risk Archives

AppWizard

April 3, 2026

Which messaging app takes the most limited approach to permissions on Android?

Messaging applications Messenger, Signal, and Telegram exhibit significant differences in permissions and operational behaviors that impact user privacy. Telegram has the fewest total permissions at 71, with 25 classified as dangerous; Signal requests 72 permissions, including 19 dangerous ones; and Messenger requests the most at 87, with 24 dangerous permissions. Messenger also has the highest number of vendor-specific unknown permissions. Access to sensitive resources is crucial for messaging functionalities, with permissions for contacts, camera, microphone, location, storage, and calendar being essential. Telegram and Messenger request additional system-level permissions, while Signal is more conservative and does not request certain permissions like phone-call control or overlay windows. The analysis, using the Mobile Security Framework (MobSF), indicates all three apps are in the medium risk category, with Messenger having more flagged issues. Telegram allows cleartext connections by default, potentially exposing traffic, while Signal uses encrypted connections by default and only permits limited cleartext traffic for certificate checks. Messenger's issues include world-writable files and remote debugging enabled in WebViews. Messenger uses third-party SDKs, while Signal and Telegram do not disclose third-party trackers. All three utilize Firebase Cloud Messaging for notifications without sensitive data leakage. Data exchange patterns show Messenger primarily routes traffic through North America, while Telegram and Signal focus on Europe with some additional connections in the U.S. and Asia.

AppWizard

April 2, 2026

How to use and deploy Android Work Profile in your business

The mobile device has become a dual-purpose tool for personal and professional needs, enhancing productivity but also introducing security challenges for organizations with bring-your-own-device (BYOD) policies. Samsung addresses these challenges with its Android Work Profile feature, which separates business applications and data from personal content on devices like the Galaxy S26 Series, Galaxy Z Fold7, and Galaxy Z Flip7. Android Work Profile creates two isolated profiles on a single device, allowing IT teams to manage corporate applications while keeping personal information private. IT administrators can monitor work profile applications and data but cannot access personal profiles, ensuring employee privacy. Employees can easily switch between work and personal applications and activate a “pause work apps” feature during off-hours. To set up Android Work Profile, organizations need an Enterprise Mobility Management (EMM) solution and the Android Device Policy app. The Samsung Knox Suite provides tools for managing and securing devices, including Knox Mobile Enrollment and Knox Attestation. Android Work Profile benefits businesses by enhancing data security and reputation while promoting work-life balance for employees.

AppWizard

April 2, 2026

Here’s your chance to get Marathon for just $1 and score one of my favorite FPS games in recent years for a tiny price

Marathon is an extraction shooter set on Tau Ceti IV, where players engage in quests for various factions while risking the loss of their gear upon death. The game features immersive gunplay and a sci-fi atmosphere, drawing inspiration from titles like Destiny and Halo. Players learn from each death, refining their strategies as they navigate both PvP and PvE elements. The game is not designed for casual gamers, requiring a commitment to mastering its mechanics. It can be acquired for just £1 through the Fanatical Mystery Egg Bundle, which offers a chance to receive a random game, including the possibility of Marathon.

Winsage

April 2, 2026

Don’t blame Windows 11 updates for every problem, Microsoft veteran says

Corporate clients often report to Microsoft that Windows updates disrupt their systems, particularly after Patch Tuesday. A 2026 report from Omnissa indicates that Windows environments experience more application crashes and forced shutdowns than macOS. However, Raymond Chen, a Windows expert, suggests that many systems are already compromised before updates are installed. Engineers at Microsoft frequently find that issues persist even after rolling back updates, and similar failures can occur on machines that haven't received the update yet. The actual triggers for system failures often stem from changes made by IT departments prior to updates, such as new drivers or configuration modifications. These changes may not show immediate issues until a reboot occurs during Patch Tuesday, revealing existing instability. Best practices for IT admins include controlled change management, validating drivers and policies before deployment, using staged rollouts, rebooting after major changes, and maintaining logging and monitoring systems. Microsoft conducts extensive testing of updates to ensure system security and stability, and delaying updates can increase risks.

AppWizard

April 1, 2026

NCSC warns of messaging app targeting | National Cyber Security Centre

The National Cyber Security Centre (NCSC) has issued guidelines for individuals vulnerable to targeted attacks via messaging applications, particularly due to increased malicious activities from actors based in Russia. High-risk individuals, such as those with access to sensitive information, are especially susceptible. Past incidents involve state-affiliated groups like APT31 from China, the Russian FSB actor Star Blizzard, and Iran's IRGC targeting government officials. Attackers may use deceptive methods to obtain login codes, add devices to accounts, infiltrate group chats, impersonate contacts, and execute phishing attempts. To mitigate risks, individuals should avoid sharing sensitive information via messaging apps, use corporate services for work-related communications, refrain from sharing verification codes, activate two-step verification, utilize passkeys, regularly review linked devices, stay alert for impersonations, and consider using disappearing messages. The NCSC also provides guidance for enhancing account and device security for high-risk individuals.

