risk Archives

AppWizard

September 8, 2026

Are Free VPNs for Android Actually Worth Using

A free VPN for Android can improve internet privacy, especially on untrusted networks, but it has limitations, such as not guaranteeing complete anonymity or security. The VPN creates an encrypted tunnel between the device and the server, protecting traffic from local monitoring but not ensuring overall security if poorly implemented. Changing your IP address does not guarantee anonymity, as account logins and tracking technologies can still identify users. Free VPNs may be suitable for low-risk tasks, like occasional browsing on public Wi-Fi, but they do not protect against malware or phishing. Providers often rely on alternative revenue sources, such as advertising or data sharing, which necessitates careful examination of their privacy policies. Free VPNs may have limitations like data caps, slower speeds, and fewer server options compared to paid services. Users should evaluate the provider’s background, privacy policy, permissions, and performance before installation. A paid VPN generally offers better reliability, support, and transparency, making it a safer choice for sensitive activities.

AppWizard

September 8, 2026

More Android apps could soon save you from sending accidental nudes

Google is enhancing Android's Photo Picker by integrating its on-device Sensitive Content Warning system, which aims to prevent users from unintentionally sharing explicit content like nudity through third-party applications. This system has already been implemented in Google Messages, where it detects and blurs explicit images and videos while keeping user data private. Recent code discoveries in the Android 17 QPR2 Beta 4 indicate that this feature will be integrated into the Photo Picker, allowing apps to check for nudity in selected media before sharing. This integration could help protect users, especially minors, from sharing inappropriate content and may include age-based restrictions for applications using the Photo Picker. However, users can still bypass these safeguards by sending images directly as files.

AppWizard

September 7, 2026

Xbox Cloud Gaming Caps Hours: 15 for Ultimate [2026]

On September 3, 2026, Microsoft announced that Xbox Game Pass subscribers will see a shift in cloud gaming access. Starting November 2026, unlimited cloud streaming will be replaced by a tiered hour bank system: 15 hours for Ultimate, 10 for Premium, and 5 for Essential subscribers. Once a subscriber exhausts their allotted hours, they must wait for the next billing cycle or purchase additional time. This change is the most significant since the beta launch of Xbox Cloud Gaming in 2019. The announcement was made on Xbox Wire, and the new structure is reflected on Xbox’s product pages. The new tiered system introduces a scarcity model, with every paid tier now having its own cloud gaming quota. Essential subscribers, who previously had no cloud access, will now receive 5 hours per month. The pricing for the Game Pass tiers is as follows: Ultimate at .99 for 15 hours, Premium at .99 for 10 hours, and Essential at .99 for 5 hours. The free ad-supported tier remains unchanged at 5 hours per month. Microsoft's rationale for the change is based on usage data indicating that most subscribers do not heavily utilize cloud streaming, coupled with the rising costs of operating cloud gaming services. The company has stated that additional hours can be purchased once a subscriber's monthly allotment is used up, although pricing details for these add-ons have not yet been disclosed. The new hour caps will take effect in November 2026, following a shorter notice period compared to NVIDIA's GeForce NOW service, which implemented a 100-hour monthly cap earlier in 2026. The response from gaming communities has been largely negative, with concerns about the limits falling short of typical usage patterns and conflicting with the marketing of Game Pass as offering unlimited access. The introduction of hour caps could impact Game Pass's subscriber base, particularly among those who rely on cloud gaming as their primary access point. Microsoft's internal usage data will determine the extent of this impact, as the company aims to control costs without raising subscription prices.

Winsage

September 6, 2026

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has identified four previously undocumented programs associated with REVSTEALER, a Windows information stealer that persists on infected machines after self-deletion. The programs are ProManager, WinUpdate, SoftManager, and LockAppHost, each with distinct functionalities. ProManager steals wallet files and logs passwords, WinUpdate monitors the clipboard for cryptocurrency addresses, SoftManager acts as a reverse proxy, and LockAppHost executes a cryptocurrency miner after disabling Windows Update and Microsoft Defender. REVSTEALER has been marketed as a commercial infostealer since February 2026, exfiltrating sensitive data such as browser passwords, cookies, and cryptocurrency wallet information. It deletes itself after reporting its activities but leaves the four programs installed for persistence. These programs share build tradecraft with REVSTEALER, including the use of identical packers and runtime function resolutions. REVSTEALER primarily spreads through game-cheat lures and disguises itself as pirated software. It employs evasion techniques to resist analysis, including checking for sandbox environments and using indirect system calls. Users are advised to avoid unofficial software and to follow specific steps if infected, such as re-enabling Windows Update services and changing passwords. Indicators of compromise include SHA-256 hashes for REVSTEALER and its associated programs, as well as domains linked to their command and control servers.

