NewApp Digest
search bot

manufacturing

Android Processor Comparison: Snapdragon, Dimensity, Exynos, and Tensor Explained
BetaBeacon
September 21, 2026

Android Processor Comparison: Snapdragon, Dimensity, Exynos, and Tensor Explained

An Android processor, commonly called a system-on-chip or SoC, handles many calculations required by a smartphone, including CPU, graphics processing, artificial intelligence hardware, image-processing capabilities, connectivity components, and other technologies. The processor influences the speed of response, gaming performance, and battery efficiency of an Android phone.
Why ESG reporting standards matter in the Android and mobile tech ecosystem
AppWizard
September 19, 2026

Why ESG reporting standards matter in the Android and mobile tech ecosystem

ESG reporting standards are becoming increasingly important in mobile technology, affecting various aspects such as data management, material sourcing, energy consumption, privacy, supply chain dynamics, and product accountability. The lifecycle of mobile devices involves raw material sourcing, component manufacturing, device assembly, shipping, marketing, sales, updates, repairs, trade-ins, and disposal. Companies must understand ESG standards to create coherent sustainability narratives and may need to disclose supplier practices, carbon emissions, and governance documentation when partnering with larger firms. Consumers are now asking more questions about the longevity of software updates, repairability, data collection, packaging design, and the accountability of product creators. The rise of connected devices complicates ESG reporting due to extended product lifecycles and the need for ongoing software support. Companies should track product lifespan estimates, warranty data, repair trends, and update schedules to improve product quality and ESG reporting credibility. Emerging tech companies can start their ESG journey by cataloging product claims, consolidating evidence, designating ownership of records, and reviewing product lifecycle information. Global sustainability frameworks exist but may not align with consumer needs for straightforward product information. Successful mobile tech companies will need to bridge formal reporting requirements with accessible product-level communication. Trust and transparency in practices will increasingly influence consumer choices in mobile technology.
Retired Microsoft Engineer details the story about the famous leaked FCKGW Windows XP key — copy protection used 10MB of encrypted Microsoft Bob for validation
Winsage
September 17, 2026

Retired Microsoft Engineer details the story about the famous leaked FCKGW Windows XP key — copy protection used 10MB of encrypted Microsoft Bob for validation

The most recognized Windows XP product key is FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8. Windows XP was released in two formats: Retail for consumers and Volume for Microsoft partners and OEMs. The Volume discs were not intended for the general public and were designed for mass installations without individual activation. The final CD version, Release to Manufacturing (RTM), was completed on August 24, 2001, two months before the official launch on October 25. A leak of the Volume image and its Volume License Key (VLK) is believed to have originated from a major OEM, possibly Dell or Intel, which was exploited by the pirate group Devils0wn, allowing broader access to Windows XP.
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Winsage
September 15, 2026

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Winsage
September 9, 2026

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Recent investigations have identified the BlueMoon exploit kit, used by espionage-driven threat activity clusters, particularly linked to APT31, a China-aligned state-sponsored group, since August 28, 2026. BlueMoon exploits three vulnerabilities: CVE-2026-85046 (a type confusion vulnerability in Google Chrome's V8 engine), an unassigned V8 sandbox escape, and CVE-2026-85880 (a heap-based buffer overflow in Windows ALPC). Google and Microsoft have released patches for these vulnerabilities, which were exploited as "patch-gap" zero-days. The attack vectors typically begin with phishing emails that lead victims to malicious URLs, triggering the vulnerabilities for code execution and privilege escalation. Variants of BlueMoon have been detected, featuring modifications for specific campaigns. Notable attack chains include: - APT31 targeting NGOs and mining firms in the U.S. with a malicious browser add-on called GemStone. - UNK_LateNight targeting U.S. aerospace companies, deploying BlueMoon alongside the ShadowPad backdoor. - UNK_DoubleCheck targeting a Vietnamese manufacturer, using DLL sideloading to execute a Rust binary. - UNK_QuietRacket targeting government and financial organizations in Indonesia and Singapore, modifying BlueMoon to execute a .NET assembly. CISA added the Chrome flaw to its Known Exploited Vulnerabilities catalog on September 4, 2026, requiring federal agencies to apply patches by September 18, 2026. Indicators of compromise include specific process trees, files, folders, scheduled tasks, mutexes, and registry keys. Proofpoint has released detection rules to help organizations identify and mitigate these threats.
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Winsage
September 2, 2026

