sensitive information Archives

AppWizard

October 3, 2026

Chrome for Android might soon force a biometric scan before filling your passwords

Google is experimenting with a new biometric verification feature for password autofill in Chrome on Android devices, which may require users to authenticate their identity through fingerprint scans, facial recognition, or other methods before accessing saved passwords. This initiative aims to enhance security by preventing unauthorized access to stored passwords, even if a device is unlocked. The feature has resurfaced in the latest Chrome Canary build after a previous attempt was shelved over a year ago. Users will need to authenticate themselves before Chrome releases a saved credential, similar to existing biometric methods for password autofill on Apple devices. The feature is currently in the experimental phase with no official release timeline announced.

AppWizard

October 2, 2026

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Google has enhanced its Android security framework by restricting access to the AccessibilityService API, allowing only verified applications classified as Accessibility Tools to use these features when Advanced Protection is activated. This decision addresses the misuse of the AccessibilityService API by malicious applications that facilitate malware distribution and financial fraud. The new measures include Intrusion Logging, USB Protection, disabling WebGPU, and a Failed Authentication Lock. Developers will be notified when Advanced Protection is enabled, and users can manually enable Intrusion Logging through the Advanced Protection settings page.

AppWizard

September 30, 2026

Google Photos could soon give you a fresh start with Ask Photos

Google Photos is introducing a “Delete all” button in its Remember List feature, allowing users to remove all previously shared entries at once. This feature, found in the top-right corner of the Remember List interface, will include a confirmation prompt before data is permanently erased. Currently, users can only delete individual entries. Additionally, a “Regenerate Image” option is being developed for the AI wardrobe tool. The introduction of these features aims to enhance user control and experience.

AppWizard

September 30, 2026

Sanctioned Russian firm identifies multiple security vulnerabilities in Android and Apple devices

Russian cybersecurity firm Positive Technologies has identified 11 security vulnerabilities affecting Android and Apple devices, with nine related to Apple and two to Android, classified as high severity. The Android vulnerabilities include one that allows attackers to exploit an NFC tag to execute an app without owner approval and another that lets installed apps modify network settings without additional permissions. Google has addressed these issues in its September 2026 security patches. For Apple, vulnerabilities include a macOS flaw that allows malicious apps to gain the highest system privileges and another that exposes sensitive information. Apple has released patches for these vulnerabilities, but specific OS versions affected have not been disclosed. Users are advised to ensure their devices have the latest security updates to mitigate risks.

Winsage

September 29, 2026

AMD & Perplexity bring local AI to Ryzen Windows PCs

AMD and Perplexity have launched Portable Computer, a software solution for Windows PCs with Ryzen AI Max Series processors, enabling local AI tasks and workflow management for Pro and Max subscribers. This allows users to run extensive AI models on their devices without relying on cloud processing, enhancing privacy and conserving Perplexity Computer credits. The software integrates local models with agent orchestration, scheduling, and security controls, and connects with popular workplace applications like Gmail and Slack. AMD's AI PCs, introduced in 2023, feature a neural processing unit that allows local AI operations alongside standard applications. This collaboration signifies a shift towards more AI processing on personal devices, aiming to automate tasks and improve user experience. Jack Huynh from AMD highlighted the transformation of PCs into intelligent partners, emphasizing the coexistence of local and cloud AI in their strategy.

