NewApp Digest
search bot

exploits

Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud
Tech Optimizer
August 27, 2026

Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud

A network of fraudulent websites, branded as SysScan, has been discovered, which falsely claims to evaluate antivirus software effectiveness through deceptive security scans. These sites manipulate users into uninstalling legitimate antivirus products and disclosing sensitive personal and banking information. Eleven distinct domains associated with SysScan have been identified, all hosted on a single server. The fraudulent scans generate misleading results based on static findings rather than actual system assessments, and users are coerced into believing their computers are at risk. The scams misrepresent normal browser behaviors as security threats and instruct victims to uninstall their antivirus software, compromising their defenses. The operation targets both individual and business users, collecting extensive personal information and utilizing remote-access tools. The data submitted is sent to Telegram via its bot API. Users are advised to disconnect from the internet and secure their devices if they suspect they have been compromised. Indicators of compromise include specific IP addresses and domains associated with the scam.
This antivirus blocks viruses and ransomware without slowing your PC down
Tech Optimizer
August 27, 2026

This antivirus blocks viruses and ransomware without slowing your PC down

ESET NOD32 Antivirus is an antivirus solution designed to protect Windows PCs from various threats, including viruses, spyware, rootkits, and zero-day exploits, while maintaining system performance. It offers a one-year license for a competitive price and is recognized for its effective threat detection and minimal impact on system resources. Key features include real-time scanning, a Ransomware Shield that blocks file-locking attempts, advanced artificial intelligence for identifying new threats, and an anti-phishing feature that prevents access to fraudulent websites.
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
AppWizard
August 23, 2026

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android malware threat, codenamed Manic, poses significant risks to Ukrainian banks, government services, and messaging applications, with a reach extending to Russian and European financial institutions, global fintech platforms, cryptocurrency services, and military communication channels. Manic combines Android banking malware and mobile spyware, targeting sensitive applications and enabling comprehensive device takeover. It features a novel Wi-Fi mesh technique for data relay through compromised devices and utilizes phishing sites and dropper apps. The malware originated in February 2026, with initial development leading to its first deployment by late May. It monitors 169 package IDs related to banks, payment services, and messaging applications, primarily affecting Ukrainian targets but also impacting applications in Russia and Europe. Manic can infiltrate commercial and military messaging apps, track locations, monitor notifications, and collect files. It exploits Android's accessibility services to capture sensitive data and employs a store-and-forward relay mechanism for data exfiltration through nearby compromised devices. Google has stated that no apps containing this malware are found on Google Play, and Android users are protected by Google Play Protect.
ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys
Winsage
August 20, 2026

ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys

ShieldBreak, identified as CVE-2026-69414, is a zero-day vulnerability in the Microsoft Malware Protection Engine that allows low-privileged local attackers to escalate privileges to SYSTEM. The public proof of concept was released on August 12, 2026, and Microsoft recognized the CVE on August 14, 2026. No patch is currently available. ShieldBreak exploits an elevation-of-privilege vulnerability by manipulating file processing during the cloud-file hydration process in Microsoft Defender, allowing attackers to control processes with elevated privileges. The exploit is functional on Windows 11 25H2 and Windows Server 2025. Qualys VMDR can detect this vulnerability using a specific query, and organizations can use Qualys TruRisk™ Eliminate for mitigation until a patch is released.
Microsoft Scrambles To Patch ShieldBreak Zero-Day Flaw In Windows Defender
Winsage
August 18, 2026

Microsoft Scrambles To Patch ShieldBreak Zero-Day Flaw In Windows Defender

A new exploit named ShieldBreak, developed by Nightmare-Eclipse, targets Microsoft Defender by allowing privilege escalation and bypassing previous security fixes related to the RoguePlanet vulnerability. ShieldBreak operates on Windows 11 25H2, its Canary channel, and Windows Server 2025, achieving a "100% success rate." Windows 10 may also be vulnerable, but the exploit is specifically designed for Windows 11. There is currently no patch for ShieldBreak, and users are advised to disable Microsoft Defender, implement two-factor authentication, and exercise caution with suspicious online activities. Malwarebytes has recommended its Premium Security antivirus as a temporary solution.
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Winsage
August 17, 2026

