NewApp Digest
search bot

financial data

Android users warned to delete these fake apps after Google alarm
AppWizard
November 26, 2025

Android users warned to delete these fake apps after Google alarm

Android users are facing a threat from counterfeit VPN applications that disguise themselves as privacy-enhancing tools but contain malware capable of compromising personal information and security. These fake VPNs mimic reputable brands and use misleading advertisements to appear legitimate. Once installed, they can steal passwords, messages, and financial data, and may even lock devices with ransomware. Google advises users to download VPNs only from trusted sources, look for verification badges, review app permissions, be cautious of free offers, research developers, and avoid scare tactics in marketing. Legitimate VPNs should not request access to personal contacts or photos and should only require network-related permissions.
Why Your Apple Device Isn’t as Invincible as You Think
Tech Optimizer
November 20, 2025

Why Your Apple Device Isn’t as Invincible as You Think

Many Apple users believe that their devices are nearly impervious to malware and cyber threats, but this is a misconception. While macOS has built-in protections like Gatekeeper and XProtect, no system is completely foolproof. Cybercriminals are increasingly targeting Macs, and users can fall victim to phishing schemes, ransomware, and other malware. Antivirus software for Mac provides an additional layer of defense, detecting malware and blocking phishing attempts. It can also protect sensitive information and offer features like secure browsing and Wi-Fi protection. Regular software updates and cautious behavior are essential for security, but relying solely on these measures is risky. Integrating antivirus into security routines is a practical step to minimize risks.
New ClickFix Attack Targeting Windows and macOS Users to Deploy Infostealer Malware
Tech Optimizer
November 13, 2025

New ClickFix Attack Targeting Windows and macOS Users to Deploy Infostealer Malware

Security researchers have identified a malware campaign using the ClickFix social engineering technique to spread information-stealing malware on Windows and macOS. The campaign targets users searching for cracked software, leading them to malicious Google-hosted landing pages. Victims encounter fake security warnings that prompt them to execute a malicious command, resulting in the installation of infostealer malware. Windows users receive the ACR stealer, while macOS users get the Odyssey stealer, both delivered in password-protected ZIP files. ACR also loads additional malware like SharkClipper, which hijacks cryptocurrency clipboard data. The campaign has seen a 700% increase in ACR logs in May 2025, with ClickFix becoming the most common initial access method, accounting for 47% of all initial access schemes. The malware collects various user data, including passwords and cryptocurrency wallets, and operates in a fileless manner to evade detection. Security experts advise against executing unverified commands and recommend enhancing endpoint detection capabilities to combat these threats.
Inside the race to build agent-native databases
Tech Optimizer
October 29, 2025

Inside the race to build agent-native databases

A disconnect has been identified between traditional databases and the requirements of AI agents, prompting a rethinking of database architecture. Four initiatives are redefining databases for AI: 1. **AgentDB** treats databases as lightweight, disposable artifacts, allowing agents to create and discard databases easily for single tasks, catering to simple AI applications and temporary data processing needs. It is not suitable for complex transactional systems. 2. **Postgres for Agents** enhances PostgreSQL with features like zero-copy forking, enabling secure testing and experimentation without affecting live systems. It targets developers building AI applications and offers a cloud service with a free tier. 3. **Databricks Lakebase** integrates transactional capabilities within a data lakehouse architecture, providing seamless access to real-time operational data and historical insights for AI agents. It aims to unify data workloads and reduce the complexity of maintaining separate databases. 4. **Bauplan Labs** focuses on safety and reliability, developing a "programmable lakehouse" with a "Git-for-data" model that ensures verifiable and auditable data operations for AI agents. It targets high-stakes scenarios where mistakes could have significant repercussions. These initiatives reflect a broader trend of reshaping databases to cater to machines, emphasizing ephemeral, isolated, and context-aware systems.
Switch to Windows 11 and your PC will be TWICE as fast, Microsoft claims
Winsage
October 19, 2025

Switch to Windows 11 and your PC will be TWICE as fast, Microsoft claims

Microsoft claims that laptops and desktop PCs running Windows 11 are "up to 2.3x faster than Windows 10 PCs," based on benchmarking data from Geekbench 6. Windows 10 will reach its end of support on October 14, leaving around 5 million users in the UK vulnerable to security risks. Microsoft offers a free upgrade to Windows 11 for users with a legitimate copy of Windows 10, although not all existing devices may support it. The upcoming Windows 11 Version 25H2 update will provide a smoother installation experience and introduce features like a redesigned Start menu and CPU throttling for better power management. Microsoft will offer free security updates to Windows 10 users who subscribe to OneDrive, while others will need to pay a one-time fee of £22 for updates. Some users report that Windows 10 may have better gaming performance, which could affect their decision to upgrade.
FTC should investigate Microsoft after Ascension ransomware attack, senator says
Winsage
September 12, 2025

FTC should investigate Microsoft after Ascension ransomware attack, senator says

A U.S. senator, Ron Wyden, has requested an investigation by the Federal Trade Commission (FTC) into Microsoft's role in a ransomware attack on Ascension Health, alleging "gross cybersecurity negligence." The attack, which occurred in 2024, involved hackers using a method called "Kerberoasting" to exploit Microsoft’s Active Directory server, taking advantage of the outdated RC4 encryption standard. Wyden criticized Microsoft for not making the more secure Advanced Encryption Standard (AES) the default option in Windows and for failing to adequately warn customers about vulnerabilities related to Kerberoasting. Microsoft acknowledged that RC4 is outdated but stated that disabling it could disrupt customer systems. The company plans to disable RC4 by default in new installations of Active Directory Domains using Windows Server 2025 by early 2026. Wyden noted that the ransomware attack originated from a malicious link clicked by a contractor while using Microsoft’s Bing, leading to malware installation and subsequent ransomware deployment across Ascension’s systems. The attack severely impacted Ascension's operations, forcing its 140 hospitals to revert to manual processes for weeks and compromising sensitive data of nearly 6 million individuals. Patients in Texas, Illinois, and Tennessee have filed class action lawsuits against Ascension due to the breach. The Black Basta ransomware gang has been implicated in the attack, although they have not claimed responsibility.
Search