conduct Archives

Winsage

September 24, 2026

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Security researchers from Graz University of Technology in Austria have discovered significant vulnerabilities in the file notification systems of major operating systems: Android, Linux, macOS, and Windows. These flaws have existed for decades and can lead to the leakage of sensitive system information. The affected systems include inotify on Linux (since 2005), FileObserver on Android (since 2008), ReadDirectoryChangesW on Windows (since 2000), and FSEvents on macOS (since 2007). The vulnerabilities allow unprivileged users to monitor file events without explicit read permissions, enabling potential attacks such as inter-keystroke timing attacks and website fingerprinting. For example, on Linux, monitoring a readable directory can leak events on files that cannot be read, allowing attackers to achieve a 93.1% to 100% accuracy rate in monitoring keystrokes. Specific vulnerabilities include CVE-2025-68788 on Linux, which received a partial fix in December 2025, and issues on Android where FileObserver can bypass app storage isolation. On macOS, limited information is available due to a lack of bypasses for private directories, while on Windows, monitoring the root directory can reveal the full path of every accessed file, allowing real-time tracking of web activity with a 97.8% accuracy rate. Microsoft has described the issue as "by-design," which has faced criticism. The researchers propose stronger mitigations, such as disallowing monitoring of entire drives on Windows and introducing a permission system for file monitoring on Windows and macOS. Their findings will be presented at the ACM CCS 2026 conference in November in The Hague, Netherlands.

AppWizard

September 24, 2026

HSBC decides Samsung Secure Folder and Android’s Private Space are no place for a banking app

HSBC has restricted its Android app from functioning within Samsung's Secure Folder and Android's Private Space, causing many customers to lose access to online banking services. The bank described this as a "proportionate security control" to mitigate risks, stating that customers must use the app outside these environments. Feedback from users has been largely negative, with complaints about abrupt access loss and inadequate communication regarding the changes. Customers are unable to utilize web banking due to the app's requirement for multifactor authentication, and some have raised concerns about HSBC's compliance with the Financial Conduct Authority's Consumer Duty. HSBC has advised customers to access the app outside of protected spaces and mentioned the option of using a Physical Secure Key for desktop banking.

Tech Optimizer

September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.

AppWizard

September 23, 2026

Expert Opinions and Insights from the Tech Industry

The Android development community has historically addressed memory optimization reactively, but new performance requirements from Google Play, effective February 2027, emphasize proactive memory management. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization, with apps needing at least 25% optimization coverage. Memory usage can now hinder releases even without local crash replication, necessitating its integration into the pre-production process alongside other performance metrics. Dynamic memory usage is defined as anonymous RSS plus swap, excluding file-backed data. Google Play will evaluate this across different application states and device performance categories. Bitmap memory is scrutinized for the retention of invisible bitmaps, and DEX optimization aims to reduce memory footprint and improve performance. Investigating memory growth involves using Android Studio’s Memory Profiler to monitor memory changes during specific user flows and conducting heap dumps to identify retained objects. Issues often arise from retained state, where components hold onto callbacks that reference image data, necessitating a focus on lifecycle management rather than merely cache size. Bitmap memory should be carefully managed, as the decoded size can significantly exceed the compressed file size. Downsampling images to match UI dimensions is crucial. Memory checks should occur before production, with a focus on establishing a memory budget based on actual measurements and defining representative memory scenarios for testing. A pre-release memory checklist includes running user flows repeatedly, testing on various devices, inspecting heap dumps, examining image configurations, and reviewing optimization metrics. Monitoring Android vitals and Play Console warnings is essential to detect potential issues before they lead to user-reported crashes.

Tech Optimizer

September 21, 2026

Thousands of hacked sites trick you into installing malware

More than 5,400 websites across over 2,200 organizations have been compromised to propagate malware, primarily affecting small businesses like clinics and online retailers. The attack mechanism involves malicious code that triggers a deceptive CAPTCHA, instructing users to execute commands that can download malware. Attackers are using the BNB Smart Chain test network to store instructions, making it harder for investigators to shut down operations. A newer variant of the attack uses WebRTC technology to establish encrypted connections for delivering additional malicious code. To protect against these threats, users should avoid pasting commands from websites, be suspicious of unusual CAPTCHA instructions, use strong antivirus protection, keep systems updated, take action if commands are executed, and small business owners should regularly verify their website's integrity.

