Games for illegally monopolizing Android app distribution and in-app billing. The program allows enrolled stores, such as Aptoide Games, to access Google Play's app catalog and offer users the ability to install apps through Google Play's infrastructure, maintaining security and service fees.
Android apps could be leaking your precise location
AppWizard
August 9, 2026

Android apps could be leaking your precise location

Third-party advertising tools embedded in Android applications are automatically collecting location data, often without the app developers' awareness. Software development kits (SDKs) used for advertising come with location data collection enabled by default, unless developers actively disable this feature. Historical location data has been sold to military and intelligence agencies, including the FBI, and used in immigration enforcement actions in the US. The Electronic Frontier Foundation (EFF) reported that app-level location permissions do not provide meaningful consent for location collection by third-party advertising SDKs. The EFF identified four advertising SDKs—InMobi, BidMachine, Verve's HyBid, and Huawei's Petal Ads—that collect and share location data by default. Two analyzed apps had been downloaded 60 million times without providing a privacy notice or seeking user consent for third-party location sharing. Users can manage location permissions through their device settings, but the EFF emphasizes that developers should ensure user data is not shared by default.
This 'classic' decades-old SQL injection flaw could let hackers take over entire Windows servers, thanks to a nifty database trick
Winsage
August 7, 2026

This ‘classic’ decades-old SQL injection flaw could let hackers take over entire Windows servers, thanks to a nifty database trick

Security researchers from Huntress discovered a sophisticated SQL Injection (SQLi) attack that led to the deployment of a rare toolkit called Khunt. The attackers exploited a public-facing application backed by an Oracle database by failing to validate user input, allowing malicious SQL commands to be executed. The Khunt toolkit enabled activities such as executing operating system commands, stealing credentials, and exfiltrating registry hive data. Experts recommend robust defense mechanisms, including input sanitation, regular security audits, and the implementation of web application firewalls to protect against such attacks.
Search