NewApp Digest
search bot

domain

Scrappy RAT Malware Targets Chrome And Edge Users
Tech Optimizer
July 25, 2026

Scrappy RAT Malware Targets Chrome And Edge Users

A new remote access trojan (RAT) named msaRAT has been identified by Cisco Talos, linked to the Chaos ransomware group and built using Rust. It exploits Chrome and Edge browsers to disguise its traffic and evade detection. MsaRAT operates through a headless browser process, enabling remote code execution and facilitating ransomware deployment, data theft, and other malicious activities. It is typically installed via phishing emails or malicious files, making it resistant to standard browser patches. Cisco Talos recommends specific SNORT rules and a ClamAV signature for detection. Indicators of Compromise (IoC) include traffic to the IP address 172.86.126.18 and the domain is-01-ast.ols-img-12.workers.dev. The malware primarily targets large organizations, but individual users may also be at risk.
Google boosts AlloyDB vector search with HNSW preview
Tech Optimizer
July 22, 2026

Google boosts AlloyDB vector search with HNSW preview

Google has introduced a preview of its columnar engine-accelerated HNSW feature for AlloyDB, enhancing vector search throughput by up to four times for users of the pgvector extension in PostgreSQL. This improvement is aimed at approximate nearest neighbor searches using HNSW across large datasets. AlloyDB utilizes a columnar engine that allows HNSW indexes to reside in memory, improving throughput and recall metrics. In benchmark tests on the GloVe 100 Angular dataset, queries per second increased by approximately 4.2x to 4.9x, with recall improving from about 0.78 to over 0.94 at a throughput of around 350 queries per second. The columnar engine's design bypasses traditional PostgreSQL buffer management bottlenecks, enhancing efficiency during graph traversal. The memory architecture is distinct from basic caching techniques, and the feature requires no changes to application code. Users must enable the columnar engine and index caching flags to utilize this feature. Benchmarks were conducted on an AlloyDB C4A machine with 16 virtual CPUs.
The Windows 10 hangover is becoming a security problem
Winsage
July 20, 2026

The Windows 10 hangover is becoming a security problem

Windows 11 is currently operating on 78.8% of Windows devices, while Windows 10 holds a 16.9% share. Microsoft ceased support for Windows 10 on October 14, 2025, making it vulnerable to security threats. Eligible Windows 10 devices can receive Extended Security Updates (ESU) until October 12, 2027, through a paid program, with free ESU available for users in the European Economic Area until October 14, 2026. Approximately 21.4% of devices in small and medium-sized businesses and 16.6% in large organizations still run Windows 10, often due to budget constraints. Devices in industries like healthcare and manufacturing are particularly slow to adopt Windows 11. Windows 10 devices face nearly three times the number of active vulnerabilities compared to Windows 11, with 66.6% rated as high or critical. About 2.8% of Windows 10 systems do not meet the hardware requirements for Windows 11. A total of 18.7% of Windows devices are running unsupported operating systems, with 22.2% on versions that will reach end of support within six months, totaling 40.9% of systems that are unsupported or soon to be. The consumer ESU program will expire on October 12, 2027, after which many devices will transition to unsupported status.
North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
Tech Optimizer
July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.
Castlevania: Belmont's Curse is like playing classic 'Vania on fast forward, with a whip to die for
AppWizard
July 17, 2026

Castlevania: Belmont’s Curse is like playing classic ‘Vania on fast forward, with a whip to die for

Belmont's Curse is the latest installment in the Castlevania franchise, developed by Evil Empire, and features Rose Belmont, the daughter of Trevor Belmont, battling monsters in a dark Paris. The game is reminiscent of the Symphony of the Night era and includes familiar foes like Medusa and unique bosses such as Joan of Arc. It has been described as a commendable entry in the metroidvania genre, with engaging gameplay and potential for innovative weapons. The game marks the first new Castlevania title in over a decade.
Google Play removes Max, Russia’s Kremlin-backed messenger, and VKontakte, VK’s flagship social network — three days after the EU sanctioned VK, their parent company
AppWizard
July 17, 2026

Google Play removes Max, Russia’s Kremlin-backed messenger, and VKontakte, VK’s flagship social network — three days after the EU sanctioned VK, their parent company

VK announced on July 16 that its Max messenger and VKontakte applications have been removed from the Google Play app store, along with the Odnoklassniki app. Users can still access these apps through alternative platforms like RuStore, Huawei AppGallery, Samsung Galaxy Store, and Xiaomi GetApps, and functionality will remain uninterrupted for those who have already installed them. VKontakte users are receiving notifications about a transition from the .com domain to .ru, assuring them of the platform's reliability. This change follows sanctions imposed by the European Union on July 13 against VK and its subsidiary, Kommunikatsionnaya Platforma. In late June, the Max messenger and VK social network app, along with Mail.ru’s email applications, were also removed from the App Store, with Odnoklassniki becoming unavailable at that time.
Search