security breaches Archives

AppWizard

August 20, 2026

Sony may be discontinuing video game discs — but there’s still a way to get physical copies

Sony will phase out physical discs for new PlayStation titles starting January 2028. GOG reassures gamers of ownership rights, allowing them to own and preserve purchased games on physical media. The Tomb Raider I-VI Remastered bundle is available for purchase, featuring enhanced versions of the classic series. All games on GOG are DRM-free, enabling players to download and burn titles onto discs. The process for burning games involves logging into the GOG library, downloading the offline installer, and burning the game file onto a disc. GOG also offers alternatives for game storage, such as external hard drives and cloud storage, ensuring long-term ownership without reliance on a launcher or internet connection. GOG has a selection of over 5,200 DRM-free games available for purchase.

AppWizard

August 18, 2026

The Truth About Android Antivirus Apps in 2026

Most Android users consider third-party antivirus apps unnecessary due to the robust built-in security features of modern Android smartphones. However, Android devices are still vulnerable to viruses, malware, and security breaches, with a 2025 Gen threat report indicating a tripling of malicious push notifications and an increase in spyware issues. Google Play Protect blocked 27 million malicious apps in 2025 and conducts scans to manage security. Android employs sandboxing, regular security updates, and an opt-in permissions system to protect users. Upcoming features include phone call spoofing protection and enhanced live threat detection capabilities. Social engineering tactics, such as phishing and fake tech support calls, pose significant risks that antivirus software cannot address. Connecting to open Wi-Fi networks can expose devices to risks, and malicious push notifications can mislead users. Third-party antivirus apps may be beneficial in high-risk scenarios, such as public Wi-Fi networks or when sideloading apps, providing an additional layer of protection.

Tech Optimizer

August 16, 2026

Do you really need an antivirus app on your Android?

The relevance of third-party antivirus software for mobile devices has declined as modern Android devices come with robust built-in security features. Google Play Protect blocks millions of harmful apps and conducts regular scans of installed apps. Android employs sandboxing technology to isolate applications, has a proactive permissions system, and provides regular security updates. While Android is not immune to malware, many threats now arise from social engineering tactics rather than technical vulnerabilities. Users face risks when connecting to public Wi-Fi networks, and malicious push notifications can mislead them. Third-party antivirus may be beneficial for users who sideload apps or notice signs of infection, but for most users, Google's Play Protect suffices. Older devices lacking updates are at higher risk, and while antivirus apps can provide additional protection, education and user vigilance are crucial for minimizing risk.

Winsage

August 16, 2026

LeakWatch CW 33/2026: Windows Zero-Day, AMD, Intel and Malware

- The August Patch Tuesday release included 421 vulnerabilities, with 236 affecting Windows, highlighting CVE-2026-68820, a critical use-after-free vulnerability that allows privilege escalation to SYSTEM level without user interaction. - CISA added CVE-2026-68820 to its Known Exploited Vulnerabilities Catalog, confirming its active exploitation. - AMD's Ryzen Master software has vulnerabilities, including CVE-2025-54512 (DLL hijacking) and CVE-2026-0465 (use-after-free), which could allow code execution with elevated privileges. - AMD's advisory on CVE-2026-6726 and CVE-2026-6727 indicates vulnerabilities in the TPM 2.0 reference code affecting Ryzen platforms, leading to potential information disclosure. - Intel's advisories included updates for microcode, Wi-Fi software, and NPU drivers, with CVE-2026-20760 addressing privilege escalation risks. - Google’s Chrome update on August 11 fixed five high-severity vulnerabilities, including use-after-free flaws. - Gunra malware has evolved into a ransomware-as-a-service model using a double-extortion strategy. - WindRelay malware combines SpyNote RAT with an NFC relay component, allowing attackers to relay NFC communication between a victim's bank card and a remote device. - The findings emphasize the need to view vulnerabilities as part of potential attack chains, highlighting the complexity of modern cybersecurity threats.

AppWizard

August 4, 2026

Android app developers may be unwittingly sharing their users’ location data with advertisers

Mobile apps often require precise location data for functionality, but there are concerns about the unintentional sharing of this sensitive information with third parties, such as advertisers and data brokers. The Electronic Frontier Foundation (EFF) found that third-party code in apps may collect location data without users' explicit consent due to default settings in software development kits (SDKs). Unless developers disable this feature, SDKs inherit app permissions, leading to the collection of users' location data. This raises privacy issues, as users' location histories can be sold to data brokers and potentially accessed by military and intelligence agencies. The EFF identified that certain Android apps, downloaded over 60 million times, were sharing location data without user awareness. Currently, there are no SDK-specific location permissions, meaning that consent to share location data with an app also extends to advertisers. The EFF calls for a change in industry standards to prevent default data sharing by advertising SDKs.

