data security Archives

AppWizard

September 17, 2026

New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data

Security researchers at Zimperium have identified a new strain of Android malware called RatHat, which is linked to threat actors from China and is designed to steal sensitive credentials and banking information. RatHat infiltrates devices through phishing sites, malvertising, and SMS phishing (smishing), tricking users into downloading malicious Android package kits (APKs). The malware uses a dropper to activate its payload, which is hidden in encrypted assets, and employs techniques to bypass Android's security measures. RatHat consists of three main components: a malicious Android application, a Go agent (liblocal-service.so), and an FRP client (libmedia_codec.so). The app collects sensitive information such as banking credentials, notifications, 2FA codes, OTP keys, and screen inputs. It features a generative AI user interface-automation engine that communicates in Mandarin and can perform various tasks like determining screen coordinates and issuing navigation commands. The Go agent acts as a command-and-control executor, executing commands to bypass app-level security and manage system-level tasks. The FRP client maintains a secure reverse tunnel to the attacker's server, allowing ongoing remote access to the device. The architecture of RatHat demonstrates the inadequacy of traditional mobile security measures against such advanced threats.

Tech Optimizer

September 16, 2026

Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results

Iranian state-affiliated cyber actors are targeting dissidents, activists, and journalists using fake AI applications, counterfeit antivirus tools, and fabricated MRI scan results, primarily through a spyware family known as CHOSEN BRICK, which is designed for Windows systems. This campaign has been active since at least 2025 and affects individuals globally, including in the UK, US, and Netherlands. The malware establishes persistence via the Windows Registry Run key and communicates through Telegram, utilizing unique Bot IDs for each victim. CHOSEN BRICK is capable of extensive data collection, including capturing screenshots, recording audio, and stealing email content. Personal information from victims has been found on pro-Iranian leak sites, increasing harassment risks. Security measures should include monitoring for suspicious Registry entries and unusual communications, while users are advised to avoid unsolicited software installations and keep their systems updated. The FBI refers to this malware family as HEAVYGRAM.

Tech Optimizer

September 14, 2026

Top 10 Best Endpoint Encryption Software in 2026

The encryption landscape has shifted significantly, with Microsoft’s BitLocker and Apple’s FileVault becoming the primary free and integrated solutions for disk encryption. Organizations are encouraged to focus on comprehensive management capabilities rather than just acquiring encryption technology. Key management, compliance proof for auditors, and consistent policy enforcement across devices are critical. Native encryption solutions do not provide fleet-wide compliance, centralized key escrow, or advanced pre-boot authentication options. Various management models exist for different organizational needs, including options from Microsoft, Sophos, ESET, Trend Micro, Check Point, Trellix, WinMagic, Broadcom (Symantec), Dell, and Kaspersky. It is essential to ensure proper key management and recovery procedures before enforcing encryption to avoid data loss. Organizations should verify claims of compatibility and effectiveness of encryption solutions, especially regarding pre-boot authentication and cryptographic standards. Native encryption solutions are free, but management layers typically incur costs. Open-source solutions like VeraCrypt lack necessary management features, making them impractical for businesses.

Tech Optimizer

September 13, 2026

Top 10 Best Endpoint Encryption Software in 2026

The landscape of encryption engines has stabilized, with Microsoft BitLocker and Apple FileVault being the primary solutions. As of 2026, the emphasis is on management rather than just acquiring encryption technology. Key management elements include audit proofing, key escrow and recovery, policy enforcement, and pre-boot options. Native encryption solutions lack features such as fleet-wide compliance proof, centralized key escrow, consistent policy enforcement, advanced pre-boot authentication, and removable-media encryption. Various management models are available for different environments, including: 1. Microsoft BitLocker with Intune: Free for Windows Pro/Enterprise, integrates with Entra ID for key management. 2. Sophos: Manages both BitLocker and FileVault from a single console. 3. ESET: Offers lightweight management and removable-media protection. 4. Trend Micro: Integrates encryption with DLP capabilities. 5. Check Point: Provides advanced pre-boot options and policy management. 6. Trellix: Comprehensive enterprise encryption suite with a complex management interface. 7. WinMagic: Focuses on cross-platform encryption and strong pre-boot options. 8. Broadcom (Symantec): Manages native engines within its broader security framework. 9. Dell: OEM-integrated encryption management for Dell hardware. 10. Kaspersky: Provides encryption management but is restricted in the U.S. Key considerations before deploying encryption include ensuring key escrow is in place, conducting recovery tests, and being mindful of removable media and server encryption. Common mistakes include using outdated freeware and not verifying key escrow. Organizations should request auditor reports for compliance verification and confirm claims of compatibility and pre-boot functionality. Native encryption engines are free, while management layers typically charge on a per-endpoint basis.

Winsage

September 12, 2026

Your Windows 11 PC Can Now Reinstall Windows From the Cloud

Microsoft introduced a feature called Cloud Rebuild with the release of Build 26220.9343 to the Beta channel on September 8, 2026. This tool allows users to download a fresh installation of Windows 11 from the internet, restoring the operating system and its drivers without needing removable media. The recovery process is conducted through the Windows Recovery Environment (WinRE), and users can access it by booting into WinRE or through Settings. For Cloud Rebuild to work, a healthy WinRE, internet access, a compatible networking driver, and local administrator credentials are required. The feature also enables the storage of Wi-Fi profiles in WinRE, allowing wireless-only setups to utilize cloud recovery. Cloud Rebuild is compatible with enterprise management tools like Intune and Windows Autopilot, but it is currently only available to Beta channel Insider participants for non-production evaluation.

