NewApp Digest
search bot

publication

CertiK Launches AI Skill Scanner, An Antivirus Software for the AI Age
Tech Optimizer
May 28, 2026

CertiK Launches AI Skill Scanner, An Antivirus Software for the AI Age

CertiK has launched the CertiK Skill Scanner, a security solution designed to protect AI Agents and third-party AI Skills. It targets AI Skill marketplaces, enterprises, developers, and users, focusing on identifying risks during execution, particularly in financial transactions. The scanner can be integrated into publishing pipelines for automatic reviews and provides a scored assessment of risks with verdicts of “pass,” “warn,” or “fail.” It boasts a 90.5% precision rate in identifying security risks. The scanner is already deployed in select Web3 environments and aims to expand its integrations. CertiK, founded in 2017, is a leading Web3 security service provider, having worked with over 5,000 enterprise clients, including Binance and Ant Group.
Your PC’s trust in Windows has an expiration date
Winsage
May 27, 2026

Your PC’s trust in Windows has an expiration date

Microsoft will change Secure Boot certificates in June 2026, impacting Windows 11 PCs. If users do not update the certificates, their PCs may still function but will lack critical boot updates and malware blacklists, potentially compromising security. Without the new certificates, systems cannot run the latest Windows Boot Manager, making them vulnerable to bootkit malware and hindering future Windows feature updates. Older computers using BIOS are exempt from this issue. The new Secure Boot certificates are valid until 2038. Users can check their Secure Boot status in the Windows Security app; a green circle indicates readiness for the deadline.
A Windows 11 bug blocks all updates since February. Here's what to do
Winsage
May 21, 2026

A Windows 11 bug blocks all updates since February. Here’s what to do

A segment of Windows 11 users has been unable to receive updates since February due to issues stemming from the January Preview Update, which caused download timeouts. This has resulted in missed security patches and critical updates related to Secure Boot certificates. Users may experience crashes during the update process, indicated by the error code 0x80010002. To check if affected, users can view their update history in Settings; if no updates have been installed since January and updates have not been paused, they are likely impacted. Microsoft is working on a fix linked to download timeout changes and firewall settings. A Known-Issue Rollback (KIR) can be executed to revert to a previous state before the problematic update, restoring normal functionality. This rollback is available for specific Windows 11 versions and Windows Server 2025.
PostgreSQL Flaws Expose Databases to Remote Code Execution and SQL Injection
Tech Optimizer
May 21, 2026

PostgreSQL Flaws Expose Databases to Remote Code Execution and SQL Injection

PostgreSQL has released versions 18.4, 17.10, 16.14, 15.18, and 14.23 to address 11 security vulnerabilities and over 60 bugs. The vulnerabilities affect PostgreSQL versions 14 through 18 and include issues such as remote code execution, SQL injection, and denial-of-service risks. Specific vulnerabilities include: - CVE-2026-6472: Missing authorization in CREATE TYPE allows query hijacking. - CVE-2026-6473: Integer wraparound leads to out-of-bounds writes and server crashes. - CVE-2026-6474: Format string issue leaks server memory. - CVE-2026-6475: Symlink attack allows overwriting arbitrary files. - CVE-2026-6476: SQL injection allows execution of arbitrary SQL as superuser. - CVE-2026-6477: Memory buffer overwrite via libpq lo_* functions. - CVE-2026-6478: Timing attack exposes MD5-hashed passwords. - CVE-2026-6479: SSL/GSS recursion flaw allows denial-of-service. - CVE-2026-6575: Buffer over-read leaks memory data (PostgreSQL 18 only). - CVE-2026-6637: Refint module enables stack overflow and SQL injection, leading to possible RCE. - CVE-2026-6638: SQL injection in REFRESH PUBLICATION via table names. Organizations are advised to upgrade to the latest versions, avoid MD5 password authentication, restrict privileges, audit extensions, and monitor for abnormal activity. PostgreSQL 14 will reach its end-of-life on November 12, 2026.
Google can now vibe-code you an Android app
AppWizard
May 20, 2026

Google can now vibe-code you an Android app

Google has enhanced its coding platform, AI Studio, allowing users to create native Android applications. Developers can prompt the system and preview their apps through an integrated Android emulator, with an option to install on actual devices via a connection to an Android phone. The initial rollout focuses on "personal utility" apps, "hardware-enabled experiences," and "AI-powered experiences" using the Gemini API. Google maintains that all applications must adhere to existing review processes and quality benchmarks before publication on Google Play. Additionally, Google has released a 1.0 version of its command-line interface for building Android applications and plans to integrate app recommendations into Gemini queries, along with a short-form video feed titled "Play Shorts" for user engagement.
Search