NewApp Digest
search bot

process

Researchers Use Windows Minifilter Drivers to Detect Ransomware in Real Time
Tech Optimizer
February 10, 2026

Researchers Use Windows Minifilter Drivers to Detect Ransomware in Real Time

A security researcher has developed a proof-of-concept tool called Sanctum, available on GitHub, aimed at combating ransomware within the Windows operating system. Sanctum utilizes a Windows feature known as a "filter driver" to monitor file operations at a strategic chokepoint between applications and the hard drive. It employs two primary callbacks: IRPMJCREATE, which detects rapid file write or delete requests indicative of ransomware activity, and IRPMJSET_INFORMATION, which identifies changes in file metadata, such as renaming with malicious extensions. Upon detecting suspicious activity, Sanctum blocks the action and identifies the source of the threat, logging events for security teams. Future enhancements may include real-time encryption detection and the ability to freeze malicious threads. This kernel-level approach offers greater visibility and speed compared to traditional antivirus solutions.
GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection
Tech Optimizer
February 10, 2026

GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection

GuLoader, also known as CloudEye, is a downloader malware that has been active since late 2019, primarily used to fetch and install secondary malware like Remote Access Trojans (RATs) and information stealers. It employs legitimate cloud services such as Google Drive and Microsoft OneDrive to host its malicious payloads, allowing it to evade detection by security tools. GuLoader utilizes advanced techniques including polymorphic code, which alters its appearance to avoid static detection signatures, and exception-based control flow to confuse analysis tools. Over the years, GuLoader has refined its tactics, including the use of software breakpoints and various exception types to redirect its operations. It also employs dynamic XOR encryption to obfuscate internal data, making it difficult for analysts to extract URLs. The malware's continuous evolution poses ongoing challenges for security researchers. Indicators of Compromise (IOCs) include specific hash values for different versions of GuLoader from 2022 to 2024.
Google's sentimental Gemini Super Bowl ad is a visionary showcase for your projects
AppWizard
February 10, 2026

Google’s sentimental Gemini Super Bowl ad is a visionary showcase for your projects

Google's latest Super Bowl advertisement showcases its advanced AI tool, Gemini, through a narrative of a mother and son preparing to move into a new home. The ad demonstrates Gemini's image generation capabilities by retrieving cherished photos and visualizing their future space. The Super Bowl LX will air on February 8 at 6:30 PM ET on NBC. Additionally, the ad highlights a feature called Nano Banana, an intuitive image editing tool that allows users to create scenes by combining elements from various photos. Google also launched Gemini 3 last year, enhancing the AI's understanding and reasoning abilities. The advertisement aims to illustrate the practical applications of AI in helping individuals visualize their aspirations.
Microsoft is keeping Secure Boot alive with Windows updates
Winsage
February 10, 2026

Microsoft is keeping Secure Boot alive with Windows updates

Microsoft is enhancing the security of Windows devices by replacing boot-level security certificates that are nearing expiration, with this initiative integrated into regular Windows platform updates. The original Secure Boot certificates from 2011 will expire between June and October 2026, prompting Microsoft to issue new certificates in 2023, which are included in many new Windows devices sold since 2024. Older hardware will require updates to remain compliant. Devices with expired certificates will continue to operate but will enter a "degraded security state," potentially hindering future updates and causing compatibility issues. The new Secure Boot certificates rollout began with the Windows 11 KB5074109 update. Most Windows 11 users will have the new certificates installed automatically, while specialized systems may have different update protocols. Windows 10 users must enroll in Microsoft’s Extended Security Updates to receive the new certificates.
Your Android phone feeling slow? My 4-step refresh routine works wonders every time
AppWizard
February 10, 2026

Your Android phone feeling slow? My 4-step refresh routine works wonders every time

To enhance the performance of an aging Android device without rooting, follow these steps: 1. Delete unused apps by navigating to Settings > Storage > Apps. 2. Clear additional storage by offloading photos to an external drive or cloud storage and clearing app cache via Settings > Storage > App > Clear Cache. 3. Check for updates by going to Settings > General > System Update and updating apps through the Google Play Store. 4. Adjust animation speed by enabling Developer options (Settings > About phone > Tap on Software information > Tap Build number seven times) and modifying the Window animation scale to 0.5x, along with Transition animation scale and Animator duration scale for improved responsiveness.
Windows shortcut weaponized in Phorpiex-linked ransomware campaign
Winsage
February 10, 2026

Windows shortcut weaponized in Phorpiex-linked ransomware campaign

The Global Group has shifted to a local execution strategy for ransomware, complicating detection and response efforts. Their infection process begins when a user opens a shortcut file with a double extension (e.g., “Document.doc.lnk”), which appears as a legitimate document due to Windows' default settings that hide file extensions. The shortcut icon mimics that of a Microsoft Word file. When executed, the .lnk file activates Windows utilities like cms.exe and PowerShell to retrieve and execute the next-stage payload, effectively bypassing traditional security controls focused on malicious documents or executable attachments.
Your Windows PC has a secretly useful backup tool - here's how to access it
Winsage
February 10, 2026

Your Windows PC has a secretly useful backup tool – here’s how to access it

Windows Backup is a built-in feature in Windows that allows users to back up specific folders and files, as well as create a complete system image. Backups can be directed to various media, including CDs, DVDs, external hard drives, or network locations, and users can schedule backups to run at regular intervals. However, Windows Backup has been deprecated by Microsoft and is no longer supported or updated, which may lead to occasional issues. A newer tool also named Windows Backup exists, designed for backing up and restoring specific files and settings for PC transitions. Users should prepare their storage media, typically external drives with 16GB to 32GB of space, before using the older Windows Backup. Restoration options include returning files to their original location or a different one, depending on the situation. Despite its deprecated status, Windows Backup remains functional and is considered a valuable tool for users seeking a built-in backup solution.
Search