Winsage

July 28, 2026

Proof-of-concept exploit released for Certighost Windows AD CS vulnerability

A proof-of-concept exploit for a vulnerability in Windows Active Directory Certificate Services (AD CS), identified as CVE-2026-54121, has emerged, allowing authenticated attackers to compromise an entire Windows domain. Microsoft addressed this vulnerability in its July 2026 security updates. The flaw enables attackers to manipulate machine account attributes, obtaining certificates to impersonate critical domain controllers and execute privileged Active Directory operations. Researchers H0j3n and Aniq Fakhrul discovered the vulnerability and publicly disclosed it with a functional exploit that exploits a fallback mechanism in AD CS. This exploit can automate the extraction of sensitive credentials through a DCSync attack. Microsoft has since implemented additional validation measures to enhance security against this vulnerability.

Winsage

July 26, 2026

How I stopped being my parents’ emergency IT hotline — The complete list of Windows Security settings I made them fix once and for all

A family member inquired about the necessity of a password manager, reflecting growing cybersecurity concerns. A parent received a suspicious "tech support" message, indicating potential security risks. Windows Hello allows users to log in with a PIN, fingerprint, or facial recognition on Windows 11 PCs. Users can set it up via Settings > Accounts > Sign-in options. Regular updates through Windows Update are essential for security, and users can check their status in Settings > Windows Update. Windows Defender is the built-in antivirus for Windows 11, typically enabled by default, but users should verify its status in Settings > Privacy & security > Windows Security > Virus & threat protection. The 'Find My Device' feature can be enabled in Settings > Privacy & security > Find my device to track and lock a lost or stolen laptop. Switching from a local account to a Microsoft account with two-factor authentication (2FA) enhances security, accessible via Settings > Accounts > Your info. Device encryption can protect sensitive data, available in Settings > Privacy & security > Device encryption for Home versions and BitLocker for Pro versions. Using a Standard account instead of an Administrator account reduces malware risks, managed through Settings > Accounts > Family. Password managers like NordPass, 1Password, and Bitwarden help generate strong, unique passwords for accounts. Users should learn to spot phishing scams, be cautious of unsolicited tech support calls, and avoid installing software suggested by unknown callers to maintain cybersecurity.

Winsage

June 24, 2026

Windows Secure Boot security deadline arrives today

Microsoft has announced enhancements to its Secure Boot certificate management to improve the security of Windows operating systems. Key features include improved certificate management for easier handling, automated updates for Secure Boot certificates to reduce manual intervention, and enhanced user guidance through resources on Microsoft Learn.

AppWizard

June 13, 2026

As a longtime Android privacy nerd, here are 6 privacy apps I actually regret installing

The author shares experiences with six privacy applications that did not meet expectations. 1. Private Internet Access (PIA): A robust VPN service with a cluttered interface and concerns about its U.S. base; transitioned to NordVPN for a better user experience. 2. Brave Browser: Known for ad and tracker blocking, but had issues with Brave Search reliability, syncing, and battery drain; switched to Firefox with uBlock Origin. 3. LastPass: A former leading password manager that lost trust due to security breaches; moved to Bitwarden for its solid and secure platform. 4. KeePassDX: Impressive for local storage and clean UI, but lacked cloud syncing and required manual password management; eventually chose Bitwarden for convenience. 5. OpenBoard: A privacy-focused keyboard app that is no longer available on Google Play; basic features and installation hassles led to regret over its use; better alternatives exist. 6. OsmAnd: An open-source offline navigation app with extensive customization but a steep learning curve and rigid address searches; now prefers Organic Maps for ease of use.

Tech Optimizer

May 24, 2026

Malwarebytes review: One of the most user-friendly and comprehensive antivirus software suites

Malwarebytes is an antivirus software that offers various plans for consumers and businesses. The consumer plans include: - Standard Plan: Priced at /£29 for essential protection on a single device. - Plus Plan: Available for /£49 annually, includes high-speed VPN and anonymous browsing. - Ultimate/Total Plan: Priced at in the U.S. and £129 in the U.K., includes advanced features like social media monitoring and identity insurance up to million. - Family Plans: Starting from 9/£109 per year for multiple users. For businesses, plans start at for Sole Proprietors covering three devices, with the Small Office plan for 20 devices costing 2. Malwarebytes lacks cloud backup and parental controls, which some competitors offer. Independent testing rated Malwarebytes as "Certified" with high usability scores, but its malware detection was less impressive compared to Bitdefender and Norton 360. The software can be resource-intensive, impacting system performance, particularly during gaming. It offers three scanning modes: Threat Scan, Deep Scan, and Custom Scan, with the Threat Scan completing in 22 seconds and the Deep Scan taking over 14 minutes. Advanced features include a Digital Footprint tool, Scam Guard, a File Shredder, and a VPN. The interface is user-friendly, and 24/7 support is available via email and chat. Malwarebytes has a 60-day money-back guarantee.