Security Archives

Tech Optimizer

September 4, 2026

Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices

Microsoft has acknowledged a software bug in its Windows operating system that causes misleading pop-up notifications, indicating that antivirus protection is disabled. These alerts began appearing after the latest Microsoft Defender Antivirus updates, despite the antivirus functioning correctly. The notifications can occur at startup and intermittently, and cannot be silenced through standard notification controls. The issue affects various versions of Windows and Windows Server with the latest Defender updates. Microsoft is working on a resolution, but no timeline has been provided. Users are advised to verify their antivirus status through the Windows Security app and can ignore the notifications if real-time protection is confirmed as active.

Tech Optimizer

September 4, 2026

NordVPN’s Next-Gen Antivirus scores 94% in independent phishing and malware testing

NordVPN's next-generation antivirus achieved a 94% phishing detection rate in an anti-phishing test by AV-Comparatives, ranking third among nine products, behind Avast One Free Antivirus and Norton Antivirus Plus, both at 96%. The evaluation tested 250 live phishing URLs and recorded zero false positives for NordVPN, unlike competitors such as Malwarebytes Premium and Webroot SecureAnywhere. The two-percentage-point difference between NordVPN and the leaders corresponds to five URLs. Other products like Dr. Web Security Space and K7 Total Security had lower detection rates of 57% and 70%, respectively. Previously, NordVPN's Threat Protection Pro had an 83.42% detection rate across 3,209 links, outperforming IPVanish. In June 2024, NordVPN became the first VPN provider to earn AV-Comparatives' anti-phishing protection badge, requiring a minimum detection rate of 85% with zero false alarms. The antivirus feature is available on Plus plans and higher, previously known as Threat Protection Pro, and is included in Plus, Complete, and Prime tiers.

AppWizard

September 4, 2026

Google’s Scam Detection feature is expanding to even more Android brands

Google's Scam Detection feature, initially available only on Pixel devices, is expanding to more Android smartphones, currently accessible on the Galaxy S26 series and potentially coming to vivo phones. Recent findings from the Google Phone app's public beta indicate that Xiaomi may also support this feature, with the Xiaomi 18 Fold being a possible candidate for the initial rollout, although it is currently confirmed only for release in China. Google's Scam Detection uses on-device AI to analyze incoming calls for potential scams, aiming to enhance user security. The feature is still in beta and may have flaws, but improvements are expected as Google refines the technology.

Tech Optimizer

September 4, 2026

Decade-old PostgreSQL flaw turns backup account into a backdoor

The vulnerability CVE-2026-6471 affects PostgreSQL installations on Windows, Linux, and macOS, impacting versions since 9.4 released in 2014. All supported releases have been patched, including versions 18.6, 17.11, 16.15, 15.19, and 14.24, updated on August 13. The vulnerability arises from PostgreSQL's management of output plugins for logical replication, which are dynamically loaded compiled code, leading to insufficient existing security measures.

Tech Optimizer

September 4, 2026

EDB Postgres® AI Gains Momentum as Customers Tell Us the Future of Their Own AI and Data Platform

Organizations are increasingly aiming to establish their own governed AI and data platforms, with 95% of enterprises planning to develop such platforms within the next three years, though only 13% have done so. EDB has reported significant traction for its EDB Postgres® AI (EDB PG AI) platform, which unifies transactional, analytical, and agentic workloads into a single system. PAC 2000A Conad has revamped its data infrastructure using EDB PG AI to support over 1,600 stores and 7,000 connected devices, ensuring compliance with NIS2 regulations. C Platform in Korea is experiencing a surge in demand for hybrid and on-premises capabilities, driven by significant investment in sovereign AI and the AI Basic Act mandating governance for AI deployment. Notable adopters of EDB PG AI include the Industrial Bank of Korea, Shinhan EZ Insurance, NTT East, MNTN, Euronext FX, and Kyobo Book Centre.

