NewApp Digest
search bot

cybersecurity threats

We Tested 10 Best Antivirus Software for 2026
Tech Optimizer
September 25, 2026

We Tested 10 Best Antivirus Software for 2026

Cybersecurity threats are on the rise, with Verizon’s 2026 Data Breach Investigations Report indicating that 48% of breaches involve ransomware and 31% arise from software vulnerabilities. A review of leading antivirus programs assessed their effectiveness against various threats. Top antivirus software includes: - Bitdefender: Best overall, effective against various threats, perfect score from AV-TEST. - Norton 360: Best all-in-one suite, includes VPN and parental controls, perfect score from AV-TEST. - McAfee+ Premium: Best for families, unlimited device coverage, full marks from AV-TEST. - Malwarebytes: Best for simple protection, user-friendly interface, rated 5.5/6 by AV-TEST. - ESET NOD32: Best for advanced users, lightweight and fast, includes Gamer Mode. - Avast: Best free option, offers various scanning options, straightforward upgrade path. - Microsoft Defender: Built-in for Windows, essential protection, perfect score from AV-TEST. - Intego ONE: Best for Mac users, includes firewall and VPN. - Surfshark Antivirus: Combines antivirus and VPN services, real-time protection. - TotalAV: Best for beginners, combines antivirus with web security tools. The evaluation process included lab data from AV-TEST and AV-Comparatives, hands-on experience, and criteria such as malware protection, false positives, system performance impact, phishing protection, ease of use, platform coverage, additional security features, and pricing. Key metrics from antivirus lab tests include protection scores, false positives, and performance impact. The choice between antivirus software and internet security suites depends on individual needs. Antivirus software remains necessary, especially for Windows PCs, to complement other security measures.
Iranian Hackers Use Fake Norton Antivirus to Spread Windows Spyware
Tech Optimizer
September 15, 2026

Iranian Hackers Use Fake Norton Antivirus to Spread Windows Spyware

Iranian state-sponsored hackers are targeting dissidents, activists, and journalists using deceptive tactics, including malicious applications that impersonate reputable cybersecurity products like Norton Antivirus and KeePass. The FBI and UK authorities issued a warning about these hackers, who establish rapport with targets via social messaging platforms, posing as IT support or known contacts. They convince victims to download files that appear authentic, including AI video creation applications and other software. The spyware, named “Chosen Brick,” infects Windows PCs and has capabilities such as capturing screen content, recording audio, collecting message data, and downloading additional malware. The hackers have exploited this spyware to publish personal details of victims, increasing their harassment. The FBI advises potential victims on detecting the spyware and recommends enabling antivirus software, running regular scans, and avoiding unofficial downloads.
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Winsage
September 15, 2026

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.
NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware
AppWizard
September 11, 2026

NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

The Cybersecurity and Infrastructure Security Agency (CISA) warned of a critical vulnerability in NetScaler, identified as CVE-2026-19490, with a CVSS score of 9.3, which has been exploited and affects all NetScaler ADC and Gateway appliances. Citrix has patched this vulnerability as of August 19. AdaptHealth reported a data breach affecting over 4.1 million individuals, compromising personal, health, and insurance information, but not Social Security numbers or financial data. A new strain of Android malware, MantaxOtax, attributed to Indonesian threat actors, combines ransomware and spyware, stealing sensitive information and affecting older Android versions. The Gigabud banking trojan has evolved to evade detection by installing a secondary app that hides the malicious application. CISA acting director Nick Andersen emphasized the need for swift adaptation to cybersecurity threats and highlighted staffing improvements within CISA. Russian e-commerce giant Wildberries experienced disruptions from a DDoS attack affecting payments to sellers, following claims of a cyber operation by Ukraine's military intelligence. McKesson faced a cyberattack exposing sensitive data of 6.4 million individuals, with the ShinyHunters group releasing this data after a failed extortion attempt. IDScan confirmed a data breach affecting 150 million individuals, resulting in the theft of personally identifiable information and government-issued documents.
"Iran unveils second homegrown antivirus to counter malware and cyberattacks"
Tech Optimizer
September 6, 2026

“Iran unveils second homegrown antivirus to counter malware and cyberattacks”

Iran has introduced its second domestically developed antivirus software, Ayyza, which utilizes artificial intelligence and machine learning to detect known and unknown cyber threats. The antivirus is designed to protect against malware, viruses, Trojans, ransomware, and advanced persistent threats (APTs). Ayyza's detection engine is developed in-house and operates at the Windows kernel level to enhance detection accuracy and speed while minimizing hardware resource consumption. It can receive updates offline or via Iran’s National Information Network. Ayyza's machine-learning capabilities allow it to identify emerging threats, including previously unknown malware and zero-day vulnerabilities. The company has also created complementary security tools, such as privileged access management (PAM) systems and data leakage prevention tools, to enhance overall cybersecurity. The company's products are currently used in various Iranian infrastructures, including banking, financial, and governmental systems.
Microsoft removes WMIC tool from Windows 11
Winsage
August 19, 2026

