security concerns Archives

AppWizard

July 22, 2026

Messenger Interoperability: Well-Intended, but Bad for Data Privacy

WhatsApp began supporting third-party messaging services in late 2025 in compliance with the EU's Digital Markets Act (DMA), which requires major tech companies to enable interoperability with alternative chat platforms. Threema has chosen not to implement interoperability with WhatsApp, citing concerns over user privacy and security, as differences in user identification methods could lead to compromises that weaken privacy protections. Threema believes that interoperability could reinforce WhatsApp's market dominance, reducing the incentive for users to adopt the Threema app. Additionally, Threema's business model relies on app sales for revenue, and a drop in downloads due to interoperability could threaten this model. Consequently, Threema has decided against pursuing interoperability with WhatsApp to maintain its commitment to privacy and security.

Winsage

July 18, 2026

Windows 10 devices carry 3 times the risk of Windows 11, data shows

Approximately 16.9% of Windows client devices are still using Windows 10, which has three times more active Common Vulnerabilities and Exposures (CVEs) than Windows 11, totaling 1,903 compared to 652. Two-thirds of the vulnerabilities in Windows 10 are classified as high or critical, with an exploitable rate 1.7 times greater than in Windows 11. Migration to Windows 11 is not primarily hindered by technical limitations, as only a small fraction of Windows 10 devices do not meet the hardware requirements. Additionally, nearly 20% of monitored Windows devices are running end-of-life operating systems, including Windows 7, 8.1, and XP.

Winsage

July 13, 2026

Microsoft demystifies how Windows updates work

Microsoft has released a guide on the Windows servicing model, detailing monthly security updates, optional preview releases, hotpatch updates, and feature rollout mechanisms. Patch Tuesday occurs every second Tuesday of the month, delivering cumulative security updates to supported Windows versions. For consumers and small businesses, updates are managed through Windows Update, while enterprises can use various tools like Windows Autopatch and WSUS. Hotpatch updates, which focus on security fixes, can be installed without a restart, unlike quarterly baseline updates that require one. Optional non-security preview updates are released in the fourth week of each month for testing upcoming fixes and new features, available only for the latest supported Windows versions. Unmanaged devices can access these updates through Windows Update settings, while IT-managed devices depend on organizational policies. Microsoft also issues out-of-band updates to address urgent issues, which can be deployed through enterprise management tools. New features for Windows 11 are rolled out throughout the year via various channels, with a gradual rollout strategy to monitor quality and compatibility, using the Controlled Feature Rollout approach.

AppWizard

July 3, 2026

messaging app arattai withdraws username feature

Zoho-owned messaging app Arattai has disabled its Username feature to comply with regulatory changes, as stated by Zoho founder Sridhar Vembu. The decision reflects concerns over digital privacy and security amid evolving regulations. The Indian government has issued notices to WhatsApp, Signal, and Telegram regarding their usernames feature, instructing them to refrain from rolling it out until proper consultations are conducted. Digital advocacy groups, like the Internet Freedom Foundation, criticize the government's approach as an overreach into private companies' operational decisions. WhatsApp has addressed user concerns by releasing a FAQ related to impersonation, scams, and unwanted contacts.

AppWizard

June 26, 2026

Banking Apps, No Google, and a Locked Bootloader: How iodé Makes Privacy Android Work for Everyone

Brian from iodé discussed the project's goal of creating a user-friendly, privacy-focused Android distribution. Key features include a tracker blocker that enhances user privacy and two app stores—F-Droid and Aurora Store—to address app compatibility concerns. Users can uninstall pre-installed apps and experience reduced notifications and ads. iodé promotes sustainability by encouraging the use of refurbished devices and aims to support a wider range of devices beyond just Google Pixels. The user base is estimated at over 10,000 individuals across various countries, with a focus on privacy and usability. iodé offers integrated privacy features and monthly security updates, supporting over 60 devices.

