research Archives

AppWizard

September 30, 2026

GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws

GitHub Security Lab's open-source AI security agent identified 24 vulnerabilities in various Android applications, including critical flaws in the OsmAnd navigation app and the Wikipedia app for Android. The OsmAnd vulnerability allows a malicious app to silently import and replace settings, potentially enabling covert location tracking. The Wikipedia app's vulnerability involves inadequate hostname validation for deep links, allowing attackers to load malicious content and potentially take over user accounts. The research highlights the effectiveness of AI in identifying vulnerabilities while emphasizing the need for human validation. The GitHub Security Lab Taskflow Agent automates security research workflows, focusing on mobile entry points and evaluating them against Android-specific vulnerability classes. The findings stress the importance of expert review for AI-generated results.

Tech Optimizer

September 29, 2026

McAfee Overhauls Its Brand as AI Rewrites the Rules of Online Security

68% of consumers primarily associate McAfee with its antivirus software, despite the company offering additional services like scam detection and dark web monitoring. Awareness of these products is limited among consumers. McAfee is launching a rebranding initiative on September 29 to broaden awareness of its diverse offerings and strengthen its position in the cybersecurity market.

Winsage

September 29, 2026

AMD & Perplexity bring local AI to Ryzen Windows PCs

AMD and Perplexity have launched Portable Computer, a software solution for Windows PCs with Ryzen AI Max Series processors, enabling local AI tasks and workflow management for Pro and Max subscribers. This allows users to run extensive AI models on their devices without relying on cloud processing, enhancing privacy and conserving Perplexity Computer credits. The software integrates local models with agent orchestration, scheduling, and security controls, and connects with popular workplace applications like Gmail and Slack. AMD's AI PCs, introduced in 2023, feature a neural processing unit that allows local AI operations alongside standard applications. This collaboration signifies a shift towards more AI processing on personal devices, aiming to automate tasks and improve user experience. Jack Huynh from AMD highlighted the transformation of PCs into intelligent partners, emphasizing the coexistence of local and cloud AI in their strategy.

AppWizard

September 29, 2026

How we found 24 Android vulnerabilities using our open source AI security agent

The GitHub Security Lab has introduced the Taskflow Agent, an open-source tool that uses artificial intelligence to automate the identification of vulnerabilities in Android applications. This tool allows security researchers to create custom taskflow prompts, leading to the discovery of over 20 vulnerabilities. To use the taskflows, a GitHub Copilot license is required, and users can run scripts to audit their projects, with results displayed in an SQLite viewer. Two specific vulnerabilities identified include: 1. OsmAnd app allows malicious applications to track user locations due to improper handling of intent extras in its exported activity. 2. The Wikipedia app has a logic flaw that enables attackers to redirect users to malicious sites via a deeplink mechanism, potentially leading to account takeovers. The GitHub Security Lab has reported a total of 24 vulnerabilities in Android applications, highlighting the effectiveness of AI in security research.

Winsage

September 28, 2026

Your PC can get Windows 11 Pro and seven Office apps for just $25.99

A bundle is available that includes Windows 11 Pro and Microsoft Office Professional Plus 2019 for .99, reduced from a regular price of 9. The bundle provides lifetime licenses for both software, designed for a single Windows PC, and does not require a recurring Microsoft 365 subscription. Windows 11 Pro includes features like BitLocker, Hyper-V, and Windows Sandbox, while Office Professional Plus 2019 includes Word, Excel, PowerPoint, Outlook, OneNote, Access, and Publisher. Office 2019 will no longer receive support after October 2025, and Publisher will lose support by October 2026. Windows 11 Pro requires specific hardware compatibility, including TPM 2.0, which can be checked using Microsoft's PC Health Check tool.

AppWizard

September 28, 2026

PS5 emulator successfully runs six titles at a playable 60 FPS — PS5 emulation continues to gather momentum as developers improve shader translation and Vulkan support

Developers of SharpEmu, an experimental open-source PS5 emulator, have achieved playable frame rates of 60 FPS for six out of 55 tested PS5 titles. The six titles that reached this milestone are Dreaming Sarah, Void Terrarium, New Joe & Mac: Caveman Ninja, Tetris Forever, Hoa, and Tomb Raider IV-VI Remastered. This achievement coincides with the release of SharpEmu v0.0.4-release.2, which includes improvements such as enhanced SPIR-V shader translation and updated Vulkan API support. SharpEmu is compatible with Windows, Linux, and macOS, and utilizes Vulkan and MoltenVK for graphics API calls. The emulator leverages the PlayStation 5's AMD Zen 2 x86-64 CPU to execute console CPU instructions natively on PCs. Currently, only 12 of the 55 tested titles are in a game-ready state, with six playable at 60 FPS. SharpEmu is intended for research and educational purposes and does not include copyrighted system firmware or game data. Additionally, another emulator, KytyPS5, has run the PS5 version of GTA V at approximately 40 to 60 FPS, though it experienced crashes after the opening mission.

