Security Archives

AppWizard

September 11, 2026

Android can now transfer passwords between apps

Google has introduced a password manager switching feature for Android that allows users to transfer passwords and passkeys to a new application without downloading CSV files. This feature is available on devices running Android 8 or later and supports various password managers, including Bitwarden, 1Password, and Dashlane. Users can initiate the transfer by opening their new password manager app, which will automatically detect installed password managers on the device. The process allows users to review and approve the information being migrated with minimal effort, enhancing user experience and security by avoiding the risks associated with CSV file transfers.

Tech Optimizer

September 11, 2026

12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code on Database Servers

A PostgreSQL vulnerability identified as CVE-2026-6471, known as PostGREShell, allows attackers with minimal replication access to execute arbitrary code on database servers. This flaw has existed for approximately 12 years and affects non-superuser PostgreSQL accounts with the REPLICATION attribute, commonly used for backup and replication tasks. The vulnerability arises from inadequate restrictions on the library path specified as an output plugin name, enabling an attacker to exploit the logical decoding feature to load a malicious library. Exploitation requires only a PostgreSQL account with REPLICATION privileges, wal_level set to logical, and access to SMB port 445. The flaw was discovered by Cyera Research and dates back to PostgreSQL 9.4's release in 2014. Patches have been released for versions 18.6, 17.11, 16.15, 15.19, and 14.24, and organizations are advised to upgrade to these versions. Database administrators should audit accounts with the REPLICATION attribute and restrict replication connections. Limiting outbound network access and monitoring logical replication activity is also recommended to mitigate risks.

Winsage

September 11, 2026

Microsoft acknowledges Bluetooth on Windows 11 is a hot mess, begins testing nine major fixes

Microsoft has released update 26200.9539 for Windows 11, aimed at improving Bluetooth functionality with up to nine significant fixes. This update enhances the calling experience for Bluetooth headset users during virtual meetings by providing a built-in volume flyout when adjusting volume. It also improves the stability of the Bluetooth & devices page in Settings and addresses microphone compatibility issues for certain Bluetooth Classic Audio accessories. Users with newer Bluetooth headsets featuring LE Audio can expect faster connections, more stable performance, and enhanced audio calling quality. Microsoft is collaborating with OEMs to improve driver quality through the Driver Quality Initiative (DQI), which focuses on enhancing driver trustworthiness, phasing out low-quality drivers, and improving the security and reliability of updates. The initiative aims to strengthen kernel-mode drivers and reduce reliance on third-party driver code, while also streamlining Windows Update to reject outdated or problematic drivers. Further details on these enhancements are expected later this year.

Winsage

September 11, 2026

Microsoft acknowledges Bluetooth on Windows 11 is a hot mess, begins testing nine major fixes

Microsoft has released update 26200.9539 to testers in the Release Preview Channel of the Insider Program, addressing Bluetooth connectivity issues with nine key fixes. This update improves the calling experience with Bluetooth headsets during virtual meetings, enhances the Bluetooth & devices page in Settings, resolves microphone compatibility issues, and fixes a bug related to Bluetooth radio status. Users can expect faster and more stable Bluetooth connections, improved audio calling quality, and better performance for newer Bluetooth headsets with LE Audio. Additionally, Microsoft has initiated the Driver Quality Initiative (DQI) to improve driver quality, remove outdated drivers, and enhance the security and reliability of updates. The DQI aims to strengthen kernel-mode drivers and phase out low-quality drivers from Windows Update.

Tech Optimizer

September 11, 2026

Top 10 Best Endpoint Encryption Software in 2026

Microsoft BitLocker and Apple FileVault are free, integrated encryption solutions within their respective operating systems. As of 2026, the focus is on investing in management solutions that provide compliance proof, key escrow, recovery options, and policy enforcement across devices. Native encryption solutions lack certain management features, prompting the need for additional management layers from various vendors. Legacy freeware like TrueCrypt is no longer maintained, posing risks for business use, while VeraCrypt is a credible open-source alternative but lacks centralized management. Management options include Microsoft Intune for Windows, Sophos for mixed fleets, and specialized providers like Check Point and WinMagic for advanced needs. Organizations should ensure proper key management before enforcing encryption to avoid data loss and regularly test recovery processes. It is crucial to verify claims regarding compatibility and pre-boot options when selecting encryption solutions. Native engines are free, but management layers typically charge per endpoint annually.

AppWizard

September 11, 2026

Android can now move passwords and passkeys between password managers

Google has integrated a password manager transfer feature into the Android operating system, allowing users to move passwords and passkeys between compatible applications without exporting an unencrypted CSV file. This feature is available for devices running Android 8 and later, including users in the UAE. It supports popular password managers such as Google Password Manager, 1Password, Bitwarden, and Dashlane, with more providers expected to join. The transfer process involves selecting the import or copy option in the new password manager app, where Android identifies compatible managers and users authorize the transfer. This functionality operates through Google Play Services, requiring no separate Android version update.

Winsage

September 11, 2026

September Windows Server updates break Remote Desktop Services

Windows administrators are experiencing significant challenges with Remote Desktop Services (RDS) following the installation of the September 2026 cumulative updates for Windows Server versions 2019, 2022, and 2025. Users are unable to connect, and some require a hard reset to regain functionality. Reports indicate that RDS servers initially function well but fail after a few hours, with existing sessions struggling to disconnect and new connections failing. Administrators have noted that issues arise after user logouts, leading to service crashes and deadlocks between Remote Desktop and the Local Session Manager. Microsoft has not confirmed the cause of these failures, which affect all mentioned Windows Server releases. Some administrators have restored functionality by rolling back the updates, but this also removes important security fixes. Microsoft is investigating the issue and will provide guidance.

AppWizard

September 10, 2026

Switching password managers on Android just got a lot safer

Google has introduced a credential transfer feature for password managers on Android devices, allowing users to seamlessly transfer saved passwords and passkeys between applications using the Credential Exchange Format. This feature enhances security by encrypting the transfer process, ensuring that credentials remain secure and inaccessible to Android during the exchange. Users can initiate the transfer by selecting the import option in their desired password manager app, which automatically detects other installed password managers. Currently, the feature is supported by Google Password Manager, 1Password, Bitwarden, and Dashlane, and is compatible with devices running Android 8 or later.

AppWizard

September 10, 2026

New Android Feature Lets You Securely Switch Password Managers

Google has introduced a new system-level feature for Android that simplifies the transfer of passwords and passkeys between password managers. This feature allows users to transfer credentials with a few taps, eliminating the need for file downloads and reducing the risk of data exposure. Previously, migrating credentials involved exporting sensitive information into unencrypted CSV files, which posed security risks. The new mechanism operates at the operating system level, enabling direct communication between applications. Users can initiate transfers by selecting the option to import credentials from another provider, after which Android identifies existing password manager apps. The process requires user authentication and ensures that sensitive information is not stored in an unencrypted format. The feature supports several password management platforms, including Google Password Manager, 1Password, Bitwarden, and Dashlane.

AppWizard

September 10, 2026

Android can now securely migrate your logins between password managers

Google has developed a new login transfer process for password managers that operates on mobile devices, allowing users to migrate credentials seamlessly. To use this feature, users must have the relevant applications installed and their credentials synced. The import option can be found in the settings tab of the app being adopted, while the export function generates an unencrypted CSV file for importing into other applications. This migration feature is compatible with several popular password management tools, including Google Password Manager, 1Password, Bitwarden, and Dashlane.