security concerns Archives

AppWizard

May 16, 2025

Android users lose key Nextcloud feature because Google said so, and the reason doesn’t add up

Google has restricted file upload capabilities for the Nextcloud Files Android app by revoking the "All files access" permission, which has been essential for the app since 2011. This change prevents Android users from uploading various file types to their Nextcloud accounts. Nextcloud has expressed frustration over this decision, suggesting it is a strategic move by Google to maintain dominance in the cloud storage market and favor its own applications. The alternatives proposed by Google, such as the MediaStore API or Storage Access Framework (SAF), do not meet Nextcloud's functionality needs. Nextcloud draws parallels to past corporate tactics that limited competition and highlights ongoing concerns regarding fair competition and regulatory responses.

Winsage

May 15, 2025

Windows 10 is dying, hardware is pricey, and Citrix says VDI will save you

Citrix is promoting its virtualization platforms to address rising hardware costs and upcoming U.S. tariffs effective April 2025. Vice President Philipp Benkler suggested that organizations could extend the lifespan of existing hardware by using eLux, an operating system acquired from Unicon. As businesses face the end-of-life for Windows 10 and the transition to Windows 11, Citrix advocates for deploying centrally managed remote desktops from existing endpoints through its virtual desktop infrastructure (VDI) platform. However, VDI implementation can face challenges such as "boot storms," which may lead to performance issues. Citrix recommends its NetScaler platform to manage these challenges without requiring additional hardware. While Citrix's approach aims to mitigate tariff-related costs, the company has increased its licensing prices, necessitating careful evaluation by organizations considering VDI. Security concerns also arise with NetScaler, as it is often targeted by cybercriminals, potentially introducing vulnerabilities. The effectiveness of Citrix's solution depends on each organization's IT landscape, budget, and ability to manage technical complexities.

Winsage

May 14, 2025

Microsoft’s upcoming OneDrive update bypasses security protocols between business and personal files

Microsoft is integrating its products into the user experience, with OneDrive being a prominent example. The upcoming June update will introduce a feature called "Prompt to Add Personal Account to OneDrive Sync," which encourages users on business devices to sync files with personal accounts, potentially compromising security by exposing sensitive business data. Many users are unaware they are using OneDrive, leading to confusion and frustration, especially among older individuals. To address concerns about the update, users can consult their IT department to implement policies that disable the synchronization prompt or personal sync altogether.

Winsage

May 14, 2025

Windows 11’s Patch Tuesday for May finally brings Recall into the mix

Microsoft's Recall feature is set to debut after a delay due to security concerns. The update for Windows 11, released on May 13th, includes AI-driven tools to enhance user interactions and productivity. Key features integrated from the April 25th Preview update include: - Recall (preview): Allows users to retrieve information from various applications, websites, and documents using AI for quick searches based on content descriptions, with options to save snapshots of activities and manage them through Windows Hello. - Click to Do (preview): Enables immediate action on items displayed on the screen using a keyboard shortcut for editing or summarizing content. - Improved Windows Search: Enhanced search capabilities allow natural language queries to locate documents and settings. - Phone Link: Facilitates interaction between Windows PCs and mobile devices for calls, messages, and content sharing. - Widgets: Web developers can create interactive widgets with customization options for lock screen widgets. Additional updates include improvements to File Explorer, accessibility enhancements, and new settings management options for app recommendations. The update for Windows 10 focuses on a fix for Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI) to improve detection of Linux systems. Detailed patch notes and download links are available through the Microsoft Update Catalog.

AppWizard

May 14, 2025

Nextcloud cries foul over Google Play Store app rejection

Nextcloud, a European software vendor, has raised concerns about Google's treatment of its Android Files application, which has over 800,000 users. The issue centers on the "All files access" permission, which was revoked by the Play Store in 2024, impairing the app's functionality. Nextcloud argues that alternatives like the Storage Access Framework (SAF) and MediaStore API are inadequate for their needs. The app has been able to read and write all file types since its launch in 2016 without security concerns from Google until the recent revocation. Nextcloud claims that Google's policies are stifling competition and that they have faced bureaucratic inefficiencies in addressing their complaints. Despite having a fully functional version on F-Droid, the Google Play version is restricted. Nextcloud has previously lodged a complaint with the EU regarding Microsoft's anti-competitive behavior, and they express frustration over the lack of action taken. They believe larger tech companies are trying to suppress smaller competitors.

