NewApp Digest
search bot

Defender

New Defender deployment tool streamlines Windows device onboarding with single executable
Winsage
March 3, 2026

New Defender deployment tool streamlines Windows device onboarding with single executable

Microsoft has enhanced its Defender deployment tool for Windows to streamline the onboarding process for device security management. The tool now features improved progress visibility and additional administrative controls, consolidating onboarding files into a single downloadable .exe file for both modern and legacy systems. It supports silent and non-interactive options for large-scale deployments, integrates with Group Policy or Configuration Manager, and allows for custom package identifiers. Administrators can monitor deployment events through the device timeline and advanced hunting tabs for real-time insights. The updated tool is accessible via Settings > Endpoints > Onboarding > Windows and extends support to Linux. Comprehensive onboarding and offboarding guides are available on the Defender portal.
Fake Xeno and Roblox Utilities Used to Install Windows RAT, Microsoft Warns
Winsage
March 2, 2026

Fake Xeno and Roblox Utilities Used to Install Windows RAT, Microsoft Warns

Cybersecurity experts at Microsoft Threat Intelligence have identified a trend where attackers distribute counterfeit gaming tools that install a remote access trojan (RAT) on users' systems. These trojanized executables, such as Xeno.exe or RobloxPlayerBeta.exe, are shared through browsers and chat platforms. The initial executable acts as a downloader, installing a portable Java runtime environment and launching a harmful Java archive, jd-gui.jar. Attackers use built-in Windows tools to execute commands via PowerShell and exploit trusted system binaries, minimizing detection risk. The embedded PowerShell script connects to remote locations, downloads an executable as update.exe, and executes it. The malware erases evidence of the downloader and modifies Microsoft Defender settings to allow RAT components to function undetected. It establishes persistence through scheduled tasks and a startup script named world.vbs, enabling prolonged access to the compromised device. Microsoft Defender can detect the malware and its behaviors, and organizations are advised to monitor outbound traffic and block identified domains and IP addresses. Users are encouraged to scrutinize Microsoft Defender exclusions and scheduled tasks for irregularities and remain cautious about downloading tools from unofficial sources.
Avast Antivirus Just Got Smarter: Is It Finally Worth Your Money?
Tech Optimizer
February 26, 2026

Avast Antivirus Just Got Smarter: Is It Finally Worth Your Money?

Avast Antivirus has introduced advanced AI tools, enhanced browser protection, and new privacy features in the U.S. market. It offers real-time malware protection, phishing shields, and Wi-Fi scanning. Avast's product lineup includes a free version, a premium security plan, and Avast One, catering to different user needs. Independent lab tests show Avast ranks highly in malware blocking, competing with brands like Bitdefender and Kaspersky. However, users should be cautious of upselling practices and data collection concerns. The free version provides strong protection, while paid plans offer additional features like VPN and advanced ransomware protection. Avast is accessible on various platforms, and pricing fluctuates due to promotions. Users are advised to assess their needs and be mindful of renewal rates before subscribing.
Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign
Tech Optimizer
February 24, 2026

Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign

A cyber operation is targeting users of Huorong Security antivirus software through a typosquatted domain, huoronga[.]com, which mimics the legitimate site huorong.cn. Users who mistakenly visit the counterfeit site may download a file named BR火绒445[.]zip, which contains a trojanized installer that leads to the installation of ValleyRAT, a remote access trojan. The malware employs various techniques to evade detection, including using an intermediary domain for downloads, creating Windows Defender exclusions, and establishing a scheduled task for persistence. The backdoor facilitates activities such as keylogging and credential access while disguising its operations within legitimate processes like rundll32.exe. Attribution points to the Silver Fox APT group, and there has been a significant increase in ValleyRAT samples documented in recent months. Security measures include ensuring software downloads are from the official site and monitoring for specific malicious activities.
What is the best PC antivirus for 2026: Acronis True Image vs. competitors
Tech Optimizer
February 16, 2026

What is the best PC antivirus for 2026: Acronis True Image vs. competitors

In 2026, traditional antivirus solutions are becoming outdated due to the rise of sophisticated cyber threats, including AI-driven ransomware and advanced phishing schemes. The FBI Internet Crime Report states that cybercrime losses exceeded .5 billion in 2023, with projections by Cybersecurity Ventures estimating costs could reach trillion annually by 2025. Research from IBM shows that organizations without a tested recovery plan face higher costs and longer downtimes. Built-in protections like Windows Defender and MacOS XProtect offer basic security but may leave gaps, necessitating comprehensive third-party antivirus solutions. Acronis True Image is highlighted for its unique combination of real-time malware protection and full system backup capabilities, enabling users to recover quickly from incidents. Other leading antivirus solutions, such as Norton 360, Bitdefender, McAfee, and Kaspersky, excel in threat prevention but lack integrated recovery options. Acronis emphasizes the importance of both security and continuity, preparing users for both cyber incidents and everyday failures.
Multiple Flaws Found in Microsoft Windows & Office — Could Let Hackers In
Winsage
February 16, 2026

Multiple Flaws Found in Microsoft Windows & Office — Could Let Hackers In

Microsoft has identified at least six zero-day vulnerabilities in Windows and Microsoft Office that were actively being exploited by hackers before patches were released. These vulnerabilities allow attackers to compromise systems with minimal user interaction, such as clicking on malicious links or opening compromised Office documents. Notable examples include a Windows Shell Security Bypass (CVE-2026-21510) and an Office File Exploit that can execute malicious code. The vulnerabilities pose serious risks, including active exploitation, remote code execution, and the potential for malware installation and credential theft. Microsoft has released security patches to address these vulnerabilities, and users are urged to install them immediately. The affected systems include all supported versions of Windows and Microsoft Office applications. Users are advised to install updates, be cautious with emails and links, enable security tools, and keep software up to date.
Search