privacy and security Archives

AppWizard

September 25, 2026

Motorola just gave privacy fans a big reason to consider the Signature 27

Motorola's Signature 27 will be one of the first phones powered by Qualcomm's Snapdragon 8 Elite Extreme Gen 6 chipset. GrapheneOS has confirmed initial support for the Signature 27, expanding beyond Google Pixel phones. GrapheneOS is based on AOSP and focuses on privacy, with optional Google Play services running sandboxed. The Signature 27 features a revamped camera layout and includes premium enhancements such as Audio by B&O. Motorola has not disclosed the release date or pricing for the Signature 27.

Winsage

September 24, 2026

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Security researchers from Graz University of Technology in Austria have discovered significant vulnerabilities in the file notification systems of major operating systems: Android, Linux, macOS, and Windows. These flaws have existed for decades and can lead to the leakage of sensitive system information. The affected systems include inotify on Linux (since 2005), FileObserver on Android (since 2008), ReadDirectoryChangesW on Windows (since 2000), and FSEvents on macOS (since 2007). The vulnerabilities allow unprivileged users to monitor file events without explicit read permissions, enabling potential attacks such as inter-keystroke timing attacks and website fingerprinting. For example, on Linux, monitoring a readable directory can leak events on files that cannot be read, allowing attackers to achieve a 93.1% to 100% accuracy rate in monitoring keystrokes. Specific vulnerabilities include CVE-2025-68788 on Linux, which received a partial fix in December 2025, and issues on Android where FileObserver can bypass app storage isolation. On macOS, limited information is available due to a lack of bypasses for private directories, while on Windows, monitoring the root directory can reveal the full path of every accessed file, allowing real-time tracking of web activity with a 97.8% accuracy rate. Microsoft has described the issue as "by-design," which has faced criticism. The researchers propose stronger mitigations, such as disallowing monitoring of entire drives on Windows and introducing a permission system for file monitoring on Windows and macOS. Their findings will be presented at the ACM CCS 2026 conference in November in The Hague, Netherlands.

AppWizard

September 24, 2026

GrapheneOS just confirmed its first supported non-Pixel phone

GrapheneOS has announced that the Motorola Signature 27 will be its first supported device from Motorola. This decision was confirmed on social media, with GrapheneOS stating it would be the initial supported phone. The Signature 27 features Qualcomm’s Snapdragon 8 Elite Extreme Gen 6 chip and promises seven years of operating system and security updates. Key features include hardware memory tagging and enhanced secure-element integration. GrapheneOS aims to provide alternatives to Google’s Pixel phones while focusing on privacy and security. The announcement follows challenges GrapheneOS faced with Google regarding the Pixel 11 and access to certain Android APIs. Additionally, GrapheneOS is revamping its software ecosystem, including updates to its Messaging app and new privacy features.

AppWizard

September 19, 2026

Russia’s national messenger app Max found to contain backdoor capable of secret screen captures

Researchers have found that Max, a messaging app mandated by the Russian government, can secretly capture screenshots, access sensitive information, impersonate users, and inject code into other applications. Developed by VK, the app integrates messaging, banking, and government services. Since September 1 of last year, it has been preinstalled on new smartphones, following the blocking of WhatsApp and Telegram. Despite its reach, it is not widely used in political circles, with insiders indicating that compliance with its use is performative.

Winsage

September 18, 2026

How to measure and shrink the Windows search index

The initial storage cost of the search index on a fresh installation of Windows 11 is minimal, only a few megabytes. When a sizable work folder is added, the index expands, but it does not revert to its original size after the folder is removed. The search index is stored in Windows.db for Windows 11 and Windows.edb for Windows 10. Windows 11 has two indexing modes: Classic (default) and Enhanced, with Classic indexing Documents, Pictures, Music folders, and the Desktop, while Enhanced scans the entire PC. The index includes file names and content, allowing keyword searches. Users can measure their index items through Settings without special permissions, while file size requires administrative access via PowerShell. An index under 30,000 items is acceptable for average users, while performance issues may arise beyond 400,000 items, with a technical ceiling of one million items. In an experiment, the index grew from 462 items and 6.71 MB to 3,466 items and 18.66 MB after adding 3,000 text files, but remained at 16.81 MB after deleting those files. To reclaim disk space, users can exclude specific folders from indexing and rebuild the index, which can significantly reduce its size while retaining the same number of items.

