NewApp Digest
search bot

exhibit

My favorite $6 RPG on Steam just got a beastmode free 'Enhanced Edition' update
AppWizard
September 26, 2026

My favorite $6 RPG on Steam just got a beastmode free ‘Enhanced Edition’ update

FlyKnight is a first-person RPG inspired by classics like King's Field and Lunacid, priced affordably. It recently received a free update called the GOTY/Enhanced/Definitive Edition, which includes multiple difficulty levels, item and enemy randomization, four new weapon types, performance improvements for Steam Deck users, and various refinements. The game features a unique combat system with locational limb damage, allowing players to target specific weak spots. The gameplay is slow-paced and skill-demanding, focusing on distance control and perfect blocks. The game is currently available at a limited-time sale price until September 30.
Expert Opinions and Insights from the Tech Industry
AppWizard
September 23, 2026

Expert Opinions and Insights from the Tech Industry

The Android development community has historically addressed memory optimization reactively, but new performance requirements from Google Play, effective February 2027, emphasize proactive memory management. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization, with apps needing at least 25% optimization coverage. Memory usage can now hinder releases even without local crash replication, necessitating its integration into the pre-production process alongside other performance metrics. Dynamic memory usage is defined as anonymous RSS plus swap, excluding file-backed data. Google Play will evaluate this across different application states and device performance categories. Bitmap memory is scrutinized for the retention of invisible bitmaps, and DEX optimization aims to reduce memory footprint and improve performance. Investigating memory growth involves using Android Studio’s Memory Profiler to monitor memory changes during specific user flows and conducting heap dumps to identify retained objects. Issues often arise from retained state, where components hold onto callbacks that reference image data, necessitating a focus on lifecycle management rather than merely cache size. Bitmap memory should be carefully managed, as the decoded size can significantly exceed the compressed file size. Downsampling images to match UI dimensions is crucial. Memory checks should occur before production, with a focus on establishing a memory budget based on actual measurements and defining representative memory scenarios for testing. A pre-release memory checklist includes running user flows repeatedly, testing on various devices, inspecting heap dumps, examining image configurations, and reviewing optimization metrics. Monitoring Android vitals and Play Console warnings is essential to detect potential issues before they lead to user-reported crashes.
When Memory Becomes a Release Metric: Preparing Android Apps for Google Play’s New Limits
AppWizard
September 21, 2026

When Memory Becomes a Release Metric: Preparing Android Apps for Google Play’s New Limits

In August 2026, Google Play announced new performance requirements for memory management that will be enforced starting February 2027. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization. Applications that exceed these thresholds may face reduced visibility and publishing capabilities on the platform. Dynamic memory usage is defined as the sum of anonymous RSS and swap, excluding file-backed data. Google is focused on whether applications retain non-visible bitmaps and requires at least 25% coverage in DEX optimization. Memory issues can be difficult to reproduce, and developers are encouraged to use Android Studio’s Memory Profiler to investigate memory growth. A thorough investigation involves monitoring memory changes, taking heap dumps, and understanding reference paths. Bitmap memory should be carefully managed, as the runtime cost of images can exceed their file size. Google will provide real-world memory metrics through the Play Console, and teams are advised to establish memory budgets and perform pre-release checks to identify potential issues before they lead to out-of-memory (OOM) crashes.
AI Is Changing Antivirus From File Matching to Behaviour-Based Malware Detection
Tech Optimizer
September 15, 2026

AI Is Changing Antivirus From File Matching to Behaviour-Based Malware Detection

Artificial intelligence is transforming malware detection by moving away from traditional file signature reliance to analyzing program actions. Antivirus software previously used signatures to identify known threats, but the rapid emergence of over 450,000 new malware samples daily complicates this method. Attackers now employ techniques like repacking and encryption to evade detection, prompting the need for machine-learning and behavioral techniques for better protection. Modern detection systems assess multiple characteristics of executable files, including their behavior, to identify potential threats, even if they lack recognized signatures. Microsoft's Project Ire exemplifies advanced detection capabilities, functioning as an automated malware analyst that evaluates unknown binaries based on their behavior. Additionally, modern endpoint-security products leverage cloud systems to analyze data from multiple devices, enhancing threat detection through shared intelligence. However, AI detection can still produce false positives and is susceptible to manipulation by attackers. Therefore, effective security systems require a combination of traditional measures, behavioral monitoring, machine learning, and human analysis to navigate complex threats.
Wardogs players are actively avoiding one team in particular: 'They are literally the dumbest people on the planet'
AppWizard
September 15, 2026

Wardogs players are actively avoiding one team in particular: ‘They are literally the dumbest people on the planet’

