leaks Archives

AppWizard

September 29, 2026

Google’s Phone app begins reverting one of its most controversial changes

The Phone by Google app is reintroducing the Contacts tab to the bottom navigation bar, which had been absent since last year. This update is currently available only to beta users, with reports of the feature's return on platforms like GApps and Leaks Telegram. The latest beta version (240.0.98) on a Pixel 9 has shown this feature, while previously, the Contacts tab was moved to a sidebar. Some users have not yet seen the reappearance of the Contacts tab, indicating a gradual rollout. In the current stable version, users only see two tabs at the bottom, with the Contacts option accessible via a sidebar menu. The timeline for a wider release of the update remains uncertain.

Winsage

September 27, 2026

‘Decades-old’ bugs found affecting Windows, Android, macOS and Linux — but the OS makers don’t see it as a big deal

Researchers at Graz University of Technology discovered significant vulnerabilities in the file-notification subsystems of major operating systems: Linux, Windows, macOS, and Android. These flaws, present for decades, allow side-channel attacks that can infer sensitive information like keystrokes and visited websites. The vulnerabilities are rooted in components such as inotify (Linux, since 2005), FileObserver (Android, since 2008), ReadDirectoryChangesW (Windows, since 2000), and FSEvents (macOS, since 2007). Unprivileged users can exploit these subsystems to observe file events, potentially leading to keystroke timing attacks and credential theft. While Linux has implemented partial mitigations (CVE-2025-68788), Microsoft and Apple have acknowledged the issues but have not provided substantial patches.

Winsage

September 24, 2026

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Security researchers from Graz University of Technology in Austria have discovered significant vulnerabilities in the file notification systems of major operating systems: Android, Linux, macOS, and Windows. These flaws have existed for decades and can lead to the leakage of sensitive system information. The affected systems include inotify on Linux (since 2005), FileObserver on Android (since 2008), ReadDirectoryChangesW on Windows (since 2000), and FSEvents on macOS (since 2007). The vulnerabilities allow unprivileged users to monitor file events without explicit read permissions, enabling potential attacks such as inter-keystroke timing attacks and website fingerprinting. For example, on Linux, monitoring a readable directory can leak events on files that cannot be read, allowing attackers to achieve a 93.1% to 100% accuracy rate in monitoring keystrokes. Specific vulnerabilities include CVE-2025-68788 on Linux, which received a partial fix in December 2025, and issues on Android where FileObserver can bypass app storage isolation. On macOS, limited information is available due to a lack of bypasses for private directories, while on Windows, monitoring the root directory can reveal the full path of every accessed file, allowing real-time tracking of web activity with a 97.8% accuracy rate. Microsoft has described the issue as "by-design," which has faced criticism. The researchers propose stronger mitigations, such as disallowing monitoring of entire drives on Windows and introducing a permission system for file monitoring on Windows and macOS. Their findings will be presented at the ACM CCS 2026 conference in November in The Hague, Netherlands.

AppWizard

September 23, 2026

Expert Opinions and Insights from the Tech Industry

The Android development community has historically addressed memory optimization reactively, but new performance requirements from Google Play, effective February 2027, emphasize proactive memory management. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization, with apps needing at least 25% optimization coverage. Memory usage can now hinder releases even without local crash replication, necessitating its integration into the pre-production process alongside other performance metrics. Dynamic memory usage is defined as anonymous RSS plus swap, excluding file-backed data. Google Play will evaluate this across different application states and device performance categories. Bitmap memory is scrutinized for the retention of invisible bitmaps, and DEX optimization aims to reduce memory footprint and improve performance. Investigating memory growth involves using Android Studio’s Memory Profiler to monitor memory changes during specific user flows and conducting heap dumps to identify retained objects. Issues often arise from retained state, where components hold onto callbacks that reference image data, necessitating a focus on lifecycle management rather than merely cache size. Bitmap memory should be carefully managed, as the decoded size can significantly exceed the compressed file size. Downsampling images to match UI dimensions is crucial. Memory checks should occur before production, with a focus on establishing a memory budget based on actual measurements and defining representative memory scenarios for testing. A pre-release memory checklist includes running user flows repeatedly, testing on various devices, inspecting heap dumps, examining image configurations, and reviewing optimization metrics. Monitoring Android vitals and Play Console warnings is essential to detect potential issues before they lead to user-reported crashes.

Tech Optimizer

September 22, 2026

Kaspersky: 5 Security Essentials Beyond Built-In Antivirus

India's internet usage has rapidly evolved, with the Unified Payments Interface (UPI) transforming smartphones into banking hubs and daily tasks being conducted online. Despite this digital shift, many users rely on pre-installed security software, which may not be sufficient against increasing cyber threats. In 2025, nearly one in four internet users in India faced web-based cyber threats, with over 47.5 million threats blocked, averaging about 130,000 daily. Kaspersky's Safe Money feature provides real-time verification of banking and shopping sites, while its anti-phishing capabilities respond to rapidly changing scams. Scammers are using multi-channel approaches, prompting Kaspersky's system to flag suspicious activity across platforms. Credential theft increased by 20% in 2025, with over 225,000 attacks thwarted, and Kaspersky offers identity monitoring to alert users of data leaks. Additionally, Kaspersky Premium provides 24/7 human support for suspicious activities, addressing the limitations of standard antivirus tools in a complex digital threat landscape.

