NewApp Digest
search bot

security threats

Introducing new Surface devices built for business and AI acceleration
Winsage
May 19, 2026

Introducing new Surface devices built for business and AI acceleration

IT leaders face challenges from the rise of artificial intelligence, sophisticated security threats, and scrutiny over investment decisions regarding PC fleets. Microsoft has introduced the Surface line to address these demands, integrating advanced silicon and software for enhanced security and AI capabilities. The new Surface Pro for Business and Surface Laptop for Business, powered by Intel Core Ultra Series 3 processors, offer significant performance improvements, including up to 35% better graphics than the MacBook Air with M5 and over 90% faster than the Laptop 5 on select configurations. The Surface Laptop for Business is available in 13-inch and 15-inch models, starting at 9.99, featuring a high-resolution touchscreen, advanced haptic touchpad, and up to 23 hours of battery life. The 13-inch Surface Pro for Business, also starting at 9.99, combines multiple input methods with on-device AI processing. All Surface devices are designed with security as a core principle, shipping as Secured-core PCs, and include an optional integrated privacy screen. They support AI applications both in the cloud and on-device, enhancing productivity. Devices can be managed through Microsoft Intune for operational efficiency. The new Surface devices are made from recycled materials, designed for energy efficiency, and certified by ENERGY STAR.
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
Winsage
May 14, 2026

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

An anonymous cybersecurity researcher disclosed two new zero-day vulnerabilities affecting Microsoft systems: YellowKey and GreenPlasma. YellowKey is a BitLocker bypass that operates as a backdoor within the Windows Recovery Environment, impacting Windows 11 and Windows Server 2022/2025. Exploiting YellowKey involves copying specially crafted files to a USB drive, connecting it to a Windows computer, and rebooting into WinRE. The researcher expressed skepticism about Microsoft's response time to this vulnerability, noting that using TPM+PIN does not mitigate the risk. GreenPlasma is a privilege escalation vulnerability that allows an unprivileged user to obtain a shell with SYSTEM permissions through arbitrary section creation in Windows CTFMON. The proof-of-concept for this exploit is incomplete but indicates potential manipulation of trusted privileged services or drivers. Additionally, a related attack against BitLocker was detailed by French cybersecurity firm Intrinsec, which exploits a boot manager downgrade using CVE-2025-48804 to bypass encryption protections on fully patched Windows 11 systems. This method allows attackers to boot from a controlled WIM while the boot manager checks the legitimate one, executing with the decrypted BitLocker volume. Despite Microsoft releasing fixes for this defect in July 2025, a flaw in Secure Boot verification allows a vulnerable boot manager to bypass BitLocker safeguards. To mitigate these risks, enabling a BitLocker PIN at startup and migrating to a new boot manager certificate is recommended.
Android Apps on Windows 11: Safe Alternatives After WSA
AppWizard
May 12, 2026

Android Apps on Windows 11: Safe Alternatives After WSA

In 2025, Microsoft announced it would discontinue support for the Windows Subsystem for Android (WSA), making Android applications non-functional on Windows 11. This decision surprised many users in Indonesia who relied on these applications. HP developed a guide outlining secure alternatives to WSA, which included reputable Android emulators like BlueStacks, LDPlayer, and NoxPlayer, as well as native Windows alternatives such as Microsoft Teams and Microsoft 365 apps. Users were advised against unverified APK sideloading, unofficial emulators, and modified apps due to security risks. Microsoft’s end of support means no further security updates or bug fixes will be provided, and integration with the Amazon Appstore will cease. Users can continue using WSA apps, but they will be exposed to potential security threats. To migrate data from WSA, users were instructed to inventory apps, research alternatives, and export app data before performing a clean uninstall. Best practices for running Android apps safely on Windows included downloading from official sources and keeping software updated.
Android alert: 7 million users downloaded ‘stalking’ apps that were actually scams
AppWizard
May 8, 2026

