NewApp Digest
search bot

solutions

Your free VPN on Android often offers less protection than you might think
AppWizard
July 12, 2026

Your free VPN on Android often offers less protection than you might think

The MVPNalyzer Study conducted by researchers at the University of Michigan analyzed various VPN services, focusing on their performance metrics, data privacy practices, and effectiveness in bypassing geographical restrictions. The study revealed that some VPNs excel in speed while others prioritize security features, and not all services provide the same level of data protection, with certain logging practices raising concerns. The findings encourage users to closely examine VPN services regarding speed, privacy policies, and data management, while urging VPN providers to improve transparency and invest in user security technologies.
What Is Serverless PostgreSQL?
Tech Optimizer
July 12, 2026

What Is Serverless PostgreSQL?

Serverless PostgreSQL is a fully managed cloud database model that separates compute and storage, allowing them to scale independently and automatically based on demand. It eliminates the need for manual infrastructure provisioning and capacity planning, charging only for active usage. Unlike traditional PostgreSQL setups, which require continuous resource allocation and manual scaling, serverless PostgreSQL provisions resources on demand and can scale down to zero during idle periods. Serverless PostgreSQL integrates with serverless compute platforms, enabling analytical queries to access the same data within a unified architecture. Key differences between traditional and serverless PostgreSQL include manual versus automatic provisioning and scaling, fixed versus usage-based billing, and high versus reduced operational overhead. Lakebase architecture is an emerging model that combines transactional databases with lakehouse foundations, allowing operational and analytical workloads to coexist on a single platform. This architecture minimizes data duplication and simplifies access, enhancing data management and analysis. Serverless PostgreSQL operates on a cloud-native architecture that enhances efficiency by allowing compute and storage to scale autonomously. It features scale-to-zero behavior, where compute resources are suspended when inactive and reactivated upon new queries. Major providers include Databricks Lakebase, Amazon Aurora Serverless v2, and Neon, each offering varying capabilities and integrations. Pricing for serverless PostgreSQL typically includes charges for compute resources, storage, and data transfer, with costs fluctuating based on workload activity. Cold start latency is a performance consideration, as reactivating compute resources can introduce delays. Strategies to mitigate this include keeping resources partially active or selecting providers with minimal cold start impacts. Serverless PostgreSQL is well-suited for OLTP workloads, while lakebase architecture is better for AI development, variable workloads, and environments requiring rapid iteration. Setting up serverless PostgreSQL involves choosing a provider, creating a database instance, and configuring access settings. It can also be used alongside serverless compute platforms for analytics, further extending its capabilities.
This Windows feature has been eating users' RAM for years, Microsoft still hasn't fixed it
Winsage
July 11, 2026

This Windows feature has been eating users’ RAM for years, Microsoft still hasn’t fixed it

Memory leaks have been reported with the Phone Link feature in Windows 11, specifically the Cross Device Service, which is consuming excessive amounts of RAM. Users have noted that this service can use between 15 to 30GB of RAM, leading to significant system slowdowns and reduced internet speeds. Complaints about this issue have been ongoing since early 2023, with users often needing to manually intervene via Task Manager to restore system performance. The Cross Device Service is intended to facilitate features like clipboard sharing and notification syncing but appears to malfunction and enter a loop that increases memory usage. Microsoft has not officially acknowledged the problem, and while generic troubleshooting steps have been suggested, they may not resolve the issue for all users. Disabling the Phone Link feature has been proposed as a potential solution to mitigate memory consumption.
silver Android smartphone
Tech Optimizer
July 10, 2026