AppWizard

September 21, 2026

When Memory Becomes a Release Metric: Preparing Android Apps for Google Play’s New Limits

In August 2026, Google Play announced new performance requirements for memory management that will be enforced starting February 2027. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization. Applications that exceed these thresholds may face reduced visibility and publishing capabilities on the platform. Dynamic memory usage is defined as the sum of anonymous RSS and swap, excluding file-backed data. Google is focused on whether applications retain non-visible bitmaps and requires at least 25% coverage in DEX optimization. Memory issues can be difficult to reproduce, and developers are encouraged to use Android Studio’s Memory Profiler to investigate memory growth. A thorough investigation involves monitoring memory changes, taking heap dumps, and understanding reference paths. Bitmap memory should be carefully managed, as the runtime cost of images can exceed their file size. Google will provide real-world memory metrics through the Play Console, and teams are advised to establish memory budgets and perform pre-release checks to identify potential issues before they lead to out-of-memory (OOM) crashes.

Winsage

September 18, 2026

Microsoft explains why restarting Windows can shut it down more completely than actually shutting it down

The Fast Startup feature in Windows, enabled by default, allows the kernel session to remain hibernated during shutdown, which results in quicker boot times by restoring a saved state. In contrast, selecting Restart clears the kernel session entirely, performing a complete boot of Windows. The process of shutting down with Fast Startup involves closing applications, logging off, keeping the kernel loaded in memory, saving the kernel and drivers to hiberfil.sys, and powering off, while Restart closes applications, logs off, ends the kernel session, and reboots immediately without saving a kernel snapshot. Fast Startup can lead to persistent issues from previous sessions, making Restart a better option for troubleshooting. To perform a full shutdown bypassing Fast Startup, users can execute the command "shutdown /s /t 0." Microsoft advises against permanently disabling Fast Startup, as it enhances shutdown-to-boot transitions.

Tech Optimizer

September 16, 2026

Chinese state security authorities warn outdated antivirus software can expose systems to cyberattack

Chinese state security officials have emphasized the necessity for organizations to keep antivirus software and virus databases updated to prevent data breaches and unauthorized access. The Ministry of State Security (MSS) highlighted that neglecting these updates has led to significant security incidents, including the theft of sensitive data and cyberattacks on work email accounts. Specific cases include a research institute that suffered a breach due to unpatched vulnerabilities, an institution exposed to cyberattacks for not enforcing regular virus scans, and a company that operated a poorly protected server with outdated antivirus software. Contributing factors to delayed updates include a lack of awareness about cybersecurity risks, insufficient network maintenance, and unclear responsibilities within organizations. Under China's Cybersecurity Law, network operators must implement measures to protect against cybersecurity threats. The MSS advises organizations to enhance their cybersecurity measures by adopting technologies like automated risk alerts and intelligent behavioral analysis.

AppWizard

September 14, 2026

iQOO 16 display leaks were true: Samsung’s 2K 165Hz panel is official

The iQOO 16 will be the first smartphone to feature a 2K resolution OLED display with a 165Hz refresh rate, co-developed with Samsung Display. It utilizes Samsung's M16 luminescent material and LEAD 2.0 architecture, achieving a global peak brightness of 2,800 nits and a local peak brightness of 10,000 nits, with a pixel density of 508 PPI. The device includes a 500Hz multi-touch sampling rate and a 5,000Hz instantaneous sampling rate for gaming, along with Q-Flex technology to reduce input lag. It also features 3,300Hz PWM dimming and is designed to be energy-efficient, consuming 31% less power at 150 nits compared to a 1.5K panel. The iQOO 16 is expected to launch in China at the end of September.

Winsage

September 14, 2026

Your Windows 11 PC is wasting RAM on 5 apps you probably don’t even use

Windows 11 has been criticized for being bloated, with several applications consuming excessive amounts of RAM without user consent. - The MSN Weather app can exceed 1GB of RAM shortly after launching, significantly impacting system memory. - The Widgets Board can consume several hundred megabytes of RAM depending on the displayed content. - Outlook, reliant on the WebView2 framework, can use hundreds of megabytes of RAM and remains active in the background, leading to unnecessary memory consumption. - Microsoft Edge often continues running in the background after being closed due to a feature called Startup Boost. - OneDrive is known for its background RAM consumption and potential memory leaks, making it advisable to uninstall for users who do not use it. Users with limited RAM should evaluate and uninstall default Windows applications that do not meet their needs to optimize performance.