Microsoft removes WMIC tool from Windows 11

Microsoft has removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 builds 24H2 and 25H2, as well as beta releases, as part of a deprecation process that began several years ago. WMIC was first deprecated in Windows Server 2012 and Windows 10 and was later made a Feature on Demand in Windows 11 22H2 before its complete removal. The tool had been exploited by malware, including ransomware, for harmful actions such as deleting Shadow Volume Copies and querying security software. Microsoft recommends IT administrators use alternatives like PowerShell, WMI's COM API, or .NET libraries for management tasks.
Best Free Antivirus Software 2026
Tech Optimizer
August 16, 2026

Best Free Antivirus Software 2026

Over the past decade, free antivirus software has significantly improved, now competing with paid security suites in malware protection. Independent testing from 2026 shows that Avast and AVG have achieved top scores in protection, performance, and usability. Microsoft Defender is a reliable option for Windows users who prefer not to install additional software. The leading free antivirus options in 2026 include Avast Free Antivirus, AVG AntiVirus Free, Microsoft Defender Antivirus, Bitdefender Antivirus Free, Avira Free Security, and Malwarebytes Free. Avast Free Antivirus received perfect scores of 6/6 in protection, performance, and usability from AV-TEST in May and June 2026, totaling 18 out of 18. AVG AntiVirus Free matched these scores and also received an Advanced+ rating from AV-Comparatives. Microsoft Defender scored 6/6 in protection, 5.5/6 in performance, and 6/6 in usability, totaling 17.5 out of 18. Bitdefender Antivirus Free is recognized for its lightweight protection, while Avira Free Security offers additional utilities. Malwarebytes Free is noted for its effectiveness in malware removal. Antivirus software is essential in the current cybersecurity landscape, which includes threats like ransomware and phishing attacks. In 2025, the FTC reported approximately .8 billion in fraud losses, a 25% increase from the previous year. While antivirus software cannot eliminate all forms of online fraud, it plays a crucial role in preventing attacks from escalating to data theft or system compromise. Users should be cautious of counterfeit antivirus software and are advised to download programs from official vendor websites. Free antivirus solutions generally focus on malware detection, while paid options offer additional services. For Windows 11 users, Avast Free Antivirus, AVG AntiVirus Free, and Microsoft Defender are recommended options based on 2026 evaluations.
LeakWatch CW 33/2026: Windows Zero-Day, AMD, Intel and Malware
Winsage
August 16, 2026

LeakWatch CW 33/2026: Windows Zero-Day, AMD, Intel and Malware

- The August Patch Tuesday release included 421 vulnerabilities, with 236 affecting Windows, highlighting CVE-2026-68820, a critical use-after-free vulnerability that allows privilege escalation to SYSTEM level without user interaction. - CISA added CVE-2026-68820 to its Known Exploited Vulnerabilities Catalog, confirming its active exploitation. - AMD's Ryzen Master software has vulnerabilities, including CVE-2025-54512 (DLL hijacking) and CVE-2026-0465 (use-after-free), which could allow code execution with elevated privileges. - AMD's advisory on CVE-2026-6726 and CVE-2026-6727 indicates vulnerabilities in the TPM 2.0 reference code affecting Ryzen platforms, leading to potential information disclosure. - Intel's advisories included updates for microcode, Wi-Fi software, and NPU drivers, with CVE-2026-20760 addressing privilege escalation risks. - Google’s Chrome update on August 11 fixed five high-severity vulnerabilities, including use-after-free flaws. - Gunra malware has evolved into a ransomware-as-a-service model using a double-extortion strategy. - WindRelay malware combines SpyNote RAT with an NFC relay component, allowing attackers to relay NFC communication between a victim's bank card and a remote device. - The findings emphasize the need to view vulnerabilities as part of potential attack chains, highlighting the complexity of modern cybersecurity threats.
AI finds so many Windows flaws, Microsoft can’t keep up. Should you worry?
Winsage
August 11, 2026

AI finds so many Windows flaws, Microsoft can’t keep up. Should you worry?

A consortium of tech companies, including Microsoft, Google, Amazon, Nvidia, Apple, and Anthropic, is working on cybersecurity by identifying and fixing vulnerabilities. The platform Mythos has made it easier to find security flaws, but it has resulted in more vulnerabilities than companies, especially Microsoft, can manage. Microsoft is currently focusing on high-severity security threats, with plans to address moderate-severity flaws later, but lacks an immediate strategy for low-severity issues.
Search