permission Archives

AppWizard

June 16, 2026

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds

Security researchers at Zimperium's zLabs have identified a new Android banking trojan named Rokarolla, which can target 217 banking and cryptocurrency applications and execute 137 remote commands. The malware spreads through deceptive websites that impersonate popular apps, installing a dropper that mimics Google Play Protect to gain Accessibility access. It uses overlay techniques to capture sensitive information by displaying counterfeit login pages and can intercept SMS messages, including one-time codes from banks. Rokarolla also features a keylogger, screen logger, and can rewrite clipboard contents to divert cryptocurrency payments. It employs advanced methods for discreet data capture and has multiple fallback command-and-control domains, making it resilient against takedowns. There is no patch available for this malware, and users are advised to install apps only from Google Play and remain cautious of unexpected Accessibility requests. Zimperium's products can detect this malware, and indicators of compromise are available on their GitHub repository.

Winsage

June 16, 2026

Microsoft Teams will auto-detect when you’re at the office via Wi-Fi, roll out confirmed, but you can opt-out

Microsoft is rolling out a feature called "Workplace check-in" that allows organizations to track employee presence in the office through Wi-Fi connectivity, integrated with Microsoft Teams and configured via Microsoft Places. This feature, first noted in September 2025, will not be enabled by default. It logs an employee's location when they connect to the company’s Wi-Fi, such as when they arrive at the office. The rollout was delayed due to privacy concerns, but Microsoft is moving forward, ensuring users can control their participation. The feature does not provide real-time tracking like mapping services but indicates presence based on Wi-Fi connection. Users must grant location access through their operating system, and if they decline, IT policies cannot override this choice. Teams’ Workplace check-in is disabled by default and can be activated by IT administrators with two options: Inform mode, which notifies users of the feature and allows opting out, and Ask mode, which requests permission to share location data. Microsoft clarifies that the feature is not intended for surveillance and does not track movements over time. Employees can choose whether their presence is visible to others while on-site. The initial rollout is tied to organizations using the Microsoft Places directory, and as organizations set up the feature, more users will likely be affected. Additionally, Microsoft is enhancing Teams with improvements for speed and a new user interface for meetings.

AppWizard

June 8, 2026

Android Sideloading in 2026: Which Apps Are Worth Installing Outside the Play Store

VidMate apk is a widely used application that operates outside the Play Store and continues to do so into 2026. Sideloading is the process of installing an Android app from a source other than the Google Play Store, using the APK file format. Android supports sideloading, allowing users to enable installations from unknown sources in their device settings. As of 2026, Google requires developers distributing apps outside the Play Store to register, verify their identity with a government-issued ID, and pay a one-time fee. This policy aims to enhance security without eliminating sideloading. Enforcement began in select countries in September 2026 and will continue globally through 2027. Concerns have been raised about the potential barriers this creates for independent developers. In 2026, apps from developers with official websites and established histories are considered safer, while those from anonymous sources carry increased risks. Notable categories of sideloaded apps include video downloaders like VidMate, open-source YouTube clients like NewPipe, ad-blocking browsers, and privacy-focused tools. To install sideloaded apps safely, users should enable the option to install from unknown sources in their device settings and download from official developer websites or trusted repositories like APKMirror, F-Droid, or GitHub. Users should avoid sites that do not identify the app's creator or host unverified uploads.

AppWizard

June 8, 2026

Google Enables Android Apps With AppFunctions For Gemini

Google has introduced AppFunctions, a framework for Android that allows applications to expose callable functions to AI assistants, currently in experimental preview. This framework enables apps to register capabilities with an OS-level registry, requiring specific permissions for callers, including agents and assistants, to maintain user privacy and security. As of May 2026, integration with Gemini is in a private preview for select testers. AppFunctions targets devices running Android 16 or higher and provides developers with tools like an agent skill and Jetpack tooling for creating Kotlin bindings. The framework aims to enhance Gemini's capabilities, allowing it to use multiple extensions and execute background agent skills, facilitating automation of tasks for users.

Tech Optimizer

June 6, 2026

PostgreSQL Dump and Restore: The Complete pg_dump Guide

pg_dump is a utility for exporting a PostgreSQL database into a file, which can be restored on the same or different servers. It exports a single database's tables, views, sequences, functions, indexes, triggers, and in-database grants but does not include roles, tablespaces, or server-level configurations. To capture global objects, pg_dumpall --globals-only should be executed prior to the per-database dump. pg_dump requires CONNECT and SELECT privileges on all tables and sequences within the target database, and a dedicated backup role is sufficient for single-database dumps, while superuser access is needed for global objects. pg_dump supports various output formats: plain SQL (.sql), custom binary (.dump), directory of files, and tar archive (.tar), each with different capabilities for restoration and compression. The custom format allows for selective and parallel restoration. For non-interactive use, credentials can be stored in a .pgpass file or passed via the PGPASSWORD environment variable. Restoration methods depend on the dump format: psql is used for plain SQL files, while pg_restore is used for custom and directory formats. The restoration process requires the target database to be created beforehand. Version mismatches between pg_dump and pg_restore can lead to failures, so it's essential to ensure that the binaries are version-matched. In Docker, pg_dump and pg_restore can be executed within containers, but care must be taken to manage credentials and ensure version compatibility. Exit codes from pg_dump should be checked to confirm successful operations.