AppWizard

September 8, 2026

GrapheneOS is ditching AOSP apps and building its own alternatives

GrapheneOS is an open-source Android-based operating system focused on security and user privacy, appealing to privacy-conscious users. It features an enhanced app sandbox, a privacy-first design for managing app permissions, and regular security updates. The operating system has gained attention on social media platforms like X and Mastodon, where users share tips and experiences, fostering a supportive community. This engagement allows for real-time feedback, collaborative problem-solving, and increased awareness of privacy and security topics.

AppWizard

September 8, 2026

Ohio Mobile ID Arrives in Google Wallet, Opening the Program to Android

Ohio residents with Android devices can now integrate their driver's license or state ID into Google Wallet as part of the state's Mobile ID program. This digital credential is a companion to the physical card, and users are encouraged to carry their plastic IDs. To add the credential, users can navigate through the Google Wallet app. The digital ID is accepted for age and identity verification at various businesses, state buildings, TSA checkpoints, and casinos in Ohio. It utilizes specialized readers for presentation and allows users to review shared data. The credentials are encrypted and can be remotely erased if the phone is lost or stolen. Participation in the program is voluntary and free, adhering to privacy and security standards. Governor Mike DeWine highlighted the convenience of this innovation, and vendors are expanding support for mobile driver’s licenses in multiple states.

AppWizard

September 8, 2026

7 Ways To Use Private Space On Your Android Device That Are Actually Helpful

Google's Private Space is a feature on Android devices that creates a secure environment for managing sensitive information. It allows users to lock banking apps, providing a secure vault that is hidden from the main interface and protected from malware and unauthorized access. Users can enhance security with a unique PIN or biometric authentication, and the space locks automatically when the smartphone is secured. Private Space also serves as a secure repository for personal documents, enabling users to move files like PDFs and IDs into it, ensuring they remain inaccessible until the space is locked. Additionally, Private Space allows users to separate personal and professional digital lives by logging into a different Google account, maintaining distinct emails, contacts, and calendar events. Users can install separate instances of messaging and social media apps within Private Space to manage multiple accounts securely. It also helps keep dating apps hidden, protecting users' privacy and personal data. When sharing devices, Private Space ensures personal data remains secure behind authentication. Lastly, it allows users to store data locally without syncing to the cloud, prioritizing privacy over convenience.

AppWizard

September 8, 2026

Google Wallet will now let you add physical transit cards and balances with NFC

Google has released version 26.35 of Google Play Services, which includes the ability to integrate physical transit cards into Google Wallet using NFC technology, allowing users to access public transportation with NFC-enabled Android devices. This feature requires an NFC chip in the device. The update also includes a redesigned “Add a card” success screen in the Wallet app. Additionally, Google has launched version 53.1 of the Google Play Store app, featuring a short description of key features for similar apps, the ability to see which devices have specific apps installed, and a new navigation bar for exploring interests. Users can access updates for Google System Services through their device settings or enable automatic updates.

AppWizard

August 31, 2026

Fake dating apps are being used to target Android users: How the new cyber scam works

India's cybercrime authorities have warned about the misuse of dating and adult-themed advertisements on social media platforms like Instagram and Facebook, which are being exploited by criminals to distribute malicious Android applications. These ads redirect users to external websites where they are prompted to download APK files, bypassing security measures of trusted app stores. The Indian Cybercrime Coordination Centre (I4C) has identified several malicious applications, including Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, and Vixa, and cautions against installing unfamiliar applications promoted through unsolicited ads. These apps may request sensitive permissions, such as access to SMS messages, contacts, photos, device storage, and Accessibility Services, which can allow fraudsters to access valuable information. Compromised devices can lead to financial fraud by intercepting OTPs and other verification details. The I4C recommends using trusted app stores, keeping Google Play Protect active, reviewing app permissions, and being cautious with social media ads. If a suspicious app is installed, users should restart their phone in Safe Mode to uninstall it, disable its permissions if necessary, and consider a factory reset if removal fails. Users who suspect fraud are encouraged to report incidents promptly.