NewApp Digest
search bot

information

Windows AI Recall is pushing data destruction upstream
Winsage
April 30, 2026

Windows AI Recall is pushing data destruction upstream

The introduction of Copilot+ PCs has created new complexities in IT asset disposition (ITAD), as these devices may contain a comprehensive, time-stamped archive of user activity, which was not present on corporate laptops two years ago. Microsoft's Recall feature captures user activity screenshots and stores them securely, but recent research by Alexander Hagenah suggests that the safeguards may be ineffective, as his tool can extract sensitive data without breaking encryption. Microsoft defends the security of Recall, stating that observed access patterns align with intended protections. This situation presents challenges for ITAD operators, as pre-collection now constitutes a data-destruction event, requiring devices to be powered down or purged before leaving the client’s environment. Certificates of sanitization must evolve to address the specific destruction of Recall snapshot stores, and conversations with clients should differentiate between managed and unmanaged fleets regarding Recall settings. The presence of Recall shifts some data-destruction responsibilities upstream to clients, complicating traditional ITAD value propositions.
Inside the Architecture of an MCP Server for PostgreSQL
Tech Optimizer
April 30, 2026

Inside the Architecture of an MCP Server for PostgreSQL

The Model Context Protocol (MCP) serves as a standard interface between large language models (LLMs) and external systems like PostgreSQL, emphasizing the importance of control over mere connectivity. An MCP server must act as a mediation and policy layer, enforcing security boundaries and ensuring that connections default to read-only. It should validate AI-generated SQL as untrusted input, encapsulate queries within transactions, and apply execution-time controls. The server must separate query generation from execution approval to manage operational costs and enforce guardrails on query types, such as limiting the number of rows returned. Token efficiency is crucial, with design considerations for compact data representation and schema introspection. In production, connection management is vital to prevent data leakage among multiple AI agents, and observability through logging executed queries and metadata is necessary for debugging and compliance. Long-running sessions require support for paginated responses to manage context effectively. Overall, the MCP server must integrate security, query safety, token efficiency, and observability into its design from the outset.
Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection
AppWizard
April 30, 2026

Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection

A new infostealer malware called LofyStealer is targeting the gaming community, particularly Minecraft players, by disguising itself as a cheat tool named “Slinky.” It employs a two-stage attack to extract sensitive information from eight major web browsers, including Chrome and Firefox, while evading detection by security software. The malware siphons off cookies, saved passwords, payment card information, and session tokens. Researchers at Zenox.ai identified LofyStealer, linking it to the Brazilian cybercrime group LofyGang, which has been active since October 2022. The malware uses social engineering tactics to appear legitimate and operates as a Malware-as-a-Service platform, offering both Free and Premium tiers to buyers. Its technical sophistication is evident in its method of in-memory browser injection, which allows it to bypass security defenses. The stolen data is compressed and sent to a command-and-control server. Users are advised to avoid downloading unofficial game mods and enable multi-factor authentication to reduce the risk of credential theft. Security teams should monitor for specific behavioral indicators related to the malware's operations.
Google Photos may soon be searchable from your Pixel launcher — and that's just the start
AppWizard
April 29, 2026

Google Photos may soon be searchable from your Pixel launcher — and that’s just the start

Google is enhancing the Pixel launcher to allow users to search their photo libraries directly from it, as indicated by the latest version of Google Photos (update 7.74.0.906046556). This integration will improve the image-search experience and may extend to other apps, including Google Workspace apps like Docs and Drive, based on findings from the Android 17 Beta. Additionally, a new app package named com.google.android.apps.pixel.launcherconnector suggests a framework for the search bar to interface with various Android apps.
5 ways your Windows updates are about to get a lot less painful
Winsage
April 29, 2026

5 ways your Windows updates are about to get a lot less painful

Microsoft is implementing changes to the Windows Update process in Windows 11 to address user frustrations. Key updates include: 1. Users can delay updates indefinitely by selecting specific end dates for pauses, extending up to 35 days at a time. 2. The Power menu will now include options for "Update and shut down" and "Update and restart," giving users more control over when updates are finalized. 3. Microsoft is consolidating updates to reduce the number of restarts to one per month. 4. Users will no longer be forced to install updates during the setup of a new Windows PC, allowing updates to occur in the background. 5. Microsoft will provide more detailed information on updates, particularly for driver updates, by clarifying the device class in the titles. These changes are expected to be tested in the Windows Insider program before being released to the general public.
'It's puke or be puked on' — this crazy indie game has you taking shots to save your soul
AppWizard
April 29, 2026

‘It’s puke or be puked on’ — this crazy indie game has you taking shots to save your soul

Developer Who You and publisher Alliance Arts have announced their new game, Drunken Goddess Reflux. The game combines elements of Russian Roulette with a narrative where players must outdrink a pink-haired demon to save their soul. It is played from a first-person perspective, with players selecting shots that lead to unpredictable outcomes. The game has received over 50,000 wishlists on Steam and is scheduled for release later this year. Updates can be found by following Alliance Arts on social media.
Don't fall for the Verizon 'loyalty' scam that's putting $1,500 iPads in the mail
AppWizard
April 28, 2026

Don’t fall for the Verizon ‘loyalty’ scam that’s putting $1,500 iPads in the mail

A sophisticated scam targeting Verizon customers has emerged, exploiting the My Verizon app to send fraudulent push notifications. A Reddit user, ApprehensivePace2969, experienced this scam when they received a call from someone impersonating a Verizon representative, claiming they qualified for a 65% discount and a free iPad. The legitimacy of the offer was reinforced by a push notification from the app. The victim received a 256GB iPad Pro, valued at ,500, and was charged a shipping fee, which was promised to be refunded upon activation. However, they later received calls from another supposed Verizon representative, instructing them to return the iPad or face a full charge. Red flags included a return shipping label not from Verizon's official center and an unrelated New York address. The victim took the iPad to a real Verizon store, contacted the fraud department, and successfully returned the device, avoiding financial loss.
Search