encrypted Archives

AppWizard

July 28, 2026

WhatsApp Web is finally picking up voice and video call support

WhatsApp Web will introduce end-to-end encrypted voice and video calling, allowing calls directly from a desktop browser. New features include a dedicated Calls tab for call history, reactions, and screen sharing. A Waiting Room feature will let call hosts control participant access, while Call Transfer will enable seamless transitions across devices. Noise Suppression technology will improve conversation clarity, and QuickHD will provide HD video quality quickly, though performance in low connectivity areas is uncertain. The rollout of these features will occur gradually, with no specific timeline provided.

Winsage

July 28, 2026

Your Windows Recycle Bin is a privacy risk—here’s how to actually delete your files

The Recycle Bin in Windows, introduced in 1995, serves as a temporary storage for deleted files rather than permanently removing them. When a file is deleted, it is moved to the Recycle Bin, which requires manual emptying or activation of a Storage Sense policy to clear its contents. This can lead to reduced hard drive space for users unaware of its behavior. The Recycle Bin can contain sensitive information, and if someone gains access to a Microsoft account, they can view its contents. Even after emptying the Recycle Bin, data can be recovered unless overwritten, with different recovery processes for solid-state drives (SSDs) due to maintenance routines like the TRIM command. Risks extend beyond physical access, as compromised accounts or malware can access deleted files. To securely delete sensitive files, users can use the Shift + Del shortcut, file shredding applications, and consider encrypting their drives with BitLocker. Specialized shredders for SSDs exist, and users can optimize drives through Windows settings to manage data recovery risks.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

AppWizard

July 24, 2026

India orders takedown of Jack Dorsey’s bitcoin-linked messaging app Bitchat

India's Cyber Crime Coordination Centre has ordered GitHub to remove Bitchat, an offline messaging app created by Jack Dorsey, due to its use by anti-government demonstrators in Delhi. The order, issued under Section 79(3)(b) of the IT Act, targets three GitHub repositories linked to Bitchat and requires action within three hours. The app enables anonymous communication without registration, posing challenges for law enforcement regarding lawful interception and investigation. Bitchat is a decentralized messaging tool that uses Bluetooth mesh networks for encrypted communication without internet access, and it also supports offline bitcoin transactions, ensuring continuity during outages or shutdowns.

Winsage

July 23, 2026

Windows 11 – The system restore that also includes your files

Since June 23, Microsoft has been implementing a point-in-time restore feature on Windows 11, which is enabled by default for Home and Pro editions when the system drive exceeds 200 GB. This feature captures a complete snapshot of the machine approximately every 24 hours using the Volume Shadow Copy service, including system, applications, settings, and local files. Users can revert to a previous state in case of issues, but restoring from a snapshot older than 48 hours will erase all changes made since then, except for OneDrive data. The feature retains snapshots for up to 72 hours and reserves 2% of drive space, capped at 50 GB. If free space drops below 20 GB, older snapshots are deleted. Restoration occurs locally through WinRE, and users need a BitLocker recovery key if the drive is encrypted. After a restore, the feature pauses and requires user consent to resume. Snapshots from upgraded editions are not accessible, and only the Enterprise edition allows adjustments to snapshot settings. The feature can be disabled in system settings. It is not a backup solution, and users are advised to maintain separate backups for important files.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.

Winsage

July 22, 2026

This $10 Windows upgrade could save you from buying a new laptop

Windows 11 Pro is available for .97, reduced from its regular price of 9, valid until July 26. It is designed to enhance older PCs with features like a user-friendly interface, advanced search capabilities, innovative snap layouts for multitasking, and integration of Microsoft's AI-powered assistant, Copilot. The operating system also provides seamless access to Microsoft Teams and enhanced security measures, including biometric logins and encrypted authentication.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

AppWizard

July 16, 2026

Amnesia: What If a Messenger Was Designed to Forget?

In digital communication, traditional messaging platforms act as persistent archives of user data, including accounts, devices, contacts, and interactions, which can hinder the essence of communication. While end-to-end encryption enhances privacy, it does not eliminate data retention. Amnesia is a concept that proposes a messaging platform emphasizing temporary communication with no permanent accounts or conversation histories. The initial prototype allows users to create one-time sessions using QR codes, ensuring that all data is destroyed once the session ends. Each session generates unique identity keys, preventing credential reuse and session token theft. The system does not retain any conversation history, reinforcing the principle that once a session is terminated, the data is irretrievable. Amnesia's relay facilitates communication without retaining user accounts or histories, and its design minimizes durable information to reduce risks. The project is currently an architectural concept and an early prototype, not ready for production or sensitive communications.

Winsage

July 15, 2026

Microsoft patches record 570 Windows security bugs with two exploited zero days

Microsoft released its July Patch Tuesday updates, addressing 570 security vulnerabilities in Windows, a record number for the company. This update includes three zero-day vulnerabilities, two of which have been exploited in real-world attacks, affecting Microsoft’s Active Directory and SharePoint, while the third concerns BitLocker encryption. The update also enhances Windows features, including changes to the Widgets app, improvements in File Explorer speed, refined Bluetooth connectivity, and a new feature allowing users to pause updates until a specific date. However, the update has been temporarily halted for certain Dell computers due to compatibility issues, with Microsoft working on a fix.