Players in the game Wardogs exhibit a strong aversion to the Blue faction, Lonestar, often chanting “Anything but blue” during team selection. This sentiment is reflected in community discussions, with humorous posts highlighting Lonestar's sparse player roster and rebranding factions based on difficulty levels. Anecdotal evidence suggests that players actively avoid joining Blue, resulting in delays for matches to start. In matches played as Lonestar, players report overwhelming defeats, with opposing teams quickly establishing fortified positions. Theories explaining Lonestar's negative reputation include its conspicuous blue attire, a strategic disadvantage due to its starting position, and a self-fulfilling prophecy where negative experiences lead to fewer players choosing Blue.
CVE-2026-85880 and CVE-2026-81963: Microsoft Patches Two Actively Exploited Windows Zero-Days
Winsage
September 10, 2026

CVE-2026-85880 and CVE-2026-81963: Microsoft Patches Two Actively Exploited Windows Zero-Days

Microsoft's Patch Tuesday on September 8, 2026, addressed two critical Windows privilege escalation vulnerabilities: CVE-2026-85880 and CVE-2026-81963, both with a CVSS score of 7.8. CVE-2026-85880 is a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC), allowing attackers with low-privilege local access to escalate privileges to SYSTEM. CVE-2026-81963 involves improper link resolution in the Windows Update Stack, enabling similar privilege escalation. Both vulnerabilities require no user interaction and have been actively exploited prior to the patch release. CISA added them to its Known Exploited Vulnerabilities catalog on September 8, 2026, with a remediation deadline of September 22 for U.S. federal agencies. CVE-2026-85880 affects various Windows 10 and Server versions but excludes Windows 11 and Windows Server 2025. CVE-2026-81963 impacts newer Windows platforms, including Windows 11 and Windows Server 2025. Microsoft released security updates for both vulnerabilities on September 8, 2026, and organizations are advised to prioritize these updates. Security teams should monitor for signs of privilege escalation and unusual SYSTEM-level activities related to these vulnerabilities.
'We are no longer using that one red pipe asset we weren't supposed to use': The Blood of Dawnwalker hotfix clears up one of the game's more charming mistakes
AppWizard
September 9, 2026

‘We are no longer using that one red pipe asset we weren’t supposed to use’: The Blood of Dawnwalker hotfix clears up one of the game’s more charming mistakes

A new hotfix for The Blood of Dawnwalker has been released, focusing on stability improvements, resolving progression blockers, and fixing controller-related frame rate drops. Key enhancements include: - Improved game stability. - Resolved tutorial progress issues with the Voracious Bite ability. - Fixed character Coen becoming trapped in buildings. - Enabled dialogue between Crake and Coen during training. - Prevented dead NPCs from initiating conversations. - Addressed blocking issues under specific conditions. - Resolved game saving problems. - Ocha will no longer attack Coen when guards are present. - Fixed a bug causing Coen to get stuck in a cave during the "Deep Down" quest. - Ensured Murohn spawns correctly. - Corrected premature ending of a solution in the "Hive and Seek" quest. - Resolved infinite loading screens in the "On the Run" quest. - Accurate display of difficulty level for "A Lone Wolf's Hunt." - Fixed a soft-lock issue after following Sara. - Investigating the rag in the "Smoke and Ashes" quest is now optional. - Resolved a blocker in "The Heart Wants What It Wants" quest. - Coen and Iorgu will drink from cups at lower graphical settings. - Removed the red pipe asset. - Fixed music stopping during the prologue. - Fixed frame rate drops from outdated GameInput software. - Torches will no longer grow uncontrollably. - Resolved issues with Quality preset mods. - Fixed VSync issues with FSR Frame Generation. The hotfix is now live on Steam.
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Winsage
September 9, 2026

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Recent investigations have identified the BlueMoon exploit kit, used by espionage-driven threat activity clusters, particularly linked to APT31, a China-aligned state-sponsored group, since August 28, 2026. BlueMoon exploits three vulnerabilities: CVE-2026-85046 (a type confusion vulnerability in Google Chrome's V8 engine), an unassigned V8 sandbox escape, and CVE-2026-85880 (a heap-based buffer overflow in Windows ALPC). Google and Microsoft have released patches for these vulnerabilities, which were exploited as "patch-gap" zero-days. The attack vectors typically begin with phishing emails that lead victims to malicious URLs, triggering the vulnerabilities for code execution and privilege escalation. Variants of BlueMoon have been detected, featuring modifications for specific campaigns. Notable attack chains include: - APT31 targeting NGOs and mining firms in the U.S. with a malicious browser add-on called GemStone. - UNK_LateNight targeting U.S. aerospace companies, deploying BlueMoon alongside the ShadowPad backdoor. - UNK_DoubleCheck targeting a Vietnamese manufacturer, using DLL sideloading to execute a Rust binary. - UNK_QuietRacket targeting government and financial organizations in Indonesia and Singapore, modifying BlueMoon to execute a .NET assembly. CISA added the Chrome flaw to its Known Exploited Vulnerabilities catalog on September 4, 2026, requiring federal agencies to apply patches by September 18, 2026. Indicators of compromise include specific process trees, files, folders, scheduled tasks, mutexes, and registry keys. Proofpoint has released detection rules to help organizations identify and mitigate these threats.
Search