NewApp Digest
search bot

ports

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Winsage
September 2, 2026

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

An active malware campaign is using counterfeit software-download websites to distribute malicious installers, primarily targeting users seeking popular software. This campaign has significantly affected China-based operations of multinational corporations and Chinese-speaking users. The malware, once executed, can establish persistence, undermine security measures, and communicate with attacker-controlled infrastructure. Victims span various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. Microsoft associates this campaign with a Chinese threat cluster called Silver Fox, known for using spoofed vendor download pages to spread Gh0st RAT and ValleyRAT. The malicious websites are hosted on .com.cn and .hl.cn domains, featuring Chinese-language content. The downloaded files are dynamically generated, and upon execution, they deploy a wrapper installer that initiates the malware payload. The malware achieves persistence through scheduled tasks and interferes with Windows Update services. The campaign establishes command-and-control communication over non-standard ports, with two identified domains linked to the activity. Microsoft Defender has detected the threat and initiated containment procedures. Kaspersky reported a related malicious installer exploiting a legitimate adware application to execute a backdoor, which captures keystrokes and clipboard contents. ValleyRAT, a sophisticated implant, can collect system information, reboot the computer, capture screenshots, and transmit logs. The attackers are motivated by cyber espionage and financial gain, targeting organizations globally. A subgroup within GoldenEyeDog, known as CuboidalCanine, has also been linked to the use of ValleyRAT, particularly in the gambling industry. In June 2026, Chinese authorities addressed cybercrime cases involving a new variant of the Silver Fox trojan.
Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems
Winsage
September 2, 2026

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

An ongoing malware campaign is targeting Windows devices through counterfeit download pages for well-known software brands like Microsoft Edge, Kaspersky, and Razer. The campaign affects various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. It utilizes high-fidelity fraudulent websites that closely mimic legitimate vendors, with observed lure domains such as app-microsoft-edge[.]com[.]cn and kaspersky-lab[.]hl[.]cn. Attackers employ evasion tactics like server-side payload regeneration and create multiple copies of the same archive in quick succession. Victims are lured into downloading ZIP files that contain a bundled wrapper installer, which activates a stage-one executable in randomized directories. The malware often masquerades as legitimate software, with some payloads impersonating known applications. Persistence is achieved through scheduled tasks with unusual names, and the malware employs various evasion techniques, including deleting shadow copies and altering file permissions. Microsoft Defender has identified activity across multiple stages of the attack, including delivery, execution, and command-and-control communications. To mitigate risks, organizations are advised to block downloads from unofficial sources, enforce Tamper Protection, and implement Attack Surface Reduction rules. Indicators of compromise (IOCs) include specific lure domains and URLs associated with the campaign.
Connecting My LangGraph AI Agent to Postgres
Tech Optimizer
September 2, 2026

Connecting My LangGraph AI Agent to Postgres

A stateful LangGraph agent was developed to streamline a 15-minute booking process, mimicking a customer service representative. It features a user-friendly Streamlit UI and a backend powered by a Postgres database. The agent can respond to customer queries, calculate service prices, manage acceptance or rejection of services, propose appointment time slots, and confirm booking details. The agent operates in two persistence modes: in-memory for quick testing and Postgres for durability. Testing can be conducted locally with Streamlit or using Docker to simulate a production environment. Docker allows the application to interact with a PostgreSQL server without local installation, enhancing reproducibility. The project includes a docker-compose.yml file to initiate a PostgreSQL container, and users can also utilize a cloud-based Postgres solution. The application behavior remains consistent regardless of the database setup. The complete source code is available on GitHub for testing and further enhancements.
silver Android smartphone
Tech Optimizer
September 1, 2026

Connecting My LangGraph AI Agent to Postgres

A stateful LangGraph agent was developed to streamline a 15-minute booking process, featuring a user-friendly Streamlit UI and a backend powered by a Postgres database. The agent responds to customer queries, calculates service pricing, manages service acceptance, suggests time slots, and confirms appointment details. It operates in two modes: in-memory for rapid testing and Postgres for persistent storage. Testing can be done locally using Docker, which simulates a Postgres environment, or with a hosted Postgres instance. The project includes a docker-compose.yml file to initiate a PostgreSQL 16 container, allowing the application to connect to the database. Data persistence is ensured through Docker volumes, and the application can be run with specific commands after setting up the environment variables. The system has been tested successfully, demonstrating its ability to manage bookings and maintain data integrity across sessions. Future enhancements are planned to improve the booking workflow and integrate additional communication channels.
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
Tech Optimizer
August 31, 2026

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Silver Fox is linked to the distribution of a backdoor malware called ValleyRAT, disguised as the legitimate QN Wallpaper adware application. Once installed, ValleyRAT provides complete control over the compromised machine. The malware uses DLL sideloading to operate under the guise of a legitimate process, bypassing security measures. It disables Windows Defender and adds itself to autorun entries, and can mark its process as critical, causing system crashes if terminated. Kaspersky has identified specific indicators of compromise (IoCs) including hashes, command-and-control servers, and associated domains. In 2026, Kaspersky recorded over 100,000 detections of ValleyRAT affecting more than 1,500 unique users, mainly in China and India.
DLSS 5: Modders Push Leaked Neural Rendering Into 10+ More PC Games
AppWizard
August 30, 2026

DLSS 5: Modders Push Leaked Neural Rendering Into 10+ More PC Games

Modders have integrated Nvidia’s leaked DLSS 5 Neural Rendering library into over a dozen PC games, including Cyberpunk 2077 and GTA V, following its discovery in an early access build of NBA 2K27. The RenoDX Discord community reverse-engineered this feature and used tools like RenoDX and ReShade to apply the library to various games. Nvidia describes DLSS 5 as a significant architectural advancement in real-time neural rendering that enhances graphics with photorealistic lighting and materials. Modders have successfully applied the library to titles such as Control, Red Dead Redemption 2, and The Last of Us Part II Remastered. These modifications are unofficial and not sanctioned by Nvidia or the game publishers. Nvidia CEO Jensen Huang has defended the technology against criticism, emphasizing that it allows for artist oversight rather than being a generic AI filter. DLSS 5 is set to launch in fall 2026, with support confirmed from major industry players. All current comparisons and tests are based on the leaked build rather than official Nvidia code.
I test Windows laptops for a living, and these are the 7 features I can't pass up
Winsage
August 29, 2026

I test Windows laptops for a living, and these are the 7 features I can’t pass up

The author has spent five years testing laptops and has identified seven essential features for selecting a Windows laptop based on their experience and travel needs: 1. An OLED display for better contrast and deeper blacks. 2. A 14-inch chassis that is lightweight, ideal for travel. 3. At least 512GB of storage to accommodate large files. 4. At least one USB-A port for compatibility with older hardware. 5. All-day battery life, enhanced by Intel's "Lunar Lake" processors. 6. A backlit keyboard for usability in low-light environments. 7. No proprietary chargers, favoring USB-C for flexibility and convenience. The author notes that while many brands offer these features, pricing has been affected by the ongoing memory crisis, pushing preferred models into a higher price range.
Search