AppWizard

September 28, 2026

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

The operators behind RatHat have created an advanced Android banking trojan that allows control of infected devices through a web console. Since April 2026, nearly 100 instances of this console have been identified, indicating a malware-as-a-service model. The console collects sensitive data from compromised phones, including text messages and passwords. It uses Google's Gemini AI to assess victims' bank balances, categorizing them into high-value and mid-value segments, but does not facilitate financial transactions. The malware has remained largely unchanged since late 2025, but the console has seen significant updates, leading to three new versions: BlackCat Remote Control Management, Panda Workshop V5, and V6. These versions serve as both control interfaces and build tools for creating and distributing malware. The latest version includes templates for deceptive download pages. RatHat infiltrates devices via text messages and online ads, requesting Accessibility access to read screens and simulate user interactions. This access allows the malware to activate wireless debugging and connect to the Android Debug Bridge (ADB), giving operators elevated privileges to execute commands. A Go program can be deployed to maintain control, even after the app is uninstalled. Cleafy has tracked console deployments through web code analysis, noting that many IP addresses originate from a Singapore-registered network. The initial console version allowed operators to choose AI providers, but the latest exclusively uses Gemini. RatHat also utilizes Gemini on infected devices to determine tap locations based on screen layouts. Cleafy has compiled indicators related to the consoles' command-and-control servers, download links, and malware samples, including specific domains, IP addresses, and MD5 hashes. The consoles often use web addresses starting with "admin." and inexpensive top-level domains. Security tools are advised to monitor processes running under the shell user on affected devices.

AppWizard

September 28, 2026

I turned off these 8 Google Messages features, and the app is so much better now

Google Messages has evolved to include features such as read receipts, Gemini integration, typing indicators, and chat bubbles. Some users find these enhancements beneficial, while others view them as intrusive. The author disabled several features for a more streamlined experience, leading to less clutter and fewer distractions. The features disabled include: 1. Gemini Button: A floating icon for AI-assisted messaging, which can be disabled in Message settings. 2. Profile Sharing: Allows visibility of name and photo to contacts, with customizable privacy settings available. 3. Outgoing Message Sounds: Can be turned off to create a quieter messaging environment. 4. Floating Chat Heads (Bubbles): Can be disabled to avoid distractions and protect sensitive information. 5. Follow-Up Reminders: Prompts to respond to message threads, which can be turned off in Message settings. 6. Read Receipts and Typing Indicators: Create pressure to respond quickly and can be disabled in Message settings. 7. Sensitive Content Warnings: Can misidentify benign images and can be turned off for a smoother experience. 8. Smart Reply and Suggested Actions: Offers quick responses that may not fit all conversations and can be disabled. These adjustments have improved the author's messaging experience, allowing for more personal and less stressful interactions.

Winsage

September 27, 2026

‘Decades-old’ bugs found affecting Windows, Android, macOS and Linux — but the OS makers don’t see it as a big deal

Researchers at Graz University of Technology discovered significant vulnerabilities in the file-notification subsystems of major operating systems: Linux, Windows, macOS, and Android. These flaws, present for decades, allow side-channel attacks that can infer sensitive information like keystrokes and visited websites. The vulnerabilities are rooted in components such as inotify (Linux, since 2005), FileObserver (Android, since 2008), ReadDirectoryChangesW (Windows, since 2000), and FSEvents (macOS, since 2007). Unprivileged users can exploit these subsystems to observe file events, potentially leading to keystroke timing attacks and credential theft. While Linux has implemented partial mitigations (CVE-2025-68788), Microsoft and Apple have acknowledged the issues but have not provided substantial patches.

AppWizard

September 26, 2026

Google Photos causes headaches: users say editing pictures makes the app ‘unresponsive’

Pixel users are experiencing issues with Google Photos, particularly with the app becoming unresponsive after editing images. Reports on Reddit indicate that actions such as cropping can lead to the app not responding to commands. Users have shared similar frustrations, and despite Google's engagement and suggested solutions, many have found them ineffective. The problems may be linked to a recent update that introduced new editing features, including Gemini Spark integration, "Moods," and a "redact pen." A quick resolution to these issues appears unlikely, and users may have to cope with the current challenges until a software update is released.

Tech Optimizer

September 26, 2026

What Is End Point Security And How Does It Work?

Endpoint security is a suite of technologies and processes designed to protect devices connected to a business network from cyber threats. It includes various devices such as laptops, smartphones, tablets, servers, and IoT devices. Endpoint security employs a multi-layered approach, scanning for malware, regulating applications, and monitoring device activity for unusual behavior. It is distinct from antivirus software, encompassing a broader range of protective measures, including firewalls, encryption, application controls, patch management, and Endpoint Detection and Response (EDR). The rise of remote work and the increasing number of devices create a larger attack surface, making endpoint security essential for preventing breaches and safeguarding business operations.