NewApp Digest
search bot

campaigns

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Winsage
September 9, 2026

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Recent investigations have identified the BlueMoon exploit kit, used by espionage-driven threat activity clusters, particularly linked to APT31, a China-aligned state-sponsored group, since August 28, 2026. BlueMoon exploits three vulnerabilities: CVE-2026-85046 (a type confusion vulnerability in Google Chrome's V8 engine), an unassigned V8 sandbox escape, and CVE-2026-85880 (a heap-based buffer overflow in Windows ALPC). Google and Microsoft have released patches for these vulnerabilities, which were exploited as "patch-gap" zero-days. The attack vectors typically begin with phishing emails that lead victims to malicious URLs, triggering the vulnerabilities for code execution and privilege escalation. Variants of BlueMoon have been detected, featuring modifications for specific campaigns. Notable attack chains include: - APT31 targeting NGOs and mining firms in the U.S. with a malicious browser add-on called GemStone. - UNK_LateNight targeting U.S. aerospace companies, deploying BlueMoon alongside the ShadowPad backdoor. - UNK_DoubleCheck targeting a Vietnamese manufacturer, using DLL sideloading to execute a Rust binary. - UNK_QuietRacket targeting government and financial organizations in Indonesia and Singapore, modifying BlueMoon to execute a .NET assembly. CISA added the Chrome flaw to its Known Exploited Vulnerabilities catalog on September 4, 2026, requiring federal agencies to apply patches by September 18, 2026. Indicators of compromise include specific process trees, files, folders, scheduled tasks, mutexes, and registry keys. Proofpoint has released detection rules to help organizations identify and mitigate these threats.
No-deposit Gambling establishment Extra Codes to own goldbet app download for android Present People August 2026
BetaBeacon
September 8, 2026

No-deposit Gambling establishment Extra Codes to own goldbet app download for android Present People August 2026

- No-deposit bonuses allow players to try online casinos without using their own money upfront, but they are often limited to specific games like online slots. - There are wagering requirements and other criteria that must be met before winnings can be withdrawn. - Some casinos require players to enter a bonus code, while others automatically credit the bonus after registration. - Free spins bonuses for USA players are listed on the website, with mobile-only spins offering additional benefits like more free spins or slot tournaments. - Players should always check if they are playing legally in their country and be aware of deposit limits and wagering requirements before accessing their winnings.
silver Android smartphone
Tech Optimizer
September 7, 2026

Top 10 Best Endpoint Detection & Response (EDR) Solutions in 2026

Endpoint detection and response (EDR) continuously records process, file, registry, and network activity on endpoints, applying behavioral analytics to identify attacker techniques while providing tools for investigation and containment. Several EDR platforms have emerged, each catering to different organizational needs: 1. CrowdStrike: Best overall for its rich telemetry and elite threat intelligence. 2. SentinelOne: Best for autonomous response, featuring strong containment and rollback capabilities. 3. Microsoft Defender for Endpoint: Best value for organizations already using Microsoft 365 E5. 4. Palo Alto Cortex XDR: Best for native data fusion across endpoint, network, and cloud telemetry. 5. Sophos: Best for generalist IT teams due to its user-friendly interface. 6. Trend Micro: Best for server and workload coverage, focusing on cloud and hybrid environments. 7. Bitdefender: Best mid-market value with strong detection capabilities at an accessible price. 8. Trellix: Best for organizations already using Trellix products, offering integrated solutions. 9. Huntress Managed EDR: Best for managed endpoint security, ideal for teams lacking full staffing. 10. Cisco Secure Endpoint: Best for Cisco environments, integrating well with Cisco security solutions. Key differentiators among these platforms include the analyst burden, alert management efficiency, and the impact of retention policies on investigation quality. The evaluation of EDR solutions should consider detection depth, response capabilities, operational costs, and the specific needs of the organization.
NYC Council to grill Mamdani admin over use of influencers, encrypted messaging app
AppWizard
September 5, 2026

NYC Council to grill Mamdani admin over use of influencers, encrypted messaging app