Winsage

May 7, 2025

Microsoft has no plans to fix Windows RDP bug that lets you log in with old passwords

Microsoft has decided not to address a significant security flaw in the Windows Remote Desktop Protocol (RDP) that allows users to log in with outdated, cached passwords, even after those passwords have been changed. The company claims this behavior is intentional, designed to prevent users from being locked out of their machines. Microsoft does not consider this a security vulnerability, despite concerns that it creates a potential backdoor for unauthorized access. The issue has been known to Microsoft since at least August 2023, but they chose not to modify the functionality due to compatibility concerns with existing applications.

AppWizard

May 6, 2025

TeleMessage suspends services after hackers claim breach

TeleMessage has temporarily suspended all services due to a reported security breach, with the parent company Smarsh investigating the incident. Customs and Border Protection (CBP) has discontinued using the app as a precaution. A hacker claimed to have accessed a centralized TeleMessage server and downloaded data, including a screenshot of the contact list for employees at Coinbase, which confirmed the authenticity of the screenshot but stated that customer data remained secure. Multiple U.S. government agencies have contracts with TeleMessage or related entities. Another hacker also claimed to have breached TeleMessage, providing evidence of their claims. The investigation into the breach is ongoing, and it is unclear if sensitive communications from U.S. officials were compromised.

AppWizard

May 3, 2025

Photo appears to shows Mike Waltz using Signal-like app that can archive messages

White House Deputy Press Secretary Anna Kelly confirmed that the encrypted messaging application Signal is officially sanctioned for government use and installed on government-issued devices. The National Security Council has not commented on the related app, TeleMessage, which is derived from Signal and designed to help government entities comply with records retention laws. TeleMessage was founded in 1999, acquired by Smarsh in 2024, and has been involved in government contracts, including a .1 million contract with the Department of Homeland Security and FEMA that began in February 2023 and will conclude in August 2025. Tom Padgett, Smarsh’s president for enterprise business, stated that like Signal, messages sent through TeleMessage are encrypted, but the app does not address security issues raised by a recent incident involving Signal. The specifics of how government officials utilize TeleMessage remain unclear, and five cybersecurity experts admitted they were unfamiliar with the app prior to recent developments. TeleMessage licenses parts of its technology, including its encryption protocol, to other companies, but Signal clarified there is no formal agreement with TeleMessage and expressed concerns about the privacy and security of unofficial versions of their app.

Winsage

May 2, 2025

Microsoft has no plans to fix Windows RDP bug that lets you log in with old passwords

Microsoft has decided not to address a significant security vulnerability in its Windows Remote Desktop Protocol (RDP) that allows users to log into machines using outdated cached passwords, even after those passwords have been updated or changed. This situation creates a potential backdoor for unauthorized access, raising security concerns. Microsoft defends this functionality as a design choice to prevent users from being locked out of their machines, prioritizing accessibility over security.

AppWizard

May 2, 2025

Caught on camera: Mike Waltz using less secure version of Signal messaging app – The Times of India

Mike Waltz has come under scrutiny due to a photograph showing his use of a modified messaging application, TM SGNL, raising security concerns. The photo, taken by Reuters on April 30, 2025, during a White House cabinet meeting, revealed Waltz's phone screen with conversations involving JD Vance, Marco Rubio, Tulsi Gabbard, and Steve Witkoff, who are key figures in foreign relations and national security regarding Ukraine. TM SGNL is a variant of Signal, known for its encryption, but its archiving feature risks compromising end-to-end encryption. Messages displayed included a note to Rubio stating, "there is time," and Vance's message about confirmation from a counterpart. Following these events, President Trump appointed Waltz as UN ambassador and Rubio as interim national security advisor. The White House stated that "Signal is an approved app for government use and is loaded on government phones."