Tech Optimizer

September 11, 2026

Top 10 Best Endpoint Encryption Software in 2026

Microsoft BitLocker and Apple FileVault are free, integrated encryption solutions within their respective operating systems. As of 2026, the focus is on investing in management solutions that provide compliance proof, key escrow, recovery options, and policy enforcement across devices. Native encryption solutions lack certain management features, prompting the need for additional management layers from various vendors. Legacy freeware like TrueCrypt is no longer maintained, posing risks for business use, while VeraCrypt is a credible open-source alternative but lacks centralized management. Management options include Microsoft Intune for Windows, Sophos for mixed fleets, and specialized providers like Check Point and WinMagic for advanced needs. Organizations should ensure proper key management before enforcing encryption to avoid data loss and regularly test recovery processes. It is crucial to verify claims regarding compatibility and pre-boot options when selecting encryption solutions. Native engines are free, but management layers typically charge per endpoint annually.

AppWizard

September 7, 2026

Here’s what we know about Blink, Russia’s Gen Z location-sharing app that publicly attacks VK’s Max messenger but sends user data to the tech giant

Recent investigations have revealed that the Russian messaging application Blink sends user data directly to VK servers, despite publicly opposing VK. The app continuously tracks users' movements and transmits location data to MyTracker, an analytics system owned by VK, every few seconds. Additionally, Blink's main feature, Blink Maps, is hosted on VK's servers. Eight senior Blink employees and a former CEO have connections to VK, either having transitioned from VK to Blink or still maintaining roles at VK.

AppWizard

September 5, 2026

5 Minimalist Android Phones Actually Worth Buying In 2026

Many individuals are turning to minimalist phones to achieve a balanced digital life, seeking alternatives to traditional smartphones that reduce distractions while still offering essential functions. The Minimal Phone, successfully crowdfunded with over 7,000 from nearly 2,000 backers, runs on Android 14 and includes built-in apps for email, messaging, calls, maps, and music. It features a 4.3-inch black-and-white e-ink display, is priced at 9, and is set to ship in 2025. A Kickstarter campaign for the Minimal Phone 2 is currently underway, promising a smaller design and an OLED display with shipping expected in December 2026. The Mudita Kompakt has a similar 4.3-inch e-ink display and operates on a custom OS without Google services, ensuring user privacy. Priced at 9, it offers a six-day battery life and includes a dedicated offline button to disable distracting features. The Light Phone III, released in March 2025, features a 3.92-inch AMOLED display, is priced at 9, and runs on LightOS, allowing users to customize their app menu. It supports sideloading apps and has a Qualcomm chipset with 128GB of internal storage. The F1 Horizon Bluebird, priced at 9, runs on BasicOS and supports calling and texting while limiting access to social media and web browsing. The Jelly Star, while not strictly a minimalist phone, has a compact 3-inch screen, runs on Android 13, and features a MediaTek chipset, discouraging excessive use due to its small size. The selection of these minimalist Android phones focuses on devices that maintain essential smartphone capabilities while incorporating features designed to mitigate smartphone addiction.

Tech Optimizer

September 4, 2026

EDB Postgres® AI Gains Momentum as Customers Tell Us the Future of Their Own AI and Data Platform

Organizations are increasingly aiming to establish their own governed AI and data platforms, with 95% of enterprises planning to develop such platforms within the next three years, though only 13% have done so. EDB has reported significant traction for its EDB Postgres® AI (EDB PG AI) platform, which unifies transactional, analytical, and agentic workloads into a single system. PAC 2000A Conad has revamped its data infrastructure using EDB PG AI to support over 1,600 stores and 7,000 connected devices, ensuring compliance with NIS2 regulations. C Platform in Korea is experiencing a surge in demand for hybrid and on-premises capabilities, driven by significant investment in sovereign AI and the AI Basic Act mandating governance for AI deployment. Notable adopters of EDB PG AI include the Industrial Bank of Korea, Shinhan EZ Insurance, NTT East, MNTN, Euronext FX, and Kyobo Book Centre.

Tech Optimizer

September 4, 2026

EDB Highlights Postgres AI Growth in Regulated Enterprise Markets

EnterpriseDB (EDB) has reported advancements in the adoption of its EDB Postgres AI (EDB PG AI) platform, which integrates transactional, analytical, and AI workloads. While 95% of enterprises aspire to become their own AI and data platforms within three years, only 13% have achieved this. EDB PG AI supports existing systems and prepares enterprises for future AI capabilities. A case study highlights PAC 2000A Conad, which restructured its data infrastructure with EDB PG AI, serving over 1,600 stores and 7,000 devices. In Korea, over billion has been invested in the sovereign AI market, with organizations seeking hybrid and on-premises solutions despite challenges from fragmented data environments. Notable users of EDB PG AI include the Industrial Bank of Korea and Shinhan EZ Insurance. EDB PG AI is built on Postgres and allows enterprises to optimize data and AI capabilities with governance at the data layer.