Tech Optimizer

September 20, 2026

How to Remove a Keylogger: 12 Steps, 60 Min [2026]

A keylogger captures every keystroke made on a device and sends that information to an external source. In 2025, infostealer malware, including keyloggers, resulted in the theft of 642.4 million credentials from 13.2 million infections globally. In Australia, approximately 30,000 banking passwords were compromised between 2021 and 2025 due to this malware. The Australian Cyber Security Centre reported over 42,500 calls related to credential theft in one year, a 16% increase. Four main malware families dominate the landscape, with LummaC2 accounting for nearly 60% of credentials linked to infostealers in 2026. Keyloggers can be detected through signs such as typing lag, unexpected antivirus notifications, new browser extensions, and unexplained spikes in outbound data usage. Detection and removal steps include checking running processes, auditing startup programs, reviewing installed programs, running antivirus scans, and resetting passwords from a clean device. Keyloggers can infiltrate systems via phishing emails, malicious attachments, or compromised software downloads. Mobile devices can also be targeted by keyloggers disguised as legitimate apps.

AppWizard

September 18, 2026

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens

A new messaging and payment app called Max has emerged in Russia, developed by VKontakte, and has become the country's most utilized messaging platform. Max integrates various services, including banking and government services, and has been adopted by tens of millions of Russians. It features extensive surveillance capabilities, allowing it to take screenshots, access information without consent, impersonate users, and potentially conduct cyberattacks. The app's adoption has been largely mandatory, particularly among state employees and students. Despite its rise, Max has not replaced Telegram as a primary news source, and users have raised concerns about privacy and surveillance. Experts warn that Russia's swift implementation of digital control strategies reflects a growing trend of digital authoritarianism.

Winsage

September 17, 2026

The real reason your Windows 11 taskbar couldn’t move for 5 years

Windows 11 did not inherit significant portions of the legacy Win32 code, leading Microsoft to rebuild the taskbar from scratch, focusing on essential functionalities. The task of allowing users to reposition the taskbar proved challenging due to the need for all applications to adapt to this change. Initially, the demand for a movable taskbar was low, but over time, some users expressed a desire for this feature, prompting Microsoft to conduct tests with Windows Insiders. Similarly, the Start menu faced challenges in reintroducing customization options due to Windows 11's design philosophy, which emphasized a cleaner, minimalist aesthetic.

BetaBeacon

September 17, 2026

Rastar Games to Conduct CBT for ‘Three Kingdoms: Conquest of Nine Kingdoms’ on Android Devices Starting Sept. 22

Rastar Games is launching a pre-registration campaign for their upcoming strategy game Three Kingdoms: Conquest of Nine Kingdoms. The game will have a closed beta test for Android users on September 22, featuring dynamic combat and strategic elements. The game's monetization strategy focuses on player skill rather than pay-to-win mechanics. Players who pre-register on iOS can unlock special rewards and have the chance to win prizes through physical giveaway events.

AppWizard

September 16, 2026

Best Trusted Sources for Modified Android Games and Apps

Altered applications and games for Android devices are often distributed as APK files, which need to be manually downloaded and installed. Reliable APK sources should provide essential details about the app, such as name, version number, file size, last update date, Android compatibility, installation instructions, user contact information, terms of use, disclaimers, and a privacy policy. Users are advised to download open-source applications directly from developers’ official websites or verified code repositories. F-Droid is a platform for original APK files, while HappyMod offers a variety of modified applications and games. User feedback on HappyMod indicates ease of installation and satisfactory performance, but independent evaluations are recommended. Before installing any APK, users should scan it with updated security software, ensure Google Play Protect is enabled, and scrutinize requested permissions. Users should avoid websites with excessive redirects or ambiguous payment forms.