certification Archives

Tech Optimizer

August 12, 2026

NordVPN outpaces competitors in independent tests, with top marks for speed and malware protection

NordVPN received the highest AAA certification from West Coast Labs for its built-in antivirus tool, achieving a 99.1% malware detection rate. Artifact Security recognized NordVPN as the fastest and most reliable VPN provider in a global performance test, where it scored 91 and earned the Platinum award. In testing on the Windows platform, NordVPN recorded an average download speed of 271.9 Mbps and a peak median of 568.4 Mbps, with a tunnel establishment time of 1.8 seconds and a 98% success rate. All tested providers, including NordVPN, passed various leak tests without data escaping the encrypted tunnel.

AppWizard

August 10, 2026

Third-party app stores are rolling out in Google Play, but there’s only one right now

Google Play has introduced its first third-party app store, Aptoide, following a ruling from a long-standing antitrust lawsuit involving Epic Games. Users in the U.S. can now download Aptoide directly from the Google Play Store, which reflects the court's mandate after Epic's victory in 2023. The ruling included remedies such as reducing developer fees, allowing apps to be mirrored across different app stores, permitting alternative payment systems, and mandating the inclusion of third-party app stores in Google Play. Aptoide offers a user-friendly installation process without sideloading warnings and claims to have access to 1.9 million apps and 295,000 games. Developers can opt out of sharing their apps with Aptoide, but many may choose to use this additional distribution channel.

AppWizard

August 3, 2026

Xbox’s Disc-To-Digital Plan Rolls Out This August According To Leaked Roadmap

Xbox is launching a disc-to-digital program this month that allows gamers to obtain a transferable digital license for their physical game discs. When a disc is inserted into an Xbox One or Series X console, a digital license is generated and linked to the user's account, but if the disc is sold or transferred, the digital license will also transfer. Xbox is also expanding access to its back catalog, with four original Xbox games recently released on PC and plans to introduce more titles this fall. Original Xbox games are expected on current-gen consoles next year, with Xbox 360 titles by 2028. Xbox is managing all aspects of these programs while allowing publishers to retain control over rights and pricing.

AppWizard

July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.

Winsage

July 28, 2026

Proof-of-concept exploit released for Certighost Windows AD CS vulnerability

A proof-of-concept exploit for a vulnerability in Windows Active Directory Certificate Services (AD CS), identified as CVE-2026-54121, has emerged, allowing authenticated attackers to compromise an entire Windows domain. Microsoft addressed this vulnerability in its July 2026 security updates. The flaw enables attackers to manipulate machine account attributes, obtaining certificates to impersonate critical domain controllers and execute privileged Active Directory operations. Researchers H0j3n and Aniq Fakhrul discovered the vulnerability and publicly disclosed it with a functional exploit that exploits a fallback mechanism in AD CS. This exploit can automate the extraction of sensitive credentials through a DCSync attack. Microsoft has since implemented additional validation measures to enhance security against this vulnerability.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 21, 2026

Samsung’s new GAIA PC chip challenges Microsoft’s Copilot+ program — and why I can only see that as a positive for the AI PC industry

NVIDIA announced the RTX Spark at Computex 2026, prompting competition among major silicon market players, including Intel, AMD, and Qualcomm. Samsung is entering the market with its custom silicon for AI-driven PCs, named GAIA, marking its first development of PC-centric silicon since 2012. GAIA will function as a companion Neural Processing Unit (NPU) rather than a traditional System-on-Chip (SoC). It is expected to use a 4nm process and may incorporate processing-in-memory (PIM) capabilities. Lenovo China and HP USA have received samples for testing. Competitors like Snapdragon X/X2, Intel Core Ultra, and AMD Ryzen AI are integrating NPUs with at least 40 TOPS. Samsung's GAIA has not been officially confirmed, and details regarding TOPS, power consumption, and pricing are unclear. The 40 TOPS benchmark by Microsoft for integrated NPUs raises questions about how GAIA would be evaluated alongside Intel or AMD CPUs.

Winsage

July 20, 2026

The Windows 10 hangover is becoming a security problem

Windows 11 is currently operating on 78.8% of Windows devices, while Windows 10 holds a 16.9% share. Microsoft ceased support for Windows 10 on October 14, 2025, making it vulnerable to security threats. Eligible Windows 10 devices can receive Extended Security Updates (ESU) until October 12, 2027, through a paid program, with free ESU available for users in the European Economic Area until October 14, 2026. Approximately 21.4% of devices in small and medium-sized businesses and 16.6% in large organizations still run Windows 10, often due to budget constraints. Devices in industries like healthcare and manufacturing are particularly slow to adopt Windows 11. Windows 10 devices face nearly three times the number of active vulnerabilities compared to Windows 11, with 66.6% rated as high or critical. About 2.8% of Windows 10 systems do not meet the hardware requirements for Windows 11. A total of 18.7% of Windows devices are running unsupported operating systems, with 22.2% on versions that will reach end of support within six months, totaling 40.9% of systems that are unsupported or soon to be. The consumer ESU program will expire on October 12, 2027, after which many devices will transition to unsupported status.

AppWizard

July 17, 2026

E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants

The European Commission has mandated that Google must provide equal access to rival AI assistants within its Android ecosystem, allowing them to use the same functionalities as Google's Gemini assistant. This includes access to the camera, microphone, and on-screen content, as well as background operation capabilities. Google is required to implement these changes in the upcoming Android 18 release by August 1, 2027. The directive includes two binding specifications under the Digital Markets Act, one of which requires Google to share anonymized search query, click, and ranking data with competing search engines and AI chatbots for a fee. The Android decision involves 11 operating system features, with five classified as restricted, requiring certification for third-party applications. These restricted features include access to on-device data shared by apps, context-aware intelligence, structured on-device integration, screen automation, and system integration. The remaining six features do not require certification, allowing broader access to ambient data, always-on hotword detection, long-press invocation, system-level on-device models, third-party model implementation, and background execution capabilities. Google must establish a Qualified AI Assistant Programme to facilitate access to gated features, allowing third-party Trusted Certification Authorities to certify assistants at no cost. The certification process must be fair and non-discriminatory, and users can consent to bypass the certification requirement for specific services and devices. By August 2027, both certified and user-approved uncertified assistants will be able to interact with applications on a virtual display. Google is also required to anonymize search data before sharing, ensuring user privacy and limiting data access to recipients who meet specific criteria. Kent Walker, Google's president of global affairs, expressed concerns about the security implications of granting external apps access to sensitive device permissions and criticized the anonymization methods for search data. The final measures reflect significant changes from earlier drafts, introducing more stringent requirements regarding data sharing and certification processes.

Winsage

July 16, 2026

Windows 10 refuses to die, and the security bill is coming due

Approximately 16.9 percent of monitored Windows devices are still running Windows 10, a decline from about half a year ago. Windows 10 will receive updates until October 12, 2027, for consumer devices and until October 10, 2028, for commercial customers. Small and medium-sized businesses (SMBs) have 21.4 percent of their machines on Windows 10, with 23 percent in healthcare and pharmaceutical sectors and 22.7 percent in consumer and retail. A Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11. Only 14 percent of Windows 10 assets have Extended Security Updates (ESU) patches applied. Many devices are tied to vendor certifications that complicate upgrades, and the rising cost of new PC hardware is a concern. The stagnation of Windows 11 adoption continues, with minimal change in market share distribution.