NewApp Digest
search bot

risks

Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is
Tech Optimizer
July 10, 2026

Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is

Advanced Persistent Threats (APTs) are a type of cyber threat characterized by long-term infiltration aimed at stealing sensitive data or surveilling communications, often orchestrated by well-funded groups. Unlike traditional malware, which seeks immediate disruption, APTs employ a methodical approach, spending weeks mapping out networks and identifying valuable credentials. Traditional antivirus solutions often fail to detect APTs because they rely on signature-based detection, which is ineffective against custom malware. APTs frequently use legitimate tools already present on systems, making detection challenging, and some forms of APTs operate directly from memory without writing to disk, evading traditional scans. To combat APTs, a multifaceted strategy is recommended, including behavioral detection, network monitoring for unusual patterns, and a mindset of skepticism towards all network activities.
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
Tech Optimizer
July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.
This antivirus doesn’t slow your PC down — it quietly keeps it safe for $19.99
Tech Optimizer
July 9, 2026

This antivirus doesn’t slow your PC down — it quietly keeps it safe for $19.99

ESET NOD32 Antivirus for Windows is available for .99 for a one-year subscription. It operates in the background, providing protection against malware, phishing, and ransomware without causing noticeable slowdowns. Key features include a Ransomware Shield, Anti-phishing Protection, Gamer Mode, and AI-assisted Threat Detection. It is designed for users who multitask, stream, or game, allowing for uninterrupted productivity.
Windows 11 cleanup is finally simple with this powerful open‑source tool that strips bloat, boosts speed, and gives you real control
Winsage
July 8, 2026

Windows 11 cleanup is finally simple with this powerful open‑source tool that strips bloat, boosts speed, and gives you real control

Windows 11 includes built-in tools like Storage Sense, Temporary Files settings, and Storage Recommendations for managing storage. BleachBit is a free, open-source cleanup utility for Windows 11 that removes temporary files, caches, logs, and browsing data without ads. Users can download it via a standard installer or a portable version, with installation possible through the command line. BleachBit features a "Preview" option to estimate storage recovery before deletion and offers recommended cleanup options such as temporary files, logs, and the Recycle Bin. It includes a file shredder for securely deleting sensitive files and can wipe free disk space, although this is not recommended for regular maintenance. BleachBit does not have a Registry cleaner, which can prevent potential system issues. While it does not directly speed up Windows 11, it can free up storage space and resolve some cache-related issues. Users comfortable with Windows 11's built-in tools may not need BleachBit, but it offers greater control for those wanting to manage browser data and temporary files more effectively.
PostgreSQL Extensions Are an Architecture Decision, Not an Afterthought
Tech Optimizer
July 8, 2026

PostgreSQL Extensions Are an Architecture Decision, Not an Afterthought

A common issue in database migrations is the unplanned accumulation of extensions in PostgreSQL, leading to extension sprawl. Teams often install extensions without documenting the rationale, resulting in a complex web of dependencies that complicates future upgrades and removals. The installation process involves PostgreSQL accessing a control file that details the extension's version and dependencies, which can lead to multiple extensions being installed unintentionally. Upgrading and removing extensions are often neglected, causing risks such as the loss of dependent objects. Extensions typically default to the public schema, which can become cluttered; relocating them to dedicated schemas can improve organization. Trusted Language Extensions (TLE) allow non-privileged users to utilize procedural languages in managed databases without needing superuser access. Key extensions recommended for use include pg_stat_statements, pg_trgm, hstore, citext, and PostGIS, each serving specific use cases. Proper governance is essential for managing extensions, including documenting their purpose, ownership, and dependencies, to prevent operational surprises.
Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks
Tech Optimizer
July 8, 2026

Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks

A recent examination of PHP's database driver layer revealed two significant vulnerabilities in PHP Data Objects (PDO) affecting the pdo_firebird and pdo_pgsql drivers. The first vulnerability, CVE-2026-25289, allows SQL injection attacks through NUL byte manipulation in quoted strings, compromising the safety of SQL statements. The second vulnerability, CVE-2026-25290, can cause application crashes due to null pointer dereferencing when invalid multibyte character sequences are processed. Both vulnerabilities stem from assumptions about C string handling and have been addressed in a security release. Researchers recommend treating binary input as untrustworthy and encapsulating financial workflows within atomic transactions.
Search