JavaScript Archives

AppWizard

October 5, 2026

OM SDK sandbox cuts Android ad session start to 11 ms, IAB Tech Lab says

IAB Tech Lab has released version 1.6.10 of its Open Measurement SDK for Android, introducing the ability for verification scripts for native ads to run within Android's Jetpack JavaScriptEngine instead of the traditional WebView. This update, effective from October 1, 2026, allows for a significant reduction in verification check initiation time, with the sandbox environment taking approximately 11 milliseconds compared to 268 milliseconds in the WebView. Applications that do not implement this new feature will continue to function as before, and HTML-based ads are not included in this update. The JavaScriptEngine library allows JavaScript evaluation without a WebView, reducing resource consumption and enabling compatibility with background services. The adoption process for this feature involves updating to OM SDK Android 1.6.10 or later, integrating the androidx.javascriptengine dependency, and maintaining the sandbox throughout the app's lifecycle.

Winsage

October 3, 2026

Tested: Microsoft cloned Outlook Classic’s look into a New Outlook theme, instead of building a native Windows 11 app

Microsoft introduced a new theme for its New Outlook that resembles Outlook Classic, responding to user preferences for a familiar interface. In August 2026, an optional setting was rolled out for New Outlook on Windows 11 and Windows 10, allowing users to enable a “classic Outlook style” through Settings > General > Appearance. This feature alters the interface to echo Outlook Classic while functioning as a web app. Key redesigns include a dark background title bar, updated navigation bar, and a new Calendar view. The mail folder list has been made more compact, and the ribbon has been updated with familiar design elements. Despite these changes, users still express a desire for a native Outlook app, as the current version operates as a resource-intensive Edge instance.

AppWizard

September 29, 2026

How we found 24 Android vulnerabilities using our open source AI security agent

The GitHub Security Lab has introduced the Taskflow Agent, an open-source tool that uses artificial intelligence to automate the identification of vulnerabilities in Android applications. This tool allows security researchers to create custom taskflow prompts, leading to the discovery of over 20 vulnerabilities. To use the taskflows, a GitHub Copilot license is required, and users can run scripts to audit their projects, with results displayed in an SQLite viewer. Two specific vulnerabilities identified include: 1. OsmAnd app allows malicious applications to track user locations due to improper handling of intent extras in its exported activity. 2. The Wikipedia app has a logic flaw that enables attackers to redirect users to malicious sites via a deeplink mechanism, potentially leading to account takeovers. The GitHub Security Lab has reported a total of 24 vulnerabilities in Android applications, highlighting the effectiveness of AI in security research.

Tech Optimizer

September 25, 2026

Norton 360 for Gamers vs Bitdefender vs Malwarebytes [2026]

Norton, Bitdefender, and Malwarebytes have adjusted their antivirus products to mitigate the negative effects on gaming performance. In June 2026, Norton 360 and Bitdefender Total Security both received a perfect AV-TEST score of 18 out of 18, while Malwarebytes achieved a 100% real-world protection rate in AV-Comparatives testing, though it had more false positives. Bitdefender Total Security is recommended for gamers due to its low frame-rate impact of 0-2%, while Norton 360 offers features for streamers and competitive players, and Malwarebytes serves as a lightweight secondary scanner. The value of gaming accounts has increased, making them targets for cybercriminals, with malware campaigns like Vidar 2.0 accounting for 41% of gaming-related malware detections. New malware families such as Katz and Bee specifically target Discord and gaming platforms. In terms of performance, Norton showed a 2-3% FPS decrease in Cyberpunk 2077, while Bitdefender's impact was only 0-2%, and Malwarebytes had less than 1% impact. Norton and Bitdefender are tied in detection capabilities, both scoring 18/18 in AV-TEST, while Malwarebytes had a 92.4% offline detection rate and 98.3% online. Norton includes a no-log VPN and gamer-tag monitoring, while Bitdefender offers identity protection without specific gamer-tag monitoring. Malwarebytes lacks a VPN and password manager. Pricing varies, with Norton starting at .99 for three devices, Bitdefender at .99 for one device, and Malwarebytes at .99 for one device. To switch antivirus solutions, users should back up their license keys, use removal tools, and ensure game-aware modes are active. Each product has unique strengths: Norton excels in gamer-tag monitoring, Bitdefender minimizes CPU usage, and Malwarebytes is lightweight but lacks additional features.

AppWizard

September 24, 2026

Google’s classic ‘Text’ app is now an Android app for Googlebook on the Play Store

Chrome Unboxed offers a membership called Chrome Unboxed Plus, providing an ad-free experience and access to a private Discord community. Google has introduced a new "Text" editor app for Googlebook OS, available on the Google Play Store, which features broad syntax highlighting, a multi-file tabbed interface, large-screen desktop navigation, and standard code tools. This app is designed to be a lightweight, distraction-free text editor optimized for various screen sizes, including foldable and smartphone formats, and may eventually be extended to the broader Android ecosystem.

