entities Archives

AppWizard

September 19, 2026

Why ESG reporting standards matter in the Android and mobile tech ecosystem

ESG reporting standards are becoming increasingly important in mobile technology, affecting various aspects such as data management, material sourcing, energy consumption, privacy, supply chain dynamics, and product accountability. The lifecycle of mobile devices involves raw material sourcing, component manufacturing, device assembly, shipping, marketing, sales, updates, repairs, trade-ins, and disposal. Companies must understand ESG standards to create coherent sustainability narratives and may need to disclose supplier practices, carbon emissions, and governance documentation when partnering with larger firms. Consumers are now asking more questions about the longevity of software updates, repairability, data collection, packaging design, and the accountability of product creators. The rise of connected devices complicates ESG reporting due to extended product lifecycles and the need for ongoing software support. Companies should track product lifespan estimates, warranty data, repair trends, and update schedules to improve product quality and ESG reporting credibility. Emerging tech companies can start their ESG journey by cataloging product claims, consolidating evidence, designating ownership of records, and reviewing product lifecycle information. Global sustainability frameworks exist but may not align with consumer needs for straightforward product information. Successful mobile tech companies will need to bridge formal reporting requirements with accessible product-level communication. Trust and transparency in practices will increasingly influence consumer choices in mobile technology.

Winsage

September 15, 2026

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

AppWizard

September 12, 2026

New Open-World RPG Is Officially the #1 Best-Selling PC Game on Steam

A new open-world RPG, The Blood of the Dawnwalker, has become the best-selling PC game on Steam. It is developed by Rebel Wolves, a studio founded by former CD Projekt Red developers, and features a narrative and gameplay style similar to The Witcher 3: Wild Hunt. The game has an 85% approval rating on Steam and a score of 83 on Metacritic. Players assume the role of Coen, a young man with newfound powers in a 14th-century Europe setting plagued by war and the Black Death. The gameplay experience ranges from 15 to 30 hours, or up to 50 hours for completionists, but it is currently listed as "Unsupported" for Steam Deck compatibility.

AppWizard

September 9, 2026

Gigabud Uses Android App Cloning to Evade Fraud Detection

The Gigabud Android banking trojan can clone banking applications into a separate Android work profile, allowing fraudsters to bypass malware alerts during transactions. Research by Group-IB, released on September 9, indicates that Gigabud is used with Vwork, a modified app for cloning, attributed to the GoldFactory group. The infection has been confirmed in Indonesia but targets 11 countries, including Brazil, Colombia, Egypt, Mexico, Thailand, and Turkiye. Vwork uses Android's Work Profile feature to isolate cloned apps, making them less detectable. This allows operators to install malware, clone banking apps, and execute transactions without raising alarms. During fraud, fake login screens capture credentials, and an invisible overlay collects lock screen codes. From February to July 2026, 1,469 devices were compromised in Indonesia, with financial losses nearing 0,939. Gigabud spreads through phishing and social media, requesting permissions to control devices. Group-IB identified six behavioral signals for banks to monitor as indicators of high-risk sessions. Recommendations include device binding and downloading apps only from official stores.

AppWizard

September 8, 2026

All Confirmed Enemies in Minecraft Dungeons 2

Minecraft Dungeons 2 introduces a new dimension called The Sift, featuring a variety of new locations, enemies, and weapons. Players will encounter both familiar and unique enemies, including: - Baby Sifter: A small hostile creature native to The Sift. - Baby Zombie: A fast zombie variant that charges at heroes. - Bearded Sifter: A ranged creature that fires tracking projectiles. - Cave Spider: A fast spider that attacks with poisonous bites. - Chicken Jockey: A baby zombie riding a chicken. - Copper Cube: Small enemies that spawn from the Copper Monstrosity boss. - Creeper: An explosive enemy that detonates near players. - Enchanter: A magical Illager that buffs allies. - Excavator: An Illager that attacks with a pickaxe. - Flame Construct: A fiery enemy that can explode. - Geomancer: An Illager that creates stone pillars and explosive formations. - Husk: A hostile undead mob. - Nester: A creature that rapidly attacks players. - Pillager: A ranged Illager that uses a crossbow. - Ravager: A large creature that charges through enemies. - Royal Guard: An armored Illager with a mace and shield. - Sculk Cube: A small creature that rolls and explodes. - Sculk Slasher: A monster with long claws that charges at heroes. - Skeleton: An undead enemy that uses bows. - Slime: An enemy that splits into smaller versions. - Spider: An enemy that slows players with webs. - Spider Jockey: A skeleton riding a spider. - Sprout: A flying tentacled creature from The Sift. - Tall Sifter: A ranged enemy that spits explosive projectiles. - Vindicator: A fast Illager with an axe. - Zombie: A slow undead enemy with various tiers. Mini-bosses include: - Warden: A powerful mini-boss that uses melee attacks and sonic booms. - Sculk Dancer: A flying mini-boss that attacks with sweeping movements. Bosses include: - Copper Monstrosity: A golem that uses electricity and summons minions. - Redstone Monstrosity: A massive boss that fires explosive projectiles. - Sculk Monstrosity: A boss that charges heroes and summons minions. - Sprout Boss: A giant variant of the Sprout. - Twisted Warden: A colossal Warden with devastating attacks. Enemies can appear in various biomes, including mountains, Taiga, Deep Dark, and The Sift. The strongest enemy is the Twisted Warden due to its high damage-dealing capabilities.