Tech Optimizer

September 4, 2026

EDB Highlights Postgres AI Growth in Regulated Enterprise Markets

EnterpriseDB (EDB) has reported advancements in the adoption of its EDB Postgres AI (EDB PG AI) platform, which integrates transactional, analytical, and AI workloads. While 95% of enterprises aspire to become their own AI and data platforms within three years, only 13% have achieved this. EDB PG AI supports existing systems and prepares enterprises for future AI capabilities. A case study highlights PAC 2000A Conad, which restructured its data infrastructure with EDB PG AI, serving over 1,600 stores and 7,000 devices. In Korea, over billion has been invested in the sovereign AI market, with organizations seeking hybrid and on-premises solutions despite challenges from fragmented data environments. Notable users of EDB PG AI include the Industrial Bank of Korea and Shinhan EZ Insurance. EDB PG AI is built on Postgres and allows enterprises to optimize data and AI capabilities with governance at the data layer.

AppWizard

September 4, 2026

I4C warns against malicious Android apps from social media ads

The Indian Cyber Crime Coordination Centre (I4C) has issued an advisory about malicious Android applications disguised as adult-content apps, which are promoted through social media and distributed outside official app stores. The National Cybercrime Threat Analytics Unit (NCTAU) warned that these apps can compromise mobile device security by requesting sensitive permissions and may install additional software without user consent, leading to unauthorized financial transactions. Users are advised to download apps only from trusted sources like the Google Play Store, avoid installing APK files from unverified sources, and refrain from granting accessibility permissions to untrusted applications. Recommendations include regularly reviewing installed apps, keeping Google Play Protect enabled, and monitoring bank accounts for unauthorized activities. Victims of cyber fraud are encouraged to report incidents via the national cybercrime helpline or the government’s reporting portal.

Winsage

September 4, 2026

Microsoft Will Bring Memory Integrity Protection to More Windows 11 PCs in October

Microsoft is expanding the memory integrity protection feature in Windows 11, starting in October. This enhancement aims to strengthen security at the kernel level against sophisticated attacks. Memory integrity protection operates in the background with minimal user configuration. It utilizes Virtualization-based Security (VBS) to create isolated virtual environments for added protection. The system can install security hotpatches without requiring a hard restart, beneficial for critical environments. Large organizations will automatically benefit from this enhancement, while devices with memory integrity disabled will not have it activated automatically. The rollout will enable VBS by default for users, who can choose to disable it but should do so with caution.

Winsage

September 4, 2026

Microsoft says KB5120998 Windows update resets desktop settings

Microsoft has acknowledged an issue affecting some Windows devices after the installation of the KB5120998 preview update released on August 27, 2026. This issue primarily impacts Windows 11 versions 24H2 and 25H2, causing desktop settings, including wallpaper and themes, to reset or be lost, often resulting in a solid black background. Users are unable to manually restore their customized settings due to the issue preventing the correct loading of settings. The KB5120998 update was intended to enhance the Start menu, taskbar, and Windows search but inadvertently introduced complications, including changes to mouse settings that cannot be restored. The update is optional but installs automatically for users with the "Get the latest updates as soon as they're available" feature enabled. A similar bug occurred in February 2020 with the KB4539602 update, which disrupted desktop wallpaper functionality.

Winsage

September 4, 2026

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Microsoft has identified a new malware campaign called TerminalFix that uses fake CAPTCHA prompts to trick Windows users into executing malicious commands. This campaign is a variation of ClickFix attacks and employs deceptive pages that impersonate reputable services like Cloudflare. Instead of traditional CAPTCHA challenges, users are instructed to open PowerShell or Command Prompt and paste in commands, allowing attackers to execute complex scripts more easily. TerminalFix initiates a multi-stage intrusion, granting attackers persistent proxy access to the infected machine, which can lead to further exploitation of the company's network. The campaign relies on social engineering tactics, requiring user compliance with counterfeit verification instructions. Microsoft has released mitigation guidance, recommending restrictions on PowerShell access, monitoring for DLL sideloading, blocking outdated Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The campaign poses significant risks to enterprise networks, but individual users should also be cautious about executing commands requested by websites.