I tested Norton Antivirus on my PC – and it found a hidden Trojan in 15 minutes

Norton Antivirus is a well-regarded malware protection tool, consistently ranking among the top in the industry with a robust suite of security features. It has a user-friendly interface similar to Malwarebytes, but intrusive upselling tactics detract from usability. Norton offers comprehensive scanning tools, including Quick Scan, Full Scan, Smart Scan, Targeted Scan, and Startup Scan, which successfully detected a Trojan missed by other antivirus software. Its Scam Protection tools provide alerts for online scams and phishing attempts, and it includes unique features like Deepfake Protection and an AI assistant named Genie. According to MRG Effitas, Norton blocked 98% of malware samples with a 0.33% miss rate, achieving a Level 2 certification. Pricing includes several plans, with Norton 360 Deluxe offering the best value at an introductory price of .99 for the first year, rising to .99 annually. Despite its strengths, the intrusive upselling makes it less recommendable compared to Malwarebytes, although it has unique capabilities in threat detection and a comprehensive suite of security tools.
silver Android smartphone
Tech Optimizer
July 10, 2026

Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT

Cybercriminals are exploiting the VLC media player to install ValleyRAT, a remote access trojan, by embedding malware in a seemingly harmless file linked in phishing emails. The attack starts with an email that prompts the victim to download a ZIP archive containing a fake VLC executable and a malicious DLL named libvlc.dll. This method uses DLL sideloading to execute the malware under the guise of a legitimate application. Once executed, the malware establishes persistence by creating a registry entry and connects to a remote server to retrieve the final payload. ValleyRAT employs evasion tactics to avoid detection, including assessing system characteristics before executing harmful actions and using a fileless approach to deliver the payload directly into memory. Researchers have identified indicators of compromise, including specific SHA1 hashes and URLs associated with the malicious campaign.
Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is
Tech Optimizer
July 10, 2026

Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is

Advanced Persistent Threats (APTs) are a type of cyber threat characterized by long-term infiltration aimed at stealing sensitive data or surveilling communications, often orchestrated by well-funded groups. Unlike traditional malware, which seeks immediate disruption, APTs employ a methodical approach, spending weeks mapping out networks and identifying valuable credentials. Traditional antivirus solutions often fail to detect APTs because they rely on signature-based detection, which is ineffective against custom malware. APTs frequently use legitimate tools already present on systems, making detection challenging, and some forms of APTs operate directly from memory without writing to disk, evading traditional scans. To combat APTs, a multifaceted strategy is recommended, including behavioral detection, network monitoring for unusual patterns, and a mindset of skepticism towards all network activities.
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
Tech Optimizer
July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.
Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs
Winsage
July 10, 2026

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft has unveiled a destructive Windows backdoor named GigaWiper, which allows operators remote control over compromised systems to execute irreversible damage. GigaWiper originated from cyberattacks in October 2025 and is a composite of code from at least three malware families. It maintains its presence through a scheduled task disguised as “OneDrive Update,” executing at startup and every minute. GigaWiper can obliterate partition information, overwrite physical drives, and restart systems. It also mimics ransomware by encrypting files with the .candy extension, using randomly generated keys that are not stored, making recovery impossible. The malware has connections to the Crucio ransomware and resembles FlockWiper, with rewritten code in Go. GigaWiper features 20 command codes for various functions, including executing PowerShell instructions, managing processes, capturing screenshots, and remote access similar to VNC. It can remain on a system for surveillance until its destructive functions are activated. Microsoft Defender includes detection capabilities for GigaWiper, and users are advised to enable tamper protection and monitor for suspicious activities.
As phishing attacks evolve, demand is growing for sophisticated antivirus software
Tech Optimizer
July 9, 2026

As phishing attacks evolve, demand is growing for sophisticated antivirus software

ESET NOD32 Antivirus is designed for Windows users, providing protection against various digital threats such as viruses, spyware, rootkits, phishing attacks, and ransomware. It features a lightweight architecture that minimizes CPU and memory usage, allowing for seamless background operation and real-time threat detection without system sluggishness. The software employs machine learning, behavioral analysis, and cloud-based intelligence for advanced threat detection, enabling it to recognize both established and emerging cyber threats.
Search