routes Archives

AppWizard

April 24, 2026

My favorite RPG of 2026 put an impossible challenge in the second room to teach you not to save scum: ‘I am your DM, trust me’

Esoteric Ebb is a role-playing game that effectively balances challenge and player agency by embracing failure as a key element of storytelling. The game introduces a resource called "Shards of Jor," which allows players to reroll failed checks, promoting engagement with the narrative rather than relying on save scumming. Designer Christoffer Bodegård emphasizes a flexible approach to rules, encouraging players to design their own experiences. He provides examples of gameplay where failure is integral, such as a challenging Wisdom check involving a mysterious benefactor and accessing a magically sealed tea shop, both of which offer multiple pathways to success. Bodegård's philosophy aims to create an illusion of agency, empowering players to explore their choices within the game's narrative framework.

AppWizard

April 21, 2026

New NGate Android malware variant uses NFC app to steal card data

A new variant of the NGate Android malware exploits a legitimate NFC payment app, HandyPay, to steal users' card information and PINs, enabling unauthorized contactless transactions. This malicious version of HandyPay, which has been available since 2021, was identified by ESET researchers and is distributed through a fraudulent lottery website and a fake Google Play page. The malware captures sensitive information by prompting users to enter their payment card PIN and tap their card against the device, sending the data to an attacker-controlled phone and exfiltrating the PIN to a command-and-control server. The campaign employs social engineering tactics and requires minimal permissions, relying on users to enable app installations from unknown sources. The attackers use a centralized infrastructure for malware distribution and PIN collection, with evidence of compromised devices in Brazil. The shift to modifying a legitimate application is motivated by financial incentives, as it offers similar functionality at a lower cost compared to underground tools. Users are advised to avoid installing apps from unofficial sources and to ensure the legitimacy of applications before entering sensitive information.

AppWizard

April 19, 2026

International transport tycoon game Worldwide Rush gets multiplayer, and it’s an impressive achievement

Worldwide Rush has introduced full multiplayer gameplay, allowing players to compete or collaborate in building an international transport empire. This feature is part of the game's third major update, which also improves rival AI, late-game balance, and adds eleven new vehicles. The game combines various transport modes, including trains, planes, automobiles, and ships, to maximize profits by optimizing routes between cities. The default map is based on real-world geography, with unique challenges generated procedurally. The update enhances single-player experiences with new vehicles and improved AI logic. Players can enjoy a 33% discount on Steam until May 2, and desync protection has been added to improve multiplayer stability. There are currently no plans for dedicated servers, but future developments may occur based on player feedback.

AppWizard

April 8, 2026

Whispers of the Tallgrass, a Creepy First-Person Survival Horror Game, Announced for PC

Whispers of the Tallgrass is a first-person atmospheric survival horror game set in an abandoned industrial wasteland where players must evade a predator while scavenging for resources. The game restricts saving to specific locations, enhancing tension and making every decision significant. Item placements are randomized in each playthrough, providing a unique challenge. Players can discover multiple escape routes with varying risks and rewards, encouraging strategic thinking. The game is set to launch later this year on PC via Steam, and an announcement trailer and first screenshots have been released.

AppWizard

April 3, 2026

Which messaging app takes the most limited approach to permissions on Android?

Messaging applications Messenger, Signal, and Telegram exhibit significant differences in permissions and operational behaviors that impact user privacy. Telegram has the fewest total permissions at 71, with 25 classified as dangerous; Signal requests 72 permissions, including 19 dangerous ones; and Messenger requests the most at 87, with 24 dangerous permissions. Messenger also has the highest number of vendor-specific unknown permissions. Access to sensitive resources is crucial for messaging functionalities, with permissions for contacts, camera, microphone, location, storage, and calendar being essential. Telegram and Messenger request additional system-level permissions, while Signal is more conservative and does not request certain permissions like phone-call control or overlay windows. The analysis, using the Mobile Security Framework (MobSF), indicates all three apps are in the medium risk category, with Messenger having more flagged issues. Telegram allows cleartext connections by default, potentially exposing traffic, while Signal uses encrypted connections by default and only permits limited cleartext traffic for certificate checks. Messenger's issues include world-writable files and remote debugging enabled in WebViews. Messenger uses third-party SDKs, while Signal and Telegram do not disclose third-party trackers. All three utilize Firebase Cloud Messaging for notifications without sensitive data leakage. Data exchange patterns show Messenger primarily routes traffic through North America, while Telegram and Signal focus on Europe with some additional connections in the U.S. and Asia.

AppWizard

March 24, 2026

Banquet For Fools review

Banquet for Fools is an immersive role-playing game set to release on March 5, 2026, by Hannah and Joseph Games. Players engage deeply with the game world, which lacks traditional quest logs and markers, requiring them to take notes to track objectives. The game begins with a chaotic scene and spans three centuries into the future, where players create questing parties with unconventional characters. The narrative is intentionally vague, and players must interpret information conveyed through elaborate scrolls and hand-drawn notes. Traveling in the game is a significant experience, with players choosing routes that impact their resources and survival. Encounters with friendly groups or hostile enemies add tension, and combat is real-time, requiring tactical decisions and quick reactions. The combat system emphasizes a personal connection to attacks and encourages players to unlock new abilities that enhance tactical options. Challenges include vague directions from NPCs and a strict day/night cycle, which can lead to frustration but also deepen player engagement with the game world. Each setback offers opportunities to learn and adapt, making the experience rewarding despite its complexities.