AppWizard

September 23, 2026

5 Unique Android Apps Worth Your Time

More than 70% of the world’s smartphones operate on the Android platform. Users often struggle to find apps that address specific issues, leading to a time-consuming search through numerous options. A curated list presents five applications that provide practical solutions to common mobile frustrations. 1. AppsFree: Monitors Google Play for premium apps, games, and wallpapers that temporarily drop to free, allowing users to snag deals that would otherwise be missed. Developed by ts-apps GmbH, it enables users to blacklist developers and filter low-quality offers. 2. Monocles Browser: Prioritizes user privacy by disabling JavaScript and cookies by default, reducing tracking. It has an APK size of approximately 13–14 MB and integrates ad blocking and supports Tor/Orbot proxy networks. Created by Arne-Brün Vogelsang, it offers a clean browsing experience. 3. Amarok: Allows users to instantly hide files and applications without resource-intensive encryption by obfuscating filenames and signatures. It supports multiple hiding modes and includes a “panic button” feature for quick data concealment. 4. Buckwheat: Budget manager: Requires manual input of total budget and days to cover, promoting financial reflection. It calculates daily spending allowances and provides detailed analytics. Developed by Danil Zakhvatkin, it has a user rating of around 4.6–4.7/5. 5. Chill Live Wallpaper: Offers minimalist landscapes that sync with local time and weather, providing a visually soothing experience. Compatible with Android 7.1+, it is ad-free and has a compact APK size of 5–6 MB.

AppWizard

September 22, 2026

We got Googlebook’s text editor app to run on Android, and it looks great

Googlebooks have officially started pre-orders ahead of their launch on October 4. The new laptop range includes a feature called Continue On, which facilitates seamless transitions between a Googlebook and a smartphone. An early preview of the Text app, a dedicated text editor available on the Google Play Store, shows it supports various programming languages and offers syntax highlighting. The app adapts well to different screen sizes, features a tab-based layout for managing multiple projects, and includes conventional tools like find and replace. While other text editor options will be available, the native Text app is specifically designed for Googlebooks. There are currently no plans to extend this app to other Android devices.

Winsage

September 15, 2026

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A spear-phishing campaign linked to the Chinese threat actor UTA0560 targeted various NGOs on September 1, 2026, exploiting recently patched vulnerabilities in Google Chrome and Microsoft Windows. The campaign utilized a malicious JavaScript backdoor called GRIMWEDGE, which was deployed through a multi-stage exploit chain that involved three vulnerabilities: CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880. The attack began with spear-phishing emails that led recipients to a vulnerable U.S.-based university website, allowing attackers to redirect users to their infrastructure. The exploit chain enabled arbitrary code execution and facilitated the deployment of GRIMWEDGE, which is capable of host reconnaissance, file and process management, command execution, and payload delivery. The initial payload was an executable named "msgbox.exe," which extracted a legitimate Windows binary and a malicious DLL called "wsc.dll." This DLL initiated a sideloading chain and contacted a command-and-control server for further instructions. GRIMWEDGE allows for several commands, including system reconnaissance, directory listing, file deletion, and command execution in a hidden window. It lacks built-in persistence or lateral movement mechanisms but provides a foothold for further exploitation. Concurrently, another Chinese threat actor, JungleBamboo (APT31), used the same exploit chain to deploy a loader named SUPERSTOMP, which installs a credential-stealing Chrome extension called LONGTALE. The simultaneous use of the exploit chain by multiple actors suggests potential sharing or sale of the exploit, raising concerns about patch-gap vulnerabilities that pose risks for exploitation campaigns.

AppWizard

September 14, 2026

How to Convert a Website or AI-Built Web App into a Play Store-Ready Android App in 2026

Native App AI simplifies the process of converting websites or AI-generated web apps into Android applications ready for the Play Store without needing to rebuild from scratch. It allows users to input a website URL, customize the app's features, and generate APK and AAB files for testing and publishing. The platform supports various features such as push notifications, AdMob monetization, deep linking, and custom branding. It also assists in preparing necessary information for Google Play, ensuring compliance with policies and technical requirements. This service is beneficial for SaaS companies, startups, e-commerce ventures, and creators who have existing web products.

Winsage

September 9, 2026

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Recent investigations have identified the BlueMoon exploit kit, used by espionage-driven threat activity clusters, particularly linked to APT31, a China-aligned state-sponsored group, since August 28, 2026. BlueMoon exploits three vulnerabilities: CVE-2026-85046 (a type confusion vulnerability in Google Chrome's V8 engine), an unassigned V8 sandbox escape, and CVE-2026-85880 (a heap-based buffer overflow in Windows ALPC). Google and Microsoft have released patches for these vulnerabilities, which were exploited as "patch-gap" zero-days. The attack vectors typically begin with phishing emails that lead victims to malicious URLs, triggering the vulnerabilities for code execution and privilege escalation. Variants of BlueMoon have been detected, featuring modifications for specific campaigns. Notable attack chains include: - APT31 targeting NGOs and mining firms in the U.S. with a malicious browser add-on called GemStone. - UNK_LateNight targeting U.S. aerospace companies, deploying BlueMoon alongside the ShadowPad backdoor. - UNK_DoubleCheck targeting a Vietnamese manufacturer, using DLL sideloading to execute a Rust binary. - UNK_QuietRacket targeting government and financial organizations in Indonesia and Singapore, modifying BlueMoon to execute a .NET assembly. CISA added the Chrome flaw to its Known Exploited Vulnerabilities catalog on September 4, 2026, requiring federal agencies to apply patches by September 18, 2026. Indicators of compromise include specific process trees, files, folders, scheduled tasks, mutexes, and registry keys. Proofpoint has released detection rules to help organizations identify and mitigate these threats.