saved Archives

AppWizard

September 26, 2026

Google Photos causes headaches: users say editing pictures makes the app ‘unresponsive’

Pixel users are experiencing issues with Google Photos, particularly with the app becoming unresponsive after editing images. Reports on Reddit indicate that actions such as cropping can lead to the app not responding to commands. Users have shared similar frustrations, and despite Google's engagement and suggested solutions, many have found them ineffective. The problems may be linked to a recent update that introduced new editing features, including Gemini Spark integration, "Moods," and a "redact pen." A quick resolution to these issues appears unlikely, and users may have to cope with the current challenges until a software update is released.

BetaBeacon

September 25, 2026

ARMSX3 PS3 emulator can finally run games at playable frame rates with new update

The ARMSX3 PS3 emulator update brings major improvements, including support for PS3 themes as library backgrounds, fixes for issues with several games, support for SIXAXIS motion on motion-enabled controllers, and touch-control features.

AppWizard

September 25, 2026

Google could undo one of the most annoying recent changes to the Phone app

Google is revisiting user interface changes to its Phone app based on user feedback, particularly regarding the placement of the Contacts tab. In the latest beta version (v240.0.986973448), the Contacts tab is being reintegrated into the navigation bar between the Home and Keypad tabs, replacing its previous position in a sidebar. This change aims to provide quicker access to saved contacts. The new interface has been activated on test devices, but the timeline for public rollout is uncertain. An APK teardown can provide insights into potential future features, though not all predicted features may reach the final public version.

BetaBeacon

September 24, 2026

Aniimo: Pokemon’s Rival Game Debuts On Android And iOS Bringin An Open World RPG

Aniimo is a game that allows players to explore the open world of Idilia, tame unique creatures, and transform into Aniimo using the Twine mechanic. The game features cross-progression support and has specific hardware requirements for Android and iOS devices.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a new Windows implant called CLOSEDQUORUM, which operates without human operators by using four commercial large language models (LLMs) to autonomously decide on actions after deployment. The implant is a 16.4-megabyte executable that conducts reconnaissance on the target system and sends structured prompts to the LLMs, which respond with one of four actions: steal, inject, persist, or move. When the "steal" action is chosen, it simultaneously attacks three credential stores, extracting Windows credentials, browser passwords, and cryptocurrency wallet data. The "inject" action uses either Early Bird APC injection or process hollowing based on model recommendations. For persistence, it employs three overlapping mechanisms, including a Registry Run key, a scheduled task, and a WMI event subscription. To evade detection, CLOSEDQUORUM suppresses ETW telemetry and introduces delays before executing actions. It circumvents traditional command-and-control structures by calling legitimate API endpoints, making blocking these domains impractical. Talos introduced the CAIRN toolkit for detecting AI-integrated malware, which operates on metadata and employs rule-based detection. Unlike previous AI-assisted malware, CLOSEDQUORUM automates decision-making processes entirely, highlighting a significant evolution in malware capabilities. Security teams are advised to focus on behavioral detection strategies and utilize the YARA rule and CAIRN toolkit for identifying this threat.

Winsage

September 23, 2026

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Cisco Talos has disclosed a Windows implant called CLOSEDQUORUM, which automates cyberattack execution using four advanced commercial large language models: DeepSeek, Qwen, Mistral, and Google Gemini. The implant is a 16.4-megabyte executable that conducts reconnaissance on the system and formats the gathered data into prompts for the AI models. Each model votes on one of four actions: steal, inject, persist, or move, with the action receiving the most votes being executed. When stealing, CLOSEDQUORUM targets three credential stores, dumping LSASS memory and retrieving saved passwords from browsers and cryptocurrency wallets. The stolen data is encrypted and sent to the operator via Discord. For injection, it uses Early Bird APC injection or process hollowing based on model responses. The persist action creates three mechanisms for longevity, including a Registry Run key, a scheduled task, and a WMI event subscription. CLOSEDQUORUM evades detection by suppressing ETW telemetry and delaying activity to avoid sandbox analyses. It connects to legitimate API endpoints, making blocking ineffective without disrupting enterprise applications. Talos recommends behavioral combination detection strategies and the use of a YARA rule for detection. The CAIRN toolkit has been introduced to detect AI-integrated malware without executing binaries. Unlike previous AI-assisted malware, CLOSEDQUORUM removes human decision-making from the attack process.

