Security Archives

Tech Optimizer

August 13, 2026

PSA: Don’t trust that Chrome update popup

Users of Chromium-based browsers, including Google Chrome, Brave, and Opera, are experiencing deceptive pop-ups that falsely claim a "Critical Update Required" or "Update available." These notifications are part of a scam designed to trick users into downloading malware disguised as software updates. Clicking on these prompts can lead to the download of harmful scripts, such as .vbs or .exe files, which traditional antivirus software often fails to detect. The issue is linked to compromised browser extensions that fetch malicious scripts from external servers. A specific extension, QuickLens – Search Screen with Google Lens, has been identified as a source of these pop-ups and has been removed from the Web Store. Other extensions, like “Enable Right Click & Copy Smart Unlock + OCR,” have also been implicated despite their popularity. Users are advised not to click on any links or run downloaded files and to check their browser settings for legitimate updates, as well as to audit and disable suspicious extensions.

AppWizard

August 13, 2026

4 Android Brands With The Worst Software Support

Android smartphones often have a trade-off between price and software support. Motorola typically offers two major Android updates and three years of security patches for flagship models, while mid-range devices receive only one Android update and two years of security patches. Motorola devices, like the Moto G line, are priced under 0 and provide solid battery life and camera performance. Xiaomi's software support varies, with models like the Xiaomi 14 and 15 receiving up to five years of patches starting in 2026, while entry-level models offer only two to three years of support. Imported Xiaomi devices, such as the Redmi Note or Poco X, feature AMOLED screens and rapid charging for under 0. TCL generally provides at least two years of security updates, but not all devices receive two Android version upgrades. TCL's Nxtpaper technology offers a unique display experience, and models like the TCL 60 XE Nxtpaper come with 8GB of RAM and a 120Hz screen. RedMagic promises two major Android updates and three years of security patches starting with the RedMagic 11 Pro. The RedMagic 11 Pro features high-end specifications, including the Snapdragon 8 Elite Gen 5 and a 7,500mAh battery, priced around 9. Brands with subpar software support are identified by the number of promised major Android updates and the duration of security patches, with comparisons made against industry standards set by manufacturers like Google and Samsung.

Winsage

August 13, 2026

Windows 10 users are getting locked out of new Microsoft 365 features in a bid to push for Windows 11

Microsoft will stop providing new features for Microsoft 365 to users on Windows 10 once stable version 2608 is released. After that, Windows 10 users will only receive security updates until October 10, 2028, which is the end of extended security support for Windows 10. Devices on Windows 10 will remain on version 2608 and will not receive new features, except for the OneDrive desktop app, which will continue to receive updates until October 2028 for users on Windows 10 version 22H2. The current stable version of Microsoft 365 is 2607, and version 2608 is in the release preview channel.

Winsage

August 13, 2026

Researcher threatened by Microsoft finds new critical bug in Windows | Researcher had accused Microsoft of mistreatment

A vulnerability in Microsoft Defender, named ShieldBreak, has been revealed by security researcher Nightmare Eclipse, allowing malicious actors to gain complete system-level access to a user's device. Microsoft has previously warned against public disclosure of vulnerabilities and suggested potential legal repercussions for researchers who do so outside its protocols. Users of Microsoft Defender are advised to remain vigilant regarding this vulnerability.

AppWizard

August 13, 2026

Is Aptoide safe? I tried Android’s first alternative app store on Google Play

Google has introduced Aptoide, a decentralized marketplace for Android applications, to its Play Store following an antitrust ruling that requires Google to allow certified third-party app stores. Aptoide is available for installation in the US through the Play Store, while users outside the US can sideload it from its website. The Aptoide Games app is available on the Play Store but offers a limited selection of games, while the full Aptoide app, which has a broader range of software, must be sideloaded. Aptoide's safety depends on the applications installed, and while it previously had a feature to indicate safe apps, this is no longer present in the app. Users should verify app developers to ensure safety, as Aptoide allows anyone to upload apps.

