NewApp Digest
search bot

encryption methods

silver Android smartphone
Tech Optimizer
December 2, 2025

When AI Breaks Bad: The Rise of Ransomware and Deepfakes

Artificial Intelligence (AI) is transforming the cybersecurity landscape by enabling sophisticated cyberattacks, such as ransomware and deepfakes. Ransomware has evolved from manual coding to AI-driven automation, making attacks more efficient and harder to stop. AI automates the targeting of victims by analyzing large datasets to identify vulnerabilities. Machine learning allows malware to change its form to evade detection, and ransomware can operate autonomously within networks. Phishing attacks have become more convincing through AI-generated messages that mimic real communications. Deepfakes can create realistic impersonations, leading to financial fraud and extortion, as demonstrated by a 2024 incident resulting in a million loss. Deepfakes also pose risks for manipulation and disinformation, affecting public perception and market dynamics. On the defensive side, AI is utilized in cybersecurity to detect and prevent attacks through anomaly detection, zero-trust security models, and advanced authentication methods. Human training and awareness are crucial for recognizing AI-generated threats. Effective defense requires regulations, shared accountability, and preparedness within organizations, including continuous monitoring and employee training. Collaboration between public agencies and private security firms is essential for a robust response to cyber threats.
Week in review: Fake “Windows Update” fuels malware, Salesforce details Gainsight breach
Winsage
November 30, 2025

Week in review: Fake “Windows Update” fuels malware, Salesforce details Gainsight breach

Colonel Ludovic Monnerat emphasized the need for satellite systems to adopt quantum-safe methods due to looming quantum threats. Graham McMillan noted that past AI failures have not led to industry maturity, predicting significant structural shifts from AI meltdowns. Marina Marceta highlighted the importance of a risk-aware culture in cybersecurity to align security with business objectives. A new wave of ClickFix attacks uses deceptive “Windows Update” screens to distribute malware. Researchers from watchTowr found that code formatting sites are exposing sensitive information like API keys. cnspec is an open-source tool for maintaining security and compliance across cloud environments. The Tor Project plans to implement Counter Galois Onion encryption to enhance user anonymity. An ISC2 survey revealed that supply chain risks are a top concern for cybersecurity professionals. There are various job openings in the cybersecurity field for different skill levels.
silver Android smartphone
Winsage
November 23, 2025

Microsoft Swaps BSOD to Black, Adds Auto-Hide and AI Tools for Reliability

Microsoft is launching an initiative to eliminate the Blue Screen of Death (BSOD) by introducing a new black screen error interface in Windows 11, which will replace the traditional blue backdrop. This redesign aims to modernize the error display and provide actionable insights while removing the frowning face emoji. A new feature called Digital Signage Mode will automatically conceal BSODs on public displays after 15 seconds, preventing prolonged visibility of errors. This mode suppresses all Windows error dialogs and allows systems to reboot or enter recovery without displaying errors, which is crucial for environments like retail and transportation. Microsoft is also enhancing remote recovery tools for IT administrators and promoting proactive measures for error prevention, such as regular driver updates and system scans. The company is collaborating with hardware manufacturers to improve driver compatibility and reduce BSOD incidents. Despite concerns about obscuring underlying issues, Microsoft ensures that all incidents are logged for future review. By 2026, experts anticipate advancements in AI-driven error handling that could eliminate public BSODs entirely. User adoption remains a challenge, particularly among small businesses, and Microsoft is addressing this through educational campaigns. The transition to a black screen has been positively received in consumer spaces, marking a cultural shift away from the blue screen as a symbol of computing errors.
DragonForce Cartel Emerges Following Conti v3 Ransomware Source Code Leak
Tech Optimizer
November 6, 2025

DragonForce Cartel Emerges Following Conti v3 Ransomware Source Code Leak

Acronis Threat Research Unit (TRU) analyzed the DragonForce ransomware cartel, which emerged in 2023 as a Ransomware-as-a-Service (RaaS) operation and transitioned to a cartel model. DragonForce utilizes leaked Conti v3 code and has similarities with LockBit Green in encryption and backend configurations. By early 2025, it rebranded as the “DragonForce Ransomware Cartel,” offering affiliates 80 percent profit shares and infrastructure support. The cartel has over 200 victims from various sectors since late 2023 and is known for its attack on Marks & Spencer, collaborating with Scattered Spider. DragonForce employs bring-your-own-vulnerable-driver (BYOVD) techniques to evade endpoint protection and has improved its encryption methods. The group has spawned offshoots like Devman and Mamona, which utilize its enhanced encryptor.
Citizen Lab Exposes Hidden Ties in 20 Android VPN Apps with 700M Downloads
AppWizard
September 2, 2025

Citizen Lab Exposes Hidden Ties in 20 Android VPN Apps with 700M Downloads

Researchers from Citizen Lab discovered that over 20 popular Android VPN applications, collectively downloaded 700 million times, are interconnected through undisclosed ownership ties. These applications, marketed as independent privacy solutions, share codebases, servers, and encryption vulnerabilities. The VPN providers are categorized into three families linked to a Russian entity, a Chinese company, and another with ambiguous origins. Apps like Turbo VPN, X-VPN, and UFO VPN share cryptographic keys and backdoors, increasing the risk of man-in-the-middle attacks. Many applications use outdated encryption methods, making it easy for attackers to decrypt user traffic. Some apps route user data through servers in jurisdictions with lax privacy regulations, exposing sensitive information. The investigation revealed identical backend infrastructures among different apps, despite claims of no-log policies, breaching user trust. Hidden trackers within the apps contradict their privacy assurances. Regulators are beginning to respond, with Google removing problematic apps and the EU considering stricter data access regulations. Experts recommend choosing vetted, paid VPN services that undergo independent audits to ensure better security.
Android VPN Apps Linked to Chinese Co (Qihoo 360) Tied to PRC
AppWizard
August 22, 2025

Android VPN Apps Linked to Chinese Co (Qihoo 360) Tied to PRC

Recent investigations by Arizona State University and Citizen Lab have revealed that several popular Android VPN applications are linked to entities in mainland China and Hong Kong, raising security concerns. These apps, which have millions of downloads, share ownership and infrastructure, and exhibit significant security flaws, including the collection of location data against privacy policies, outdated encryption methods, and hard-coded passwords that could compromise user traffic. One company manages all VPN servers for a second group of apps, while a third group is vulnerable to connection interference attacks. Notably, these VPN providers are connected to Qihoo 360, a Chinese company flagged as a potential national security threat, with ties to the Chinese military. The Tech Transparency Project reported that millions of Americans have downloaded apps that route internet traffic through Chinese companies, with one in five of the top 100 free VPNs in the U.S. App Store in 2024 being covertly owned by Chinese firms. Some VPNs have targeted younger audiences through social media ads, raising concerns about their marketing strategies. Qihoo 360 has been sanctioned and is on the Commerce Department’s Entity List, emphasizing the national security risks associated with these services. Users are advised to research their VPN providers to avoid affiliations with the Chinese Communist government.
Search