NewApp Digest
search bot

security risks

Android Users Can Now Share Their Passkeys In Just A Few Steps
AppWizard
September 12, 2026

Android Users Can Now Share Their Passkeys In Just A Few Steps

Ditching passwords for passkeys has become a more secure option, but these keys are often tied to a single device, posing challenges for cross-platform usage. Google has improved the process for Android users to share and transfer passkeys, allowing easier transitions between password management tools like 1Password and Bitwarden. Previously, transferring passkeys required creating new keys, but now users can move both passwords and passkeys through a secure mechanism within Android. This feature supports popular tools such as 1Password, Bitwarden, Google Password Manager, and Dashlane. Users can transfer passkeys to preferred mobile password managers, facilitating access across multiple devices. The transfer feature is valuable for migrating passkeys between applications, enhancing user experience and security as more individuals adopt passkeys.
Android can now move passwords and passkeys between password managers
AppWizard
September 11, 2026

Android can now move passwords and passkeys between password managers

Google has integrated a password manager transfer feature into the Android operating system, allowing users to move passwords and passkeys between compatible applications without exporting an unencrypted CSV file. This feature is available for devices running Android 8 and later, including users in the UAE. It supports popular password managers such as Google Password Manager, 1Password, Bitwarden, and Dashlane, with more providers expected to join. The transfer process involves selecting the import or copy option in the new password manager app, where Android identifies compatible managers and users authorize the transfer. This functionality operates through Google Play Services, requiring no separate Android version update.
Fake porn apps that can hijack your Android phone
AppWizard
September 3, 2026

Fake porn apps that can hijack your Android phone

The National Cybercrime Threat Analytics Unit (NCTAU) has reported a rise in financial fraud linked to deceptive Android applications that pose as pornography apps. These apps are advertised on social media platforms like Facebook and Instagram under names such as ‘Night Play’, ‘Reloop’, ‘Kyss’, ‘Vimo’, ‘Rivo’, ‘Nexo’, and ‘Vixa’. Users who click on these ads are redirected to websites promising adult content, where they are encouraged to download APK files. Once installed, these apps often request sensitive permissions, particularly Accessibility access, which can allow malware to take control of the device and facilitate financial fraud. Some malicious apps may also install a VPN, rerouting internet traffic through servers controlled by attackers and exposing sensitive data. The malware is primarily promoted through ads linked to pornographic content, redirecting users to phishing websites that prompt APK downloads from non-Google Play sources, often using the “.live” domain extension. After installation, the initial app may download a second malicious package disguised as an update, exploiting the permissions granted to the original app.
What a smart firewall does and why it matters on home Wi-Fi
Tech Optimizer
September 1, 2026

What a smart firewall does and why it matters on home Wi-Fi

Home Wi-Fi connects various devices and presents security risks, making firewalls important for network protection. A router firewall is built into the home router and protects all connected devices, while a software firewall operates on individual devices for additional security. Inbound traffic is data coming to a device, while outbound traffic is data leaving it; firewalls analyze this traffic to manage connections. Network security is critical as sensitive information is often accessed on devices used for leisure, and remote work increases data overlap. Firewalls can control network connections and filter unwanted traffic but cannot replace weak passwords or antivirus protection. To enhance home network security, users should secure router settings, keep routers updated, strengthen Wi-Fi access, check connected devices, and replace outdated routers. A comprehensive security strategy includes keeping software updated, using multifactor authentication, being cautious with links, and strengthening firewalls with antivirus protection. Protecting valuable data is essential, and understanding ransomware risks is crucial. The 3-2-1 backup strategy involves maintaining three copies of data on two different storage types, with one copy offsite. Regularly testing backups and knowing how to respond to ransomware incidents are also important.
Why Does Windows Constantly Need To Update?
Winsage
August 28, 2026

Why Does Windows Constantly Need To Update?

Windows updates are issued regularly, primarily for performance enhancement and security reinforcement. They address bugs, improve compatibility, and distribute security patches to mitigate vulnerabilities. Security vulnerabilities are frequently discovered, with alerts issued by the Cybersecurity and Infrastructure Security Agency (CISA) and documented in the Common Vulnerabilities and Exposures (CVE) program. Microsoft releases security fixes on Patch Tuesday, the second Tuesday of each month, and all updates are cumulative. Users of unsupported software versions, such as Windows 10, face increased security risks. Major feature updates occur annually, with optional non-security updates released periodically. For example, the Windows 11 February 2026 preview update introduced new features, although these are not part of the stable channel.
Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud
Tech Optimizer
August 27, 2026

Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud

A network of fraudulent websites, branded as SysScan, has been discovered, which falsely claims to evaluate antivirus software effectiveness through deceptive security scans. These sites manipulate users into uninstalling legitimate antivirus products and disclosing sensitive personal and banking information. Eleven distinct domains associated with SysScan have been identified, all hosted on a single server. The fraudulent scans generate misleading results based on static findings rather than actual system assessments, and users are coerced into believing their computers are at risk. The scams misrepresent normal browser behaviors as security threats and instruct victims to uninstall their antivirus software, compromising their defenses. The operation targets both individual and business users, collecting extensive personal information and utilizing remote-access tools. The data submitted is sent to Telegram via its bot API. Users are advised to disconnect from the internet and secure their devices if they suspect they have been compromised. Indicators of compromise include specific IP addresses and domains associated with the scam.
Search