Tech Optimizer

August 13, 2026

Enforcing TLS and managing certificate rotation for RDS and Amazon Aurora PostgreSQL

When an Amazon RDS certificate expires and the application’s trust store is outdated, it can cause connection failures. AWS announces Certificate Authorities (CA) rotation events in advance and provides management tools, but a lack of proactive certificate lifecycle management can lead to unplanned downtime. Default configurations for RDS and Amazon Aurora allow both encrypted and unencrypted PostgreSQL connections, which can expose sensitive data if not properly configured. AWS manages the Certificate Authority infrastructure and provisions server certificates, while users are responsible for enforcing TLS usage and managing the rotation lifecycle. Amazon RDS employs a managed Certificate Authority hierarchy that issues server certificates for each database instance, supporting TLS 1.2 and TLS 1.3. The solution to enforce TLS includes server-side enforcement with the rds.force_ssl parameter, client-side verification with the sslmode=verify-full parameter, and automated lifecycle monitoring using Amazon EventBridge, AWS Lambda, and Amazon CloudWatch. Prerequisites for implementing this solution include an AWS account with an Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL instance, IAM permissions for relevant services, a compatible PostgreSQL client, familiarity with Amazon RDS parameter groups, and the openssl CLI. The rds.force_ssl parameter controls whether Amazon RDS rejects non-SSL connections, with defaults varying by PostgreSQL version.

AppWizard

August 13, 2026

Starship job simulation game Contact Protocol launches in spring 2027 for PS5, Xbox Series, Switch 2, and PC

Kinetic Publishing has partnered with Cold Zephyr Games to release the starship job simulation game Contact Protocol on PlayStation 5, Xbox Series, Switch 2, and PC via Steam, with a planned release in spring 2027. The game places players in the role of a security officer aboard the starship Pale Horse, requiring them to assess the intentions of approaching ships and make critical decisions that can have significant consequences. Key features include investigating incoming data, multitasking under pressure, and making choices that affect relationships and narratives. The game offers unique procedural encounters and a visually striking science-fiction world. A video and screenshots showcasing the game have been released.

Winsage

August 13, 2026

Microsoft’s August update fixes a Windows flaw that’s already being attacked

The upcoming Patch Tuesday is scheduled for September 8th, 2026, during which Microsoft will address over 200 vulnerabilities across Windows platforms, including Windows 10, Windows 11, and Windows Server. Windows 10 users in the Extended Security Updates (ESU) program will receive updates until October 2027. Among the vulnerabilities, CVE-2026-68820 allows attackers to gain elevated privileges through the Windows auxiliary function driver for Winsock. Microsoft has identified 18 vulnerabilities as critical, including CVE-2026-62878, an RCE vulnerability in the Windows DNS server that can lead to a buffer overflow and code execution without user interaction. Another critical issue is CVE-2026-62893, a UAF vulnerability in the TFTP server of Windows Deployment Services, which allows code injection through UDP port 69. Additionally, CVE-2026-62815, an RCE vulnerability in Quick UDP Internet Connections (QUIC), permits code execution without user interaction, while CVE-2026-59124, although high risk, is not classified as critical due to the HPC Pack not being enabled by default.

Winsage

August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.

Winsage

August 12, 2026

Windows 11 Gets Dynamic File Sizes in File Explorer, Low Latency Profile for Apps, and More

Microsoft's August update, KB5121003, includes several enhancements: - The File Explorer now displays file sizes in kilobytes (KB), megabytes (MB), or gigabytes (GB) dynamically, simplifying file management. - The Low Latency Profile is expanded to more applications, improving launch speeds for Microsoft apps like Edge and Outlook by up to 40%, and other system components by up to 70%. - Windows Search has been improved to better handle typos and incomplete queries, prioritizing relevant results and indexing files across the operating system. - The Start Menu now more effectively respects user preferences, ensuring consistent settings.