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

An active malware campaign is using counterfeit software-download websites to distribute malicious installers, primarily targeting users seeking popular software. This campaign has significantly affected China-based operations of multinational corporations and Chinese-speaking users. The malware, once executed, can establish persistence, undermine security measures, and communicate with attacker-controlled infrastructure. Victims span various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. Microsoft associates this campaign with a Chinese threat cluster called Silver Fox, known for using spoofed vendor download pages to spread Gh0st RAT and ValleyRAT. The malicious websites are hosted on .com.cn and .hl.cn domains, featuring Chinese-language content. The downloaded files are dynamically generated, and upon execution, they deploy a wrapper installer that initiates the malware payload. The malware achieves persistence through scheduled tasks and interferes with Windows Update services. The campaign establishes command-and-control communication over non-standard ports, with two identified domains linked to the activity. Microsoft Defender has detected the threat and initiated containment procedures. Kaspersky reported a related malicious installer exploiting a legitimate adware application to execute a backdoor, which captures keystrokes and clipboard contents. ValleyRAT, a sophisticated implant, can collect system information, reboot the computer, capture screenshots, and transmit logs. The attackers are motivated by cyber espionage and financial gain, targeting organizations globally. A subgroup within GoldenEyeDog, known as CuboidalCanine, has also been linked to the use of ValleyRAT, particularly in the gambling industry. In June 2026, Chinese authorities addressed cybercrime cases involving a new variant of the Silver Fox trojan.
Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems
Winsage
September 2, 2026

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

An ongoing malware campaign is targeting Windows devices through counterfeit download pages for well-known software brands like Microsoft Edge, Kaspersky, and Razer. The campaign affects various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. It utilizes high-fidelity fraudulent websites that closely mimic legitimate vendors, with observed lure domains such as app-microsoft-edge[.]com[.]cn and kaspersky-lab[.]hl[.]cn. Attackers employ evasion tactics like server-side payload regeneration and create multiple copies of the same archive in quick succession. Victims are lured into downloading ZIP files that contain a bundled wrapper installer, which activates a stage-one executable in randomized directories. The malware often masquerades as legitimate software, with some payloads impersonating known applications. Persistence is achieved through scheduled tasks with unusual names, and the malware employs various evasion techniques, including deleting shadow copies and altering file permissions. Microsoft Defender has identified activity across multiple stages of the attack, including delivery, execution, and command-and-control communications. To mitigate risks, organizations are advised to block downloads from unofficial sources, enforce Tamper Protection, and implement Attack Surface Reduction rules. Indicators of compromise (IOCs) include specific lure domains and URLs associated with the campaign.
Overcoming the Barriers of Commercial DBs with Open Source and AI… EDB Hosts 'PostgreSQL AI Summit'
Tech Optimizer
August 29, 2026

Overcoming the Barriers of Commercial DBs with Open Source and AI… EDB Hosts ‘PostgreSQL AI Summit’

A company's approach to artificial intelligence (AI) begins with determining the optimal structure for data storage and management, often facing challenges such as high costs of commercial databases and reliance on specific enterprise technologies. To effectively utilize AI, companies need to establish new infrastructures, including vector search capabilities, Search Augmentation Generative (RAG) systems, and data lakehouses. EDB is notable for connecting companies and technology partners that have transitioned to open-source databases. On September 3, EDB will host the 'EDB Postgres AI Summit Seoul 2026' at the Sofitel Ambassador Seoul, starting at 10:00 AM. This event is the largest PostgreSQL conference in Korea, themed 'Change the Game,' focusing on the shift from commercial databases to open-source and AI-driven frameworks, featuring real-world case studies. Approximately 300 C-level executives and IT decision-makers from various sectors are expected to attend, with participation by invitation only. The summit will include 15 sessions with customer case studies and technical presentations. Notable discussions will include IBK Industrial Bank of Korea's migration of 15 core systems to PostgreSQL, a semiconductor company's diversification of MPP databases on a DBaaS platform, and Kyobo Book Centre's database modernization strategy. Shopcast will present its development of an 'Agentic Lakehouse' integrating AI technology with a data lakehouse framework. The keynote address will be given by Kim Deok-joong, discussing organizational management strategies for integrating AI agents. The technical sessions will cover the architecture of the 'EDB Postgres AI' platform, which supports AI vector search and RAG, with live demonstrations of the analytics engine ClickHouse and LakeHouse technology for analyzing petabyte-scale data. EDB's domestic distributors and international partners will participate as sponsors. The summit aims to showcase technologies and case studies from the domestic ecosystem, addressing PostgreSQL adoption, system migration, operations, data analysis, and AI implementation. EDB manages transaction, analytics, and AI workloads using Postgres in cloud environments, serving over 1,500 global customers. Herve Timsit, EDB's Chief Revenue Officer, emphasized the event's focus on sharing tangible results and addressing the challenges of commercial databases while investing in AI infrastructure.
Search