isolation Archives

AppWizard

April 29, 2026

New Android spyware Morpheus linked to Italian surveillance firm

Morpheus is a new spyware identified by the nonprofit organization Osservatorio Nessuno, which spreads through counterfeit Android applications that appear as legitimate updates. Attackers use SMS messages to direct victims to a fraudulent website mimicking an Internet Service Provider (ISP). The spyware installs a dropper app that deploys a concealed payload, which disguises itself as legitimate system components and manipulates users into granting dangerous permissions, including Accessibility access. Once granted, Morpheus initiates a Permission Workflow that creates a fake update overlay, disabling the touchscreen to prevent user interaction. It ensures persistence by restarting after device reboots and can request device administrator privileges. The spyware exploits overlay windows and Accessibility features to gain control of the device and bypass security measures, including disabling antivirus solutions without requiring root access. Analysis suggests Morpheus has Italian origins, with connections to an Italian firm, IPS Intelligence, known for lawful interception technologies. The spyware is capable of invasive actions such as recording audio and video, linking to WhatsApp, and compromising device security. The report highlights a network of dubious companies and shared contacts linked to the spyware's distribution.

AppWizard

April 28, 2026

XChat Goes Live: X Drops Encrypted Messaging App to Rival WhatsApp, Telegram Fast

X has introduced XChat, a dedicated messaging platform emphasizing privacy and security, currently available for pre-order in the App Store. XChat is a standalone app that offers a focused communication experience, isolating messaging from social media functionalities. It employs end-to-end encryption, ensuring only the sender and recipient can access messages, and features no advertisements or tracking. Key features include encrypted one-on-one and group chats, disappearing messages, screenshot blocking, video calling, and file sharing. XChat is part of X's broader strategy to evolve into an "everything app," which may include content sharing, payments, and financial services.

Tech Optimizer

April 27, 2026

Bitdefender Total Security review: Tried and tested by an antivirus expert

Modern antivirus solutions have integrated various tools into a single interface, with Bitdefender exemplifying this trend. It features a dashboard for system scans, recommendations, and account management. The “Protection” section includes antivirus settings, online threat defense, and firewall options. Users can enable an anti-spam service for email applications like Outlook and Thunderbird. The privacy tab offers an anti-tracker browser plugin and a limited free VPN. Additional privacy features include video and audio protection to manage webcam and microphone access, and Safepay for secure online banking. Bitdefender also provides a desktop widget for protection status, secure file shredding, and remote device management options. In terms of performance, Bitdefender operates efficiently, using less than 100MB of RAM for its main interface, but can spike during full system scans. It successfully detected a trojan during a scan of a linked Google Drive account. Bitdefender effectively identified all test files in antivirus testing and enhances browser security by intervening when users ignore warnings. The application is easy to install, with a compact file size, and offers a Quick Scan feature that allows users to scan only applications after a thorough initial scan.

AppWizard

April 26, 2026

The Chronicles of Riddick: Assault on Dark Athena review (2009)

Wes Fenlon reflects on the legacy of older video games, particularly The Chronicles of Riddick: Assault on Dark Athena, expressing nostalgia for its innovative gameplay mechanics, including stealth and melee combat. He compares its level design to that of Batman: Arkham Asylum and suggests that Riddick influenced future licensed games. Fenlon notes the unavailability of both Riddick titles in the current market and speculates that Vin Diesel could help resolve licensing issues for a revival. He describes the immersive gameplay experience, where players embody Riddick and navigate a dynamic environment filled with various types of guards. The game features a mix of stealth and conventional shooting mechanics, with a variety of weapons, including a tranquilizer gun and the Scar gun. Fenlon critiques the level design in later stages and the checkpointing system, which lacks quicksave options. Despite these flaws, he appreciates the game's adult themes and humor, highlighting its significance in video game evolution.