Tech Optimizer

April 1, 2026

EDB Postgres AI for WarehousePG: Reclaiming control of the enterprise data warehouse

Many enterprises are transitioning from traditional proprietary data warehouse platforms, such as Teradata and Snowflake, due to issues like vendor lock-in, unpredictable pricing, and limited flexibility. EDB Postgres® AI (EDB PG AI) offers WarehousePG, an open-source, petabyte-scale data warehouse built on Postgres, designed to provide control, predictability, and data sovereignty while maintaining performance. WarehousePG utilizes a massively parallel processing (MPP) architecture, allowing it to efficiently execute complex queries across large datasets. It offers predictable performance without proprietary constraints, enabling organizations to avoid vendor-controlled execution engines. WarehousePG supports hybrid storage and SQL access to external data lakes through the Platform Extension Framework (PXF), simplifying ETL processes. It includes FlowServer for real-time data ingestion and supports in-database AI and machine learning, allowing for advanced analytics without transferring data outside the warehouse. The platform is engineered for high availability and enterprise readiness, with features like workload management and observability. Migration from legacy platforms is facilitated through a low-risk modernization pathway. Overall, WarehousePG provides a modern alternative to traditional data warehouses, emphasizing architectural control and open-source economics.

BetaBeacon

March 31, 2026

Tom Clancy’s THE DIVISION RESURGENCE Is Now Available On iOS And Android Devices

Ubisoft has released Tom Clancy’s The Division Resurgence on mobile platforms, offering a new standalone experience set in a collapsing New York City during the early days of the Green Poison outbreak. Players can choose from five specializations, engage in solo or co-op gameplay, and participate in various activities such as Dark Zone, Conflict, and open world missions. The game is free-to-play with in-game purchases available for cosmetic items and convenience options.

AppWizard

March 31, 2026

Free Antivirus for Android: Best Apps to Protect Your Smartphone

Smartphones are integral to daily life, storing emails, banking apps, and social media. The Android operating system is vulnerable to threats like viruses and ransomware. Free Android antivirus tools offer basic protection but have limitations compared to paid versions. Free antivirus solutions focus on malware scanning and threat detection. Bitdefender Mobile Security (Free Version) provides lightweight background operation, real-time scanning, and web protection but lacks anti-theft and VPN features. Norton Mobile Security (Free Tier) offers essential malware scanning, with advanced features available in premium subscriptions. Avast Mobile Security (Free) includes virus scanning, malware protection, and anti-theft tools, allowing users to lock apps and protect against malicious websites. AVG AntiVirus (Free) offers virus, malware, and spyware scanning, real-time updates, and a "Photo Vault" for securing images. Kaspersky Mobile Security (Free) provides basic virus protection and ranks high in malware detection, with additional features available in paid plans. Free antivirus tools detect malware and monitor real-time system activity, alerting users to phishing sites. They may scan files transferred via USB or Bluetooth and offer limited VPN services. Limitations of free antivirus include the absence of advanced features like unlimited VPN, application locking, and anti-theft capabilities. Many rely on ads for revenue, which can disrupt user experience. Choosing the right antivirus depends on usage habits and security concerns. Running multiple antivirus apps can cause conflicts and hinder performance. Upgrading to premium versions may be necessary for comprehensive protection, especially for sensitive tasks. User behavior is crucial for security; regularly updating the OS and applications, using strong passwords, and considering two-factor authentication can enhance protection. Free antivirus apps offer core threat protection but lack advanced features. Most are lightweight, with minimal impact on performance. Regular scans are recommended, and reputable sources should be used for downloads. Free antivirus apps can warn about phishing attempts but cannot eliminate the risk entirely. A built-in VPN is not essential for basic protection but is advisable for public Wi-Fi use.

AppWizard

March 30, 2026

Remember when Mastercard pressured Steam to remove a bunch of NSFW games? The FTC says that’s not cool—sort of

The U.S. Federal Trade Commission (FTC) has addressed concerns to the CEOs of major financial service companies, including Mastercard, Visa, PayPal, and Stripe, regarding the potential denial of services to customers based on political or religious beliefs. The letters warn that such practices could lead to investigations and enforcement actions. This initiative follows an incident involving Valve, where Mastercard was alleged to have pressured the company into removing adult-themed games from its Steam platform, although Mastercard clarified it did not directly influence the removals. FTC Chairman Andrew N. Ferguson emphasized the importance of ensuring all law-abiding individuals can engage in commerce. The situation is further complicated by an executive order from former President Donald Trump, which raised concerns about financial institutions surveilling individuals involved in conservative activities. Ferguson urged Mastercard's CEO to prevent unlawful debanking practices by its network members. There is uncertainty regarding a proposed rule change that may not significantly alter the discretion financial institutions have in customer-related decisions. Inquiries have been made to Valve and the FTC about the implications of these letters for adult video games on the Steam platform.

AppWizard

March 30, 2026

Google Significantly Restricts Popular Android Feature

Google is transforming the Android operating system to enhance security by imposing stricter regulations on app distribution, particularly affecting sideloading. Developers will be categorized as verified or unverified, with registered developers benefiting from a streamlined app distribution process. New regulations will introduce a four-step process for installing apps from external sources, including a 24-hour timer before installation. This aims to deter fraud but may discourage users from pursuing alternative apps. The restrictions could limit opportunities for independent developers and reduce the diversity of available applications on the platform, shifting Android towards a more controlled environment.