risks Archives

AppWizard

October 1, 2026

Google’s new Android sideloading rules are live — and here are all the ways to already bypass them

Google has implemented new developer verification rules for Android sideloading, affecting users in Brazil, Indonesia, Singapore, and Thailand. Apps from unverified developers are automatically blocked on certified Android devices with Google Play Services. This change is part of a global rollout expected in 2027. Users can still install apps from recognized app stores like Google Play Store, HONOR App Market, and others, but third-party developers not registered with Google’s Android Developer Verification Program face restrictions. To circumvent these restrictions, users can: 1. Rely on established app stores. 2. Use Google’s Advanced Flow, which involves enabling Developer Options, confirming choices, and waiting a mandatory 24-hour period before installation. 3. Utilize ADB for installation without waiting periods. 4. Use Shizuku for on-device wireless debugging. 5. Root their devices to bypass restrictions entirely. Apps installed before the new rules will remain functional but cannot be updated without following the new procedures. Developer Options do not need to remain enabled after completing the Advanced Flow. If the process is not completed after the waiting period, users must restart it. Uninstalling the Android Developer Verifier app while using Shizuku may not affect the waiting period. Users in regions not yet impacted by these changes do not need to take immediate action.

Winsage

October 1, 2026

Microsoft to drop support for Snapdragon 850 powered PCs with the next version of Windows

Microsoft has confirmed that Windows 11 version 26H2 will be the last version to support devices with Qualcomm's Snapdragon 850 processors. The Snapdragon 850, introduced in 2018, was the first chip specifically designed for Windows. While devices with the Snapdragon 850 can still install the current update, they will not be eligible for the upcoming version 27H2. Windows 11 version 26H2 will receive support for 24 months, after which devices using the Snapdragon 850 will no longer have official support, posing potential security risks.

AppWizard

October 1, 2026

My 4-year-old Android phone is showing its age. Here’s how I’m keeping it running

Many users are considering whether to upgrade their smartphones or extend the life of their current devices. Strategies to rejuvenate aging smartphones include: 1. Replacing Hardware: Replacing the battery can significantly improve performance, especially if the original battery's health is below 75%. Using a slower charger (like an 18W charger) can reduce heat and extend battery longevity. 2. Switching Apps: Replacing resource-heavy applications with lighter alternatives can enhance performance. For example, using the Brave browser instead of Chrome and AntennaPod instead of Spotify can conserve battery life. 3. Optimizing System Settings: Adjusting settings such as window animations and screen refresh rates can improve user interface responsiveness. Setting a maximum charge limit of 80-90% can help mitigate heat buildup. 4. Regular Maintenance: Deleting large files and using Android's built-in Private DNS can prevent lag and enhance performance. Flashing a custom ROM like LineageOS can provide a new operating system experience but may come with risks. 5. User Vigilance: While older phones may pose security risks, users can extend their life with regular updates and maintenance, especially as manufacturers offer devices with longer software support.

AppWizard

September 30, 2026

GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws

GitHub Security Lab's open-source AI security agent identified 24 vulnerabilities in various Android applications, including critical flaws in the OsmAnd navigation app and the Wikipedia app for Android. The OsmAnd vulnerability allows a malicious app to silently import and replace settings, potentially enabling covert location tracking. The Wikipedia app's vulnerability involves inadequate hostname validation for deep links, allowing attackers to load malicious content and potentially take over user accounts. The research highlights the effectiveness of AI in identifying vulnerabilities while emphasizing the need for human validation. The GitHub Security Lab Taskflow Agent automates security research workflows, focusing on mobile entry points and evaluating them against Android-specific vulnerability classes. The findings stress the importance of expert review for AI-generated results.

AppWizard

September 30, 2026

Sanctioned Russian firm identifies multiple security vulnerabilities in Android and Apple devices

Russian cybersecurity firm Positive Technologies has identified 11 security vulnerabilities affecting Android and Apple devices, with nine related to Apple and two to Android, classified as high severity. The Android vulnerabilities include one that allows attackers to exploit an NFC tag to execute an app without owner approval and another that lets installed apps modify network settings without additional permissions. Google has addressed these issues in its September 2026 security patches. For Apple, vulnerabilities include a macOS flaw that allows malicious apps to gain the highest system privileges and another that exposes sensitive information. Apple has released patches for these vulnerabilities, but specific OS versions affected have not been disclosed. Users are advised to ensure their devices have the latest security updates to mitigate risks.

AppWizard

September 29, 2026

Google Translate could soon auto-save transcripts of your Live conversations, but not on Android XR

Google Translate is enhancing its Live Translate functionality with a new “Auto-save transcript” feature for mobile users, which will automatically save translation transcripts at the end of each session. However, when using Live Translate through connected smart glasses, transcript saving will be disabled to protect user privacy. The app's code specifies that transcript saving is disabled during glasses use to prevent unauthorized recording. Additionally, users will be able to initiate Live Translate sessions hands-free with voice commands and conclude them with a swipe on the touchpad. Google is also working on simplifying access to Live Translate settings. No timeline for the rollout of these features has been announced.

