Security Archives

AppWizard

September 10, 2026

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Gigabud banking trojan installs a secondary Android application called Vwork, which creates a work profile on compromised devices to evade detection from banking app security measures. This work profile separates its contents from the personal space of the device, allowing fraudulent transactions without triggering alerts. Group-IB confirmed this operational chain in Indonesia, where Gigabud has been active since 2022 and is linked to the GoldFactory group, which uses deceptive tactics to distribute the trojan. Vwork simplifies the creation of a work profile and communicates with an external server for authorization before cloning apps. The report indicates that Vwork has been detected in various countries, while approximately 1,469 devices and 1,281 logins were compromised in Indonesia, leading to estimated losses of around ,000,000. Users can check for a work profile in their phone's settings and are advised to download apps only from official stores and to deny unnecessary Accessibility access.

AppWizard

September 10, 2026

Tor VPN Beta brings isolated app-by-app Tor routing to Android

The Tor Project has launched Tor VPN Beta for Android, allowing mobile applications to route traffic through the Tor network, expanding beyond web browsing. This development was driven by user demand for privacy tools to bypass internet censorship, particularly in restrictive regions. The concept originated in 2021, and after initial testing and user feedback, the beta was announced on September 9. Tor VPN creates a separate Tor circuit for each application, enhancing privacy by complicating activity correlation across apps. Users can select which applications use Tor, and the interface has been improved for easier management. The beta version 1.4.0 includes support for WebTunnel bridges to disguise Tor connections as standard encrypted traffic. Usability testing revealed issues with exit-node selection, leading to a design change that requires users to connect to Tor before choosing an exit. Tor VPN is built on the Arti implementation of the Tor protocol and the Onionmasq networking layer, ensuring stability and component sharing. The software supports reproducible builds and is available via F-Droid and APK downloads. A security review in June 2025 found no major flaws but identified some issues being addressed. Tor VPN is currently in beta and focuses on enhancing circumvention capabilities and usability rather than competing with commercial VPNs on speed. Users in censored areas are advised to configure bridges for access.

AppWizard

September 10, 2026

Comma Compliance Open-Sources the Android App That Archives Employee Text Messages

Comma Compliance released the source code for its Android capture component on September 10, 2026, allowing corporate IT and security teams to inspect the software that captures employee text messages for compliance archiving. The source code is available on GitHub under the MIT license. The capture mechanism reads messages stored in the phone's default messaging app, encrypts them, and sends them to the customer's Comma backend without intercepting messages in transit. A persistent notification appears on the phone when archiving is active, indicating the organization responsible for the archiving. Comma previously open-sourced its WhatsApp and Signal capture connectors in 2025.

Winsage

September 10, 2026

Microsoft fixes bug that wiped Windows desktop settings

Microsoft announced that the September 2026 Patch Tuesday updates resolved an issue affecting desktop settings on certain Windows devices, which caused desktop wallpapers to revert to a solid black background after the installation of the KB5120998 August 2026 preview update. This bug impacted Windows 11 24H2 and 25H2 systems, preventing the correct loading of desktop settings and also affecting mouse settings. Microsoft recommended users update their devices to the latest security update released on September 8, 2026 (KB5124008) to benefit from the fix.

Tech Optimizer

September 10, 2026

8 Antivirus (Endpoint Protection) Software for Business: Our Top Picks by Use Case (2026)

If you hold Microsoft 365 E5, you have access to Microsoft Defender for Endpoint, which provides enterprise-grade endpoint protection at no additional cost. For organizations without a dedicated security specialist, Sophos is recommended for its user-friendly platform. CrowdStrike is suggested for those with a mature Security Operations Center (SOC) and sufficient budget. Other options include SentinelOne for mid-sized organizations needing automation, ESET for older hardware and virtual desktops, Avast Business for very small businesses, VIPRE for budget-conscious mixed estates, and Expel for tool-agnostic managed detection and response. Antivirus and EDR are now unified under a single agent, and organizations should inquire about update staging processes to avoid issues like those experienced in July 2024 with a major vendor's faulty content update. Independent tests from organizations like AV-Comparatives and AV-TEST are crucial for evaluating protection rates and false positives. Linux servers require attention as they are often targeted by ransomware. When deploying endpoint protection, avoid running two real-time agents simultaneously, activate prevention features promptly, and test deployments on critical applications first. Organizations should confirm their Microsoft licensing covers necessary features and ensure there is a plan for responding to alerts. Common pitfalls include neglecting identity management and failing to test response workflows before incidents occur.

