research Archives

Tech Optimizer

October 16, 2026

NordVPN’s CTO on redefining antivirus for the AI era, and his dream security tool

NordVPN has introduced a new offering called "next-gen antivirus" (NGAV) to address evolving cybersecurity threats, particularly those from artificial intelligence. NGAV aims to redefine online security by protecting against sophisticated threats like socially engineered scams and phishing attacks, rather than just traditional viruses. It operates in the background, alerting users to potential scams, blocking ads and trackers, and removing malware without requiring extensive technical knowledge. The company recognizes that personal AI agents present a new cybersecurity challenge and is developing features to protect these agents. NordVPN has incorporated bespoke AI solutions into its NGAV, using efficient models that can identify phishing attempts while running locally on user devices. The company has also shifted to open-weight models to reduce costs while maintaining capabilities, although sensitive areas like payment processing remain unaffected by AI. Despite privacy concerns regarding AI, NordVPN has not faced significant pushback from customers about its AI features and emphasizes its commitment to not using customer data for model training. Briedis warns that over-regulation could hinder innovation in cybersecurity. Looking ahead, he envisions a comprehensive application that monitors users' digital environments and manages their data presence online, while NordVPN plans to focus on creating localized solutions rather than hardware development.

AppWizard

October 16, 2026

Meta’s enterprise AI pitch is strongest inside WhatsApp, Instagram and Messenger

The Meta Enterprise Platform, unveiled on September 28, includes four products: Muse, Meta Business Agent, Muse API, and Muse Code, aimed at enhancing business operations with AI. CJ Desai leads the new business unit, which focuses on providing AI agents and developer tools. The Meta Business Agent has been operational since June, automating customer interactions across WhatsApp, Instagram, and Messenger, while Muse was launched on September 8 as a personal AI agent. Muse API offers programmatic access to Meta's AI models, and Muse Code is a developer tool for coding tasks. Analysts emphasize Meta's advantage in customer messaging due to its ownership of popular communication channels, but also note concerns about its credibility in the enterprise space, given its lack of foundational business systems. The discontinuation of previous products like Workplace and Horizon Workrooms raises questions about Meta's commitment to enterprise solutions. The platform's pricing strategy may leverage Meta's computing resources, but organizations need to evaluate its effectiveness based on cost per completed tasks. Initial feedback from marketing professionals highlights potential benefits of the Muse platform for smaller enterprises.

Winsage

October 16, 2026

Faster protection, fewer interruptions: How Microsoft Edge is rethinking updates

Microsoft Edge is developing a seamless-updates prototype that allows security updates to be applied without interrupting users' work. Currently, the browser has a Restart to update on idle feature that applies updates when devices are not in use. The goal is to eliminate the need for users to click an update button, enabling background updates that do not disrupt ongoing tasks. Microsoft Edge can also issue patches independently of the Chromium release schedule for urgent security needs. Additionally, Security Update Alerts help organizations manage updates by notifying administrators about critical updates and vulnerabilities. These alerts are available for managed Windows devices through the Edge management service without additional licensing.

AppWizard

October 16, 2026

Malware Found Pre-Installed In Thousands Of Budget Android Phones – Here’s What We Know

A report from Bitdefender reveals a malware campaign named "Midnight Mimosa" affecting budget and midrange Android smartphones, particularly those using low-energy MediaTek chipsets. This malware, embedded in devices marketed under various labels like Cubot and Doogee, operates through an application called "System" (package name com.android.system.lite) that displays hidden ads and can allow hackers to control the devices. Thousands of devices have been tracked with this malware, with 13% of affected devices located in Mexico, 8% in the United States, and less than 3% in Canada. The malware's source traces back to Android ODM Shenzhen Zediel. Additionally, Bitdefender identified 13 other ad fraud-related apps signed by the same entity that were previously available on the Google Play Store. Major manufacturers like Google, Motorola, and Samsung have security protocols to protect their firmware, unlike the affected budget brands.

AppWizard

October 16, 2026

Ledger unveils $849 device built to protect your phone

Ledger has introduced Ledger Atom, a security device designed to enhance the protection of sensitive digital activities while allowing the use of everyday applications. It operates on an open-source Android platform for regular apps and a security-focused operating system for sensitive operations, utilizing a secure element chip and a field-programmable gate array (FPGA) for communication between the two environments. Ledger Atom features an integration with OpenClaw, an AI agent platform, which allows AI agents to suggest actions but requires physical approval for sensitive operations. It includes a physical privacy switch that cuts power to the device's cameras and microphones, and supports GPG/OpenPGP encryption for messages. Ledger Atom is positioned as a quantum-ready signing device with post-quantum cryptography and anti-tampering measures. Reservations for a limited Founder’s Edition are open at a price of 9, with an expected launch in summer 2027, pending necessary certifications.