Android alert: 7 million users downloaded ‘stalking’ apps that were actually scams

Security researchers at ESET uncovered a scam involving 28 applications named "CallPhantom," which collectively amassed over 7.3 million downloads on the Google Play Store. These apps promised access to call histories, SMS records, and WhatsApp call logs for any phone number, raising privacy concerns. They requested intrusive permissions from users' devices, leading to potential privacy violations. Payment structures varied, with some using Google Play's billing system and others circumventing it through third-party methods. ESET reported the apps to Google in December 2025, resulting in their removal from the Play Store. A recent search confirmed that these apps are no longer available.
Microsoft stopped protecting Windows 10 — The fix is only $10
Winsage
April 29, 2026

Microsoft stopped protecting Windows 10 — The fix is only $10

Windows 10 support ended in October 2024, leaving systems vulnerable to security threats. A lifetime license for Windows 11 Pro is currently available for .97, regularly priced at 9, with the offer expiring on May 3 at 11:59 PM. Windows 11 Pro includes features such as Microsoft Copilot, TPM 2.0, BitLocker encryption, Smart App Control, biometric recognition, Snap Layouts, improved memory management, DirectX 12 Ultimate, Windows Sandbox, and Hyper-V.
‘Out Of Stock’—Google Offers Free PC Upgrade For Windows Users
Winsage
April 25, 2026

‘Out Of Stock’—Google Offers Free PC Upgrade For Windows Users

Google has announced ChromeOS Flex as a free upgrade for Windows users facing the phase-out of Windows 10. This initiative, in partnership with Back Market, aims to transform unsupported laptops into secure machines at no cost, targeting the approximately 500 million Windows 10 users unable to upgrade to Windows 11 due to hardware limitations. The upgrade is free, with a nominal fee for the USB hardware required for installation. However, the USB kits are currently out of stock, and users can sign up on Back Market's website for notifications. ChromeOS Flex offers robust protection against malware, allowing older hardware to remain secure.
silver Android smartphone
Winsage
April 20, 2026

Planning your path to Windows Server 2025: What organizations are prioritizing in 2026 | Microsoft Windows Server Blog

Windows Server is facing increasing operational demands due to the need for quicker patch cycles, enhanced system resilience, and complexities from hybrid environments. The Windows Server Summit 2026, scheduled for May 11–13, will address these challenges by providing actionable insights on security, patching, resiliency, and hybrid operations. Key areas of focus for organizations include upgrade planning for Windows Server 2025, hybrid governance and management through Azure Arc, and maintaining operational consistency at scale with monitoring and patch automation. The Summit will feature scenario-based technical sessions and live Q&A opportunities with Microsoft’s engineering and product teams. Common triggers for reevaluation of Windows Server operations include plans to transition to Windows Server 2025, reassessment of patch cadence, efforts to standardize operations across hybrid deployments, and recognition of operational fragmentation. The event aims to provide practical guidance for enterprise IT professionals to secure and modernize their Windows Server environments.
Avast Antivirus: A Complete Guide to the Software and Its Security Features
Tech Optimizer
April 8, 2026

Avast Antivirus: A Complete Guide to the Software and Its Security Features

Avast antivirus is a widely used digital security solution for mobile and desktop platforms, developed by Gen Digital. It offers a free version that is accessible and easy to set up, making it popular among first-time users. Key security features include real-time threat protection, web protection tools, email protection, behavior monitoring, and a network inspector. The software operates quietly in the background, has a clean and intuitive interface, and provides essential security features in its free version. However, users may experience intrusive upgrade prompts, and advanced tools require a paid subscription. Avast distinguishes itself by offering behavioral threat detection in both free and paid versions, and its extensive user base enhances its threat detection capabilities. The free version includes basic protections suitable for everyday online activities, but advanced features necessitate an upgrade. Users are encouraged to adopt strong passwords, utilize password managers, enable two-factor authentication, and practice safe browsing habits to ensure online privacy.
Search