NewApp Digest
search bot

report

PDFSIDER Malware Actively Used by Threat Actors to Bypass Antivirus and EDR Defenses
Tech Optimizer
January 19, 2026

PDFSIDER Malware Actively Used by Threat Actors to Bypass Antivirus and EDR Defenses

PDFSIDER is a sophisticated backdoor malware that bypasses modern endpoint detection and response systems. It is distributed through targeted spear-phishing campaigns that exploit vulnerabilities in legitimate PDF software. The malware is delivered via spear-phishing emails containing ZIP archives with a trojanized executable disguised as the PDF24 App. When executed, it uses DLL side-loading to load a malicious DLL (cryptbase.dll) alongside the legitimate PDF24.exe, allowing attackers to execute code without detection. PDFSIDER establishes encrypted command-and-control channels using the Botan 3.0.0 cryptographic library with AES-256 in GCM mode and operates mainly in memory to minimize detectable artifacts. It collects system information and executes commands through hidden cmd.exe processes. The malware employs advanced techniques to evade detection in sandbox and virtual machine environments, including checks for available RAM and debugger presence. Indicators of compromise include the malicious file cryptbase.dll and various clean files associated with the legitimate PDF24 application. Organizations are advised to enforce strict controls on executable files, provide user awareness training, and monitor DNS queries and encrypted traffic to detect PDFSIDER communications. The malware's behavior aligns with tactics used in state-sponsored espionage rather than financially motivated cybercrime.
Actor Jason Momoa says ‘Minecraft’ sequel to go into production ‘very soon’
AppWizard
January 18, 2026

Actor Jason Momoa says ‘Minecraft’ sequel to go into production ‘very soon’

Actor Jason Momoa announced that production for the sequel to A Minecraft Movie is set to begin by the end of April. He expressed excitement about the script, stating it is better than the original. Director Jared Hess will return for A Minecraft Movie 2, with a screenplay co-written by Hess and Chris Galletta. The sequel is scheduled for release on July 23, 2027. The original film was Warner Bros’ third-largest opening of all time.
Valve's new Steam AI disclosure cares about what you actually see, stressing that behind-the-scenes dev tools are "not the focus"
AppWizard
January 17, 2026

Valve’s new Steam AI disclosure cares about what you actually see, stressing that behind-the-scenes dev tools are “not the focus”

Valve has updated the declaration form for game submissions to Steam, emphasizing the need for developers to disclose any AI-generated content that is "consumed by players," including art assets, music, writing, and marketing materials. This change shifts the focus from development tools to the actual content delivered to players. Developers are required to declare AI-generated elements such as artwork, sound, and narrative. Valve has maintained a separate check for games using AI to generate content or code during gameplay, allowing players to report inappropriate content and holding developers responsible for safeguarding against such issues. The update clarifies the use of AI in game development without completely overhauling the previous guidelines.
Tired of Copilot? Winslop lets you easily purge Windows 11's AI features
Winsage
January 17, 2026

Tired of Copilot? Winslop lets you easily purge Windows 11’s AI features

A new application named Winslop has emerged for Windows 11, allowing users to remove AI features like Copilot that they find unnecessary. Winslop operates locally on users' systems and provides a user-friendly interface to identify and eliminate these functionalities. It has received positive feedback for effectively removing Copilot prompts and other AI elements, enabling a more traditional computing environment. Winslop is not an official Microsoft product, and users are advised to proceed with caution as it operates outside of Microsoft’s ecosystem. It follows the release of another tool, FlyOOBE, which was also designed to disable Copilot functionalities. Discussions at CES 2026 indicated that many PC manufacturers recognize the confusion caused by AI for consumers, suggesting a potential shift away from AI-centric devices. Microsoft CEO Satya Nadella highlighted the importance of balancing innovation with user preference in technology.
Easterly helms RSAC, Windows update problems, Police Copilot gaffe
Winsage
January 16, 2026

Easterly helms RSAC, Windows update problems, Police Copilot gaffe

Jen Easterly has been appointed as the new Chief Executive Officer of the RSA Conference. She is a cybersecurity expert and former Director of the Cybersecurity and Infrastructure Security Agency (CISA). Palo Alto Networks has released security updates for a vulnerability (CVE-2026-0227) with a CVSS score of 7.7 affecting its GlobalProtect Gateway and Portal, which can cause a denial-of-service condition in PAN-OS software. The January 2026 security update from Microsoft has caused connection and authentication failures in Azure Virtual Desktop and Windows 365, affecting users across various Windows versions. Microsoft is working on a resolution. The chief constable of West Midlands Police acknowledged an error by Microsoft’s Copilot AI in generating a fictional intelligence report. Microsoft has not confirmed Copilot's involvement. Britain’s National Cyber Security Centre (NCSC) has collaborated with Five Eyes partners to provide guidance on securing industrial operational technology, highlighting risks associated with remotely monitored systems. Kyowon, a South Korean conglomerate, confirmed a ransomware attack on January 10 that may have compromised customer information, affecting approximately 5.5 million members. Researchers at Varonis have identified a new attack technique called "Reprompt" that allows data exfiltration from Microsoft Copilot via a malicious link, exploiting a Parameter 2 Prompt (P2P) injection technique. Central Maine Healthcare is notifying over 145,000 patients about a data breach that compromised personal, treatment, and health insurance information, discovered on June 1.
Microsoft Ends Windows Server 2008 Support on January 13, 2026
Winsage
January 16, 2026

Microsoft Ends Windows Server 2008 Support on January 13, 2026

Microsoft has officially ceased all support for Windows Server 2008 as of January 13, 2026, including paid extended security updates. This end-of-life scenario poses significant security risks for organizations still using the outdated operating system, making them vulnerable to cyberattacks. The transition away from Windows Server 2008 requires careful planning, as many organizations face challenges in migrating legacy applications to modern systems. The lack of ongoing patches means that any new vulnerabilities will remain unaddressed, potentially leading to data breaches and compliance failures, particularly in regulated sectors like healthcare and finance. Microsoft has encouraged migration to Azure, offering incentives for early adopters, but the transition can be complex and costly. The end of support also affects global supply chains and compatibility with newer software applications. Organizations are advised to conduct audits of their software portfolios and consider hybrid environments to enhance flexibility and security.
Search