Tech Optimizer

October 16, 2026

New Botnet Puts Home PCs at Risk: AV-Comparatives Publishes Malware Protection Test

AV-Comparatives evaluated 20 consumer security products against 10,000 malware samples, focusing on the x47.c botnet, which emerged in October 2026 and is marketed by WraithTools. This botnet can steal sensitive information and turn infected devices into proxies for cybercriminals. Research indicates it can extract passwords, cookies, and data from AI service accounts. The U.S. Department of Justice noted the risk to freelancers and small businesses from such threats. In its September 2026 Malware Protection Test, AV-Comparatives found that 15 out of 20 products reached the highest protection tier, with six receiving the ADVANCED+ award: Bitdefender, ESET, G DATA, Kaspersky, Total Defense, and VIPRE. The testing revealed a reliance on cloud-based detection, emphasizing the need for consistent internet connectivity for optimal protection.

AppWizard

October 15, 2026

Google’s $5 AI plan is getting a major downgrade starting November 13

Starting November 13, 2026, Google AI Plus subscribers will no longer have access to Gemini Pro models within the Gemini app and AI Mode in Google Search on the monthly plan. Users will still have access to Flash models but must upgrade to the Google AI Pro subscription to use the Pro models, which will result in a fourfold increase in monthly costs. The current Google AI Plus plan will no longer include Pro features, which are essential for complex tasks. The Google AI Pro subscription offers additional perks, including YouTube Premium Lite and expanded cloud storage options.

AppWizard

October 15, 2026

Experts warn cheap Android phones are shipping with malware

Cybersecurity experts from Bitdefender have found that budget Android smartphones, such as the Doogee S200 X, Doogee Fire 3 Max, and Cubot KINGKONG X, may come pre-loaded with malware embedded in their firmware, posing significant security risks. This malware is introduced during the manufacturing process, particularly affecting devices with MediaTek chipsets. Thousands of users in around 150 countries, including Mexico, France, Italy, the United States, Germany, Brazil, and Spain, have been impacted. Bitdefender identified a network of 32 malicious applications disguised as legitimate utilities that generate fraudulent ad impressions. Some infected phones can function as residential proxies for criminal activities, including spam campaigns and DDoS attacks. Uninstalling the malicious app may not eliminate the infection if it is integrated into the system software, potentially requiring firmware-level remediation. Buyers of budget phones should research manufacturers' supply chain control and commitment to security updates.

Winsage

October 14, 2026

GLM’s 23 Windows Bug Finds Are Z.ai Building a Security Research Resume

Z.ai's GLM model identified 23 vulnerabilities in the Windows operating system, confirmed by Microsoft's Security Response Center (MSRC). This marks a significant advancement in commercial software security, demonstrating the model's autonomous capability in independent vulnerability discovery. Since the release of GLM-5.2, Z.ai has uncovered over 4,200 vulnerabilities across about 390 open-source projects, with over a thousand categorized as critical to high severity. Z.ai has established a public Security Disclosure Ledger to track its findings through a coordinated disclosure process. The confirmation of vulnerabilities by MSRC is notable due to the rigorous nature of their vulnerability triage operations. Z.ai's GLM-5.3 achieved a score of 84.5% on CyberGym, outperforming competitors like Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol. Reports indicate that NIST's AI safety division has flagged GLM-5.3 due to concerns about its cyber capabilities, particularly regarding the potential for modified versions to reduce safety features. Z.ai plans to continue targeting commercial software in its efforts.

Winsage

October 14, 2026

Canada could save millions by developing its own operating system instead of relying on Microsoft Windows

Canada is focusing on digital sovereignty in sectors like cloud computing and telecommunications, but the operating systems for government computers have received less attention. A study suggests that adopting a national, free, and open-source operating system could save Canada millions over the next decade and reduce reliance on U.S. technology providers. Currently, Microsoft Windows dominates the Canadian desktop market with a 63.75 percent share, costing the government over 0 million annually. Trust in U.S. technology has declined among Canadians, with 60 percent feeling they can never trust Americans the same way again. Open-source alternatives like Linux exist, which could be adapted into a national operating system based on Debian, allowing Canada to inspect and modify the code. Other countries, such as China and Germany, have developed their own operating systems, achieving significant savings. Transitioning to an open-source system would involve costs estimated between million and million over two years, compared to Germany's ZenDiS initiative. The projected gross savings from switching operating systems over ten years could range from 0 million to .13 billion, benefiting various sectors by reducing licensing fees and enhancing national security.