browsers Archives

AppWizard

September 28, 2026

One of the best classic Lego games has a free remake you can play

Lego Racers has been reintroduced as "Step On It," a free online game accessible through web browsers. This remake retains the original's essence while adding features like online multiplayer for up to six players. All content from the original game is available from the start, and enhancements such as rebalanced items and adjusted AI can be toggled. The project was developed by isledecomp, known for the Lego Island browser remake.

AppWizard

September 25, 2026

Ocean Browser , Secure Browser for Android

Ocean Browser is an Android application that provides a secure and private browsing experience by integrating advanced proxy technology, eliminating the need for separate VPN applications. It reroutes browsing traffic through its secure infrastructure, hiding users' actual IP addresses from websites. Ocean Browser offers features such as encrypted proxy connections, the ability to select proxy locations, and seamless management of proxy connections without complex settings. It is designed for everyday use, particularly on public Wi-Fi networks, and is available for free on Google Play.

AppWizard

September 25, 2026

Google Maps is failing to complete basic searches for some users

Users are experiencing a glitch with the search functionality in the browser version of Google Maps, where searching for general terms like "restaurants" results in an error message suggesting a misspelling or incomplete query. Specific location searches work normally, but general searches yield a message stating, “Google Maps can’t find restaurants,” prompting users to check spelling or provide additional location details. This issue appears to be limited to the browser version, with no problems reported on the mobile app. Some users have found that searching in incognito mode may resolve the issue, though this workaround is not universally effective. The glitch affects multiple browsers, not just Chrome. Android Authority has contacted Google for clarification on the matter.

Winsage

September 24, 2026

uBlock Origin finally broke for me on Microsoft Edge, so I switched to Brave

Microsoft Edge users recently experienced a significant change as advertisements flooded the interface following the discontinuation of support for the uBlock Origin ad-blocking extension. This shift resulted from the transition away from Manifest Version 2 (MV2) extensions to Manifest Version 3 (MV3), which diminishes the effectiveness of ad blockers. As a result, users are considering alternative solutions or switching browsers. Brave has emerged as a viable option, maintaining support for MV2 extensions and offering effective ad-blocking features through its Brave Shields. Users can selectively block elements easily, although it lacks some features of uBlock Origin. The author plans to use Brave Shields for browsing while keeping the option to revert to uBlock Origin if needed.

BetaBeacon

September 24, 2026

Best Mobile Casinos Australia 2026 – Play Safely on iOS & Android

- Wild Tokyo, Rolling Slots, Mino Casino, and Boho Casino are the best mobile casinos in Australia based on mobile performance, gameplay experience, payment efficiency, and overall usability.

