NewApp Digest
search bot

Monitors

Have a Samsung phone and PC? You need the new Galaxy Connect Windows app
AppWizard
April 25, 2026

Have a Samsung phone and PC? You need the new Galaxy Connect Windows app

The user expanded their Samsung ecosystem with a Galaxy Book 4 Edge and tested the Galaxy Connect application, which includes four features: Continue on other devices, Storage Share, Multi Control, and Second Screen. Multi Control allows users to connect their Samsung phone or tablet as a secondary display, enabling seamless control of the mobile device from the primary display. The Second Screen feature lets users utilize a Galaxy tablet as a wireless display for their Windows computer, reducing lag by connecting directly. Storage Share provides access to files on Samsung devices from the PC's File Explorer, and the Continue on other devices feature syncs the clipboard for easier two-factor authentication. Users with ARM-based PCs may face limitations, and some without Intel network adapters have reported issues with Galaxy Connect's functionality.
NoVoice malware hit 2.3 million Android devices through apps Google never should have approved
AppWizard
April 25, 2026

NoVoice malware hit 2.3 million Android devices through apps Google never should have approved

McAfee researchers discovered a complex Android rootkit campaign, dubbed Operation NoVoice, that infiltrated 50 applications on Google Play, exploiting vulnerabilities in the kernel that had been patched but not uninstalled. The malware was resilient enough to survive factory resets and was concealed within seemingly benign apps, which collectively garnered 2.3 million downloads. The malicious payload was hidden in the com.facebook.utils package and used steganography to embed an encrypted payload within a PNG image. The malware conducted multiple checks to avoid detection and established contact with a command-and-control server, polling for exploit packages every 60 seconds. It utilized 22 distinct exploits, including vulnerabilities that had received patches between 2016 and 2021. The malware disabled SELinux enforcement and installed a persistent rootkit that could survive factory resets. Google confirmed the removal of the infected apps but noted that users who had already downloaded them remained at risk, especially if their devices were running unpatched Android versions. McAfee advised affected users to treat their devices as compromised and consider professional inspection or hardware-level storage wiping for remediation.
Microsoft beefs up Remote Desktop security with ... hard-to-read messages
Winsage
April 24, 2026

Microsoft beefs up Remote Desktop security with … hard-to-read messages

Microsoft has released an update to improve the security of its Remote Desktop feature, which includes a warning for users opening Remote Desktop (.rdp) files. However, this warning is not displaying correctly for some users due to a bug identified in the Known Issues list after the April 14 update. The issue primarily affects users with multiple monitors set to different display scaling, leading to overlapping text or obscured buttons. Microsoft has advised users to synchronize their display scaling settings or use keyboard navigation as a workaround. The company plans to address this issue in a future Windows update but is not issuing an Out-of-Band update specifically for it. Additionally, a serious vulnerability (CVE-2026-40372) was discovered in the .NET framework, affecting versions 10.0.0 to 10.0.6, which requires immediate attention. This vulnerability impacts all Windows versions that received the update, including Windows 11 26H1.
Microsoft Says You Don't Need A Third-Party Antivirus App Anymore
Tech Optimizer
April 24, 2026

Microsoft Says You Don’t Need A Third-Party Antivirus App Anymore

Microsoft Defender Antivirus effectively addresses everyday security risks for many Windows 11 users without the need for additional software. It is active by default, integrated into the OS, and continuously updated. Windows 11 includes various security features, such as Microsoft Defender SmartScreen, Smart App Control, and Controlled Folder Access, which protect against unsafe links, untrusted applications, and unauthorized data modifications. Microsoft Defender scans files upon access and monitors system processes for threats, utilizing cloud capabilities to address emerging risks. While many users find Microsoft Defender adequate, experts note it may not meet everyone's needs, particularly in enterprise environments. Reviews have pointed out shortcomings, such as low phishing detection and inadequate ransomware protection, with a protection accuracy rating of 93 percent compared to some paid alternatives that achieved 100 percent.
You can now run WSL on Windows 95, in case you're crazy, too
Winsage
April 22, 2026