Tech Optimizer

March 11, 2026

Netflix Automates RDS PostgreSQL to Aurora PostgreSQL Migration Across 400 Production Clusters

Netflix has developed an internal automation platform to migrate Amazon RDS for PostgreSQL databases to Amazon Aurora PostgreSQL, reducing operational risks and downtime for nearly 400 production clusters. The platform allows service teams to perform migrations through a self-service workflow while ensuring processes like replication validation and rollback safeguards are maintained. Database access is managed through a platform-managed layer using Envoy, which standardizes mutual TLS and abstracts database endpoints, enhancing security and efficiency. The migration process starts with creating an Aurora PostgreSQL cluster as a read replica of the source RDS instance, initialized from a storage snapshot and continuously replaying write-ahead log (WAL) records. Validation checks are performed to ensure the replica can handle peak write throughput before cutover. For change data capture workloads, the system coordinates the state of replication slots and pauses CDC consumers to prevent excessive WAL retention. The Enablement Applications team at Netflix successfully migrated databases for device certification and partner billing workflows, addressing issues like elevated replication lag due to inactive logical replication slots. As replication lag decreases, the system enters a controlled quiescence phase, adjusts security rules, and reboots the source RDS instance. Once all transactions are processed and the Aurora replica is ready, it is promoted to a writable cluster, and traffic is rerouted. Rollback capabilities are prioritized, allowing redirection back to the original RDS instance if validation checks fail or anomalies are detected post-promotion. This setup enables seamless restoration without redeployment, and CDC consumers can resume from recorded slot positions if needed.

Winsage

March 2, 2026

RAT Malware Via Windows Explorer Puts Crypto at Risk

Cofense Intelligence reported that threat actors are exploiting Windows File Explorer and WebDAV servers to deliver Remote Access Trojans (RATs) to corporate systems, bypassing browser security measures. This method allows attackers to infiltrate machines without using web browsers, taking advantage of File Explorer's ability to connect to remote WebDAV servers. Despite WebDAV being deprecated by Microsoft in November 2023, it is still supported in Windows, creating a vulnerability. The campaigns began in February 2024, with a significant increase in September 2024, and 87% of these campaigns deliver multiple RATs, including XWorm, Async RAT, and DcRAT. Victims typically receive phishing emails disguised as invoices, containing URL or LNK shortcut files that initiate a WebDAV connection. The attacks often utilize Cloudflare Tunnel for hosting malicious WebDAV servers, making the traffic appear legitimate. Notably, 50% of affected campaigns are in German, while 30% are in English. The report emphasizes the risks posed to individuals holding digital assets, as RATs can access sensitive information, including crypto wallet files. Organizations are advised to monitor network traffic for Cloudflare Tunnel instances and educate users about the risks associated with File Explorer's capabilities.

Winsage

March 1, 2026

Hackers Abuse Windows File Explorer and WebDAV for Stealthy Malware Delivery

Cybercriminals are exploiting a legacy feature in Windows File Explorer, specifically the WebDAV protocol, to distribute malware and bypass traditional security measures. Despite Microsoft deprecating native WebDAV support in November 2023, it remains active on many systems. Attackers use WebDAV to deceive victims into executing malicious payloads by sending links that connect File Explorer directly to remote servers, avoiding web browsers and their security warnings. They employ methods such as direct linking, URL shortcut files, and LNK shortcut files to deliver exploits. The primary objective of these campaigns, which surged in late 2024, is to deploy Remote Access Trojans (RATs), with 87% of Active Threat Reports involving multiple RATs like XWorm RAT, Async RAT, and DcRAT. These campaigns predominantly target corporate networks in Europe, with many phishing emails written in German and English. Attackers use short-lived WebDAV servers hosted on Cloudflare Tunnel demo accounts to obscure their infrastructure. Security analysts are advised to monitor unusual network activity from Windows Explorer and educate users to verify addresses in File Explorer.

AppWizard

February 28, 2026

Six Google Apps Emerge As Irreplaceable On Android

Many Android users seek alternatives to default applications, but six Google apps are deemed indispensable due to their speed, reliability, and integration. Google Keep allows for quick note-taking with features like labels, checklists, and real-time syncing across devices, boasting over 1 billion installs. The Google app serves as a central hub for various functions, providing seamless integration that enhances the Android experience. Google Maps excels as a navigation and discovery tool, with over 10 billion installs and features like offline maps and user-generated content. Android Auto offers a user-friendly interface for driving, becoming a standard feature in new vehicles. Google Photos backs up images effortlessly, with over 5 billion installs, and provides powerful search capabilities. NotebookLM allows users to input documents and web clippings for research, functioning as a research assistant. These six apps stand out for their unique combination of speed, scale, and integration, making them essential for Android users.