privacy and security Archives

AppWizard

August 31, 2026

Fake dating apps are being used to target Android users: How the new cyber scam works

India's cybercrime authorities have warned about the misuse of dating and adult-themed advertisements on social media platforms like Instagram and Facebook, which are being exploited by criminals to distribute malicious Android applications. These ads redirect users to external websites where they are prompted to download APK files, bypassing security measures of trusted app stores. The Indian Cybercrime Coordination Centre (I4C) has identified several malicious applications, including Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, and Vixa, and cautions against installing unfamiliar applications promoted through unsolicited ads. These apps may request sensitive permissions, such as access to SMS messages, contacts, photos, device storage, and Accessibility Services, which can allow fraudsters to access valuable information. Compromised devices can lead to financial fraud by intercepting OTPs and other verification details. The I4C recommends using trusted app stores, keeping Google Play Protect active, reviewing app permissions, and being cautious with social media ads. If a suspicious app is installed, users should restart their phone in Safe Mode to uninstall it, disable its permissions if necessary, and consider a factory reset if removal fails. Users who suspect fraud are encouraged to report incidents promptly.

AppWizard

August 29, 2026

Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping

Google has introduced several network security enhancements in Android 17 to improve user privacy. One key feature is Encrypted Client Hello (ECH), which encrypts domain names to prevent external observers from monitoring user activities. ECH is integrated with private DNS and is enabled by default for apps using compatible networking libraries. Google claims to be the first major mobile operating system to implement widespread ECH support. Testing conducted by Jigsaw showed stable connection success rates and minimal interference across various networks. Additional security features in Android 17 include: - Local Network Protection, requiring apps to request permission before accessing devices on a user's home network. - Certificate Transparency, mandating public logging of certificates to detect forged ones. - A 2G Network Shutdown option for mobile operators to disable 2G services, reducing exposure to phishing messages.

AppWizard

August 28, 2026

Did A New Google ‘Pulse’ App Just Appear On Your Android Phone? Here’s What It Does

A new app called Pulse has been released on the Play Store, quickly reaching over 10 million downloads. It is an existing Google system service that became more visible in the settings app following a recent update and has been in place since March. Pulse may collect information related to app performance but does not share data with third parties. It can be accessed on Pixel devices through Settings > Google services > All services > Privacy & security > System services. Disabling system services like Pulse could disrupt features, so it is advisable to keep it installed. Pulse helps monitor resource usage in Android, including battery drain, memory usage, and CPU activity, and is part of Google's efforts to track issues within the operating system. Google plans to implement stricter measures against apps that excessively consume resources.

AppWizard

August 21, 2026

Google Pay and Apple Pay are finally coming to Walmart

Walmart is introducing contactless payments through a new feature called Tap to Pay, allowing customers to use digital wallets like Apple Pay and Google Pay at checkout. The rollout will begin on August 24, 2023, in Walmart and Sam’s Club locations across the U.S., with plans to have it available in all stores and clubs by the end of 2026, and at fuel stations by mid-2027. Walmart will continue to offer other payment options, including cash, chip cards, Walmart Pay, and Scan & Go. The shift to contactless payments responds to customer demand and the trend among retailers, enhancing privacy and security for shoppers by not sharing physical card numbers during transactions.

Winsage

August 21, 2026

Windows 11 is finally getting better privacy controls for cameras and mics

Windows users have a singular setting that allows all applications unrestricted access to the camera and microphone, raising privacy concerns. Microsoft has implemented more granular controls for applications sourced from the Microsoft Store, allowing users to customize permissions for those apps. However, applications obtained from other sources do not have these tailored settings, limiting users' options for safeguarding their privacy.

AppWizard

August 19, 2026

PixelReel Minecraft mod exposes Plex server API keys

A security vulnerability has been identified in the PixelReel mod for Minecraft, specifically in version pixelreel-1.0.0.jar and the 26.3 snapshots on CurseForge. This flaw exposes media server URLs and API keys to other players on the same multiplayer server. The mod requires users to process streams through VLC, which leads to the extraction and transmission of sensitive authentication details to Minecraft. The developer has admitted that the mod was created without a thorough security review. Users are advised to create a read-only account for use with PixelReel and to remove the mod from multiplayer environments. It is recommended that all exposed API keys be rotated, as no patch has been released to fix the vulnerability.

AppWizard

August 16, 2026

Google Adds Sweet New Security App Lock Feature in Surprise Pixel…

Google has introduced the Android 17 QPR2 Beta 3 update, featuring a new "App Lock" option for enhanced security on Pixel devices. Users can activate App Lock by long-pressing an app icon and selecting the option from the menu. This feature requires a fingerprint, facial recognition, or a designated pattern to access locked apps, adding a layer of protection for personal data. When enabled, notifications from locked apps are hidden, and associated widgets or shortcuts are removed from view. Users can manage App Lock settings within the settings menu, allowing them to toggle the feature on or off for individual apps.

AppWizard

August 11, 2026

Even the AI assistant inside Russia’s state-backed Max messenger tells users not to trust the app

Alisa, the AI assistant in the Max messenger, has recommended users consider alternative messaging platforms such as Telegram, Signal, or WhatsApp. She highlighted several security vulnerabilities in Max, including the absence of end-to-end encryption and the direction of user data to VK-owned servers. The data collected by Max includes IP addresses, activity timestamps, contact lists, device and browser types, internet service provider information, and various metadata. Alisa suggests that users keep Max on a separate device, referred to as a “maxphone,” to protect sensitive information. If used on personal devices, she recommends using the browser version and restricting the app's access to location services, contacts, microphone, and camera to enhance privacy and security.

AppWizard

August 6, 2026

Android Apps Share Location Data With Advertisers by Default

A recent investigation by the Electronic Frontier Foundation (EFF) revealed that many Android applications contain third-party code that automatically transmits users' precise location data to external companies, including advertisers and data brokers, once location permission is granted. There are no specific location permissions for Software Development Kits (SDKs) on Android, meaning that granting one app access allows all bundled components to access the same data. Developers may be unaware that their apps are configured to share location histories with external firms, as advertising SDKs often prioritize data collection for revenue generation. The EFF calls for advertising SDKs to stop making personal data sharing the default setting and urges developers to disable unnecessary data collection. Location data can reach data brokers, which may experience breaches, compromising user privacy and security. This situation poses hidden risks for investors in the mobile advertising sector, as legal challenges and reputational damage may arise from regulatory scrutiny of location data practices. The EFF emphasizes that app-level permissions do not provide meaningful consent for third-party data sharing, highlighting the value and risks associated with location data.

Winsage

August 5, 2026

How to Disable Windows Recall in Windows 11 Home and Pro

Microsoft's Windows Recall feature captures periodic snapshots of user screens on Copilot+ PCs with Neural Processing Units (NPUs) to create a visual timeline of digital activities. Users can pause, disable, or remove Windows Recall on Windows 11 Home or Pro, but system updates may reactivate it. Methods to disable Windows Recall include: 1. Settings Toggle: Users can turn off snapshot collection through the Privacy & Security settings and reset recorded history. 2. Windows Optional Features: Users can uninstall the Recall feature via the optional features menu. 3. Group Policy Management: Windows 11 Pro users can block Recall through the Group Policy Editor. 4. Registry Editor Modification: Windows 11 Home users can modify the registry to disable Recall, though this method carries risks. Each method requires specific steps and may necessitate a system restart to take effect.