NewApp Digest
search bot

security measures

This Is ‘Best Antivirus Software For 2026’—Microsoft Says
Tech Optimizer
April 21, 2026

This Is ‘Best Antivirus Software For 2026’—Microsoft Says

Microsoft has updated its guidance for over 500 million Windows 11 users, encouraging them to evaluate their security measures. The company asserts that Microsoft Defender, its built-in antivirus software, is adequate for most users, providing protection against potential risks from the moment the PC is powered on. While Microsoft acknowledges that its default protections are usually sufficient, it also notes that the decision to use third-party antivirus solutions depends on individual usage patterns and desired features. Users managing multiple devices, sharing devices with family, or seeking additional services like identity monitoring may consider third-party options. However, Microsoft warns that adding extra security tools can complicate system performance and incur unnecessary costs. The perception of built-in protection has evolved since the Windows XP and Windows 7 eras, with Windows 10 and 11 reinforcing the reliability of Microsoft Defender. Despite this, the guidance is not expected to significantly impact the third-party antivirus market, as testing has shown a variety of excellent options available for users looking to enhance their security.
"The vault is solid, the delivery truck is not" — strong key storage, shaky transfer: why this Windows Recall feature raises new security questions
Winsage
April 20, 2026

“The vault is solid, the delivery truck is not” — strong key storage, shaky transfer: why this Windows Recall feature raises new security questions

Windows Recall, an AI-driven tool by Microsoft designed to capture and analyze users' screen content, was initially unveiled in 2024 but faced a delayed rollout due to significant security concerns. It launched in April 2025 with enhanced security features, including isolation within a "VBS Enclave" to protect against third-party access and filtering out sensitive information. However, security researcher Alexander Hagenah identified a flaw where data is transmitted to a less secure process, d AIXHost.exe, allowing tools like TotalRecall Reloaded to access sensitive data without administrative privileges. Despite reporting this vulnerability, Microsoft deemed it "not a vulnerability" and has not planned significant fixes. In response to user backlash, Microsoft is reassessing its AI initiatives, including Windows Recall, while privacy-focused organizations have introduced features to block the tool. Experts are calling for improved security protocols and user opt-out options.
Windows Defender Security Flaws Actively Exploited by Hackers
Winsage
April 19, 2026

Windows Defender Security Flaws Actively Exploited by Hackers

Three vulnerabilities in Microsoft Defender, known as BlueHammer (CVE-2026-33825), RedSun, and UnDefend, are being actively exploited by hackers. BlueHammer has been patched, while RedSun and UnDefend remain unpatched. The public release of exploit code has accelerated real-world attacks, affecting Windows 10, Windows 11, and Windows Server systems. Attackers have begun exploiting these vulnerabilities, leading to concerns about privilege escalation, disruption of security updates, and the rapid spread of attacks.
Roblox's age verification checks are "unpopular," but chief safety officer Matt Kaufman says they're worth the cost
AppWizard
April 17, 2026

Roblox’s age verification checks are “unpopular,” but chief safety officer Matt Kaufman says they’re worth the cost

Roblox developers face challenges due to new mandatory security measures and age verification restrictions, which have sparked debate among them. To publish games aimed at younger players, developers must now meet specific criteria tied to the new Roblox Plus subscription service, which has replaced the previous Premium model. Concerns have been raised about the impact of these changes on the platform's future, with players expressing frustration over the lack of concessions made in response to feedback. Chief Safety Officer Matt Kaufman acknowledged the unpopularity of the changes but emphasized their necessity for ensuring age-appropriate content. Additionally, Roblox recently settled a proposed lawsuit from Nevada for million, which will fund children's programs and an online safety awareness campaign. Proposed changes to game publishing are set to take effect in June, allowing developers to create games without a subscription, but those games will only be visible to users aged 16 and older.
Windows 11's Recall tool has been cracked open again, and Microsoft doesn't see that as a problem
Winsage
April 16, 2026

Windows 11’s Recall tool has been cracked open again, and Microsoft doesn’t see that as a problem

Alexander Hagenah has developed a tool called TotalRecall Reloaded that exploits a vulnerability in Microsoft's AI feature, Recall, which manages data. Recall was designed to store AI-generated insights but was found to potentially store sensitive information in plain text, prompting Microsoft to delay its rollout. The vulnerability lies in AIXHost.exe, which lacks essential security measures, allowing unauthorized processes to extract sensitive data, such as decrypted screenshots and metadata, after user authentication via Windows Hello. Microsoft has downplayed the risks, asserting that existing security controls mitigate unauthorized access. TotalRecall Reloaded is available on GitHub for further exploration.
Musk’s XChat Is Coming to App Store, Meta, Apple and Finance World Are Trembling
AppWizard
April 15, 2026

Musk’s XChat Is Coming to App Store, Meta, Apple and Finance World Are Trembling

Elon Musk's XChat will launch on the App Store on April 17 as a standalone encrypted messaging application focused on privacy, featuring end-to-end encryption, no advertisements, and a no-tracking policy. Initially part of the X platform, XChat was developed to compete with messaging services like WhatsApp, Telegram, and Signal. The app allows global communication using X accounts without requiring phone numbers, offering cross-platform capabilities unlike iMessage. XChat utilizes a Rust-based architecture with advanced security features and plans to incorporate peer-to-peer transfers and cryptocurrency payments with X Money in 2026, potentially disrupting traditional payment systems. Additionally, it may leverage Grok AI to provide users with various lifestyle services, posing challenges to Google's advertising and search traffic.
Microsoft adds Windows protections for malicious Remote Desktop files
Winsage
April 15, 2026

Microsoft adds Windows protections for malicious Remote Desktop files

Microsoft has introduced new security measures for Windows 10 and Windows 11 to protect against phishing attacks that exploit Remote Desktop Protocol (RDP) connection files. These updates, part of the April 2026 cumulative updates (KB5082200, KB5083769, and KB5082052), include a one-time educational prompt for users upon first opening an RDP file, requiring acknowledgment of the associated risks. Subsequent attempts to open RDP files will display a security dialog with information about the file's publisher, the remote system address, and local resource redirections, with options disabled by default. If an RDP file is unsigned, a warning will indicate an "Unknown remote connection." These protections apply only to connections initiated through RDP files, not through the Windows Remote Desktop client, and can be temporarily disabled via the Windows Registry.
Microsoft tightens Windows 11 driver security rules
Winsage
April 13, 2026

Microsoft tightens Windows 11 driver security rules

Microsoft will enforce a new mandate requiring all hardware drivers to comply with the Windows Hardware Compatibility Program (WHCP) standards starting April 1, 2026. This change will eliminate the "cross-signing" system that allowed older drivers with expired certificates to remain trusted. The enforcement of WHCP certification will apply to various versions of Windows 11 and Windows Server 2025. Users may face blocks when installing older drivers on new systems, but existing installations will not be immediately disrupted. Microsoft plans to introduce an "allow list" for vetted legacy drivers to ensure essential equipment remains operational during the transition. The initial rollout will occur in "evaluation mode," allowing Microsoft to monitor driver behavior without blocking software. For corporate environments, Microsoft offers "Application Control for Business" to allow specific software while maintaining security measures.
Search