protections Archives

AppWizard

July 25, 2026

GitHub ordered to remove decentralized messaging app Bitchat in India

India's Ministry of Home Affairs has ordered GitHub to remove repositories related to Jack Dorsey's Bitchat application, citing concerns that the platform could allow users to bypass internet shutdowns and evade surveillance. The directive targets the software itself rather than specific unlawful content, referencing Section 79(3)(b) of the Information Technology Act, 2000, and requires compliance within three hours to avoid legal repercussions for GitHub. The repositories in question are: - github.com/permissionlesstech/bitchat - github.com/permissionlesstech/bitchat-android - github.com/permissionlesstech/bitchat-android/releases Bitchat is a decentralized messaging app that operates over Bluetooth mesh networks, which does not require internet access and facilitates anonymous communication. The app's design includes features like end-to-end encryption and no mandatory user registration. The Indian Cyber Crime Coordination Centre (I4C) claims the app could be misused for illegal activities and cites local laws as justification for the takedown. The order comes amid ongoing protests in New Delhi, where internet access has been suspended. The Internet Freedom Foundation has criticized the order as unconstitutional and has called for its retraction. It is currently unclear if GitHub will comply with the takedown request.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

AppWizard

July 22, 2026

Messenger Interoperability: Well-Intended, but Bad for Data Privacy

WhatsApp began supporting third-party messaging services in late 2025 in compliance with the EU's Digital Markets Act (DMA), which requires major tech companies to enable interoperability with alternative chat platforms. Threema has chosen not to implement interoperability with WhatsApp, citing concerns over user privacy and security, as differences in user identification methods could lead to compromises that weaken privacy protections. Threema believes that interoperability could reinforce WhatsApp's market dominance, reducing the incentive for users to adopt the Threema app. Additionally, Threema's business model relies on app sales for revenue, and a drop in downloads due to interoperability could threaten this model. Consequently, Threema has decided against pursuing interoperability with WhatsApp to maintain its commitment to privacy and security.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

Tech Optimizer

July 20, 2026

Don’t bog down your PC with extra antivirus protection

A 75-year-old reader experienced slow internet despite upgrading to a 2-gigabit connection and a new router. She suspected that the Zone Alarm antivirus software she installed with her new laptop might be causing the issue. After being advised to uninstall Zone Alarm, she reported improved internet performance. The situation highlighted that third-party security software can hinder performance, and it's important to manage security software properly to avoid conflicts.

Winsage

July 20, 2026

July 2026 Patch Tuesday: KB5101650 Windows 11 Update

On July 14, 2026, Microsoft released cumulative update KB5101650 for Windows 11 versions 25H2 and 24H2, addressing OS Builds 26200.8875 and 26100.8875. This update includes essential security fixes, updates to Secure Boot certificates, and enhanced Remote Desktop Protocol (RDP) defenses against phishing attacks. It consolidates July 2026's security content, addressing known vulnerabilities and introducing functional improvements. The update is critical for minimizing exposure to identified threats and is prioritized for systems managing remote access or nearing certificate expiration. The update enhances Remote Desktop security by supporting SHA-2 certificate thumbprints while retaining SHA-1 for legacy compatibility. It includes new Group Policy options to mitigate phishing risks associated with malicious .rdp files. The curl upgrade to version 8.21.0 incorporates security patches for command-line tools in Windows environments. Secure Boot certificates are automatically updated through Windows updates, ensuring boot security across various hardware. KB5101650 installs primarily through the Windows Update interface, requiring a restart to activate changes. Enterprise environments can use the Microsoft Update Catalog for manual distribution. A temporary restriction affects certain Dell devices with Intel Innovation Platform Framework drivers, which Microsoft plans to address in a future update. The cumulative update resolves a total of 622 Microsoft CVEs, including 416 affecting Windows components. Users are advised to verify and install the update promptly to secure the full suite of improvements.

