package

AppWizard
September 19, 2026
Security researchers have identified an Android banking Trojan named RatHat, which utilizes artificial intelligence, accessibility features, and Android Debug Bridge (ADB) to steal financial credentials, PINs, and one-time passcodes. Unlike traditional malware, RatHat employs a live AI assistant that interacts with the Android accessibility tree, allowing it to make real-time decisions based on the victim's screen content. The infection typically starts with social-engineering tactics, leading victims to counterfeit download pages where they are tricked into sideloading a malicious APK. Once installed, RatHat prompts users to enable Android Accessibility Service permissions, which it exploits to navigate Developer Options and enable Wireless Debugging. This grants it shell-level ADB access, allowing it to bypass application sandbox restrictions. RatHat deploys two native binaries for executing commands and maintaining a connection to the attacker's infrastructure. It targets banking applications through credential-stealing overlays and can intercept SMS messages for transaction verification codes. Additionally, it can record touch coordinates to reconstruct PINs and unlock patterns. RatHat includes persistence mechanisms to restore itself after removal, and users are advised to perform a factory reset if they suspect compromise. To reduce infection risk, users should avoid sideloading apps from unknown links, deny unnecessary Accessibility Service requests, and refrain from enabling Developer Options or Wireless Debugging for unfamiliar applications.
AppWizard
September 18, 2026
Google's September 2026 Pixel Update Bulletin includes patches that affect standard Android platform code, relevant to both Pixel and non-Pixel devices, which have not been included in the regular monthly Android Security Bulletin. GrapheneOS has noted that Android 17 QPR1 introduced new developer APIs not present in the Android Open Source Project (AOSP) for the first time since Android Honeycomb, with one new package and modifications to sixteen others. GrapheneOS is backporting Pixel firmware and drivers from QPR1 onto Android 17 but lacks permissions to distribute this work. Additionally, there has been a delay in Google’s compliance with a GPL source request, with access granted over two weeks after the initial request. Starting in 2027, Google will require all Android app developers to register with them and provide legal identification and signing key evidence, complicating the process of sideloading unverified apps. GrapheneOS and other organizations are advocating for the Keep Android Open campaign against these developments, which may restrict competition and tighten Google's control over the Android ecosystem.
AppWizard
September 18, 2026
Android 17 QPR2 Beta 5 was released on September 15, 2026, with a public rollout for Pixel devices starting the next day. This beta version enhances the Proactive Assistance feature on Pixel 10 and Pixel 11 devices, allowing users more control over personalized suggestions and addressing various bugs. It is a development build for supported Pixel devices and Android Emulator images, with identified builds CP41.260828.004.A8 and CP41.260828.005.A6, and a security patch level dated August 5, 2026. The update package size for the Pixel 10 Pro XL is approximately 667 MB. The notable change in Beta 5 is the introduction of two Proactive Assistance entries in the Settings menu, allowing users to manage proactive suggestions more effectively. The updated settings page includes a "Use app content for suggestions" option, enabling users to control which applications can share screen content and notifications. Google's release notes list several fixes, including issues with Bluetooth device icons, unexpected reboots, missing volume controls, search-field highlight rendering, unlocking Private Space, HDR behavior, Google Wallet touchscreen unresponsiveness, camera crashes, and distorted Bluetooth call audio. The stable release of Android 17 QPR2 is expected in December 2026, and users are advised that Beta 5 is a developmental tool that may contain errors. Additionally, new restrictions on programmatic USSD requests for call forwarding have been introduced to reduce potential fraud.
Winsage
September 17, 2026
Devices operating on Windows 11 24H2 Home and Pro editions will stop receiving updates starting October 13, 2026. The Enterprise and Education editions of Windows 11 24H2 will continue to receive mainstream support until October 2027. Microsoft encourages users to upgrade to Windows 11 25H2, which became available in September 2024. Systems running Windows 11 24H2 Home and Pro that are not managed by IT will automatically upgrade to Windows 11 25H2. Users can check for eligibility for the update by navigating to Settings > Windows Update. Windows Server 2022 will transition to extended support on October 13, 2026, lasting until October 14, 2031. Microsoft has extended the free Windows 10 Extended Security Updates program for home users until October 2027 and will halt security updates for Windows 11 Home and Pro 23H2 in November 2025.
AppWizard
September 17, 2026
Security researchers at Zimperium have identified a new strain of Android malware called RatHat, which is linked to threat actors from China and is designed to steal sensitive credentials and banking information. RatHat infiltrates devices through phishing sites, malvertising, and SMS phishing (smishing), tricking users into downloading malicious Android package kits (APKs). The malware uses a dropper to activate its payload, which is hidden in encrypted assets, and employs techniques to bypass Android's security measures. RatHat consists of three main components: a malicious Android application, a Go agent (liblocal-service.so), and an FRP client (libmedia_codec.so). The app collects sensitive information such as banking credentials, notifications, 2FA codes, OTP keys, and screen inputs. It features a generative AI user interface-automation engine that communicates in Mandarin and can perform various tasks like determining screen coordinates and issuing navigation commands. The Go agent acts as a command-and-control executor, executing commands to bypass app-level security and manage system-level tasks. The FRP client maintains a secure reverse tunnel to the attacker's server, allowing ongoing remote access to the device. The architecture of RatHat demonstrates the inadequacy of traditional mobile security measures against such advanced threats.
Tech Optimizer
September 15, 2026
In 2026, McAfee introduced its AI-powered Scam Detector as part of the McAfee+ suite, which includes antivirus protection, identity monitoring, privacy tools, VPN services, and financial safeguards. The McAfee+ Advanced tier is available for .99 for the first year, reduced from 9.99, and a family plan for up to six members is priced at 9.99, down from 9.99. Each plan includes a 30-day money-back guarantee. Research shows Americans receive an average of 14 scam messages daily, with one in three falling victim to online scams, losing an average of ,160. The Scam Detector identifies threats such as suspicious texts, emails, deepfake videos, and risky websites, and includes a QR code safety check. It is included in all McAfee core plans at no additional cost.
AppWizard
September 15, 2026
GAMINGbible highlights a new free RPG called Adventurers Guild, developed by AG Studio, which features a whimsical fantasy world and gameplay elements reminiscent of popular franchises. However, the game has been criticized for not matching the vibrant visuals shown in its trailer, with players expressing skepticism about its authenticity. The Steam listing includes a personal email for customer service, raising further concerns. Reviews warn of potential scams, false advertising, and misleading marketing tactics, advising caution when considering the game. There is currently no evidence of malware, but players are urged to be vigilant.
Winsage
September 15, 2026
Microsoft is set to introduce a significant overhaul of the Windows Start menu in its upcoming 26H2 update, responding to user feedback about limited customization options. Flow Launcher is a keyboard-centric app launcher that offers superior functionality compared to the traditional Start menu. The installation of Flow Launcher is straightforward, with options for portable versions and package managers. It features a sleek search bar and allows users to quickly search for apps and files, enhancing productivity. Flow Launcher is highly customizable, with settings for behavior and appearance, including nearly 20 themes and various visual options. Its plugin ecosystem expands its capabilities, allowing users to install and manage plugins for added functionality. Notable plugins include Speed Test and Google Translate. Flow Launcher provides a more customizable and efficient experience compared to Microsoft’s current offerings.
Search