AppWizard

September 28, 2026

Crimson Desert Enhanced Nominated for Two Golden Joystick Awards

Crimson Desert Enhanced has received nominations for PC Game of the Year and Best Soundtrack at the Golden Joystick Awards 2026. It ranks second in cumulative sales in the 2026 U.S. video game rankings and is the top new intellectual property in Steam revenue for the year. Voting for the awards is open until October 23, with winners announced on November 11 in London. Additionally, the first downloadable content (DLC) for the game will launch on October 16.

Tech Optimizer

September 25, 2026

Norton 360 for Gamers vs Bitdefender vs Malwarebytes [2026]

Norton, Bitdefender, and Malwarebytes have adjusted their antivirus products to mitigate the negative effects on gaming performance. In June 2026, Norton 360 and Bitdefender Total Security both received a perfect AV-TEST score of 18 out of 18, while Malwarebytes achieved a 100% real-world protection rate in AV-Comparatives testing, though it had more false positives. Bitdefender Total Security is recommended for gamers due to its low frame-rate impact of 0-2%, while Norton 360 offers features for streamers and competitive players, and Malwarebytes serves as a lightweight secondary scanner. The value of gaming accounts has increased, making them targets for cybercriminals, with malware campaigns like Vidar 2.0 accounting for 41% of gaming-related malware detections. New malware families such as Katz and Bee specifically target Discord and gaming platforms. In terms of performance, Norton showed a 2-3% FPS decrease in Cyberpunk 2077, while Bitdefender's impact was only 0-2%, and Malwarebytes had less than 1% impact. Norton and Bitdefender are tied in detection capabilities, both scoring 18/18 in AV-TEST, while Malwarebytes had a 92.4% offline detection rate and 98.3% online. Norton includes a no-log VPN and gamer-tag monitoring, while Bitdefender offers identity protection without specific gamer-tag monitoring. Malwarebytes lacks a VPN and password manager. Pricing varies, with Norton starting at .99 for three devices, Bitdefender at .99 for one device, and Malwarebytes at .99 for one device. To switch antivirus solutions, users should back up their license keys, use removal tools, and ensure game-aware modes are active. Each product has unique strengths: Norton excels in gamer-tag monitoring, Bitdefender minimizes CPU usage, and Malwarebytes is lightweight but lacks additional features.

Winsage

September 24, 2026

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Security researchers from Graz University of Technology in Austria have discovered significant vulnerabilities in the file notification systems of major operating systems: Android, Linux, macOS, and Windows. These flaws have existed for decades and can lead to the leakage of sensitive system information. The affected systems include inotify on Linux (since 2005), FileObserver on Android (since 2008), ReadDirectoryChangesW on Windows (since 2000), and FSEvents on macOS (since 2007). The vulnerabilities allow unprivileged users to monitor file events without explicit read permissions, enabling potential attacks such as inter-keystroke timing attacks and website fingerprinting. For example, on Linux, monitoring a readable directory can leak events on files that cannot be read, allowing attackers to achieve a 93.1% to 100% accuracy rate in monitoring keystrokes. Specific vulnerabilities include CVE-2025-68788 on Linux, which received a partial fix in December 2025, and issues on Android where FileObserver can bypass app storage isolation. On macOS, limited information is available due to a lack of bypasses for private directories, while on Windows, monitoring the root directory can reveal the full path of every accessed file, allowing real-time tracking of web activity with a 97.8% accuracy rate. Microsoft has described the issue as "by-design," which has faced criticism. The researchers propose stronger mitigations, such as disallowing monitoring of entire drives on Windows and introducing a permission system for file monitoring on Windows and macOS. Their findings will be presented at the ACM CCS 2026 conference in November in The Hague, Netherlands.

AppWizard

September 24, 2026

Ando wants to take on Slack with a team messaging app that lets humans and agents work together

In 2025, Sara Du identified challenges in integrating AI agents within communication platforms like Slack while assisting companies with MCP servers. She criticized the design of these platforms for treating AI agents as separate applications rather than team participants. Du proposed a solution to eliminate intermediaries between AI agents and teams, envisioning a system where agents could engage directly in conversations, understand decisions, ask questions, and autonomously notify humans when necessary. Du's startup, Ando, launched as a messaging platform that allows both human and AI workers to communicate seamlessly, featuring channels, direct messages, and live calls. Ando has raised a million in pre-seed and seed funding from firms like Accel and Index Ventures. Despite existing competition from platforms like Slack and Microsoft, Du sees potential for Ando to disrupt the market by focusing on AI agent integration. Currently, Ando works with clients in software, real estate, and finance across 15 countries, primarily small teams, and aims to expand its capabilities with the new funding.