Security Archives

AppWizard

July 25, 2026

Google ends Play Services Support, likely to stop these Android phones from downloading apps & games

Google Play Services operates in the background on Android devices, facilitating essential functions such as account management, push notifications, location tracking, maps functionality, security verification, and data syncing. It simplifies signing into Google accounts, provides timely updates, enhances navigation, supports Google Maps, safeguards user data, and ensures consistent data across applications.

AppWizard

July 25, 2026

Amid youth protests, Centre directs blocking of messaging app that works without internet: Developer

The Union Home Ministry has requested GitHub to remove repositories related to Bitchat, a Bluetooth-based messaging app that functions without internet connectivity, due to security concerns amid protests in central Delhi. Jack Dorsey, co-founder of Twitter, shared the directive, which aims to suppress the availability of such technologies. The Indian Cybercrime Coordination Centre has expressed worries that decentralized communication tools like Bitchat could be misused for unlawful activities. The directive, issued under Section 79(3)(b) of the Information Technology Act, 2000, requires GitHub to disable access to three Bitchat-related repositories within three hours. The Internet Freedom Foundation criticized the government's lack of transparency and argued that concerns about potential misuse do not justify banning access to the app's code. The protests, initiated by the Cockroach Janta Party, are demanding the resignation of Union Education Minister Dharmendra Pradhan over alleged mismanagement of competitive examinations, with increased support following police actions against demonstrators.

AppWizard

July 25, 2026

GitHub ordered to remove decentralized messaging app Bitchat in India

India's Ministry of Home Affairs has ordered GitHub to remove repositories related to Jack Dorsey's Bitchat application, citing concerns that the platform could allow users to bypass internet shutdowns and evade surveillance. The directive targets the software itself rather than specific unlawful content, referencing Section 79(3)(b) of the Information Technology Act, 2000, and requires compliance within three hours to avoid legal repercussions for GitHub. The repositories in question are: - github.com/permissionlesstech/bitchat - github.com/permissionlesstech/bitchat-android - github.com/permissionlesstech/bitchat-android/releases Bitchat is a decentralized messaging app that operates over Bluetooth mesh networks, which does not require internet access and facilitates anonymous communication. The app's design includes features like end-to-end encryption and no mandatory user registration. The Indian Cyber Crime Coordination Centre (I4C) claims the app could be misused for illegal activities and cites local laws as justification for the takedown. The order comes amid ongoing protests in New Delhi, where internet access has been suspended. The Internet Freedom Foundation has criticized the order as unconstitutional and has called for its retraction. It is currently unclear if GitHub will comply with the takedown request.

Winsage

July 25, 2026

It’s impossible to recommend paid Windows cleanup utilities when Windows Sysinternals does everything for free

Windows utility suites often charge a yearly subscription fee but frequently provide only basic functionalities like startup managers and process monitors. Many features can be accessed for free through Windows' built-in capabilities. Microsoft's Sysinternals suite offers powerful alternatives, such as Autoruns, which provides a comprehensive view of all startup locations, including registry keys and scheduled tasks. Process Explorer offers detailed insights into running processes, surpassing the standard Task Manager by displaying process trees and resource usage. SDelete securely deletes files by overwriting data multiple times, making recovery nearly impossible. While Sysinternals tools are powerful, they require a learning curve and deeper engagement compared to the polished interfaces of paid utilities. Sysinternals emphasizes functionality over marketing, proving that free tools can deliver exceptional performance without compromising quality.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

AppWizard

July 24, 2026

The biggest indie “friendslop” game of 2026 appears to be delivering malware via Steam Workshop — How to protect your PC (and what to do next)

Certain custom maps linked to the game Meccha Chameleon may contain malicious scripts that can compromise players' PCs. An analysis by Feint revealed that these maps could include a Blueprint actor designed to execute automatically upon loading, which injects a batch file into the user's Documents folder. This batch file then attempts to run a PowerShell process to connect to an external server and download additional scripts. The behavior of these maps—writing or executing scripts outside their designated folder—indicates potential malware. Valve, the parent company of Steam, previously addressed similar issues with other software but warned that such incidents could happen again.

AppWizard

July 24, 2026

Google’s ‘Selfie Video’ literally turns your face into a key for your account

Google has introduced a new sign-in method called Selfie Video, which uses facial recognition for account access. Users must initially set up a Selfie Video by following guided instructions to capture various angles of their face, which will be used for future verifications. This feature complements existing biometric methods and can work alongside recovery contacts for added security. Additionally, Google promotes passkeys as a secure alternative to traditional passwords, designed to be faster and resistant to phishing attacks.

Winsage

July 24, 2026

Microsoft shares some details on Azure outage that blocked Windows 11 update downloads

This week, Meta experienced a global outage affecting Facebook users, followed by Microsoft facing performance issues with its M365 services, including Teams and SharePoint. Microsoft also reported difficulties with Azure, impacting Windows 11 updates and the Microsoft Store. The issues began around 11:15 AM PST on July 23, 2026, with a notification to users about the Azure outage affecting Windows Update and related services. Microsoft initiated recovery efforts and by 1:45 PM PST, announced that the issues were resolved and services were restored. Currently, there are no ongoing issues reported on the Microsoft Service Health Status page, but the incident is documented on the Windows Release Health page.

Tech Optimizer

July 24, 2026

The most online generation is also the least protected: over half of Gen Z have already faced a cyberattack – Adaderana Biz English

New research from Kaspersky surveyed 7,200 respondents globally and found that Generation Z spends 57% of their time online, primarily using smartphones (67% identify them as their main device). While 59% of Gen Z feel confident in navigating the digital landscape, only 28% consider their digital skills advanced. Alarmingly, only 27% use antivirus software on their mobile devices, and over half (52%) have encountered attacks on their devices or accounts. Significant data, such as personal photographs (38%) and passwords (30%), is stored on smartphones, yet only 28% regularly back up important data. Kaspersky recommends integrating cybersecurity into daily routines and has introduced an interactive game, “Case 404,” to educate Gen Z on recognizing digital threats.

Winsage

July 23, 2026

Windows 11 – The system restore that also includes your files

Since June 23, Microsoft has been implementing a point-in-time restore feature on Windows 11, which is enabled by default for Home and Pro editions when the system drive exceeds 200 GB. This feature captures a complete snapshot of the machine approximately every 24 hours using the Volume Shadow Copy service, including system, applications, settings, and local files. Users can revert to a previous state in case of issues, but restoring from a snapshot older than 48 hours will erase all changes made since then, except for OneDrive data. The feature retains snapshots for up to 72 hours and reserves 2% of drive space, capped at 50 GB. If free space drops below 20 GB, older snapshots are deleted. Restoration occurs locally through WinRE, and users need a BitLocker recovery key if the drive is encrypted. After a restore, the feature pauses and requires user consent to resume. Snapshots from upgraded editions are not accessible, and only the Enterprise edition allows adjustments to snapshot settings. The feature can be disabled in system settings. It is not a backup solution, and users are advised to maintain separate backups for important files.