AppWizard

September 24, 2026

6 ways Android Enterprise is evolving for the modern workforce

In modern workplaces, the balance between innovation and security is crucial as employees seek access to advanced technology while IT departments protect sensitive data. Android is enhancing its tools for workers through Android Enterprise, with key advancements expected by 2026, including: 1. Advanced AI agents and controls: - Smarter workflows will introduce next-generation AI agents with enterprise-grade controls. - The evolution of Gemini will enable management of complex workflows using real-time context, eliminating manual app switching. - Built-in safeguards will ensure work profile isolation, preventing personal agents from accessing corporate data. - Administrators will have granular control to configure or disable AI automation through Android Enterprise. 2. Next-gen manageable XR devices: - New hardware like the XREAL Aura wired glasses will enhance workforce capabilities. - IT administrators will manage a range of XR devices alongside standard mobile fleets using Enterprise Mobility Management consoles. - Employees will benefit from hands-free productivity with integrated displays, audio, and AI assistance while connected to enterprise tools.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a new Windows implant called CLOSEDQUORUM, which operates without human operators by using four commercial large language models (LLMs) to autonomously decide on actions after deployment. The implant is a 16.4-megabyte executable that conducts reconnaissance on the target system and sends structured prompts to the LLMs, which respond with one of four actions: steal, inject, persist, or move. When the "steal" action is chosen, it simultaneously attacks three credential stores, extracting Windows credentials, browser passwords, and cryptocurrency wallet data. The "inject" action uses either Early Bird APC injection or process hollowing based on model recommendations. For persistence, it employs three overlapping mechanisms, including a Registry Run key, a scheduled task, and a WMI event subscription. To evade detection, CLOSEDQUORUM suppresses ETW telemetry and introduces delays before executing actions. It circumvents traditional command-and-control structures by calling legitimate API endpoints, making blocking these domains impractical. Talos introduced the CAIRN toolkit for detecting AI-integrated malware, which operates on metadata and employs rule-based detection. Unlike previous AI-assisted malware, CLOSEDQUORUM automates decision-making processes entirely, highlighting a significant evolution in malware capabilities. Security teams are advised to focus on behavioral detection strategies and utilize the YARA rule and CAIRN toolkit for identifying this threat.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a Windows implant called CLOSEDQUORUM, which automates cyberattack execution using four advanced commercial large language models: DeepSeek, Qwen, Mistral, and Google Gemini. The implant is a 16.4-megabyte executable that conducts reconnaissance on the system and formats the gathered data into prompts for the AI models. Each model votes on one of four actions: steal, inject, persist, or move, with the action receiving the most votes being executed. When stealing, CLOSEDQUORUM targets three credential stores, dumping LSASS memory and retrieving saved passwords from browsers and cryptocurrency wallets. The stolen data is encrypted and sent to the operator via Discord. For injection, it uses Early Bird APC injection or process hollowing based on model responses. The persist action creates three mechanisms for longevity, including a Registry Run key, a scheduled task, and a WMI event subscription. CLOSEDQUORUM evades detection by suppressing ETW telemetry and delaying activity to avoid sandbox analyses. It connects to legitimate API endpoints, making blocking ineffective without disrupting enterprise applications. Talos recommends behavioral combination detection strategies and the use of a YARA rule for detection. The CAIRN toolkit has been introduced to detect AI-integrated malware without executing binaries. Unlike previous AI-assisted malware, CLOSEDQUORUM removes human decision-making from the attack process.

Tech Optimizer

September 22, 2026

This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack

LastPass has identified a sophisticated scheme targeting users of its Authenticator app, involving SEO poisoning and deceptive GitHub pages that distribute malicious ZIP files disguised as legitimate software. Users searching for "LastPass Authenticator download" may encounter these counterfeit pages, which redirect them to a malicious server delivering a ZIP file containing vsdbg.exe and vsdbg.dll. The executable is a legitimate Microsoft debugging tool exploited to execute the malicious DLL through DLL sideloading, allowing the malware to run undetected. Named Rapuncel by security researchers from Delphos, this malware is undetectable by antivirus engines and targets a hardcoded list of 145 antivirus and endpoint security products, disabling them upon detection. Rapuncel harvests sensitive information, including saved passwords from over 25 web browsers, cryptocurrency wallet files from more than 30 applications, and session tokens from platforms like Discord and Steam. It also captures screenshots and compiles a profile of the infected system, uploading the stolen data to an attacker-controlled server. The malware includes a kernel driver that intercepts web traffic, allowing for advertisement injection and search result manipulation. This campaign has been active for several months, with LastPass vaults remaining unaffected. Users are advised to download applications only from trusted sources. Rapuncel establishes persistence on infected machines by installing itself as a Windows service that starts with the system and terminates activated security products. Removing the kernel driver requires booting into Safe Mode or using external recovery tools, as standard Windows utilities cannot eliminate software operating at that level.

Tech Optimizer

September 21, 2026

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

On September 17, researchers from LastPass and Delphos Labs discovered a counterfeit LastPass Authenticator installer on GitHub that installs a malicious Windows kernel driver designed to disable antivirus and steal passwords. The driver, named Alinubx.sys, was signed through Microsoft's hardware compatibility program and initially scored zero detections on VirusTotal. The fake installer is hosted on a fraudulent GitHub page that mimics a legitimate LastPass product page. When executed, the installer uses DLL side-loading to gain SYSTEM-level access and terminates security processes, allowing it to harvest saved passwords from various browsers and applications. The driver is a renamed variant of a known malicious driver, evading detection due to its new file hash. Delphos reported the driver to Microsoft, but it was not considered a security vulnerability. Users who executed the fake installer should treat their passwords and sensitive data as compromised and change them from a secure device. The malicious server has been linked to impersonation pages for multiple brands, and the loader was likely created using a specific crypter tool.