operators Archives

AppWizard

August 14, 2026

Shoutout to this particular skeleton, who researchers believe is the first confirmed case of being totally obliterated by a trebuchet

Researchers have identified Skeleton 150, believed to be the first confirmed victim of a trebuchet, unearthed during excavations beneath Stirling Castle in Scotland in 1997. This skeleton is part of a collection dating back to the 1300s and shows signs of violent death, including distinct cut marks, puncture wounds, and blunt force trauma. Dr. Buckberry from Historic Environment Scotland presented findings indicating that the unusual burial location beneath the castle chapel suggests these individuals may have died during sieges in the late 13th century. Stirling Castle was a strategic stronghold that fell to Edward I's armies after a siege in 1304, during which the largest trebuchet, "The War Wolf," was used. Dr. Buckberry noted that the extensive damage to Skeleton 150 indicates the individual was likely killed by a siege engine.

BetaBeacon

August 11, 2026

Aptoide Games Joins Google Play: First Rival Android Store in Over Decade

The Play Catalog Access Program was implemented on July 22, 2026, as a result of a court order after Google lost a lawsuit filed by Epic Games for illegally monopolizing Android app distribution and in-app billing. The program allows enrolled stores, such as Aptoide Games, to access Google Play's app catalog and offer users the ability to install apps through Google Play's infrastructure, maintaining security and service fees.

Tech Optimizer

August 11, 2026

Fake popular sites offer a free app, instead take over PCs

A fraudulent website mimicking CNN's homepage is promoting a fake "CNN app" that is not affiliated with CNN. This site, along with others impersonating brands like Avast and Stremio, distributes a legitimate remote management tool called O&O Syspectr, which can grant attackers remote access to victims' computers. The installers for these counterfeit apps share the same account ID, indicating they are linked to the same malicious source. Users are misled into downloading these installers, which appear legitimate but allow unauthorized access to their systems. O&O Software has responded by disabling certain features for free accounts and monitoring for abuse. Users are advised to only download software from official sources and verify installer details before execution.

BetaBeacon

August 10, 2026

Aptoide Returns to Google Play After More Than a Decade, Opening a New Chapter for Competition on Android

Aptoide Games, the specialized games app store, has been approved for distribution through Google Play in the United States under Google's new Play Catalog Access program.

AppWizard

August 4, 2026

Samsung follows LG in killing Smart TV apps that rent out your internet

Security researchers found that several Samsung Smart TV applications, including Pac-Man, were embedding residential proxy SDKs from data brokers like Bright Data. In response, Samsung has banned the inclusion of residential proxy functionality in new app submissions and is working to remove existing apps with such software. The investigation by Norwegian cybersecurity firm Mnemonic revealed that the Bright Data SDK was integrated into various gaming applications, some promoted by Samsung. While Samsung TVs were not automatically sharing internet connections, the SDK could be activated remotely by developers, requiring user consent. Once consent was granted, the proxy service could operate in the background. Many Samsung TV applications were found to download most of their code from remote servers, complicating verification processes. The issue of residential proxy software is not limited to Samsung, as it has also been identified in various Android apps and devices. Following these findings, LG and Google have also taken measures to address the risks associated with residential proxy networks.

AppWizard

July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.

TrendTechie

July 24, 2026

BitTorrent исполнилось 25 лет. Как программа одного человека изменила интернет и поставила Голливуд в тупик

On July 2, 2001, Bram Cohen announced the operational status of his program, BitTorrent, on a mailing list for peer-to-peer network developers. BitTorrent revolutionized file sharing by segmenting files into smaller pieces, allowing users to download from multiple sources simultaneously and share already downloaded data, which improved download speeds as file popularity increased. Unlike earlier peer-to-peer networks, BitTorrent did not have a built-in catalog, relying on external websites for users to locate torrents. The first major torrent catalog, Suprnova, emerged in 2002, followed by The Pirate Bay in 2003, making the protocol widely accessible. By 2004, BitTorrent accounted for nearly a third of all internet traffic. In 2004, Cohen founded BitTorrent Inc., which acquired the client µTorrent in 2006. The company launched the BitTorrent Entertainment Network in 2007, but it closed in 2008 due to competition from free pirated content. BitTorrent Inc. later explored various technologies but struggled to establish a sustainable business model. The protocol evolved with decentralization features like the distributed hash table (DHT) and magnet links. In 2018, BitTorrent was acquired by the blockchain project TRON for an estimated 0 million. BitTorrent Inc. claims around 54 million active users per month, with additional users on independent clients. Despite a decline in torrent traffic from its peak, the network has been experiencing growth, attributed to rising streaming costs and fragmented content availability.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.

Tech Optimizer

July 23, 2026

Simplify AI agent orchestration with Lakebase Postgres

The auditing process has traditionally been labor-intensive, requiring extensive document reviews. CLA (CliftonLarsonAllen LLP) partnered with the Databricks Forward Deployed Engineering team to develop a document processing application that reduces extraction time from hours to minutes while maintaining quality. The application is built on the Databricks platform, utilizing technologies like Lakebase Postgres, Databricks Apps, Lakeflow Jobs, MLflow, and Unity Catalog Volumes. The application addresses challenges in document parsing, including unpredictable per-task latency, rate-limit-aware throttling, workload prioritization, cost attribution per task, and real-time progress visibility. It eliminates the need for multiple specialized systems by integrating components such as a web application for user interaction, Lakebase for state management, an orchestrator for task management, and AI agents for document processing. The task queue is supported by two Postgres tables in Lakebase, tracking task status and execution attempts. Concurrency safety is ensured through a locking mechanism, and crash recovery is facilitated by lease-based locking. The orchestrator implements rate-limit-aware throttling and idempotent webhook callbacks to manage task processing effectively. An operator dashboard provides real-time metrics on task status, agent performance, and workload costs, with live updates through Postgres LISTEN/NOTIFY events. Cost attribution is managed at the application level, allowing for detailed monitoring of expenditures. Lakebase enhances the orchestration process with features like autoscaling compute, OAuth-rotated authentication, Unity Catalog integration, and support for branching and snapshots.

Tech Optimizer

July 22, 2026

Google boosts AlloyDB vector search with HNSW preview

Google has introduced a preview of its columnar engine-accelerated HNSW feature for AlloyDB, enhancing vector search throughput by up to four times for users of the pgvector extension in PostgreSQL. This improvement is aimed at approximate nearest neighbor searches using HNSW across large datasets. AlloyDB utilizes a columnar engine that allows HNSW indexes to reside in memory, improving throughput and recall metrics. In benchmark tests on the GloVe 100 Angular dataset, queries per second increased by approximately 4.2x to 4.9x, with recall improving from about 0.78 to over 0.94 at a throughput of around 350 queries per second. The columnar engine's design bypasses traditional PostgreSQL buffer management bottlenecks, enhancing efficiency during graph traversal. The memory architecture is distinct from basic caching techniques, and the feature requires no changes to application code. Users must enable the columnar engine and index caching flags to utilize this feature. Benchmarks were conducted on an AlloyDB C4A machine with 16 virtual CPUs.