AppWizard

September 23, 2026

Google Recorder could soon fix its biggest drawback for power users

The Google Recorder app is set to introduce a new feature in version 4.2.2 that allows users to access audio recordings through the Files by Google app or other file manager applications. A toggle labeled “Access recordings in other apps” will enable future recordings to be automatically saved to the device's internal storage in a designated Recordings folder. Existing recordings will not be affected by this change, and the app will remember user preferences even when switching devices or clearing app data. This update is expected to roll out through a server-side update, though the timeline is uncertain.

Tech Optimizer

September 22, 2026

This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack

LastPass has identified a sophisticated scheme targeting users of its Authenticator app, involving SEO poisoning and deceptive GitHub pages that distribute malicious ZIP files disguised as legitimate software. Users searching for "LastPass Authenticator download" may encounter these counterfeit pages, which redirect them to a malicious server delivering a ZIP file containing vsdbg.exe and vsdbg.dll. The executable is a legitimate Microsoft debugging tool exploited to execute the malicious DLL through DLL sideloading, allowing the malware to run undetected. Named Rapuncel by security researchers from Delphos, this malware is undetectable by antivirus engines and targets a hardcoded list of 145 antivirus and endpoint security products, disabling them upon detection. Rapuncel harvests sensitive information, including saved passwords from over 25 web browsers, cryptocurrency wallet files from more than 30 applications, and session tokens from platforms like Discord and Steam. It also captures screenshots and compiles a profile of the infected system, uploading the stolen data to an attacker-controlled server. The malware includes a kernel driver that intercepts web traffic, allowing for advertisement injection and search result manipulation. This campaign has been active for several months, with LastPass vaults remaining unaffected. Users are advised to download applications only from trusted sources. Rapuncel establishes persistence on infected machines by installing itself as a Windows service that starts with the system and terminates activated security products. Removing the kernel driver requires booting into Safe Mode or using external recovery tools, as standard Windows utilities cannot eliminate software operating at that level.

AppWizard

September 22, 2026

Googlebook pre-orders begin: prices, Android sync, and more is here

Google has started pre-orders for its new Googlebooks as of September 21, with a market release scheduled for October 4. The devices, produced by brands like ASUS, Dell, and HP, start at 9 and feature touchscreens, haptic glass trackpads, backlit keyboards, and premium materials. They are powered by Qualcomm and Intel processors, with battery life up to 14 hours. Key features include a Snapdragon X Elite chip with a 12-core CPU, seamless integration with Android phones, and access to major applications. Each purchase includes a year of GeForce NOW. The Googlebook also incorporates AI features like Gemini, which assists users through various functions. Pre-orders are available at Best Buy, the Google Store, and other retailers.

AppWizard

September 22, 2026

What Google’s new Android laptops can do with your Galaxy phone

Google has launched preorders for Googlebooks, a new category of laptops that combine Android's mobile capabilities with ChromeOS features. Initial offerings come from manufacturers like Acer, Asus, Dell, HP, and Lenovo, while Samsung is not included in this launch. Googlebooks are designed to integrate with Android phones, allowing users to transfer information during setup. Key features include Continue On, which lets users pick up tasks started on their phones, and Cast My Apps, enabling control of phone applications on the laptop. Quick Access allows users to open files from their phones without transferring them first, and notifications can be managed on the Googlebook. Users need to have One UI 9 (Android 17) or newer to utilize these features. Samsung is reportedly developing its own Android-based Galaxy Book laptops that may incorporate similar functionalities.