AppWizard

September 6, 2026

How to sideload apps onto Android Auto

Android Auto was designed for simplicity, but users want more functionality like streaming YouTube or screen mirroring. Sideloading allows users to install unapproved apps, unlocking additional features, though it poses risks to security, reliability, and safety. To sideload apps, users must enable Developer Mode on their phone and Android Auto, then install the Android Auto Apps Downloader (AAAD) and explore open-source apps like CarStream and AAMirror. Risks of sideloading include safety concerns with video streaming while driving and increased exposure to malware, as sideloaded apps bypass Google’s security checks. Google plans to introduce new verification requirements for developers starting in late 2026 to mitigate these risks. Most drivers find the standard Android Auto experience sufficient, and sideloading should be approached cautiously.

AppWizard

September 5, 2026

5 Minimalist Android Phones Actually Worth Buying In 2026

Many individuals are turning to minimalist phones to achieve a balanced digital life, seeking alternatives to traditional smartphones that reduce distractions while still offering essential functions. The Minimal Phone, successfully crowdfunded with over 7,000 from nearly 2,000 backers, runs on Android 14 and includes built-in apps for email, messaging, calls, maps, and music. It features a 4.3-inch black-and-white e-ink display, is priced at 9, and is set to ship in 2025. A Kickstarter campaign for the Minimal Phone 2 is currently underway, promising a smaller design and an OLED display with shipping expected in December 2026. The Mudita Kompakt has a similar 4.3-inch e-ink display and operates on a custom OS without Google services, ensuring user privacy. Priced at 9, it offers a six-day battery life and includes a dedicated offline button to disable distracting features. The Light Phone III, released in March 2025, features a 3.92-inch AMOLED display, is priced at 9, and runs on LightOS, allowing users to customize their app menu. It supports sideloading apps and has a Qualcomm chipset with 128GB of internal storage. The F1 Horizon Bluebird, priced at 9, runs on BasicOS and supports calling and texting while limiting access to social media and web browsing. The Jelly Star, while not strictly a minimalist phone, has a compact 3-inch screen, runs on Android 13, and features a MediaTek chipset, discouraging excessive use due to its small size. The selection of these minimalist Android phones focuses on devices that maintain essential smartphone capabilities while incorporating features designed to mitigate smartphone addiction.

Tech Optimizer

September 5, 2026

Silver Fox uses adware to distribute ValleyRAT backdoor

The cyber threat group Silver Fox is distributing the ValleyRAT backdoor disguised as a legitimate signed Chinese adware application, specifically bundled with the QN Wallpaper tool. This malware allows attackers to gain comprehensive control over infected machines, enabling them to collect sensitive information, capture screenshots, and deploy additional malicious modules. The attack utilizes DLL sideloading, where a modified version of QN Wallpaper loads a malicious DLL from the same directory, circumventing signature-based security measures. The installer disables Windows Defender, adds itself to autorun entries, and uses the "runas" command to elevate privileges if the user lacks administrator rights. ValleyRAT also marks its process as critical, potentially causing a blue screen of death if terminated. Kaspersky has identified Silver Fox as the likely perpetrator of this campaign, known for similar techniques.

Winsage

September 5, 2026

Valve’s Steam Machine Proves a Capable Windows PC, But 128GB RAM Upgrade Offers Little Value

Valve's Steam Machine has been tested for its versatility beyond gaming, with two notable upgrades: installing 128GB of RAM and converting it to run Windows 11. The 128GB RAM upgrade involved installing a 2x64GB SO-DIMM kit, which required extensive BIOS adjustments and presented challenges such as system instability and difficult access to RAM slots. Despite the technical success, performance improvements in gaming were minimal, as most applications do not utilize that much memory, making the upgrade cost-prohibitive. In contrast, converting the Steam Machine to Windows 11 was more straightforward. The process involved creating bootable USB drives and navigating BIOS settings. Once installed, the Steam Machine performed well as a Windows PC, with productivity tasks showing better efficiency than other portable devices. Benchmark tests indicated slight performance drops compared to SteamOS, but real-world usage, such as video editing, proved effective. Overall, the Steam Machine is capable of functioning beyond its intended purpose, but users should consider practical memory configurations and the limitations of dual-boot support when choosing how to optimize the device.

BetaBeacon

September 5, 2026

Google Play Games PC vs GameLoop vs Genymotion [2026]

Google Play Games for PC officially launched on September 23, 2025, after more than three years of testing.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.