NewApp Digest
search bot

minimize

silver Android smartphone
Tech Optimizer
September 7, 2026

Top 10 Best Endpoint Detection & Response (EDR) Solutions in 2026

Endpoint detection and response (EDR) continuously records process, file, registry, and network activity on endpoints, applying behavioral analytics to identify attacker techniques while providing tools for investigation and containment. Several EDR platforms have emerged, each catering to different organizational needs: 1. CrowdStrike: Best overall for its rich telemetry and elite threat intelligence. 2. SentinelOne: Best for autonomous response, featuring strong containment and rollback capabilities. 3. Microsoft Defender for Endpoint: Best value for organizations already using Microsoft 365 E5. 4. Palo Alto Cortex XDR: Best for native data fusion across endpoint, network, and cloud telemetry. 5. Sophos: Best for generalist IT teams due to its user-friendly interface. 6. Trend Micro: Best for server and workload coverage, focusing on cloud and hybrid environments. 7. Bitdefender: Best mid-market value with strong detection capabilities at an accessible price. 8. Trellix: Best for organizations already using Trellix products, offering integrated solutions. 9. Huntress Managed EDR: Best for managed endpoint security, ideal for teams lacking full staffing. 10. Cisco Secure Endpoint: Best for Cisco environments, integrating well with Cisco security solutions. Key differentiators among these platforms include the analyst burden, alert management efficiency, and the impact of retention policies on investigation quality. The evaluation of EDR solutions should consider detection depth, response capabilities, operational costs, and the specific needs of the organization.
"Iran unveils second homegrown antivirus to counter malware and cyberattacks"
Tech Optimizer
September 6, 2026

“Iran unveils second homegrown antivirus to counter malware and cyberattacks”

Iran has introduced its second domestically developed antivirus software, Ayyza, which utilizes artificial intelligence and machine learning to detect known and unknown cyber threats. The antivirus is designed to protect against malware, viruses, Trojans, ransomware, and advanced persistent threats (APTs). Ayyza's detection engine is developed in-house and operates at the Windows kernel level to enhance detection accuracy and speed while minimizing hardware resource consumption. It can receive updates offline or via Iran’s National Information Network. Ayyza's machine-learning capabilities allow it to identify emerging threats, including previously unknown malware and zero-day vulnerabilities. The company has also created complementary security tools, such as privileged access management (PAM) systems and data leakage prevention tools, to enhance overall cybersecurity. The company's products are currently used in various Iranian infrastructures, including banking, financial, and governmental systems.
Nvidia & Microsoft push local AI agents on Windows
Winsage
September 5, 2026

Nvidia & Microsoft push local AI agents on Windows

NVIDIA has enhanced the capability to run AI agents locally on its hardware in collaboration with Microsoft and software partners, coinciding with the launch of new RTX Spark Windows PCs. The installation process for local agent software has been simplified, with improved inference speeds and the introduction of NVIDIA PAIR, which distributes inference tasks across multiple PCs on a local network. Three applications benefiting from these enhancements are Hermes Agent, OpenClaw, and Perplexity Portable Computer, all designed to minimize manual configuration. Hermes Agent offers a one-click local setup for RTX and DGX systems, automatically detecting the GPU and optimizing model selection. OpenClaw simplifies local model setups for RTX GPUs with at least 24GB of VRAM, backed by an open-source community. Perplexity Portable Computer, already available on Linux, is extending support to NVIDIA RTX GPUs and Windows. NVIDIA is also improving performance in the open-source inference stack, achieving throughput increases of up to 1.9 times on GeForce RTX 5090 and up to 1.4 times on DGX Spark clusters. The PAIR software identifies compatible PCs on the same network to optimize computing resources, supporting various hardware configurations. The upcoming RTX Spark Windows PCs, set to launch in October, will include compact desktop and laptop designs featuring Blackwell GPU and Grace CPU architecture. Game publishers like Electronic Arts and Ubisoft are developing titles for these systems. Additionally, CyberLink's PhotoDirector AI PC Mode will integrate local AI processing for creative tasks, emphasizing the trend of migrating generative AI workloads from cloud to local devices. NVIDIA notes that over half of U.S. households have two or more PCs, indicating potential for maximizing computing power.
Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems
Winsage
September 2, 2026

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

An ongoing malware campaign is targeting Windows devices through counterfeit download pages for well-known software brands like Microsoft Edge, Kaspersky, and Razer. The campaign affects various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. It utilizes high-fidelity fraudulent websites that closely mimic legitimate vendors, with observed lure domains such as app-microsoft-edge[.]com[.]cn and kaspersky-lab[.]hl[.]cn. Attackers employ evasion tactics like server-side payload regeneration and create multiple copies of the same archive in quick succession. Victims are lured into downloading ZIP files that contain a bundled wrapper installer, which activates a stage-one executable in randomized directories. The malware often masquerades as legitimate software, with some payloads impersonating known applications. Persistence is achieved through scheduled tasks with unusual names, and the malware employs various evasion techniques, including deleting shadow copies and altering file permissions. Microsoft Defender has identified activity across multiple stages of the attack, including delivery, execution, and command-and-control communications. To mitigate risks, organizations are advised to block downloads from unofficial sources, enforce Tamper Protection, and implement Attack Surface Reduction rules. Indicators of compromise (IOCs) include specific lure domains and URLs associated with the campaign.
Everyone assumed the Windows taskbar copied a rival OS. Microsoft says no
Winsage
September 1, 2026

Everyone assumed the Windows taskbar copied a rival OS. Microsoft says no

The Windows taskbar originated from the Microsoft project "Cairo," launched in 1991, which introduced a design with visible fields at the bottom of the screen. The Windows 95 taskbar combined this design with the window-minimizing functionality from Windows 3.1. Although a similar concept appeared in the 1988 NeXTSTEP operating system, Microsoft veterans assert that the Windows taskbar was developed independently, without inspiration from NeXT. The NeXTSTEP solution later influenced the macOS Dock. The taskbar continues to evolve while maintaining its significance in user interface design.
Search