Tech Optimizer

July 15, 2026

Can Chromebooks Get Viruses? How to Protect Your Device

Chromebooks are designed with robust security features, including sandboxing, Verified Boot, automatic updates, data encryption, and Recovery Mode, which collectively reduce the risk of malware infections. However, they are still vulnerable to threats such as malicious Chrome extensions, scam Android apps from third-party stores, phishing attacks, and risks associated with using Developer Mode and cloud storage. Users can identify potential malware through signs like slow performance, unexpected pop-ups, and unusual battery drain. To remove malware, users should eliminate suspicious extensions, uninstall dubious apps, run antivirus scans, enable Google Play Protect, or perform a Powerwash to reset the device. To protect their Chromebooks, users should avoid Developer Mode, check app permissions, use two-factor authentication, verify website URLs, and use a VPN on public Wi-Fi.

TrendTechie

July 11, 2026

Assassin’s Creed Black Flag Resynced слили на торренты до выхода

Assassin's Creed IV: Black Flag Resynced was leaked on torrent sites on July 8, shortly after the PC pre-load became available. The developers mistakenly released an unencrypted build, which was accessed by the piracy community using a hypervisor to bypass Denuvo's protections. The official PC launch is scheduled for the evening of July 9, while console players can access the game at midnight on July 9, local time. Running the pirated version may require disabling Windows security features, which could risk system integrity.

Winsage

July 10, 2026

Microsoft is rewriting Windows patch guidance because of AI

Microsoft advises organizations to expedite their Windows update deployment timelines due to advancements in artificial intelligence that allow cyber attackers to quickly exploit vulnerabilities after security updates are released. Jeremy Chapman, Director of Microsoft 365, warns that delaying critical quality updates with security fixes increases the risk of exploitation. Microsoft recommends a quality update deferral period of fewer than three days, update deadlines of zero or one day, and a grace period of no more than two days. The Windows Autopatch report within Microsoft Intune helps identify unpatched devices, allowing administrators to adjust update deferral policies. Organizations can configure update delivery settings through policy controls in Windows Autopatch and Microsoft Intune, as well as other management tools like Microsoft Configuration Manager and Windows Server Update Services. Microsoft also promotes the use of Hotpatch for quicker installation of security updates without rebooting and encourages Conditional Access policies to restrict access to corporate resources for devices that lack required updates.

Winsage

July 10, 2026

Microsoft confirms Secure Boot update failing on some Windows 11 PCs, promises a resolution

Microsoft has acknowledged that some Windows 11 PCs are facing issues with Secure Boot certificate updates, which may fail to install or be blocked. The company is working with PC manufacturers to develop a patch, while users may need to take proactive measures if their certificates are obstructed. Microsoft has temporarily halted the rollout of Secure Boot for certain devices due to complications, and affected users will receive detailed error messages in the Windows Security app regarding their Secure Boot certificates. Secure Boot certificates issued in 2011 have expired, and Microsoft is replacing them with new certificates issued in 2023. Most modern hardware is already utilizing the new certificates, but some devices may have disabled Secure Boot or faulty firmware. Users can check their Secure Boot status in the Windows Security app. HP has confirmed that Secure Boot updates are being blocked on some of its PCs due to a BitLocker issue, which prevents the installation of new certificates. Microsoft has paused Secure Boot certificate updates for devices affected by known issues while collaborating with manufacturers to identify specific devices or firmware complications. A firmware update will be necessary for affected devices, but it is not yet available. The majority of PCs have received the Secure Boot certificates via Windows Update, but compatibility issues may prevent some devices from receiving the update. Older devices or those not among the OEM’s top-selling models may not receive updates if the UEFI firmware is unsupported. Secure Boot is a security feature required for Windows 11, preventing unauthorized software from executing at boot. While an expired Secure Boot certificate does not stop a PC from functioning, it may limit long-term security protection. Microsoft advises users not to disable Secure Boot, as it would compromise security further.