report Archives

AppWizard

September 6, 2026

Google’s Scam Detection Doesn’t Support Your Android Phone? Try These 5 Apps

Google has introduced AI-powered scam call detection for Pixel phone users, analyzing incoming calls to alert users of potential scams. Not all Android devices support this feature. Various spam call prevention tools are available for Android users, including: - Truecaller: A leading app with a user-generated database for identifying spam calls, offering Caller ID in its free version. It may produce false positives. - Malwarebytes Scam Guard: Analyzes content like messages and links for scams, requiring manual submission for analysis and part of a premium package. - YouMail: Blocks known scam numbers for free, includes Caller ID, and uses AI for text message fraud detection. Some features require a paid plan. - Hiya Spam Blocker: Identifies suspicious calls with Caller ID and allows users to report dubious numbers. Paid plans offer automatic blocking and Call Screener features. - Should I Answer?: A free app that checks unknown numbers against a community-maintained database, providing reputation assessments based on user reviews. The methodology for compiling these apps focused on compatibility with various Android devices and essential features like Caller ID and automatic blocking, while also considering additional functionalities and accessibility.

Winsage

September 6, 2026

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has identified four previously undocumented programs associated with REVSTEALER, a Windows information stealer that persists on infected machines after self-deletion. The programs are ProManager, WinUpdate, SoftManager, and LockAppHost, each with distinct functionalities. ProManager steals wallet files and logs passwords, WinUpdate monitors the clipboard for cryptocurrency addresses, SoftManager acts as a reverse proxy, and LockAppHost executes a cryptocurrency miner after disabling Windows Update and Microsoft Defender. REVSTEALER has been marketed as a commercial infostealer since February 2026, exfiltrating sensitive data such as browser passwords, cookies, and cryptocurrency wallet information. It deletes itself after reporting its activities but leaves the four programs installed for persistence. These programs share build tradecraft with REVSTEALER, including the use of identical packers and runtime function resolutions. REVSTEALER primarily spreads through game-cheat lures and disguises itself as pirated software. It employs evasion techniques to resist analysis, including checking for sandbox environments and using indirect system calls. Users are advised to avoid unofficial software and to follow specific steps if infected, such as re-enabling Windows Update services and changing passwords. Indicators of compromise include SHA-256 hashes for REVSTEALER and its associated programs, as well as domains linked to their command and control servers.

Winsage

September 5, 2026

Microsoft engineer says “typing code is absolutely over,” and Windows 11 is already being built that way

David Fowler, an engineer with 18 years at Microsoft, claims that traditional software development methods are becoming obsolete, stating, “Typing code is absolutely over.” He has co-created technologies like SignalR and NuGet and currently leads Aspire, a toolchain for building distributed applications that emphasizes AI-driven development. CEO Satya Nadella noted that AI contributes to 20-30% of the code produced at Microsoft. While developers will still interact with code, manual typing is becoming less central, with a shift towards strategic software engineering tasks. Microsoft Research found that AI-generated suggestions in Visual Studio IntelliCode are often overlooked by developers. GitHub Copilot has evolved to autonomously perform tasks, including building Windows development environments as of February 2026. Linus Torvalds supports AI in Linux development, viewing it as a useful tool. A report from Veracode indicated that about 44% of AI-generated code contains known vulnerabilities, highlighting the need for oversight. Microsoft’s MDASH system uses AI for enhanced vulnerability assessments. Microsoft emphasizes native Windows development through the open-source WinUI 3 framework and provides resources for beginners using Copilot. Project Zenith aims to optimize Windows 11 for developers, supporting local AI-powered development. Fowler's statement signifies a transformation in developers' roles, focusing on strategic aspects rather than typing code, while the need for skilled software engineers remains essential.

AppWizard

September 5, 2026

NYC Council to grill Mamdani admin over use of influencers, encrypted messaging app

The City Council will examine Mayor Mamdani's administration's use of a secretive encrypted messaging channel for media relations, which connects nearly 200 social media influencers. This discussion is scheduled for a hearing on September 22. Queens Councilman Phil Wong plans to introduce legislation requiring influencers to label posts for city agency campaigns with a disclaimer stating “Paid for by NYC.” A report revealed that city officials communicated with influencers through a Signal app group titled “NYC Creators Announcements,” sharing updates and multimedia content. Some influencers received payment for their involvement, while others supported the mayor's agenda for personal growth. Concerns have been raised about the Signal chat potentially violating record-keeping regulations due to auto-deletion of messages. The identities of the influencers and details of their contracts remain undisclosed. Wong's proposed bill aims to reveal any undisclosed payments to influencers and raise questions about the integrity of the administration's use of external promoters. Critics argue that the administration's secrecy calls for greater transparency in public relations expenditures.