AppWizard

April 26, 2026

Sega posts cryptic Alien: Isolation 2 teaser: ‘A feeling of being safer than one really is’

The Alien: Isolation YouTube account released a teaser trailer titled "False Sense Of Security," featuring a rain-soaked cityscape and an emergency phone save point from the original game. It has been 12 years since the first game was released, and a sequel is set to launch in 2026. The trailer's description hints at maintaining the intense horror elements of the original game, which was known for its challenging AI and the fear of being hunted by the xenomorph. The original game received praise as "the game the Alien series has always deserved," setting high expectations for the sequel.

AppWizard

April 26, 2026

NVIDIA Neural Texture Compression: AI-powered compression aims to alleviate VRAM pressure in PC games

NVIDIA's Neural Texture Compression (NTC) improves memory efficiency in PC gaming by using small neural networks to compress texture data, achieving up to eight times better memory efficiency compared to traditional methods. In a technical demo, NTC reduced a scene's VRAM requirement from 6.5 GB to approximately 970 MB, an 85 percent reduction. The RTX Neural Texture Compression SDK has seen enhancements, including a 20 to 40 percent increase in inference speed. NTC is compatible with RTX hardware and Tensor Cores, but its real-world performance impact is yet to be determined. Microsoft is developing Cooperative Vectors and DirectX methodologies to support machine learning in graphics, which may facilitate broader adoption of NTC. The successful integration of NTC will depend on its stability, documentation, and economic viability for developers.

AppWizard

April 26, 2026

RIG Spectre R8 Pro HS review – a versatile wireless gaming headset for PC and console

The RIG Spectre R8 Pro HS is a wireless gaming headset designed for use with either the PS5 or Xbox, featuring dual-system and Bluetooth compatibility. It has a 2.4GHz wireless connection, Bluetooth 5.2, and a frequency range of 20-40,000Hz. The headset weighs 364g and offers a battery life of 60 hours. It includes a charging dock with RGB lighting, a USB-A to USB-C cable, and a wireless dongle. The microphone is non-removable, and the headset lacks simultaneous connection capabilities. It features magnetic earcup pads for easy swapping and customizable outer covers. The headset is priced at 9.99.

AppWizard

April 25, 2026

NoVoice malware hit 2.3 million Android devices through apps Google never should have approved

McAfee researchers discovered a complex Android rootkit campaign, dubbed Operation NoVoice, that infiltrated 50 applications on Google Play, exploiting vulnerabilities in the kernel that had been patched but not uninstalled. The malware was resilient enough to survive factory resets and was concealed within seemingly benign apps, which collectively garnered 2.3 million downloads. The malicious payload was hidden in the com.facebook.utils package and used steganography to embed an encrypted payload within a PNG image. The malware conducted multiple checks to avoid detection and established contact with a command-and-control server, polling for exploit packages every 60 seconds. It utilized 22 distinct exploits, including vulnerabilities that had received patches between 2016 and 2021. The malware disabled SELinux enforcement and installed a persistent rootkit that could survive factory resets. Google confirmed the removal of the infected apps but noted that users who had already downloaded them remained at risk, especially if their devices were running unpatched Android versions. McAfee advised affected users to treat their devices as compromised and consider professional inspection or hardware-level storage wiping for remediation.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.

Winsage

April 23, 2026

Engineering secure passkey sync in Microsoft Password Manager

Passkeys are a new form of authentication that replace traditional passwords, providing a phishing-resistant and streamlined sign-in process. Microsoft Password Manager allows users to save and synchronize passkeys across devices linked to their Microsoft accounts, enhancing accessibility. The architecture for passkey syncing includes confidential computing for sensitive operations, hardware-rooted key protection for encryption keys, tamper-evident recovery storage, and encrypted synchronization across devices. Sensitive passkey operations are executed in Azure's confidential computing environments, ensuring cryptographic materials are processed securely. The encryption keys are protected using Azure Managed HSM, with access governed by attestation-based mechanisms. Registration and recovery processes require user authentication and enforce security measures within confidential computing boundaries, including a lockout state after consecutive incorrect PIN attempts. The system aims to provide a secure and user-friendly experience as part of a transition to a passwordless future.