NewApp Digest
search bot

security warnings

Microsoft confirms Windows 11 dark mode upgrade, with plans for third-party apps and Registry Editor
Winsage
March 30, 2026

Microsoft confirms Windows 11 dark mode upgrade, with plans for third-party apps and Registry Editor

Windows 11 has introduced a dark theme that has received positive feedback, but certain legacy pop-ups, like the Properties tab, still use a light background. Microsoft is working on a dark-themed Properties tab and aims to enhance the dark mode experience across the operating system, as confirmed by senior executive Marcus Ash. He mentioned that there are no specific timelines for updates to legacy tools like the Registry Editor, but improvements are being made for consistency in dark mode across system-level dialogs. Third-party applications that do not adopt dark mode will continue to display in light mode, as Microsoft cannot enforce changes on them. Users currently experience inconsistencies with dark mode, particularly with legacy features that still show a light background. In December 2025, Microsoft rolled out dark mode for most operational dialogs, including those for file deletion and error notifications. Dark mode is now visible in various pop-ups, such as notifications for insufficient disk space and Recycle Bin confirmations. Microsoft is also testing dark mode in Windows Run (legacy).
Google adds ‘Advanced Flow’ for safe APK sideloading on Android
AppWizard
March 23, 2026

Google adds ‘Advanced Flow’ for safe APK sideloading on Android

Google has introduced a new mechanism called Advanced Flow within Android to facilitate the sideloading of APKs from unverified developers for power users while enhancing security. This system will launch in August and aims to balance user flexibility with protection against malware and scams, which caused losses of approximately billion last year. To install APKs from unverified developers, users must complete a one-time process that includes activating Developer Mode, confirming they are not influenced by threat actors, restarting the device, and verifying the legitimacy of modifications after a day. Once completed, users can install applications from unverified developers and choose to enable them for a week or indefinitely, with Android providing a warning about the unverified source. The Advanced Flow process is designed to prevent users from being coerced into installing malicious software during scam attempts. Google emphasizes that this system is a compromise between Android's openness and necessary user protections, leading to upcoming developer verification requirements. All Android app publishers will need to undergo identity verification by Google, with non-compliance resulting in blocked software installations on certified Android devices. This verification initiative is now set for rollout in August 2026.
This is Android’s new ‘advanced flow’ for sideloading apps without verification, includes one-day waiting period [Gallery]
AppWizard
March 20, 2026

This is Android’s new ‘advanced flow’ for sideloading apps without verification, includes one-day waiting period [Gallery]

Google will introduce a new Android developer verification process later this year to enhance user security and accommodate power users. This will include an "advanced flow" that allows users to disable the verification requirement and install software from unverified developers. Users must activate Developer mode, confirm they are not being guided by a malicious actor, restart their device, and undergo a mandatory one-day "Security wait" period for identity verification through biometric authentication or a device PIN. After this, they can install apps from unverified developers indefinitely, with a temporary option for seven days. Users will still receive a warning when installing apps from unverified developers but can choose to proceed. The rollout is set for August, alongside new developer verification requirements. Additionally, Google will offer limited distribution accounts for developers to share apps with up to 20 users without registration fees or government ID.
Google Proposes Android App Store Changes Following Epic Games Legal Dispute
AppWizard
March 6, 2026

Google Proposes Android App Store Changes Following Epic Games Legal Dispute

Google has submitted proposed modifications to its Android app store operations to a federal court in San Francisco in response to Epic Games' antitrust lawsuit from August 2020. The proposed changes include a revised fee structure that lowers baseline commissions on subscriptions and e-commerce transactions, offers app developers an alternative payment processing option, and allows developers to use payment systems outside of Google's ecosystem. Consumers will be able to download applications from alternative app stores that meet a certification process. These changes require judicial approval and are part of a broader overhaul mandated by a federal judge in October 2024. Google has requested a hearing on April 9 to clarify questions regarding the proposed changes and plans for a global rollout, initially focusing on the United States, the United Kingdom, and the European Union, pending regulatory approvals.
Hackers Abuse Windows File Explorer and WebDAV for Stealthy Malware Delivery
Winsage
March 1, 2026

Hackers Abuse Windows File Explorer and WebDAV for Stealthy Malware Delivery

Cybercriminals are exploiting a legacy feature in Windows File Explorer, specifically the WebDAV protocol, to distribute malware and bypass traditional security measures. Despite Microsoft deprecating native WebDAV support in November 2023, it remains active on many systems. Attackers use WebDAV to deceive victims into executing malicious payloads by sending links that connect File Explorer directly to remote servers, avoiding web browsers and their security warnings. They employ methods such as direct linking, URL shortcut files, and LNK shortcut files to deliver exploits. The primary objective of these campaigns, which surged in late 2024, is to deploy Remote Access Trojans (RATs), with 87% of Active Threat Reports involving multiple RATs like XWorm RAT, Async RAT, and DcRAT. These campaigns predominantly target corporate networks in Europe, with many phishing emails written in German and English. Attackers use short-lived WebDAV servers hosted on Cloudflare Tunnel demo accounts to obscure their infrastructure. Security analysts are advised to monitor unusual network activity from Windows Explorer and educate users to verify addresses in File Explorer.
Microsoft: New Windows LNK spoofing issues aren't vulnerabilities
Winsage
February 13, 2026

Microsoft: New Windows LNK spoofing issues aren’t vulnerabilities

Security researcher Wietze Beukema revealed vulnerabilities in Windows LK shortcut files at the Wild West Hackin' Fest, which could allow attackers to deploy harmful payloads. He identified four undocumented techniques that manipulate these shortcut files, obscuring malicious targets from users. The vulnerabilities exploit inconsistencies in how Windows Explorer handles conflicting target paths, allowing for deceptive file properties. One technique involves using forbidden Windows path characters to create misleading paths, while another manipulates LinkTargetIDList values. The most sophisticated method alters the EnvironmentVariableDataBlock structure to present a false target in the properties window while executing malicious commands in the background. Microsoft declined to classify the EnvironmentVariableDataBlock issue as a security vulnerability, stating that exploitation requires user interaction and does not breach security boundaries. They emphasized that Windows recognizes shortcut files as potentially dangerous and provides warnings when opening them. However, Beukema noted that users often ignore these warnings. The vulnerabilities share similarities with CVE-2025-9491, which has been exploited by various state-sponsored and cybercrime groups. Microsoft initially did not address CVE-2025-9491 but later modified LNK files to mitigate the vulnerability after it was widely exploited.
Search