AppWizard

September 5, 2026

MapQuest expands to Android Auto amid rise in popularity

MapQuest is testing experimental support for Android Auto, announced on September 4, 2026, alongside a recent update that introduced a crowdsourced incident reporting tool and adjusted the default unit of measurement to metric. Users can report incidents like collisions and road closures. However, the Android Auto support is in beta, with early adopters reporting issues such as a zoomed-out map perspective and latency problems. MapQuest aims to solidify its position in the navigation app market and is addressing user concerns, with hopes for future updates to include public transit features.

Winsage

September 4, 2026

Microsoft says some users can’t open the Teams desktop client

Microsoft is addressing an issue (TM1466820) causing delays or preventing some users from accessing the Microsoft Teams desktop client on Windows systems, acknowledged on Thursday at 16:45 EDT. Affected users may experience loading failures or delays of up to two minutes and are advised to use the web or mobile versions of Teams as a temporary workaround. Microsoft is analyzing service logs and telemetry data to identify the root cause and has contacted some affected users for more information. Additionally, there is a separate issue (TM1466659) affecting Mac users, preventing them from joining Teams calls and meetings, confirmed on Sunday at 08:32 EDT. Microsoft is reassessing the cause of this disruption. Earlier this year, Microsoft resolved an issue blocking some Teams Free users from chats and calls. The company also confirmed a bug causing crashes and launch failures for Teams and New Outlook users after recent Windows security updates. Furthermore, there is an ongoing Exchange Online issue affecting multiple mailboxes, resulting in "Server busy" errors and delays in email communications with external domains.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

AppWizard

September 4, 2026

WhatsApp rolls out emergency fix for locked Android photo access bug

WhatsApp is rolling out a fix for a privacy vulnerability affecting Android users that could allow individuals with physical access to a locked device to view the owner's photos during a video call. The issue was identified by security researcher Jose Rodriguez, who demonstrated that an incoming WhatsApp video call could provide access from the lock-screen to the device's photo gallery without unlocking the phone. WhatsApp confirmed the implementation of a fix and noted that the issue is limited to situations where someone has physical access to the device. Rodriguez reported the vulnerability to both Meta and Google, receiving limited responses. Users are advised to update WhatsApp and adjust app permissions to enhance privacy.

AppWizard

September 4, 2026

It’s really starting to look like a new StarCraft game will be revealed at BlizzCon

BlizzCon 2026 is scheduled for September 12-13. Nexon is reportedly close to finalizing a deal to create a new game in the StarCraft series, following a long hiatus since StarCraft Remastered in 2017 and the last original installment, StarCraft 2, in 2010. There is skepticism within the StarCraft community regarding whether the new title will be StarCraft 3 or a shooter. The official StarCraft website has shown unusual activity, suggesting an imminent announcement. Additionally, there is an unexplained one-hour gap in the BlizzCon main stage schedule that fans speculate could be for a StarCraft reveal. Blizzard has also been reportedly developing its own StarCraft shooter since 2024. Recent hiring efforts and a major patch for StarCraft 2 have further fueled speculation about the franchise's future.

AppWizard

September 4, 2026

I4C warns against malicious Android apps from social media ads

The Indian Cyber Crime Coordination Centre (I4C) has issued an advisory about malicious Android applications disguised as adult-content apps, which are promoted through social media and distributed outside official app stores. The National Cybercrime Threat Analytics Unit (NCTAU) warned that these apps can compromise mobile device security by requesting sensitive permissions and may install additional software without user consent, leading to unauthorized financial transactions. Users are advised to download apps only from trusted sources like the Google Play Store, avoid installing APK files from unverified sources, and refrain from granting accessibility permissions to untrusted applications. Recommendations include regularly reviewing installed apps, keeping Google Play Protect enabled, and monitoring bank accounts for unauthorized activities. Victims of cyber fraud are encouraged to report incidents via the national cybercrime helpline or the government’s reporting portal.