You can now run WSL on Windows 95, in case you’re crazy, too

Hailey has developed the Windows 9x Subsystem for Linux (WSL9x), which allows the 6.19 Linux kernel to run on Windows 9x systems without a graphical user interface, relying instead on a terminal experience. WSL9x consists of three main components: a modified Linux kernel that interacts with Windows 9x APIs, a virtual device (VxD) driver that initializes WSL9x and manages userspace events, and a simple 16-bit DOS client for passing commands to the Linux kernel. The system handles syscalls through a general protection fault handler due to limitations in the Win9x architecture. However, this setup poses security risks as both the Linux kernel and Windows kernel operate with the same CPU privileges, meaning instability could occur if either crashes. Comprehensive instructions for installation are available on Hailey's Codeberg page.
pgEdge Launches AI DBA Workbench, an AI Co-Pilot for Database Administrators
Tech Optimizer
April 22, 2026

pgEdge Launches AI DBA Workbench, an AI Co-Pilot for Database Administrators

pgEdge has introduced the AI DBA Workbench for PostgreSQL, an AI-driven tool designed to assist teams in managing PostgreSQL environments. The tool addresses the talent gap in database management, as the demand for experienced database administrators exceeds supply. The AI DBA Workbench continuously monitors PostgreSQL performance metrics and employs a three-tier anomaly detection system to identify potential issues. It includes an integrated assistant named Ellie, which provides diagnostic workflows and SQL code recommendations. The Workbench is compatible with PostgreSQL version 14 and above, is open source, and available for public download on GitHub. It is also included in pgEdge Enterprise Postgres, which offers enterprise-grade solutions. Support for the Workbench is available for pgEdge Enterprise Postgres subscribers.
RedSun: Windows 0day when Defender becomes the attacker
Winsage
April 18, 2026

RedSun: Windows 0day when Defender becomes the attacker

A vulnerability has been discovered in Windows Defender that allows standard users to exploit a logic error in the file remediation process, enabling code execution with elevated privileges without administrative access. This flaw, identified by security researcher Chaotic Eclipse, occurs because Windows Defender does not verify if the restoration location of flagged files has been altered through a junction point. The exploit, named RedSun, takes advantage of a missing validation in the MpSvc.dll file, allowing attackers to redirect file restoration to the C:WindowsSystem32 directory. RedSun operates by chaining together four legitimate Windows features: Opportunistic Locks (OPLOCKs), Cloud Files API, Volume Shadow Copy Service (VSS), and Junction Points. The execution of the exploit involves monitoring shadow copies, triggering Defender's detection, synchronizing OPLOCKs, and ultimately writing malicious binaries to the System32 directory. The root cause is the lack of reparse point validation in the restoration process, and currently, no patch or CVE has been assigned for this vulnerability. It affects Windows 10, Windows 11, and Windows Server 2019 and later, and organizations are advised to implement behavioral detection strategies until a fix is available.
Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits
AppWizard
April 18, 2026

Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits

On April 16, Google released Android 17 Beta 4, concluding its beta phase and focusing on app compatibility and platform stability. Developers must finalize updates for Android 17 to avoid delays when the stable version is released. Key behavioral changes for apps targeting Android 17 include: - Large-screen resizability restrictions, preventing apps from opting out of maintaining orientation, resizability, and aspect ratio constraints. - Expanded restrictions on dynamic code loading, requiring native files loaded via System.load() to be read-only. - Certificate Transparency is enabled by default. - Local network access is restricted by default, with a new ACCESSLOCALNETWORK permission for persistent access. - Stricter rules on background audio interactions, including playback and volume change APIs. Android 17 introduces per-app memory limits based on device RAM to target memory leaks and anomalies, with minimal impact expected on app sessions. Developers can check for memory limit impacts via ApplicationExitInfo and utilize profiling tools in Android Studio Panda. An on-device anomaly detection service monitors resource-intensive behaviors and provides profiling artifacts. Additionally, the Android Keystore now supports ML-DSA for quantum-safe signatures, allowing developers to generate keys and create signatures within secure hardware.
Search