Tech Optimizer

September 10, 2026

8 Antivirus Software for Mac: Our Top Picks by Use Case (2026)

Apple provides built-in security features for macOS, including XProtect, Gatekeeper, and automatic malware removal, which contribute to the safety of Macs. However, these protections do not effectively address threats like infostealers, phishing, and adware. For enhanced security, third-party antivirus solutions are recommended. Bitdefender is noted for its strong detection rates and minimal system impact, making it suitable for most users. Intego specializes in Mac-specific threats and is ideal for users focused solely on Apple products. ESET and Trend Micro are recommended for businesses needing centralized management. F-Secure is recognized for its privacy-focused approach, while Norton offers a comprehensive suite of security features. AVG provides free real-time protection suitable for low-risk personal use, but may not be adequate for business needs. CleanMyMac is a maintenance tool rather than a traditional antivirus, focusing on system cleanup and optimization. Users should avoid running multiple real-time scanners simultaneously and ensure they purchase appropriate licenses for business use. It's important to evaluate the necessity of additional features and consider long-term pricing when selecting antivirus software.

AppWizard

September 10, 2026

Fix: Embark Game Boot Fatal Error (Detected Software) ARC Raiders

ARC Raiders players may face issues launching the game due to the Embark Game Boot halting unexpectedly because of a fatal error. Two main error messages can occur: "Detected Software," indicating that the anti-cheat system has identified a disallowed process, and "Failed to install EasyAntiCheat," which suggests that the EAC service or driver could not be initialized. The first error can be triggered by an AutoHotkey-based utility, while the second may arise from a locked EAC file, another anti-cheat process, or an incomplete installation of the service. If players reach the menu but experience crashes, they should consult the ARC Raiders crashing and freezing guide for troubleshooting steps related to the Embark Game Boot or Easy Anti-Cheat. Specific error messages and their solutions include: - "Detected Software or Cheat Software Detected": Close the named process. - "Failed to install EasyAntiCheat or EAC is not installed": Run EAC uninstall and install scripts. - "Error 30005 or CreateFile failed with 32": Restart Windows to unlock the EAC file. - "Maximum simultaneous game instances reached": Close other games and anti-cheat processes. - "An ARAV code names AutoHotkey, an auto-clicker, Cheat Engine, a VM, or another tool": Stop the named program. - "An ARAV code ending in 005, 006, or 007": Verify the game installation in Steam. To resolve issues: 1. Check and close the program named by Embark Game Boot. 2. Repair Easy Anti-Cheat from the ARC Raiders Installer Folder. 3. Verify the ARC Raiders installation in Steam. 4. Reinstall ARC Raiders if previous steps fail, and provide detailed error information to Embark Support if issues persist. Players should ensure that any flagged processes are closed before attempting to launch the game or reinstall it.

Winsage

September 10, 2026

Windows 11’s last Secure Boot deadline is weeks away, here’s what you must do

Microsoft is continuing the rollout of Secure Boot certificate updates, with the next significant deadline on October 19, 2026, when the Microsoft Windows Production PCA 2011 certificate expires. The September 2026 Patch Tuesday update has expanded eligibility for Secure Boot certificates to more PCs classified as “high confidence.” Users may need to reboot their PCs to install these updates, and some may require firmware updates beforehand. Microsoft has confirmed that the update process will persist beyond established deadlines, and older certificates are expiring in stages, with the first two deadlines having already passed. Users should ensure they have the latest updates installed and check their Secure Boot status in Windows Security. Microsoft has assured that PCs without the newer certificates will continue to boot normally and receive standard updates while the rollout continues.

Winsage

September 10, 2026

Microsoft patches 966 vulnerabilities: Two Windows zero-days actively exploited

On September 8, 2026, Microsoft released 966 security updates, the largest Patch Tuesday to date, addressing various vulnerabilities. Among these, 105 were classified as critical, including two zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. Both allow authorized local attackers to escalate privileges to SYSTEM level. CVE-2026-81963 is related to the Windows Update Stack, while CVE-2026-85880 involves a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC). The updates included 438 vulnerabilities related to privilege escalation, 258 concerning remote code execution, and 173 involving information disclosures. Users are advised to prioritize the installation of these updates due to the potential exploitation of the two critical vulnerabilities.

BetaBeacon

September 10, 2026

APK ios Android mobile adaptation

- Book of Ra offers authentic Egyptian slot action with high-variance gameplay. - Players can guess the color of the second playing card up to 5 times in a row. - New icons in the game include a Pharaoh, Cleopatra, a Scarab, an archaeologist, and the Golden Book of Ra. - The game has a simple bonus game where winnings can be wagered up to 5 times. - The top payout is 500 times the bet in the base game. - Book of Ra has a classic 5x3 layout with 10 paylines. - The game has a Gamble Feature where players can double their winnings. - The bonus round can result in wins up to 5,100,000 times the original stake. - The game has a Scatter symbol, a Wild symbol, and a Bonus symbol. - The game has a high RTP value of 92.13%.