AppWizard

June 25, 2026

Riot Vanguard finally drops its controversial always-on requirement for anti-cheat — new on-demand mode requires a strict Windows 11 security stack

Riot Games has introduced a new feature for its Vanguard anti-cheat system called Vanguard On-Demand, which allows the kernel driver to load only when a Riot game is launched and unload upon exit. This change ends the previous practice of loading the driver at Windows start-up, which has been in place since 2020. The new mode is supported by Windows 11 25H2 and requires specific hardware configurations, including UEFI Secure Boot, TPM 2.0, Virtualization-Based Security (VBS), Hypervisor-Protected Code Integrity (HVCI), and IOMMU. Approximately 35% of players currently meet these hardware requirements, while around 3% are using incompatible systems. Riot has created a checklist called Vanguard Pre-Check to help players determine if their systems qualify. The percentage of fully secured machines is estimated to be around 34.33% and is increasing monthly. Players whose systems do not meet the criteria will need to make manual adjustments in their BIOS. Vanguard On-Demand mode will be available for players on Windows 11 starting later today. The feature is based on Microsoft’s Runtime Driver Attestation Report, which tracks driver activity since boot and helps ensure no vulnerable drivers have been loaded while Vanguard is inactive. Riot Games has required TPM 2.0 and Secure Boot on Windows 11 since 2020 and has faced criticism for these requirements. Enabling VBS and HVCI may affect frame rates and could disable older peripheral drivers due to Microsoft's vulnerable driver blocklist.

Tech Optimizer

June 23, 2026

Meta pauses controversial employee-tracking program after security review

Meta has suspended its employee-tracking program after an internal security review revealed excessive accessibility to sensitive data collected from staff laptops. The program, part of the Model Capability Initiative (MCI), aimed to gather detailed information on employee interactions with work devices, including mouse movements, click locations, keystrokes, and screen content. Concerns arose regarding the privacy and security of the collected data, which included AI prompts, transcriptions, private conversations, and performance-related information. The initiative faced backlash, particularly after an engineer criticized "laptop surveillance," leading to a petition for its termination. The monitoring software was deployed on US workers’ laptops without an opt-out option, capturing comprehensive behavioral datasets. The situation highlighted significant legal and regulatory challenges, as well as the risks associated with managing sensitive data. Access controls, data minimization, and retention policies are critical to mitigate potential breaches.

Winsage

June 23, 2026

Why is Windows 11 so disliked by programmers – and can Microsoft do anything to change things?

Windows is experiencing a decline in favor among developers, with many preferring macOS and Linux for coding. Although nearly half of developers (49.5%) primarily work on Windows, this is often due to organizational mandates rather than personal preference. Developers interviewed did not select Windows as their preferred environment, citing concerns about Microsoft's developer experience, cumbersome tools, and security issues. The Windows Subsystem for Linux (WSL) allows developers to run Linux environments on Windows 11, addressing some compatibility issues. However, there is a consensus that Microsoft should enhance WSL and align Windows more closely with Linux to attract more developers. Critics also point to the intrusive nature of ads and upselling in Windows 11 as detracting from the developer experience.

AppWizard

June 23, 2026

Telegram’s ad business: How the messaging app makes money

Telegram has established an advertising model that focuses on monetizing public channels, selling ads based on channel topics rather than user identity. Revenue generated from ads is split evenly between Telegram and the channel owner, with no data-mining or behavioral targeting involved. The primary ad format is Sponsored Messages, which appear in public channels with at least 1,000 subscribers and consist of a text block and optional call-to-action button. Advertisers can purchase these ads through a self-serve portal without demographic targeting, ensuring no personal data is used for placements. Public channels are treated as independent units, with 50% of ad revenue going to channel owners, paid in Toncoin. Telegram's ad system has become more accessible by lowering minimum spend requirements. In addition to Sponsored Messages, Telegram is developing Mini Apps funded by its in-app currency, Stars. Regulatory scrutiny has increased, with various countries imposing bans or restrictions on Telegram for reasons related to content moderation and compliance, such as a temporary ban in India in June 2026 due to exam fraud investigations.

AppWizard

June 19, 2026

Google sets launch date for review of Android apps distributed outside the Play Store

Google's upcoming Android app verification system will begin on September 30, 2026, restricting the installation of apps from unverified developers outside the Google Play ecosystem. Certified Android device users will be unable to install apps from developers lacking Google verification, which requires identity authentication through the Android Developer Console. A list of participating app stores includes Google Play, Samsung Galaxy Store, Xiaomi GetApps, HONOR App Market, OPPO App Market, vivo V-Appstore, and Palm Store by Transsion. A new system component, com.google.android.verifier, will be integrated into certified devices running Android 8 or later. In August, Google will introduce a feature called Advanced Flow, allowing users to install unverified apps through a complex process. A Limited Distribution mode for independent developers will enable app distribution to a maximum of 20 devices without registration fees or document verification. The regulations will initially be implemented in Brazil, Indonesia, Singapore, and Thailand, with plans for a global rollout by 2027.