digital security Archives

AppWizard

September 24, 2026

Russia’s state-backed messaging app Max can secretly change how it surveils individual users, researchers at InterSecLab find

The Max messenger, developed by VK, has significant user tracking capabilities. A report from InterSecLab revealed that: - Max's features can vary for individual users without app updates. - It lacks end-to-end encryption, allowing VK access to messages, even in "secret chats." - Each account can be configured to perform specific actions, such as decrypting messages on VK's servers and blocking messages if a VPN is detected. - Upon launching, Max reports the user’s network environment to VK, including their public IP address and mobile carrier. - The app uploads users’ entire address books unencrypted to VK's servers, accessing contacts of non-registered individuals. - A phone number query can reveal extensive user information without notification. - Max stops functioning if it detects a VPN, requiring users to disable it to send messages, although workarounds exist. - New users receive a curated list of recommended channels, primarily featuring state media and pro-government figures.

AppWizard

September 10, 2026

Switching password managers on Android just got a lot safer

Google has introduced a credential transfer feature for password managers on Android devices, allowing users to seamlessly transfer saved passwords and passkeys between applications using the Credential Exchange Format. This feature enhances security by encrypting the transfer process, ensuring that credentials remain secure and inaccessible to Android during the exchange. Users can initiate the transfer by selecting the import option in their desired password manager app, which automatically detects other installed password managers. Currently, the feature is supported by Google Password Manager, 1Password, Bitwarden, and Dashlane, and is compatible with devices running Android 8 or later.

AppWizard

September 10, 2026

Android can now securely migrate your logins between password managers

Google has developed a new login transfer process for password managers that operates on mobile devices, allowing users to migrate credentials seamlessly. To use this feature, users must have the relevant applications installed and their credentials synced. The import option can be found in the settings tab of the app being adopted, while the export function generates an unencrypted CSV file for importing into other applications. This migration feature is compatible with several popular password management tools, including Google Password Manager, 1Password, Bitwarden, and Dashlane.

Tech Optimizer

August 29, 2026

90% of APAC Gen Z Experienced Cyber Incidents: Kaspersky Study

Recent research from Kaspersky highlights that 57% of Generation Z spends more time online than offline, with 75% of APAC Gen Zs using smartphones for daily internet access. Approximately two-thirds of Gen Zs in APAC feel comfortable navigating the digital environment, with confidence levels peaking at 77% in Indonesia and 71% in Vietnam. However, only 26% consider their knowledge of digital risks advanced, with India leading at 35%. Only 22% of Gen Zs in APAC use antivirus software, and 35% change their passwords regularly. Alarmingly, 90% have experienced at least one cyber incident in the past year. Smartphones are seen as critical for storing personal documents and passwords, yet only a third of Gen Zs back up important information regularly. Kaspersky emphasizes the need for cybersecurity measures to be integrated into daily routines and has introduced an interactive game to raise awareness among Gen Z users. The study surveyed 7,200 respondents across 18 countries in March 2026.

Tech Optimizer

August 27, 2026

Why it’s worth protecting your devices with comprehensive antivirus and security

Panda Dome Complete is a comprehensive antivirus and security suite developed by Panda Security, offering a range of protective features including real-time antivirus, anti-ransomware security, firewall and Wi-Fi protection, safe browsing and anti-phishing tools, a dark web scanner, VPN access, a password manager, PC cleanup and optimization tools, file encryption, and secure file deletion capabilities. It has received accolades such as the AV-Test Top Product Award and an SE Labs AAA Rating. A one-year subscription is currently available at a promotional price of CAD (down from 5 CAD), and the software supports various Windows versions from Windows 11 to XP (32-bit SP3 or later), requiring an active internet connection and .NET Framework 4.6 or later for VPN access. Installation is straightforward, and the software updates automatically. The plan is available to both new and existing users, with unredeemed licenses eligible for store credit within 30 days of purchase.

Tech Optimizer

August 23, 2026

Antivirus software tips from Ely Computer Centre director

Antivirus software does not guarantee complete safety for computers, especially if the software is no longer supported. As software ages, it becomes vulnerable to security risks, and once support ends, new vulnerabilities are not addressed. Microsoft ended support for Windows 10 in October 2025, meaning users will not receive security updates, increasing the risk of exploitation. Users can identify Windows 10 by checking if the Start button has four black squares. Upgrading to Windows 11 may not be possible for older computers due to hardware limitations, and replacing outdated devices is often recommended. Seeking professional advice is advisable if there is uncertainty about the operating system or upgrade options.

Tech Optimizer

August 20, 2026

Get 87% Off a Surfshark VPN’s One Plan With This End-of-Winter Deal

Surfshark VPN is offering an end-of-winter discount on their 2-year Surfshark One Plan, providing 87% off and three additional months free until September 7. The plan costs A.49 per month and includes features such as a secure VPN, ad blocker, email masking, a personal detail generator, advanced antivirus, and phishing protection. Surfshark also offers a 30-day money-back guarantee. PCMag reviewers awarded Surfshark VPN a 4.5-star rating, highlighting its strong data protection and innovative security tools.

Winsage

August 19, 2026

China’s State-Linked Firms Are Moving Away From Windows 10 Due To Security Concerns, Despite The Custom OS Developed By Microsoft Under Stringent Supervision

The Ministry of State Security in China has ordered the removal of the "Government Edition" of Windows 10 from state-operated organizations due to concerns over cyber vulnerabilities. This version was developed through a collaboration between Microsoft and C&M Information Technologies (CMIT) starting in 2016. The plan to transition away from Windows 10, originally set for February 2027, has been accelerated amid rising national security concerns regarding reliance on U.S. technology. China is exploring alternatives for software, including a custom version of Windows 11, Huawei's HarmonyOS, and state-backed Linux distributions like UnionTech’s UOS and Kylinsoft's Kylinsec. Following the announcement, domestic operating system vendors saw a rise in stock prices. The motivations for this shift are linked to geopolitical tensions with the United States, as China emphasizes its commitment to digital security and technological sovereignty.

Winsage

August 12, 2026

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Chaotic Eclipse, a security researcher, has revealed a proof-of-concept (PoC) for a new vulnerability called ShieldBreak, which is a zero-day flaw in Microsoft Defender that bypasses the patch for the previously identified CVE-2026-50656 (RoguePlanet). This vulnerability could allow attackers to execute code at the SYSTEM level on affected Windows systems. Chaotic Eclipse tested the PoC on the latest versions of Windows 11 and Windows Server 2025, achieving a 100% success rate. Windows 10 and its server editions are not supported by the PoC but remain vulnerable. Microsoft had issued security updates for RoguePlanet, which has a CVSS score of 7.8, affecting the Malware Protection Engine and representing a local privilege escalation issue. Chaotic Eclipse has previously disclosed two other zero-day vulnerabilities, YellowKey and GreenPlasma, which affect BitLocker and the Windows Collaborative Translation Framework, respectively. Microsoft criticized the public disclosure of these vulnerabilities as irresponsible and emphasized the importance of Coordinated Vulnerability Disclosure.

Winsage

August 11, 2026

AI finds so many Windows flaws, Microsoft can’t keep up. Should you worry?

A consortium of tech companies, including Microsoft, Google, Amazon, Nvidia, Apple, and Anthropic, is working on cybersecurity by identifying and fixing vulnerabilities. The platform Mythos has made it easier to find security flaws, but it has resulted in more vulnerabilities than companies, especially Microsoft, can manage. Microsoft is currently focusing on high-severity security threats, with plans to address moderate-severity flaws later, but lacks an immediate strategy for low-severity issues.