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A suspected advanced persistent threat (APT) group linked to China exploited a newly patched vulnerability in VMware vCenter (CVE-2026-59310), which has a critical CVSS score of 9.8, allowing for arbitrary code execution and the deployment of Babuk-derived ransomware. A recently patched vulnerability in Apple macOS (CVE-2026-65400) has been exploited to deploy a cryptocurrency miner, granting unauthorized root access. The Lazarus Group from North Korea exploited a zero-day vulnerability in Microsoft Windows, targeting defense and aerospace sectors. GeoServer patched a critical SQL injection vulnerability that was actively exploited. A new macOS malware, Amnesia Stealer, targets users through ClickFix attacks, stealing data and allowing real-time access to authenticated sessions. A novel attack technique named GhostSplice can manipulate AI coding assistants. Research revealed a method exploiting Chromium's DevTools Protocol for data theft. Noteworthy CVEs this week include CVE-2026-68820, CVE-2026-58231, and multiple others across various platforms. A high-severity command injection flaw in FileRun allows remote code execution. An advanced ClickFix attack has been reported, deploying sophisticated malware. A heap overflow vulnerability in Citrix NetScaler was patched after indications of exploitation. A new malware loader targeting Portuguese-speaking users has been identified. A significant reduction in exposed Automatic Tank Gauge systems has been observed. A phishing campaign targeting Brazil has been detected, and an F.B.I. agent faces charges for unauthorized crypto withdrawals. Authorities in Ukraine dismantled fraudulent call centers, and a North Carolina man was sentenced for cyber extortion. Unauthorized access to sensitive data by the ExfilSquad group has been confirmed. LightSpy activity linked to China has been detected in over 13 countries. A supply chain attack exposed over 2,500 companies, and an Azure exfiltration campaign has exposed millions of enterprise records.
Microsoft releases new Defender update for Windows 11, 10, Server ISO installations
Winsage
August 16, 2026

Microsoft releases new Defender update for Windows 11, 10, Server ISO installations

Microsoft released its August 2026 Patch Tuesday updates, including the latest Defender package for ISO installations. The updates are aimed at combating malware threats and are issued approximately every three months for Windows installation images (WIM and VHD) and ISOs. The latest Windows 11 update is available through the Media Creation Tool (MCT). The security definitions were delivered through security intelligence update version 1.455.50.0, applicable to various platforms including Windows 11, Windows 10 ESU, Windows Server 2022, and others. The update includes enhancements to the anti-malware client, engine, and signature versions, with platform version 4.18.26070.9, engine version 1.1.26070.7, and security intelligence version 1.455.50.0. The previous security intelligence update was version 1.447.236.0, which introduced detections for various malware types. The most recent intelligence update is version 1.457.181.0.
silver Android smartphone
Tech Optimizer
August 15, 2026

4 Outdated Cybersecurity Tips That No Longer Keep You Safe

Creating robust passwords and storing them securely in a password manager is essential. Utilizing multi-factor authentication (MFA) is recommended for added security. Passwordless options like passkeys and security keys enhance convenience and security. Public Wi-Fi networks pose significant security risks, and caution is necessary when connecting. Hackers often use Man-in-the-Middle (MitM) attacks to intercept data on unsecured networks. Using a Virtual Private Network (VPN) can safeguard data by encrypting it before transmission. VPN routers can encrypt data for devices that cannot install a VPN. Traditional antivirus software may struggle against adaptive malware, which uses machine learning to evolve and evade detection. Companies are integrating machine learning into their antivirus solutions. Two-factor authentication (2FA) is commonly used but has diminished effectiveness due to new tactics employed by cybercriminals. Users should consider transitioning to passkeys and security keys for better protection against unauthorized access.
Modding the Khajiit lands into Oblivion is still the cat's meow
AppWizard
August 15, 2026

Modding the Khajiit lands into Oblivion is still the cat’s meow

In Leyawiin, the narrator attempts to steal keys from local merchants while wearing the Grey Fox mask, which marks them as a wanted criminal. They enter Southern Books and are confronted by shopkeeper Bugak gro-Bol. The narrator's Khajiit character is now working for a new guild in the modded territory of Elsweyr, specifically in the area known as Anequina. The mod, created by Iliana and other modders, features diverse NPCs and quests, with a guidebook detailing available locations and tasks. The narrator explores various towns, including Dune, Riverhold, and Corinthe, each with unique architectural styles and quests. They engage in a quest to help a father find his lost child and encounter a highwayman and a dremora genie. The narrator ultimately succeeds in stealing keys from merchants and plans to steal horses next. The mod enhances the Oblivion experience by introducing a vibrant world beyond the original game.
Search