management

AppWizard
September 18, 2026
Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.
BetaBeacon
September 18, 2026
- LDPlayer is a general-purpose performance emulator - MEmu is a multi-instance workhorse for players juggling several accounts - GameLoop is Tencent's first-party tool built almost exclusively around its own mobile titles - LDPlayer, MEmu, and GameLoop are all designed around mobile gaming rather than general Android app testing - LDPlayer is actively patching graphics driver bugs, MEmu is quietly polishing quality-of-life features, and GameLoop's update cadence has slowed - GameLoop is specifically tuned for Tencent-published titles like PUBG Mobile - LDPlayer runs two branches, with LDPlayer 14 being the most actively patched version - MEmu's defining feature is multi-instance management for running multiple Android sessions - MEmu's release cadence has been steady in 2026, with the latest build adding a toggle to disable Android system sounds
Winsage
September 17, 2026
The search index on Windows 11 can contribute to storage bloat, with reported sizes varying significantly among users. The search index database, named Windows.db, is crucial for delivering quick search results and can grow dramatically, with some users experiencing sizes exceeding 200GB. A PowerShell script can be used to check the size of the Windows.db file. If the file size is unusually large, users can rebuild the search index through the Indexing Options in the Control Panel. Windows 11 has two indexing modes: Classic and Enhanced, which affect the size and number of indexed items. Classic mode indexes specific folders, while Enhanced mode indexes the entire PC. Excluding certain directories can help manage index size. Performance issues may arise on PCs with over 400,000 indexed items.
BetaBeacon
September 17, 2026
Dave the Diver, a popular game with a 96% positive review rating on Steam, has been released worldwide for mobile devices by Mintrocket studio. The game combines underwater exploration with sushi bar management, offering players a diverse gaming experience. The mobile version has revamped interface and optimized controls for touch screens, with in-game actions utilizing device capabilities. The game is available on both Android and iOS platforms globally, with a free initial part and full version priced at 699 rubles on the App Store and 899 rubles on Google Play.
Winsage
September 17, 2026
On Windows 11, the Storage Sense feature can reclaim space by cleaning user-level files, such as temporary data, items in the Recycle Bin, files in the Downloads folder, and cached OneDrive copies. It recently reclaimed approximately 1.67GB of space in one morning and a total of 10.2GB over the past month with default settings. Storage Sense only activates when the storage drive is nearing capacity unless the user adjusts the schedule. It can be configured to run daily, weekly, or monthly, and users can set parameters for emptying the Recycle Bin and deleting files in the Downloads folder. However, Storage Sense does not clean the entire drive or access the Windows component store, which holds outdated system files. The component store was found to contain approximately 11.84GB of data that Storage Sense cannot clean up. The total size of the component store is 20.14GB, with a significant portion comprising backups and disabled features. Users may need additional cleaning tools to manage the data that Storage Sense cannot address.
AppWizard
September 16, 2026
Denuvo has filed a lawsuit against an individual known as "voices38" for allegedly tampering with and bypassing its anti-piracy technology, which is used in various popular PC games. The lawsuit was initiated in the U.S. Northern District Court of California, claiming violations of the Digital Millennium Copyright Act (DMCA). Denuvo describes voices38 as a "computer hacker" who has cracked numerous games, including titles like Doom: The Dark Ages and Hogwarts Legacy. Voices38 responded casually on Reddit, indicating a lack of concern for the lawsuit. Denuvo's business model relies on selling DRM solutions, and while it cannot sue for copyright infringement, it claims to be harmed by voices38's activities. The lawsuit lists several games that voices38 has allegedly cracked and marks Denuvo's first legal action against a video game pirate in the U.S. The company is also attempting to uncover voices38's true identity and may file subpoenas to gather more information. Public sentiment appears to be against Denuvo, with criticism regarding its software's impact on legitimate users.
Winsage
September 16, 2026
Organizations using Windows Server 2022 will lose mainstream support on October 13, 2026, although security updates will continue through extended support until October 2031. Customers are encouraged to plan for an upgrade to Windows Server 2025 to avoid potential security vulnerabilities and complications in future migrations. Microsoft recommends early evaluation and testing of Windows Server 2025 to ensure compatibility and smooth transition. Additionally, support for the Azure Edition’s hotpatching capability has been extended to October 2027, providing some customers more time to strategize their migration. However, remaining on Windows Server 2022 means missing out on new features and enhancements.
Search