AppWizard

September 29, 2026

How we found 24 Android vulnerabilities using our open source AI security agent

The GitHub Security Lab has introduced the Taskflow Agent, an open-source tool that uses artificial intelligence to automate the identification of vulnerabilities in Android applications. This tool allows security researchers to create custom taskflow prompts, leading to the discovery of over 20 vulnerabilities. To use the taskflows, a GitHub Copilot license is required, and users can run scripts to audit their projects, with results displayed in an SQLite viewer. Two specific vulnerabilities identified include: 1. OsmAnd app allows malicious applications to track user locations due to improper handling of intent extras in its exported activity. 2. The Wikipedia app has a logic flaw that enables attackers to redirect users to malicious sites via a deeplink mechanism, potentially leading to account takeovers. The GitHub Security Lab has reported a total of 24 vulnerabilities in Android applications, highlighting the effectiveness of AI in security research.

Tech Optimizer

September 28, 2026

What Is Happening with PostgreSQL 19?

Postgres 19 is experiencing delays in its release schedule, with Beta 4 scheduled for September 24, 2026. The development team is prioritizing quality over timelines, leading to the reversion of 53 significant features during the beta phase. Notable feature reversions include SQL Property Graph Queries, ALTER TABLE MERGE/SPLIT PARTITION(S), UPDATE/DELETE FOR PORTION OF, GROUP BY ALL, a change to default TOAST compression, nontext output formats for pg_dumpall, JSON_TABLE ON ERROR cascading, fast defaults for domains with nonvolatile constraints, logical replication database-specific snapshots, nested query tracking, and online data checksums. The majority of these reversions are due to design flaws, incorrect results, or compatibility issues. There are also at-risk features identified, including RI fast-path FK checks, REPACK / REPACK CONCURRENTLY, and Postgres_fdw statistics import. Despite these challenges, promising features such as pg_plan_advice, parallel autovacuum, ON CONFLICT DO SELECT, and logical replication enhancements are still anticipated in PG19. AI tools are being utilized in the development process to identify bugs and create test cases. Postgres 18 remains a reliable upgrade target, while features like property graphs and GROUP BY ALL are now planned for PG20.

Tech Optimizer

September 28, 2026

Spinnaker launches PostgreSQL support & migration services

Spinnaker Support has launched a suite of PostgreSQL support and migration services to help organizations reduce their reliance on Oracle databases. The services include enterprise software support for PostgreSQL and migration services facilitated by HexaCluster, allowing customers to maintain their Oracle environments while transitioning workloads to PostgreSQL. Spinnaker is also developing an enterprise distribution for PostgreSQL, built around standard PostgreSQL and open-source components. The support package includes break-fix support, troubleshooting, security guidance, performance and configuration support, and lifecycle guidance. The migration service analyzes Oracle database dependencies, automates parts of the conversion process, validates production readiness, and facilitates controlled cutovers. The HexaRocket platform from HexaCluster aids in migration, data movement, and replication. The launch aligns with a trend of organizations reassessing database expenditures, with 55.6% of developers using PostgreSQL according to the 2025 Stack Overflow Developer Survey. Spinnaker aims to enhance its role in enterprise infrastructure decisions by supporting both Oracle and PostgreSQL environments. Martin Biggs has been appointed Vice President and General Manager of the PostgreSQL Practice, overseeing PostgreSQL support and migration services. Spinnaker's PostgreSQL offerings are part of its Run, Optimize, Transform framework, designed to help customers manage current systems and plan for long-term changes.

Tech Optimizer

September 25, 2026

Norton 360 for Gamers vs Bitdefender vs Malwarebytes [2026]

Norton, Bitdefender, and Malwarebytes have adjusted their antivirus products to mitigate the negative effects on gaming performance. In June 2026, Norton 360 and Bitdefender Total Security both received a perfect AV-TEST score of 18 out of 18, while Malwarebytes achieved a 100% real-world protection rate in AV-Comparatives testing, though it had more false positives. Bitdefender Total Security is recommended for gamers due to its low frame-rate impact of 0-2%, while Norton 360 offers features for streamers and competitive players, and Malwarebytes serves as a lightweight secondary scanner. The value of gaming accounts has increased, making them targets for cybercriminals, with malware campaigns like Vidar 2.0 accounting for 41% of gaming-related malware detections. New malware families such as Katz and Bee specifically target Discord and gaming platforms. In terms of performance, Norton showed a 2-3% FPS decrease in Cyberpunk 2077, while Bitdefender's impact was only 0-2%, and Malwarebytes had less than 1% impact. Norton and Bitdefender are tied in detection capabilities, both scoring 18/18 in AV-TEST, while Malwarebytes had a 92.4% offline detection rate and 98.3% online. Norton includes a no-log VPN and gamer-tag monitoring, while Bitdefender offers identity protection without specific gamer-tag monitoring. Malwarebytes lacks a VPN and password manager. Pricing varies, with Norton starting at .99 for three devices, Bitdefender at .99 for one device, and Malwarebytes at .99 for one device. To switch antivirus solutions, users should back up their license keys, use removal tools, and ensure game-aware modes are active. Each product has unique strengths: Norton excels in gamer-tag monitoring, Bitdefender minimizes CPU usage, and Malwarebytes is lightweight but lacks additional features.