Winsage

September 7, 2026

Switzerland begins testing alternatives to Microsoft 365 to protect its “most sensitive data” and strengthen digital sovereignty

Switzerland's federal government plans to reduce its reliance on Microsoft 365 and is exploring alternative software solutions, reflecting a trend among European nations for digital sovereignty. The initiative includes transitioning 3,000 Swiss workstations away from Microsoft 365. Concerns about data protection and potential risks of data leaks from foreign systems are primary motivations for this shift, alongside rising license costs. Professor Matthias Stürmer has highlighted the risks of foreign access to sensitive data. Microsoft has introduced its Sovereign Cloud to address these concerns, but apprehensions remain among governments in Switzerland, Germany, and France regarding data sovereignty.

Tech Optimizer

September 4, 2026

Object Storage + WAL: Lakebase Postgres for the agentic era

Agents interacting with traditional OLTP databases face bottlenecks at the storage layer due to data movement required for operations like deploying instances and managing replicas. Object storage solutions, such as Amazon S3, provide a more efficient and cost-effective alternative. The text discusses two OLTP models: data-centric and transaction-centric. The transaction-centric model emphasizes the importance of transaction history, which Postgres retains through its write-ahead log (WAL). The WAL records every modification before it is committed, allowing for the reconstruction of the database state as of a specific point in time. Lakebase Postgres introduces a two-layer architecture separating compute and storage. The compute layer handles SQL operations, while the storage layer ensures data durability and historical integrity. The WAL is streamed to safekeepers for replication, and the pageserver transforms WAL into materialized pages stored in object storage. This architecture allows for efficient read and write operations without direct interaction with object storage during queries. Key features of Lakebase Postgres include branching, which allows agents to create pointers to specific LSNs without copying data; instant restore capabilities that enable point-in-time recovery; time travel queries for accessing historical data; and read replicas that do not require data duplication. The system also supports scaling down idle compute nodes and eliminates the need for separate copies of data for transactional and analytical processing by storing a single durable copy in object storage. Overall, Lakebase Postgres enhances agent interactions with the database by leveraging object storage as a foundational element.

Winsage

September 4, 2026

Microsoft Will Bring Memory Integrity Protection to More Windows 11 PCs in October

Microsoft is expanding the memory integrity protection feature in Windows 11, starting in October. This enhancement aims to strengthen security at the kernel level against sophisticated attacks. Memory integrity protection operates in the background with minimal user configuration. It utilizes Virtualization-based Security (VBS) to create isolated virtual environments for added protection. The system can install security hotpatches without requiring a hard restart, beneficial for critical environments. Large organizations will automatically benefit from this enhancement, while devices with memory integrity disabled will not have it activated automatically. The rollout will enable VBS by default for users, who can choose to disable it but should do so with caution.

Winsage

September 1, 2026

Why governments worldwide are abandoning Windows for homegrown Linux alternatives

Windows is the most widely used desktop operating system, but Linux is gaining popularity among government entities globally, driven by a desire for independence from Western software due to geopolitical tensions. France plans to transition government workstations from Windows to Linux as part of a broader European movement for digital sovereignty, with the national police force having migrated 97% of its computers to a customized version of Ubuntu called GendBuntu. Germany is also adopting Linux, with Munich creating a customized distribution called LiMuX and other states like Mecklenburg-Vorpommern shifting to open-source platforms like Nextcloud. In Russia, the government is deploying Astra Linux to reduce reliance on Microsoft products following the Ukraine conflict. China is promoting Kylin OS, a Linux-based system, to achieve software self-sufficiency after the end of support for Windows 10. Governments are increasingly turning to Linux to diminish dependence on American technology and foster digital autonomy.