NewApp Digest
search bot

Improved Security

Microsoft's next Windows 11 update targets stability and speed
Winsage
April 21, 2026

Microsoft’s next Windows 11 update targets stability and speed

Microsoft has released new preview versions of Windows 11 for Insiders across the Beta, Dev, and Canary channels, focusing on enhancing stability and performance. Key enhancements include: - File Explorer: Faster, smoother, and more reliable experience. - Settings App: Improved navigation and consistent user interface. - Drop Tray: Functioning seamlessly. - Clipboard History: Quicker response time. - Storage Settings: Enhanced performance for large-volume storage. - Windows Hello: Greater reliability. - Keyboard Input and Voice Control: More uniform experience. - Startup Applications: Improved performance and memory management. - Screen Content Display: Enhanced stability in displaying content, audio, and fonts. - Overall Security: Improved security measures. These updates aim for reliability and consistency, with significant enhancements expected to be available to the public by May 2026.
"The vault is solid, the delivery truck is not" — strong key storage, shaky transfer: why this Windows Recall feature raises new security questions
Winsage
April 20, 2026

“The vault is solid, the delivery truck is not” — strong key storage, shaky transfer: why this Windows Recall feature raises new security questions

Windows Recall, an AI-driven tool by Microsoft designed to capture and analyze users' screen content, was initially unveiled in 2024 but faced a delayed rollout due to significant security concerns. It launched in April 2025 with enhanced security features, including isolation within a "VBS Enclave" to protect against third-party access and filtering out sensitive information. However, security researcher Alexander Hagenah identified a flaw where data is transmitted to a less secure process, d AIXHost.exe, allowing tools like TotalRecall Reloaded to access sensitive data without administrative privileges. Despite reporting this vulnerability, Microsoft deemed it "not a vulnerability" and has not planned significant fixes. In response to user backlash, Microsoft is reassessing its AI initiatives, including Windows Recall, while privacy-focused organizations have introduced features to block the tool. Experts are calling for improved security protocols and user opt-out options.
Samsung Messages app will be discontinued soon: Here's what to know
AppWizard
April 7, 2026

Samsung Messages app will be discontinued soon: Here’s what to know

Samsung has announced that its Samsung Messages application will cease operations in July 2026, encouraging users to migrate to Google Messages, which will become the default messaging app for Samsung device owners. Customers will receive in-app notifications to guide them through the transition process. The decision to discontinue Samsung Messages is part of a strategy to enhance user experience by providing a more secure and feature-rich messaging platform with advanced features like AI-powered scam detection and spam filtering.
I'm seriously tempted to drop Microsoft Edge after the latest Firefox update
Winsage
March 24, 2026

I’m seriously tempted to drop Microsoft Edge after the latest Firefox update

Mozilla Firefox has released version 149, which includes features such as Split View, a free VPN for public Wi-Fi, enhanced PDF performance, and improved security measures that block notifications and revoke permissions on malicious websites. Firefox allows users to easily disable all AI features with a single switch, while Microsoft Edge requires users to navigate through multiple settings. Firefox is available for download on its website and the Microsoft Store.
Hackers Used Hugging Face to Distribute Android Banking Trojans
Tech Optimizer
February 11, 2026

Hackers Used Hugging Face to Distribute Android Banking Trojans

Cybersecurity researchers have identified a malware campaign that exploited Hugging Face's AI infrastructure to distribute Android banking trojans. The attackers used a deceptive app called TrustBastion, which tricked users into installing what appeared to be legitimate security software. Upon installation, the app redirected users to an encrypted endpoint that linked to Hugging Face repositories, allowing the malware to evade traditional security measures. The campaign generated new malware variants every 15 minutes, resulting in over 6,000 commits in about 29 days. It infected thousands of victims globally, particularly in regions with high smartphone banking usage but lower mobile security awareness. The operation is believed to be linked to an established cybercriminal group. Security experts warn that this incident highlights vulnerabilities in trusted platforms and calls for improved security measures, including behavioral analysis systems and verification of application authenticity. The incident has also sparked discussions about the need for enhanced security protocols for AI platforms.
Aurora PostgreSQL 13 Deadline: Four Upgrade Paths to Beat February Cutoff
Tech Optimizer
January 29, 2026

Aurora PostgreSQL 13 Deadline: Four Upgrade Paths to Beat February Cutoff

Standard support for Amazon Aurora PostgreSQL-Compatible Edition and Amazon RDS for PostgreSQL version 13 will end on February 28, 2026. PostgreSQL 13 will be deprecated by the community in November 2025, ceasing to receive bug fixes or security patches. AWS recommends upgrading to newer versions, such as 16 or 17, which offer significant performance enhancements and improved security. PostgreSQL 17 can achieve up to twice the write throughput and consumes 20 times less memory during vacuum operations. Version 16 introduces pg_stat_io for detailed I/O statistics, while version 14 includes a vacuum emergency mode. Aurora-specific enhancements in version 14.9 and later can lead to faster query latency and reduced costs. Version 14 introduces new roles for access control, and version 15 revokes certain permissions. Major upgrades in logical replication include automatic slot synchronization in version 17 and support for parallel apply in version 16. Transitioning between major versions requires careful examination of catalog changes, as some views and configuration parameters will evolve. Extensions must be verified, as most do not auto-upgrade. An in-place major version upgrade can be performed via the AWS Console or CLI, with downtime varying based on database size. AWS recommends snapshot-based testing beforehand. The CLI command can check valid upgrade targets, leading from version 13 to 14, 15, 16, or 17. Preparation involves validating instance classes and dropping replication slots. Amazon RDS Blue/Green deployments allow for near-zero downtime by synchronizing production with a staging environment, enabling application testing before traffic switching. This feature is supported from Aurora PostgreSQL version 13.12 onward. Logical replication through pglogical offers flexibility for minimal downtime, while AWS DMS supports homogeneous migration with Change Data Capture. Extended Support is available for a fee, providing up to three years of security patches. Best practices include replicating production environments in staging, conducting load tests, and validating queries against new catalogs. Recent minor releases, including Aurora PostgreSQL 17.6 and 16.10, showcase ongoing improvements. Engaging AWS Support is advisable for complex setups to ensure seamless transitions before the deadline.
Search