AppWizard

June 5, 2026

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

A vulnerability in several Microsoft 365 Android applications, identified as FlagLeft, was caused by a development flag left enabled in production builds, which disabled checks meant to restrict account-token sharing to trusted applications. This flaw affected applications such as Word, PowerPoint, Excel, Microsoft 365 Copilot, Microsoft Loop, and OneNote, allowing unauthorized apps to request and obtain user tokens without permission. Microsoft Teams was unaffected. The vulnerability was demonstrated by Enclave, allowing access to user emails through an unverified app. On May 12, Microsoft issued four CVEs for the affected applications, categorized under improper access control. The patched version of Word for Android is 16.0.19822.20190, and users are advised to update their applications. The patch does not invalidate already compromised tokens, so users should revoke these tokens and sign in again.

AppWizard

June 3, 2026

New 13+ Content Settings for Teen Accounts Expanding Globally on Instagram, Facebook, and Messenger

Last October, Instagram implemented a default 13+ content setting for teen accounts in the US, UK, Australia, and Canada, resulting in 90% of teens choosing to remain in this setting. The company is now expanding these settings to teen accounts on Instagram, Facebook, and Messenger globally. The new default setting filters inappropriate content and restricts interactions with unsuitable profiles, pages, and groups. A Limited Content setting will also be available on Facebook and Messenger later this year. Feedback from hundreds of thousands of parents indicated that fewer than 2% of posts recommended to teens were considered inappropriate. Instagram is exploring ways to limit the frequency of certain types of content, such as nutrition and mental health, to enhance user experience. An external assessment by Alice (formerly ActiveFence) found that Instagram Teen Accounts under the 13+ setting encountered 68% less mature content compared to a competitor, with those in the Limited Content setting experiencing 96% less. When mature content was present, it was less intense than on the competitor's platform. Instagram effectively blocked more mature search terms than its competitor. The assessment identified areas for improvement, leading Instagram to enhance protections against interactions with age-inappropriate accounts and update guidelines to restrict certain trends like "car surfing." Although Instagram drew inspiration from the MPA's public guidelines, it did not collaborate with them or involve them in the rating of content settings.

AppWizard

May 29, 2026

Android App Security Essentials: How to Build Secure Mobile Applications

Mobile applications have transformed business operations and communication, becoming essential in various industries. As reliance on mobile technology increases, organizations face cybersecurity challenges such as malware, unauthorized access, data leaks, and phishing. This has led to a focus on Android app security, with businesses implementing advanced protection strategies. To address cybersecurity threats, modern Android applications require multiple security layers. Secure coding practices minimize vulnerabilities through structured frameworks, automated testing, and regular code reviews. Strong user authentication systems, including multi-factor authentication and biometric verification, protect against unauthorized access. Data encryption secures sensitive information during transmission and storage, helping organizations comply with data protection regulations. Malware attacks are a significant concern, prompting developers to implement anti-malware frameworks and application shielding technologies. To prevent reverse engineering, developers use code obfuscation and tamper detection systems. Managing mobile device permissions securely is crucial to protect sensitive user information. Emerging technologies, such as artificial intelligence, enhance mobile security by improving threat detection and response. DevSecOps integrates security practices into the development lifecycle, allowing for continuous vulnerability identification. Robust endpoint protection solutions monitor devices for malware and unauthorized access, supporting stronger cybersecurity governance across mobile ecosystems.

AppWizard

May 29, 2026

I discovered a hidden Android feature that shows which apps are watching me

An Android phone can share sensitive data such as location, microphone access, camera feed, and contacts with various applications in the background, often due to permissions granted by the user. Google offers a Privacy Dashboard on Pixel devices to show which apps accessed specific data, while Samsung devices have a similar feature called "Permission Manager" for managing app permissions. Regularly reviewing app permissions is important for users to control their digital footprints.

Tech Optimizer

May 28, 2026

EDB Releases PGD 6.4 with Quorum Commit, Bringing True Distributed Consistency to Mission-Critical Postgres

EnterpriseDB (EDB) has released EDB Postgres Distributed (PGD) 6.4, featuring three key enhancements: Quorum Commit for cross-node consistency, integrated connection pooling via the native Connection Manager, and full replication support for PostgreSQL large objects. Quorum Commit ensures that all nodes in a cluster reach consensus before committing transactions, addressing issues with traditional replication. The integrated Connection Manager simplifies operations by eliminating the need for external pooling solutions and providing cluster-aware routing and automatic failover. The support for large objects allows for the management of diverse data types within a single database environment. PGD 6.4 is available as a stand-alone distribution and will be integrated into EDB Postgres AI in June.