The City Council will examine Mayor Mamdani's administration's use of a secretive encrypted messaging channel for media relations, which connects nearly 200 social media influencers. This discussion is scheduled for a hearing on September 22. Queens Councilman Phil Wong plans to introduce legislation requiring influencers to label posts for city agency campaigns with a disclaimer stating “Paid for by NYC.” A report revealed that city officials communicated with influencers through a Signal app group titled “NYC Creators Announcements,” sharing updates and multimedia content. Some influencers received payment for their involvement, while others supported the mayor's agenda for personal growth. Concerns have been raised about the Signal chat potentially violating record-keeping regulations due to auto-deletion of messages. The identities of the influencers and details of their contracts remain undisclosed. Wong's proposed bill aims to reveal any undisclosed payments to influencers and raise questions about the integrity of the administration's use of external promoters. Critics argue that the administration's secrecy calls for greater transparency in public relations expenditures.
New Windows malware lays dormant until a custom command activates it like a sleeper agent
Winsage
August 27, 2026

New Windows malware lays dormant until a custom command activates it like a sleeper agent

Researcher Dominik Reichel has identified a new malware implant called SLEEPWALKER, which is disguised as an agent from ESET. SLEEPWALKER is unique because it does not contain malicious code and remains dormant until it receives specific network signals to activate. It appears to be designed for targeted attacks, likely orchestrated by nation-states. Although it was submitted to VirusTotal last year, it has not been linked to any active campaigns or confirmed victims. The origins of SLEEPWALKER are unknown, and its code is described as somewhat "rough around the edges," indicating it may still be in development.
Windows malware numbers look awful next to macOS. I’m still not worried
Winsage
August 27, 2026

Windows malware numbers look awful next to macOS. I’m still not worried

Windows holds a 71 percent share of the desktop market, with over 1.6 billion active Windows PCs globally. In contrast, macOS accounts for just over seven percent of the market, rising to nearly 20 percent when combined with OS X. Windows users face a variety of threats, including trojans and riskware, and in 2025, Windows users encountered seven times more malware than macOS users. Surfshark's data indicates that macOS users are increasingly targeted by phishing attacks, which pose significant financial and personal risks.
'I'm so glad I quit Windows a while ago': new app promoting Bing is proving controversial, as Microsoft bribes people to use Edge
Winsage
August 24, 2026

‘I’m so glad I quit Windows a while ago’: new app promoting Bing is proving controversial, as Microsoft bribes people to use Edge

Microsoft has launched a referral program for its Edge browser, allowing users to earn 500 Microsoft Rewards points for each friend they invite to switch to Edge, with a maximum of 7,500 points per month. To qualify, the invited friend must be a new user, sign into Edge, and use the browser for at least two days within the first two weeks. Additionally, a new application called 'Microsoft Recommended Search' has been discovered, designed to change the default search engine to Bing across various browsers, raising concerns among users about Microsoft's promotional strategies.
The 100 Best Strategy Games To Play In 2026
AppWizard
August 23, 2026

The 100 Best Strategy Games To Play In 2026

Hearts of Iron IV is a grand strategy game set during World War II, where players control a nation and navigate warfare, diplomacy, and military strategy. It offers extensive gameplay options, including resource management and political maneuvering, and is known for its replayability. Phoenix Point is a turn-based tactical strategy game set in a post-apocalyptic world, where players lead customizable squads against alien threats, emphasizing tactical decision-making. War on the Sea is a real-time tactical strategy game focused on naval battles in the Pacific Theater during World War II, featuring historically accurate ships and aircraft. Terra Invicta is a grand strategy game in Early Access, where players manage factions in a near-future scenario while preparing for potential interstellar conflict. Command & Conquer: Generals is a real-time strategy game featuring three factions: the United States, China, and the Global Liberation Army, known for its engaging gameplay. Cold Waters allows players to command a Cold War-era nuclear submarine, focusing on stealth tactics and realistic naval simulation. Gears Tactics is a turn-based game set in the Gears of War universe, where players lead a squad against the Locust Horde. Warhammer 40,000: Battlesector involves commanding Primaris Space Marines in tactical battles against Tyranids, with expansions enhancing gameplay. Company of Heroes 2 is a real-time strategy game set on the Eastern Front during World War II, featuring squad-based tactics and dynamic campaigns. Total War: Shogun 2 is set in feudal Japan, allowing players to command clans during the Sengoku Jidai period, combining tactical battles with strategic management.
Search